last executing test programs: 3m3.94521284s ago: executing program 3 (id=171): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8b20, &(0x7f0000000080)={'wlan1\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x41}}) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='cgroup\x00') exit(0x9c13) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') write$uinput_user_dev(r3, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REG(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000580)=ANY=[@ANYBLOB="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", @ANYRES16=r5, @ANYBLOB="010100000000ffdbdf251a00000004000d80"], 0x18}, 0x1, 0x0, 0x0, 0x40000}, 0x10) bpf$TOKEN_CREATE(0x24, &(0x7f00000004c0)={0x0, r2}, 0x8) openat$cgroup_subtree(r3, &(0x7f0000000500), 0x2, 0x0) r6 = syz_clone(0x20088000, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) exit(0xffffffffffffffe8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000004f4b000000000000000000180100002020702000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000fdffffff85000000a700000095"], &(0x7f00000008c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ptrace$setregset(0x4205, r6, 0x403, &(0x7f0000000000)={0x0}) r7 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000180), &(0x7f0000000340)=0xc) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@ipv6_newrule={0x30, 0x20, 0x1, 0x70bda7, 0x0, {0xa, 0x0, 0x0, 0x40}, [@FRA_DST={0x14, 0x1, @mcast2}]}, 0x30}, 0x1, 0x0, 0x0, 0x20048895}, 0x4008000) getgid() clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)={r8, r9+60000000}, 0x0) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000540)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x5f, &(0x7f0000000140)=ANY=[@ANYRESHEX=r0], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) sendmmsg$unix(r0, &(0x7f0000000680), 0x400000000000138, 0x20000000) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x20e006e, &(0x7f00000001c0)={[], [{@obj_type={'obj_type', 0x3d, 'nl80211\x00'}}]}, 0x3, 0x461, &(0x7f00000007c0)="$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") quotactl$Q_QUOTAON(0xffffffff80000200, &(0x7f0000000000)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000040)='./file0/file0\x00') 3m3.012878141s ago: executing program 3 (id=180): r0 = socket$packet(0x11, 0x2, 0x300) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r3, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="06fa03076844ba8cb89e14f04305", 0x0, 0xfffffffb, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 3m2.892799825s ago: executing program 3 (id=184): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = gettid() syz_emit_vhci(&(0x7f0000000500)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi={{0x22, 0x1d}, {0x2, [{@any, 0xe1, 0x9, "f1092e", 0x100, 0x7}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x4, 0xfb, "e625ba", 0x8000, 0x3}]}}}, 0x20) (async) mount(0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat2$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000000100)=[{&(0x7f0000000300)=""/247, 0xf7}], 0x1, &(0x7f00000002c0)=[{&(0x7f0000217f28)=""/228, 0xe4}], 0x1, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x20, 0xf, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"/275, @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x67a021c03d2005e9, 0x4, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r4, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x1, 0x600, 0x1}}, 0x20) (async) r5 = socket$inet_udp(0x2, 0x2, 0x0) (async, rerun: 32) read$FUSE(0xffffffffffffffff, &(0x7f00000023c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) (async, rerun: 32) unshare(0x2c020400) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x3, &(0x7f0000000640)=@framed, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000480)={r7, 0x20, &(0x7f0000000440)={0x0, 0x0, 0x0, &(0x7f00000003c0)=""/111, 0x6f}}, 0x10) quotactl_fd$Q_GETNEXTQUOTA(r1, 0xffffffff80000901, r6, &(0x7f0000004400)) (async) syz_emit_ethernet(0xbe, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaa23aaaaaaaaaabb0800450000b000000000041190780000000000000000fffc4e20009c907801000000000000007b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424dbcfd56f13754610500000000000000c7096ffeeb03000000000000649a3bfbc1d19cb307b3472ab9cdb042d2643fcbb2c5a57df67d074af6e8dafe09"], 0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2b}, 0x94) (async) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) (async) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r5, 0x89f8, &(0x7f0000000280)={'erspan0\x00', &(0x7f0000000200)={'erspan0\x00', r10, 0x40, 0x8, 0x7c6, 0x0, {{0xc, 0x4, 0x0, 0x27, 0x30, 0x67, 0x0, 0x40, 0x29, 0x0, @local, @multicast2, {[@timestamp_prespec={0x44, 0x14, 0x2c, 0x3, 0x8, [{@local, 0x7}, {@multicast1, 0xbaa6}]}, @lsrr={0x83, 0x7, 0xbf, [@multicast2]}]}}}}}) (async) sendmsg$nl_route(r9, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="340000001c0001fc28bd7000fcdbdf2507000000", @ANYRES32=r10, @ANYBLOB="8000260b0a0002000180c200000c00000c000e"], 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x20040010) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) (async) syz_emit_ethernet(0x32, &(0x7f0000000000)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x10, 0x24, 0x0, 0x0, 0x0, 0x73, 0x0, @private=0x2, @remote}, {0x0, 0x0, 0x10, 0x0, @gue={{0x2, 0x0, 0x0, 0x1}}}}}}}, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000900)=[@in6={0xa, 0x0, 0x0, @loopback={0x700}}], 0x1c) 3m2.849810881s ago: executing program 3 (id=185): syz_mount_image$ext4(&(0x7f0000000bc0)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x4000, &(0x7f0000000040), 0x2, 0xbdb, &(0x7f0000002380)="$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") renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x4) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000c00)={&(0x7f0000000b40)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x7, [@ptr={0x0, 0x0, 0x0, 0x2, 0x2}, @func={0xa, 0x0, 0x0, 0xc, 0x5}]}, {0x0, [0x0, 0x0, 0x0, 0x61, 0x61]}}, 0x0, 0x37}, 0x28) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000300)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) syz_mount_image$fuse(&(0x7f00000001c0), &(0x7f0000000380)='./bus\x00', 0x322020, &(0x7f0000000140)=ANY=[], 0xfe, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x42, 0x0) 3m2.706862633s ago: executing program 3 (id=188): getpid() r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000340)={{{@in=@broadcast, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x800000000000, 0x4, 0x3}, {0x0, 0x4, 0x0, 0xa78a}, 0xfffffffe, 0x0, 0x1}, {{@in=@private, 0x0, 0x33}, 0x0, @in=@rand_addr=0x64010101, 0x0, 0x3, 0x1, 0x7}}, 0xe8) sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000100)=ANY=[@ANYBLOB="020602000200000002"], 0x10}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 3m2.205001787s ago: executing program 3 (id=192): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x8e7, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x0, 0x1}, 0xe) (fail_nth: 2) 3m2.146979772s ago: executing program 32 (id=192): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x8e7, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x0, 0x1}, 0xe) (fail_nth: 2) 1m7.946452163s ago: executing program 2 (id=1233): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x2000400c) pipe2(&(0x7f0000001440)={0xffffffffffffffff}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x8, 0x1, 0x80, r0, 0x1, '\x00', 0x0, r1, 0x5, 0x5, 0x1}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r0, 0xffffffffffffffff}, &(0x7f0000000200), &(0x7f00000003c0)='%pK \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000800)={r2, 0xffffffffffffffff}, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0xf, &(0x7f0000000400)=ANY=[@ANYRESHEX, @ANYRES32=r3, @ANYRES8=r2], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000000)=0x0) fcntl$setown(r0, 0x8, r5) r6 = openat(0xffffffffffffff9c, 0x0, 0x18b341, 0x84) ioctl$FS_IOC_RESVSP(r6, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000003}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r4, 0x0, 0x22, 0x48000000, &(0x7f0000000300)="40f0538ef047b21fb60068305500", 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1m7.795794018s ago: executing program 2 (id=1235): r0 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r0, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x10) setns(0xc9, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/llc/socket\x00') read(r1, &(0x7f0000000640)=""/4096, 0x1000) (fail_nth: 4) socketpair$unix(0x1, 0x5, 0x0, 0x0) 1m7.69234412s ago: executing program 2 (id=1237): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000080)=@req={0x8000, 0x6, 0x300, 0xfc}, 0x10) mmap(&(0x7f0000000000/0x30000)=nil, 0x30000, 0x3, 0x11, r0, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)={0x14, 0x0, 0x200, 0x70bd25, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4001018}, 0x20000004) pipe2(&(0x7f00000000c0)={0x0, 0x0}, 0x80080) write(r1, &(0x7f0000000210)="01", 0x1) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="040e040e4220"], 0x7) 1m7.304427156s ago: executing program 2 (id=1243): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x2a0471a, &(0x7f0000000280)={[{@max_batch_time={'max_batch_time', 0x3d, 0x3}}]}, 0x82, 0x497, &(0x7f0000000d00)="$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") r0 = socket$inet6(0xa, 0x2, 0x3a) sendmmsg$inet6(r0, &(0x7f0000000340)=[{{&(0x7f0000000380)={0xa, 0x0, 0x0, @mcast2={0xff, 0x5, '\x00', 0x0}}, 0x1c, &(0x7f0000000000)=[{&(0x7f0000000100)="a0002883781ecc0e", 0x4008}], 0x6}}], 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='hugetlbfs\x00', 0x16, 0x0) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x84022, &(0x7f0000000140)=ANY=[@ANYBLOB='size=A']) openat$incfs(0xffffffffffffff9c, &(0x7f0000000080)='.pending_reads\x00', 0x82002, 0x74) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143041, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) lseek(r2, 0x851, 0x1) ioctl$EXT4_IOC_MOVE_EXT(r1, 0x40305829, &(0x7f00000000c0)={0x17c04, 0xffffffffffffffff, 0x7fff, 0x3, 0xc, 0x6}) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x13f, 0x8}}, 0x20) 1m7.188975284s ago: executing program 2 (id=1244): r0 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r0, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x10) connect$llc(r0, &(0x7f0000000240)={0x1a, 0x20, 0xfc, 0x9, 0x2, 0x80, @random='\x00\x00\x00\x00\x00\a'}, 0x10) r1 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r1, &(0x7f0000000000)={0x1a, 0xff80, 0x0, 0x0, 0x81, 0x42}, 0x10) 1m6.983457198s ago: executing program 2 (id=1246): r0 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r0, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x10) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x40001, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x57) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x702, 0x36, 0x0, &(0x7f0000001080)="e460334470b8d480eb00c15286dd08d8829f5fb5e2eb3b56fddaa2b27da9d81c20bfde92a3cd98f29389530882794568195b29c77653", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3982, 0x0) sendfile(r1, r3, 0x0, 0x40000000000b946) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x2, 0x90) write$cgroup_int(r4, &(0x7f00000003c0)=0x500, 0x5) ioctl$BLKZEROOUT(r1, 0x127f, &(0x7f0000000240)={0xf400, 0x1000000}) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) setresuid(0x0, 0xee00, 0xee00) ioctl$IOC_PR_PREEMPT_ABORT(r5, 0x401870cc, 0x0) connect$llc(r0, &(0x7f0000000240)={0x1a, 0x20, 0xfc, 0x9, 0x2, 0x80, @random='\x00\x00\x00\x00\x00\a'}, 0x10) r6 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r6, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x81, 0x42}, 0x10) 1m6.754674991s ago: executing program 33 (id=1246): r0 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r0, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x10) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x40001, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB="b702000007000000bfa30000000000000703000000feffff7a0af0ff1100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010001011404000011000000b7030000000000006a0a00fe000000008500000032000000b700000001000000950000000000000075cdc4b57b0c65752a3ad50000007ddd0000cb450063dedba767ade51f7f1f66acd19100002000000000000000ff7f0000b52f17cee19d0001000000000000000000cb04fcbb4e4d0b9bafe3ba431351a58a885ba9918d37b056b9bbd11b6b9f6cf7db6d574620260000000000008062d77e85cef4a2ab938f65aac33c4d620de2c9b7dc10d7d313f9f57606b83b994fc4051ade12f41deff6df6a936b4ec3827c739bb39aad16cc75fe369258673b5df11cc2afb53611cc32a790bc0b80e80eae8f5e64be2c9d2d29db3d36dd0cf8f79a015c7bd3f15aa6aadbeab2a01685108e61aa00000000000000000000000000c67c6c6a06e828e5216f601b19db1af1b5d356d0f062137d866d11be4ba3f0151fdbbd4e97d62ecc645e143a60f10800000000000000826151e3b42bcae95239ef5ca2a730a00c87c493db0300e63fda97a296820000000001000000eecc952a3fd2c46f3c1cde71a19d1a2982492a210e00d2bfea3b8d188df2eff8d56aaae7d32a2e180022537395019f02ec4b85f6aad7faca088de9b26797a8446b16c28d85f225992dbdd5bb01ba51508951c7a7d6ca0916c3a12912715649c2b1c7192a4251b59d378d3f00000000000000665c8b7e89eddfc3783f6c9129a7c5f8ee5f50579e2f638f7eb12f63be72a3d81ab324d6e417b1c2cbfdcada0a16e31790e26cf19588a7e0496ee2782224cf30f810da86cf1a3204f4c9404f5d7321a4fefc4d1c9139ca4b65b99909950000006b42077ca60fdecb2717e21f8f187b1866108b6e8c71e2603217606637ece1fa89917e131f4034a8383e99c3568fd04201b37cd92ca6ebf94a2d8310f7032775cfd75652f87b039d5430b3c6643e9146d2478ce31344b554aca7670000000000000010c65608fda6ed5d08e7a796042aa127d874105787d0347aa37801faff5b9050803a19ff6205aa5c263e407a2f7de56f7a0000e094fa4e3f05528caab5a430c08dd810bc97204b767dd969721a26aa740000000000bc433fe2d0a6ef2a8a91cd3cb305aa80dadef8b0caca780000000000000000863e21db415a222bb1a7ab94bfe4a74157d794f9d0430c2c0eb563350559829865a3dd08fb31bd0801e09aa3ee45e61a56fc83076451cff7632e49a41eadb5044a0d5f73d6932161ae5e9ce218a35cd8e7b747887b1a74798982d0b492c3f0ff53189d80733eb04f8124877b648ff438f7d66c7efcc09a8f3330b6c22d14e80db8e5608bdeab9388b758a15f4ce70390c214bc6838798f5b9b0b500d4e8b5174f329b8501c6feb7a6982bcea74a0f2ced7fa2059234a8d10b7f0597151d5c9067d57d85f4ae933eaf5174ba122f3f702ef8695578d3c08562c9fc185f0f65d11b4c58ae52500cbe99cde3758a5cbe6093dd328ac820e2de309d25a324647aadffcecf0f3bbaeda7af4436d9ffbce1b240a2f5e346eba8812e6329e01b087bde7da4a6448f478102e90c8134f531de08d4cf4f6f35b15a202544c0ced0c1715fd3a90099f785a13a2412bedba2981dd22bd9d736c00000000000000000000000000000000eb6fec8d7d2f77f4d470a9caa5b1bfc00cd1d40830ac35f229f8ffe1c02a63d3c2d9"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x57) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x702, 0x36, 0x0, &(0x7f0000001080)="e460334470b8d480eb00c15286dd08d8829f5fb5e2eb3b56fddaa2b27da9d81c20bfde92a3cd98f29389530882794568195b29c77653", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3982, 0x0) sendfile(r1, r3, 0x0, 0x40000000000b946) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x2, 0x90) write$cgroup_int(r4, &(0x7f00000003c0)=0x500, 0x5) ioctl$BLKZEROOUT(r1, 0x127f, &(0x7f0000000240)={0xf400, 0x1000000}) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) setresuid(0x0, 0xee00, 0xee00) ioctl$IOC_PR_PREEMPT_ABORT(r5, 0x401870cc, 0x0) connect$llc(r0, &(0x7f0000000240)={0x1a, 0x20, 0xfc, 0x9, 0x2, 0x80, @random='\x00\x00\x00\x00\x00\a'}, 0x10) r6 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r6, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x81, 0x42}, 0x10) 1m2.900975639s ago: executing program 0 (id=1271): exit(0x3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xfc}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$netlink(0x10, 0x3, 0x15) writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000180)="39000000150003470fbb65e1c3e4ffff060060001600000056000000250000001900b3c0b6d20300070a0000000084db26b9e4e20000000000", 0x39}], 0x1) 1m1.944543448s ago: executing program 0 (id=1280): ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file0\x00'}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000140)={0x48, 0x5, 0x0, 0x0, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r0, 0xc018937a, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r1, {0x6}}, './file0\x00'}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYRES8=r2, @ANYRES32=0x0, @ANYRES64=r2], 0x4c}, 0x1, 0x0, 0x0, 0x4040080}, 0x41) 1m1.776638062s ago: executing program 0 (id=1282): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r0, 0x1, 0x21, &(0x7f0000000180)=0x80000004, 0x4) bind$inet6(r0, &(0x7f0000000200)={0xa, 0x4e20, 0x440007, @empty, 0xffff8000}, 0x1c) syz_emit_ethernet(0x86, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1a}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x6, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x2, 0x1, "5680a5441a99f362cd24e0a1ac229150073300", "467f517bd818d5a4a8d26ae61b4cbf13", {"31ffc21d2e9bfb1eb3c03976ed837b6f", "876605ac29dcb96a8901e0711afb3db3"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x60ff78ce1cb3c070}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000007300)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000006200)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x5c, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) syz_emit_ethernet(0x3e, &(0x7f0000001640)={@local, @multicast, @void, {@ipv6={0x86dd, @udp={0xa, 0x6, "1b8100", 0x8, 0x11, 0x0, @empty, @mcast2, {[], {0x4e25, 0x4e20, 0x8}}}}}}, 0x0) 1m1.134926915s ago: executing program 0 (id=1288): syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x1208002, &(0x7f0000000100)={[{@grpquota}, {@delalloc}, {@nobarrier}, {@debug}, {@dioread_nolock}, {}, {@nomblk_io_submit}, {@noauto_da_alloc}]}, 0x1, 0x5d8, &(0x7f00000005c0)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000005a00)='./gadget\x00', 0x930aa59063c1a109) mount(0x0, &(0x7f0000000100)='./gadget\x00', &(0x7f0000000200)='gadgetfs\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_MMAP_OFFSETS(r0, 0x11b, 0x1, 0x0, &(0x7f0000000040)=0x60) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./gadget/dummy_udc\x00', 0x2, 0x0) write(r1, &(0x7f0000005c40)="00000000090209000101004001120100020000004000800000000000000001", 0x1f) socket(0x2b, 0x80801, 0x1) setns(0xc9, 0x0) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x14, 0x601, 0x0, 0x0, {0x2b, 0xfa}}, 0x14}}, 0x0) syz_clone(0x2008400, 0x0, 0x0, 0x0, 0x0, 0x0) capset(&(0x7f0000000000)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200003, 0x0, 0x400, 0x7, 0x3}) r3 = syz_open_procfs(0x0, &(0x7f0000000b40)='task\x00') fchdir(r3) mount(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000080)='proc\x00', 0x189, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000030000000000000000000e9f850000002e00000085000000a000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x0, 0xe, 0x0, &(0x7f0000000300)="e02742e8680d85ff978276fcf294", 0x0, 0x4002, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) syz_open_procfs(r5, &(0x7f00000000c0)='fdinfo/4\x00') quotactl$Q_SETQUOTA(0xffffffff80000801, &(0x7f00000000c0)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000100)={0x2, 0x0, 0x1000000000000ca, 0xfffffffffffffffc, 0x0, 0xfff, 0x4, 0xfffffffffffffffc, 0x5166}) 1m0.488838633s ago: executing program 0 (id=1294): write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd63"], 0xfdef) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = mq_open(0x0, 0x42, 0x0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) io_uring_setup(0x25f3, &(0x7f0000000340)={0x0, 0x0, 0x2, 0x0, 0x257}) unshare(0x2040400) r1 = epoll_create1(0x0) r2 = fcntl$dupfd(r1, 0x2, 0xffffffffffffffff) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000040)='GPL\x00'}, 0x80) r4 = epoll_create1(0x0) r5 = fcntl$dupfd(r4, 0x2, 0xffffffffffffffff) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000140)={@cgroup=r5, r3, 0x11, 0x0, r5}, 0x14) bpf$BPF_PROG_ATTACH(0x9, &(0x7f0000000140)={@cgroup=r2, r3, 0x11, 0x0, r2}, 0x11) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40488c0}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) r7 = syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000300)={{}, 0x2c, {'rootmode', 0x3d, 0xa000}, 0x2c, {'user_id', 0x3d, 0xee01}, 0x2c, {}, 0x2c, {[{@allow_other}, {@default_permissions}, {@default_permissions}], [{@subj_user={'subj_user', 0x3d, 'syzkaller\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}]}}, 0x0, 0x0, &(0x7f0000000400)="1795bfbf14968962c037958332a09493d32607662e939b3843dd15c62bd3ea75c264a15a67f612520eef3e2b02435ba33832f584fcf307bc62001bd1c58ff6ae1a7a22d4a342e4585d829e56e3a08f9181c204eb3506c6d0fe4acfe845f75524a317e3479207499f5ce6eae68e8e43c3d3fe9ea36e4423cd5fd7bf1de60ac1c65dda7506f1318fcea1ffdefb9543cfca8d640d5186b0b20c1ee2f0b1668d34b7639a6f00f2ef10f32404660b8ccf8b841d3e134af21f2cba6874e224edad20c29d758a8d58") openat$incfs(r7, &(0x7f0000000500)='.log\x00', 0x400, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1m0.080946341s ago: executing program 0 (id=1297): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000080)=@req={0x8000, 0x6, 0x300, 0xfc}, 0x10) mmap(&(0x7f0000000000/0x30000)=nil, 0x30000, 0x3, 0x11, r0, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)={0x14, 0x0, 0x1, 0x70bd2c, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4001018}, 0x20000004) pipe2(&(0x7f00000000c0)={0x0, 0x0}, 0x0) write(r2, &(0x7f0000000210)="01", 0x1) read(r1, &(0x7f0000000000)=""/8, 0x8) sendto$packet(r0, 0x0, 0x0, 0x2000000, &(0x7f0000000100)={0x11, 0x0, 0x1, 0x1, 0x0, 0x0}, 0x14) 59.906430219s ago: executing program 34 (id=1297): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000080)=@req={0x8000, 0x6, 0x300, 0xfc}, 0x10) mmap(&(0x7f0000000000/0x30000)=nil, 0x30000, 0x3, 0x11, r0, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)={0x14, 0x0, 0x1, 0x70bd2c, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4001018}, 0x20000004) pipe2(&(0x7f00000000c0)={0x0, 0x0}, 0x0) write(r2, &(0x7f0000000210)="01", 0x1) read(r1, &(0x7f0000000000)=""/8, 0x8) sendto$packet(r0, 0x0, 0x0, 0x2000000, &(0x7f0000000100)={0x11, 0x0, 0x1, 0x1, 0x0, 0x0}, 0x14) 34.53297111s ago: executing program 6 (id=1512): write(0xffffffffffffffff, &(0x7f0000000210), 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="040e04"], 0x7) 34.464411401s ago: executing program 6 (id=1516): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000000380)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r2, 0x2) shutdown(r1, 0x0) connect$unix(r1, &(0x7f0000fce000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) r3 = accept(r2, 0x0, 0x0) sendto$inet6(r3, &(0x7f0000000a40)="1c", 0x1, 0x4c090, 0x0, 0x0) r4 = gettid() ptrace$poke(0x1, r4, &(0x7f0000000080), 0x80) 34.367146886s ago: executing program 6 (id=1520): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) syz_open_dev$dvb_dvr(&(0x7f0000000240), 0x0, 0x80101) r2 = dup(r0) read$FUSE(r2, &(0x7f0000000880)={0x2020}, 0x2020) 33.510263611s ago: executing program 6 (id=1525): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="0a00000007000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r1 = socket$inet_tcp(0x2, 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x40, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x139) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1d7) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x40, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000080)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x399446c, 0x0, 0x1, 0x0, &(0x7f0000000080)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) renameat2(r2, &(0x7f0000000680)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r2, &(0x7f00000002c0)='./file0\x00', 0x2) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) openat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x12002, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) syz_mount_image$ext4(&(0x7f0000000500)='ext4\x00', &(0x7f00000006c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x10040, &(0x7f0000000100)={[{@grpid}, {@debug}]}, 0xfd, 0x269, &(0x7f0000001f80)="$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") symlinkat(&(0x7f00000000c0)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000003c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x990080, 0x0, 0x0, 0x0, &(0x7f00000003c0)) symlinkat(&(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r4 = syz_mount_image$vfat(&(0x7f0000000580), &(0x7f0000000e80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="696f636861727365743d63703836322c757466383d302c696f636861727365743d63703934392c757466383d312c696f636861727365743d63703835372c757466383d302c757466383d302c73686f72876e616d653d6d697865642c756e695f786c6174653d302c6e6f6e756d7461696c3d302c636f6465706167653d3837342c696f636861727365743d63703836312c73686f72746e616d653d6c6f7765722c757466383d312c726f6469722c757466383d302c757466383d302c00c3e37a4e033e6d607e218c01b5b7ac5a5f7d1037c9e796494a0b2d1d97ae34b53df360c4d254040c"], 0xfd, 0x2b2, &(0x7f00000005c0)="$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") mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup.cpu/syz1\x00', 0x1ff) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000002b40)={0x0, 0x0, "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", "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"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000003b40)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000000b40)={0x3, [{}, {}, {}, {}, {r6}, {}, {r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r6}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r6}], 0x3e, "7f8ffdd6fe1f6a"}) ioctl$BTRFS_IOC_INO_LOOKUP(r1, 0xd0009412, &(0x7f0000001b40)={r9, 0x3}) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r10, r3, 0x25, 0x0, @val=@perf_event={0x200}}, 0x18) syz_emit_ethernet(0xfdef, &(0x7f00000001c0)=ANY=[], 0x0) 32.776283855s ago: executing program 6 (id=1530): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000280)={0xa, 0x4e22, 0x9, @loopback, 0x6}, 0x1c) r1 = epoll_create1(0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSETS(r2, 0xc0384707, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x400000, 0x14, "3eccd8000000000000000010000000040100"}) close_range(r1, 0xffffffffffffffff, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000040)=0x40, 0x4) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x56202329, @empty, 0x4000005}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003380)=[{{0x0, 0x0, &(0x7f00000031c0)=[{&(0x7f0000002140)="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", 0x241}], 0x1}}], 0x1, 0x4000801) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000020c0)={&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000000fc0)=""/4096, 0x1000, 0x1, 0x0}, &(0x7f0000002100)=0x40) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCDELRT(r3, 0x890c, &(0x7f0000000080)={0x0, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0xd}}, {0x2, 0x4e22, @multicast1}, {0x2, 0x4e20, @broadcast}, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0xff, 0x8, 0x401}) 32.178857622s ago: executing program 6 (id=1539): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}], 0x80}, 0x80) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, 0x0, &(0x7f0000000180)={0x0, 0x9436, 0x0, 0x1, 0x1f4}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x800, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x40040001, 0x334}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) 31.693584235s ago: executing program 35 (id=1539): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}], 0x80}, 0x80) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, 0x0, &(0x7f0000000180)={0x0, 0x9436, 0x0, 0x1, 0x1f4}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x800, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x40040001, 0x334}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) 8.312825978s ago: executing program 5 (id=1774): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000100)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x117) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000000100), 0x24, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) syz_mount_image$fuse(0x0, &(0x7f0000000100)='./bus\x00', 0x20020, 0x0, 0x1, 0x0, 0x0) pipe2(&(0x7f0000000440)={0xffffffffffffffff}, 0x0) splice(r3, &(0x7f0000000200)=0x100000001, r3, 0x0, 0xa, 0x4) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$FBIOPUTCMAP(r4, 0x4605, 0x0) removexattr(&(0x7f00000002c0)='./file0/file1\x00', &(0x7f0000000300)=@known='system.posix_acl_access\x00') 7.392766319s ago: executing program 5 (id=1785): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000003"], 0x48) close(r0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0xba7e}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = syz_open_dev$media(&(0x7f00000012c0), 0x66, 0x180502) ioctl$MEDIA_IOC_G_TOPOLOGY(r3, 0xc0487c04, &(0x7f0000002f00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000180)=[{}, {0x0, 0x80000000, 0x0, {0x0}}, {0x0, 0x80000000, 0x0, {0x0}}, {}], 0x0, 0x0, 0x0}) ioctl$MEDIA_IOC_SETUP_LINK(r3, 0xc0347c03, &(0x7f00000009c0)={{0x80000000, r5, 0x4, [0xc, 0x1]}, {r4, r6, 0x3, [0x101, 0x7fffffff]}, 0x0, [0x3, 0x4]}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB='P\x00\x00', @ANYRES16, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e0000000024000280040001001c0003800c00018008000100000000000c0001"], 0x50}}, 0x0) r9 = socket(0x10, 0x3, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r11) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES32=r12, @ANYBLOB], 0x3c}}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=@newqdisc={0x40, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r12, {}, {0xffff, 0xffff}, {0x6}}, [@TCA_RATE={0x6, 0x5, {0x1, 0x4}}, @qdisc_kind_options=@q_pfifo={{0xa}, {0x8}}]}, 0x40}}, 0x10) sendmsg$nl_route_sched(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newtfilter={0x68, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r12, {}, {}, {0xfff1, 0x4}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x38, 0x2, [@TCA_CGROUP_ACT={0x34}]}}]}, 0x68}}, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r0, 0xffffffffffffffff}, 0x4) r14 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r14], 0x0, 0x0, 0x0, 0x0, 0x0, 0x59, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000740)={{0x1, 0x1, 0x18, r0, {0x2}}, './file0\x00'}) r16 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000007c0)=@o_path={&(0x7f0000000780)='./file0\x00', 0x0, 0x10, r1}, 0x18) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000a00)=@bpf_ext={0x1c, 0x29, &(0x7f00000004c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0xfff}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xb941}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}, @initr0={0x18, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x9c}, @map_val={0x18, 0x5, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x1}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffff1}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r13}}, @map_val={0x18, 0x5, 0x2, 0x0, r14, 0x0, 0x0, 0x0, 0x6}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}]}, &(0x7f0000000640)='GPL\x00', 0x6921, 0x84, &(0x7f0000000680)=""/132, 0x40f00, 0x1b, '\x00', r7, 0x0, r15, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x63b3, 0xffffffffffffffff, 0x2, &(0x7f00000008c0)=[r1, r16], &(0x7f0000000900)=[{0x1, 0x3, 0x6}, {0x2, 0x3, 0x6, 0x2}], 0x10, 0x4}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r8, r7, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x2e, &(0x7f0000001cc0)={@multicast, @remote, @val={@void, {0x8100, 0x6, 0x1, 0x1}}, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @broadcast, @rand_addr=0x64010101, @local, @private=0xa010100}}}}, 0x0) 7.331985321s ago: executing program 1 (id=1786): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000000)="13000000010203", 0x7}, {&(0x7f0000000140)="e8", 0x2b}], 0x2) r2 = memfd_create(&(0x7f0000000700)='y\x105\xfb\xf7u\x83%\x1f\xe09@:r\xc2\xb9x0\x90P\x03\x00\x00\x00\x00\x00\x00\x00\xfe,\x1c\xf1\xdd\xcf]\xac\xbc\t\xbb\xfc\xa4j\x9f\xceX\x8f5=\xaa\xd5\xe9n\xab s\xa5\x00\x8d\tV\t\x91\x18\x06O\xb0=D\xda\xb6F\x1a\xc82\x8b\xc0l\xd0\x89d\xe6\xb7\xd8\x97\xb8\xde\xa3\x89\xc2%/u\x17\xdaM\x8d\x01Lh\x1e^\x9ej\x1c\xc5\xf0\xf6\x92\x05\x9aH\x00\'\xd4\x94d_\v\xfc\xad\x0f\xa8\xc5\xad\x00\xc2\x12\xff\xff\xff\xff\xff\xff\x00\x00\x00\x00\nj\x8c\xef\x90\xc0Z\xfa\x1a\xb3\xf0wVq\xe9d\xf8N\x80\xd1g\xd8e\xc8\x16\xad1\x02\xab\xce3\xb2\xb0\xd1\x11\xf0\xc3Gj+kV$\x80\x8aJ$\x81\xc0\x16\xf5\x9cz\x10\x97\xdb\x12H\xee/\xe3sY\x02D;L~\xd0\xb44\x01*\xfb\xa4 \xb2b\x90H$\xb2\xad\xbf\x8aM\xb6\x81\x81^\x02\xa0\xa7t\xfbHb\xa5=\xdd+$\xc06J\xb4\xf0\xab\x85Xz\x9f\xb2D$\xbe\xd9\x7f-\r\x9aj9r\n_\x11\xd4\x19\xb0\xa0G\xb7\x94\xf7\xfd~\xe9\xb6G\xbfE\xbb\x15\x15\xa6\xca2\xd0\xd3\x8c\xf7nO\xf9\xa8\xfd\x8a\xd2\xb2\xab\xff\xe4\xb0;\xd9\xa8\f\x03R\xbd%\x9fF\xee\x05\x06.3(QF?\f\x05\xa4uY\xee\xab\x8a\xeb~\xed\xcb0\xb7\xe7\xe6?8g\x8aN\xda\x8f\x9d\xde\x1eNaS\x8fLk\xf1\x965N\x18\x8c\xb9=5\x991\xae\x89N\x13\xd1\xf7\xf0\x13\xb2\xaeS\xa1\x97\x18j\xea\x9f\xde\xb6\xd4\xdc\xe6*\x9c\xfdV\x82\x05', 0x2) r3 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$l2tp6(0xa, 0x2, 0x73) bind$netlink(r0, &(0x7f00000003c0)={0x10, 0x0, 0x25dfdbff, 0x80}, 0xc) getpeername$l2tp6(r6, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r5, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000800)={0xa0000006}) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r5, &(0x7f0000000240)) epoll_pwait(r3, &(0x7f00000002c0)=[{}], 0x1, 0xb5, 0x0, 0x0) ftruncate(r2, 0xffff) fcntl$addseals(r2, 0x409, 0x3) close(0x3) ioctl$UDMABUF_CREATE(r1, 0x40187542, &(0x7f0000000000)={r2, 0x1, 0x0, 0x1000000}) r7 = accept4$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @empty}, &(0x7f0000000100)=0x10, 0x80000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0x4, 0x7, 0x50000}]}) syz_clone(0xb44040, 0x0, 0x0, 0x0, 0x0, 0x0) setitimer(0x1, &(0x7f0000000080)={{0x77359400}, {0x0, 0xea60}}, 0x0) ioctl$sock_inet_SIOCRTMSG(r7, 0x890d, &(0x7f0000000280)={0x0, {0x2, 0x4e20, @local}, {0x2, 0x4e20, @multicast2}, {0x2, 0x4e22, @multicast2}, 0x4, 0x0, 0x0, 0x0, 0xfff8, &(0x7f0000000180)='vlan0\x00', 0x100000000, 0x0, 0x4}) r8 = syz_io_uring_setup(0x10001cfd, &(0x7f0000000300)={0x0, 0x0, 0x10000, 0x1, 0x91}, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r9, r10, r11, &(0x7f00000001c0)=@IORING_OP_READ_FIXED={0x4, 0x8, 0x2000, @fd=r3, 0x7, &(0x7f0000000c00)=[{&(0x7f0000000400)=""/196, 0xc4}, {&(0x7f0000000500)=""/131, 0x83}, {&(0x7f00000005c0)=""/165, 0xa5}, {&(0x7f0000000680)=""/95, 0x5f}, {&(0x7f0000000d80)=""/259, 0x103}, {&(0x7f00000009c0)=""/246, 0xf6}, {&(0x7f0000000ac0)=""/63, 0x3f}, {&(0x7f0000000b00)=""/24, 0x18}, {&(0x7f0000000b40)=""/140, 0x8c}], 0x9, 0x10, 0x1, {0x1, 0x0, 0x7, '\x00', &(0x7f0000000d40)={0xca2, 0x21a0, 0x7f, &(0x7f0000000cc0)="e6fdb68754059425559d8975a48faa516ef92f6903eada9b3d5f051f376c9e5aca7ca70f2abe5290e0150118e45d50e271e8fb7e56f1c23049d9205fae21bd7968adc1044de20c2b18a5be6f0afb8a89b4b9a7da50e7c275345effcabdd291678e3d87275db960aae66933a123fd2b69f55c790c402abcd53e1bcbc9b87db0", 0x6}, 0xffffffff80000000}}) io_uring_enter(r8, 0x28e6, 0xffffffed, 0x5b, 0x0, 0x0) 7.2408742s ago: executing program 5 (id=1787): r0 = socket(0x10, 0x803, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=@newtfilter={0x4c8, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x0, 0x7}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_fw={{0x7}, {0x49c, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0xfff1, 0xb}}, @TCA_FW_MASK={0x8, 0x5, 0x6}, @TCA_FW_POLICE={0x46c, 0x2, [@TCA_POLICE_RATE64={0xc, 0x8, 0x6c19}, @TCA_POLICE_RESULT={0x8, 0x5, 0x2}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x100}, @TCA_POLICE_TBF={0x3c, 0x1, {0x80, 0x4, 0x7, 0x4, 0x0, {0xc, 0x1, 0x1000, 0xfeae, 0x7, 0x10001}, {0x4a, 0x1, 0x5, 0x5, 0x1ff, 0x3}, 0x7, 0x8, 0xfffffc00}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x75ad, 0x6, 0x6, 0x9, 0x6, 0xb, 0x539f, 0x4dd4, 0x8, 0x1, 0x5, 0x7, 0x1ff, 0x6, 0x5, 0x101, 0x2, 0x4, 0x80000001, 0xb979, 0xc, 0x7, 0xe07, 0x401, 0x8, 0x51e, 0x9, 0x0, 0x200, 0xc0b, 0x7, 0x0, 0x5, 0x7, 0x8, 0xcc3f, 0x9, 0x27dd, 0x4d, 0x78, 0x1, 0x1, 0xc, 0x2, 0x200, 0xa, 0x8, 0x9, 0xe0ce, 0x9, 0x6, 0x1, 0x1, 0x4, 0x2, 0x6, 0x8fd, 0x0, 0x8001, 0xff, 0x1000, 0x8, 0x1, 0xfffffffa, 0x800, 0x0, 0x10001, 0x64e7, 0x2db0, 0xfffffffd, 0x15, 0x1, 0xb4b4, 0x6, 0x2, 0x2, 0x5, 0x100, 0x9, 0x7, 0x3, 0x81, 0xffff, 0xffffffff, 0xff, 0x5, 0xc1db, 0x1, 0x0, 0xc, 0x7, 0x7fffffff, 0x4827, 0x1, 0x0, 0xfffffff7, 0x463b68a, 0x2, 0x5, 0x10001, 0x4, 0x6, 0x3, 0x4, 0x5, 0x1, 0x9, 0x37, 0x9d0, 0x5, 0x3bc3, 0xe842, 0x3ff, 0x5, 0x1266800, 0x8, 0x7, 0x2, 0x0, 0x6, 0x9, 0x5, 0xfffff419, 0x9, 0xfff, 0x6, 0xfffffffe, 0x0, 0x80000000, 0x7, 0x6ccd, 0x3ff, 0xe, 0x5, 0x3ff, 0xff, 0x5, 0xfcf1, 0x3, 0x7000000, 0x1, 0x5, 0x8, 0x3, 0xe, 0x2e27, 0x217, 0x1, 0x8, 0x7ff, 0xff, 0xffffffff, 0x82d, 0xb6, 0x3, 0x401, 0x3, 0x3, 0xc9, 0x3, 0x9, 0x2, 0x8, 0x4, 0x7, 0x9, 0x8000, 0x9, 0x0, 0xe377, 0x3, 0xd, 0xff, 0x7fffffff, 0xbf458196, 0x2, 0x3, 0x2171b642, 0x3, 0x0, 0x7619, 0x5, 0x0, 0x3, 0x57, 0xf9, 0x7, 0xe, 0x24d, 0x0, 0x400, 0x5, 0x5, 0xe1, 0x800, 0xda20, 0xf, 0x6, 0x1000, 0x6, 0x0, 0x5, 0x0, 0xfffff8ba, 0x8, 0x0, 0x0, 0x1, 0x7fff, 0xfffffffc, 0x3ff, 0x8, 0x1, 0xfffffffb, 0xf8ab, 0xdfd, 0xe, 0x4, 0x40, 0x6, 0x4, 0x8, 0xc, 0x100, 0x6, 0x0, 0xe1a, 0x800, 0x2, 0x80000, 0x1, 0x1, 0x0, 0xf, 0x7f, 0xff, 0x80000001, 0xe, 0x596, 0xd568, 0xfffffff7, 0x8, 0x7, 0x6, 0x6, 0x5, 0x0, 0x8, 0xb4, 0x1, 0x5, 0x5, 0x9, 0x8, 0x6]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xbc}]}, @TCA_FW_MASK={0x8, 0x5, 0x1}, @TCA_FW_INDEV={0x14, 0x3, 'erspan0\x00'}]}}]}, 0x4c8}, 0x1, 0x0, 0x0, 0x40000000}, 0x24000084) 7.240624878s ago: executing program 5 (id=1788): r0 = socket(0x2b, 0x1, 0x1) sendmmsg$sock(r0, &(0x7f0000001280)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20000001) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file2\x00', 0x8, &(0x7f0000000080)={[{@nodioread_nolock}, {@sb={'sb', 0x3d, 0x1}}]}, 0x4, 0x523, &(0x7f00000018c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0x10142, 0x0) r1 = socket$kcm(0x29, 0x7, 0x0) recvmsg$kcm(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f00000000c0)=""/32, 0x20}, {&(0x7f0000000200)=""/134, 0x86}, {&(0x7f0000000400)=""/165, 0xa5}, {&(0x7f0000000540)=""/177, 0xb1}, {&(0x7f0000000600)=""/230, 0xe6}, {&(0x7f0000000700)=""/36, 0x24}], 0x6, &(0x7f00000007c0)=""/125, 0x7d}, 0x40010022) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x200000, &(0x7f0000000380), 0x3, 0x589, &(0x7f0000001580)="$eJzs3c1rHOUfAPDvbF76+vs1hVLUgwR6sFK7aRJfKgitR9FiQe91SbahZNMt2U1pYqHtwYJ4kSKIWBD/AO8eizcv+lcUtFCkBD14icxmtt1ks9kk3bqp8/nAtM8zz2yeeeaZ59nv7MyyAeTWaPpPIeLFiPgyiTjUUjYYWeHo6nbLj65PpUsSKysf/ZFEkq1rbp9k/x/IMi9ExE+fRZwotNdbW1yaLVUq5fksP1afuzJWW1w6eWmuNFOeKV+emJw8/cbkxNtvvdmztr56/q9vPrz33ukvji1//cODw3eSOBsHs7LWdjyFm62Z0RjNjslQnF234XgPKttNku1tPvys9oPtGcjG+VCkc8ChGMhGPfDfdyMiVoCcSox/yKlmHNC8tu/RdfBz4+G7qxdA7e0fXP1sJPY2ro32LydrrozS692RHtSf1vHj73fvpEt0+RziRg/qA2i6eSsiTg0Ots9/STb/7dypxofHm1tfR97ef6Cf7qXxz2sbxT+Fx/FPbBD/HNhg7O5E9/FfeNCDajpK4793Nox/H09dIwNZ7n+NmG8ouXipUj4VEf+PiOMxtCfNb3Y/5/Ty/ZVOZa3xX7qk9TdjwWw/HgzuWfua6VK99DRtbvXwVsRLT+LfJNrm/72NWHd9/6fH43ya+OXzrnUcLd99uVNZ9/a36n0EvPJ9xCsb9v+TO1rJ5vcnxxrnw1jzrGj35+2jv3aqf3vt7720//dv3v6RpPV+bW37dXy39+9yp7Kdnv/DyceNdPNG4rVSvT4/HjGcfNC+fuLJa5v55vZp+48f23z+2+j83xcRn2yx/beP3O646W7o/+lt9f/2E/ff//TbTvVvrf9fb6SOZ2u2Mv9tdQef5tgBAAAAAADAblOIiIORFIqP04VCsbj6fMeR2F+oVGv1ExerC5eno/Fd2ZEYKjTvdB9qeR5iPHsetpmfWJefjIjDEfHVwL5GvjhVrUz3u/EAAAAAAAAAAAAAAAAAAACwSxzo8P3/1G8D/d474Jnzk9+QX13Hfy9+6QnYlbz/Q34Z/5Bfxj/kl/EP+WX8Q34Z/5Bfxj/kl/EPAAAAAAAAAAAAAAAAAAAAAAAAAAAAPXX+3Ll0WVl+dH0qzU9fXVyYrV49OV2uzRbnFqaKU9X5K8WZanWmUi5OVee6/b1KtXplfCIWro3Vy7X6WG1x6cJcdeFy/cKludJM+UJ56F9pFQAAAAAAAAAAAAAAAAAAADxfaotLs6VKpTzfj8TPhYj+1b7lxJnYFbux40TSrZfPZCfD2qLhtjVrEpElBp/VzicR0e9Dl+NEnycmAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGjxTwAAAP///b4wHA==") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@xino_auto}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@xino_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) chdir(&(0x7f0000000100)='./file0\x00') mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x10000, 0x0) landlock_create_ruleset(&(0x7f0000000000)={0x10101, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x30, 0x4) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x1, 0x4, 0x4, 0x8, 0x10}, 0x50) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000003000000850000008600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f00000000c0)=r7, 0x4) sendmsg$unix(r6, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) ioctl$RTC_AIE_ON(r2, 0x7001) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) pread64(r2, &(0x7f0000000000)=""/4, 0x4, 0x4) sendmmsg$unix(r0, &(0x7f0000007cc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40), 0x0, 0x4008050}}], 0x3, 0x41) 7.131517161s ago: executing program 5 (id=1789): landlock_create_ruleset(0x0, 0x0, 0x3) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={0x24, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x10, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x24}}, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) r0 = socket$inet6(0xa, 0x80001, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) close(0x4) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket(0x2b, 0x80801, 0x1) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x61, &(0x7f0000000040)={'filter\x00', 0x4}, 0x68) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x321}}}, 0x108) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0xf) ioctl$FS_IOC_FSGETXATTR(r2, 0x400455c8, 0x0) syz_usb_connect$cdc_ecm(0x0, 0x57, 0x0, 0x0) ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) r3 = socket(0x10, 0x803, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r5) getsockname$packet(r5, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r6, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) 6.737872663s ago: executing program 5 (id=1794): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)={0x28, 0x28, 0x1, 0x0, 0x0, "", [@nested={0x18, 0x0, 0x0, 0x0, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0x8, 0x1c, 0x0, 0x0, @u32=0xc9}]}]}, 0x28}], 0x1, 0x0, 0x0, 0xb305e06d8ab48277}, 0x0) 6.628773139s ago: executing program 36 (id=1794): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)={0x28, 0x28, 0x1, 0x0, 0x0, "", [@nested={0x18, 0x0, 0x0, 0x0, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0x8, 0x1c, 0x0, 0x0, @u32=0xc9}]}]}, 0x28}], 0x1, 0x0, 0x0, 0xb305e06d8ab48277}, 0x0) 6.351257313s ago: executing program 1 (id=1799): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x2383, @loopback}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x2383, @loopback}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xf, 0x4, 0x4, 0x10, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xe, 0x6, &(0x7f0000000500)=@raw=[@map_fd={0x18, 0x2, 0x1, 0x0, r1}, @generic={0xb7, 0x3}, @generic={0xb7, 0x4}, @call={0x85, 0x0, 0x0, 0x34}, @exit], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000600)={@map=r1, r2, 0x5, 0x0, 0x0, @void, @value=0x0}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r1, &(0x7f0000000340), &(0x7f0000000380)=@tcp=r0}, 0x20) write(r0, &(0x7f0000000700)='h', 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000500000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x65, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(r3) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0xfffffffc}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r6}, 0x0, 0x0}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000740)={r6, &(0x7f0000000000), &(0x7f00000000c0)=""/109}, 0x20) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r7, 0x2000000, 0xe, 0x0, &(0x7f0000000600)="c9f7b98600"/14, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r8 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f0000000040)={'dummy0\x00', &(0x7f00000005c0)=@ethtool_channels={0x3c, 0x2b6, 0x9, 0x72, 0x5, 0x2, 0xe680, 0x401, 0x4}}) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) r10 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000002c0), 0x4) r11 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x48100, 0x0) ioctl$TIOCSETD(r11, 0x5423, &(0x7f0000000080)=0x3) ioctl$TIOCSTI(r11, 0x5412, &(0x7f0000000000)=0xff) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000380)={0x3, 0x4, 0x4, 0xa, 0x0, r5, 0x7, '\x00', r9, r10, 0x1, 0x3, 0x3}, 0x50) 5.40201757s ago: executing program 1 (id=1807): r0 = socket$rds(0x15, 0x5, 0x0) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x4, &(0x7f0000000000)=[{0x5, 0x0, 0x5, 0xc2}, {0x6, 0x4, 0x5, 0x2}, {0x22, 0x6, 0x0, 0x7}, {0xf3b, 0x0, 0xfa, 0xe}]}) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r5], 0x1c}}, 0x4008054) write$nci(r1, &(0x7f0000000240)=ANY=[@ANYBLOB='p\x00\t'], 0xc) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000180)={0x2, 0x4e21, @loopback}, 0x10) write$nci(r1, &(0x7f0000000dc0)=ANY=[@ANYBLOB="400104"], 0x14) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r7, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r8, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) dup3(r6, r0, 0x0) r9 = openat$smackfs_ptrace(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$BTRFS_IOC_SNAP_DESTROY(r3, 0x5000940f, &(0x7f00000013c0)={{r9}, "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"}) setresuid(0xee01, 0xee01, 0x0) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x40}) fchmodat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0xfffffe43) write$nci(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="5001", @ANYRES16=r0], 0x14) 4.590155329s ago: executing program 7 (id=1813): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000000c0)={0x1c, r1, 0x1, 0xfffffffd, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x1c}}, 0x0) (fail_nth: 6) 4.496895199s ago: executing program 7 (id=1814): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc80, &(0x7f0000000600)=ANY=[@ANYRES16=0x0], 0x1, 0x266, &(0x7f0000000800)="$eJzs281OE1EYxvGHDwVBmCqKgjG+0Y1uJlCvoCGQGJtokBo/EpNBptp0aEmnwdQYYefW6yAu3ZkYb4CNV+DCHRuXLIxjmKnQlhrDQiba/29zXnJ4mnP6njZn0dl58Ha1XAzdoldXf59pUNrUrpRRvwaU6GuO/XF9Uq02dWMi/+XyvYePbufy+flFs4Xc0s2smY1f+fji1burn+qj99+PfxjSdubJzrfs1+3J7amdH0vPS6GVQqtU6+bZcrVa95YD31ZKYdk1uxv4XuhbqRL6tbb5YlBdW2uYV1kZG1mr+WFoXqVhZb9h9arVaw3znnmlirmua2Mjwp8UthYXvVzaq8DfVavlvDlJ04dmClupLAgAAKSK+38v4/7fC/bu/4+bn9923P8BAAAAAAAAAAAAAAAAAAAAAPgX7EaRE0WR82s8IcVP+ETNv09JGpE0Kum0pDFJ45IcSRlJZySdlTQh6Zyk85ImJV2QdFHSVMtrpb1XHEb/exv97230v7e1PLg7LK2+WS+sF5Ixmc8VVVIgXzNy9D3uZVNSL9zKz89YLKNLqxvN/MZ6YaA9Pytn78B0y88meWvPD8Xnbj+flbN3wLrls13zw7p+rSXvytHnp6oq0Ep8Jg/yr2fN5u7kO/LT8f/971zb17V/rvu7+SR/hPPR8f4Oanow3b1DChsvy14Q+DUKCgqK/SLtbyYch4Omp70SAAAAAAAAAAAAAAAAAMBRHMfPCdPeIwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAnX4GAAD//5KSYE0=") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r0, 0x80047210, &(0x7f00000000c0)) getpid() r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r2 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000040)=0xa) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), r0) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000dc0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000d80)={&(0x7f0000000e00)=ANY=[@ANYBLOB="253aa9fb14e5b79a567c8d000000000000be65d404e43c9da3e3209128e1cfe7c694375119fce4df604881de145a75c68ebf73418a6ca19f0bf3f62ea7902c6cbb6beccc3962c18916969cbaa6387aa9d912266c2ccc0742d4294432135faf8d978faf231850530afdc39d3e630546052a6c764b25261c6ead604c350ea9ceed859e87649377488fc58c2c1c77c8cd9552fcee1909ad87ff7caa74672abb95c33b1b60a0c44377e5e5b568616299e8b8a21073101cd15f1bb9b489c6d769548acb33749e46870653d9d081bac562ef787c42fcb8", @ANYRES16=r3, @ANYBLOB="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"], 0x2e8}}, 0x4000001) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000340)={{{@in=@broadcast, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x800000000000, 0x4, 0x3}, {0x0, 0x4, 0x0, 0xa78a}, 0xfffffffe, 0x0, 0x1}, {{@in=@private, 0x0, 0x33}, 0x0, @in=@rand_addr=0x64010101, 0x0, 0x3, 0x1, 0x7}}, 0xe8) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0xfffffffe, @ipv4={'\x00', '\xff\xff', @local}, 0x4}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x2, &(0x7f0000000100)=@ccm_128={{0x303, 0x39}, '\x00', "0bf70000000000000000061000000001", "00000004", "cffe06051000001d"}, 0x28) sendmmsg(r2, &(0x7f0000000480), 0x2e9, 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000100)=ANY=[@ANYBLOB="020602000200000002"], 0x10}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 4.402749552s ago: executing program 7 (id=1815): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() r1 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_RX_RING(r1, 0x10e, 0x6, &(0x7f0000000080)={0x2, 0x8, 0x4, 0x3}, 0x10) sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$F2FS_IOC_MOVE_RANGE(r4, 0x541b, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6}]}, 0x10) getsockopt$sock_buf(r6, 0x1, 0x1a, &(0x7f0000001340)=""/4096, &(0x7f0000000340)=0x1000) sendmsg$nl_xfrm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000900)=ANY=[@ANYBLOB="4401000010000100feffffbf00010000ff020000000000000000000000000001ac1414aa000000000000000000000000000107944e230005000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x144}, 0x1, 0x0, 0x0, 0x8801}, 0x10) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$nl_xfrm(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3801000018000100feffffff00b2350be47d92751a2792bc01000020010000000000447000000000000001fe80000000000000000000000000bb0001071c4e230005000000003a00000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c000000ac14142500000000000000000000000000000000000000009201000000000000a39b000000000000ffff0000000000001c250800000000000500000000000000fcffffffffffffff0000000000000000fcffffffffffffff00000000000000001f00000000000000fefffffffffffffffafffffffcffffff0000000027bd700000350000020001002000000000000000480003006465666c61746500"/240], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x4000000) ptrace(0x10, 0x0) rt_sigqueueinfo(0x0, 0x1f, &(0x7f0000000200)={0x3a, 0x7fffffff, 0x9}) 3.440638247s ago: executing program 7 (id=1820): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond0\x00'}) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0a0000000420000006000000ffffffff46"], 0x48) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r3, 0x84, 0x6b, &(0x7f0000000040)=[@in={0x2, 0x4e23, @loopback}], 0x10) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r3, 0x84, 0xc, &(0x7f0000000200), 0x4) listen(r3, 0x2) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="c14d0000000000002800128008000100687372001c00028008000200", @ANYRES32=r4, @ANYBLOB="08000100", @ANYRES32=r2], 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 2.393538937s ago: executing program 7 (id=1825): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x41, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x4001}) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000002c0)='./proc\x00', &(0x7f0000000300)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000003c0)='./proc/sys/kernel/printk_devkmsg\x00', 0x2, 0x0) write(r0, &(0x7f0000000580)="6f76660a048eca79ab340500000032acfc5278ac07a9443a47ea5505971a8da1e983954ffeedfb70d598fd0ee8aab7c545929f05b54f841923b47eeaaa4cad7c26d19ab7cf2c4b7397e30f7a6fea432b947ae08f63aedcd645cf919f16a99c8d2bfc66bf4579c96d9567a0e3e7b1cb43c234fcd7c66337ac2b51b4e609b7cfc798097bf7d56b824607273222cb678690df77bca545cba47a459afaaee29db448e5cd1952950324d3eca0c7fb346ad52444b56decc01b21435d58b99f89675faa30215deacced2754a966a47075aa7d8a52c7402d0fc314cdd7324880", 0xdc) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000180)={'syzkaller1\x00', {0x2, 0x0, @rand_addr=0x64010101}}) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) mount(&(0x7f0000000040), &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='ubifs\x00', 0x0, 0x0) socket$rds(0x15, 0x5, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', 0x1}) r2 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) ioctl$DVB_DEMUX_DMX_SET_FILTER(r2, 0x403c6f2b, &(0x7f0000001e40)={0x6, {"2ac78e02ff04856af9fb71f0d3fe13be", "3dfab043e15fad27a639f105b5e9f977", "47eb0b7c4fb9191024da8887f94ba4fb"}, 0x4, 0x5}) r3 = getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(r6, r3, 0x7, r4, &(0x7f0000000080)={0xffffffffffffffff, r5, 0x5}) r7 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r7, 0x29, 0x2e, &(0x7f0000000340)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x5}}, {{0xa, 0xfffe, 0x0, @mcast1, 0x2}}}, 0x108) setsockopt$inet6_group_source_req(r7, 0x29, 0x2b, &(0x7f00000007c0)={0x1, {{0xa, 0x4e23, 0x103, @mcast2, 0xffffffff}}, {{0xa, 0x4e20, 0x10006, @loopback}}}, 0x108) write$tun(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="0000080001031400e803140008004500005c000000004084b019640101026401010104d2270f00000000000000000100001300"], 0x6a) r8 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r8) getsockname$packet(r8, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r8, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="48000000100037040400"/20, @ANYRES32=r9, @ANYBLOB="830405000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=r9], 0x48}, 0x1, 0x0, 0x0, 0x9005}, 0x4000000) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="020000000400000004001c0001"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x6, 0xf, &(0x7f00000015c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x2, 0x0, r10}, {}, {}, {0x85, 0x0, 0x0, 0xce}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x63}, 0x94) r11 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r11) 2.392724348s ago: executing program 4 (id=1826): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) pwrite64(r0, &(0x7f0000001000), 0x100000, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x12, 0x5, &(0x7f0000000040)=@framed={{0x55, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x1c}, [@initr0]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x80) (async) socket$netlink(0x10, 0x3, 0x11) 2.292974183s ago: executing program 4 (id=1827): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x34, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_LANES={0x8, 0x9, 0x1}]}, 0x34}}, 0x0) (fail_nth: 8) 2.292723484s ago: executing program 7 (id=1828): r0 = userfaultfd(0x1) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_WRITEPROTECT(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000800000/0x800000)=nil, 0x802000}, 0x2}) r1 = socket(0x15, 0x5, 0x0) getsockopt(r1, 0x200000000114, 0x2713, &(0x7f0000c35fff)=""/1, &(0x7f0000000000)=0xf002) r2 = syz_open_dev$video4linux(&(0x7f0000000000), 0x10003, 0xe2182) r3 = socket$vsock_stream(0x28, 0x1, 0x0) listen(r3, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) open_by_handle_at(r4, &(0x7f0000000080)=@shmem={0xc, 0x1, {0x2, 0xb}}, 0x3414c0) syz_emit_ethernet(0x5a, &(0x7f00000004c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb08004500004c0000000000069078ac1414bbac1414aa4e224001", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="e0020000757800001312abb9545b434c72d50c122a9c444be69caceb047b79a300"/44], 0x0) r5 = socket(0x18, 0x1, 0x1) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, 0x0, 0x0) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r2, 0xc0845658, &(0x7f0000002240)={0x0, @bt={0x200, 0x80000000, 0x1, 0x1, 0xfff, 0x0, 0x0, 0x1, 0x3, 0x4, 0x1, 0xe29, 0xacc5, 0x10000, 0x1c, 0x10, {0x9, 0x6280}, 0x8, 0x7}}) 2.271096054s ago: executing program 4 (id=1829): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000240)=ANY=[@ANYBLOB="640000001900010000000000000000001d"], 0x64}}, 0x20000000) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xd, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="850000008e0000009c0000000000000072000000000000029500000d00000000"], &(0x7f0000000040)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x80000aa, 0x10, 0x0, 0xfffffffffffffed8}, 0x23) socket(0x10, 0x3, 0x0) (async) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000240)=ANY=[@ANYBLOB="640000001900010000000000000000001d"], 0x64}}, 0x20000000) (async) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xd, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="850000008e0000009c0000000000000072000000000000029500000d00000000"], &(0x7f0000000040)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x80000aa, 0x10, 0x0, 0xfffffffffffffed8}, 0x23) (async) 2.252645977s ago: executing program 4 (id=1830): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x748, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) syz_open_dev$loop(&(0x7f0000000000), 0x6, 0x800) getpid() semget(0x3, 0x2, 0x800) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_open_dev$video(0x0, 0x8, 0x0) socket$nl_crypto(0x10, 0x3, 0x15) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x14, 0x16, 0x301, 0x270bd24, 0x25dfdbff, {0x9}}, 0x14}, 0x1, 0x0, 0x0, 0x4044004}, 0x20000000) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x141842, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(r6, &(0x7f0000000340)=ANY=[], 0x21) sendfile(r0, r5, 0x0, 0x40001) 1.869916562s ago: executing program 1 (id=1831): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) listen(r0, 0x5) connect$inet(r1, &(0x7f0000000010)={0x2, 0x4e20, @loopback}, 0x10) accept(r0, 0x0, 0x0) setsockopt$inet_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000020), 0x4) setsockopt$inet_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000030)=@gcm_128={{0x303}}, 0x28) sendmsg$inet(r1, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[@ip_retopts={{0xe4, 0x0, 0x7, {[@noop, @generic={0x83, 0x7, 'k2Liu'}, @ra={0x94, 0x4}, @timestamp_prespec={0x44, 0x2c, 0xf2, 0x3, 0x0, [{@private=0xa010100, 0xc6cb}, {@multicast1, 0x9}, {@local, 0x9}, {@private=0xa010101, 0x3}, {@remote, 0x6}]}, @end, @noop, @cipso={0x86, 0x4a, 0x1, [{0x0, 0x2}, {0x1, 0xb, "3c779259e854d11e5f"}, {0x7, 0x7, "23582cb00f"}, {0x6, 0x3, "d1"}, {0x7, 0x7, "107dad2226"}, {0x0, 0x11, "39bc550b1eeba0dfa01224f0f481e0"}, {0xa14c784c2d5bbe13, 0xb, "318b8a59853d4bd610"}, {0x2, 0x7, "0d0fa46da7"}, {0x0, 0x3, '\v'}]}, @rr={0x7, 0x27, 0xb, [@multicast1, @empty, @dev={0xac, 0x14, 0x14, 0x28}, @local, @remote, @private=0xa010101, @remote, @empty, @private=0xa010102]}, @cipso={0x86, 0x27, 0x3, [{0x5, 0xc, "b8590b5bf7c65ee893f5"}, {0x7, 0x5, "9fdda7"}, {0x6, 0x10, "d910223713ae6e5d7f17287f1312"}]}]}}}], 0xe8}, 0x0) 1.530985356s ago: executing program 9 (id=1839): getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000000)={0x0, 0x73, "bac459090dfd88a8b75747eed78a37845e90ffb669d7ef449611cb31eaa1b2cd828fe4685212983693a995d34fc62fca2c02b84facdf98e5335741bfa3a36087dc9c0a509ae02a5db0a3bd7d32958c3105c7877ff1bffed44181c8a76269029c7cb998bbed55a7e23830be2bb5d4ef27e414b4"}, &(0x7f0000000080)=0x7b) getsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f00000000c0)=@assoc_id=r0, &(0x7f0000000100)=0x4) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x70, &(0x7f0000000140)={r0, @in6={{0xa, 0x4e20, 0x7ff, @private0, 0x8}}, [0x7, 0xfffffffffffff4e3, 0x3ff, 0x4, 0x6, 0x6, 0x5, 0x80000000, 0x2, 0x8, 0x278d, 0xc, 0x2, 0x1e, 0xabe3]}, &(0x7f0000000240)=0x100) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f0000000280)={r0, 0x9}, &(0x7f00000002c0)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000300)={0x2, 0x2, 0x8004, 0x9fd, 0xba1, 0xa6a, 0x1, 0x80a, r2}, 0x20) r3 = openat$panthor(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000380)={0x0, 0x0, r3}) r5 = io_uring_setup(0x741a, &(0x7f00000003c0)={0x0, 0x910, 0x20, 0x1, 0xdf}) getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000440)=@assoc_value={r2, 0x1}, &(0x7f0000000480)=0x8) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000500), r5) sendmsg$TIPC_NL_BEARER_GET(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000700)={&(0x7f0000000540)={0x1b8, r6, 0x400, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x35}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7d}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_BEARER={0x50, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}]}, @TIPC_NLA_NODE={0x84, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x4a, 0x4, {'gcm(aes)\x00', 0x22, "0f6e12cb08678e9a606f369825e87df949889f072cde47a9dc18d6826586a3dbae3b"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xc8d}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x8}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x4}]}, @TIPC_NLA_LINK={0x90, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x90}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7a9a0dd2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}]}]}, 0x1b8}, 0x1, 0x0, 0x0, 0x4}, 0x801) ioctl$DRM_IOCTL_PANTHOR_VM_CREATE(r3, 0xc0106441, &(0x7f0000000780)={0x0, 0x0, 0x5}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f00000007c0)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000800)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r3, 0xc00864bf, &(0x7f0000000840)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r3, 0xc01864c2, &(0x7f0000000880)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r3, 0xc01864c2, &(0x7f0000000940)={0x0, 0x1, r5}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r3, 0xc01864c2, &(0x7f0000000980)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r3, 0xc01864c2, &(0x7f0000000a00)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r3, 0xc01864c2, &(0x7f0000000a40)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r3, 0xc01864c2, &(0x7f0000000a80)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r3, 0xc00864bf, &(0x7f0000000ac0)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r3, 0xc00864bf, &(0x7f0000000b00)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01864c2, &(0x7f0000000b40)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r3, 0xc00864bf, &(0x7f0000000c00)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r3, 0xc00864bf, &(0x7f0000000c40)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r3, 0xc00864bf, &(0x7f0000000c80)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r3, 0xc00864bf, &(0x7f0000000cc0)={0x0, 0x1}) ioctl$DRM_IOCTL_PANTHOR_VM_BIND(r3, 0xc0186443, &(0x7f00000014c0)={r7, 0x0, {0x30, 0x8, &(0x7f0000001340)=[{0x4, r4, 0x8, 0x5, 0x8000000000000001, {0x10, 0x6, &(0x7f00000008c0)=[{0x0, r8, 0x6}, {0xf217c2d61f4cb067, 0x0, 0x29a}, {0x80000000, 0x0, 0x6}, {0x1, r9, 0x1006}, {0xff, r10, 0x20}, {0x80000000, r11, 0x3bd}]}}, {0x4, r4, 0x1, 0x0, 0x9, {0x10, 0x3, &(0x7f00000009c0)=[{0xff, 0x0, 0x5}, {0xff, r12, 0x8}, {0x0, r13, 0x2}]}}, {0xd0000001, r4, 0x10, 0x10000, 0x1, {0x10, 0x7, &(0x7f0000000b80)=[{0xff, r14, 0x5}, {0x0, 0x0, 0x2}, {0x80000000, r15, 0xc39}, {0xff, r16, 0x40}, {0x80000000, r17, 0x6}, {0xff, r18, 0x8}, {0xff, r19, 0x6}]}}, {0xf0000000, r4, 0x8000000000000000, 0x9, 0x8, {0x10, 0x9, &(0x7f0000000dc0)=[{0xff, 0x0, 0x6}, {0x80000000, r20, 0x8}, {0x1, 0x0, 0x80}, {0x1, r21, 0x80}, {0x800000ff, r22, 0xfffffffffffffffc}, {0x1, r23, 0x9}, {0x80000000, 0x0, 0x8}, {0x80000000, 0x0, 0x1}, {0xff, 0x0, 0x4}]}}, {0x10000000, r4, 0xd3f, 0x59, 0x2, {0x10, 0x1, &(0x7f0000000ec0)=[{0xff, 0x0, 0x6}]}}, {0x0, 0x0, 0x8, 0x7, 0x3, {0x10, 0x5, &(0x7f0000001040)=[{0x1, 0x0, 0x2}, {0xff, 0x0, 0xa6d2}, {0x1, 0x0, 0xfffffffffffffffa}, {0xff, 0x0, 0x7ff}, {0x0, 0x0, 0x3}]}}, {0x10000000, r4, 0x7be6, 0x6, 0x4, {0x10, 0x1, &(0x7f0000001100)=[{0x0, 0x0, 0x7fffffffffffffff}]}}, {0x4, r4, 0x2, 0xc, 0x3ff, {0x10, 0x7, &(0x7f00000012c0)=[{0x800000fe, 0x0, 0xf7}, {0x1, 0x0, 0x9}, {0x80000000, 0x0, 0x785d}, {0x1, 0x0, 0x3}, {0x80000000, 0x0, 0x1}, {0x0, 0x0, 0xabe8}, {0x80000000, 0x0, 0x5}]}}]}}) 1.478823137s ago: executing program 9 (id=1840): syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000000)='./file0\x00', 0x400, &(0x7f0000000140)={[{@fat=@flush}, {@numtail}, {@fat=@discard}, {@fat=@dos1xfloppy}, {@shortname_win95}, {@uni_xlateno}, {@utf8no}, {@fat=@uid}, {@iocharset={'iocharset', 0x3d, 'koi8-u'}}]}, 0xfa, 0x299, &(0x7f0000000280)="$eJzs3M9rE0EUwPHXtGnTlDY5iKAgPvSil6WNf0GQFsSAUhtRD8LUbjRkTUp2jUTE9ubVv6N49CZY/4FevHkXL0UQvPQgXelu1mxLsD9s3Np8P1B2ujMvM7s7CW8XdjbvvXlaq7hWxXiSyqikRFZlSyS/U+oY6mxTQXlU4lbl6sSPzxfu3H9ws1gqzc6rzhUXrhVUderih+cv31766E3cfTf1fkw28g83vxe+bJzdOLe5vRB9esNTo4uNhmcWHVuXqm7NUr3t2Ma1tVp37eau+orTWF5uq6kvTWaXm7brqqm3tWa31Wuo12yreWyqdbUsSyezMmiGDx1RXpufN8W+DAZJGO+1s9ksmuGeleW1fzEoAABwsiSV/z+pulp1tb5f/p8S8v/+CfL/7Z5JI06H9M4NQNFkO9/f3cj/AQAAAAAAAAAAAAAAAAAAAAD4H2z5fs73/Vy0jf7GRCQjItH/SY8T/XGE6z+U4HBxzGIv7mVEnNetcqscbsP6YkWq4ogt02mRn8F86AjLczdKs9MayMu6s9KJD14SHIviI/ne8TNhvMbiV1rltGTj/RckJ2d6xxf2xKdFpFUelSuXY/GW5OTTI2mII0vBvO7Gv5pRvX6rtKf/8aAdAAAAAACngaW/5Xff/4arSVqWRsuG7KkPd3afD0hun+cDKuuj0o0fkfMjyR03AAAAAACDxG2/qBnHsZsUDlcYxFNnZcJJ88fGvu+v7DT6+05TIpLQkX4TkRNwwo+78PVZeAEP0jjJXyUAAAAA/dBN+pMeCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAg+ugi4dF7Y+y9lisu+FkjhIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4GX4FAAD//z2KG1o=") r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000090601020000ffff00000000020000000900020073797a31000000000500010007000000280007800c00018008000140ffffffff0500070011000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x20000880) clock_gettime(0x0, &(0x7f0000008700)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000008480)=[{{&(0x7f0000000040)=@in6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000640)=[{&(0x7f0000000540)=""/201, 0xc9}], 0x1, &(0x7f0000000680)=""/100, 0x64}, 0x1ff}, {{0x0, 0x0, &(0x7f0000001800)=[{&(0x7f0000000700)=""/4096, 0x1000}, {&(0x7f0000001700)=""/223, 0xdf}], 0x2, &(0x7f0000001840)=""/12, 0xc}, 0x5}, {{&(0x7f0000001880)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, &(0x7f0000001a00)=[{&(0x7f0000001900)=""/230, 0xe6}], 0x1, &(0x7f0000001a40)=""/30, 0x1e}, 0x5}, {{&(0x7f0000001a80)=@qipcrtr, 0x80, &(0x7f0000001e00)=[{&(0x7f0000001b00)=""/68, 0x44}, {&(0x7f0000001b80)=""/82, 0x52}, {&(0x7f0000001c00)=""/33, 0x21}, {&(0x7f0000001c40)=""/242, 0xf2}, {&(0x7f0000001d40)=""/157, 0x9d}], 0x5, &(0x7f0000001e80)=""/211, 0xd3}, 0x8}, {{&(0x7f0000001f80)=@pptp, 0x80, &(0x7f00000033c0)=[{&(0x7f0000002000)=""/191, 0xbf}, {&(0x7f00000020c0)=""/4096, 0x1000}, {&(0x7f00000030c0)=""/108, 0x6c}, {&(0x7f0000003140)=""/210, 0xd2}, {&(0x7f0000003240)=""/183, 0xb7}, {&(0x7f0000003300)=""/95, 0x5f}, {&(0x7f0000003380)=""/34, 0x22}], 0x7, &(0x7f0000003440)=""/92, 0x5c}, 0xfff}, {{&(0x7f00000034c0)=@isdn, 0x80, &(0x7f0000003840)=[{&(0x7f0000003540)=""/21, 0x15}, {&(0x7f0000003580)=""/98, 0x62}, {&(0x7f0000003600)=""/19, 0x13}, {&(0x7f0000003640)=""/221, 0xdd}, {&(0x7f0000003740)=""/203, 0xcb}], 0x5, &(0x7f00000038c0)=""/252, 0xfc}, 0xfffffff7}, {{&(0x7f00000039c0)=@ax25={{}, [@remote, @netrom, @bcast, @netrom, @default, @netrom, @remote, @netrom]}, 0x80, &(0x7f0000005cc0)=[{&(0x7f0000003a40)=""/132, 0x84}, {&(0x7f0000003b00)=""/4096, 0x1000}, {&(0x7f0000004b00)=""/23, 0x17}, {&(0x7f0000004b40)=""/55, 0x37}, {&(0x7f0000004b80)=""/4096, 0x1000}, {&(0x7f0000005b80)=""/108, 0x6c}, {&(0x7f0000005c00)=""/149, 0x95}], 0x7, &(0x7f0000005d40)=""/85, 0x55}, 0x702}, {{&(0x7f0000005dc0)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @dev}}, 0x80, &(0x7f0000005e40), 0x0, &(0x7f0000005e80)=""/245, 0xf5}, 0x2}, {{&(0x7f0000005f80)=@vsock, 0x80, &(0x7f0000007100)=[{&(0x7f0000006000)=""/135, 0x87}, {&(0x7f00000060c0)=""/4096, 0x1000}, {&(0x7f00000070c0)=""/16, 0x10}], 0x3, &(0x7f0000007140)=""/22, 0x16}, 0x8}, {{&(0x7f0000007180)=@l2tp={0x2, 0x0, @initdev}, 0x80, &(0x7f0000008400)=[{&(0x7f0000007200)=""/4096, 0x1000}, {&(0x7f0000008200)=""/250, 0xfa}, {&(0x7f0000008300)=""/246, 0xf6}], 0x3, &(0x7f0000008440)=""/48, 0x30}, 0xe23}], 0xa, 0x2020, &(0x7f0000008740)={r1, r2+10000000}) syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="040ed7e54e20"], 0x7) 1.294010192s ago: executing program 4 (id=1842): socketpair$unix(0x1, 0x2, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) connect$can_bcm(r3, &(0x7f00000000c0)={0x1d, r4}, 0x10) sendmsg$can_bcm(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="3bf81bb9f9"], 0x20000600}, 0x1, 0x0, 0x0, 0x40000}, 0x1) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_ublk_setup_queues(0xffffffffffffffff, r5, 0x0, 0x0, 0x1, 0x0, 0x0) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, 0x0, 0xc880) 821.289723ms ago: executing program 1 (id=1845): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x80) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r0, r2, 0x16, 0x0, @void}, 0x10) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f00000013c0)={@in6={{0xa, 0x4e24, 0x1, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, 0xfffffe00}}, 0x0, 0x0, 0x47, 0x0, "772d0f529b03e70b8ae81eb1a9e8567b8e9dd018d36d790099bf30587276881952783d4059313a25b6cf0204b0859e65c13b361984b40c8fc55ec5d5849531afda5de50abf9fe1c4d0e83bab925afd24"}, 0xd8) (fail_nth: 2) 807.631183ms ago: executing program 1 (id=1846): r0 = syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x0, 0x40002) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000340)=0x0) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001280)={0x28, r3, 0x5, 0x70bd29, 0x1fffe, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_FORWARDING={0x5, 0x13, 0x1}]}]}, 0x28}}, 0x14000004) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000008c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffa}, [@call={0x85, 0x0, 0x0, 0x2c}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r6) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001180)) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f00000004c0)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8f03000000000060007538e486dd"], 0xcfa4) write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[], 0x66) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) ioctl$FE_GET_EVENT(r0, 0x80286f4e, &(0x7f0000000140)) mount$tmpfs(0x0, &(0x7f0000000540)='./cgroup\x00', &(0x7f0000000040), 0x0, &(0x7f0000000000)={[{@mpol={'mpol', 0x3d, {'prefer', '=relative', @val={0x3a, [0x30, 0x30]}}}}]}) openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x40, 0x0) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r7, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r7, &(0x7f0000008340)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r7, &(0x7f0000000040)={0x50, 0x0, r8, {0x7, 0x1f, 0x0, 0x490420, 0x2, 0x0, 0x0, 0x6, 0x0, 0x0, 0x4}}, 0x50) syz_fuse_handle_req(r7, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000c0a200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r9 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0) fallocate(r9, 0x0, 0x460e, 0x400000003) r10 = syz_open_dev$usbmon(&(0x7f0000000000), 0x474, 0x8082) ioctl$MON_IOCQ_URB_LEN(r10, 0x9201) 612.856455ms ago: executing program 8 (id=1848): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x48, 0x2, 0x6, 0x101, 0x0, 0x0, {0xa, 0x0, 0xa}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x48}, 0x1, 0x400000000000000}, 0x4) 603.694315ms ago: executing program 8 (id=1849): setrlimit(0x2, &(0x7f00000000c0)={0x0, 0xfffffffffffff005}) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, 0x0, &(0x7f0000002100)=0x4) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x3000, 0x0, &(0x7f0000ffb000/0x3000)=nil) (async) getsockopt$inet_sctp6_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000700)={0x0, 0x9, 0x7, 0x4, 0xd, 0x4, 0x4, 0x9, {0x0, @in6={{0xa, 0x4e21, 0xfd, @local, 0x8}}, 0x7f, 0x0, 0x1, 0x8, 0x9}}, &(0x7f00000007c0)=0xb0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000800)={r1, 0x4, 0x20}, 0xc) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) (async) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SET_VERSION(r4, 0xc0106407, &(0x7f0000000000)={0xffffffff, 0x2, 0x1}) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'ip_vti0\x00', &(0x7f0000000100)={'sit0\x00', 0x0, 0x1, 0x7, 0xffffffff, 0x4, {{0x27, 0x4, 0x2, 0x1b, 0x9c, 0x67, 0x0, 0x3, 0x4, 0x0, @remote, @loopback, {[@generic={0x86, 0x7, "754aa67ed3"}, @generic={0x94, 0x7, "dfc6e2b2dc"}, @timestamp_prespec={0x44, 0x2c, 0x47, 0x3, 0x8, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0xffffffc3}, {@local, 0x80}, {@private=0xa010102, 0xfffffffe}, {@remote, 0xd}, {@empty, 0x1}]}, @generic={0x83, 0x9, "119ea6366ca051"}, @end, @timestamp_prespec={0x44, 0x2c, 0xe, 0x3, 0x4, [{@multicast1}, {@multicast1, 0x5}, {@broadcast, 0x8}, {@broadcast, 0x40}, {@remote, 0x6}]}, @rr={0x7, 0x17, 0x8f, [@dev={0xac, 0x14, 0x14, 0x21}, @multicast1, @multicast1, @private=0xa010100, @loopback]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000300)={'ip_vti0\x00', &(0x7f0000000240)={'gretap0\x00', 0x0, 0x1, 0x20, 0x7ff, 0x1, {{0x1f, 0x4, 0x0, 0x2d, 0x7c, 0x67, 0x0, 0x6, 0x2f, 0x0, @local, @broadcast, {[@ssrr={0x89, 0x7, 0xb9, [@private=0xa010101]}, @timestamp_addr={0x44, 0x14, 0x75, 0x1, 0x9, [{@rand_addr=0x64010101, 0x3}, {@multicast2, 0x6}]}, @generic={0x82, 0x11, "fd8430bd4d37181c21b40695569803"}, @timestamp_addr={0x44, 0x14, 0xfd, 0x1, 0x1, [{@private=0xa010100, 0x1}, {@multicast2, 0x7f}]}, @rr={0x7, 0x27, 0xc3, [@multicast1, @loopback, @loopback, @loopback, @multicast2, @private=0xa010102, @private=0xa010102, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote]}]}}}}}) (async) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000340)=0x0, &(0x7f0000000380)=0x4) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) (async) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newnexthop={0x28, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x5}]}, @NHA_RES_GROUP={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) (async) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000001c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xfffffffd, {0x0, 0x0, 0x0, r10, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_BURST={0x8, 0x6, 0x44e4}, @TCA_TBF_PARMS={0x28, 0x1, {{0x2, 0x2, 0x7, 0x400, 0x0, 0x5}, {0xc0, 0x2, 0x8e98, 0x2, 0x9}, 0x8, 0x3, 0x12c7}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x240080c1}, 0x24008800) (async) sendmsg$nl_route_sched(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newqdisc={0x5c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x80000, {0x0, 0x0, 0x0, r10, {0x0, 0xe}, {0x2, 0xb}, {0xffe0, 0x484c10e0d22b6613}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xfffffffffffffdc3, 0x2, [@TCA_FQ_PIE_MEMORY_LIMIT={0x8, 0x8, 0x10006}, @TCA_FQ_PIE_ALPHA={0x8, 0x5, 0x12}, @TCA_FQ_PIE_LIMIT={0x8, 0x1, 0x6}, @TCA_FQ_PIE_DQ_RATE_ESTIMATOR={0x8, 0xc, 0x1}, @TCA_FQ_PIE_QUANTUM={0x8, 0x7, 0x6}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20004061}, 0x4008000) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000440)={'ip6tnl0\x00', &(0x7f00000003c0)={'ip6_vti0\x00', 0x0, 0x29, 0xc, 0x6, 0xe91, 0x8, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @dev={0xfe, 0x80, '\x00', 0xe}, 0x7800, 0x1, 0x31a, 0x401}}) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000500)={'ip6_vti0\x00', &(0x7f0000000480)={'syztnl1\x00', 0x0, 0x29, 0x9, 0xff, 0xffffffff, 0x34, @ipv4={'\x00', '\xff\xff', @loopback}, @empty, 0x8000, 0x40, 0x8, 0xffffffff}}) (async) r13 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r15 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r15, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000900)=@newtfilter={0x87c, 0x2c, 0xd3f, 0x10bd2d, 0x25dfdbf9, {0x0, 0x0, 0x0, r14, {0xffff, 0xfff3}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_basic={{0xa}, {0x84c, 0x2, [@TCA_BASIC_POLICE={0x848, 0x4, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x3, 0x3, 0x0, 0x0, 0x0, 0x3, 0x3ff, 0x2, 0x7, 0xfffffff7, 0x7, 0x2a3c14c8, 0x2, 0x140, 0x9cd0, 0x78e, 0x8, 0x9, 0x2, 0x80000000, 0x5, 0x80000000, 0x9, 0x6, 0xfff, 0x27, 0x52a67a94, 0xf, 0x1, 0x4, 0xfffffffe, 0x6, 0x0, 0xfffffffe, 0x800, 0x7, 0xffffffff, 0xffffffad, 0x8, 0x68, 0x0, 0x10000, 0x7ff, 0x7, 0xffffff64, 0x4, 0x9, 0x7, 0x5, 0x14000003, 0xffff, 0x2, 0x1ff, 0x4, 0xffff5edc, 0x8, 0x4, 0x81, 0x5, 0x94c, 0x1cf, 0x10000000, 0x3, 0x6, 0xfffffffb, 0x1, 0x2, 0x7, 0x1, 0x6, 0x0, 0xa, 0xf43, 0xa, 0x4, 0x5, 0x1, 0x8000, 0x3ff, 0x100, 0x2, 0x2, 0x8, 0x0, 0x24000000, 0x4, 0x80000000, 0x6, 0xac5, 0x9, 0xffb, 0x2, 0x67, 0xb, 0x9, 0x5, 0x7fffffff, 0xfffffff8, 0x86, 0x0, 0x0, 0x8ac7, 0x5, 0x78, 0x8000, 0xc, 0x6, 0x400, 0x20, 0x5, 0xffffffdf, 0x389, 0x3, 0x1e800000, 0x80000001, 0x4a, 0xff, 0x2, 0x3, 0x1ff, 0x9, 0x4, 0x6, 0x2, 0x7, 0x8001, 0x2, 0x263, 0xb, 0x8, 0x6, 0x6, 0x9, 0x6, 0xa, 0x13d, 0x209, 0x3fed, 0x2, 0x1, 0x2, 0x101, 0xffffffff, 0x7, 0x240, 0x4, 0x5, 0x2, 0xfffffffb, 0x1, 0x800, 0x7ffffffb, 0x8fc, 0x2, 0x68a4, 0x600000, 0x6, 0x4, 0x8, 0x4, 0x37, 0xa, 0x9, 0x3, 0x5, 0x8, 0x100, 0x7, 0xfe, 0x6, 0x7, 0x7, 0x22c, 0x6, 0x3, 0x8, 0x9, 0x66, 0xd6, 0x4ad, 0x7, 0x9, 0x2, 0x0, 0x7e6, 0x54d6, 0x2, 0x5, 0x8, 0x1, 0xf32, 0xffff, 0xb2, 0x0, 0x6, 0x7, 0x8, 0x400001, 0x4, 0x7, 0x9, 0x9, 0x0, 0x7, 0x2, 0x4000004, 0x20000, 0x2, 0x80000000, 0x10000, 0xe, 0x6, 0x2, 0x4, 0x1000, 0x8, 0x9, 0x0, 0xe6, 0x2, 0x9, 0x4, 0x1, 0x4, 0x9, 0xff, 0x9, 0x9, 0xb, 0x3, 0x7ffe, 0x200, 0x5, 0xca1, 0x7f, 0xe, 0x1, 0x1000, 0xfff, 0x5, 0x7, 0x0, 0x7, 0x40, 0x80000001, 0x1, 0x7, 0x6, 0x8, 0xe9375e5, 0x8cf5, 0x7, 0xdf0d, 0x2, 0xfffffffb]}, @TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x10, 0xd, 0xd36, 0x4, 0x6bc, 0x80002, 0x7, 0xf, 0x800, 0x7, 0x7, 0xe7f, 0xffff, 0x7, 0x5, 0x1, 0xffffffff, 0x4, 0x909e, 0x89cd, 0xffffffff, 0x8, 0x9, 0x4, 0x5, 0x2, 0x8, 0x4, 0xf23, 0x3ff, 0x9, 0xa, 0x5, 0x0, 0xff, 0x7f, 0x4, 0x0, 0x3, 0x382, 0x40, 0x80, 0x8, 0x2, 0x4000005, 0x20002, 0x9, 0x4f, 0x4, 0x0, 0x7, 0x80000000, 0x80000001, 0x8000, 0x9e, 0xe4, 0x200000, 0x7fffffff, 0x5a, 0x9, 0xfffffff4, 0x4, 0x6, 0x6, 0x459, 0x2, 0xff, 0x14000000, 0x5f72, 0x3, 0x8, 0x7, 0x5, 0x0, 0x6, 0x0, 0x6, 0x1000, 0xffffffff, 0x8000101, 0x2, 0x5, 0x7, 0x9, 0x1000, 0xb, 0x3, 0xfbb4, 0x4a, 0x0, 0x7, 0x8, 0x9, 0x0, 0x7, 0x101, 0x0, 0x3ff, 0x5, 0x800, 0x7fffffff, 0x2, 0x1, 0x3, 0x4, 0x101, 0x5, 0x19, 0x6c, 0x4000009, 0x4, 0xceb6, 0x5, 0x7, 0x53c0, 0x6, 0x5, 0x9, 0x1, 0x9, 0x2, 0x7, 0x8, 0x3, 0x3ff, 0x18, 0x6, 0xffffff7b, 0x15ef7157, 0xfffffffc, 0x5, 0x2, 0x7, 0x7fffffff, 0xdb5, 0x1000, 0x800, 0x8, 0x80000000, 0x100, 0x7, 0x1, 0x40, 0x1000, 0x3, 0xfffffffb, 0x5270e9b, 0x5, 0x7f, 0xb, 0x40, 0x9, 0x3, 0x0, 0x9, 0xb, 0x7, 0x1, 0x7, 0x3, 0x9, 0x0, 0xfe23, 0x6, 0x5, 0x8, 0xffffff7f, 0x3, 0xd, 0x80, 0x4, 0x9, 0x4, 0xff, 0x8001, 0x79, 0x40, 0x72e, 0x5c, 0x1, 0xb0, 0x6, 0x8, 0x9, 0x0, 0x80000001, 0x8, 0x4, 0x4, 0x200, 0x1, 0x1, 0x59ac, 0xebd7, 0x7, 0x10008, 0x4, 0x100, 0x0, 0x7, 0x138, 0x1, 0x8, 0xcb18, 0x0, 0xb, 0x5, 0xe489, 0x8, 0x5, 0x6, 0x56, 0x1800000, 0x80000000, 0xc4800000, 0x4251, 0x7fff, 0x8001, 0x6, 0x7, 0x5, 0x3, 0x4, 0x371, 0xaa67, 0x2, 0x0, 0x10, 0x8, 0x5a5, 0x400, 0x0, 0xfffeffff, 0xf, 0x8, 0x9, 0xc2b3, 0x0, 0x7fffffff, 0xfffffffa, 0x9, 0x3ff, 0x6, 0x7, 0x5, 0x7, 0x4, 0xc, 0x9, 0x1, 0x0, 0x10000, 0x4, 0x4, 0x8]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x4, 0x2, 0x6, 0x4d2, 0x0, {0x8, 0x0, 0xa, 0x8, 0x8, 0x9}, {0x4, 0x0, 0xa380, 0x7ff, 0x5, 0x7d487c2b}, 0x9, 0xd303}}]}]}}]}, 0x87c}, 0x1, 0x0, 0x0, 0x10}, 0x8080) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=@RTM_NEWMDB={0x0, 0x54, 0x800, 0x70bd2d, 0x25dfdbfb, {0x7, r3}, [@MDBA_SET_ENTRY={0x0, 0x1, {0x0, 0x0, 0x3, 0x3, {@ip4=@local, 0x86dd}}}, @MDBA_SET_ENTRY={0x0, 0x1, {r5, 0x0, 0x2, 0x1, {@in6_addr=@remote, 0x8edd}}}, @MDBA_SET_ENTRY={0x0, 0x1, {r6, 0x1, 0x1, 0x0, {@in6_addr=@remote}}}, @MDBA_SET_ENTRY={0x0, 0x1, {r7, 0x0, 0x2, 0x3, {@in6_addr=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, @MDBA_SET_ENTRY={0x0, 0x1, {r10, 0x1, 0x2, 0x0, {@ip4=@empty, 0x86dd}}}, @MDBA_SET_ENTRY={0x0, 0x1, {r11, 0x0, 0x1, 0x2, {@ip4=@multicast1}}}, @MDBA_SET_ENTRY={0x0, 0x1, {r12, 0x1, 0x3, 0x0, {@in6_addr=@rand_addr=' \x01\x00', 0x86dd}}}, @MDBA_SET_ENTRY={0x0, 0x1, {0x0, 0x0, 0x0, 0x1, {@in6_addr=@private0, 0x800}}}, @MDBA_SET_ENTRY={0x0, 0x1, {r14, 0x0, 0x3, 0x2, {@in6_addr=@dev={0xfe, 0x80, '\x00', 0x19}, 0x800}}}]}, 0xffffff5e}, 0x1, 0x0, 0x0, 0x4048014}, 0x4004) (async) ioctl$sock_ifreq(0xffffffffffffffff, 0x3c, &(0x7f00000006c0)={'veth1_to_bridge\x00', @ifru_hwaddr=@broadcast}) 548.122284ms ago: executing program 9 (id=1850): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000001040)={'sit0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x0, 0x5fbc6c0e308c2cb3, 0x0, 0xffffffff, {{0x10, 0x4, 0x0, 0x0, 0x40, 0x64, 0x0, 0x0, 0x4, 0x0, @remote, @empty, {[@ssrr={0x89, 0x17, 0xac, [@loopback, @loopback, @broadcast, @multicast1, @multicast1]}, @timestamp_addr={0x44, 0x14, 0x6b, 0x1, 0x9, [{@loopback, 0xa232}, {@private=0xa010100, 0x8f99}]}]}}}}}) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_sctp(0xa, 0x1, 0x84) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000c40), 0x12) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_type(r3, &(0x7f0000000100), 0x2, 0x0) write$cgroup_type(r4, &(0x7f0000000000), 0x9) write$cgroup_type(r4, &(0x7f0000000280), 0x9) 428.738284ms ago: executing program 9 (id=1851): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000480)='./bus\x00', 0x20400049, &(0x7f0000000a40), 0x84, 0x4b2, &(0x7f0000000580)="$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") sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff2}, {0xffff, 0x4}, {0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x40050}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000c00)=ANY=[@ANYBLOB="61128c00000000006113760000000000bf20000000000000070000000f0000003d030100000000009500ffb1000000006926000000000000bf670000000000001500fdff0fff52e84407000009300000240600000ee60000bf050000000000001c63000000000000650700000200000007070000fbffffff1f75000000000000bf54000000000000070400000410f900bd430100000000009500000000000000050000000000000095000000000000001c15a3ce747c693a74b62fd0758b15f09429c09074bc4b2bd2dc480dd7a064b8673e2060162cc43bcba1060999eef9d60bb39d0af449deaa27ea949e8f9000d885deea2783835e29eba8546fc020c1966f8b5f32b095f566edf66b7751828da9dbd5b996b9e8d897e461c01c697671d100000000400036c17fb01dde179c1f2686ee970d6482a2e71a55d6ebe700b3be005e47ef55e0dd81244b18590e000000000000356d82e43407a6d7fa94b21002f06cd247b126b6349ab62d7b07ba0a71a72145edade9941f49f300a8c8913e0e4ea9e4c77740ab3312edee62a4dc2fc85755d387bfa1bc9b49da28724ba9cd79fbee8f97af876d0e30c19555ffdd7d73815b459f4763c6222175c974be2f76fb5f330b015a68587a75c013000000000000000000000003000000000000d6ddc46e58eff8f4fbadfc6a3af8123b7f42407107000cdc9d7820c4eb67cc0f8b5fe9258eeacb5776aebbab3d5c55020000006082778366dadfc36029633e0514cbcee1f3928970bde148c940434f33acd377cbad17673b2d30b6339255c98eba97efb4e9ac1f11be815dd6045592edcbee7f253ec74c7c1313505bd7ff8fd58b3a6569c91dbdef1df585aeaea7346a2a65caee5c85f9eddeeeee3c8a2e523c864ac430eb47cb4d0c8767b9d4125661b5a1a170c04b64da3a99ddb93bf14fae3ca2d1e882375b8dbac83978e136c34f90b33cc0eeb57debcfe26589efc08124d5d62a7e593c9738a50171adf051ea4f07e7e7e770c2016eeacbe8511afffffbea75759a1ea5404f5453c0b5c46c9700808c096cf8cf5223f341cb003841b5cd224c1b381d56afebe9f99a00e3cd94dc0bb7af9e8709db"], 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x193042, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x5d) pwrite64(r3, &(0x7f0000000140)='2', 0xfdef, 0xe7c) io_uring_setup(0x5d06, &(0x7f0000000b00)={0x0, 0x5043, 0x400, 0x6, 0x402c4}) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) read$FUSE(r2, &(0x7f0000000d40)={0x2020}, 0x2020) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write(0xffffffffffffffff, &(0x7f0000000300)="a7a96c5a4d5f4d7cbd4fe2c7925d93e1920dfe465315c81f0d51131cf90d056c26dbfbb61532bc6dbee9e4688070d97f50f7d9a557f6682a0000000000fd9f53389766473c5700007f46eb3ef687243eb6d40cdfdbe53e4c5245f8b980a9a6abe2a2372a360060ac10cbd80f18f7992a2b19da94b50e0500", 0x78) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet6(0xa, 0x2, 0x0) close(r4) r5 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x800, 0x0, 0x3, 0x1, 0x8}, 0x20) setsockopt$inet6_int(r4, 0x29, 0x1000000000021, &(0x7f0000000040)=0x2005, 0x4) sendmsg$inet6(r5, &(0x7f0000000140)={&(0x7f0000000100)={0xa, 0x4e60, 0x80000, @empty, 0xfffffffb}, 0x1c, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="140000000000000029001e1ffc984744e822f064e7000034"], 0x18}, 0x3400c8d4) move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x200000, &(0x7f0000000380)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0xad57}}, {@discard}, {@bsdgroups}, {@norecovery}, {@noload}, {@grpjquota}, {@data_journal}, {@acl}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x343}}]}, 0xfd, 0x574, &(0x7f0000000cc0)="$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") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000780)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r6, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r7, &(0x7f0000000100)={0xa, 0x4e22, 0x0, @rand_addr, 0x5}, 0x1c) chdir(&(0x7f00000001c0)='./file0\x00') 428.563084ms ago: executing program 8 (id=1852): syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) (async) capset(&(0x7f0000a31000)={0x19980330}, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1ff, 0x80000001, 0x6}) (async) capget(&(0x7f0000000000), &(0x7f00000000c0)={0x7, 0x401, 0x4, 0x80000000, 0x10000, 0x8}) (async) openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/keys\x00', 0x41, 0x0) 325.855428ms ago: executing program 9 (id=1853): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000015c00000000000000000400000a20000000000a010400000000000000000500000a0900010073797a30000000005c000000030a010400000000000000000500000a0900010073797a30000000000900030073797a30000000002800048008000140000000000800024000000001140003006e657464657673696d3000000000000008000a4000000002b0000000060a010400000000000000000500000a0900010073797a30000000000900020073797a30000000008400048024000180090001006d65746100000000140002800800014000000001080002"], 0x154}}, 0x4080) 312.780058ms ago: executing program 4 (id=1854): ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000008c0)={'team0\x00', 0x0}) (async, rerun: 32) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000009c0)={'sit0\x00', &(0x7f0000000900)={'erspan0\x00', 0x0, 0x40, 0x20, 0x8, 0xffffffff, {{0xf, 0x4, 0x2, 0x38, 0x3c, 0x66, 0x0, 0x9d, 0x4, 0x0, @empty, @loopback, {[@generic={0x89, 0x3, 'O'}, @lsrr={0x83, 0x23, 0x4c, [@multicast1, @private=0xa010100, @private=0xa010100, @multicast1, @loopback, @loopback, @dev={0xac, 0x14, 0x14, 0x1}, @private=0xa010100]}]}}}}}) (async, rerun: 32) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000a80)={'sit0\x00', &(0x7f0000000a00)={'syztnl2\x00', 0x0, 0x1, 0x40, 0x5, 0x9, {{0xb, 0x4, 0x2, 0x1c, 0x2c, 0x66, 0x0, 0x6, 0x29, 0x0, @multicast1, @broadcast, {[@rr={0x7, 0x17, 0x33, [@remote, @loopback, @empty, @multicast1, @multicast1]}]}}}}}) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f0000002780)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000002740)={&(0x7f0000001f40)={0x7d8, 0x0, 0x10, 0x70bd26, 0x25dfdbfc, {}, [{{0x8}, {0x170, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x401, 0xd, 0x5, 0xfffffff7}]}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xffffffff}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x1ff}}, {0x8}}}]}}, {{0x8}, {0x238, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xda}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r2}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}]}}, {{0x8}, {0x74, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xff}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x100}}, {0x8}}}]}}, {{0x8}, {0x1b0, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}, {{0x8, 0x1, r0}, {0x184, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r1}}}, {0x5c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x2c, 0x4, [{0x9, 0xa, 0x8, 0xe}, {0x5, 0x40, 0x2, 0x7}, {0x819d, 0x5, 0x2, 0x5}, {0x80, 0x8, 0x8, 0xfffffc00}, {0xfff7, 0xb, 0x6, 0x7}]}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}]}}]}, 0x7d8}, 0x1, 0x0, 0x0, 0x4000}, 0x10) (async) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='loginuid\x00') preadv(r3, &(0x7f00000003c0), 0x0, 0x0, 0x0) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x48, 0x48, 0x2, [@func_proto={0x0, 0x0, 0x0, 0xd, 0x6000000}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x3, 0x1ff}}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x4, 0x7fffffff}}, @typedef={0x0, 0x0, 0x0, 0x8, 0x5}]}}, &(0x7f0000000f40)=""/4096, 0x62, 0x1000, 0x1}, 0x28) (async) setns(0xc9, 0x0) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x77f}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (rerun: 64) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000540)={'wlan0\x00'}) (async) sendmsg$NL80211_CMD_SET_MCAST_RATE(r5, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r7, &(0x7f00000003c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x70, r6, 0x100, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0xd50b, 0x21}}}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0xabb0}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x1}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xe}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x7e}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x1e68}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x9}, @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x70}, 0x1, 0x0, 0x0, 0x4004000}, 0x20000800) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) ioctl$BTRFS_IOC_ADD_DEV(0xffffffffffffffff, 0x8008b705, 0x0) (async) sendmsg$NL80211_CMD_FRAME(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000001c0)={0x40, r9, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_FRAME={0x22, 0x33, @action={{{}, {0x8}, @broadcast, @device_a, @from_mac=@broadcast, {0x0, 0x400}}, @ext_ch_sw={0x4, 0x4, {{0x0, 0x3, 0xe, 0xf9}, @void}}}}]}, 0x40}, 0x1, 0x0, 0x0, 0xc0}, 0x0) (async) r11 = openat$procfs(0xffffffffffffff9c, &(0x7f00000006c0)='/proc/tty/drivers\x00', 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x40) (async, rerun: 32) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, 0x0}, 0x0) (rerun: 32) sendmmsg(0xffffffffffffffff, &(0x7f0000002ac0)=[{{&(0x7f0000000400)=@isdn={0x22, 0x3, 0x3, 0x1, 0xff}, 0x80, &(0x7f00000004c0), 0x2c, &(0x7f0000000ac0)=[{0x100, 0x67, 0x1, "33caa6c234e6b7f6d69434ccef9371047e861d0aa92f40113855c3132ae7a253dcaabe2f12380ff661c86a689c1a4f21c7cab2cbb79515665ddb48c7ba61a63fd01fc3637522fc1e7f81520b648149bc07933017da7da1ef6d7526d9e6a56d7ded2ef8bbff75bbfea56ccc805ef9bae1bc8007d33a0b88aa0e4b3e18d65a70cbef4024ba408e0a7839b79b31aa9cf99d021695e1eeff1327908ddc29aae8f0710ba676c3a246fee5e872c483397c20ff40536f846e1347c501651677b99e4016a0df455c02dd75a025da612c8c3249663d5d87339afd2131e869a83e7bd49f939fd85959298806f49aeb2b3c5307"}, {0x40, 0x103, 0x800000, "2f0ec7c1f79691c49f7542e7f81a0d8bc199f79f800328409c53e8c62470130cfbf161090b1e43bcfeb0dda6"}, {0x20, 0x11, 0x4, "03dc4d25e014851bb366c0e09cd696"}, {0x70, 0x102, 0x800, "51c22d12605c566edd4210ec9a7d319f22999589285c68b71462a602bf30aa24de48004365caf98c18f5dcdb3cf9eb8d560dbfa031b7e82cccc1827f3967087e0bf45fecdc9523130dee1245d4150d49e0ea403a6955e938ab"}], 0x1d0}}, {{&(0x7f0000000cc0)=@pptp={0x18, 0x2, {0x2, @private=0xa010100}}, 0x80, &(0x7f0000002940)=[{&(0x7f0000000d40)="40df37dd8720824678c0160363d79f84a227613e6482e076e5cb785832ffe325987c0b1e70e14adbd56338e26605e509b5376add7f07ecf56e33ce9b1bf0b90fc53ba45d8f22d4cad946233281e71e683fe8100acde5c4ddc23cfbd187b01349e7127b4a7a3921ac638f5f81078d8328baf842d76d6135ac1d3723aea5db732366af28dc5563ff5a33629f681ba624138b0134ddc04f3d7415a22ef3463ed19644ad4c3ff6f8b822913d25d318a520666dc51026171ca7320598f7259afbb8d35a92c73225aa0294dc329c0f56a445a49606dc78d58a53", 0xd7}, {&(0x7f0000000e40)="41331f5ec801216a244bc57eaf3f0b46102b6d9497df7a8f939cf2d36a813067da9a6cfeb9747d2fb9ff9a2c3bb3151fb19e92ff34c9363999189a082755818449c012ae15b75bfd982d2da5a69bb673d6f091e99a14cf3476a92186772bc9d5765f73f3e10eb49e27dbe8257daf98b431b4848db43c48425ba39de291", 0x7d}, {&(0x7f00000027c0)="8de933e6fd9522de2926abac2a21df9fb19cf662113fd5195be288d7c1544761b1906a7135c1a48f98d57646bb8ed6a53d18499007af776d29a3bbc553f107613474eb47d533da4cf8ca6e85eeb3b7fc9b4800d2006a8de42d4f6736950c0a576296e725a111c877d02e69d31a5810aca1eacf5bcde3309f10d63502f82775f1b7b7c2bc6526406c9c90cea137e7f0f9046e935163685a732d525e25db06aee88821170812c97e9c2828261b30d33845c9818f2c2e63985c78ba4300f7353f2d158d79cef920568d4759b8cbbf0f814e46cc404c151e3667f1f8190a3bcaaec461e83666ffa85eb01fb6e38a", 0xec}, {&(0x7f00000028c0)="74d5fff30e8a6a5a364b261ee03a28a538a1c41ccd65f41b7f1fe2c320290a194ff0f1c0d36ba0bd841c8ea88b2210ec58f7e49bd987a9bce137ccc4d3b296b77f4417964f7aebf80e6c17dc633c29c2a4405808029fcceb1bcbb8c68f902d372b93b55b", 0x64}], 0x4, &(0x7f0000002980)=[{0x38, 0x103, 0x6, "f8141be77c092ea88988e3f89c6ad969246a4d5c0a0a4e3e909f80378f345a46c642"}, {0x40, 0x117, 0x8, "8a155ad35ee7d0f02775495ddf0b164d8a1fec4bad64e8a715a6b2234b17476c43d3bca1c7386f808e8ec340"}, {0xa0, 0x115, 0xffff, "f65f8e9d644594d467db3c6c32bf73902633051ce30cc82e8dc381652a084d37895bb2b776c94a4610bfefcf7dcd457937f24c128a4e0b0cc73f0f42feac8208991435e5535a934f4856d733c450969b2eb597b9eaeb76ab8e6210029fd68bc69e56b14a334f26d983c24889cd35ee57de328a58533bff7b6c2edeb70a775d2e8920e9553d5a12d4de"}], 0x118}}], 0x2, 0x4008004) r12 = getpid() sched_setscheduler(r12, 0x2, &(0x7f0000000200)=0x7) (async) syz_open_procfs$pagemap(r12, 0x0) (async) preadv2(r11, 0x0, 0x0, 0xffffffff, 0x6, 0x2) 213.013075ms ago: executing program 8 (id=1855): openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x149040, 0x16f) fanotify_init(0x8, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005000000000000008000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003f80000850000008600000018010000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff3f}, 0x48) 201.18666ms ago: executing program 9 (id=1856): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000600)=ANY=[@ANYBLOB="2c0000000301010200000000000400000100000408000840000000010802154000"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8080) 161.325506ms ago: executing program 8 (id=1857): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000980), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./debug\x00', &(0x7f0000000100)='debugfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./debug/netdevsim/netdevsim0/max_vfs\x00', 0x1, 0x0) lseek(r1, 0x4, 0x1) write(r1, 0x0, 0x2b) ioctl$FBIOBLANK(r0, 0x4611, 0x4) ioctl$FBIO_WAITFORVSYNC(r0, 0x40044620, 0x0) 0s ago: executing program 8 (id=1858): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x1, 0x6) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000100)=@bpf_lsm={0x1d, 0x3, &(0x7f00000001c0)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xa0) bind(r0, &(0x7f0000000300)=@in={0x2, 0x4908, @loopback}, 0x10) listen(r0, 0x5) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000000)={0x6, @loopback, 0x15, 0x0, 'sed\x00', 0x1d}, 0x2c) r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$llc_int(r1, 0x10c, 0x1, &(0x7f0000000040)=0x200, 0x4) capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7}) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000200)={@cgroup, 0x13, 0x0, 0x50d7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) socket(0x2, 0x3, 0xff) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/raw\x00') pread64(r2, &(0x7f0000000080)=""/59, 0x63, 0x73) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$gtp(&(0x7f0000000000), r3) r4 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r4) getsockname$packet(r4, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x3, 0x4, 0x4, 0x10, 0x6080, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, 0x0) r8 = syz_open_dev$video(&(0x7f00000004c0), 0x81, 0xa082) r9 = dup(r8) r10 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r9}, 0x2c, {'wfdno', 0x3d, r10}}) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0xe, 0x8, &(0x7f0000000300)=@raw=[@map_fd={0x18, 0x2, 0x1, 0x0, r6}, @generic={0xb7, 0x3, 0x0, 0x0, 0x8}, @generic={0xbf, 0x4, 0xa}, @generic={0x7, 0x4, 0x0, 0x0, 0xfffffff8}, @generic={0xb7, 0x5, 0x0, 0x0, 0x8}, @generic={0x85, 0x0, 0x0, 0x0, 0x19}, @generic={0x95}], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="3800000010003704000080000000000000000000", @ANYRES32=r5, @ANYBLOB="c3040500000000001800128008000100677470000c00028008000100", @ANYRES32], 0x38}, 0x1, 0x0, 0x0, 0x2000c014}, 0x0) kernel console output (not intermixed with test programs): d [ 189.849911][T10351] Injecting memory failure for pfn 0x15912b at process virtual address 0x20b8b000 [ 189.849934][T10351] Memory failure: 0x15912b: recovery action for dirty LRU page: Recovered [ 189.849941][T10351] Injecting memory failure for pfn 0x145f05 at process virtual address 0x20b8c000 [ 189.849964][T10351] Memory failure: 0x145f05: recovery action for dirty LRU page: Recovered [ 189.849971][T10351] Injecting memory failure for pfn 0x1479ec at process virtual address 0x20b8d000 [ 189.849993][T10351] Memory failure: 0x1479ec: recovery action for dirty LRU page: Recovered [ 189.850001][T10351] Injecting memory failure for pfn 0x159086 at process virtual address 0x20b8e000 [ 189.850023][T10351] Memory failure: 0x159086: recovery action for dirty LRU page: Recovered [ 189.850030][T10351] Injecting memory failure for pfn 0x159098 at process virtual address 0x20b8f000 [ 189.850053][T10351] Memory failure: 0x159098: recovery action for dirty LRU page: Recovered [ 189.850060][T10351] Injecting memory failure for pfn 0x159fc2 at process virtual address 0x20b90000 [ 189.850083][T10351] Memory failure: 0x159fc2: recovery action for dirty LRU page: Recovered [ 189.850090][T10351] Injecting memory failure for pfn 0x15908a at process virtual address 0x20b91000 [ 189.850112][T10351] Memory failure: 0x15908a: recovery action for dirty LRU page: Recovered [ 189.850120][T10351] Injecting memory failure for pfn 0x159091 at process virtual address 0x20b92000 [ 189.850142][T10351] Memory failure: 0x159091: recovery action for dirty LRU page: Recovered [ 189.850149][T10351] Injecting memory failure for pfn 0x159fc0 at process virtual address 0x20b93000 [ 189.850172][T10351] Memory failure: 0x159fc0: recovery action for dirty LRU page: Recovered [ 189.850180][T10351] Injecting memory failure for pfn 0x15909a at process virtual address 0x20b94000 [ 189.850202][T10351] Memory failure: 0x15909a: recovery action for dirty LRU page: Recovered [ 189.850210][T10351] Injecting memory failure for pfn 0x150ab4 at process virtual address 0x20b95000 [ 189.850232][T10351] Memory failure: 0x150ab4: recovery action for dirty LRU page: Recovered [ 189.850239][T10351] Injecting memory failure for pfn 0x15909f at process virtual address 0x20b96000 [ 189.850263][T10351] Memory failure: 0x15909f: recovery action for dirty LRU page: Recovered [ 189.850270][T10351] Injecting memory failure for pfn 0x158db5 at process virtual address 0x20b97000 [ 189.850293][T10351] Memory failure: 0x158db5: recovery action for dirty LRU page: Recovered [ 189.850300][T10351] Injecting memory failure for pfn 0x15042c at process virtual address 0x20b98000 [ 189.850322][T10351] Memory failure: 0x15042c: recovery action for dirty LRU page: Recovered [ 189.850329][T10351] Injecting memory failure for pfn 0x1588f2 at process virtual address 0x20b99000 [ 189.850352][T10351] Memory failure: 0x1588f2: recovery action for dirty LRU page: Recovered [ 189.850359][T10351] Injecting memory failure for pfn 0x1588e6 at process virtual address 0x20b9a000 [ 189.850382][T10351] Memory failure: 0x1588e6: recovery action for dirty LRU page: Recovered [ 189.850389][T10351] Injecting memory failure for pfn 0x150475 at process virtual address 0x20b9b000 [ 189.850411][T10351] Memory failure: 0x150475: recovery action for dirty LRU page: Recovered [ 189.850418][T10351] Injecting memory failure for pfn 0x15046f at process virtual address 0x20b9c000 [ 189.850441][T10351] Memory failure: 0x15046f: recovery action for dirty LRU page: Recovered [ 189.850448][T10351] Injecting memory failure for pfn 0x14b312 at process virtual address 0x20b9d000 [ 189.850471][T10351] Memory failure: 0x14b312: recovery action for dirty LRU page: Recovered [ 189.850478][T10351] Injecting memory failure for pfn 0x14e218 at process virtual address 0x20b9e000 [ 189.850501][T10351] Memory failure: 0x14e218: recovery action for dirty LRU page: Recovered [ 189.850508][T10351] Injecting memory failure for pfn 0x1588d7 at process virtual address 0x20b9f000 [ 189.850531][T10351] Memory failure: 0x1588d7: recovery action for dirty LRU page: Recovered [ 189.850538][T10351] Injecting memory failure for pfn 0x1588fd at process virtual address 0x20ba0000 [ 189.850561][T10351] Memory failure: 0x1588fd: recovery action for dirty LRU page: Recovered [ 189.850568][T10351] Injecting memory failure for pfn 0x1588c1 at process virtual address 0x20ba1000 [ 189.850590][T10351] Memory failure: 0x1588c1: recovery action for dirty LRU page: Recovered [ 189.850597][T10351] Injecting memory failure for pfn 0x15909d at process virtual address 0x20ba2000 [ 189.850620][T10351] Memory failure: 0x15909d: recovery action for dirty LRU page: Recovered [ 189.850627][T10351] Injecting memory failure for pfn 0x151920 at process virtual address 0x20ba3000 [ 189.850650][T10351] Memory failure: 0x151920: recovery action for dirty LRU page: Recovered [ 189.850657][T10351] Injecting memory failure for pfn 0x14c5fd at process virtual address 0x20ba4000 [ 189.850682][T10351] Memory failure: 0x14c5fd: recovery action for dirty LRU page: Recovered [ 189.850689][T10351] Injecting memory failure for pfn 0x1589b2 at process virtual address 0x20ba5000 [ 189.850712][T10351] Memory failure: 0x1589b2: recovery action for dirty LRU page: Recovered [ 189.850719][T10351] Injecting memory failure for pfn 0x156fed at process virtual address 0x20ba6000 [ 189.850741][T10351] Memory failure: 0x156fed: recovery action for dirty LRU page: Recovered [ 189.850748][T10351] Injecting memory failure for pfn 0x157753 at process virtual address 0x20ba7000 [ 189.850771][T10351] Memory failure: 0x157753: recovery action for dirty LRU page: Recovered [ 189.850778][T10351] Injecting memory failure for pfn 0x14bb93 at process virtual address 0x20ba8000 [ 189.850801][T10351] Memory failure: 0x14bb93: recovery action for dirty LRU page: Recovered [ 189.850808][T10351] Injecting memory failure for pfn 0x1573ec at process virtual address 0x20ba9000 [ 189.850833][T10351] Memory failure: 0x1573ec: recovery action for dirty LRU page: Recovered [ 189.850840][T10351] Injecting memory failure for pfn 0x1573a1 at process virtual address 0x20baa000 [ 189.850863][T10351] Memory failure: 0x1573a1: recovery action for dirty LRU page: Recovered [ 189.850870][T10351] Injecting memory failure for pfn 0x1589aa at process virtual address 0x20bab000 [ 189.850892][T10351] Memory failure: 0x1589aa: recovery action for dirty LRU page: Recovered [ 189.850899][T10351] Injecting memory failure for pfn 0x156ff4 at process virtual address 0x20bac000 [ 189.850922][T10351] Memory failure: 0x156ff4: recovery action for dirty LRU page: Recovered [ 189.850929][T10351] Injecting memory failure for pfn 0x14d7ee at process virtual address 0x20bad000 [ 189.850952][T10351] Memory failure: 0x14d7ee: recovery action for dirty LRU page: Recovered [ 189.850959][T10351] Injecting memory failure for pfn 0x1578d6 at process virtual address 0x20bae000 [ 189.850982][T10351] Memory failure: 0x1578d6: recovery action for dirty LRU page: Recovered [ 189.850989][T10351] Injecting memory failure for pfn 0x1575ad at process virtual address 0x20baf000 [ 189.851012][T10351] Memory failure: 0x1575ad: recovery action for dirty LRU page: Recovered [ 189.851019][T10351] Injecting memory failure for pfn 0x14bb0c at process virtual address 0x20bb0000 [ 189.851042][T10351] Memory failure: 0x14bb0c: recovery action for dirty LRU page: Recovered [ 189.851049][T10351] Injecting memory failure for pfn 0x1589cb at process virtual address 0x20bb1000 [ 189.851072][T10351] Memory failure: 0x1589cb: recovery action for dirty LRU page: Recovered [ 189.851079][T10351] Injecting memory failure for pfn 0x152259 at process virtual address 0x20bb2000 [ 189.851101][T10351] Memory failure: 0x152259: recovery action for dirty LRU page: Recovered [ 189.851108][T10351] Injecting memory failure for pfn 0x15787b at process virtual address 0x20bb3000 [ 189.851131][T10351] Memory failure: 0x15787b: recovery action for dirty LRU page: Recovered [ 189.851138][T10351] Injecting memory failure for pfn 0x1573bd at process virtual address 0x20bb4000 [ 189.851161][T10351] Memory failure: 0x1573bd: recovery action for dirty LRU page: Recovered [ 189.851168][T10351] Injecting memory failure for pfn 0x149857 at process virtual address 0x20bb5000 [ 189.851191][T10351] Memory failure: 0x149857: recovery action for dirty LRU page: Recovered [ 189.851198][T10351] Injecting memory failure for pfn 0x145e68 at process virtual address 0x20bb6000 [ 189.851221][T10351] Memory failure: 0x145e68: recovery action for dirty LRU page: Recovered [ 189.851228][T10351] Injecting memory failure for pfn 0x1575cb at process virtual address 0x20bb7000 [ 189.851251][T10351] Memory failure: 0x1575cb: recovery action for dirty LRU page: Recovered [ 189.851258][T10351] Injecting memory failure for pfn 0x158838 at process virtual address 0x20bb8000 [ 189.851280][T10351] Memory failure: 0x158838: recovery action for dirty LRU page: Recovered [ 189.851287][T10351] Injecting memory failure for pfn 0x12281d at process virtual address 0x20bb9000 [ 189.851310][T10351] Memory failure: 0x12281d: recovery action for dirty LRU page: Recovered [ 189.851317][T10351] Injecting memory failure for pfn 0x146216 at process virtual address 0x20bba000 [ 189.851340][T10351] Memory failure: 0x146216: recovery action for dirty LRU page: Recovered [ 189.851347][T10351] Injecting memory failure for pfn 0x14b017 at process virtual address 0x20bbb000 [ 189.851370][T10351] Memory failure: 0x14b017: recovery action for dirty LRU page: Recovered [ 189.851377][T10351] Injecting memory failure for pfn 0x14a0c2 at process virtual address 0x20bbc000 [ 189.851400][T10351] Memory failure: 0x14a0c2: recovery action for dirty LRU page: Recovered [ 189.851407][T10351] Injecting memory failure for pfn 0x156e41 at process virtual address 0x20bbd000 [ 189.851429][T10351] Memory failure: 0x156e41: recovery action for dirty LRU page: Recovered [ 189.851436][T10351] Injecting memory failure for pfn 0x1567cc at process virtual address 0x20bbe000 [ 189.851460][T10351] Memory failure: 0x1567cc: recovery action for dirty LRU page: Recovered [ 189.851467][T10351] Injecting memory failure for pfn 0x150b88 at process virtual address 0x20bbf000 [ 189.851490][T10351] Memory failure: 0x150b88: recovery action for dirty LRU page: Recovered [ 189.851497][T10351] Injecting memory failure for pfn 0x150b8b at process virtual address 0x20bc0000 [ 189.851519][T10351] Memory failure: 0x150b8b: recovery action for dirty LRU page: Recovered [ 189.851527][T10351] Injecting memory failure for pfn 0x1570e4 at process virtual address 0x20bc1000 [ 189.851550][T10351] Memory failure: 0x1570e4: recovery action for dirty LRU page: Recovered [ 189.851557][T10351] Injecting memory failure for pfn 0x1570eb at process virtual address 0x20bc2000 [ 189.851580][T10351] Memory failure: 0x1570eb: recovery action for dirty LRU page: Recovered [ 189.851587][T10351] Injecting memory failure for pfn 0x15709c at process virtual address 0x20bc3000 [ 189.851611][T10351] Memory failure: 0x15709c: recovery action for dirty LRU page: Recovered [ 189.851618][T10351] Injecting memory failure for pfn 0x156e39 at process virtual address 0x20bc4000 [ 189.851642][T10351] Memory failure: 0x156e39: recovery action for dirty LRU page: Recovered [ 189.851649][T10351] Injecting memory failure for pfn 0x145c62 at process virtual address 0x20bc5000 [ 189.851676][T10351] Memory failure: 0x145c62: recovery action for dirty LRU page: Recovered [ 189.851683][T10351] Injecting memory failure for pfn 0x14b52c at process virtual address 0x20bc6000 [ 189.851709][T10351] Memory failure: 0x14b52c: recovery action for dirty LRU page: Recovered [ 189.851716][T10351] Injecting memory failure for pfn 0x1567e7 at process virtual address 0x20bc7000 [ 189.851739][T10351] Memory failure: 0x1567e7: recovery action for dirty LRU page: Recovered [ 189.851746][T10351] Injecting memory failure for pfn 0x14a0ba at process virtual address 0x20bc8000 [ 189.851769][T10351] Memory failure: 0x14a0ba: recovery action for dirty LRU page: Recovered [ 189.851776][T10351] Injecting memory failure for pfn 0x14a0bf at process virtual address 0x20bc9000 [ 189.851799][T10351] Memory failure: 0x14a0bf: recovery action for dirty LRU page: Recovered [ 189.851806][T10351] Injecting memory failure for pfn 0x15775a at process virtual address 0x20bca000 [ 189.851831][T10351] Memory failure: 0x15775a: recovery action for dirty LRU page: Recovered [ 189.851838][T10351] Injecting memory failure for pfn 0x156fe5 at process virtual address 0x20bcb000 [ 189.851862][T10351] Memory failure: 0x156fe5: recovery action for dirty LRU page: Recovered [ 189.851869][T10351] Injecting memory failure for pfn 0x158d47 at process virtual address 0x20bcc000 [ 189.851892][T10351] Memory failure: 0x158d47: recovery action for dirty LRU page: Recovered [ 189.851899][T10351] Injecting memory failure for pfn 0x145c60 at process virtual address 0x20bcd000 [ 189.851922][T10351] Memory failure: 0x145c60: recovery action for dirty LRU page: Recovered [ 189.851929][T10351] Injecting memory failure for pfn 0x156927 at process virtual address 0x20bce000 [ 189.851951][T10351] Memory failure: 0x156927: recovery action for dirty LRU page: Recovered [ 189.851958][T10351] Injecting memory failure for pfn 0x14d7ed at process virtual address 0x20bcf000 [ 189.851981][T10351] Memory failure: 0x14d7ed: recovery action for dirty LRU page: Recovered [ 189.851988][T10351] Injecting memory failure for pfn 0x156ee0 at process virtual address 0x20bd0000 [ 189.852011][T10351] Memory failure: 0x156ee0: recovery action for dirty LRU page: Recovered [ 189.852018][T10351] Injecting memory failure for pfn 0x14c5ea at process virtual address 0x20bd1000 [ 189.852041][T10351] Memory failure: 0x14c5ea: recovery action for dirty LRU page: Recovered [ 189.852048][T10351] Injecting memory failure for pfn 0x147950 at process virtual address 0x20bd2000 [ 189.852070][T10351] Memory failure: 0x147950: recovery action for dirty LRU page: Recovered [ 189.852077][T10351] Injecting memory failure for pfn 0x15225b at process virtual address 0x20bd3000 [ 189.852101][T10351] Memory failure: 0x15225b: recovery action for dirty LRU page: Recovered [ 189.852108][T10351] Injecting memory failure for pfn 0x122819 at process virtual address 0x20bd4000 [ 189.852130][T10351] Memory failure: 0x122819: recovery action for dirty LRU page: Recovered [ 189.852137][T10351] Injecting memory failure for pfn 0x1575ab at process virtual address 0x20bd5000 [ 189.852160][T10351] Memory failure: 0x1575ab: recovery action for dirty LRU page: Recovered [ 189.852167][T10351] Injecting memory failure for pfn 0x150a58 at process virtual address 0x20bd6000 [ 189.852190][T10351] Memory failure: 0x150a58: recovery action for dirty LRU page: Recovered [ 189.852197][T10351] Injecting memory failure for pfn 0x158993 at process virtual address 0x20bd7000 [ 189.852220][T10351] Memory failure: 0x158993: recovery action for dirty LRU page: Recovered [ 189.852227][T10351] Injecting memory failure for pfn 0x158d7c at process virtual address 0x20bd8000 [ 189.852250][T10351] Memory failure: 0x158d7c: recovery action for dirty LRU page: Recovered [ 189.852257][T10351] Injecting memory failure for pfn 0x157765 at process virtual address 0x20bd9000 [ 189.852280][T10351] Memory failure: 0x157765: recovery action for dirty LRU page: Recovered [ 189.852287][T10351] Injecting memory failure for pfn 0x14bb95 at process virtual address 0x20bda000 [ 189.852310][T10351] Memory failure: 0x14bb95: recovery action for dirty LRU page: Recovered [ 189.852317][T10351] Injecting memory failure for pfn 0x14eaf9 at process virtual address 0x20bdb000 [ 189.852339][T10351] Memory failure: 0x14eaf9: recovery action for dirty LRU page: Recovered [ 189.852346][T10351] Injecting memory failure for pfn 0x14cd67 at process virtual address 0x20bdc000 [ 189.852369][T10351] Memory failure: 0x14cd67: recovery action for dirty LRU page: Recovered [ 189.852376][T10351] Injecting memory failure for pfn 0x147e01 at process virtual address 0x20bdd000 [ 189.852399][T10351] Memory failure: 0x147e01: recovery action for dirty LRU page: Recovered [ 189.852406][T10351] Injecting memory failure for pfn 0x153b71 at process virtual address 0x20bde000 [ 189.852429][T10351] Memory failure: 0x153b71: recovery action for dirty LRU page: Recovered [ 189.852436][T10351] Injecting memory failure for pfn 0x1573f0 at process virtual address 0x20bdf000 [ 189.852459][T10351] Memory failure: 0x1573f0: recovery action for dirty LRU page: Recovered [ 189.852466][T10351] Injecting memory failure for pfn 0x147953 at process virtual address 0x20be0000 [ 189.852491][T10351] Memory failure: 0x147953: recovery action for dirty LRU page: Recovered [ 189.852498][T10351] Injecting memory failure for pfn 0x147954 at process virtual address 0x20be1000 [ 189.852524][T10351] Memory failure: 0x147954: recovery action for dirty LRU page: Recovered [ 189.852531][T10351] Injecting memory failure for pfn 0x15224e at process virtual address 0x20be2000 [ 189.852553][T10351] Memory failure: 0x15224e: recovery action for dirty LRU page: Recovered [ 189.852560][T10351] Injecting memory failure for pfn 0x15700c at process virtual address 0x20be3000 [ 189.852583][T10351] Memory failure: 0x15700c: recovery action for dirty LRU page: Recovered [ 189.852590][T10351] Injecting memory failure for pfn 0x1573a9 at process virtual address 0x20be4000 [ 189.852613][T10351] Memory failure: 0x1573a9: recovery action for dirty LRU page: Recovered [ 189.852620][T10351] Injecting memory failure for pfn 0x156a0f at process virtual address 0x20be5000 [ 189.852642][T10351] Memory failure: 0x156a0f: recovery action for dirty LRU page: Recovered [ 189.852649][T10351] Injecting memory failure for pfn 0x14c5f0 at process virtual address 0x20be6000 [ 189.852672][T10351] Memory failure: 0x14c5f0: recovery action for dirty LRU page: Recovered [ 189.852680][T10351] Injecting memory failure for pfn 0x152250 at process virtual address 0x20be7000 [ 189.852702][T10351] Memory failure: 0x152250: recovery action for dirty LRU page: Recovered [ 189.852709][T10351] Injecting memory failure for pfn 0x15049c at process virtual address 0x20be8000 [ 189.852732][T10351] Memory failure: 0x15049c: recovery action for dirty LRU page: Recovered [ 189.852739][T10351] Injecting memory failure for pfn 0x1589c4 at process virtual address 0x20be9000 [ 189.852762][T10351] Memory failure: 0x1589c4: recovery action for dirty LRU page: Recovered [ 189.852769][T10351] Injecting memory failure for pfn 0x1575e4 at process virtual address 0x20bea000 [ 189.852792][T10351] Memory failure: 0x1575e4: recovery action for dirty LRU page: Recovered [ 189.852799][T10351] Injecting memory failure for pfn 0x149842 at process virtual address 0x20beb000 [ 189.852821][T10351] Memory failure: 0x149842: recovery action for dirty LRU page: Recovered [ 189.852831][T10351] Injecting memory failure for pfn 0x1589d6 at process virtual address 0x20bec000 [ 189.852855][T10351] Memory failure: 0x1589d6: recovery action for dirty LRU page: Recovered [ 189.852862][T10351] Injecting memory failure for pfn 0x1589d4 at process virtual address 0x20bed000 [ 189.852885][T10351] Memory failure: 0x1589d4: recovery action for dirty LRU page: Recovered [ 189.852892][T10351] Injecting memory failure for pfn 0x146e8f at process virtual address 0x20bee000 [ 189.852915][T10351] Memory failure: 0x146e8f: recovery action for dirty LRU page: Recovered [ 189.852922][T10351] Injecting memory failure for pfn 0x15700e at process virtual address 0x20bef000 [ 189.852945][T10351] Memory failure: 0x15700e: recovery action for dirty LRU page: Recovered [ 189.852952][T10351] Injecting memory failure for pfn 0x157331 at process virtual address 0x20bf0000 [ 189.852974][T10351] Memory failure: 0x157331: recovery action for dirty LRU page: Recovered [ 189.852981][T10351] Injecting memory failure for pfn 0x157893 at process virtual address 0x20bf1000 [ 189.853004][T10351] Memory failure: 0x157893: recovery action for dirty LRU page: Recovered [ 189.853011][T10351] Injecting memory failure for pfn 0x1575c9 at process virtual address 0x20bf2000 [ 189.853033][T10351] Memory failure: 0x1575c9: recovery action for dirty LRU page: Recovered [ 189.853040][T10351] Injecting memory failure for pfn 0x157018 at process virtual address 0x20bf3000 [ 189.853063][T10351] Memory failure: 0x157018: recovery action for dirty LRU page: Recovered [ 189.853070][T10351] Injecting memory failure for pfn 0x157027 at process virtual address 0x20bf4000 [ 189.853092][T10351] Memory failure: 0x157027: recovery action for dirty LRU page: Recovered [ 189.853099][T10351] Injecting memory failure for pfn 0x149488 at process virtual address 0x20bf5000 [ 189.853122][T10351] Memory failure: 0x149488: recovery action for dirty LRU page: Recovered [ 189.853129][T10351] Injecting memory failure for pfn 0x14eb37 at process virtual address 0x20bf6000 [ 189.853151][T10351] Memory failure: 0x14eb37: recovery action for dirty LRU page: Recovered [ 189.853158][T10351] Injecting memory failure for pfn 0x158c3f at process virtual address 0x20bf7000 [ 189.853181][T10351] Memory failure: 0x158c3f: recovery action for dirty LRU page: Recovered [ 189.853188][T10351] Injecting memory failure for pfn 0x156d94 at process virtual address 0x20bf8000 [ 189.853211][T10351] Memory failure: 0x156d94: recovery action for dirty LRU page: Recovered [ 189.853218][T10351] Injecting memory failure for pfn 0x15b0e8 at process virtual address 0x20bf9000 [ 189.853240][T10351] Memory failure: 0x15b0e8: recovery action for dirty LRU page: Recovered [ 189.853247][T10351] Injecting memory failure for pfn 0x15c178 at process virtual address 0x20bfa000 [ 189.853270][T10351] Memory failure: 0x15c178: recovery action for dirty LRU page: Recovered [ 189.853277][T10351] Injecting memory failure for pfn 0x12286a at process virtual address 0x20bfb000 [ 189.853300][T10351] Memory failure: 0x12286a: recovery action for dirty LRU page: Recovered [ 189.853307][T10351] Injecting memory failure for pfn 0x156265 at process virtual address 0x20bfc000 [ 189.853329][T10351] Memory failure: 0x156265: recovery action for dirty LRU page: Recovered [ 189.853336][T10351] Injecting memory failure for pfn 0x15cde7 at process virtual address 0x20bfd000 [ 189.853359][T10351] Memory failure: 0x15cde7: recovery action for dirty LRU page: Recovered [ 189.853366][T10351] Injecting memory failure for pfn 0x159fa6 at process virtual address 0x20bfe000 [ 189.853390][T10351] Memory failure: 0x159fa6: recovery action for dirty LRU page: Recovered [ 189.853397][T10351] Injecting memory failure for pfn 0x15a56a at process virtual address 0x20bff000 [ 189.853420][T10351] Memory failure: 0x15a56a: recovery action for dirty LRU page: Recovered [ 189.870171][T10361] loop6: detected capacity change from 0 to 128 [ 189.963884][T10361] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a842c01c, mo2=0002] [ 189.963924][T10361] System zones: 1-3, 19-19, 35-36 [ 189.964474][T10361] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 190.037705][ T4714] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 190.037736][ T4714] Bluetooth: hci0: Injecting HCI hardware error event [ 190.138101][ T9162] overlayfs: failed lookup in lower (newroot/43, name='bus', err=-40): overlapping layers [ 190.142309][ T9162] overlayfs: failed lookup in lower (newroot/43, name='bus', err=-40): overlapping layers [ 190.241946][T10334] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 190.430413][ T4720] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 190.431591][ T4720] Bluetooth: hci0: hardware error 0x00 [ 190.550747][T10389] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1534'. [ 190.550774][T10389] FAULT_INJECTION: forcing a failure. [ 190.550774][T10389] name failslab, interval 1, probability 0, space 0, times 0 [ 190.550791][T10389] CPU: 1 UID: 0 PID: 10389 Comm: syz.4.1534 Tainted: G L syzkaller #0 PREEMPT [ 190.550804][T10389] Tainted: [L]=SOFTLOCKUP [ 190.550808][T10389] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 190.550814][T10389] Call trace: [ 190.550818][T10389] show_stack+0x2c/0x3c (C) [ 190.550852][T10389] __dump_stack+0x30/0x40 [ 190.550870][T10389] dump_stack_lvl+0xd8/0x12c [ 190.550880][T10389] dump_stack+0x1c/0x28 [ 190.550890][T10389] should_fail_ex+0x41c/0x590 [ 190.550902][T10389] should_failslab+0xc4/0x120 [ 190.550911][T10389] kmem_cache_alloc_node_noprof+0x98/0x5f8 [ 190.550921][T10389] __alloc_skb+0x1f0/0x610 [ 190.550931][T10389] netlink_ack+0x11c/0x890 [ 190.550941][T10389] netlink_rcv_skb+0x21c/0x414 [ 190.550950][T10389] genl_rcv+0x38/0x50 [ 190.550960][T10389] netlink_unicast+0x600/0x7f8 [ 190.550968][T10389] netlink_sendmsg+0x648/0x948 [ 190.550977][T10389] __sock_sendmsg+0xc8/0x17c [ 190.550986][T10389] ____sys_sendmsg+0x3d0/0x6c8 [ 190.550995][T10389] ___sys_sendmsg+0x198/0x224 [ 190.551004][T10389] __sys_sendmsg+0x158/0x204 [ 190.551017][T10389] __arm64_sys_sendmsg+0x88/0x9c [ 190.551027][T10389] invoke_syscall+0x98/0x244 [ 190.551039][T10389] el0_svc_common+0xec/0x23c [ 190.551048][T10389] do_el0_svc+0x4c/0x5c [ 190.551058][T10389] el0_svc+0x64/0x260 [ 190.551066][T10389] el0t_64_sync_handler+0x44/0x104 [ 190.551074][T10389] el0t_64_sync+0x198/0x19c [ 190.637496][T10393] FAULT_INJECTION: forcing a failure. [ 190.637496][T10393] name failslab, interval 1, probability 0, space 0, times 0 [ 190.637520][T10393] CPU: 1 UID: 0 PID: 10393 Comm: syz.4.1535 Tainted: G L syzkaller #0 PREEMPT [ 190.637532][T10393] Tainted: [L]=SOFTLOCKUP [ 190.637536][T10393] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 190.637541][T10393] Call trace: [ 190.637544][T10393] show_stack+0x2c/0x3c (C) [ 190.637564][T10393] __dump_stack+0x30/0x40 [ 190.637575][T10393] dump_stack_lvl+0xd8/0x12c [ 190.637585][T10393] dump_stack+0x1c/0x28 [ 190.637595][T10393] should_fail_ex+0x41c/0x590 [ 190.637606][T10393] should_failslab+0xc4/0x120 [ 190.637615][T10393] kmem_cache_alloc_node_noprof+0x98/0x5f8 [ 190.637624][T10393] __alloc_skb+0x1f0/0x610 [ 190.637634][T10393] netlink_ack+0x11c/0x890 [ 190.637644][T10393] netlink_rcv_skb+0x21c/0x414 [ 190.637653][T10393] genl_rcv+0x38/0x50 [ 190.637662][T10393] netlink_unicast+0x600/0x7f8 [ 190.637670][T10393] netlink_sendmsg+0x648/0x948 [ 190.637679][T10393] __sock_sendmsg+0xc8/0x17c [ 190.637688][T10393] ____sys_sendmsg+0x3d0/0x6c8 [ 190.637697][T10393] ___sys_sendmsg+0x198/0x224 [ 190.637706][T10393] __sys_sendmsg+0x158/0x204 [ 190.637715][T10393] __arm64_sys_sendmsg+0x88/0x9c [ 190.637725][T10393] invoke_syscall+0x98/0x244 [ 190.637735][T10393] el0_svc_common+0xec/0x23c [ 190.637744][T10393] do_el0_svc+0x4c/0x5c [ 190.637754][T10393] el0_svc+0x64/0x260 [ 190.637762][T10393] el0t_64_sync_handler+0x44/0x104 [ 190.637770][T10393] el0t_64_sync+0x198/0x19c [ 190.715452][T10397] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1536'. [ 190.759711][T10399] netlink: 'syz.4.1538': attribute type 11 has an invalid length. [ 190.765069][T10399] FAULT_INJECTION: forcing a failure. [ 190.765069][T10399] name failslab, interval 1, probability 0, space 0, times 0 [ 190.765097][T10399] CPU: 1 UID: 0 PID: 10399 Comm: syz.4.1538 Tainted: G L syzkaller #0 PREEMPT [ 190.765108][T10399] Tainted: [L]=SOFTLOCKUP [ 190.765111][T10399] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 190.765117][T10399] Call trace: [ 190.765120][T10399] show_stack+0x2c/0x3c (C) [ 190.765140][T10399] __dump_stack+0x30/0x40 [ 190.765151][T10399] dump_stack_lvl+0xd8/0x12c [ 190.765161][T10399] dump_stack+0x1c/0x28 [ 190.765171][T10399] should_fail_ex+0x41c/0x590 [ 190.765182][T10399] should_failslab+0xc4/0x120 [ 190.765191][T10399] kmem_cache_alloc_node_noprof+0x98/0x5f8 [ 190.765200][T10399] __alloc_skb+0x1f0/0x610 [ 190.765210][T10399] nl80211_new_interface+0x440/0x10c8 [ 190.765219][T10399] genl_family_rcv_msg_doit+0x1e4/0x2d4 [ 190.765230][T10399] genl_rcv_msg+0x43c/0x620 [ 190.765239][T10399] netlink_rcv_skb+0x238/0x414 [ 190.765248][T10399] genl_rcv+0x38/0x50 [ 190.765258][T10399] netlink_unicast+0x600/0x7f8 [ 190.765266][T10399] netlink_sendmsg+0x648/0x948 [ 190.765275][T10399] __sock_sendmsg+0xc8/0x17c [ 190.765284][T10399] ____sys_sendmsg+0x3d0/0x6c8 [ 190.765293][T10399] ___sys_sendmsg+0x198/0x224 [ 190.765302][T10399] __sys_sendmsg+0x158/0x204 [ 190.765311][T10399] __arm64_sys_sendmsg+0x88/0x9c [ 190.765321][T10399] invoke_syscall+0x98/0x244 [ 190.765331][T10399] el0_svc_common+0xec/0x23c [ 190.765341][T10399] do_el0_svc+0x4c/0x5c [ 190.765351][T10399] el0_svc+0x64/0x260 [ 190.765358][T10399] el0t_64_sync_handler+0x44/0x104 [ 190.765366][T10399] el0t_64_sync+0x198/0x19c [ 190.882006][T10370] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 191.314120][T10411] input: syz0 as /devices/virtual/input/input4 [ 191.368727][ T50] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 191.369778][ T50] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 191.370315][ T50] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 191.371824][ T50] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 191.372042][ T50] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 191.398093][T10410] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1542'. [ 191.398111][T10410] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1542'. [ 191.715792][T10431] No such timeout policy "syz1" [ 191.832586][T10434] MPI: mpi too large (32776 bits) [ 191.892928][T10417] 8021q: adding VLAN 0 to HW filter on device bond2 [ 191.893726][T10417] bond0: (slave bond2): Enslaving as an active interface with an up link [ 192.084641][T10442] loop1: detected capacity change from 0 to 128 [ 192.085472][T10442] EXT4-fs (loop1): Test dummy encryption mode enabled [ 192.098395][T10442] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 192.135045][T10444] FAULT_INJECTION: forcing a failure. [ 192.135045][T10444] name failslab, interval 1, probability 0, space 0, times 0 [ 192.135074][T10444] CPU: 0 UID: 0 PID: 10444 Comm: syz.7.1550 Tainted: G L syzkaller #0 PREEMPT [ 192.135087][T10444] Tainted: [L]=SOFTLOCKUP [ 192.135090][T10444] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 192.135095][T10444] Call trace: [ 192.135098][T10444] show_stack+0x2c/0x3c (C) [ 192.135115][T10444] __dump_stack+0x30/0x40 [ 192.135126][T10444] dump_stack_lvl+0xd8/0x12c [ 192.135136][T10444] dump_stack+0x1c/0x28 [ 192.135146][T10444] should_fail_ex+0x41c/0x590 [ 192.135157][T10444] should_failslab+0xc4/0x120 [ 192.135165][T10444] kmem_cache_alloc_node_noprof+0x98/0x5f8 [ 192.135175][T10444] __alloc_skb+0x1f0/0x610 [ 192.135185][T10444] netlink_ack+0x11c/0x890 [ 192.135194][T10444] nfnetlink_rcv+0x1490/0x16ec [ 192.135202][T10444] netlink_unicast+0x600/0x7f8 [ 192.135210][T10444] netlink_sendmsg+0x648/0x948 [ 192.135219][T10444] __sock_sendmsg+0xc8/0x17c [ 192.135228][T10444] ____sys_sendmsg+0x3d0/0x6c8 [ 192.135237][T10444] ___sys_sendmsg+0x198/0x224 [ 192.135246][T10444] __sys_sendmsg+0x158/0x204 [ 192.135256][T10444] __arm64_sys_sendmsg+0x88/0x9c [ 192.135265][T10444] invoke_syscall+0x98/0x244 [ 192.135275][T10444] el0_svc_common+0xec/0x23c [ 192.135285][T10444] do_el0_svc+0x4c/0x5c [ 192.135295][T10444] el0_svc+0x64/0x260 [ 192.135303][T10444] el0t_64_sync_handler+0x44/0x104 [ 192.135310][T10444] el0t_64_sync+0x198/0x19c [ 192.254174][ T4709] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 192.255671][ T5271] bridge_slave_1: left allmulticast mode [ 192.255688][ T5271] bridge_slave_1: left promiscuous mode [ 192.255782][ T5271] bridge0: port 2(bridge_slave_1) entered disabled state [ 192.268633][ T5271] bridge_slave_0: left allmulticast mode [ 192.268651][ T5271] bridge_slave_0: left promiscuous mode [ 192.268747][ T5271] bridge0: port 1(bridge_slave_0) entered disabled state [ 192.521420][T10469] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(3) [ 192.521435][T10469] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 192.528224][T10469] vhci_hcd vhci_hcd.0: Device attached [ 192.532473][T10471] vhci_hcd: connection closed [ 192.537479][ T5272] vhci_hcd vhci_hcd.7: stop threads [ 192.538557][ T5272] vhci_hcd vhci_hcd.7: release socket [ 192.538591][ T5272] vhci_hcd vhci_hcd.7: disconnect device [ 192.627201][ T5271] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 192.651274][ T5271] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 192.676732][ T5271] bond0 (unregistering): Released all slaves [ 192.911853][T10412] bridge0: port 1(bridge_slave_0) entered blocking state [ 192.921264][T10412] bridge0: port 1(bridge_slave_0) entered disabled state [ 192.921398][T10412] bridge_slave_0: entered allmulticast mode [ 192.921864][T10412] bridge_slave_0: entered promiscuous mode [ 192.928005][T10412] bridge0: port 2(bridge_slave_1) entered blocking state [ 192.928040][T10412] bridge0: port 2(bridge_slave_1) entered disabled state [ 192.928141][T10412] bridge_slave_1: entered allmulticast mode [ 192.928596][T10412] bridge_slave_1: entered promiscuous mode [ 192.975740][T10488] loop5: detected capacity change from 0 to 1024 [ 192.984625][T10488] EXT4-fs: Ignoring removed bh option [ 192.990099][T10488] EXT4-fs (loop5): stripe (7) is not aligned with cluster size (16), stripe is disabled [ 193.024681][T10412] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 193.033924][T10412] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 193.043661][T10488] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 193.103651][T10412] team0: Port device team_slave_0 added [ 193.140597][T10412] team0: Port device team_slave_1 added [ 193.227594][ T4720] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 193.327848][ T5271] hsr_slave_0: left promiscuous mode [ 193.329449][ T5271] hsr_slave_1: left promiscuous mode [ 193.329704][ T5271] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 193.331173][ T5271] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 193.367097][T10506] loop4: detected capacity change from 0 to 512 [ 193.374922][T10505] FAULT_INJECTION: forcing a failure. [ 193.374922][T10505] name failslab, interval 1, probability 0, space 0, times 0 [ 193.374942][T10505] CPU: 0 UID: 0 PID: 10505 Comm: syz.7.1561 Tainted: G L syzkaller #0 PREEMPT [ 193.374957][T10505] Tainted: [L]=SOFTLOCKUP [ 193.374961][T10505] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 193.374967][T10505] Call trace: [ 193.374970][T10505] show_stack+0x2c/0x3c (C) [ 193.374988][T10505] __dump_stack+0x30/0x40 [ 193.374999][T10505] dump_stack_lvl+0xd8/0x12c [ 193.375009][T10505] dump_stack+0x1c/0x28 [ 193.375018][T10505] should_fail_ex+0x41c/0x590 [ 193.375030][T10505] should_failslab+0xc4/0x120 [ 193.375038][T10505] __kmalloc_cache_noprof+0x94/0x5ec [ 193.375048][T10505] mqueue_init_fs_context+0x64/0x4dc [ 193.375058][T10505] alloc_fs_context+0x7d8/0xba4 [ 193.375066][T10505] fs_context_for_mount+0x34/0x44 [ 193.375074][T10505] mq_init_ns+0xdc/0x638 [ 193.375082][T10505] copy_ipcs+0x3c8/0x63c [ 193.375091][T10505] create_new_namespaces+0x1a8/0x50c [ 193.375100][T10505] unshare_nsproxy_namespaces+0x120/0x170 [ 193.375109][T10505] ksys_unshare+0x3d4/0x6d8 [ 193.375118][T10505] __arm64_sys_unshare+0x40/0x54 [ 193.375126][T10505] invoke_syscall+0x98/0x244 [ 193.375136][T10505] el0_svc_common+0xec/0x23c [ 193.375146][T10505] do_el0_svc+0x4c/0x5c [ 193.375155][T10505] el0_svc+0x64/0x260 [ 193.375163][T10505] el0t_64_sync_handler+0x44/0x104 [ 193.375171][T10505] el0t_64_sync+0x198/0x19c [ 193.382124][T10506] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 193.414981][T10506] EXT4-fs (loop4): 1 truncate cleaned up [ 193.415447][T10506] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 193.479615][ T4720] Bluetooth: hci1: command tx timeout [ 193.806245][T10488] EXT4-fs error (device loop5): ext4_find_dest_de:2050: inode #12: block 7: comm syz.5.1557: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=56 fake=0 [ 193.809294][T10488] EXT4-fs (loop5): Remounting filesystem read-only [ 193.830168][ T5271] team0 (unregistering): Port device team_slave_1 removed [ 193.834870][ T5271] team0 (unregistering): Port device team_slave_0 removed [ 193.922884][T10412] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 193.922896][T10412] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 193.922910][T10412] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 193.923576][T10412] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 193.923585][T10412] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 193.923601][T10412] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 193.930109][ T4398] 8021q: adding VLAN 0 to HW filter on device eth12 [ 193.970755][T10412] hsr_slave_0: entered promiscuous mode [ 193.972303][T10412] hsr_slave_1: entered promiscuous mode [ 193.991928][T10488] syzkaller0: entered promiscuous mode [ 193.991948][T10488] syzkaller0: entered allmulticast mode [ 194.061568][ T4710] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 194.136945][T10520] FAULT_INJECTION: forcing a failure. [ 194.136945][T10520] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 194.136969][T10520] CPU: 0 UID: 0 PID: 10520 Comm: syz.4.1563 Tainted: G L syzkaller #0 PREEMPT [ 194.136984][T10520] Tainted: [L]=SOFTLOCKUP [ 194.136987][T10520] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 194.136993][T10520] Call trace: [ 194.136996][T10520] show_stack+0x2c/0x3c (C) [ 194.137015][T10520] __dump_stack+0x30/0x40 [ 194.137029][T10520] dump_stack_lvl+0xd8/0x12c [ 194.137039][T10520] dump_stack+0x1c/0x28 [ 194.137049][T10520] should_fail_ex+0x41c/0x590 [ 194.137063][T10520] should_fail+0x14/0x24 [ 194.137073][T10520] should_fail_usercopy+0x20/0x30 [ 194.137079][T10520] simple_read_from_buffer+0xc4/0x238 [ 194.137090][T10520] proc_fail_nth_read+0x1a8/0x248 [ 194.137099][T10520] vfs_read+0x230/0x8c8 [ 194.137106][T10520] ksys_read+0x12c/0x228 [ 194.137113][T10520] __arm64_sys_read+0x84/0x98 [ 194.137120][T10520] invoke_syscall+0x98/0x244 [ 194.137130][T10520] el0_svc_common+0xec/0x23c [ 194.137140][T10520] do_el0_svc+0x4c/0x5c [ 194.137150][T10520] el0_svc+0x64/0x260 [ 194.137158][T10520] el0t_64_sync_handler+0x44/0x104 [ 194.137166][T10520] el0t_64_sync+0x198/0x19c [ 194.325019][T10528] loop4: detected capacity change from 0 to 128 [ 194.376902][ T4720] Bluetooth: hci3: unexpected event for opcode 0x204e [ 195.003767][T10543] loop7: detected capacity change from 0 to 2048 [ 195.046048][T10543] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 195.046894][T10543] FAULT_INJECTION: forcing a failure. [ 195.046894][T10543] name failslab, interval 1, probability 0, space 0, times 0 [ 195.046913][T10543] CPU: 1 UID: 0 PID: 10543 Comm: syz.7.1568 Tainted: G L syzkaller #0 PREEMPT [ 195.046927][T10543] Tainted: [L]=SOFTLOCKUP [ 195.046931][T10543] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 195.046937][T10543] Call trace: [ 195.046940][T10543] show_stack+0x2c/0x3c (C) [ 195.046960][T10543] __dump_stack+0x30/0x40 [ 195.046971][T10543] dump_stack_lvl+0xd8/0x12c [ 195.046981][T10543] dump_stack+0x1c/0x28 [ 195.046990][T10543] should_fail_ex+0x41c/0x590 [ 195.047002][T10543] should_failslab+0xc4/0x120 [ 195.047010][T10543] kmem_cache_alloc_node_noprof+0x98/0x5f8 [ 195.047019][T10543] __alloc_skb+0x1f0/0x610 [ 195.047030][T10543] ovs_ct_limit_cmd_reply_start+0x64/0x1b0 [ 195.047040][T10543] ovs_ct_limit_cmd_set+0xf4/0x7f8 [ 195.047047][T10543] genl_family_rcv_msg_doit+0x1e4/0x2d4 [ 195.047059][T10543] genl_rcv_msg+0x43c/0x620 [ 195.047068][T10543] netlink_rcv_skb+0x238/0x414 [ 195.047077][T10543] genl_rcv+0x38/0x50 [ 195.047087][T10543] netlink_unicast+0x600/0x7f8 [ 195.047095][T10543] netlink_sendmsg+0x648/0x948 [ 195.047104][T10543] __sock_sendmsg+0xc8/0x17c [ 195.047113][T10543] ____sys_sendmsg+0x3d0/0x6c8 [ 195.047122][T10543] ___sys_sendmsg+0x198/0x224 [ 195.047131][T10543] __sys_sendmsg+0x158/0x204 [ 195.047141][T10543] __arm64_sys_sendmsg+0x88/0x9c [ 195.047150][T10543] invoke_syscall+0x98/0x244 [ 195.047160][T10543] el0_svc_common+0xec/0x23c [ 195.047170][T10543] do_el0_svc+0x4c/0x5c [ 195.047179][T10543] el0_svc+0x64/0x260 [ 195.047187][T10543] el0t_64_sync_handler+0x44/0x104 [ 195.047194][T10543] el0t_64_sync+0x198/0x19c [ 195.067479][ T9387] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 195.143665][T10550] netlink: 147896 bytes leftover after parsing attributes in process `syz.7.1570'. [ 195.143712][T10550] net_ratelimit: 16 callbacks suppressed [ 195.143721][T10550] netlink: zone id is out of range [ 195.143823][T10550] netlink: zone id is out of range [ 195.679453][ T4720] Bluetooth: hci1: command tx timeout [ 195.994835][ T4398] 8021q: adding VLAN 0 to HW filter on device eth14 [ 196.029932][T10412] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 196.038792][T10412] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 196.040875][T10412] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 196.049212][T10412] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 196.056756][T10412] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 196.080364][T10412] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 196.083279][T10412] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 196.086169][T10572] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1575'. [ 196.096542][T10412] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 196.163731][T10572] FAULT_INJECTION: forcing a failure. [ 196.163731][T10572] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 196.163774][T10572] CPU: 1 UID: 0 PID: 10572 Comm: syz.4.1575 Tainted: G L syzkaller #0 PREEMPT [ 196.163791][T10572] Tainted: [L]=SOFTLOCKUP [ 196.163796][T10572] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 196.163802][T10572] Call trace: [ 196.163805][T10572] show_stack+0x2c/0x3c (C) [ 196.163828][T10572] __dump_stack+0x30/0x40 [ 196.163840][T10572] dump_stack_lvl+0xd8/0x12c [ 196.163851][T10572] dump_stack+0x1c/0x28 [ 196.163862][T10572] should_fail_ex+0x41c/0x590 [ 196.163875][T10572] should_fail+0x14/0x24 [ 196.163885][T10572] should_fail_usercopy+0x20/0x30 [ 196.163893][T10572] _copy_from_iter+0x188/0x1064 [ 196.163901][T10572] netlink_sendmsg+0x570/0x948 [ 196.163912][T10572] __sock_sendmsg+0xc8/0x17c [ 196.163922][T10572] ____sys_sendmsg+0x3d0/0x6c8 [ 196.163931][T10572] ___sys_sendmsg+0x198/0x224 [ 196.163940][T10572] __sys_sendmsg+0x158/0x204 [ 196.163949][T10572] __arm64_sys_sendmsg+0x88/0x9c [ 196.163958][T10572] invoke_syscall+0x98/0x244 [ 196.163969][T10572] el0_svc_common+0xec/0x23c [ 196.163978][T10572] do_el0_svc+0x4c/0x5c [ 196.163988][T10572] el0_svc+0x64/0x260 [ 196.163996][T10572] el0t_64_sync_handler+0x44/0x104 [ 196.164004][T10572] el0t_64_sync+0x198/0x19c [ 196.198185][ T5511] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 196.252141][T10412] 8021q: adding VLAN 0 to HW filter on device bond0 [ 196.274384][T10412] 8021q: adding VLAN 0 to HW filter on device team0 [ 196.282033][ T4849] bridge0: port 1(bridge_slave_0) entered blocking state [ 196.282090][ T4849] bridge0: port 1(bridge_slave_0) entered forwarding state [ 196.288528][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 196.288583][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 196.498771][ T4398] 8021q: adding VLAN 0 to HW filter on device eth13 [ 196.525424][T10412] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 196.766230][T10412] veth0_vlan: entered promiscuous mode [ 196.772976][T10412] veth1_vlan: entered promiscuous mode [ 196.792429][T10412] veth0_macvtap: entered promiscuous mode [ 196.809428][T10412] veth1_macvtap: entered promiscuous mode [ 196.815682][T10412] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 196.822757][T10412] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 196.853161][ T4967] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.853212][ T4967] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.853244][ T4967] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.853268][ T4967] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.035405][ T4398] 8021q: adding VLAN 0 to HW filter on device eth15 [ 197.039150][ T4849] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 197.039175][ T4849] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 197.051479][T10644] FAULT_INJECTION: forcing a failure. [ 197.051479][T10644] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 197.051518][T10644] CPU: 1 UID: 0 PID: 10644 Comm: syz.4.1585 Tainted: G L syzkaller #0 PREEMPT [ 197.051533][T10644] Tainted: [L]=SOFTLOCKUP [ 197.051537][T10644] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 197.051543][T10644] Call trace: [ 197.051547][T10644] show_stack+0x2c/0x3c (C) [ 197.051566][T10644] __dump_stack+0x30/0x40 [ 197.051577][T10644] dump_stack_lvl+0xd8/0x12c [ 197.051587][T10644] dump_stack+0x1c/0x28 [ 197.051597][T10644] should_fail_ex+0x41c/0x590 [ 197.051608][T10644] should_fail+0x14/0x24 [ 197.051618][T10644] should_fail_usercopy+0x20/0x30 [ 197.051626][T10644] _inline_copy_from_user+0x3c/0x188 [ 197.051636][T10644] memdup_user+0x78/0xec [ 197.051645][T10644] strndup_user+0x78/0xe0 [ 197.051653][T10644] __arm64_sys_mount+0xdc/0x388 [ 197.051664][T10644] invoke_syscall+0x98/0x244 [ 197.051673][T10644] el0_svc_common+0xec/0x23c [ 197.051683][T10644] do_el0_svc+0x4c/0x5c [ 197.051693][T10644] el0_svc+0x64/0x260 [ 197.051701][T10644] el0t_64_sync_handler+0x44/0x104 [ 197.051709][T10644] el0t_64_sync+0x198/0x19c [ 197.074285][ T4849] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 197.074320][ T4849] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 197.641689][T10658] syzkaller0: entered promiscuous mode [ 197.642928][T10658] syzkaller0: entered allmulticast mode [ 197.653459][T10663] overlay: Unknown parameter 'fowner<00000000000000000000' [ 197.690549][T10667] overlay: Unknown parameter 'fowner<00000000000000000000' [ 197.886991][T10677] overlayfs: missing 'workdir' [ 197.903097][ T4720] Bluetooth: hci1: command tx timeout [ 197.930292][ T4849] Bluetooth: hci4: Frame reassembly failed (-84) [ 197.985297][T10681] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1594'. [ 198.024013][T10687] loop4: detected capacity change from 0 to 512 [ 198.026185][T10687] EXT4-fs (loop4): Test dummy encryption mode enabled [ 198.029000][T10687] EXT4-fs error (device loop4): ext4_orphan_get:1399: inode #15: comm syz.4.1599: inode has both inline data and extents flags [ 198.032171][T10687] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 198.032634][T10687] EXT4-fs error (device loop4): ext4_orphan_get:1404: comm syz.4.1599: couldn't read orphan inode 15 (err -117) [ 198.035826][T10687] loop4: lost filesystem error report for type 5 error -117 [ 198.036522][T10687] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 198.088271][ T4710] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 198.351426][T10703] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1603'. [ 198.599658][T10709] loop7: detected capacity change from 0 to 128 [ 198.604416][T10709] EXT4-fs (loop7): can't mount with journal_async_commit, fs mounted w/o journal [ 198.802835][T10720] loop7: detected capacity change from 0 to 512 [ 198.808500][T10720] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 198.820035][T10720] EXT4-fs (loop7): revision level too high, forcing read-only mode [ 198.820190][T10720] EXT4-fs (loop7): orphan cleanup on readonly fs [ 198.825339][T10720] Quota error (device loop7): do_check_range: Getting block 196613 out of range 1-5 [ 198.825406][T10720] Quota error (device loop7): qtree_read_dquot: Can't read quota structure for id 0 [ 198.825420][T10720] EXT4-fs error (device loop7): ext4_acquire_dquot:7041: comm syz.7.1609: Failed to acquire dquot type 1 [ 198.825434][T10720] loop7: lost filesystem error report for type 5 error -117 [ 198.826650][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 198.826666][ C0] EXT4-fs (loop7): initial error at time 204: ext4_acquire_dquot:7041 [ 198.826679][ C0] EXT4-fs (loop7): last error at time 204: ext4_acquire_dquot:7041 [ 198.828271][T10720] EXT4-fs (loop7): Remounting filesystem read-only [ 198.828647][T10720] EXT4-fs (loop7): 1 truncate cleaned up [ 198.828876][ T12] EXT4-fs (loop7): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 198.828892][ T12] Quota error (device loop7): write_blk: dquota write failed [ 198.828900][ T12] Quota error (device loop7): remove_free_dqentry: Can't write block (5) with free entries [ 198.828907][ T12] EXT4-fs (loop7): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 198.828917][ T12] Quota error (device loop7): write_blk: dquota write failed [ 198.828978][ T12] Quota error (device loop7): free_dqentry: Can't move quota data block (5) to free list [ 198.829013][ T12] EXT4-fs (loop7): Quota write (off=8, len=24) cancelled because transaction is not started [ 198.829027][ T12] Quota error (device loop7): v2_write_file_info: Can't write info structure [ 198.831191][T10720] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 198.851941][ T9387] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 198.886642][T10724] FAULT_INJECTION: forcing a failure. [ 198.886642][T10724] name failslab, interval 1, probability 0, space 0, times 0 [ 198.886687][T10724] CPU: 0 UID: 0 PID: 10724 Comm: syz.7.1610 Tainted: G L syzkaller #0 PREEMPT [ 198.886706][T10724] Tainted: [L]=SOFTLOCKUP [ 198.886711][T10724] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 198.886717][T10724] Call trace: [ 198.886721][T10724] show_stack+0x2c/0x3c (C) [ 198.886741][T10724] __dump_stack+0x30/0x40 [ 198.886752][T10724] dump_stack_lvl+0xd8/0x12c [ 198.886762][T10724] dump_stack+0x1c/0x28 [ 198.886772][T10724] should_fail_ex+0x41c/0x590 [ 198.886783][T10724] should_failslab+0xc4/0x120 [ 198.886792][T10724] __kmalloc_noprof+0x108/0x6b8 [ 198.886801][T10724] genl_family_rcv_msg_attrs_parse+0xcc/0x27c [ 198.886820][T10724] genl_family_rcv_msg_doit+0xd8/0x2d4 [ 198.886834][T10724] genl_rcv_msg+0x43c/0x620 [ 198.886848][T10724] netlink_rcv_skb+0x238/0x414 [ 198.886857][T10724] genl_rcv+0x38/0x50 [ 198.886866][T10724] netlink_unicast+0x600/0x7f8 [ 198.886875][T10724] netlink_sendmsg+0x648/0x948 [ 198.886883][T10724] __sock_sendmsg+0xc8/0x17c [ 198.886893][T10724] ____sys_sendmsg+0x3d0/0x6c8 [ 198.886902][T10724] ___sys_sendmsg+0x198/0x224 [ 198.886911][T10724] __sys_sendmsg+0x158/0x204 [ 198.886921][T10724] __arm64_sys_sendmsg+0x88/0x9c [ 198.886930][T10724] invoke_syscall+0x98/0x244 [ 198.886940][T10724] el0_svc_common+0xec/0x23c [ 198.886950][T10724] do_el0_svc+0x4c/0x5c [ 198.886960][T10724] el0_svc+0x64/0x260 [ 198.886969][T10724] el0t_64_sync_handler+0x44/0x104 [ 198.886976][T10724] el0t_64_sync+0x198/0x19c [ 198.926768][T10726] FAULT_INJECTION: forcing a failure. [ 198.926768][T10726] name failslab, interval 1, probability 0, space 0, times 0 [ 198.930092][T10726] CPU: 1 UID: 0 PID: 10726 Comm: syz.7.1611 Tainted: G L syzkaller #0 PREEMPT [ 198.930118][T10726] Tainted: [L]=SOFTLOCKUP [ 198.930123][T10726] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 198.930131][T10726] Call trace: [ 198.930136][T10726] show_stack+0x2c/0x3c (C) [ 198.930160][T10726] __dump_stack+0x30/0x40 [ 198.930172][T10726] dump_stack_lvl+0xd8/0x12c [ 198.930182][T10726] dump_stack+0x1c/0x28 [ 198.930192][T10726] should_fail_ex+0x41c/0x590 [ 198.930205][T10726] should_failslab+0xc4/0x120 [ 198.930214][T10726] __kmalloc_noprof+0x108/0x6b8 [ 198.930223][T10726] tomoyo_realpath_from_path+0xbc/0x4dc [ 198.930232][T10726] tomoyo_path_number_perm+0x1f0/0x500 [ 198.930240][T10726] tomoyo_file_ioctl+0x2c/0x3c [ 198.930249][T10726] security_file_ioctl+0xdc/0x2b0 [ 198.930257][T10726] __arm64_sys_ioctl+0xb0/0x1cc [ 198.930268][T10726] invoke_syscall+0x98/0x244 [ 198.930278][T10726] el0_svc_common+0xec/0x23c [ 198.930288][T10726] do_el0_svc+0x4c/0x5c [ 198.930298][T10726] el0_svc+0x64/0x260 [ 198.930306][T10726] el0t_64_sync_handler+0x44/0x104 [ 198.930313][T10726] el0t_64_sync+0x198/0x19c [ 198.945124][T10726] ERROR: Out of memory at tomoyo_realpath_from_path. [ 199.045698][T10736] netlink: 27 bytes leftover after parsing attributes in process `syz.8.1615'. [ 199.091554][T10740] loop7: detected capacity change from 0 to 256 [ 199.112230][T10738] sctp: [Deprecated]: syz.8.1617 (pid 10738) Use of struct sctp_assoc_value in delayed_ack socket option. [ 199.112230][T10738] Use struct sctp_sack_info instead [ 199.173560][T10747] FAULT_INJECTION: forcing a failure. [ 199.173560][T10747] name failslab, interval 1, probability 0, space 0, times 0 [ 199.177270][T10747] CPU: 1 UID: 0 PID: 10747 Comm: syz.7.1618 Tainted: G L syzkaller #0 PREEMPT [ 199.177297][T10747] Tainted: [L]=SOFTLOCKUP [ 199.177302][T10747] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 199.177308][T10747] Call trace: [ 199.177312][T10747] show_stack+0x2c/0x3c (C) [ 199.177339][T10747] __dump_stack+0x30/0x40 [ 199.177354][T10747] dump_stack_lvl+0xd8/0x12c [ 199.177365][T10747] dump_stack+0x1c/0x28 [ 199.177375][T10747] should_fail_ex+0x41c/0x590 [ 199.177387][T10747] should_failslab+0xc4/0x120 [ 199.177396][T10747] __kvmalloc_node_noprof+0x160/0x7d8 [ 199.177405][T10747] seq_read_iter+0x1d0/0xbe8 [ 199.177416][T10747] proc_reg_read_iter+0x1c4/0x224 [ 199.177427][T10747] vfs_read+0x498/0x8c8 [ 199.177434][T10747] ksys_read+0x12c/0x228 [ 199.177441][T10747] __arm64_sys_read+0x84/0x98 [ 199.177448][T10747] invoke_syscall+0x98/0x244 [ 199.177459][T10747] el0_svc_common+0xec/0x23c [ 199.177469][T10747] do_el0_svc+0x4c/0x5c [ 199.177478][T10747] el0_svc+0x64/0x260 [ 199.177487][T10747] el0t_64_sync_handler+0x44/0x104 [ 199.177494][T10747] el0t_64_sync+0x198/0x19c [ 199.207555][T10749] netlink: 'syz.8.1620': attribute type 3 has an invalid length. [ 199.209092][T10749] netlink: 152 bytes leftover after parsing attributes in process `syz.8.1620'. [ 199.210776][T10749] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1620'. [ 199.228518][T10752] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1619'. [ 199.230181][T10752] netlink: 84 bytes leftover after parsing attributes in process `syz.4.1619'. [ 199.338904][T10759] loop4: detected capacity change from 0 to 512 [ 199.347266][T10759] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 199.349396][T10759] EXT4-fs (loop4): 1 truncate cleaned up [ 199.351073][T10759] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 199.381373][T10755] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1621'. [ 199.392499][T10761] netlink: 'syz.8.1620': attribute type 3 has an invalid length. [ 199.420532][T10765] loop1: detected capacity change from 0 to 256 [ 200.107170][T10754] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 200.110341][T10754] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 200.112169][T10754] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 200.116363][T10754] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 200.116590][T10754] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 200.120476][T10754] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 200.123092][T10754] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 200.124661][T10754] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 200.126957][T10754] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 200.140321][ T4720] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 200.242450][ T4710] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 200.763475][T10792] loop1: detected capacity change from 0 to 512 [ 200.842432][T10794] FAULT_INJECTION: forcing a failure. [ 200.842432][T10794] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 200.842530][T10794] CPU: 1 UID: 0 PID: 10794 Comm: syz.1.1633 Tainted: G L syzkaller #0 PREEMPT [ 200.842546][T10794] Tainted: [L]=SOFTLOCKUP [ 200.842549][T10794] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 200.842554][T10794] Call trace: [ 200.842558][T10794] show_stack+0x2c/0x3c (C) [ 200.842577][T10794] __dump_stack+0x30/0x40 [ 200.842588][T10794] dump_stack_lvl+0xd8/0x12c [ 200.842598][T10794] dump_stack+0x1c/0x28 [ 200.842608][T10794] should_fail_ex+0x41c/0x590 [ 200.842619][T10794] should_fail+0x14/0x24 [ 200.842629][T10794] should_fail_usercopy+0x20/0x30 [ 200.842637][T10794] simple_read_from_buffer+0xc4/0x238 [ 200.842647][T10794] proc_fail_nth_read+0x1a8/0x248 [ 200.842656][T10794] vfs_read+0x230/0x8c8 [ 200.842663][T10794] ksys_read+0x12c/0x228 [ 200.842670][T10794] __arm64_sys_read+0x84/0x98 [ 200.842677][T10794] invoke_syscall+0x98/0x244 [ 200.842688][T10794] el0_svc_common+0xec/0x23c [ 200.842698][T10794] do_el0_svc+0x4c/0x5c [ 200.842707][T10794] el0_svc+0x64/0x260 [ 200.842716][T10794] el0t_64_sync_handler+0x44/0x104 [ 200.842723][T10794] el0t_64_sync+0x198/0x19c [ 201.350564][T10817] loop4: detected capacity change from 0 to 512 [ 201.352472][T10817] EXT4-fs: inline encryption not supported [ 201.370493][T10817] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 201.374435][ T30] audit: type=1326 audit(206.807:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10813 comm="syz.8.1639" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff8a779228 code=0x0 [ 201.378682][ T30] audit: type=1326 audit(206.807:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10813 comm="syz.8.1639" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff8a779228 code=0x0 [ 201.388218][T10817] EXT4-fs (loop4): 1 truncate cleaned up [ 201.393294][T10817] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 201.725331][ T50] Bluetooth: hci6: command 0x1003 tx timeout [ 201.728007][ T50] Bluetooth: hci3: command 0x0406 tx timeout [ 201.735237][ T4714] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 201.867681][T10833] sctp: [Deprecated]: syz.8.1643 (pid 10833) Use of struct sctp_assoc_value in delayed_ack socket option. [ 201.867681][T10833] Use struct sctp_sack_info instead [ 201.867737][T10833] sctp: [Deprecated]: syz.8.1643 (pid 10833) Use of struct sctp_assoc_value in delayed_ack socket option. [ 201.867737][T10833] Use struct sctp_sack_info instead [ 201.867757][T10833] sctp: [Deprecated]: syz.8.1643 (pid 10833) Use of struct sctp_assoc_value in delayed_ack socket option. [ 201.867757][T10833] Use struct sctp_sack_info instead [ 201.867772][T10833] sctp: [Deprecated]: syz.8.1643 (pid 10833) Use of struct sctp_assoc_value in delayed_ack socket option. [ 201.867772][T10833] Use struct sctp_sack_info instead [ 201.867786][T10833] sctp: [Deprecated]: syz.8.1643 (pid 10833) Use of struct sctp_assoc_value in delayed_ack socket option. [ 201.867786][T10833] Use struct sctp_sack_info instead [ 201.867798][T10833] sctp: [Deprecated]: syz.8.1643 (pid 10833) Use of struct sctp_assoc_value in delayed_ack socket option. [ 201.867798][T10833] Use struct sctp_sack_info instead [ 201.867811][T10833] sctp: [Deprecated]: syz.8.1643 (pid 10833) Use of struct sctp_assoc_value in delayed_ack socket option. [ 201.867811][T10833] Use struct sctp_sack_info instead [ 201.867823][T10833] sctp: [Deprecated]: syz.8.1643 (pid 10833) Use of struct sctp_assoc_value in delayed_ack socket option. [ 201.867823][T10833] Use struct sctp_sack_info instead [ 201.867842][T10833] sctp: [Deprecated]: syz.8.1643 (pid 10833) Use of struct sctp_assoc_value in delayed_ack socket option. [ 201.867842][T10833] Use struct sctp_sack_info instead [ 201.867855][T10833] sctp: [Deprecated]: syz.8.1643 (pid 10833) Use of struct sctp_assoc_value in delayed_ack socket option. [ 201.867855][T10833] Use struct sctp_sack_info instead [ 201.926475][T10831] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 201.927240][T10831] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 202.299295][ T4714] Bluetooth: hci1: command 0x0c1a tx timeout [ 202.299311][ T4720] Bluetooth: hci2: command 0x0c1a tx timeout [ 202.299359][ T4714] Bluetooth: hci5: command 0x0406 tx timeout [ 202.304390][ T4710] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 202.736860][T10856] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1649'. [ 202.743134][T10842] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1645'. [ 202.745154][T10856] loop7: detected capacity change from 0 to 512 [ 202.749854][T10856] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 202.753724][T10856] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0082] [ 202.753772][T10856] System zones: 1-12 [ 202.757288][T10856] EXT4-fs (loop7): 1 truncate cleaned up [ 202.759330][T10856] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 202.764526][T10856] EXT4-fs (loop7): shut down requested (1) [ 202.769046][T10856] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1649'. [ 203.014872][T10865] FAULT_INJECTION: forcing a failure. [ 203.014872][T10865] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 203.014919][T10865] CPU: 1 UID: 0 PID: 10865 Comm: syz.8.1651 Tainted: G L syzkaller #0 PREEMPT [ 203.014934][T10865] Tainted: [L]=SOFTLOCKUP [ 203.014939][T10865] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 203.014946][T10865] Call trace: [ 203.014950][T10865] show_stack+0x2c/0x3c (C) [ 203.014970][T10865] __dump_stack+0x30/0x40 [ 203.014982][T10865] dump_stack_lvl+0xd8/0x12c [ 203.014993][T10865] dump_stack+0x1c/0x28 [ 203.015002][T10865] should_fail_ex+0x41c/0x590 [ 203.015014][T10865] should_fail_alloc_page+0xec/0x10c [ 203.015023][T10865] prepare_alloc_pages+0x194/0x4a4 [ 203.015032][T10865] __alloc_frozen_pages_noprof+0x134/0x320 [ 203.015041][T10865] alloc_pages_mpol+0x1ec/0x3c0 [ 203.015051][T10865] folio_alloc_mpol_noprof+0x4c/0x248 [ 203.015060][T10865] vma_alloc_folio_noprof+0x100/0x1dc [ 203.015069][T10865] vma_alloc_zeroed_movable_folio+0x74/0x88 [ 203.015079][T10865] folio_prealloc+0x3c/0x1b0 [ 203.015087][T10865] do_pte_missing+0x1bcc/0x2a24 [ 203.015095][T10865] handle_mm_fault+0x14f8/0x2514 [ 203.015103][T10865] do_page_fault+0x4b0/0xb88 [ 203.015112][T10865] do_translation_fault+0xc4/0x114 [ 203.015124][T10865] do_mem_abort+0x70/0x194 [ 203.015134][T10865] el1_abort+0x50/0x74 [ 203.015144][T10865] el1h_64_sync_handler+0xdc/0x130 [ 203.015152][T10865] el1h_64_sync+0x6c/0x70 [ 203.015160][T10865] __arch_copy_to_user+0x1c0/0x240 (P) [ 203.015169][T10865] simple_copy_to_iter+0x50/0x8c [ 203.015179][T10865] __skb_datagram_iter+0xd4/0x77c [ 203.015187][T10865] skb_copy_datagram_iter+0xf4/0x3e8 [ 203.015195][T10865] netlink_recvmsg+0x244/0x868 [ 203.015205][T10865] sock_recvmsg+0xd4/0x170 [ 203.015214][T10865] ____sys_recvmsg+0x1b8/0x608 [ 203.015223][T10865] ___sys_recvmsg+0x16c/0x1f4 [ 203.015232][T10865] do_recvmmsg+0x288/0x7d4 [ 203.015242][T10865] __sys_recvmmsg+0x200/0x270 [ 203.015251][T10865] __arm64_sys_recvmmsg+0xe0/0x108 [ 203.015261][T10865] invoke_syscall+0x98/0x244 [ 203.015271][T10865] el0_svc_common+0xec/0x23c [ 203.015281][T10865] do_el0_svc+0x4c/0x5c [ 203.015290][T10865] el0_svc+0x64/0x260 [ 203.015297][T10865] el0t_64_sync_handler+0x44/0x104 [ 203.015305][T10865] el0t_64_sync+0x198/0x19c [ 203.474837][T10876] loop4: detected capacity change from 0 to 512 [ 203.479418][T10877] autofs: Unknown parameter 'Ж¶ˆ' [ 203.479624][T10876] EXT4-fs: Ignoring removed bh option [ 203.485634][T10876] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 203.488478][T10876] EXT4-fs (loop4): 1 truncate cleaned up [ 203.490112][T10876] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 203.491912][T10877] loop8: detected capacity change from 0 to 1024 [ 203.492345][T10877] EXT4-fs: Ignoring removed orlov option [ 203.566670][T10877] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 203.604595][T10876] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1655'. [ 203.606184][T10876] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.1655: bg 0: block 465: padding at end of block bitmap is not set [ 203.624114][ T4710] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 203.672916][T10885] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1656'. [ 203.689557][ T9387] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 203.722781][T10890] loop7: detected capacity change from 0 to 128 [ 203.731341][T10890] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 203.795705][ T9387] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 204.328977][T10412] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 204.361157][ T30] audit: type=1326 audit(209.564:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10908 comm="syz.8.1663" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=9 arch=c00000b7 syscall=98 compat=0 ip=0xffff8a779228 code=0x0 [ 204.494400][T10910] loop8: detected capacity change from 0 to 256 [ 204.494834][T10910] vfat: Unknown parameter 'uni_xlatee' [ 204.515194][T10910] tipc: Trying to set illegal importance in message [ 204.548408][ T4714] Bluetooth: hci2: command 0x0c1a tx timeout [ 204.548455][ T4714] Bluetooth: hci5: command 0x0406 tx timeout [ 204.895718][ T50] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 205.457178][T10927] loop8: detected capacity change from 0 to 256 [ 205.678979][T10929] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 205.679675][T10929] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 205.704897][T10931] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1670'. [ 205.776963][T10936] FAULT_INJECTION: forcing a failure. [ 205.776963][T10936] name failslab, interval 1, probability 0, space 0, times 0 [ 205.777005][T10936] CPU: 1 UID: 0 PID: 10936 Comm: syz.4.1672 Tainted: G L syzkaller #0 PREEMPT [ 205.777025][T10936] Tainted: [L]=SOFTLOCKUP [ 205.777030][T10936] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 205.777035][T10936] Call trace: [ 205.777039][T10936] show_stack+0x2c/0x3c (C) [ 205.777057][T10936] __dump_stack+0x30/0x40 [ 205.777068][T10936] dump_stack_lvl+0xd8/0x12c [ 205.777078][T10936] dump_stack+0x1c/0x28 [ 205.777087][T10936] should_fail_ex+0x41c/0x590 [ 205.777099][T10936] should_failslab+0xc4/0x120 [ 205.777108][T10936] __kmalloc_noprof+0x108/0x6b8 [ 205.777116][T10936] alloc_port_data+0xd0/0x300 [ 205.777128][T10936] ib_device_set_netdev+0x100/0x5cc [ 205.777138][T10936] siw_newlink+0x374/0xbe0 [ 205.777146][T10936] nldev_newlink+0x478/0x4f0 [ 205.777154][T10936] rdma_nl_rcv+0x4f0/0x814 [ 205.777162][T10936] netlink_unicast+0x600/0x7f8 [ 205.777172][T10936] netlink_sendmsg+0x648/0x948 [ 205.777180][T10936] __sock_sendmsg+0xc8/0x17c [ 205.777190][T10936] ____sys_sendmsg+0x3d0/0x6c8 [ 205.777199][T10936] ___sys_sendmsg+0x198/0x224 [ 205.777208][T10936] __sys_sendmsg+0x158/0x204 [ 205.777217][T10936] __arm64_sys_sendmsg+0x88/0x9c [ 205.777226][T10936] invoke_syscall+0x98/0x244 [ 205.777237][T10936] el0_svc_common+0xec/0x23c [ 205.777246][T10936] do_el0_svc+0x4c/0x5c [ 205.777256][T10936] el0_svc+0x64/0x260 [ 205.777264][T10936] el0t_64_sync_handler+0x44/0x104 [ 205.777272][T10936] el0t_64_sync+0x198/0x19c [ 205.816629][T10938] loop7: detected capacity change from 0 to 2048 [ 205.838729][T10938] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 205.847383][T10938] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 205.853357][T10942] loop4: detected capacity change from 0 to 512 [ 205.857546][T10942] EXT4-fs (loop4): Test dummy encryption mode enabled [ 205.870266][T10942] EXT4-fs error (device loop4): ext4_orphan_get:1399: inode #15: comm syz.4.1674: inode has both inline data and extents flags [ 205.870307][T10942] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 205.878834][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 205.878883][ C0] EXT4-fs (loop4): initial error at time 210: ext4_orphan_get:1399: inode 15 [ 205.878923][ C0] EXT4-fs (loop4): last error at time 210: ext4_orphan_get:1399: inode 15 [ 205.885503][T10942] EXT4-fs error (device loop4): ext4_orphan_get:1404: comm syz.4.1674: couldn't read orphan inode 15 (err -117) [ 205.885533][T10942] loop4: lost filesystem error report for type 5 error -117 [ 205.886382][T10942] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 206.012573][T10952] FAULT_INJECTION: forcing a failure. [ 206.012573][T10952] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 206.016898][T10952] CPU: 0 UID: 0 PID: 10952 Comm: syz.7.1677 Tainted: G L syzkaller #0 PREEMPT [ 206.016924][T10952] Tainted: [L]=SOFTLOCKUP [ 206.016929][T10952] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 206.016935][T10952] Call trace: [ 206.016939][T10952] show_stack+0x2c/0x3c (C) [ 206.016968][T10952] __dump_stack+0x30/0x40 [ 206.016988][T10952] dump_stack_lvl+0xd8/0x12c [ 206.017000][T10952] dump_stack+0x1c/0x28 [ 206.017011][T10952] should_fail_ex+0x41c/0x590 [ 206.017023][T10952] should_fail+0x14/0x24 [ 206.017033][T10952] should_fail_usercopy+0x20/0x30 [ 206.017040][T10952] _inline_copy_from_user+0x3c/0x174 [ 206.017051][T10952] smk_write_mapped+0x110/0x340 [ 206.017061][T10952] vfs_write+0x2a4/0xa0c [ 206.017068][T10952] ksys_pwrite64+0x118/0x1ac [ 206.017076][T10952] __arm64_sys_pwrite64+0xa8/0xc0 [ 206.017083][T10952] invoke_syscall+0x98/0x244 [ 206.017093][T10952] el0_svc_common+0xec/0x23c [ 206.017103][T10952] do_el0_svc+0x4c/0x5c [ 206.017113][T10952] el0_svc+0x64/0x260 [ 206.017121][T10952] el0t_64_sync_handler+0x44/0x104 [ 206.017129][T10952] el0t_64_sync+0x198/0x19c [ 206.865386][ T4720] Bluetooth: hci2: command 0x0c1a tx timeout [ 206.980041][T10964] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1680'. [ 207.053266][ T4710] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 207.158026][T10972] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 207.161503][T10972] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 207.430793][T10981] FAULT_INJECTION: forcing a failure. [ 207.430793][T10981] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 207.434038][T10981] CPU: 1 UID: 0 PID: 10981 Comm: syz.8.1686 Tainted: G L syzkaller #0 PREEMPT [ 207.434063][T10981] Tainted: [L]=SOFTLOCKUP [ 207.434067][T10981] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 207.434073][T10981] Call trace: [ 207.434076][T10981] show_stack+0x2c/0x3c (C) [ 207.434095][T10981] __dump_stack+0x30/0x40 [ 207.434106][T10981] dump_stack_lvl+0xd8/0x12c [ 207.434116][T10981] dump_stack+0x1c/0x28 [ 207.434126][T10981] should_fail_ex+0x41c/0x590 [ 207.434137][T10981] should_fail+0x14/0x24 [ 207.434148][T10981] should_fail_usercopy+0x20/0x30 [ 207.434155][T10981] _inline_copy_from_user+0x3c/0x174 [ 207.434164][T10981] kstrtouint_from_user+0xcc/0x174 [ 207.434171][T10981] proc_fail_nth_write+0x9c/0x234 [ 207.434180][T10981] vfs_write+0x2a4/0xa0c [ 207.434188][T10981] ksys_write+0x12c/0x228 [ 207.434195][T10981] __arm64_sys_write+0x84/0x98 [ 207.434202][T10981] invoke_syscall+0x98/0x244 [ 207.434212][T10981] el0_svc_common+0xec/0x23c [ 207.434222][T10981] do_el0_svc+0x4c/0x5c [ 207.434232][T10981] el0_svc+0x64/0x260 [ 207.434240][T10981] el0t_64_sync_handler+0x44/0x104 [ 207.434248][T10981] el0t_64_sync+0x198/0x19c [ 207.572368][T10990] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1688'. [ 207.573627][T10990] macvlan0: entered promiscuous mode [ 207.574216][T10990] netlink: 'syz.8.1688': attribute type 1 has an invalid length. [ 207.574226][T10990] netlink: 'syz.8.1688': attribute type 2 has an invalid length. [ 207.574234][T10990] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1688'. [ 207.664616][ T5270] Bluetooth: hci4: Frame reassembly failed (-84) [ 207.721735][T11000] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1687'. [ 207.851751][T11008] loop8: detected capacity change from 0 to 256 [ 208.427493][T11014] FAULT_INJECTION: forcing a failure. [ 208.427493][T11014] name failslab, interval 1, probability 0, space 0, times 0 [ 208.427539][T11014] CPU: 0 UID: 0 PID: 11014 Comm: syz.7.1692 Tainted: G L syzkaller #0 PREEMPT [ 208.427558][T11014] Tainted: [L]=SOFTLOCKUP [ 208.427562][T11014] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 208.427568][T11014] Call trace: [ 208.427571][T11014] show_stack+0x2c/0x3c (C) [ 208.427592][T11014] __dump_stack+0x30/0x40 [ 208.427606][T11014] dump_stack_lvl+0xd8/0x12c [ 208.427616][T11014] dump_stack+0x1c/0x28 [ 208.427625][T11014] should_fail_ex+0x41c/0x590 [ 208.427637][T11014] should_failslab+0xc4/0x120 [ 208.427648][T11014] __kvmalloc_node_noprof+0x160/0x7d8 [ 208.427658][T11014] page_pool_create_percpu+0x2f8/0xb10 [ 208.427669][T11014] page_pool_create+0x24/0x34 [ 208.427677][T11014] bpf_test_run_xdp_live+0x1a8/0x1770 [ 208.427686][T11014] bpf_prog_test_run_xdp+0x634/0xe0c [ 208.427694][T11014] bpf_prog_test_run+0x1e0/0x250 [ 208.427702][T11014] __sys_bpf+0x6bc/0x82c [ 208.427709][T11014] __arm64_sys_bpf+0xd0/0xec [ 208.427716][T11014] invoke_syscall+0x98/0x244 [ 208.427727][T11014] el0_svc_common+0xec/0x23c [ 208.427736][T11014] do_el0_svc+0x4c/0x5c [ 208.427746][T11014] el0_svc+0x64/0x260 [ 208.427754][T11014] el0t_64_sync_handler+0x44/0x104 [ 208.427762][T11014] el0t_64_sync+0x198/0x19c [ 208.428409][T11014] page_pool_create_percpu() gave up with errno -12 [ 208.497416][T11019] FAULT_INJECTION: forcing a failure. [ 208.497416][T11019] name failslab, interval 1, probability 0, space 0, times 0 [ 208.497451][T11019] CPU: 0 UID: 0 PID: 11019 Comm: syz.7.1694 Tainted: G L syzkaller #0 PREEMPT [ 208.497467][T11019] Tainted: [L]=SOFTLOCKUP [ 208.497471][T11019] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 208.497476][T11019] Call trace: [ 208.497479][T11019] show_stack+0x2c/0x3c (C) [ 208.497498][T11019] __dump_stack+0x30/0x40 [ 208.497510][T11019] dump_stack_lvl+0xd8/0x12c [ 208.497520][T11019] dump_stack+0x1c/0x28 [ 208.497530][T11019] should_fail_ex+0x41c/0x590 [ 208.497541][T11019] should_failslab+0xc4/0x120 [ 208.497549][T11019] __kmalloc_cache_noprof+0x94/0x5ec [ 208.497559][T11019] sget_fc+0x5c8/0x13e8 [ 208.497568][T11019] vfs_get_super+0x40/0x148 [ 208.497576][T11019] get_tree_nodev+0x2c/0x3c [ 208.497584][T11019] mqueue_get_tree+0xac/0xe8 [ 208.497595][T11019] vfs_get_tree+0x90/0x28c [ 208.497603][T11019] fc_mount+0x24/0xac [ 208.497611][T11019] fc_mount_longterm+0x20/0x74 [ 208.497620][T11019] mq_init_ns+0x3c8/0x638 [ 208.497629][T11019] copy_ipcs+0x3c8/0x63c [ 208.497638][T11019] create_new_namespaces+0x1a8/0x50c [ 208.497647][T11019] unshare_nsproxy_namespaces+0x120/0x170 [ 208.497656][T11019] ksys_unshare+0x3d4/0x6d8 [ 208.497665][T11019] __arm64_sys_unshare+0x40/0x54 [ 208.497673][T11019] invoke_syscall+0x98/0x244 [ 208.497683][T11019] el0_svc_common+0xec/0x23c [ 208.497693][T11019] do_el0_svc+0x4c/0x5c [ 208.497703][T11019] el0_svc+0x64/0x260 [ 208.497711][T11019] el0t_64_sync_handler+0x44/0x104 [ 208.497718][T11019] el0t_64_sync+0x198/0x19c [ 208.522711][T11021] netlink: 40 bytes leftover after parsing attributes in process `syz.7.1695'. [ 208.572333][T11024] loop7: detected capacity change from 0 to 8 [ 208.574390][T11024] squashfs: SQUASHFS error: Xattrs in filesystem, these will be ignored [ 208.574422][T11024] unable to read xattr id index table [ 208.578450][T11024] SQUASHFS error: zlib decompression failed, data probably corrupt [ 208.578481][T11024] SQUASHFS error: Failed to read block 0x9b: -5 [ 208.578492][T11024] SQUASHFS error: Unable to read metadata cache entry [99] [ 208.578500][T11024] SQUASHFS error: Unable to read inode 0x127 [ 208.673521][T11032] loop8: detected capacity change from 0 to 1024 [ 208.673906][T11032] EXT4-fs: Ignoring removed nomblk_io_submit option [ 208.680935][T11022] loop1: detected capacity change from 0 to 32768 [ 208.697100][T11032] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 208.731111][T11022] loop1: p1 p3 < > [ 209.125763][ T6290] udevd[6290]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 209.128984][ T9207] udevd[9207]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 209.221557][T10412] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 209.225628][ T50] Bluetooth: hci2: command 0x0c1a tx timeout [ 209.311803][ T50] Bluetooth: hci3: command 0x0406 tx timeout [ 209.346050][ C1] IPv4: Oversized IP packet from 172.20.20.24 [ 209.566116][T11066] FAULT_INJECTION: forcing a failure. [ 209.566116][T11066] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 209.570336][T11066] CPU: 0 UID: 0 PID: 11066 Comm: syz.8.1708 Tainted: G L syzkaller #0 PREEMPT [ 209.570362][T11066] Tainted: [L]=SOFTLOCKUP [ 209.570366][T11066] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 209.570372][T11066] Call trace: [ 209.570376][T11066] show_stack+0x2c/0x3c (C) [ 209.570397][T11066] __dump_stack+0x30/0x40 [ 209.570409][T11066] dump_stack_lvl+0xd8/0x12c [ 209.570419][T11066] dump_stack+0x1c/0x28 [ 209.570429][T11066] should_fail_ex+0x41c/0x590 [ 209.570440][T11066] should_fail+0x14/0x24 [ 209.570450][T11066] should_fail_usercopy+0x20/0x30 [ 209.570457][T11066] _inline_copy_from_user+0x3c/0x174 [ 209.570467][T11066] bpf_test_init+0xd8/0x154 [ 209.570474][T11066] bpf_prog_test_run_skb+0x2a0/0x1ed0 [ 209.570481][T11066] bpf_prog_test_run+0x1e0/0x250 [ 209.570490][T11066] __sys_bpf+0x6bc/0x82c [ 209.570497][T11066] __arm64_sys_bpf+0xd0/0xec [ 209.570504][T11066] invoke_syscall+0x98/0x244 [ 209.570514][T11066] el0_svc_common+0xec/0x23c [ 209.570524][T11066] do_el0_svc+0x4c/0x5c [ 209.570534][T11066] el0_svc+0x64/0x260 [ 209.570543][T11066] el0t_64_sync_handler+0x44/0x104 [ 209.570550][T11066] el0t_64_sync+0x198/0x19c [ 209.643668][T11078] loop7: detected capacity change from 0 to 2048 [ 209.668008][T11078] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 209.721482][T11078] FAULT_INJECTION: forcing a failure. [ 209.721482][T11078] name failslab, interval 1, probability 0, space 0, times 0 [ 209.731909][T11078] CPU: 0 UID: 0 PID: 11078 Comm: syz.7.1711 Tainted: G L syzkaller #0 PREEMPT [ 209.731935][T11078] Tainted: [L]=SOFTLOCKUP [ 209.731940][T11078] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 209.731946][T11078] Call trace: [ 209.731951][T11078] show_stack+0x2c/0x3c (C) [ 209.731977][T11078] __dump_stack+0x30/0x40 [ 209.731989][T11078] dump_stack_lvl+0xd8/0x12c [ 209.732000][T11078] dump_stack+0x1c/0x28 [ 209.732010][T11078] should_fail_ex+0x41c/0x590 [ 209.732023][T11078] should_failslab+0xc4/0x120 [ 209.732031][T11078] __kmalloc_cache_noprof+0x94/0x5ec [ 209.732041][T11078] ovs_ct_limit_cmd_set+0x20c/0x7f8 [ 209.732050][T11078] genl_family_rcv_msg_doit+0x1e4/0x2d4 [ 209.732062][T11078] genl_rcv_msg+0x43c/0x620 [ 209.732071][T11078] netlink_rcv_skb+0x238/0x414 [ 209.732080][T11078] genl_rcv+0x38/0x50 [ 209.732089][T11078] netlink_unicast+0x600/0x7f8 [ 209.732098][T11078] netlink_sendmsg+0x648/0x948 [ 209.732107][T11078] __sock_sendmsg+0xc8/0x17c [ 209.732117][T11078] ____sys_sendmsg+0x3d0/0x6c8 [ 209.732126][T11078] ___sys_sendmsg+0x198/0x224 [ 209.732135][T11078] __sys_sendmsg+0x158/0x204 [ 209.732144][T11078] __arm64_sys_sendmsg+0x88/0x9c [ 209.732154][T11078] invoke_syscall+0x98/0x244 [ 209.732164][T11078] el0_svc_common+0xec/0x23c [ 209.732174][T11078] do_el0_svc+0x4c/0x5c [ 209.732184][T11078] el0_svc+0x64/0x260 [ 209.732191][T11078] el0t_64_sync_handler+0x44/0x104 [ 209.732199][T11078] el0t_64_sync+0x198/0x19c [ 209.769728][ T9387] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 209.831876][ T4720] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 209.838796][T11095] loop1: detected capacity change from 0 to 1024 [ 209.839940][T11095] EXT4-fs: Ignoring removed nomblk_io_submit option [ 209.846124][T11095] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 209.895975][ T4709] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 209.950359][ T868] IPVS: starting estimator thread 0... [ 210.041060][T11118] IPVS: using max 65 ests per chain, 156000 per kthread [ 211.078598][T11179] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1729'. [ 211.086751][T11182] loop8: detected capacity change from 0 to 512 [ 211.101626][T11182] EXT4-fs (loop8): can't mount with commit=, fs mounted w/o journal [ 211.138287][T11186] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 211.140237][T11186] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 211.203569][T11192] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1735'. [ 211.207103][T11192] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1735'. [ 211.679696][T11195] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1736'. [ 211.711643][ T30] audit: type=1326 audit(216.351:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11208 comm="syz.7.1741" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff96979228 code=0x0 [ 211.788465][T11219] loop8: detected capacity change from 0 to 256 [ 211.789050][T11219] FAT-fs (loop8): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 211.798288][T11219] FAT-fs (loop8): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 212.233128][T11229] binder: 11228:11229 got transaction to invalid handle, 4 [ 212.233157][T11229] binder: 11228:11229 cannot find target node [ 212.233551][T11229] binder: 11228:11229 transaction call to 0:0 failed 13/29201/-22, code 0 size 88--453 line 3252 [ 212.255476][T11232] binder: BINDER_SET_CONTEXT_MGR already set [ 212.255503][T11232] binder: 11228:11232 ioctl 4018620d 20000080 returned -16 [ 212.264930][ T4833] binder: undelivered TRANSACTION_ERROR: 29201 [ 212.334046][T11237] FAULT_INJECTION: forcing a failure. [ 212.334046][T11237] name failslab, interval 1, probability 0, space 0, times 0 [ 212.334089][T11237] CPU: 1 UID: 0 PID: 11237 Comm: syz.5.1750 Tainted: G L syzkaller #0 PREEMPT [ 212.334108][T11237] Tainted: [L]=SOFTLOCKUP [ 212.334113][T11237] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 212.334118][T11237] Call trace: [ 212.334121][T11237] show_stack+0x2c/0x3c (C) [ 212.334141][T11237] __dump_stack+0x30/0x40 [ 212.334155][T11237] dump_stack_lvl+0xd8/0x12c [ 212.334166][T11237] dump_stack+0x1c/0x28 [ 212.334176][T11237] should_fail_ex+0x41c/0x590 [ 212.334190][T11237] should_failslab+0xc4/0x120 [ 212.334199][T11237] __kmalloc_cache_noprof+0x94/0x5ec [ 212.334209][T11237] __arm64_sys_mount+0x188/0x388 [ 212.334219][T11237] invoke_syscall+0x98/0x244 [ 212.334229][T11237] el0_svc_common+0xec/0x23c [ 212.334239][T11237] do_el0_svc+0x4c/0x5c [ 212.334248][T11237] el0_svc+0x64/0x260 [ 212.334257][T11237] el0t_64_sync_handler+0x44/0x104 [ 212.334264][T11237] el0t_64_sync+0x198/0x19c [ 212.663324][T11246] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 212.666167][T11246] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 212.810767][T11249] FAULT_INJECTION: forcing a failure. [ 212.810767][T11249] name failslab, interval 1, probability 0, space 0, times 0 [ 212.810810][T11249] CPU: 1 UID: 0 PID: 11249 Comm: syz.7.1755 Tainted: G L syzkaller #0 PREEMPT [ 212.810836][T11249] Tainted: [L]=SOFTLOCKUP [ 212.810842][T11249] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 212.810849][T11249] Call trace: [ 212.810852][T11249] show_stack+0x2c/0x3c (C) [ 212.810873][T11249] __dump_stack+0x30/0x40 [ 212.810884][T11249] dump_stack_lvl+0xd8/0x12c [ 212.810895][T11249] dump_stack+0x1c/0x28 [ 212.810904][T11249] should_fail_ex+0x41c/0x590 [ 212.810916][T11249] should_failslab+0xc4/0x120 [ 212.810924][T11249] __kmalloc_noprof+0x108/0x6b8 [ 212.810933][T11249] genl_family_rcv_msg_attrs_parse+0xcc/0x27c [ 212.810945][T11249] genl_family_rcv_msg_doit+0xd8/0x2d4 [ 212.810955][T11249] genl_rcv_msg+0x43c/0x620 [ 212.810965][T11249] netlink_rcv_skb+0x238/0x414 [ 212.810974][T11249] genl_rcv+0x38/0x50 [ 212.810983][T11249] netlink_unicast+0x600/0x7f8 [ 212.810991][T11249] netlink_sendmsg+0x648/0x948 [ 212.811000][T11249] __sock_sendmsg+0xc8/0x17c [ 212.811010][T11249] ____sys_sendmsg+0x3d0/0x6c8 [ 212.811019][T11249] ___sys_sendmsg+0x198/0x224 [ 212.811029][T11249] __sys_sendmsg+0x158/0x204 [ 212.811038][T11249] __arm64_sys_sendmsg+0x88/0x9c [ 212.811047][T11249] invoke_syscall+0x98/0x244 [ 212.811057][T11249] el0_svc_common+0xec/0x23c [ 212.811067][T11249] do_el0_svc+0x4c/0x5c [ 212.811080][T11249] el0_svc+0x64/0x260 [ 212.811089][T11249] el0t_64_sync_handler+0x44/0x104 [ 212.811098][T11249] el0t_64_sync+0x198/0x19c [ 212.819965][T11251] sctp: [Deprecated]: syz.8.1756 (pid 11251) Use of struct sctp_assoc_value in delayed_ack socket option. [ 212.819965][T11251] Use struct sctp_sack_info instead [ 213.809670][T11274] FAULT_INJECTION: forcing a failure. [ 213.809670][T11274] name failslab, interval 1, probability 0, space 0, times 0 [ 213.809722][T11274] CPU: 1 UID: 0 PID: 11274 Comm: syz.7.1762 Tainted: G L syzkaller #0 PREEMPT [ 213.809744][T11274] Tainted: [L]=SOFTLOCKUP [ 213.809749][T11274] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 213.809755][T11274] Call trace: [ 213.809759][T11274] show_stack+0x2c/0x3c (C) [ 213.809778][T11274] __dump_stack+0x30/0x40 [ 213.809793][T11274] dump_stack_lvl+0xd8/0x12c [ 213.809803][T11274] dump_stack+0x1c/0x28 [ 213.809812][T11274] should_fail_ex+0x41c/0x590 [ 213.809829][T11274] should_failslab+0xc4/0x120 [ 213.809838][T11274] kmem_cache_alloc_lru_noprof+0x98/0x5dc [ 213.809848][T11274] shmem_alloc_inode+0x2c/0x48 [ 213.809856][T11274] alloc_inode+0x68/0x198 [ 213.809866][T11274] new_inode+0x20/0x50 [ 213.809875][T11274] shmem_get_inode+0xac/0x788 [ 213.809883][T11274] __shmem_file_setup+0x168/0x284 [ 213.809890][T11274] shmem_file_setup+0x40/0x54 [ 213.809897][T11274] memfd_alloc_file+0x9c/0x2f0 [ 213.809906][T11274] __arm64_sys_memfd_create+0x318/0x3ec [ 213.809915][T11274] invoke_syscall+0x98/0x244 [ 213.809926][T11274] el0_svc_common+0xec/0x23c [ 213.809935][T11274] do_el0_svc+0x4c/0x5c [ 213.809945][T11274] el0_svc+0x64/0x260 [ 213.809954][T11274] el0t_64_sync_handler+0x44/0x104 [ 213.809961][T11274] el0t_64_sync+0x198/0x19c [ 213.819161][ T50] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 213.839095][T11275] loop1: detected capacity change from 0 to 512 [ 213.845982][T11275] EXT4-fs: Ignoring removed nobh option [ 213.865371][T11278] sctp: [Deprecated]: syz.7.1763 (pid 11278) Use of struct sctp_assoc_value in delayed_ack socket option. [ 213.865371][T11278] Use struct sctp_sack_info instead [ 213.873285][T11275] EXT4-fs (loop1): orphan cleanup on readonly fs [ 213.876293][T11275] EXT4-fs warning (device loop1): ext4_xattr_inode_get:560: inode #11: comm syz.1.1761: EA inode hash validation failed [ 213.880588][T11275] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2860: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 213.883799][T11275] EXT4-fs error (device loop1): ext4_do_update_inode:5742: inode #15: comm syz.1.1761: corrupted inode contents [ 213.887192][T11275] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 213.895491][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 213.895533][ C1] EXT4-fs (loop1): initial error at time 218: ext4_do_update_inode:5742: inode 15 [ 213.895569][ C1] EXT4-fs (loop1): last error at time 218: ext4_do_update_inode:5742: inode 15 [ 213.910543][T11275] EXT4-fs error (device loop1): ext4_dirty_inode:6639: inode #15: comm syz.1.1761: mark_inode_dirty error [ 213.910604][T11275] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 213.913530][T11275] EXT4-fs error (device loop1): ext4_do_update_inode:5742: inode #15: comm syz.1.1761: corrupted inode contents [ 213.913570][T11275] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 213.913866][T11275] EXT4-fs error (device loop1): ext4_xattr_delete_inode:3001: inode #15: comm syz.1.1761: mark_inode_dirty error [ 213.913888][T11275] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 213.914026][T11275] EXT4-fs error (device loop1): ext4_xattr_delete_inode:3004: inode #15: comm syz.1.1761: mark inode dirty (error -117) [ 213.914039][T11275] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 213.914153][T11275] EXT4-fs warning (device loop1): ext4_evict_inode:287: xattr delete (err -117) [ 213.914229][T11275] EXT4-fs (loop1): 1 orphan inode deleted [ 213.914685][T11275] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 214.363252][T11294] loop8: detected capacity change from 0 to 128 [ 214.372338][T11294] EXT4-fs (loop8): can't mount with journal_async_commit, fs mounted w/o journal [ 214.375564][T11294] FAULT_INJECTION: forcing a failure. [ 214.375564][T11294] name failslab, interval 1, probability 0, space 0, times 0 [ 214.377954][T11294] CPU: 1 UID: 0 PID: 11294 Comm: syz.8.1768 Tainted: G L syzkaller #0 PREEMPT [ 214.377977][T11294] Tainted: [L]=SOFTLOCKUP [ 214.377982][T11294] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 214.377988][T11294] Call trace: [ 214.377993][T11294] show_stack+0x2c/0x3c (C) [ 214.378018][T11294] __dump_stack+0x30/0x40 [ 214.378032][T11294] dump_stack_lvl+0xd8/0x12c [ 214.378044][T11294] dump_stack+0x1c/0x28 [ 214.378056][T11294] should_fail_ex+0x41c/0x590 [ 214.378068][T11294] should_failslab+0xc4/0x120 [ 214.378077][T11294] __kmalloc_noprof+0x108/0x6b8 [ 214.378086][T11294] tomoyo_realpath_from_path+0xbc/0x4dc [ 214.378096][T11294] tomoyo_check_open_permission+0x1c4/0x394 [ 214.378104][T11294] tomoyo_file_open+0x78/0xcc [ 214.378113][T11294] security_file_open+0xbc/0x258 [ 214.378121][T11294] do_dentry_open+0x2a8/0xfc0 [ 214.378131][T11294] vfs_open+0x44/0x2dc [ 214.378140][T11294] path_openat+0x21fc/0x2a60 [ 214.378149][T11294] do_file_open+0x1c8/0x2e8 [ 214.378157][T11294] do_sys_openat2+0x114/0x1e8 [ 214.378167][T11294] do_sys_open+0xb0/0xe0 [ 214.378177][T11294] __arm64_sys_openat+0xa8/0xc4 [ 214.378187][T11294] invoke_syscall+0x98/0x244 [ 214.378197][T11294] el0_svc_common+0xec/0x23c [ 214.378207][T11294] do_el0_svc+0x4c/0x5c [ 214.378216][T11294] el0_svc+0x64/0x260 [ 214.378225][T11294] el0t_64_sync_handler+0x44/0x104 [ 214.378232][T11294] el0t_64_sync+0x198/0x19c [ 214.384679][T11296] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1767'. [ 214.406956][T11294] ERROR: Out of memory at tomoyo_realpath_from_path. [ 214.514923][ T4709] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 214.550722][T11306] loop5: detected capacity change from 0 to 128 [ 214.555827][T11306] EXT4-fs (loop5): can't mount with journal_async_commit, fs mounted w/o journal [ 215.089772][T11326] FAULT_INJECTION: forcing a failure. [ 215.089772][T11326] name failslab, interval 1, probability 0, space 0, times 0 [ 215.089824][T11326] CPU: 0 UID: 0 PID: 11326 Comm: syz.7.1779 Tainted: G L syzkaller #0 PREEMPT [ 215.089840][T11326] Tainted: [L]=SOFTLOCKUP [ 215.089844][T11326] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 215.089854][T11326] Call trace: [ 215.089858][T11326] show_stack+0x2c/0x3c (C) [ 215.089879][T11326] __dump_stack+0x30/0x40 [ 215.089892][T11326] dump_stack_lvl+0xd8/0x12c [ 215.089902][T11326] dump_stack+0x1c/0x28 [ 215.089912][T11326] should_fail_ex+0x41c/0x590 [ 215.089924][T11326] should_failslab+0xc4/0x120 [ 215.089932][T11326] __kmalloc_cache_noprof+0x94/0x5ec [ 215.089942][T11326] rtnl_newlink+0x110/0x1144 [ 215.089951][T11326] rtnetlink_rcv_msg+0x66c/0x9bc [ 215.089959][T11326] netlink_rcv_skb+0x238/0x414 [ 215.089969][T11326] rtnetlink_rcv+0x28/0x38 [ 215.089977][T11326] netlink_unicast+0x600/0x7f8 [ 215.089985][T11326] netlink_sendmsg+0x648/0x948 [ 215.089994][T11326] __sock_sendmsg+0xc8/0x17c [ 215.090003][T11326] ____sys_sendmsg+0x3d0/0x6c8 [ 215.090012][T11326] ___sys_sendmsg+0x198/0x224 [ 215.090021][T11326] __sys_sendmsg+0x158/0x204 [ 215.090030][T11326] __arm64_sys_sendmsg+0x88/0x9c [ 215.090040][T11326] invoke_syscall+0x98/0x244 [ 215.090050][T11326] el0_svc_common+0xec/0x23c [ 215.090060][T11326] do_el0_svc+0x4c/0x5c [ 215.090069][T11326] el0_svc+0x64/0x260 [ 215.090078][T11326] el0t_64_sync_handler+0x44/0x104 [ 215.090085][T11326] el0t_64_sync+0x198/0x19c [ 215.222446][T11334] RDS: rds_bind could not find a transport for 2001::, load rds_tcp or rds_rdma? [ 215.722811][T11353] loop5: detected capacity change from 0 to 512 [ 215.745570][T11353] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 215.748999][T11344] loop8: detected capacity change from 0 to 1024 [ 215.751736][T11344] EXT4-fs: Ignoring removed bh option [ 215.751948][T11344] EXT4-fs: Ignoring removed bh option [ 215.757371][T11344] EXT4-fs (loop8): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 215.774785][T11344] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 215.777003][T11353] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 215.778006][T11353] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 215.804338][T11344] EXT4-fs (loop8): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 215.825095][ T5511] EXT4-fs error (device loop5): ext4_empty_dir:3082: inode #12: comm syz-executor: invalid size [ 215.830389][ T5511] EXT4-fs error (device loop5): ext4_empty_dir:3082: inode #12: comm syz-executor: invalid size [ 215.836017][ T5511] EXT4-fs error (device loop5): ext4_empty_dir:3082: inode #12: comm syz-executor: invalid size [ 215.839083][ T5511] EXT4-fs error (device loop5): ext4_empty_dir:3082: inode #12: comm syz-executor: invalid size [ 215.843064][ T5511] EXT4-fs error (device loop5): ext4_empty_dir:3082: inode #12: comm syz-executor: invalid size [ 215.846132][ T5511] EXT4-fs error (device loop5): ext4_empty_dir:3082: inode #12: comm syz-executor: invalid size [ 215.846711][T10412] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 215.850474][ T5511] EXT4-fs error (device loop5): ext4_empty_dir:3082: inode #12: comm syz-executor: invalid size [ 215.859795][ T5511] EXT4-fs error (device loop5): ext4_empty_dir:3082: inode #12: comm syz-executor: invalid size [ 215.863426][ T5511] EXT4-fs error (device loop5): ext4_empty_dir:3082: inode #12: comm syz-executor: invalid size [ 215.865899][ T5511] EXT4-fs error (device loop5): ext4_empty_dir:3082: inode #12: comm syz-executor: invalid size [ 216.003275][ T7120] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 216.167570][T11362] pim6reg: entered allmulticast mode [ 216.170060][T11362] pim6reg: left allmulticast mode [ 216.412491][ T4720] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 216.416183][ T4720] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 216.417790][ T4720] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 216.421617][ T4720] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 216.424253][ T4720] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 216.858399][ T4849] bond0 (unregistering): (slave 30): Releasing backup interface [ 216.878895][ T4849] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 216.897276][ T4849] bond0 (unregistering): Released all slaves [ 216.910151][ T4398] 8021q: adding VLAN 0 to HW filter on device eth16 [ 217.016625][T11377] bridge0: port 1(bridge_slave_0) entered blocking state [ 217.016722][T11377] bridge0: port 1(bridge_slave_0) entered disabled state [ 217.016805][T11377] bridge_slave_0: entered allmulticast mode [ 217.017260][T11377] bridge_slave_0: entered promiscuous mode [ 217.018117][T11377] bridge0: port 2(bridge_slave_1) entered blocking state [ 217.018172][T11377] bridge0: port 2(bridge_slave_1) entered disabled state [ 217.018228][T11377] bridge_slave_1: entered allmulticast mode [ 217.018633][T11377] bridge_slave_1: entered promiscuous mode [ 217.025434][T11377] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 217.026358][T11377] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 217.033547][T11377] team0: Port device team_slave_0 added [ 217.034432][T11377] team0: Port device team_slave_1 added [ 217.093457][T11377] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 217.093494][T11377] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 217.093524][T11377] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 217.094186][T11377] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 217.094193][T11377] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 217.094206][T11377] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 217.116447][T11377] hsr_slave_0: entered promiscuous mode [ 217.121922][T11377] hsr_slave_1: entered promiscuous mode [ 217.129557][T11377] debugfs: 'hsr0' already exists in 'hsr' [ 217.129594][T11377] Cannot create hsr debugfs directory [ 217.152496][T11430] loop4: detected capacity change from 0 to 4096 [ 217.154454][T11430] EXT4-fs: inline encryption not supported [ 217.159803][T11430] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 217.159842][T11430] EXT4-fs (loop4): Test dummy encryption mode enabled [ 217.164286][T11430] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=280ec1a8, mo2=0003] [ 217.166074][T11430] System zones: 0-5 [ 217.170659][ T4398] 8021q: adding VLAN 0 to HW filter on device eth17 [ 217.172305][T11430] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 217.216507][T11430] overlayfs: refusing to follow metacopy origin for (/file1) [ 217.237967][ T4849] hsr_slave_0: left promiscuous mode [ 217.239631][ T4849] hsr_slave_1: left promiscuous mode [ 217.240170][ T4849] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 217.243306][ T4849] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 217.267891][ T4710] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 217.297210][T11434] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 217.297410][T11434] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 217.306099][T11436] netlink: 140 bytes leftover after parsing attributes in process `syz.4.1801'. [ 217.327614][T11438] usb usb8: usbfs: interface 0 claimed by hub while 'syz.4.1803' resets device [ 217.418383][ T4849] team0 (unregistering): Port device team_slave_1 removed [ 217.429516][ T4849] team0 (unregistering): Port device team_slave_0 removed [ 217.546049][T11446] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1804'. [ 217.563295][T11445] bridge0: port 2(bridge_slave_1) entered disabled state [ 217.563508][T11445] bridge0: port 1(bridge_slave_0) entered disabled state [ 217.602272][T11445] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 217.606377][T11445] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 217.669809][T11445] macvlan0: left promiscuous mode [ 217.806111][ T4398] 8021q: adding VLAN 0 to HW filter on device eth18 [ 217.848693][T11377] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 217.855559][T11377] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 217.856923][T11377] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 217.862000][T11377] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 217.863020][T11474] Set syz1 is full, maxelem 1029 reached [ 217.864815][T11377] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 217.865442][T11474] loop8: detected capacity change from 0 to 128 [ 217.870442][T11377] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 217.870785][T11377] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 217.876657][T11377] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 217.944616][T11483] 8021q: adding VLAN 0 to HW filter on device bond0 [ 217.945442][T11483] 8021q: adding VLAN 0 to HW filter on device team0 [ 217.947263][T11483] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 217.954702][T11483] bridge0: port 1(bridge_slave_0) entered blocking state [ 217.954762][T11483] bridge0: port 1(bridge_slave_0) entered forwarding state [ 217.958561][T11483] bridge0: port 2(bridge_slave_1) entered blocking state [ 217.958606][T11483] bridge0: port 2(bridge_slave_1) entered forwarding state [ 217.964226][T11483] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 217.965813][T11483] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 217.977170][T11483] veth1_vlan: left promiscuous mode [ 217.977574][T11483] veth0_vlan: left promiscuous mode [ 217.978278][T11483] veth0_vlan: entered promiscuous mode [ 217.979530][T11483] veth1_vlan: entered promiscuous mode [ 217.981485][T11488] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 217.985442][T11483] veth1_macvtap: left promiscuous mode [ 217.990003][T11483] veth0_macvtap: left promiscuous mode [ 217.990521][T11483] veth0_macvtap: entered promiscuous mode [ 217.991024][T11483] veth1_macvtap: entered promiscuous mode [ 218.002971][T11483] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 218.005118][T11483] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 218.007539][T11483] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 218.010970][T11483] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 218.065053][T11377] 8021q: adding VLAN 0 to HW filter on device bond0 [ 218.081165][T11377] 8021q: adding VLAN 0 to HW filter on device team0 [ 218.086390][ T40] bridge0: port 1(bridge_slave_0) entered blocking state [ 218.086448][ T40] bridge0: port 1(bridge_slave_0) entered forwarding state [ 218.086974][ T40] bridge0: port 2(bridge_slave_1) entered blocking state [ 218.086994][ T40] bridge0: port 2(bridge_slave_1) entered forwarding state [ 218.143763][ T4398] 8021q: adding VLAN 0 to HW filter on device eth19 [ 218.203263][T11509] loop8: detected capacity change from 0 to 512 [ 218.269697][T11516] block device autoloading is deprecated and will be removed. [ 218.293678][T11377] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 218.375360][T11526] FAULT_INJECTION: forcing a failure. [ 218.375360][T11526] name failslab, interval 1, probability 0, space 0, times 0 [ 218.375406][T11526] CPU: 1 UID: 0 PID: 11526 Comm: syz.7.1813 Tainted: G L syzkaller #0 PREEMPT [ 218.375424][T11526] Tainted: [L]=SOFTLOCKUP [ 218.375429][T11526] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 218.375436][T11526] Call trace: [ 218.375439][T11526] show_stack+0x2c/0x3c (C) [ 218.375459][T11526] __dump_stack+0x30/0x40 [ 218.375471][T11526] dump_stack_lvl+0xd8/0x12c [ 218.375481][T11526] dump_stack+0x1c/0x28 [ 218.375490][T11526] should_fail_ex+0x41c/0x590 [ 218.375502][T11526] should_failslab+0xc4/0x120 [ 218.375510][T11526] kmem_cache_alloc_node_noprof+0x98/0x5f8 [ 218.375520][T11526] __alloc_skb+0x1f0/0x610 [ 218.375530][T11526] netlink_ack+0x11c/0x890 [ 218.375539][T11526] netlink_rcv_skb+0x21c/0x414 [ 218.375548][T11526] genl_rcv+0x38/0x50 [ 218.375558][T11526] netlink_unicast+0x600/0x7f8 [ 218.375566][T11526] netlink_sendmsg+0x648/0x948 [ 218.375575][T11526] __sock_sendmsg+0xc8/0x17c [ 218.375583][T11526] ____sys_sendmsg+0x3d0/0x6c8 [ 218.375593][T11526] ___sys_sendmsg+0x198/0x224 [ 218.375602][T11526] __sys_sendmsg+0x158/0x204 [ 218.375611][T11526] __arm64_sys_sendmsg+0x88/0x9c [ 218.375620][T11526] invoke_syscall+0x98/0x244 [ 218.375631][T11526] el0_svc_common+0xec/0x23c [ 218.375640][T11526] do_el0_svc+0x4c/0x5c [ 218.375650][T11526] el0_svc+0x64/0x260 [ 218.375659][T11526] el0t_64_sync_handler+0x44/0x104 [ 218.375666][T11526] el0t_64_sync+0x198/0x19c [ 218.409573][T11377] veth0_vlan: entered promiscuous mode [ 218.413315][T11377] veth1_vlan: entered promiscuous mode [ 218.414682][T11528] loop7: detected capacity change from 0 to 128 [ 218.425581][T11377] veth0_macvtap: entered promiscuous mode [ 218.431920][T11377] veth1_macvtap: entered promiscuous mode [ 218.440245][T11377] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 218.444521][T11377] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 218.490523][ T40] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.490573][ T40] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.490610][ T40] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.490632][ T40] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.505484][ T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 218.505512][ T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 218.515393][ T5270] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 218.515423][ T5270] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 218.649508][T11542] siw: device registration error -23 [ 218.675043][ T4720] Bluetooth: hci4: command tx timeout [ 218.688724][T11540] netlink: 64 bytes leftover after parsing attributes in process `syz.7.1815'. [ 218.878968][T11546] loop9: detected capacity change from 0 to 256 [ 219.213231][T11552] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1819'. [ 219.715970][ T4720] Bluetooth: hci5: command 0x1003 tx timeout [ 219.717238][ T50] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 219.727497][T11560] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1820'. [ 220.574094][T11575] Invalid source name [ 220.574122][T11575] UBIFS error (pid: 11575): cannot open "ubifs", error -22 [ 220.625118][T11582] FAULT_INJECTION: forcing a failure. [ 220.625118][T11582] name failslab, interval 1, probability 0, space 0, times 0 [ 220.625162][T11582] CPU: 0 UID: 0 PID: 11582 Comm: syz.4.1827 Tainted: G L syzkaller #0 PREEMPT [ 220.625181][T11582] Tainted: [L]=SOFTLOCKUP [ 220.625186][T11582] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 220.625192][T11582] Call trace: [ 220.625195][T11582] show_stack+0x2c/0x3c (C) [ 220.625216][T11582] __dump_stack+0x30/0x40 [ 220.625227][T11582] dump_stack_lvl+0xd8/0x12c [ 220.625237][T11582] dump_stack+0x1c/0x28 [ 220.625247][T11582] should_fail_ex+0x41c/0x590 [ 220.625258][T11582] should_failslab+0xc4/0x120 [ 220.625267][T11582] kmem_cache_alloc_node_noprof+0x98/0x5f8 [ 220.625276][T11582] __alloc_skb+0x1f0/0x610 [ 220.625286][T11582] netlink_ack+0x11c/0x890 [ 220.625296][T11582] netlink_rcv_skb+0x21c/0x414 [ 220.625305][T11582] genl_rcv+0x38/0x50 [ 220.625315][T11582] netlink_unicast+0x600/0x7f8 [ 220.625323][T11582] netlink_sendmsg+0x648/0x948 [ 220.625332][T11582] __sock_sendmsg+0xc8/0x17c [ 220.625341][T11582] ____sys_sendmsg+0x3d0/0x6c8 [ 220.625350][T11582] ___sys_sendmsg+0x198/0x224 [ 220.625359][T11582] __sys_sendmsg+0x158/0x204 [ 220.625368][T11582] __arm64_sys_sendmsg+0x88/0x9c [ 220.625378][T11582] invoke_syscall+0x98/0x244 [ 220.625388][T11582] el0_svc_common+0xec/0x23c [ 220.625398][T11582] do_el0_svc+0x4c/0x5c [ 220.625407][T11582] el0_svc+0x64/0x260 [ 220.625416][T11582] el0t_64_sync_handler+0x44/0x104 [ 220.625423][T11582] el0t_64_sync+0x198/0x19c [ 220.816524][T11451] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 221.027790][ T50] Bluetooth: hci4: command tx timeout [ 221.214666][T11598] loop8: detected capacity change from 0 to 8192 [ 221.217046][T11598] FAT-fs (loop8): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 221.295179][T11601] loop8: detected capacity change from 0 to 512 [ 221.483736][T11625] loop9: detected capacity change from 0 to 128 [ 221.559894][T11629] loop8: detected capacity change from 0 to 2048 [ 221.591954][T11629] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 221.594958][T11629] FAULT_INJECTION: forcing a failure. [ 221.594958][T11629] name failslab, interval 1, probability 0, space 0, times 0 [ 221.594980][T11629] CPU: 1 UID: 0 PID: 11629 Comm: syz.8.1841 Tainted: G L syzkaller #0 PREEMPT [ 221.594995][T11629] Tainted: [L]=SOFTLOCKUP [ 221.594999][T11629] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 221.595004][T11629] Call trace: [ 221.595008][T11629] show_stack+0x2c/0x3c (C) [ 221.595026][T11629] __dump_stack+0x30/0x40 [ 221.595037][T11629] dump_stack_lvl+0xd8/0x12c [ 221.595047][T11629] dump_stack+0x1c/0x28 [ 221.595056][T11629] should_fail_ex+0x41c/0x590 [ 221.595068][T11629] should_failslab+0xc4/0x120 [ 221.595076][T11629] __kmalloc_cache_noprof+0x94/0x5ec [ 221.595085][T11629] ovs_ct_limit_cmd_set+0x20c/0x7f8 [ 221.595095][T11629] genl_family_rcv_msg_doit+0x1e4/0x2d4 [ 221.595106][T11629] genl_rcv_msg+0x43c/0x620 [ 221.595116][T11629] netlink_rcv_skb+0x238/0x414 [ 221.595125][T11629] genl_rcv+0x38/0x50 [ 221.595134][T11629] netlink_unicast+0x600/0x7f8 [ 221.595142][T11629] netlink_sendmsg+0x648/0x948 [ 221.595151][T11629] __sock_sendmsg+0xc8/0x17c [ 221.595161][T11629] ____sys_sendmsg+0x3d0/0x6c8 [ 221.595170][T11629] ___sys_sendmsg+0x198/0x224 [ 221.595179][T11629] __sys_sendmsg+0x158/0x204 [ 221.595188][T11629] __arm64_sys_sendmsg+0x88/0x9c [ 221.595198][T11629] invoke_syscall+0x98/0x244 [ 221.595208][T11629] el0_svc_common+0xec/0x23c [ 221.595218][T11629] do_el0_svc+0x4c/0x5c [ 221.595228][T11629] el0_svc+0x64/0x260 [ 221.595235][T11629] el0t_64_sync_handler+0x44/0x104 [ 221.595242][T11629] el0t_64_sync+0x198/0x19c [ 221.660197][T10412] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 221.691759][ T4398] veth0_vlan: left promiscuous mode [ 221.758768][ T9] veth0_vlan: entered promiscuous mode [ 221.805554][T11642] loop8: detected capacity change from 0 to 128 [ 222.096718][T11650] FAULT_INJECTION: forcing a failure. [ 222.096718][T11650] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 222.104499][T11650] CPU: 1 UID: 0 PID: 11650 Comm: syz.1.1845 Tainted: G L syzkaller #0 PREEMPT [ 222.104527][T11650] Tainted: [L]=SOFTLOCKUP [ 222.104532][T11650] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 222.104538][T11650] Call trace: [ 222.104542][T11650] show_stack+0x2c/0x3c (C) [ 222.104568][T11650] __dump_stack+0x30/0x40 [ 222.104584][T11650] dump_stack_lvl+0xd8/0x12c [ 222.104595][T11650] dump_stack+0x1c/0x28 [ 222.104605][T11650] should_fail_ex+0x41c/0x590 [ 222.104617][T11650] should_fail+0x14/0x24 [ 222.104627][T11650] should_fail_usercopy+0x20/0x30 [ 222.104635][T11650] copy_from_sockptr+0x7c/0x1e0 [ 222.104643][T11650] __cgroup_bpf_run_filter_setsockopt+0x260/0xbbc [ 222.104651][T11650] do_sock_setsockopt+0x2e8/0x330 [ 222.104662][T11650] __sys_setsockopt+0x104/0x170 [ 222.104671][T11650] __arm64_sys_setsockopt+0xc8/0xe4 [ 222.104681][T11650] invoke_syscall+0x98/0x244 [ 222.104691][T11650] el0_svc_common+0xec/0x23c [ 222.104701][T11650] do_el0_svc+0x4c/0x5c [ 222.104711][T11650] el0_svc+0x64/0x260 [ 222.104720][T11650] el0t_64_sync_handler+0x44/0x104 [ 222.104727][T11650] el0t_64_sync+0x198/0x19c [ 222.372951][T11675] sctp: [Deprecated]: syz.8.1849 (pid 11675) Use of int in maxseg socket option. [ 222.372951][T11675] Use struct sctp_assoc_value instead [ 222.435570][T11676] netlink: 44 bytes leftover after parsing attributes in process `syz.8.1849'. [ 222.518649][T11686] loop9: detected capacity change from 0 to 512 [ 222.522478][T11686] EXT4-fs (loop9): revision level too high, forcing read-only mode [ 222.522505][T11686] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842c01c, mo2=0002] [ 222.522552][T11686] System zones: 1-12 [ 222.522652][T11686] EXT4-fs (loop9): couldn't mount RDWR because of unsupported optional features (80) [ 222.522665][T11686] EXT4-fs (loop9): Skipping orphan cleanup due to unknown ROCOMPAT features [ 222.523147][T11686] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 222.540316][T11686] EXT4-fs error (device loop9): ext4_map_blocks:791: inode #2: block 3: comm syz.9.1851: lblock 0 mapped to illegal pblock 3 (length 1) [ 222.550635][T11686] EXT4-fs warning (device loop9): dx_probe:791: inode #2: lblock 0: comm syz.9.1851: error -EUCLEAN reading directory block [ 222.555130][T11686] EXT4-fs error (device loop9): ext4_map_blocks:791: inode #2: block 3: comm syz.9.1851: lblock 0 mapped to illegal pblock 3 (length 1) [ 222.558169][T11686] EXT4-fs warning (device loop9): dx_probe:791: inode #2: lblock 0: comm syz.9.1851: error -EUCLEAN reading directory block [ 222.585758][T11686] EXT4-fs error (device loop9): ext4_map_blocks:791: inode #2: block 3: comm syz.9.1851: lblock 0 mapped to illegal pblock 3 (length 1) [ 222.592311][T11686] EXT4-fs warning (device loop9): dx_probe:791: inode #2: lblock 0: comm syz.9.1851: error -EUCLEAN reading directory block [ 222.596948][T11686] EXT4-fs error (device loop9): ext4_map_blocks:791: inode #2: block 3: comm syz.9.1851: lblock 0 mapped to illegal pblock 3 (length 1) [ 222.600804][T11686] EXT4-fs warning (device loop9): dx_probe:791: inode #2: lblock 0: comm syz.9.1851: error -EUCLEAN reading directory block [ 222.604310][T11686] EXT4-fs error (device loop9): ext4_map_blocks:791: inode #2: block 3: comm syz.9.1851: lblock 0 mapped to illegal pblock 3 (length 1) [ 222.607350][T11686] EXT4-fs warning (device loop9): dx_probe:791: inode #2: lblock 0: comm syz.9.1851: error -EUCLEAN reading directory block [ 222.643905][T11377] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 222.653124][T11694] lo: entered promiscuous mode [ 222.653161][T11694] lo: entered allmulticast mode [ 222.664561][T11694] tunl0: entered promiscuous mode [ 222.664596][T11694] tunl0: entered allmulticast mode [ 222.665044][T11694] gre0: entered promiscuous mode [ 222.665061][T11694] gre0: entered allmulticast mode [ 222.665877][T11694] gretap0: entered promiscuous mode [ 222.665888][T11694] gretap0: entered allmulticast mode [ 222.681329][T11694] erspan0: entered promiscuous mode [ 222.681370][T11694] erspan0: entered allmulticast mode [ 222.682141][T11694] ip_vti0: entered promiscuous mode [ 222.682151][T11694] ip_vti0: entered allmulticast mode [ 222.682551][T11694] ip6_vti0: entered promiscuous mode [ 222.682561][T11694] ip6_vti0: entered allmulticast mode [ 222.683006][T11694] sit0: entered promiscuous mode [ 222.683018][T11694] sit0: entered allmulticast mode [ 222.708386][T11694] ip6tnl0: entered promiscuous mode [ 222.708425][T11694] ip6tnl0: entered allmulticast mode [ 222.708945][T11694] ip6gre0: entered promiscuous mode [ 222.708956][T11694] ip6gre0: entered allmulticast mode [ 222.709433][T11694] syz_tun: entered promiscuous mode [ 222.709443][T11694] syz_tun: entered allmulticast mode [ 222.748028][T11694] ip6gretap0: entered promiscuous mode [ 222.748070][T11694] ip6gretap0: entered allmulticast mode [ 222.755745][T11694] bridge0: entered promiscuous mode [ 222.755801][T11694] bridge0: entered allmulticast mode [ 222.756407][T11694] vcan0: entered promiscuous mode [ 222.756425][T11694] vcan0: entered allmulticast mode [ 222.756801][T11694] bond0: entered promiscuous mode [ 222.756823][T11694] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 222.756913][T11694] bond0: entered allmulticast mode [ 222.756930][T11694] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 222.757368][T11694] 8021q: adding VLAN 0 to HW filter on device bond0 [ 222.757882][T11694] team0: entered promiscuous mode [ 222.757899][T11694] xfrm0: entered promiscuous mode [ 222.757975][T11694] team0: entered allmulticast mode [ 222.757990][T11694] xfrm0: entered allmulticast mode [ 222.758170][T11694] 8021q: adding VLAN 0 to HW filter on device team0 [ 222.758609][T11694] dummy0: entered promiscuous mode [ 222.758627][T11694] dummy0: entered allmulticast mode [ 222.759177][T11694] nlmon0: entered promiscuous mode [ 222.759193][T11694] nlmon0: entered allmulticast mode [ 222.759565][T11694] batadv0: entered promiscuous mode [ 222.759581][T11694] batadv0: entered allmulticast mode [ 222.772234][T11702] netlink: 16 bytes leftover after parsing attributes in process `syz.9.1856'. [ 222.825010][T11694] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 222.825599][T11694] vxcan0: entered promiscuous mode [ 222.825611][T11694] vxcan0: entered allmulticast mode [ 222.826064][T11694] vxcan1: entered promiscuous mode [ 222.826074][T11694] vxcan1: entered allmulticast mode [ 222.826381][T11694] veth0: entered promiscuous mode [ 222.826391][T11694] veth0: entered allmulticast mode [ 222.826723][T11694] veth1: entered promiscuous mode [ 222.826733][T11694] veth1: entered allmulticast mode [ 222.838558][T11694] wg0: entered promiscuous mode [ 222.838596][T11694] wg0: entered allmulticast mode [ 222.842201][T11694] wg1: entered promiscuous mode [ 222.842248][T11694] wg1: entered allmulticast mode [ 222.842769][T11694] wg2: entered promiscuous mode [ 222.842788][T11694] wg2: entered allmulticast mode [ 222.843002][T11694] veth0_to_bridge: entered promiscuous mode [ 222.843019][T11694] veth0_to_bridge: entered allmulticast mode [ 222.843392][T11694] bridge_slave_0: entered promiscuous mode [ 222.843409][T11694] bridge_slave_0: entered allmulticast mode [ 222.843636][T11694] veth1_to_bridge: entered promiscuous mode [ 222.843652][T11694] veth1_to_bridge: entered allmulticast mode [ 222.843997][T11694] bridge_slave_1: entered promiscuous mode [ 222.844013][T11694] bridge_slave_1: entered allmulticast mode [ 222.844235][T11694] veth0_to_bond: entered promiscuous mode [ 222.844251][T11694] veth0_to_bond: entered allmulticast mode [ 222.844585][T11694] bond_slave_0: entered promiscuous mode [ 222.844602][T11694] bond_slave_0: entered allmulticast mode [ 222.844852][T11694] veth1_to_bond: entered promiscuous mode [ 222.844868][T11694] veth1_to_bond: entered allmulticast mode [ 222.845229][T11694] bond_slave_1: entered promiscuous mode [ 222.845246][T11694] bond_slave_1: entered allmulticast mode [ 222.845477][T11694] veth0_to_team: entered promiscuous mode [ 222.845492][T11694] veth0_to_team: entered allmulticast mode [ 222.859318][T11694] team_slave_0: entered promiscuous mode [ 222.859334][T11694] team_slave_0: entered allmulticast mode [ 222.859571][T11694] veth1_to_team: entered promiscuous mode [ 222.859581][T11694] veth1_to_team: entered allmulticast mode [ 222.859922][T11694] team_slave_1: entered promiscuous mode [ 222.859931][T11694] team_slave_1: entered allmulticast mode [ 222.860143][T11694] veth0_to_batadv: entered promiscuous mode [ 222.860153][T11694] veth0_to_batadv: entered allmulticast mode [ 222.860497][T11694] batadv_slave_0: entered promiscuous mode [ 222.860507][T11694] batadv_slave_0: entered allmulticast mode [ 222.860800][T11694] veth1_to_batadv: entered promiscuous mode [ 222.860810][T11694] veth1_to_batadv: entered allmulticast mode [ 222.861138][T11694] batadv_slave_1: entered promiscuous mode [ 222.861148][T11694] batadv_slave_1: entered allmulticast mode [ 222.862328][T11694] veth0_to_hsr: entered promiscuous mode [ 222.862339][T11694] veth0_to_hsr: entered allmulticast mode [ 222.862901][T11694] veth1_to_hsr: entered promiscuous mode [ 222.862911][T11694] veth1_to_hsr: entered allmulticast mode [ 222.863439][T11694] 0·: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 222.863451][T11694] 0·: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 222.863471][T11694] 0·: entered promiscuous mode [ 222.864572][T11694] veth1_virt_wifi: entered promiscuous mode [ 222.864584][T11694] veth1_virt_wifi: entered allmulticast mode [ 222.864922][T11694] veth0_virt_wifi: entered promiscuous mode [ 222.864932][T11694] veth0_virt_wifi: entered allmulticast mode [ 222.865227][T11694] virt_wifi0: entered promiscuous mode [ 222.865236][T11694] virt_wifi0: entered allmulticast mode [ 222.865561][T11694] veth1_vlan: left promiscuous mode [ 222.865574][T11694] veth1_vlan: entered promiscuous mode [ 222.865584][T11694] veth1_vlan: entered allmulticast mode [ 222.865918][T11694] veth0_vlan: left promiscuous mode [ 222.865930][T11694] veth0_vlan: entered promiscuous mode [ 222.865939][T11694] veth0_vlan: entered allmulticast mode [ 222.866494][T11694] vlan0: entered promiscuous mode [ 222.866555][T11694] vlan0: entered allmulticast mode [ 222.866871][T11694] vlan1: entered promiscuous mode [ 222.866919][T11694] vlan1: entered allmulticast mode [ 222.867257][T11694] macvlan0: entered promiscuous mode [ 222.867310][T11694] macvlan0: entered allmulticast mode [ 222.867650][T11694] macvlan1: entered promiscuous mode [ 222.867692][T11694] macvlan1: entered allmulticast mode [ 222.882100][T11694] ipvlan0: entered promiscuous mode [ 222.882119][T11694] ipvlan0: entered allmulticast mode [ 222.882571][T11694] ipvlan1: entered promiscuous mode [ 222.882583][T11694] ipvlan1: entered allmulticast mode [ 222.882922][T11694] veth1_macvtap: left promiscuous mode [ 222.882934][T11694] veth1_macvtap: entered promiscuous mode [ 222.882942][T11694] veth1_macvtap: entered allmulticast mode [ 222.883316][T11694] veth0_macvtap: entered allmulticast mode [ 222.883628][T11694] macsec0: entered promiscuous mode [ 222.883694][T11694] macsec0: entered allmulticast mode [ 222.884125][T11694] geneve0: entered promiscuous mode [ 222.884134][T11694] geneve0: entered allmulticast mode [ 222.884724][T11694] geneve1: entered promiscuous mode [ 222.884734][T11694] geneve1: entered allmulticast mode [ 222.885617][T11694] netdevsim netdevsim4 netdevsim1: entered promiscuous mode [ 222.885632][T11694] netdevsim netdevsim4 netdevsim1: entered allmulticast mode [ 222.885724][T11694] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 222.886170][T11694] netdevsim netdevsim4 netdevsim2: entered promiscuous mode [ 222.886184][T11694] netdevsim netdevsim4 netdevsim2: entered allmulticast mode [ 222.886273][T11694] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 222.886697][T11694] netdevsim netdevsim4 netdevsim3: entered promiscuous mode [ 222.886711][T11694] netdevsim netdevsim4 netdevsim3: entered allmulticast mode [ 222.886797][T11694] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 222.887274][T11694] mac80211_hwsim hwsim10 wlan0: entered promiscuous mode [ 222.887289][T11694] mac80211_hwsim hwsim10 wlan0: entered allmulticast mode [ 222.887604][T11694] mac80211_hwsim hwsim11 wlan1: entered promiscuous mode [ 222.887618][T11694] mac80211_hwsim hwsim11 wlan1: entered allmulticast mode [ 222.887905][T11694] erspan0.1: entered promiscuous mode [ 222.887953][T11694] erspan0.1: entered allmulticast mode [ 222.888662][T11694] bridge1: entered promiscuous mode [ 222.888673][T11694] bridge1: entered allmulticast mode [ 222.888997][T11694] ipip0: entered promiscuous mode [ 222.889006][T11694] ipip0: entered allmulticast mode [ 222.914149][T11694] vxlan0: entered promiscuous mode [ 222.914170][T11694] vxlan0: entered allmulticast mode [ 222.914752][T11694] bridge2: entered promiscuous mode [ 222.914764][T11694] bridge2: entered allmulticast mode [ 222.914979][T11694] bridge3: entered promiscuous mode [ 222.914989][T11694] bridge3: entered allmulticast mode [ 222.915168][T11694] bridge4: entered promiscuous mode [ 222.915177][T11694] bridge4: entered allmulticast mode [ 222.924778][ T40] IPv6: BUG: Address fc00:: on device lo is missing its host route. [ 222.960819][T11707] binder: 11706:11707 ioctl c0306201 0 returned -14 [ 222.966511][T11707] 9p: Bad value for 'wfdno' [ 223.000174][ T40] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 223.000224][ T40] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.000411][ T40] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 223.000436][ T40] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.001537][ T40] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 223.001551][ T40] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.001567][ T40] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 223.001577][ T40] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.789960][ T50] Bluetooth: hci4: command tx timeout