last executing test programs: 1m50.82874906s ago: executing program 0 (id=7): setregid(0xee00, 0xee00) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r0) mount(0x0, &(0x7f00000010c0)='.\x00', &(0x7f0000000000)='proc\x00', 0x80, 0x0) r1 = syz_clone(0x0, 0x0, 0x1d, 0x0, 0x0, 0x0) r2 = syz_open_procfs(r1, &(0x7f0000000040)='stat\x00') pread64(r2, &(0x7f0000000140)=""/15, 0xf, 0x4) 1m50.75136616s ago: executing program 0 (id=8): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000004c0)={{r0}, &(0x7f00000003c0), &(0x7f0000000400)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000080000002d01000000000000850000000100000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$packet(0x11, 0x2, 0x300) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000800)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4) bpf$ENABLE_STATS(0x20, 0x0, 0x0) syz_emit_ethernet(0xfdef, &(0x7f0000000380)=ANY=[], 0x0) 1m50.691226284s ago: executing program 0 (id=11): openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x100c08a, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x7, 0x2d2, &(0x7f0000000800)="$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") r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./mysys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./mysys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./mysys/bus/platform/drivers/dummy_hcd/unbind\x00', 0x1, 0x0) write(r1, &(0x7f0000000200)='dummy_hcd.0', 0xb) r2 = dup(r0) ioctl$USBDEVFS_CONTROL(r2, 0xc0185500, 0x0) 1m50.592282781s ago: executing program 0 (id=13): syz_mount_image$vfat(&(0x7f0000000140), &(0x7f00000002c0)='./file0\x00', 0x2048c5, &(0x7f00000003c0)={[{@fat=@showexec}, {@shortname_mixed}, {@utf8no}, {@rodir}, {@uni_xlate}, {@utf8}, {@utf8}, {@uni_xlateno}, {@shortname_winnt}, {@fat=@sys_immutable}, {@fat=@flush}, {@shortname_winnt}, {@numtail}]}, 0x0, 0x2b2, &(0x7f0000002f40)="$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") r0 = syz_open_procfs(0x0, &(0x7f0000000540)='mounts\x00') mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000500)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x1333404, 0x0) mount$bind(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0/file0\x00', 0x0, 0x13481, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) read$FUSE(r0, &(0x7f0000000840)={0x2020}, 0x2020) 1m50.500741582s ago: executing program 0 (id=15): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/sys/kernel/modprobe\x00', 0x1, 0x0) write(r0, &(0x7f0000000100)='/bin/true\n', 0xa) write$cgroup_freezer_state(r0, &(0x7f0000000180)='THAWED\x00', 0x7) 1m48.307789661s ago: executing program 0 (id=45): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TUNSETOFFLOAD(r0, 0x4004743d, 0x110e22fff6) write$cgroup_type(r0, &(0x7f0000000280), 0x9) 1m48.307680368s ago: executing program 32 (id=45): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TUNSETOFFLOAD(r0, 0x4004743d, 0x110e22fff6) write$cgroup_type(r0, &(0x7f0000000280), 0x9) 54.643353729s ago: executing program 1 (id=832): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000001040), 0xffffffffffffffff) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0xa, {"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", 0x1000}}, 0x1006) r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000240)={0x1, 0xb, 0x2, {0x7, @sdr={0x4745504d, 0x6}}, 0x6}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@deltaction={0x14, 0x31, 0x100, 0x70bd28, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x24008054}, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x1018e58, &(0x7f0000000300)={[{@nodioread_nolock}, {@resuid={'resuid', 0x3d, 0xee01}}, {@nodioread_nolock}, {@norecovery}, {@nobarrier}, {@acl}, {@orlov}]}, 0x6, 0x631, &(0x7f0000000380)="$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") sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5000000010000100000000001049000000000000", @ANYRES32, @ANYBLOB="0000000000000000300012800b00010065727370616e00002000028004001200050016000200000006001800400000000500"], 0x50}}, 0x4080) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys_sec\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys_sec\x00', &(0x7f0000000080)='securityfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys_sec/tomoyo/domain_policy\x00', 0x2, 0x0) syz_mount_image$squashfs(&(0x7f0000000200), &(0x7f0000000240)='./file0\x00', 0x10000, &(0x7f0000000000)=ANY=[@ANYBLOB="6572726f72733d636f6e74696e75652c6572726f72733d636f6e74696e75652c6572726f72733d636f6e74696e75652c6572726f72733d636f6e74696e75652c00f7a98a6f3da4519f4b38d9450092aac2c7cefa"], 0x1, 0x1cf, &(0x7f00000002c0)="$eJzKKC4s5mdgYPj7sSaZQYABDBgZeBguMDAysDAwMKgzQsQYmCDUeij/BZSeCZW2gfKbofRCKF1xS3vdmlN+Z0566motk2VmaPXUlkcWk0vtMXKTXMwjwcwQmnpkUXFlVXZiTk5qUfFChopbyUkVp08wsFy3v6bSLMHp8EeewyFJ00GH6YiPR9aMxhLOSVKaYmxsmQpnz3yQX8emcYTh0QrmjXWeeY11halT89LykqqyqrLmTZy4cWZjZ2Pjyol1UWl+qxhbUlw2NXUyMjlsURPYzGyoPslGe8K79lUPkxxYezz8mk8ZK71OZb5kvLBI6tSKqpkTvijNZjT8znCHp2yFhIaGk8QVCYsGE4YjdbYNriAnpjQwpCmEMSapsYm1bTkzJ4SZn81tgUJL8gmm0KMcS2dKWBwQqjr501LzrUOi24xtTx3YzvAcPs6zpqBP0Oi4BIPTQsH/MiBjEhoayjTWMi21XfClSOOvhNdqY6cMBnd7pmWwAGVpAJEroTxZsJ6E5BUeOpqaRinJCQ2bJBKS3AoMlRm27uFcLdDAgBRtKgwMDNsZYXELAddgjFEwCkbBKBgFo2AUjIJRMApGwSgYBSMCAAIAAP//wHCY0w==") capset(0x0, 0x0) ioctl$IOC_PR_REGISTER(0xffffffffffffffff, 0x401870c8, 0x0) chdir(&(0x7f0000000040)='./file0\x00') syz_io_uring_setup(0xf00, &(0x7f0000000080)={0x0, 0x200000, 0x0, 0x0, 0xbf, 0x0, 0x0}, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) fcntl$notify(0xffffffffffffffff, 0x402, 0x30) execve(&(0x7f00000005c0)='./file0\x00', 0x0, 0x0) write(r1, &(0x7f0000000100)='select \n', 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) dup(r2) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r3, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r4, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r5 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r5, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e22, @rand_addr=0x1}, 0x2, 0x4}}, 0x26) ioctl$PPPIOCGL2TPSTATS(r5, 0x8004745a, &(0x7f0000005280)) 54.58524188s ago: executing program 1 (id=833): setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x7, 0x4, 0x3e0, 0x110, 0x11e, 0x110, 0x2f8, 0x2f8, 0x2f8, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac, @mac=@remote, @loopback, @local, 0x1, 0x1}}}, {{@arp={@multicast2, @private=0xa010100, 0xff, 0xffffff00, 0xc, 0x4, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, {[0xff, 0xff, 0xff, 0xff, 0x0, 0xbe9240b8a223bba0]}}, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x24}, {[0xff, 0x0, 0xff, 0xff, 0xff]}}, 0x2, 0x6, 0x23b0, 0x9dd7, 0x80, 0x9, 'veth1_vlan\x00', 'ip_vti0\x00', {0xff}, {0xff}, 0x0, 0x12}, 0xc0, 0x100}, @unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "716ebd2e1aa0cc683e62f312359594df00da56317f76121697127951fdba"}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE0={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x430) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f40600", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r2, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) 54.555884039s ago: executing program 1 (id=834): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x0, 0x0) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x80042, 0x45) fallocate(r0, 0x0, 0x37e9, 0x2f92) write$UHID_CREATE(r0, &(0x7f00000002c0)={0x0, {'syz0\x00', 'syz1\x00', 'syz1\x00', &(0x7f0000000200)=""/190, 0xbe, 0x8, 0x5, 0x7d4, 0xe, 0x10000}}, 0x120) 54.537231548s ago: executing program 1 (id=836): syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x3, 0x27b, &(0x7f0000000640)="$eJzs3cFqK1UYAOB/mqRJdJEsXInQAV24Kq1P0CIVxIKgZKEutNgUpAmFFgJVMXblE/gEPo8b8QV8AC93d7u43LmkM0nTyyQlvWlT7v2+TQ//+f85/5kZ2tWc/vBB//jw5Ozo4tf/otFIYm0nduIyiXasxdjvUerfJ+VxAOCRu8yyeJrl6nno/GZGbUZlde3emwMA7sX03/9V9wIAPIyvv/n2i939/b2v0rQR0f9j0Eki/5nP7x7FT9GLbmxFK55HZBP5+LPP9/eimo6046P+cNAZVfa//7u4/u7/EVf129GKdnn9dpqbqh8OOrV4p1h/pxfdL/+KVrxXXv9JSX101uPjD6f634xW/PNjnEQvDovexvW/bafpp9mfz375bhQd1SfDQac+ySuyKw/6YAAAAAAAAAAAAAAAAAAAAAAAeKNtphPtm+fvjA/+nzM/53yg4dT5PFtpmmZJnn9dX433q1Fd5d4BAAAAAAAAAAAAAAAAAADgsTg7//n4oNfrni51MP6sv2QqXtyM1CPi7mttLFoVlaK1XhKx2Fq1qF9V3p5cWXAXzVE/3dOkGst7BMkk0pye2oh8rVGkmQ+mIq+9eiOuBuO36/ggue3hNspekiUMspLXrzKzav3VSLPYQUlyc87q6+/eqeesNWMqiYja5GbOv05tuffw4X4HAQAAAAAAAAAAAAAAAAAAueuPfksmL1bQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACswPX//19gMCyKZ+VkldGgGkVkxVsEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgLfAyAAD//0MUZ+o=") r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x5c, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xd}]}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}]}, 0x5c}}, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r2 = syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) read$FUSE(r1, &(0x7f00000027c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000002140)={0x50, 0x0, r3, {0x7, 0x27, 0x0, 0x14a4014, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x50) read$FUSE(r1, &(0x7f000000d080)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r1, &(0x7f0000002240)={0x10, 0xffffffffffffffda, r4}, 0x10) syz_fuse_handle_req(r1, 0x0, 0x0, 0x0) open_by_handle_at(r2, &(0x7f00000021c0)=ANY=[@ANYBLOB="1c0000008100"], 0xfeffffff) r5 = openat(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x100, 0x0) open_by_handle_at(r5, &(0x7f0000000140)=ANY=[@ANYBLOB="08000000020000000b"], 0x0) 54.415171966s ago: executing program 1 (id=837): r0 = socket$inet6(0xa, 0x2, 0x3a) (async) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x101e01, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x3) (async) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000180)=0xef) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)=0x7e) (async) ioctl$TIOCSTI(r1, 0x5412, &(0x7f00000001c0)=0x80) (async) r2 = socket$igmp(0x2, 0x3, 0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x32, &(0x7f0000000080)={@private0={0xfc, 0x0, '\x00', 0x1}, r3}, 0x14) socket$inet6_icmp(0xa, 0x2, 0x3a) (async) sendto$inet6(r0, &(0x7f0000000100)="df8236065d4665105bbbd1827f784f184888f7e56112cab4d9b58958f6f2f3f1aee4155cb6571cc6c8064372412669eedb98e6069c2f560d2008743d116e480f45621448826c004cf7be77ce69090279f4f427002e5441bd0264864bf270827e68f4b7ce875861f0fc8cab334877d5b9d8c09abb1398331141fbad8dba1b77977f588a5f4aadf10bd00fc749d441e6007737a07e8d1dac25aa66ba584ebfc4b84bc8ed00a23987de14c9b7730baeaf944ded4be126de1c92cc33c90e03b90fc06dfcb50ae0eaa111103546629a9b1e73886d1c74611e53af209a456e23f401000000000000000000", 0xe8, 0x88, &(0x7f0000000200)={0xa, 0x4e22, 0xfff, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0xa4f9}, 0x1c) (async) sendto$inet6(r0, &(0x7f00000000c0)="800034ca269bb73c", 0x8, 0x0, &(0x7f0000000040)={0xa, 0xfffd, 0xff, @local}, 0x1c) 54.0698237s ago: executing program 1 (id=842): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./dev\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./dev/vhci\x00', 0x2, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x401, 0xfffffffc, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x5503, 0x2000100}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_UDP_CSUM={0x5}, @IFLA_GENEVE_UDP_ZERO_CSUM6_TX={0x5}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) (async) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') (async, rerun: 32) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (rerun: 32) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000b40)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f0000000400)={0x28, 0x2, r4, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x6}) syz_genetlink_get_family_id$devlink(&(0x7f00000004c0), 0xffffffffffffffff) (async, rerun: 64) ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f0000000180)={0x28, 0x2, r4, 0x0, &(0x7f000034b000/0x4000)=nil, 0x4000, 0x525b}) (async, rerun: 64) ioctl$IOMMU_IOAS_COPY(r3, 0x3b83, &(0x7f0000000040)={0x28, 0x5, r4, r4, 0x3, 0x8, 0x3fff}) mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x40, &(0x7f0000000240)=ANY=[@ANYBLOB="7450616e531d66642c7249646e6f3d4dbbd977e0ccd783064b801a099d9b10f8cfefd49eac", @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',\x00']) r5 = socket(0x10, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000600)=ANY=[@ANYRESDEC=r1, @ANYRES32=r6, @ANYBLOB="890c020000000000480012800b0001006970366772650000380002800400120008000100", @ANYRES32=r5, @ANYBLOB="14000700ff6da9000000000000000000000000011400060020"], 0x68}, 0x1, 0x0, 0x0, 0x20008000}, 0x800) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_buf(r8, 0x29, 0xb, 0x0, 0x0) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}]}, &(0x7f0000000180)=0x10) r9 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r9, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000200)=0x8) (async) r11 = syz_open_dev$loop(&(0x7f0000000140), 0x10, 0x141802) (async, rerun: 64) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000a00)='blkio.bfq.empty_time\x00', 0x275a, 0x0) (rerun: 64) write$binfmt_misc(r12, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r11, 0x4c0a, &(0x7f00000002c0)={r12, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x10, 0xd, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e68080b8785d960001000000000000000000007efff100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd5992861ac00", "f4bd000000017000", [0x7, 0xffffffff9673e35d]}}) (async, rerun: 64) fallocate(r11, 0x11, 0x0, 0x5345) (async, rerun: 64) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r7, 0x84, 0x9, &(0x7f00000000c0)={r10, @in6={{0xa, 0x4e20, 0x4, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x10}}, 0x4}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, &(0x7f00000001c0)=0x9c) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7b, &(0x7f0000000000)={r10, 0x6}, &(0x7f0000000040)=0x8) 53.977389405s ago: executing program 33 (id=842): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./dev\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./dev/vhci\x00', 0x2, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x401, 0xfffffffc, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x5503, 0x2000100}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_UDP_CSUM={0x5}, @IFLA_GENEVE_UDP_ZERO_CSUM6_TX={0x5}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) (async) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') (async, rerun: 32) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (rerun: 32) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000b40)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f0000000400)={0x28, 0x2, r4, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x6}) syz_genetlink_get_family_id$devlink(&(0x7f00000004c0), 0xffffffffffffffff) (async, rerun: 64) ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f0000000180)={0x28, 0x2, r4, 0x0, &(0x7f000034b000/0x4000)=nil, 0x4000, 0x525b}) (async, rerun: 64) ioctl$IOMMU_IOAS_COPY(r3, 0x3b83, &(0x7f0000000040)={0x28, 0x5, r4, r4, 0x3, 0x8, 0x3fff}) mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x40, &(0x7f0000000240)=ANY=[@ANYBLOB="7450616e531d66642c7249646e6f3d4dbbd977e0ccd783064b801a099d9b10f8cfefd49eac", @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',\x00']) r5 = socket(0x10, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000600)=ANY=[@ANYRESDEC=r1, @ANYRES32=r6, @ANYBLOB="890c020000000000480012800b0001006970366772650000380002800400120008000100", @ANYRES32=r5, @ANYBLOB="14000700ff6da9000000000000000000000000011400060020"], 0x68}, 0x1, 0x0, 0x0, 0x20008000}, 0x800) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_buf(r8, 0x29, 0xb, 0x0, 0x0) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}]}, &(0x7f0000000180)=0x10) r9 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r9, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000200)=0x8) (async) r11 = syz_open_dev$loop(&(0x7f0000000140), 0x10, 0x141802) (async, rerun: 64) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000a00)='blkio.bfq.empty_time\x00', 0x275a, 0x0) (rerun: 64) write$binfmt_misc(r12, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r11, 0x4c0a, &(0x7f00000002c0)={r12, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x10, 0xd, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e68080b8785d960001000000000000000000007efff100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd5992861ac00", "f4bd000000017000", [0x7, 0xffffffff9673e35d]}}) (async, rerun: 64) fallocate(r11, 0x11, 0x0, 0x5345) (async, rerun: 64) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r7, 0x84, 0x9, &(0x7f00000000c0)={r10, @in6={{0xa, 0x4e20, 0x4, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x10}}, 0x4}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, &(0x7f00000001c0)=0x9c) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7b, &(0x7f0000000000)={r10, 0x6}, &(0x7f0000000040)=0x8) 30.319690435s ago: executing program 4 (id=1171): ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000003400)={'wlan0\x00'}) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000006b80)={0x0}, 0x1, 0x0, 0x0, 0x5}, 0x24000880) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x3}, 0x6e) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b405000000001f007110180000000000de000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2}, 0x48) 30.207823338s ago: executing program 4 (id=1172): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x311201, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r3 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000004c0)={'vcan0\x00', 0x0}) connect$can_bcm(r3, &(0x7f00000000c0)={0x1d, r4}, 0x10) sendmsg$can_bcm(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x1, 0x1, 0x3, {}, {0x77359400}, {0x3, 0x1, 0x1, 0x1}, 0x1, @can={{0x4, 0x0, 0x0, 0x1}, 0x7, 0x2, 0x0, 0x0, "d467aef0f23fe738"}}, 0x48}, 0x1, 0x0, 0x0, 0x4001}, 0x4000000) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000480)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25d7dbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@TCA_STAB={0x54, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x7f, 0x9, 0x7, 0x0, 0x1, 0x3, 0xff, 0x5}}, {0xe, 0x2, [0x4, 0x8ec8, 0x212a, 0x7, 0x8]}}, {{0x1c, 0x1, {0x6, 0x4, 0x6ecf, 0x3ff, 0x2, 0x6, 0x0, 0x1}}, {0x6, 0x2, [0xf]}}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x50}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="2c0000007800010402000000000000000700000064000000140001"], 0x2c}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@deltclass={0x54, 0x29, 0x200, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0xb, 0xfff1}, {0xffff, 0x7}, {0xfff2}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x8}}, @TCA_RATE={0x6, 0x5, {0xa}}, @tclass_kind_options=@c_prio={0x9}, @TCA_RATE={0x6, 0x5, {0x4, 0x78}}, @tclass_kind_options=@c_skbprio={0xc}]}, 0x54}, 0x1, 0x0, 0x0, 0x8000}, 0x2004c090) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r8) socket$nl_route(0x10, 0x3, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000040)={'veth0_to_bond\x00', 0x2}) r10 = socket$netlink(0x10, 0x3, 0x0) r11 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r13 = socket$netlink(0x10, 0x3, 0x0) r14 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'bond0\x00', 0x0}) sendmsg$nl_route_sched(r14, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x6, 0x6}, {0xffff, 0xffff}}}, 0x24}}, 0x24040084) sendmsg$nl_route_sched(r13, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000140)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfdfffdfd, {0x0, 0x0, 0x0, r15, {0x4}, {0xffff, 0xffff}, {0xf, 0xb}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400c9}, 0x2080) sendmsg$nl_route_sched(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000180)=@newqdisc={0x48, 0x28, 0x4ee4e6a52ff56541, 0x5001, 0xfffffdfb, {0x0, 0x0, 0x0, r12, {0x4}, {0xffff, 0xffff}, {0x7, 0x1}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x7, 0x1}}}}, @TCA_RATE={0x6, 0x5, {0x1}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000810}, 0x4000080) socket$kcm(0x11, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) 30.13641859s ago: executing program 4 (id=1173): socket$inet6_sctp(0xa, 0x1, 0x84) syz_usb_connect$hid(0x2, 0x0, 0x0, &(0x7f0000000840)={0xa, &(0x7f00000001c0)={0xa, 0x6, 0x201, 0x0, 0x9, 0x8, 0xff, 0x7d}, 0x0, 0x0, 0x1, [{0x13, &(0x7f00000003c0)=ANY=[@ANYBLOB="1303c7cf4a81c40578dae3230d61f4910685"]}]}) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x8ef, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) r1 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPCONNADD(r1, 0x400442c8, &(0x7f00000003c0)=ANY=[@ANYRES32=r0, @ANYBLOB="01000000"]) 29.607039781s ago: executing program 4 (id=1177): syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x8, 0x0, 0x0, 0x0, 0x0) getxattr(&(0x7f0000001040)='./file0\x00', &(0x7f0000001080)=@known='trusted.syz\x00', 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x2000200, &(0x7f0000000300)={[{@commit}]}, 0x7, 0x4f7, &(0x7f0000000740)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x167) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x1a42028, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x14a0, &(0x7f0000000700)=ANY=[], 0x1, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000140)=""/176, 0xb0) 29.499628401s ago: executing program 4 (id=1179): socket$kcm(0x10, 0x2, 0x0) (async) r0 = socket$kcm(0x10, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc_mnt\x00', 0x1ff) mount(&(0x7f0000000100)=@filename='proc\x00', &(0x7f00000001c0)='./proc_mnt\x00', &(0x7f0000000200)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./proc_mnt/sys/net/ipv4/vs/svc_lfactor\x00', 0x2, 0x0) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_LE_CLEAR_ACCEPT_LIST={{0x1}, 0x1}}}, 0x7) write(r1, &(0x7f0000000040)='2\x00', 0x2) socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), r2) (async) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), r2) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x68, r3, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x54, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x6}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@loopback}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x5000}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x0, 0x4}}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x64}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x20}]}]}, 0x68}}, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x68, r3, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x54, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x6}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@loopback}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x5001}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x0, 0x4}}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x64}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x20}]}]}, 0x68}}, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x68, r3, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x54, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x6}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@loopback}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x5002}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x0, 0x4}}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x64}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x20}]}]}, 0x68}}, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x68, r3, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x54, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x6}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@loopback}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x5003}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x0, 0x4}}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x64}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x20}]}]}, 0x68}}, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x68, r3, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x54, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x6}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@loopback}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x5004}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x0, 0x4}}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x64}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x20}]}]}, 0x68}}, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e00000011008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a000d000000ba8000001201", 0x2e}], 0x1}, 0x40840) (async) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e00000011008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a000d000000ba8000001201", 0x2e}], 0x1}, 0x40840) 29.244847572s ago: executing program 4 (id=1181): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), r0) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01032757c38d085641a7260000000c000180080001"], 0x20}, 0x1, 0x0, 0x0, 0x20040005}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DAEMON(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={0x14, r3, 0x6c04073ee59f7719, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f0000000200)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)={0x48, r3, 0x200, 0x70bd25, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x408c0}, 0x4810) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_SET_DEST(r4, &(0x7f0000000500)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000680)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="08012bbd7000ffdbdf2506000000600012800600020032000000060002002c00000014000300fc00000000000000000000000000c200000c0007000000000016000000060004004e21000008000800010000001400030020010000000000000000000000000002060004080000000000000000010000623b85d1e4001e220ede4d3033ec18ecc33c2214cc149915f0df3fab55a5a5bb23890e799c655f03858399e79e21d920cea5a88d7b74ef5efabc5380a1cc84c148a62c36f7cacb277cfd1cf2d9ad7f008f2dc9c4bc17c6ee9e03042d97a500c95fea45596fe08ab53f3c0cbca9157bec27681b58961328eb32ab1dd89a836842d556c66fdbd04b21b380cab1885ea0590d42d4bc907963b5bef665590ea9fca241025a002469ba5dec49ca0d601d19c76260ad7e0080480ed1a1c08e0ec41594ee71553d1bce6d0877c22842dc6233f1940fe6e6ab76086186f9187413fb14a9ee8520387d8750a46efd3fe4764f81f7c96edb68fb262d2b8886f1a719fa857171d33dfe72a7a090bc68"], 0x7c}}, 0x40084) mount(0x0, &(0x7f0000000240)='./trace\x00', &(0x7f0000000280)='tracefs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./trace/current_tracer\x00', 0x183, 0x160) move_mount(r5, &(0x7f0000000040)='./trace\x00', r5, &(0x7f0000000080)='./trace/current_tracer\x00', 0x0) write(r5, &(0x7f0000000140)='nop', 0x3) 29.206678901s ago: executing program 34 (id=1181): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), r0) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01032757c38d085641a7260000000c000180080001"], 0x20}, 0x1, 0x0, 0x0, 0x20040005}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DAEMON(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={0x14, r3, 0x6c04073ee59f7719, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f0000000200)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)={0x48, r3, 0x200, 0x70bd25, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x408c0}, 0x4810) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_SET_DEST(r4, &(0x7f0000000500)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000680)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="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"], 0x7c}}, 0x40084) mount(0x0, &(0x7f0000000240)='./trace\x00', &(0x7f0000000280)='tracefs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./trace/current_tracer\x00', 0x183, 0x160) move_mount(r5, &(0x7f0000000040)='./trace\x00', r5, &(0x7f0000000080)='./trace/current_tracer\x00', 0x0) write(r5, &(0x7f0000000140)='nop', 0x3) 19.094164977s ago: executing program 5 (id=1309): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) (async) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) recvfrom$inet(0xffffffffffffffff, &(0x7f0000001b40)=""/4096, 0x1000, 0x10000, &(0x7f0000002b40)={0x2, 0x4e24, @multicast2}, 0x10) (async) recvfrom$inet(0xffffffffffffffff, &(0x7f0000001b40)=""/4096, 0x1000, 0x10000, &(0x7f0000002b40)={0x2, 0x4e24, @multicast2}, 0x10) listen(r0, 0x5) r1 = io_uring_setup(0x1612, &(0x7f0000000200)={0x0, 0x0, 0x3040}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000380), 0x1000a) sendto$l2tp6(r2, &(0x7f0000000180), 0x0, 0x14, 0x0, 0x0) (async) sendto$l2tp6(r2, &(0x7f0000000180), 0x0, 0x14, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) socket$xdp(0x2c, 0x3, 0x0) (async) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/65536, 0x10000, 0x800}, 0x20) setsockopt$XDP_TX_RING(r4, 0x11b, 0x3, &(0x7f0000000080)=0x10, 0x4) (async) setsockopt$XDP_TX_RING(r4, 0x11b, 0x3, &(0x7f0000000080)=0x10, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r4, 0x11b, 0x6, &(0x7f0000000080)=0x10, 0x4) setsockopt$XDP_UMEM_FILL_RING(r4, 0x11b, 0x5, &(0x7f0000000300)=0x10, 0x4) (async) setsockopt$XDP_UMEM_FILL_RING(r4, 0x11b, 0x5, &(0x7f0000000300)=0x10, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) bind$xdp(r4, &(0x7f0000000100)={0x2c, 0x2, r5, 0x0, 0x0}, 0x10) mmap$xdp(0x0, 0x10000, 0x3, 0x11, r4, 0x0) sendmsg$xdp(r4, &(0x7f0000010000), 0x40) io_uring_register$IORING_REGISTER_BUFFERS2(r1, 0xf, 0x0, 0x0) (async) io_uring_register$IORING_REGISTER_BUFFERS2(r1, 0xf, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'veth1_to_bond\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=@newlink={0x6c, 0x10, 0x503, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x220, 0x4000}, [@IFLA_LINKINFO={0x44, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x34, 0x2, 0x0, 0x1, [@IFLA_VLAN_EGRESS_QOS={0x4}, @IFLA_VLAN_ID={0x6, 0x1, 0x4}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x8100}, @IFLA_VLAN_INGRESS_QOS={0x1c, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x8, 0x1}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x8, 0x3}}]}]}}}, @IFLA_LINK={0x8, 0x5, r8}]}, 0x6c}}, 0x0) r9 = openat$vnet(0xffffffffffffff9c, &(0x7f0000003a40), 0x2, 0x0) ioctl$VHOST_GET_FEATURES(r9, 0x4008af83, 0xffffffffffffffff) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r1, 0x10, &(0x7f0000001b00)={0x0, 0x0, &(0x7f0000001a80)=[{0x0}, {0x0}, {0x0}], 0x0, 0x3}, 0x20) connect$inet(0xffffffffffffffff, 0x0, 0x0) (async) connect$inet(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYRES32=0x0, @ANYBLOB='\x00'/15, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000031000"/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0x0, &(0x7f0000000300), 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x84, '\x00', 0x0, @sk_msg=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket(0x2, 0x80805, 0x0) 18.999731052s ago: executing program 5 (id=1311): sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f00000014c0)=[@rights={{0x10}}, @cred={{0x1c}}, @rights={{0x10}}, @rights={{0x10}}], 0x50}, 0x40000002) bpf$MAP_CREATE(0x0, 0x0, 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff00000085000000a800000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b70400000000000085000000c300000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x36, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000340)={r3}, 0xc) 18.99953172s ago: executing program 5 (id=1312): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000a00)='./bus\x00', 0x0, &(0x7f0000000080)={[{@errors_remount}, {@resuid}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1ff}}, {@noblock_validity}]}, 0x3, 0x488, &(0x7f0000001340)="$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") (fail_nth: 28) 18.988896182s ago: executing program 5 (id=1313): syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f00000000c0)={[{@noload}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7}}, {}, {@nomblk_io_submit}, {@data_err_ignore}, {@nomblk_io_submit}]}, 0xfe, 0x47c, &(0x7f0000000540)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./debug\x00', &(0x7f0000000080)='debugfs\x00', 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./debug/bluetooth/rfcomm\x00', 0x801, 0x1) r0 = io_uring_setup(0x1, &(0x7f0000000000)={0x0, 0x0, 0x3800}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x10700, 0x0) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000280)={0x6, &(0x7f0000000200)=[{0x0, 0x79, 0x0, 0x9}, {0xef3, 0x6, 0x0, 0x80}, {0xf000, 0x7, 0xf2, 0xf95}, {0x0, 0x8, 0x1, 0xf4}, {0x1, 0x1, 0x8, 0x2}, {0x8, 0xa8, 0x87, 0x4}]}) io_uring_register$IORING_UNREGISTER_PBUF_RING(r0, 0x17, &(0x7f00000019c0)={&(0x7f0000002000)={[{&(0x7f0000000180)="fec4", 0x2, 0x3}, {&(0x7f00000009c0)="96def59eafdeccfbe110b7371ab6e97b18d4554940b0bb044da1b43136c3464810ccb4bd25f9545749d19d3ce71396a7067f49b266ef6053ca678785bb61eef764f351ef8e1b1b615f1e44706b6c04143b924cb4c22060577e068801df1bf2fbf1233df7e458b8ceb3b7f14d455d0adf3cef987eb5136e2e350b7673df1dd74d1ea0fac49a909dcf42868b938f3a64aac7f6674f93d9b376b53476bd7f38ab8e78d74a461ca8d7c42159912652eb7a27d32446480661cf11b02153c9cc7cf75e977917c4635169993f5f57d76709c274701bd6854ba85ac3eb58811c1444baa27990af7e3234eac1b1231230e41ce4c8177b6ed758cb796edbf8ab228a0c9ed9a2230d8b0cdc8fbc7d33950f8fe7f4458a52a34468629f346f57966ee9f2feb700a52bbc2874b224614a659f0617be8fd7b789fc855c71629f54dab1d5d4bb72ff90ca00cc04764a3d8cb2ac7793fb2c14907557b463380d795ce1bee340f9939508f383988249ce4d86b03dedfe5aeb8b5303dc8f2f93971f119ceb684d7d5031e519004e9e1098ad14e18213da00411dfb91b6235683ff8280ee6c09aedcd0fe7cd67744b234b9059ae286d6c496f32e6ad5581dab7e5e063fd81ab84f67e378bedc6731d63118d5ed972a94cdd3d3a5ee434a04f181c6178c4ed738cb55e6554ed0e6f7fb50df2fbc71e57cf426e87465a5634936ec61f984569a0e91dbf4e9df1f42b3694dd416810976d536390fb89d602a515f990aaadf5e5df8ab55269cd7323f394c979b7c2d4cb73787b5f6b2a0733480808ec1f0e4e2d2a25a67ab3836bfed72dadef9c0af25a6cf001da2f19ba3ccfe90b2a46b44d8a773a5fe920b092e2436815e1a1e3193fb75ccbc1267eb5133335386976f01b7e70134476bb83f1029d6e486dd68bd4e84fffef484cf7a987ff0aff1daff349a9ce402d264356feb1fd13eb8e31dc7f059d90ec217634a319997a409b3bf8e9bc1a1c9bf87166b62b9b1d5793215f88c1e78c32fa3d2113c927aa00467234c6076486c1af174a0b3dddba2c1c34ca31fdd119d751cdcbd9e64c0aa720514a57af11e28829fbfbfabc10b20fa0eba8aaba98588b9ae182f2726a4827afef56a4bd6f3cd94d089cf62c37cbaf8d86a01b6c567ba1fc541725d7ee8931082f3fe4a60fbf12a2e87621fa5696a423fe40315c7ee87227e27a70e17b9eb48b9f16cd1afb26ddac0c6ff26afa98e4d30d80153688f67eb88e4ae4e9686d5b6cd71b59f7cee7483bdb792a879a8e677e8e1d5a0befebfc41e22423b968547472632426f2358ba70f3149a7a648466fa2f67b1e11230e02fe7f5aac7a0820a4c313fff86d49ad2a1581f56cec91be17256396fcb88c0fcb54bda1a48f2e9446d9944b2e4f56cf6136189ec118a308a39b17c05ce745149ad38ec0556d6345ea144443a0f298cee6d7399b334e216f563789ff62c51b5b41cb0099417c96d8a7e014d93a564f8ec6b326cf59659fcd59b50eb8d95dfa3c6a03abfcd1a67b5fd801065b9d8ee91bca075141259557938723f3f65e4c75422d99f942cc568dc55cc3bc33a9d2358ca7b0b5e46eac28106c05f3bfbe2a7e6ec7d925d2629770e4299f710365f4b13e48d876017ee87e31e7132fbbd6cd704a36a365d2ac728fa36a868cdc4a74319666afc55e22fad71634008d657e93e23755d628fb76779f5370a65733f5954b72f723bf023cffd21e1246a63d3fbfba056e40943708a021ca278e258f156ccbd07686d8aeb431ed66f22d5579236e4f4607ae3db216c0139226538e616a2b37623aee3a7d8242715ec41bf0b3594e8374e05d1beca4dcc8720a823063ab7ce1a753b331c6b4ec99ee6bc94fadab21e2728903e43a88711fa013dbf9c4b04de4bbdb714da72abf50976c1cdb38597ea8c06d97d32b3761a00ec3d87e5ba5602f0d7c2995f40eed188d66386c66fe422ac1278943b866d8e44fb04b5c986d1d6747bbd0762c0eaa532071b04f8c6fcc60633aacffabd95d61af3a16431461e68c92fd2f2987dcf30923d758c6be28b96ca3be492a463fae899b91d3274a8079bacfe362461b56710084267e267c7a7e9bca2b757e93fba56d2d7ae951f0350e96f24139c9cebea32e8948b5ab7f9b0558b81268bb0c681c8661e965418c6b58e9e65548f7e5686f0673452cdeac729d293a50aa38e6e78a731611e81bf91092fbbd8a625278d9369adf977e293d1c378cad0c0164d655d370d0b800046dfd01e143b891a2b5533b89c33b3b9c46bc05527f9f6a4193048df54abba0607c3ae23d8fa7a733066958d106465dd7d120b0cb60c87cb2e77095b5b07d8b11a6bd3dc0f1844e489d1e06a64e04bf0435f66749c15b57cd47d279fa3b31880bdd1b58d83a7a8bfe154130f0e8d33e1ca150d738ba3cf671e5ee5ab865f7939c70906e360464743d88e257bef5919582d5750ed882991944a8b2d7653a13a7719c613bacd4a2a176ed8c69e75430aaa528cda558dda5a71c66314e56991fc581e5e3dc9bbf67e7b6ddf74f32ca7266dab0105d904fcc7e447e5d07b277299c50c441ce10105e0fbc65d6c998856cc8154ba8caa86a0e2ea95b18fb00b26dbd0d3ea9e8180333e4a02908434a730e1d8927cc3c47f8e1e653c97566ddb026b99d0661e3679d5dd9d7d3e585dcc966bc63b9cace571decb393d7d331caeb8876b1835e02681f23fa4377d40a842179bd38bcc8afa059f57888d10e3da6ba19fe83c473db132542a8fee7f7231166480cc0554bc41945c24db72586f13fc4c14199c2017fd4a4d3c2ea80d2f6e82eae53fa8ab2bb2f6d8da82ca461d6a76f40fe3defe2dc5684531f3543430607e6ea5333e168c19ed781925d504aee19216a83bf071f4a38460ccf3ee9694a722de1e683ba9f50805a08822df67c70eac49d99b15b39db1d73a20299aaef5d8bd8f55018cb32dd883b95cca3a81b43e7037ebeb85a4a4fcce9a3c7ed580e47844978093c9833f2a02a6beee118459eb523e84fa9e480a6229d41e9cbbc287bea12dcf5661fa39b1db84786b0cf5e58abfeb182a5745cc67be1803f2c7d1e6e016259a1a3ddcaeaaf741098c0995b54db4c318e1b35ceb9e358eba82ddc1c97f0d1f5b6453fc9d65ab28f844c0375fc7ddd16a888fb377943b0fd0544208e57f77612a922ba72ccd0ad2196aa5b2698b765b9cffab7b883bca3abd6354aab0814bc2e452424473cada1ec105707cd4d41396ee6204f4a30fc09637fa79e814bd6fc6f87250fee4804653c8eb51d4421b069b17e571418d554e4ce461b105e3b768c5a106f266a025db68ce6bb5c7244979f8076fc79f6efb22aed1cba2011f29827ae13e785ff932d6290b03e1ea654d0941ef9ef1074dfb2180222ccd8577859279ab30fca4210e5ff1b865828b3eaf313bf2db9b7edb3bb7bb7f3fc9798f6ee08b6d6ce5e4ef5207a00299a45681f206f2f56e04dc5d2ede358c0b1d8eca5d7e969bab5e76206a2d54f4f619342fa48179b92ccb7132163a88c6758319942b5e4897a6253b99e97307480dd175259437fecd43c80bceaec0497650e7e55aaba3112f28cc35768eda21c34b7437841c23eaaa209a80f6a51e05aeaf85e3adea389462f4b7c036386ce471aa53e8fc110a83df949368fc2ecd828270f88143c506ecdabf919df3832e28cfaea8cf7059ab77a88005202b096b0c5c22a0e628a3b71f2b468554b95c733cd3a7d051e3b1402ab6d2af6d027e92a21cfa997691872b27aa2a47e60f529caaa30294959424ce6c15c1e39955f9487f1b52137864fc3f863d7f8fc8575ff41486bac07db700a5cc77f2118ae1beec431ed81988cfc6898785bff2440660d49c239d9076791d9b02903af369d9493e4bf1afb9a1f3d0d150d01a2704230e9ab3f4d36b68a354167673efebf1a2570176f910dfb8553bb9d2190b1f76b6c5efc9d680e69c330f6fbbf3e284b7d4ab1d95a4a00c3db6923b7f4efe1d37e5a2ce174a6ee6e4aa8abba31df1a82f5572473c39b3b23967737335160b3cc0350601e6ed2722610cb921a2eb863b1ad8bebeeb8c24585850bb1c8fcaebc578ea06272c12cd9f74ba3c39a6822f3a286379f3ab374c90e50f5277389d06d094ed49d25b8d6ecfdc929822430d1b6bd43c5d9f800c5508774cfce97073082784bf306217ebd01a38c1ddf446f5041ffec4790dc6df28bbe0a73a7b870aef510bbdb7e7f84700c27fd5d908792577c63f3f27e0f7c9f12307fb0c9647338dde1577383af7b0733bf851240cc32c6b990240daca19f3bd4cfad784df83e359d4db43aaf704109d6761aa5c2eaf411de77da494fa7bd5f30eb0f9b1a50a675259a4220100118cbdd53be2380cf4ac196f504d1f2b958ccd877b0f09d35349422d4118c879904a0b29d8cd9f724078df170a6ef64f7737d50d7d0db0ca50cab8bcb1a9b3e08137015bdd7474a6c7b0656bbc1e090bd5dc97b04c5ef2d09b9a39f07061d05e64568a358cf61ad657cd306fccc3bbcc54cb86ef12a19884fd029fb95f586a866f2eb42478d1f77392f07828538d2a3dbe3a8bb643dc78fd1f8c7b58d85a37b6e16daf7a9e91e7653159ba5c548a505a03f3e07754060101b2a36d5ed692dcd184f95d87b72bca78ab091627330ec0b8564ac4eb9ff490ab4943bb34f06134ee50d4b43b04fa7d505675f4e3b59930ee16dc2926362834e3b36e3362eedd79311e19656988cd95b436455abb32ee604cf2c1465fc80cb388dc0fd31e935ee8d31f68f8362bcf267f46423533d0991a3f73a02ac37e1487728b4c9855ced05dbf26f81d72408c7c6bbe324e6f905dc6498421433e126fb0f3f5c5ce9c505eec205544c27b5bd71a96ed8d426946e2a80d971809c39dff6950ec6309f1a4d2c4a1b97cede8fccbc23b6f843eba921e16561293860c7434ed873e7eb6f11359b4574f8bd9ff707f151e7f4fc6a3bc514ee3ed2efd948af109200238294e4a9e5cabe872c2bd09ec29440fce0f429a33325cded901d4d3b4153aecb3319ae66470d7a32664fdac7de8d6a14e62baf86a6ffbce798f94e23e75045b45c700a16d802835169fa8fb1030ad092b3573a115be71fa0f3d6d659464dde7c32370326b2858fd65fc3eb0ed1877b448a8d55e6d2802c6ddb4f20db0afa962a01710777a911e4f10078b6edb4236b3a93315fa63cbd9951907cd6cf23287d3108cf391915dd7d542f77f214a7ba49f0e351eea708981ad22cc3e8b64aa6ddf30bb84820e5c3958a241e1913c71aac8cb7b145f9b223cd98f8a6af5ac9613052840ef6345fe978d13ee6381e9dab437a3e9720f1c648a33e63c265e6350b1b9b93f37058db0b23a7763898ba4c761ee33a7f611056ab1766e61d45ea2702647af876f9a05baa18a92fd7aa5cb27a82a65dc842811a22f122edca7d9257b07631ca73a14302051687ef32e26caa3a75d16a21c8af1c7841b168df3affc11e25077890b067de7426a5897f5982f0d10e6feea577ef3237fa2c1519c32409862ba707c9837935c78d67a19b9ed8a00051f5783cca9a769a7fb79373eb4a2bff6a5e70b21f37495e9f3fa838f9b01a669cc2ecbbee1f2de4f981ba1bf8bd4d258b4732dc87cd243a9eaa558f80eb1e3f1b014638b1d9c4ecfda8266c0f518aefcf6612149e4bd5a4934f601cbf7711854465497d04c298f83b9d15201d332dccf7a06403ad1fc3dbacff66297fd78f93d3ffb23851aad9b47cb433b0188f4f4b3c4f8254cc8d6a7242e63565e9f21dde0ab8569198db05bcd34119f", 0x1000, 0x2}]}, 0x2, 0x3, 0x3}, 0x1) io_uring_register$IORING_REGISTER_ZCRX_IFQ(r0, 0x20, &(0x7f0000000100)={0x41, 0x0, 0x1, 0x2, 0x0, &(0x7f0000000300)={0x0, 0x0, 0x1}}, 0x1) truncate(&(0x7f0000000100)='./file1\x00', 0x7) 18.841369456s ago: executing program 5 (id=1320): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'veth1_macvtap\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000d80)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xb}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_mq={0x7}, @TCA_RATE={0x6, 0x5, {0xb, 0x4}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x10, 0x3, 0x1, 0x0, 0x80000000, 0x81}}, {0x4}}]}]}, 0x58}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r2) close(0xffffffffffffffff) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40000000010800034000000014480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c0003801800008008000340000000020c0004400000000000000c7f14000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x240048d0}, 0x40) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r4, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0xa, 0x7) 18.062680553s ago: executing program 5 (id=1342): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000050000000900010073797a30000000005c010000030a01030000000000000000050000000900010073797a30000000000900030073797a3000000000080007006e61740428000480080002400000001208000140"], 0x1a4}, 0x1, 0x0, 0x0, 0x20040060}, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000b40)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2810082, &(0x7f0000000100)={[{@shortname_win95}, {@utf8}, {@uni_xlateno}, {@uni_xlate}, {@shortname_lower}, {@shortname_winnt}, {@numtail}, {@shortname_mixed}, {@iocharset={'iocharset', 0x3d, 'maccroatian'}}, {@shortname_win95}, {@uni_xlateno}, {@shortname_winnt}, {@shortname_winnt}, {@rodir}, {@uni_xlate}]}, 0x7f, 0x2bd, &(0x7f0000000240)="$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") r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$PAGEMAP_SCAN(r4, 0xc0606610, &(0x7f00000000c0)={0x60, 0x300, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x4, 0x0, 0x0, 0xbff, 0x1e, 0x0, 0x0, 0x6a}) sendmsg$nl_route(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="34000000200081dcfcffffff03000000020000000080000000000000050016000400000008000200ac1414bb080017004e214e22"], 0x34}, 0x1, 0x0, 0x0, 0x81}, 0x44004) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x439, 0xffffffff, 0x0, {0x0, 0x0, 0x0, 0x0, 0x9801, 0x1313}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x40008c0) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r6], 0x1c}}, 0x840) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000500), 0xffffffffffffffff) r8 = syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f00000000c0)='./file2\x00', 0x2800000, &(0x7f0000000300)={[{@debug}, {@jqfmt_vfsv0}, {@inlinecrypt}, {@errors_remount}, {@test_dummy_encryption_v1}, {@norecovery}, {@delalloc}, {@nogrpid}, {@minixdf}]}, 0x1, 0xbe2, &(0x7f00000003c0)="$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") r9 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x101002, 0x15) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) ioctl$TUNGETFILTER(r10, 0x801054db, &(0x7f00000007c0)=""/4096) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r9, 0x0) ioctl$FICLONE(r8, 0x40049409, 0xffffffffffffffff) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) read$FUSE(r9, &(0x7f00000005c0)={0x2020}, 0x2020) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r2, &(0x7f0000000640)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000600)={&(0x7f0000000540)={0x1c, r7, 0x600, 0x70bd25, 0x25dfdbfe, {}, [@NL802154_ATTR_SHORT_ADDR={0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20044014}, 0x8001) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000a00)={{0x14, 0x10, 0x7c, 0x0, 0x6000, {0x5}}, [@NFT_MSG_NEWSET={0x14, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, "d1"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x7c}}, 0x40) openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0) 17.787435449s ago: executing program 35 (id=1342): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000050000000900010073797a30000000005c010000030a01030000000000000000050000000900010073797a30000000000900030073797a3000000000080007006e61740428000480080002400000001208000140"], 0x1a4}, 0x1, 0x0, 0x0, 0x20040060}, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000b40)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2810082, &(0x7f0000000100)={[{@shortname_win95}, {@utf8}, {@uni_xlateno}, {@uni_xlate}, {@shortname_lower}, {@shortname_winnt}, {@numtail}, {@shortname_mixed}, {@iocharset={'iocharset', 0x3d, 'maccroatian'}}, {@shortname_win95}, {@uni_xlateno}, {@shortname_winnt}, {@shortname_winnt}, {@rodir}, {@uni_xlate}]}, 0x7f, 0x2bd, &(0x7f0000000240)="$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") r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$PAGEMAP_SCAN(r4, 0xc0606610, &(0x7f00000000c0)={0x60, 0x300, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x4, 0x0, 0x0, 0xbff, 0x1e, 0x0, 0x0, 0x6a}) sendmsg$nl_route(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="34000000200081dcfcffffff03000000020000000080000000000000050016000400000008000200ac1414bb080017004e214e22"], 0x34}, 0x1, 0x0, 0x0, 0x81}, 0x44004) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x439, 0xffffffff, 0x0, {0x0, 0x0, 0x0, 0x0, 0x9801, 0x1313}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x40008c0) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r6], 0x1c}}, 0x840) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000500), 0xffffffffffffffff) r8 = syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f00000000c0)='./file2\x00', 0x2800000, &(0x7f0000000300)={[{@debug}, {@jqfmt_vfsv0}, {@inlinecrypt}, {@errors_remount}, {@test_dummy_encryption_v1}, {@norecovery}, {@delalloc}, {@nogrpid}, {@minixdf}]}, 0x1, 0xbe2, &(0x7f00000003c0)="$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") r9 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x101002, 0x15) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) ioctl$TUNGETFILTER(r10, 0x801054db, &(0x7f00000007c0)=""/4096) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r9, 0x0) ioctl$FICLONE(r8, 0x40049409, 0xffffffffffffffff) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) read$FUSE(r9, &(0x7f00000005c0)={0x2020}, 0x2020) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r2, &(0x7f0000000640)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000600)={&(0x7f0000000540)={0x1c, r7, 0x600, 0x70bd25, 0x25dfdbfe, {}, [@NL802154_ATTR_SHORT_ADDR={0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20044014}, 0x8001) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000a00)={{0x14, 0x10, 0x7c, 0x0, 0x6000, {0x5}}, [@NFT_MSG_NEWSET={0x14, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, "d1"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x7c}}, 0x40) openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0) 8.268962982s ago: executing program 8 (id=1467): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="58000000100037040400"/20, @ANYRES32, @ANYBLOB="8304050000000000380012800b000100697036746e6c000028000280"], 0x58}, 0x1, 0x0, 0x0, 0x9005}, 0x4000000) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000001800dd8d0900000000000000020000fc0000000500000000060015000200000014001680100008800c000380050001"], 0x38}, 0x1, 0x0, 0x2000}, 0x0) 8.218861289s ago: executing program 8 (id=1468): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000300)='attr/prev\x00') r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000940), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r2, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f00000009c0)={0x24, r3, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [@NL802154_ATTR_NETNS_FD={0x8, 0x1d, r1}, @NL802154_ATTR_WPAN_PHY={0x8}]}, 0x24}}, 0x40000) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0xb}, @NFTA_SOCKET_KEY={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}}, 0x0) 7.267640242s ago: executing program 8 (id=1471): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) r1 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @private2}, &(0x7f0000000200)=0x1c, 0x0) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async) ioctl$TUNDETACHFILTER(r2, 0x401054d6, 0x0) (async, rerun: 64) setsockopt$sock_timeval(r1, 0x1, 0x14, &(0x7f0000000300)={0x0, 0xea60}, 0xfffffffffffffd2e) (rerun: 64) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r0, 0xaa3a6000) (async) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000ac0)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) (async) r4 = accept4(r3, 0x0, 0x0, 0x0) sendmmsg$alg(r4, &(0x7f0000002d40)=[{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f00000002c0)="07960e0300000000000031d9a58695a5f844d3cb97", 0x15}], 0x1, &(0x7f0000000a40)=[@assoc={0x18, 0x117, 0x4, 0x5}], 0x18, 0x40000}], 0x1, 0x0) recvmsg$can_j1939(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000240)=""/40, 0x28}], 0x1}, 0x10003) (async) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000040)=""/63, 0x803000, 0x800, 0xa1, 0x3}, 0x20) (async) r5 = socket$xdp(0x2c, 0x3, 0x0) socket(0x3, 0x800, 0x7fff) (async, rerun: 32) recvmsg(r5, &(0x7f0000000840)={&(0x7f0000000180)=@rc, 0x80, &(0x7f0000000740)=[{&(0x7f0000000380)=""/87, 0x57}, {&(0x7f0000000400)=""/8, 0x8}, {&(0x7f0000000540)=""/246, 0xf6}, {&(0x7f0000000640)=""/172, 0xac}, {&(0x7f0000000700)=""/41, 0x29}], 0x5, &(0x7f00000007c0)=""/69, 0x45}, 0x12000) (async, rerun: 32) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f0000000000)={&(0x7f0000000480)=""/68, 0x20000, 0x1800}, 0x20) 6.722987534s ago: executing program 8 (id=1479): setns(0xc9, 0x0) r0 = socket(0x2a, 0x2, 0x9) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f0000000040)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x100, 0x2, 0x1e5}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r6, r7, r8, &(0x7f0000000980)=@IORING_OP_SENDMSG={0x9, 0xc, 0x0, r4, 0x0, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)=[{0x0}, {0x0}], 0x2}, 0x0, 0x0, 0x1}) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0x1400c, &(0x7f0000000840)={[{@stripe={'stripe', 0x3d, 0x3d}}, {@init_itable}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x3, 0x457, &(0x7f0000000bc0)="$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") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0, 0x1, 0x0, 0x0) r9 = accept4$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000100)=0x14, 0x800) setsockopt$packet_tx_ring(r9, 0x107, 0xd, &(0x7f00000002c0)=@req3={0x7ff, 0x1e7e, 0x4, 0x6, 0x80000000, 0x0, 0xffff}, 0x1c) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@nfs_export_on}, {@userxattr}]}) setxattr$trusted_overlay_origin(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000001c0), 0x0, 0x0, 0x0) syz_ublk_add_dev(r5, r6, r7, r8, &(0x7f00000003c0)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@any_dev={0xc, 0xd74, 0x0, 0x0, 0x1000, 0x68ba, 0x0, 0x0, 0x132}}}, &(0x7f0000000440)) 5.675720122s ago: executing program 8 (id=1491): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x605, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x28, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x2, 0x0, 0x1}}]}}]}, 0x58}}, 0x0) (async) close(r2) setrlimit(0x8, &(0x7f0000000080)={0x9, 0x3}) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000000c0)=@newtaction={0x48, 0x30, 0x871a15abc695f83d, 0x2, 0x0, {}, [{0x34, 0x1, [@m_ctinfo={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x40040001}, 0x0) (async) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) (async) close(0x3) (async) r6 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) ioctl$IOMMU_VFIO_IOAS$CLEAR(r6, 0x3b88, &(0x7f00000000c0)={0xc}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r7 = getpid() sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0xf5d1b000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r9, &(0x7f0000000000), 0x6b4, 0x0) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) (async) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) (async) epoll_create1(0x0) 5.124713479s ago: executing program 8 (id=1500): openat(0xffffffffffffff9c, &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x101341, 0xaf) 5.037151183s ago: executing program 36 (id=1500): openat(0xffffffffffffff9c, &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x101341, 0xaf) 2.390856987s ago: executing program 6 (id=1523): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) close(0x3) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000cd03000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0xedf0e51957efc755, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$nci(0xffffffffffffff9c, &(0x7f0000001640), 0x2, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.stat\x00', 0x275a, 0x0) socket$tipc(0x1e, 0x5, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={r3, 0xe0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000380)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5, &(0x7f0000000440)=[0x0, 0x0], &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xb3, &(0x7f00000004c0)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000500), &(0x7f0000000540), 0x8, 0xc2, 0x8, 0x8, &(0x7f00000005c0)}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x11, 0x17, &(0x7f0000000280)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x6fc}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}, @generic={0x40, 0x7, 0x1, 0x23}, @initr0={0x18, 0x0, 0x0, 0x0, 0x71, 0x0, 0x0, 0x0, 0x5}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000340)='GPL\x00', 0x4, 0x0, 0x0, 0x41100, 0x50, '\x00', r4, 0x0, r3, 0x8, &(0x7f0000000740)={0x9, 0x3}, 0x8, 0x10, &(0x7f0000000780)={0x2, 0x7, 0x7, 0x7f}, 0x10, 0x0, 0x0, 0x7, &(0x7f00000007c0)=[r3, r1, r3], &(0x7f0000000800)=[{0x0, 0x3, 0x6, 0x1}, {0x5, 0x2, 0x2, 0x8}, {0x1, 0x1, 0x4, 0x9}, {0x2, 0x4, 0xa, 0x3}, {0x1, 0x1, 0xa, 0x4}, {0x4, 0x4, 0xd, 0x2}, {0x1, 0x2, 0x9, 0x4}], 0x10, 0x101}, 0x94) r5 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000400)={r1, &(0x7f0000000240), &(0x7f00000003c0)=@udp6=r5, 0x1}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x18000000000002a0, 0x5ee, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x30, 0x10, 0x1, 0x70bd25, 0x25dfdbf9, {0x0, 0x0, 0x600, 0x0, 0x48815, 0x40103}, [@IFLA_GROUP={0x8}, @IFLA_TXQLEN={0x8, 0xd, 0x3}]}, 0x30}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) 2.299618449s ago: executing program 3 (id=1524): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0xfffffffc, @loopback, 0x5}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) 1.943608119s ago: executing program 7 (id=1528): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x17, 0xb, &(0x7f0000001980)=ANY=[@ANYBLOB="18000000000000000000000005000004180100002020642500000000002020207b1af8ff00000000bfa120000000000007010000f6ffffffb702000008000000b70300000100008085000000cb00000095"], &(0x7f0000000140)='GPL\x00', 0xa, 0x0, 0x0, 0x40f00}, 0x94) 1.672131735s ago: executing program 6 (id=1529): r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000040)={0x0, 0xe01b}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f00000000c0)={r1, @in6={{0xa, 0x4e23, 0x1, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x5}}, 0x8, 0x7}, &(0x7f0000000180)=0x90) ioctl$DVB_DEMUX_DMX_EXPBUF(r0, 0xc00c6f3e, &(0x7f00000001c0)={0x9, 0x80000, r0}) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r3, 0x84, 0x19, &(0x7f0000000200)={r2, 0x2}, 0x8) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f00000002c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee01, 0x0}}, './file0\x00'}) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x6, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@nodevmap}, {@msize={'msize', 0x3d, 0x2}}, {@version_L}, {@access_client}, {@cache_mmap}, {@version_9p2000}, {@directio}, {@cache_fscache}, {@msize={'msize', 0x3d, 0x80}}], [{@smackfsfloor={'smackfsfloor', 0x3d, '\x00'}}, {@audit}, {@dont_measure}, {@measure}, {@permit_directio}, {@uid_eq={'uid', 0x3d, r5}}, {@fscontext={'fscontext', 0x3d, 'unconfined_u'}}, {@audit}, {@subj_type={'subj_type', 0x3d, '\x00'}}]}}) r7 = socket$inet6(0xa, 0x6, 0xe) r8 = openat$cgroup_ro(r0, &(0x7f0000000480)='net_prio.prioidx\x00', 0x0, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f00000004c0)={0x0, r4}, 0x8) r9 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$IP6T_SO_SET_REPLACE(r9, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x9, 0x3, 0x3c8, 0x200, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x2f8, 0xffffffff, 0xffffffff, 0x2f8, 0xffffffff, 0x3, &(0x7f0000000500), {[{{@ipv6={@private2={0xfc, 0x2, '\x00', 0x1}, @mcast1, [0xff, 0x0, 0x0, 0xff000000], [0xffffffff, 0xffffff00, 0x1ffffff01, 0xffffffff], 'veth1\x00', 'ip6gre0\x00', {0xff}, {0xff}, 0x24, 0x6, 0x0, 0x6}, 0x0, 0x1e0, 0x200, 0x0, {}, [@common=@rt={{0x138}, {0x8, [0x8, 0xf2], 0x10001, 0x2, 0x3, [@loopback, @empty, @empty, @remote, @local, @remote, @local, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @ipv4={'\x00', '\xff\xff', @multicast2}, @mcast2, @private2={0xfc, 0x2, '\x00', 0x1}, @private2={0xfc, 0x2, '\x00', 0x1}, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast2, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast2], 0xe}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private0, [0xff, 0xff, 0xff000000, 0xff], [0xffffffff, 0xffffffff, 0x0, 0xffffff], 'wg1\x00', 'netpci0\x00', {}, {0xff}, 0x0, 0x91, 0x0, 0x40}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@eui64={{0x28}}]}, @common=@inet=@TCPMSS={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x428) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000001080)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001040)={&(0x7f00000009c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_DELCHAIN={0x24, 0x5, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x2}]}, @NFT_MSG_DELFLOWTABLE={0x28, 0x18, 0xa, 0x801, 0x0, 0x0, {0x3, 0x0, 0x9}, [@NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}]}, @NFT_MSG_DELCHAIN={0x188, 0x5, 0xa, 0x401, 0x0, 0x0, {0x3, 0x0, 0x7}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xffffffffffffffff}, @NFTA_CHAIN_USERDATA={0x61, 0xc, "0fd1dea4fd347bbf9878baaca9302d7f930b756d1ccf4793674fd1e55ca13ab2cb8ad1e71c66ac9c0064a98b4cbe29e57745a816f726e9276471302c235a8d020e290b2d579e7bf619bdf33e05aa917ef233f745160670c94ab1087b3e"}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3}, @NFTA_CHAIN_HOOK={0x24, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x11513e3d}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x2639626c}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x5b8ab87a}]}, @NFTA_CHAIN_USERDATA={0x83, 0xc, "e297395b1637601e4ee3a9260185e60571ad8d915a1fbd5461683b80bd3b2b1ce5003b04fceb40949a8eab8545a6d05d8c7f9b0f68d802b08e6385857f87a2cbc82308b68540cb1ac3ff66ea8eae21a17c50418b80f776d8dcca5395ea441d1b4279c4a3f76049c2d43fdc888b8732bea11c7f7806d28b4cc41a1776471622"}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x1}, @NFTA_CHAIN_COUNTERS={0x1c, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0xfffffffffffff938}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0xffffffff}]}, @NFTA_CHAIN_COUNTERS={0x28, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x7}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x8}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x3}]}]}, @NFT_MSG_NEWSETELEM={0x450, 0xc, 0xa, 0x3, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x418, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8}]}, {0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPRESSIONS={0x14, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @inner={{0xa}, @void}}]}]}, {0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x6}]}, {0x29c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_DATA={0x208, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0x3c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VALUE={0xe9, 0x1, "2d035a29df6bd5f90af829c1b1100d304c0918aac9f493bee8f19d2463690cd194e2f3a52d57a8cd5d2cad5b983e38cf96fc05e308c954efcfdf295625ad5e341843e869d8b09446928f3295ca32dd295355726e7f838ffb2d1d7ec341f3bd54336b4d128c77d9c3e1242b4dafe6a15e91208e0e5f373a2d88f652fb9a1fa42ff0a7c830f5421f6849cc6d578126624efd9929032e3218eae37bb9eb36577ce824f7a67e4b7f892b5a9aa45b3f277b0250454cdf2ab2eda0ad41d412d05fea127fdc7ac318cfc8218c8e01899656b8805ea792773b7ebbe67ee2611728d385037280e2fa3a"}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VALUE={0xa7, 0x1, "4d688318650a88bbf945fd26acf2a4a7bff88e5e519a52203d830105fd65199a351a67732dd02271f166e3329c6358fccffde79391296bd040106ba94d9c863aff6cd9d2adf5cbd6bf563329f613f5b2682fddfdf5b2413118ac968595cd3f826e4ae19528aeca4ab8ae322986492c72307d0142d902f38839b140e8c77d4140d2b552b55c4b2cdd1b82510a5309130ff9b08d7276c5b6469c3cacdbcae68db3ba76ea"}]}, @NFTA_SET_ELEM_EXPR={0x30, 0x7, 0x0, 0x1, @nat={{0x8}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_NAT_TYPE={0x8}, @NFTA_NAT_REG_ADDR_MIN={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_NAT_REG_PROTO_MIN={0x8, 0x5, 0x1, 0x0, 0x11}, @NFTA_NAT_REG_ADDR_MAX={0x8, 0x4, 0x1, 0x0, 0x13}]}}}, @NFTA_SET_ELEM_USERDATA={0x51, 0x6, 0x1, 0x0, "8f88e29fde2efab2a58f2716a1540dcfd7d92f68974e4b927bdc56a649189c43cb153d7d11ede693bedf72633ce8258aab58c6442bf31d351d4a6d04b172ee5f595fa4b3b3aa291e13a88872f8"}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x91c9}]}, {0x78, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_USERDATA={0x74, 0x6, 0x1, 0x0, "ed69f035d223034304929040d63c8f81b33d5995b83e83efd5cfe917e439034341bb81daa7f289702a22b5d1f9eea29ed46462ef0fecd17c2877650aca67be19c36f35610a0c2ef2c2686307659525b25a84ba1e2b65f192be6d4d181b3d313266646b1e0cf505c0e4641bffeece883a"}]}, {0xcc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_USERDATA={0xbc, 0x6, 0x1, 0x0, "766666298e2decd8d99d6c839f67390bf2ab88894824d3f642c799585e15a2d3561a09a51e5ac4e93da18479e32257cc5241e705cac3d5d579fd241852713bf9690eff5532b9dc9b2bbc2dcaf7538aedaf142b0050fced67aaab8da793efcaeaaf21021046a2d38595709c05548293d406872ce4a826338d2359d458caa37ad624aa42ebfb7e9bc5a4c98b9b10ef13b2e4017440c9cd2bfd13f3a4b8e70a2be53a8fff2332cf1bc172fbc3c63ee91bcc0fc4d6ddab023a4a"}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x1}]}]}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x64c}, 0x1, 0x0, 0x0, 0x24000000}, 0x4) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r8, 0x84, 0x23, &(0x7f00000010c0)={r2, 0x7fff}, 0x8) r10 = geteuid() mount$fuse(0x0, &(0x7f0000001100)='./file0/file0\x00', &(0x7f0000001140), 0x20004, &(0x7f0000001180)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {'user_id', 0x3d, r5}, 0x2c, {'group_id', 0x3d, r6}, 0x2c, {[{@default_permissions}], [{@uid_lt={'uid<', r10}}]}}) ioctl$FUSE_DEV_IOC_BACKING_CLOSE(r0, 0x4004e502, &(0x7f0000001240)=0x7) syz_clone(0x8000c00, &(0x7f0000001280)="9a56942d5f2c7e0fbebfe3a0597df9ee63cdf2f05f3b06dc46d7f568dae166ea9e648e6acbc2d721e532b380ebfa1eb14aaefedaaa824ac92e41812031e5288b577dfa3ff151b6b4bebb", 0x4a, &(0x7f0000001300), &(0x7f0000001340), &(0x7f0000001380)="30b6909256434f25ec50dfbd69c778b0d77a256f688a91552c585d87b4b43c9b7ce5384f57a6f28881861fa2ca738c27cca7d6c2b255ae24d9f62aedf6777c91c214a948e483cf9e0b5c16cc4f1007963b2c85b01272759f1c70e95b9d2f61588e63f48f3759e26f0bfa0f8983a1103a42529fe7bbc9560bf40cf927e19222733c20de89dfdb244ed5f8511290a584a3c7b0101bdb56831a82295e50b92720249a5df275a56335d78dc336988f867638d31059de1acdc90f545eb73bf6ce7446bb3c45de1d7583ff755285583cff6f20") ioctl$CEC_ADAP_S_PHYS_ADDR(r0, 0x40026102, &(0x7f0000001480)=0xd41) socket$inet6_tcp(0xa, 0x1, 0x0) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001500), r3) sendmsg$NL80211_CMD_ADD_TX_TS(r3, &(0x7f00000015c0)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001580)={&(0x7f0000001540)={0x30, r11, 0x20, 0x70bd28, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x7, 0x7c}}}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0x5}, @NL80211_ATTR_ADMITTED_TIME={0x6, 0xd4, 0x7}]}, 0x30}, 0x1, 0x0, 0x0, 0x94}, 0x100000c0) setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, &(0x7f0000001600)=0x8000, 0x4) ioctl$VIDIOC_S_FMT(r8, 0xc0d05605, &(0x7f0000001640)={0xa, @pix_mp={0x9, 0xa309, 0x2036315a, 0x8, 0x6ddb3c403f7b8a2d, [{0x5, 0x9}, {0x0, 0x1}, {0x9e, 0x8}, {0x5b9, 0x6}, {0x7fffffff, 0x5}, {0x8, 0xf354}, {0x2, 0x80000000}, {0xffffd03f, 0x6}], 0x0, 0xfa, 0x1, 0x1, 0x5}}) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r3, 0xc018620c, &(0x7f0000001740)={0x3}) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000001780)={0xffffffffffffffff}) ioctl$EXT4_IOC_MIGRATE(r12, 0x6609) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r7, 0x84, 0x19, &(0x7f00000017c0)={r1, 0x7}, 0x8) syz_emit_ethernet(0xd0, &(0x7f0000001800)={@link_local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @val={@void, {0x8100, 0x5}}, {@mpls_uc={0x8847, {[{0x9}, {0x3}, {0x663f}], @generic="c35e0d8a4547db4ce9498f1514cb2907661f183ae6b3f8fe908da611ac3ac8d3c7c18182f796f3eabd75e4ad9e38d549cc3666547733823ea31641b825c6caf67667a9eeb09c8876b75366b92e4fff6bf524478e8ec042caaa9b2206816f26661386dc4631f15fe8f0a0830c4f4aed0e8b26845183357f0a1138bf2aa05f69d7abe094dc50dee57653dc56728a3501a0adae956c8e6dd0047910b4255bcdf377871d83e3a6fff388629318296401a5792b92"}}}}, &(0x7f0000001900)={0x1, 0x3, [0x23c, 0x4b, 0x12b, 0x12c]}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000001a40)={&(0x7f0000001940)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001980)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000019c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001a00)=[0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0x6, 0x7, 0x5}) 1.475634774s ago: executing program 6 (id=1530): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (rerun: 32) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) (async) prctl$PR_SCHED_CORE(0x53564d41, 0x0, 0x0, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) (async, rerun: 64) r4 = syz_open_dev$video4linux(&(0x7f0000000000), 0x401, 0x1) (rerun: 64) ioctl$VIDIOC_S_EXT_CTRLS(r4, 0xc0205648, &(0x7f0000000080)={0xfffffff, 0x4, 0x7, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x980906, 0x2, '\x00', @ptr=0x1}}) (async) syz_genetlink_get_family_id$mptcp(&(0x7f0000000600), r0) (async, rerun: 64) r5 = socket$inet(0x2, 0x1, 0x0) (async, rerun: 64) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f0000000200)={'wlan0\x00', 0x1}) (async) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x74, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x3a, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac, {0x0, 0x6}}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @val={0x5, 0xa, {0x5, 0x33, 0x10, "084e5dfbe463da"}}, @void, @void, @val={0x3c, 0x4, {0x0, 0x5, 0x34, 0x8}}, @void, @void, @void, @void}}], @chandef_params, @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x1}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x74}}, 0x0) (async, rerun: 32) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) (async, rerun: 32) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f0000000400)={'wlan1\x00', 0x1}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x68, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x143c}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x1}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x68}}, 0x0) sendmsg$NL80211_CMD_SET_CHANNEL(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1450}]}, 0x24}}, 0x0) 1.41500769s ago: executing program 6 (id=1531): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x0, 0x20}, 0xc) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x4, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f00000003c0)='\x00', 0x1, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x20, @loopback, 0x1}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount$cgroup(0x0, 0x0, &(0x7f00000001c0), 0x2010042, 0x0) lremovexattr(0x0, 0x0) mremap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3000, 0x0, &(0x7f0000ffc000/0x3000)=nil) sendmmsg$sock(r0, &(0x7f00000002c0)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000640)="89", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000000)="c9", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="5723516f567cce2d2495e51c086d32d9785857a42688999e44d8f1e968171791d79a3f43d068a056ea1004", 0x2b}], 0x1}}], 0x3, 0x0) shutdown(r0, 0x1) 1.292729639s ago: executing program 2 (id=1532): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x2, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {0x4, 0x0, 0x5374}, 0x1d, [0x8000, 0x78, 0xf, 0x2, 0x80, 0x2, 0x203, 0x7e, 0x4, 0x4b, 0x39cc1919, 0x40, 0x9, 0x5, 0xffff2d37, 0x881, 0x6, 0x3, 0x0, 0x5, 0x4, 0x3, 0x5, 0x3c5d, 0x1, 0x0, 0x9, 0x2, 0x15bb, 0x2, 0xe65f, 0x3, 0x7, 0x3, 0x7fff, 0x7, 0x80000000, 0xa72, 0x3, 0x7, 0x0, 0x71, 0xe, 0x1, 0x1, 0x5, 0x9, 0x3a, 0xffffff7f, 0x6, 0x6, 0xfffbffff, 0x5, 0x4, 0x8, 0x0, 0x80, 0x2, 0x4, 0x9, 0x39, 0x7, 0x1f, 0x40], [0x10000007, 0x3, 0x800, 0x8000, 0x10, 0xffeffff3, 0x8, 0x200c5, 0xf9, 0x10, 0x2bf, 0x6c9, 0xfff, 0xfffffffc, 0x5, 0x0, 0x3, 0x926, 0xa, 0x1, 0x2, 0x407c, 0xea4, 0x0, 0x4, 0x4000022, 0x8000, 0x40009, 0x400, 0x401, 0xa, 0x1, 0x1, 0x5, 0x5, 0x5f31, 0x7f9, 0x5, 0x2, 0x2, 0x4, 0x5, 0x9, 0x8, 0x800000d, 0x88da, 0x2007, 0xd, 0x2000001, 0xfe000000, 0x10002, 0x2, 0x7b, 0x9, 0x3, 0x3, 0x8, 0x1, 0x7, 0x3, 0x9, 0x48c93690, 0x1000042, 0xffff], [0x7, 0xf5fb, 0x0, 0x5, 0x1, 0x100, 0x8d2, 0x9, 0x800003, 0x7fff, 0x0, 0x100005, 0xf, 0x4, 0x5, 0x20000007, 0x0, 0x81ef, 0x5, 0x8, 0x83, 0x3, 0x0, 0x3e7, 0xa, 0x5, 0xffffffff, 0x5, 0x3, 0x8, 0x8, 0x6cfc, 0x5, 0x39, 0x7, 0x200, 0x80, 0x3, 0x4e0a, 0x7, 0x1000, 0xa2, 0x7, 0x5, 0x3, 0x8, 0xac8, 0xffffffff, 0x2, 0x11, 0x7ff, 0xfffffff8, 0x0, 0x10000, 0xffff, 0x2b98, 0x1, 0x5, 0x120000, 0xbe, 0x0, 0xa2ed, 0x2, 0x25], [0x9, 0xcad, 0x7, 0xb, 0x5, 0x3, 0xa, 0x3, 0x0, 0x5, 0x7d, 0xc9, 0x6, 0x6, 0x8, 0x57b, 0x7, 0x10000, 0x6, 0x7ffd, 0xfff9, 0x4, 0x20002, 0x5, 0xe8a0556, 0x9, 0x14c, 0x3, 0x6, 0x6, 0x3, 0x80000000, 0x5, 0x8, 0xce, 0xee1, 0xfffff000, 0x179, 0x3, 0x7e, 0x100, 0x9600, 0x56e, 0x2, 0x1007, 0x40000006, 0x1, 0x8, 0x8, 0x4, 0x30b1d693, 0xa1f, 0xc, 0xa00007, 0xfffffffe, 0x3, 0x0, 0xffff, 0x8000007, 0x2bf, 0x3, 0x200, 0x7fffffff, 0x2]}, 0xfffffffffffffd01) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB, @ANYRES32=r2, @ANYBLOB="0000000003120100500012800b00010062726964676500004000028008000500010000000600270fff0000000800010015000800050025000000000008000400000000000c002e"], 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x40) 1.256672121s ago: executing program 2 (id=1533): sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f00000014c0)=[@rights={{0x10}}, @cred={{0x1c}}, @rights={{0x10}}, @rights={{0x10}}], 0x50}, 0x40000002) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000080000000c"], 0x50) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff00000085000000a800000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b70400000000000085000000c300000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x36, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000340)={r3}, 0xc) 1.203416512s ago: executing program 7 (id=1534): r0 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x585f, 0x40000, 0x0, 0x3c8}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) r4 = socket$inet6_icmp(0xa, 0x2, 0x3a) r5 = syz_io_uring_setup(0x34b8, &(0x7f0000000540)={0x0, 0x8550, 0xc00, 0x1, 0xf}, &(0x7f0000000100)=0x0, &(0x7f00000001c0)=0x0, &(0x7f0000000180)=0x0) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) syz_io_uring_submit(r6, r7, r8, &(0x7f0000000280)=@IORING_OP_FALLOCATE={0x11, 0x48, 0x0, @fd_index=0x4, 0x3b2e, 0x0, 0x5, 0x0, 0x0, {0x0, r9}}) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000280)=@IORING_OP_BIND=@ipv4={0x38, 0x40, 0x0, r4, 0x10, &(0x7f0000000300)={{0x2, 0x4e23, @broadcast}}, 0x0, 0x0, 0x1, {0x0, r9}}) io_uring_enter(r0, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) r10 = socket$inet6(0xa, 0x3, 0x1) getsockopt$inet6_buf(r10, 0x29, 0x3d, &(0x7f0000000000)=""/171, &(0x7f00000000c0)=0xab) r11 = socket$rxrpc(0x21, 0x2, 0xa) sendmsg$inet(r11, &(0x7f0000000140)={0x0, 0xfffffffffffffe9d, 0x0, 0x0, &(0x7f0000000140), 0x18, 0x4c00}, 0x0) keyctl$KEYCTL_PKEY_DECRYPT(0x1a, &(0x7f0000000440), &(0x7f0000000180)=ANY=[@ANYRESHEX=0x0, @ANYRES64=r11, @ANYBLOB="2acb15a322cb4705999373d1a71ca71db7490d599b228ffa75ca45e3fd67cbb6a8401ab6d78de0f501331d03583dc5bc9cf07e8cde3f99608e4f3561cc896be7c8edb26836533255b226634e1aeae64a166bbeb21c276852291174c308a42ae5534c338eafd1e42afe523b96c2d4ddd9324b7225ef0940f9c93370c665183cc0303ee1fae7dc443171ea5547cab8f9bbac44b87a2d8c62bb6e45a635ac68cbb0e88702bc4a891ee5b768655100313e4f9a6b3c6eb41e", @ANYRESDEC=r11], 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x15, 0xe, &(0x7f0000002e00)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2b, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x0, 0x10000}, 0x8, 0x10, &(0x7f0000000040)={0xfffffffc, 0xd}, 0x10}, 0x94) syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x585f, 0x40000, 0x0, 0x3c8}, &(0x7f0000000100), &(0x7f0000000000), &(0x7f0000000080)) (async) socket$inet6_icmp(0xa, 0x2, 0x3a) (async) syz_io_uring_setup(0x34b8, &(0x7f0000000540)={0x0, 0x8550, 0xc00, 0x1, 0xf}, &(0x7f0000000100), &(0x7f00000001c0), &(0x7f0000000180)) (async) io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) (async) syz_io_uring_submit(r6, r7, r8, &(0x7f0000000280)=@IORING_OP_FALLOCATE={0x11, 0x48, 0x0, @fd_index=0x4, 0x3b2e, 0x0, 0x5, 0x0, 0x0, {0x0, r9}}) (async) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000280)=@IORING_OP_BIND=@ipv4={0x38, 0x40, 0x0, r4, 0x10, &(0x7f0000000300)={{0x2, 0x4e23, @broadcast}}, 0x0, 0x0, 0x1, {0x0, r9}}) (async) io_uring_enter(r0, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) (async) socket$inet6(0xa, 0x3, 0x1) (async) getsockopt$inet6_buf(r10, 0x29, 0x3d, &(0x7f0000000000)=""/171, &(0x7f00000000c0)=0xab) (async) socket$rxrpc(0x21, 0x2, 0xa) (async) sendmsg$inet(r11, &(0x7f0000000140)={0x0, 0xfffffffffffffe9d, 0x0, 0x0, &(0x7f0000000140), 0x18, 0x4c00}, 0x0) (async) keyctl$KEYCTL_PKEY_DECRYPT(0x1a, &(0x7f0000000440), &(0x7f0000000180)=ANY=[@ANYRESHEX=0x0, @ANYRES64=r11, @ANYBLOB="2acb15a322cb4705999373d1a71ca71db7490d599b228ffa75ca45e3fd67cbb6a8401ab6d78de0f501331d03583dc5bc9cf07e8cde3f99608e4f3561cc896be7c8edb26836533255b226634e1aeae64a166bbeb21c276852291174c308a42ae5534c338eafd1e42afe523b96c2d4ddd9324b7225ef0940f9c93370c665183cc0303ee1fae7dc443171ea5547cab8f9bbac44b87a2d8c62bb6e45a635ac68cbb0e88702bc4a891ee5b768655100313e4f9a6b3c6eb41e", @ANYRESDEC=r11], 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x15, 0xe, &(0x7f0000002e00)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2b, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x0, 0x10000}, 0x8, 0x10, &(0x7f0000000040)={0xfffffffc, 0xd}, 0x10}, 0x94) (async) 1.203120964s ago: executing program 2 (id=1535): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x4, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f00000003c0)='\x00', 0x1, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x20, @loopback, 0x1}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mount$cgroup(0x0, 0x0, 0x0, 0x2010042, 0x0) lremovexattr(0x0, 0x0) shutdown(r0, 0x1) 1.105563529s ago: executing program 7 (id=1536): sendmsg$alg(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001880)=[@assoc={0x18, 0x117, 0x4, 0xff}], 0x18, 0x20000000}, 0x404c0b5) r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="24000000210081dc2dbd7000030000000238000000000004"], 0x24}, 0x1, 0x0, 0x0, 0x81}, 0x44004) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x3261e) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x13, r1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@security={'security\x00', 0x64, 0x4, 0x2e8, 0x100000c, 0x208, 0x0, 0x2d8, 0xffffffff, 0xffffffff, 0x3a8, 0x3a8, 0x3a8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0xb0, 0x0, {0x0, 0x1000000000000}}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0x40, 0x2, 0x7, 0x8, 0x9, 0x3, 0x8, 0x8]}}}, {{@ip={@remote, @dev={0xac, 0x14, 0x14, 0x25}, 0xffffff00, 0xff, 'syz_tun\x00', 'bridge0\x00', {}, {}, 0x0, 0x0, 0x2}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0x4, 0x6, [0x1c, 0x2c, 0xb, 0x3c, 0x2e, 0x20, 0x24, 0x29, 0x36, 0xd, 0x1a, 0x2, 0x1f, 0xd, 0x80f, 0x21], 0x0, 0x4, 0x4}}}, {{@uncond, 0x1100, 0x70, 0xd0}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@multicast1, [0xff, 0xc72aaf435dc5921a, 0xffffffff], 0x4e23, 0x4e23, 0x4e23, 0x4e20, 0x3, 0x3, 0x2, 0x3, 0x3}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x348) 783.699144ms ago: executing program 3 (id=1537): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000240)=0x10) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$kcm(0x10, 0x2, 0x0) getsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000003c0), &(0x7f0000001380)=0x4) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000200)=0x7) capset(&(0x7f00000014c0)={0x20071026, r3}, &(0x7f0000001500)={0x2, 0x25e, 0x3, 0x9, 0x7}) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'sha384\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x80800) sendmsg$xdp(r5, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000002a80)=[{&(0x7f0000000540)="0feb", 0x2}, {&(0x7f0000001a80)="fd", 0x1}], 0x2, 0x0, 0x0, 0x4}, 0x1) sendmsg$kcm(r2, &(0x7f00000000c0)={0x0, 0xfffffe50, &(0x7f0000001480)=[{&(0x7f0000000400)="d8000000190081054e81f782db4cfe55a10a0015000900142603600e1208000f4f1b000401a8001600200005400400027c035c0461c1d67f6f94007134cf6efb8800a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5e2131f933e4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bc1c2009b48c60708c87af679df79a533ffece0b42ad5df9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970392bd20bf78e1bc9a6531c04ad4f38a0c286126d2ae872486961315bafeb4f186145192793d69b5911ae8259327b072e0711cad455fc11ec2634b35376350efe3dde641e1a1d03cb09f1fd18e9f7560435a6870dabcfd2fa1165c011cd9895ee017efbd98ab5b1c7e95", 0xd8}], 0x1}, 0x0) socket(0x1d, 0x2, 0x6) openat$vnet(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) eventfd2(0xfffffffb, 0x1) r6 = syz_io_uring_setup(0x33d, &(0x7f0000001400)={0x0, 0xac74, 0x4, 0x0, 0xdf}, &(0x7f00000013c0)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r7, r8, r9, &(0x7f0000000280)=@IORING_OP_WRITEV={0x2, 0x6e, 0x2007, @fd=r1, 0x6, &(0x7f0000000680), 0x0, 0x1, 0x1, {0x0, 0x0, 0x0, '\x00', &(0x7f0000000700)={0x4, 0x200, 0x3f, &(0x7f00000006c0)="ea4da36a4dfb1858c7498db5614361ed4b15595d136fcde34d8a53653ebfc4acc48cb72d36bfd7bb38278632aee4c87e538bb2dc058bc730d3b2d8c2bc573f", 0x3}, 0x9}}) io_uring_enter(r6, 0x7c65, 0xa334, 0x1, 0x0, 0x0) shutdown(r1, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(r5, 0x114, 0x7, &(0x7f0000000580)={@caif=@rfm={0x25, 0x1, "d700c2057dcb2640024936548c1f86f4"}, {&(0x7f0000000180)=""/161, 0xa1}, &(0x7f0000000340), 0x39}, 0xa0) setsockopt$inet6_opts(r1, 0x29, 0x39, &(0x7f0000000080)=ANY=[@ANYBLOB="3c1204"], 0x98) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000020000006b8af8ff00000000bfa200000000000007020000fcffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$inet6_IPV6_DSTOPTS(r1, 0x29, 0x3b, &(0x7f0000000040)=ANY=[@ANYBLOB='/@\x00\x00\x00\x00\x00\x00'], 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000300)=[@in6={0xa, 0x4e20, 0x44, @dev={0xfe, 0x80, '\x00', 0x42}, 0x5}]}, &(0x7f0000000140)=0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000380), r5) 735.67568ms ago: executing program 7 (id=1538): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xffde}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000ac0)=@newtfilter={0x40, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x8847, r3, {0xe, 0x7}, {}, {0x7, 0xb}}, [@filter_kind_options=@f_flower={{0xb}, {0x10, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x8, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x4}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x4}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x0) 630.440035ms ago: executing program 7 (id=1539): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 619.326896ms ago: executing program 3 (id=1540): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="58000000100037040400"/20, @ANYRES32, @ANYBLOB="8304050000000000380012800b000100697036746e6c000028000280"], 0x58}, 0x1, 0x0, 0x0, 0x9005}, 0x4000000) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000001800dd8d0900000000000000020000fc0000000500000000060015000200000014001680100008800c000380050001"], 0x38}}, 0x2000) 526.490135ms ago: executing program 7 (id=1541): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) listen(0xffffffffffffffff, 0x10040) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) 525.714534ms ago: executing program 6 (id=1542): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x2, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {0x4, 0x0, 0x5374}, 0x1d, [0x8000, 0x78, 0xf, 0x2, 0x80, 0x2, 0x203, 0x7e, 0x4, 0x4b, 0x39cc1919, 0x40, 0x9, 0x5, 0xffff2d37, 0x881, 0x6, 0x3, 0x0, 0x5, 0x4, 0x3, 0x5, 0x3c5d, 0x1, 0x0, 0x9, 0x2, 0x15bb, 0x2, 0xe65f, 0x3, 0x7, 0x3, 0x7fff, 0x7, 0x80000000, 0xa72, 0x3, 0x7, 0x0, 0x71, 0xe, 0x1, 0x1, 0x5, 0x9, 0x3a, 0xffffff7f, 0x6, 0x6, 0xfffbffff, 0x5, 0x4, 0x8, 0x0, 0x80, 0x2, 0x4, 0x9, 0x39, 0x7, 0x1f, 0x40], [0x10000007, 0x3, 0x800, 0x8000, 0x10, 0xffeffff3, 0x8, 0x200c5, 0xf9, 0x10, 0x2bf, 0x6c9, 0xfff, 0xfffffffc, 0x5, 0x0, 0x3, 0x926, 0xa, 0x1, 0x2, 0x407c, 0xea4, 0x0, 0x4, 0x4000022, 0x8000, 0x40009, 0x400, 0x401, 0xa, 0x1, 0x1, 0x5, 0x5, 0x5f31, 0x7f9, 0x5, 0x2, 0x2, 0x4, 0x5, 0x9, 0x8, 0x800000d, 0x88da, 0x2007, 0xd, 0x2000001, 0xfe000000, 0x10002, 0x2, 0x7b, 0x9, 0x3, 0x3, 0x8, 0x1, 0x7, 0x3, 0x9, 0x48c93690, 0x1000042, 0xffff], [0x7, 0xf5fb, 0x0, 0x5, 0x1, 0x100, 0x8d2, 0x9, 0x800003, 0x7fff, 0x0, 0x100005, 0xf, 0x4, 0x5, 0x20000007, 0x0, 0x81ef, 0x5, 0x8, 0x83, 0x3, 0x0, 0x3e7, 0xa, 0x5, 0xffffffff, 0x5, 0x3, 0x8, 0x8, 0x6cfc, 0x5, 0x39, 0x7, 0x200, 0x80, 0x3, 0x4e0a, 0x7, 0x1000, 0xa2, 0x7, 0x5, 0x3, 0x8, 0xac8, 0xffffffff, 0x2, 0x11, 0x7ff, 0xfffffff8, 0x0, 0x10000, 0xffff, 0x2b98, 0x1, 0x5, 0x120000, 0xbe, 0x0, 0xa2ed, 0x2, 0x25], [0x9, 0xcad, 0x7, 0xb, 0x5, 0x3, 0xa, 0x3, 0x0, 0x5, 0x7d, 0xc9, 0x6, 0x6, 0x8, 0x57b, 0x7, 0x10000, 0x6, 0x7ffd, 0xfff9, 0x4, 0x20002, 0x5, 0xe8a0556, 0x9, 0x14c, 0x3, 0x6, 0x6, 0x3, 0x80000000, 0x5, 0x8, 0xce, 0xee1, 0xfffff000, 0x179, 0x3, 0x7e, 0x100, 0x9600, 0x56e, 0x2, 0x1007, 0x40000006, 0x1, 0x8, 0x8, 0x4, 0x30b1d693, 0xa1f, 0xc, 0xa00007, 0xfffffffe, 0x3, 0x0, 0xffff, 0x8000007, 0x2bf, 0x3, 0x200, 0x7fffffff, 0x2]}, 0xfffffffffffffd01) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB, @ANYRES32=r2, @ANYBLOB="0000000003120100500012800b00010062726964676500004000028008000500010000000600270fff0000000800010015000800050025000000000008000400000000000c002e"], 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x40) 459.904095ms ago: executing program 3 (id=1543): bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42) r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x7bc, 0x2000) ioctl$USBDEVFS_FORBID_SUSPEND(r0, 0x5521) 459.068116ms ago: executing program 6 (id=1544): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r0 = fsopen(&(0x7f0000000400)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) socket$inet6(0xa, 0x2, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, 0x0, 0x20000040) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x40, 0x16f) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) execve(&(0x7f0000000180)='./file0\x00', 0x0, &(0x7f00000005c0)={[&(0x7f0000000580)='$[#\')ay%$&):+-&#\\\x00']}) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$cgroup_ro(r1, &(0x7f0000000340)='cgroup.stat\x00', 0x300, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000001000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) 359.684128ms ago: executing program 3 (id=1545): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x6, 0x4, 0x0, 0x0, 0x5}, 0x94) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r0, 0x4010744d, &(0x7f0000000180)) (fail_nth: 5) 302.380684ms ago: executing program 2 (id=1546): r0 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$inet6(r0, &(0x7f0000000040)={&(0x7f0000000000)={0xa, 0xfffe, 0x0, @loopback={0xfbffff7f00000000}, 0x805}, 0x1c, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="280000000000000029000000050000008402020100edff29ff02000000000000000000000000310118"], 0x40}, 0x2404c850) 217.546505ms ago: executing program 3 (id=1547): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000900)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x201, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x521deb0d}]}]}, @NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_FIB_FLAGS={0x8, 0x3, 0x1, 0x0, 0x13}, @NFTA_FIB_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xdc}}, 0x0) r1 = syz_io_uring_setup(0x36a1, &(0x7f0000000400)={0x0, 0x5de4, 0x10000, 0x0, 0x51}, &(0x7f0000000300)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') r5 = epoll_create1(0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000280)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x40, 0x0, r5, 0xffffffffffffffff, &(0x7f0000000040)={0x2000}, 0x1, 0x0, 0x1}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) r6 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/idVendor\x00', 0x1, 0x0) write(r6, &(0x7f0000000180)='0x1234\n', 0x7) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/idProduct\x00', 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/strings/0x409\x00', 0x1ff) r7 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/strings/0x409/serialnumber\x00', 0x1, 0x0) write(r7, &(0x7f00000002c0)='1234567890\n', 0xb) quotactl_fd$Q_GETINFO(r0, 0xffffffff80000501, 0x0, &(0x7f00000005c0)) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/functions/ecm.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) symlinkat(&(0x7f00000003c0)='./config/usb_gadget/g1/functions/ecm.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1/configs/c.1/ecm.usb0\x00') r8 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r8, &(0x7f0000000480)='dummy_udc.0', 0xb) nanosleep(&(0x7f0000000000)={0x0, 0x5f5e100}, 0x0) write(r8, &(0x7f00000004c0)='\n', 0x1) unlinkat(0xffffffffffffff9c, &(0x7f0000000500)='./config/usb_gadget/g1/configs/c.1/ecm.usb0\x00', 0x0) io_uring_enter(r1, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) 39.767621ms ago: executing program 2 (id=1548): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FBIOPUT_CON2FBMAP(r0, 0x4605, &(0x7f0000000040)={0x0, 0x8000402}) (async) r1 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb0100180002000000000024000000240002000400000001001000000000000010020000000a0000000000000c02000000006f2d00000000edffffff050000"], 0x0, 0x40, 0x0, 0x200, 0xa0, 0x10000, @value=r1}, 0x28) 0s ago: executing program 2 (id=1549): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='huge=always,huge=within_size,nr_blocks=5']) chdir(&(0x7f0000000140)='./file0\x00') r0 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040), &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x40, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000500)=@new_dev={0x3, 0x4}}}, &(0x7f0000001b00)) socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x7, 0x4, 0x3e0, 0x110, 0x11e, 0x110, 0x2f8, 0x2f8, 0x2f8, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac, @mac=@remote, @loopback, @local, 0x1, 0x1}}}, {{@arp={@multicast2, @private=0xa010100, 0xff, 0xffffff00, 0xc, 0x4, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, {[0xff, 0xff, 0xff, 0xff, 0x0, 0xbe9240b8a223bba0]}}, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x24}, {[0xff, 0x0, 0xff, 0xff, 0xff]}}, 0x2, 0x6, 0x23b0, 0x9dd7, 0x80, 0x9, 'veth1_vlan\x00', 'ip_vti0\x00', {0xff}, {0xff}, 0x0, 0x12}, 0xc0, 0x100}, @unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "716ebd2e1aa0cc683e62f312359594df00da56317f76121697127951fdba"}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE0={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x430) r4 = syz_io_uring_setup(0x34b8, &(0x7f0000000540)={0x0, 0xc3b1, 0x800, 0x1, 0x2db}, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x24280, 0x9) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) syz_io_uring_submit(r5, r6, r7, &(0x7f0000000040)=@IORING_OP_ACCEPT={0xd, 0x30, 0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x80800}) io_uring_enter(r4, 0x1, 0x1, 0x1, 0x0, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x80042, 0x45) fallocate(r8, 0x0, 0x37e9, 0x2f92) r9 = socket(0x1, 0x5, 0x0) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000200)=0x5) setreuid(r10, r10) setresuid(r10, 0x0, r10) quotactl_fd$Q_GETNEXTQUOTA(r0, 0xffffffff80000901, r10, &(0x7f0000000880)) recvmsg(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000200)=@ax25={{0x3, @rose}, [@null, @default, @default, @netrom, @remote, @bcast, @remote, @netrom]}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000400)=""/234, 0xea}, {&(0x7f0000000500)=""/151, 0x97}, {&(0x7f0000000640)=""/254, 0xfe}, {&(0x7f0000000740)=""/240, 0xf0}], 0x4}, 0x40010041) write$UHID_CREATE(r8, &(0x7f00000002c0)={0x0, {'syz0\x00', 'syz1\x00', 'syz1\x00', 0x0, 0x0, 0x8, 0x5, 0x7d4, 0xe, 0x10000}}, 0x120) kernel console output (not intermixed with test programs): 97.768253][ T7883] 2097152 pages RAM [ 97.768256][ T7883] 0 pages HighMem/MovableOnly [ 97.768259][ T7883] 392333 pages reserved [ 97.768262][ T7883] 8192 pages cma reserved [ 97.768265][ T7883] 6144 pages hwpoisoned [ 98.041349][ T7901] netlink: 28 bytes leftover after parsing attributes in process `syz.2.985'. [ 98.043302][ T7900] netlink: 28 bytes leftover after parsing attributes in process `syz.2.985'. [ 98.079369][ T7905] netlink: 8 bytes leftover after parsing attributes in process `syz.2.986'. [ 98.128033][ T7907] netlink: 'syz.4.987': attribute type 30 has an invalid length. [ 98.139253][ T7914] loop2: detected capacity change from 0 to 256 [ 98.147031][ T7909] loop5: detected capacity change from 0 to 128 [ 98.156543][ T7909] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a84ec018, mo2=0002] [ 98.156593][ T7909] System zones: 1-3, 19-19, 35-36 [ 98.157141][ T7909] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 98.164716][ T7909] overlayfs: missing 'lowerdir' [ 98.195356][ T5002] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 98.316720][ T7926] netlink: 8 bytes leftover after parsing attributes in process `syz.5.992'. [ 98.319516][ T7926] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.319947][ T7926] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.450266][ T4711] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.760956][ T7945] FAULT_INJECTION: forcing a failure. [ 98.760956][ T7945] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 98.764139][ T7945] CPU: 1 UID: 0 PID: 7945 Comm: syz.3.1000 Tainted: G M L syzkaller #0 PREEMPT [ 98.764160][ T7945] Tainted: [M]=MACHINE_CHECK, [L]=SOFTLOCKUP [ 98.764164][ T7945] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 98.764170][ T7945] Call trace: [ 98.764174][ T7945] show_stack+0x2c/0x3c (C) [ 98.764198][ T7945] __dump_stack+0x30/0x40 [ 98.764210][ T7945] dump_stack_lvl+0xd8/0x12c [ 98.764220][ T7945] dump_stack+0x1c/0x28 [ 98.764230][ T7945] should_fail_ex+0x41c/0x590 [ 98.764239][ T7945] should_fail_alloc_page+0xec/0x10c [ 98.764248][ T7945] prepare_alloc_pages+0x194/0x4a4 [ 98.764257][ T7945] __alloc_frozen_pages_noprof+0x134/0x320 [ 98.764266][ T7945] alloc_pages_mpol+0x1ec/0x3c0 [ 98.764275][ T7945] folio_alloc_mpol_noprof+0x4c/0x248 [ 98.764284][ T7945] vma_alloc_folio_noprof+0x100/0x1dc [ 98.764293][ T7945] vma_alloc_zeroed_movable_folio+0x74/0x88 [ 98.764303][ T7945] folio_prealloc+0x3c/0x1b0 [ 98.764311][ T7945] do_pte_missing+0x1bcc/0x2a24 [ 98.764319][ T7945] handle_mm_fault+0x14f8/0x2514 [ 98.764327][ T7945] do_page_fault+0x77c/0xb88 [ 98.764336][ T7945] do_translation_fault+0xc4/0x114 [ 98.764346][ T7945] do_mem_abort+0x70/0x194 [ 98.764355][ T7945] el0_da+0x78/0x254 [ 98.764364][ T7945] el0t_64_sync_handler+0xd8/0x104 [ 98.764373][ T7945] el0t_64_sync+0x198/0x19c [ 98.792009][ T7945] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 98.795862][ T7940] block2mtd: illegal erase size [ 98.797674][ T7945] loop3: detected capacity change from 0 to 512 [ 98.802359][ T7945] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 98.818355][ T7945] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.1000: bg 0: block 384: padding at end of block bitmap is not set [ 98.818396][ T7945] loop3: lost filesystem error report for type 5 error -117 [ 98.818675][ T7945] EXT4-fs (loop3): Remounting filesystem read-only [ 98.818752][ T7945] EXT4-fs (loop3): 1 truncate cleaned up [ 98.819180][ T7945] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 98.857273][ T4711] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.942270][ T7956] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1005'. [ 99.109053][ T7973] futex_wake_op: syz.6.1010 tries to shift op by -1; fix this program [ 99.176865][ T7978] loop6: detected capacity change from 0 to 256 [ 99.354892][ T7992] tmpfs: Unknown parameter 'nr_blo' [ 99.389087][ T7996] loop5: detected capacity change from 0 to 512 [ 99.390694][ T7996] EXT4-fs: Ignoring removed bh option [ 99.393799][ T7996] EXT4-fs (loop5): couldn't mount as ext2 due to feature incompatibilities [ 99.430522][ T8000] binder: 8000 RLIMIT_NICE not set [ 99.972877][ T8021] Cannot find del_set index 3 as target [ 100.058773][ T8024] syz_tun: entered allmulticast mode [ 100.141148][ T8028] @0Ù: renamed from dummy0 (while UP) [ 100.415462][ T8033] tmpfs: Unknown parameter 'nr_blo' [ 100.930361][ T8047] FAULT_INJECTION: forcing a failure. [ 100.930361][ T8047] name failslab, interval 1, probability 0, space 0, times 0 [ 100.930398][ T8047] CPU: 0 UID: 0 PID: 8047 Comm: syz.5.1035 Tainted: G M L syzkaller #0 PREEMPT [ 100.930411][ T8047] Tainted: [M]=MACHINE_CHECK, [L]=SOFTLOCKUP [ 100.930415][ T8047] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 100.930420][ T8047] Call trace: [ 100.930423][ T8047] show_stack+0x2c/0x3c (C) [ 100.930441][ T8047] __dump_stack+0x30/0x40 [ 100.930452][ T8047] dump_stack_lvl+0xd8/0x12c [ 100.930468][ T8047] dump_stack+0x1c/0x28 [ 100.930479][ T8047] should_fail_ex+0x41c/0x590 [ 100.930487][ T8047] should_failslab+0xc4/0x120 [ 100.930496][ T8047] __kmalloc_cache_noprof+0x94/0x5ec [ 100.930505][ T8047] apply_subsystem_event_filter+0x444/0x10dc [ 100.930515][ T8047] subsystem_filter_write+0xa0/0x108 [ 100.930522][ T8047] vfs_write+0x2a4/0xa0c [ 100.930530][ T8047] ksys_write+0x12c/0x228 [ 100.930536][ T8047] __arm64_sys_write+0x84/0x98 [ 100.930543][ T8047] invoke_syscall+0x98/0x244 [ 100.930554][ T8047] el0_svc_common+0xec/0x23c [ 100.930563][ T8047] do_el0_svc+0x4c/0x5c [ 100.930573][ T8047] el0_svc+0x64/0x260 [ 100.930582][ T8047] el0t_64_sync_handler+0x44/0x104 [ 100.930591][ T8047] el0t_64_sync+0x198/0x19c [ 101.001095][ T8053] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 101.005659][ T8053] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.1038: bg 0: block 384: padding at end of block bitmap is not set [ 101.005695][ T8053] loop3: lost filesystem error report for type 5 error -117 [ 101.006543][ T8053] EXT4-fs (loop3): Remounting filesystem read-only [ 101.006639][ T8053] EXT4-fs (loop3): 1 truncate cleaned up [ 101.009338][ T8053] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 101.179361][ T8063] __nla_validate_parse: 4 callbacks suppressed [ 101.179649][ T8063] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1039'. [ 101.466433][ T8072] fuse: Bad value for 'fd' [ 101.554885][ T8077] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 101.558816][ T8077] FAULT_INJECTION: forcing a failure. [ 101.558816][ T8077] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 101.558849][ T8077] CPU: 1 UID: 0 PID: 8077 Comm: syz.6.1044 Tainted: G M L syzkaller #0 PREEMPT [ 101.558864][ T8077] Tainted: [M]=MACHINE_CHECK, [L]=SOFTLOCKUP [ 101.558868][ T8077] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 101.558875][ T8077] Call trace: [ 101.558879][ T8077] show_stack+0x2c/0x3c (C) [ 101.558897][ T8077] __dump_stack+0x30/0x40 [ 101.558908][ T8077] dump_stack_lvl+0xd8/0x12c [ 101.558918][ T8077] dump_stack+0x1c/0x28 [ 101.558928][ T8077] should_fail_ex+0x41c/0x590 [ 101.558936][ T8077] should_fail+0x14/0x24 [ 101.558943][ T8077] should_fail_usercopy+0x20/0x30 [ 101.558950][ T8077] strncpy_from_user+0x48/0x388 [ 101.558959][ T8077] do_getname+0x84/0x234 [ 101.558970][ T8077] getname_flags+0x2c/0x3c [ 101.558978][ T8077] do_sys_openat2+0xd0/0x1e8 [ 101.558988][ T8077] do_sys_open+0xb0/0xe0 [ 101.558997][ T8077] __arm64_sys_openat+0xa8/0xc4 [ 101.559007][ T8077] invoke_syscall+0x98/0x244 [ 101.559017][ T8077] el0_svc_common+0xec/0x23c [ 101.559027][ T8077] do_el0_svc+0x4c/0x5c [ 101.559037][ T8077] el0_svc+0x64/0x260 [ 101.559046][ T8077] el0t_64_sync_handler+0x44/0x104 [ 101.559055][ T8077] el0t_64_sync+0x198/0x19c [ 101.569962][ T7383] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 102.496132][ T4711] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.538328][ T8086] set_capacity_and_notify: 2 callbacks suppressed [ 102.545116][ T8086] loop2: detected capacity change from 0 to 128 [ 102.570825][ T8086] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a84ec018, mo2=0002] [ 102.570869][ T8086] System zones: 1-3, 19-19, 35-36 [ 102.600370][ T8086] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 102.661900][ T8101] ./file0: Can't lookup blockdev [ 102.664672][ T8101] EXT4-fs warning (device loop2): verify_group_input:137: Cannot add at group 7 (only 1 groups) [ 102.674268][ T8096] FAULT_INJECTION: forcing a failure. [ 102.674268][ T8096] name failslab, interval 1, probability 0, space 0, times 0 [ 102.674303][ T8096] CPU: 1 UID: 0 PID: 8096 Comm: syz.5.1050 Tainted: G M L syzkaller #0 PREEMPT [ 102.674318][ T8096] Tainted: [M]=MACHINE_CHECK, [L]=SOFTLOCKUP [ 102.674323][ T8096] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 102.674329][ T8096] Call trace: [ 102.674332][ T8096] show_stack+0x2c/0x3c (C) [ 102.674353][ T8096] __dump_stack+0x30/0x40 [ 102.674365][ T8096] dump_stack_lvl+0xd8/0x12c [ 102.674375][ T8096] dump_stack+0x1c/0x28 [ 102.674385][ T8096] should_fail_ex+0x41c/0x590 [ 102.674393][ T8096] should_failslab+0xc4/0x120 [ 102.674402][ T8096] __kmalloc_cache_noprof+0x94/0x5ec [ 102.674411][ T8096] apply_subsystem_event_filter+0x2b4/0x10dc [ 102.674421][ T8096] subsystem_filter_write+0xa0/0x108 [ 102.674428][ T8096] vfs_write+0x2a4/0xa0c [ 102.674436][ T8096] ksys_write+0x12c/0x228 [ 102.674443][ T8096] __arm64_sys_write+0x84/0x98 [ 102.674450][ T8096] invoke_syscall+0x98/0x244 [ 102.674460][ T8096] el0_svc_common+0xec/0x23c [ 102.674475][ T8096] do_el0_svc+0x4c/0x5c [ 102.674486][ T8096] el0_svc+0x64/0x260 [ 102.674496][ T8096] el0t_64_sync_handler+0x44/0x104 [ 102.674505][ T8096] el0t_64_sync+0x198/0x19c [ 102.755010][ T4721] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 102.998875][ T8138] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1057'. [ 103.049715][ T8128] loop6: detected capacity change from 0 to 128 [ 103.061668][ T8128] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 103.190064][ T8162] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 103.256842][ T8173] loop4: detected capacity change from 0 to 256 [ 103.261136][ T8173] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 103.318220][ T8178] loop2: detected capacity change from 0 to 256 [ 103.319820][ T8178] vfat: Unknown parameter 'fowner>00000000000000000000' [ 103.322208][ T8180] syz_tun: entered allmulticast mode [ 103.387686][ T8186] loop2: detected capacity change from 0 to 512 [ 103.408560][ T8186] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 103.448365][ T4721] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.627203][ T8213] FAULT_INJECTION: forcing a failure. [ 103.627203][ T8213] name failslab, interval 1, probability 0, space 0, times 0 [ 103.627241][ T8213] CPU: 1 UID: 0 PID: 8213 Comm: syz.2.1070 Tainted: G M L syzkaller #0 PREEMPT [ 103.627256][ T8213] Tainted: [M]=MACHINE_CHECK, [L]=SOFTLOCKUP [ 103.627260][ T8213] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 103.627266][ T8213] Call trace: [ 103.627270][ T8213] show_stack+0x2c/0x3c (C) [ 103.627291][ T8213] __dump_stack+0x30/0x40 [ 103.627303][ T8213] dump_stack_lvl+0xd8/0x12c [ 103.627313][ T8213] dump_stack+0x1c/0x28 [ 103.627322][ T8213] should_fail_ex+0x41c/0x590 [ 103.627331][ T8213] should_failslab+0xc4/0x120 [ 103.627339][ T8213] __kmalloc_node_track_caller_noprof+0x108/0x6d4 [ 103.627349][ T8213] kstrdup+0x50/0x104 [ 103.627358][ T8213] apply_subsystem_event_filter+0x2cc/0x10dc [ 103.627367][ T8213] subsystem_filter_write+0xa0/0x108 [ 103.627375][ T8213] vfs_write+0x2a4/0xa0c [ 103.627383][ T8213] ksys_write+0x12c/0x228 [ 103.627389][ T8213] __arm64_sys_write+0x84/0x98 [ 103.627396][ T8213] invoke_syscall+0x98/0x244 [ 103.627407][ T8213] el0_svc_common+0xec/0x23c [ 103.627416][ T8213] do_el0_svc+0x4c/0x5c [ 103.627426][ T8213] el0_svc+0x64/0x260 [ 103.627436][ T8213] el0t_64_sync_handler+0x44/0x104 [ 103.627444][ T8213] el0t_64_sync+0x198/0x19c [ 104.392140][ T8216] loop2: detected capacity change from 0 to 128 [ 104.509974][ T8216] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a84ec018, mo2=0002] [ 104.510048][ T8216] System zones: 1-3, 19-19, 35-36 [ 104.510643][ T8216] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 104.527884][ T8227] loop5: detected capacity change from 0 to 256 [ 104.567616][ T8227] sctp: [Deprecated]: syz.5.1076 (pid 8227) Use of int in maxseg socket option. [ 104.567616][ T8227] Use struct sctp_assoc_value instead [ 104.580382][ T8227] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1076'. [ 104.592521][ T40] Bluetooth: hci5: Frame reassembly failed (-84) [ 104.596488][ T4721] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 104.783387][ T8246] tmpfs: Bad value for 'mpol' [ 105.057212][ T8251] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1084'. [ 105.063289][ T8253] loop2: detected capacity change from 0 to 256 [ 105.065148][ T50] Bluetooth: hci0: command tx timeout [ 105.161080][ T8264] FAULT_INJECTION: forcing a failure. [ 105.161080][ T8264] name failslab, interval 1, probability 0, space 0, times 0 [ 105.162133][ T8264] CPU: 1 UID: 0 PID: 8264 Comm: syz.2.1089 Tainted: G M L syzkaller #0 PREEMPT [ 105.162153][ T8264] Tainted: [M]=MACHINE_CHECK, [L]=SOFTLOCKUP [ 105.162157][ T8264] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 105.162162][ T8264] Call trace: [ 105.162165][ T8264] show_stack+0x2c/0x3c (C) [ 105.162182][ T8264] __dump_stack+0x30/0x40 [ 105.162193][ T8264] dump_stack_lvl+0xd8/0x12c [ 105.162203][ T8264] dump_stack+0x1c/0x28 [ 105.162213][ T8264] should_fail_ex+0x41c/0x590 [ 105.162221][ T8264] should_failslab+0xc4/0x120 [ 105.162229][ T8264] kmem_cache_alloc_noprof+0x94/0x5d8 [ 105.162238][ T8264] __anon_vma_prepare+0xc4/0x3fc [ 105.162246][ T8264] __vmf_anon_prepare+0xe0/0x188 [ 105.162253][ T8264] do_wp_page+0x15fc/0x4074 [ 105.162261][ T8264] handle_mm_fault+0x1190/0x2514 [ 105.162268][ T8264] do_page_fault+0x77c/0xb88 [ 105.162278][ T8264] do_mem_abort+0x70/0x194 [ 105.162287][ T8264] el0_da+0x78/0x254 [ 105.162296][ T8264] el0t_64_sync_handler+0xd8/0x104 [ 105.162305][ T8264] el0t_64_sync+0x198/0x19c [ 105.162317][ T8264] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 105.163926][ T8264] loop2: detected capacity change from 0 to 512 [ 105.166897][ T8264] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 105.177964][ T8264] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.1089: bg 0: block 384: padding at end of block bitmap is not set [ 105.177987][ T8264] loop2: lost filesystem error report for type 5 error -117 [ 105.178191][ T8264] EXT4-fs (loop2): Remounting filesystem read-only [ 105.178269][ T8264] EXT4-fs (loop2): 1 truncate cleaned up [ 105.180219][ T8264] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 105.201960][ T4721] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.223195][ T8268] loop2: detected capacity change from 0 to 8 [ 105.767512][ T8280] device-mapper: ioctl: Invalid ioctl structure: name my, dev f800 [ 105.898025][ T8291] syz_tun: entered allmulticast mode [ 106.609494][ T1061] kernel read not supported for file [fscontext] (pid: 1061 comm: kworker/0:2) [ 106.655531][ T4728] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 106.788285][ T8316] FAULT_INJECTION: forcing a failure. [ 106.788285][ T8316] name failslab, interval 1, probability 0, space 0, times 0 [ 106.788318][ T8316] CPU: 1 UID: 0 PID: 8316 Comm: syz.3.1104 Tainted: G M L syzkaller #0 PREEMPT [ 106.788332][ T8316] Tainted: [M]=MACHINE_CHECK, [L]=SOFTLOCKUP [ 106.788336][ T8316] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 106.788340][ T8316] Call trace: [ 106.788343][ T8316] show_stack+0x2c/0x3c (C) [ 106.788362][ T8316] __dump_stack+0x30/0x40 [ 106.788372][ T8316] dump_stack_lvl+0xd8/0x12c [ 106.788382][ T8316] dump_stack+0x1c/0x28 [ 106.788392][ T8316] should_fail_ex+0x41c/0x590 [ 106.788400][ T8316] should_failslab+0xc4/0x120 [ 106.788409][ T8316] __kmalloc_noprof+0x108/0x6b8 [ 106.788418][ T8316] tracing_log_err+0x144/0x488 [ 106.788428][ T8316] append_filter_err+0x290/0x3e0 [ 106.788437][ T8316] apply_subsystem_event_filter+0x408/0x10dc [ 106.788445][ T8316] subsystem_filter_write+0xa0/0x108 [ 106.788453][ T8316] vfs_write+0x2a4/0xa0c [ 106.788460][ T8316] ksys_write+0x12c/0x228 [ 106.788467][ T8316] __arm64_sys_write+0x84/0x98 [ 106.788479][ T8316] invoke_syscall+0x98/0x244 [ 106.788490][ T8316] el0_svc_common+0xec/0x23c [ 106.788500][ T8316] do_el0_svc+0x4c/0x5c [ 106.788510][ T8316] el0_svc+0x64/0x260 [ 106.788519][ T8316] el0t_64_sync_handler+0x44/0x104 [ 106.788528][ T8316] el0t_64_sync+0x198/0x19c [ 106.853577][ T8321] FAULT_INJECTION: forcing a failure. [ 106.853577][ T8321] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 106.853617][ T8321] CPU: 0 UID: 0 PID: 8321 Comm: syz.3.1106 Tainted: G M L syzkaller #0 PREEMPT [ 106.853637][ T8321] Tainted: [M]=MACHINE_CHECK, [L]=SOFTLOCKUP [ 106.853643][ T8321] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 106.853649][ T8321] Call trace: [ 106.853652][ T8321] show_stack+0x2c/0x3c (C) [ 106.853673][ T8321] __dump_stack+0x30/0x40 [ 106.853684][ T8321] dump_stack_lvl+0xd8/0x12c [ 106.853694][ T8321] dump_stack+0x1c/0x28 [ 106.853703][ T8321] should_fail_ex+0x41c/0x590 [ 106.853711][ T8321] should_fail_alloc_page+0xec/0x10c [ 106.853720][ T8321] prepare_alloc_pages+0x194/0x4a4 [ 106.853729][ T8321] __alloc_frozen_pages_noprof+0x134/0x320 [ 106.853738][ T8321] alloc_pages_mpol+0x1ec/0x3c0 [ 106.853747][ T8321] folio_alloc_mpol_noprof+0x4c/0x248 [ 106.853757][ T8321] vma_alloc_folio_noprof+0x100/0x1dc [ 106.853765][ T8321] vma_alloc_zeroed_movable_folio+0x74/0x88 [ 106.853775][ T8321] folio_prealloc+0x3c/0x1b0 [ 106.853783][ T8321] do_pte_missing+0x1bcc/0x2a24 [ 106.853792][ T8321] handle_mm_fault+0x14f8/0x2514 [ 106.853799][ T8321] do_page_fault+0x77c/0xb88 [ 106.853808][ T8321] do_translation_fault+0xc4/0x114 [ 106.853818][ T8321] do_mem_abort+0x70/0x194 [ 106.853827][ T8321] el0_da+0x78/0x254 [ 106.853836][ T8321] el0t_64_sync_handler+0xd8/0x104 [ 106.853845][ T8321] el0t_64_sync+0x198/0x19c [ 106.853857][ T8321] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 106.860073][ T8321] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 106.888935][ T8321] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.1106: bg 0: block 384: padding at end of block bitmap is not set [ 106.888959][ T8321] loop3: lost filesystem error report for type 5 error -117 [ 106.899297][ T8321] EXT4-fs (loop3): Remounting filesystem read-only [ 106.899415][ T8321] EXT4-fs (loop3): 1 truncate cleaned up [ 106.900069][ T8321] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 106.930921][ T8325] usb usb5: usbfs: interface 0 claimed by hub while 'syz.5.1107' sets config #0 [ 106.943238][ T4711] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.948747][ T8327] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 106.974413][ T8327] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.1108: bg 0: block 384: padding at end of block bitmap is not set [ 106.974452][ T8327] loop4: lost filesystem error report for type 5 error -117 [ 106.975577][ T8327] EXT4-fs (loop4): Remounting filesystem read-only [ 106.975684][ T8327] EXT4-fs (loop4): 1 truncate cleaned up [ 106.976136][ T8327] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 106.996741][ T8331] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1110'. [ 107.105163][ T8341] netlink: 'syz.3.1113': attribute type 21 has an invalid length. [ 107.105201][ T8341] IPv6: NLM_F_CREATE should be specified when creating new route [ 107.258665][ T8348] FAULT_INJECTION: forcing a failure. [ 107.258665][ T8348] name failslab, interval 1, probability 0, space 0, times 0 [ 107.258698][ T8348] CPU: 1 UID: 0 PID: 8348 Comm: syz.2.1117 Tainted: G M L syzkaller #0 PREEMPT [ 107.258713][ T8348] Tainted: [M]=MACHINE_CHECK, [L]=SOFTLOCKUP [ 107.258717][ T8348] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 107.258722][ T8348] Call trace: [ 107.258725][ T8348] show_stack+0x2c/0x3c (C) [ 107.258746][ T8348] __dump_stack+0x30/0x40 [ 107.258758][ T8348] dump_stack_lvl+0xd8/0x12c [ 107.258771][ T8348] dump_stack+0x1c/0x28 [ 107.258780][ T8348] should_fail_ex+0x41c/0x590 [ 107.258789][ T8348] should_failslab+0xc4/0x120 [ 107.258799][ T8348] __kvmalloc_node_noprof+0x160/0x7d8 [ 107.258812][ T8348] bpf_stack_liveness_init+0x30/0x94 [ 107.258822][ T8348] bpf_check+0x1068/0x40dc [ 107.258832][ T8348] bpf_prog_load+0xfe4/0x158c [ 107.258839][ T8348] __sys_bpf+0x7d4/0x82c [ 107.258846][ T8348] __arm64_sys_bpf+0xd0/0xec [ 107.258853][ T8348] invoke_syscall+0x98/0x244 [ 107.258863][ T8348] el0_svc_common+0xec/0x23c [ 107.258873][ T8348] do_el0_svc+0x4c/0x5c [ 107.258882][ T8348] el0_svc+0x64/0x260 [ 107.258892][ T8348] el0t_64_sync_handler+0x44/0x104 [ 107.258900][ T8348] el0t_64_sync+0x198/0x19c [ 107.344338][ T8358] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1121'. [ 107.363017][ T8358] bond1: entered promiscuous mode [ 107.368655][ T8358] 8021q: adding VLAN 0 to HW filter on device bond1 [ 107.388734][ T8358] 8021q: adding VLAN 0 to HW filter on device bond1 [ 107.394882][ T8358] bond1: (slave sit1): The slave device specified does not support setting the MAC address [ 107.398125][ T8358] bond1: (slave sit1): Error -95 calling set_mac_address [ 107.401584][ T8369] netlink: 'syz.3.1125': attribute type 26 has an invalid length. [ 107.425916][ T8372] netlink: 'syz.3.1126': attribute type 21 has an invalid length. [ 107.431914][ T8373] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1121'. [ 107.440290][ T8373] bond0: entered promiscuous mode [ 107.440322][ T8373] bond_slave_0: entered promiscuous mode [ 107.440403][ T8373] bond_slave_1: entered promiscuous mode [ 107.448578][ T8373] gretap0: entered promiscuous mode [ 107.450356][ T8373] hsr1: entered promiscuous mode [ 107.474748][ T8379] vfat: Bad value for 'shortname' [ 107.872318][ T8402] IPv6: addrconf: prefix option has invalid lifetime [ 107.877366][ T8402] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1136'. [ 107.918943][ T4718] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.925656][ T8401] netlink: 'syz.3.1138': attribute type 21 has an invalid length. [ 107.965245][ T8408] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1139'. [ 108.013701][ T8415] xt_NFQUEUE: number of total queues is 0 [ 109.342841][ T8435] set_capacity_and_notify: 6 callbacks suppressed [ 109.343407][ T8433] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1147'. [ 109.346273][ T8435] loop4: detected capacity change from 0 to 256 [ 109.690203][ T8440] loop4: detected capacity change from 0 to 512 [ 109.695644][ T8440] EXT4-fs: Invalid want_extra_isize 4 [ 110.412878][ T8468] FAULT_INJECTION: forcing a failure. [ 110.412878][ T8468] name failslab, interval 1, probability 0, space 0, times 0 [ 110.412917][ T8468] CPU: 0 UID: 0 PID: 8468 Comm: syz.5.1157 Tainted: G M L syzkaller #0 PREEMPT [ 110.412933][ T8468] Tainted: [M]=MACHINE_CHECK, [L]=SOFTLOCKUP [ 110.412937][ T8468] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 110.412943][ T8468] Call trace: [ 110.412946][ T8468] show_stack+0x2c/0x3c (C) [ 110.412965][ T8468] __dump_stack+0x30/0x40 [ 110.412977][ T8468] dump_stack_lvl+0xd8/0x12c [ 110.412987][ T8468] dump_stack+0x1c/0x28 [ 110.412996][ T8468] should_fail_ex+0x41c/0x590 [ 110.413005][ T8468] should_failslab+0xc4/0x120 [ 110.413013][ T8468] __kmalloc_cache_noprof+0x94/0x5ec [ 110.413023][ T8468] apply_subsystem_event_filter+0x2b4/0x10dc [ 110.413032][ T8468] subsystem_filter_write+0xa0/0x108 [ 110.413040][ T8468] vfs_write+0x2a4/0xa0c [ 110.413047][ T8468] ksys_write+0x12c/0x228 [ 110.413054][ T8468] __arm64_sys_write+0x84/0x98 [ 110.413061][ T8468] invoke_syscall+0x98/0x244 [ 110.413072][ T8468] el0_svc_common+0xec/0x23c [ 110.413081][ T8468] do_el0_svc+0x4c/0x5c [ 110.413091][ T8468] el0_svc+0x64/0x260 [ 110.413100][ T8468] el0t_64_sync_handler+0x44/0x104 [ 110.413109][ T8468] el0t_64_sync+0x198/0x19c [ 111.366180][ T8472] loop5: detected capacity change from 0 to 512 [ 111.366596][ T8472] EXT4-fs: Ignoring removed bh option [ 111.372509][ T8472] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 111.391194][ T8472] EXT4-fs error (device loop5): ext4_iget_extra_inode:5180: inode #15: comm syz.5.1158: corrupted in-inode xattr: e_value size too large [ 111.391232][ T8472] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 111.394972][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 111.395003][ C1] EXT4-fs (loop5): initial error at time 111: ext4_iget_extra_inode:5180: inode 15 [ 111.395044][ C1] EXT4-fs (loop5): last error at time 111: ext4_iget_extra_inode:5180: inode 15 [ 111.410383][ T8472] EXT4-fs error (device loop5): ext4_orphan_get:1404: comm syz.5.1158: couldn't read orphan inode 15 (err -117) [ 111.410417][ T8472] loop5: lost filesystem error report for type 5 error -117 [ 111.416028][ T8472] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 111.449498][ T8472] EXT4-fs error (device loop5): ext4_iget_extra_inode:5180: inode #12: comm syz.5.1158: corrupted in-inode xattr: bad e_name length [ 111.494877][ T5002] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.713592][ T8509] loop2: detected capacity change from 0 to 512 [ 111.715597][ T8509] EXT4-fs: Ignoring removed oldalloc option [ 111.715933][ T8509] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 111.719496][ T8509] EXT4-fs (loop2): 1 truncate cleaned up [ 111.719975][ T8509] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 111.768171][ T8509] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.1168: invalid indirect mapped block 4294967295 (level 1) [ 111.773086][ T8509] EXT4-fs (loop2): Remounting filesystem read-only [ 113.073946][ T8539] loop4: detected capacity change from 0 to 512 [ 113.088400][ T8539] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm syz.4.1177: bg 0: block 5: invalid block bitmap [ 113.091818][ T8539] loop4: lost filesystem error report for type 5 error -117 [ 113.092826][ T8539] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 113.095952][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 113.095969][ C1] EXT4-fs (loop4): initial error at time 113: ext4_validate_block_bitmap:432 [ 113.095984][ C1] EXT4-fs (loop4): last error at time 113: ext4_validate_block_bitmap:432 [ 113.096362][ T8539] loop4: lost filesystem error report for type 5 error -117 [ 113.102104][ T8539] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.1177: invalid indirect mapped block 3 (level 2) [ 113.104601][ T8539] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 113.105736][ T8539] EXT4-fs (loop4): 1 orphan inode deleted [ 113.105748][ T8539] EXT4-fs (loop4): 1 truncate cleaned up [ 113.106197][ T8539] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 113.114899][ T8539] overlayfs: failed to set uuid (/file0, err=-28); falling back to uuid=null. [ 113.126761][ T4718] EXT4-fs error (device loop4): ext4_lookup:1785: inode #17: comm syz-executor: iget: bad extended attribute block 6904 [ 113.129894][ T4718] EXT4-fs error (device loop4): ext4_lookup:1785: inode #17: comm syz-executor: iget: bad extended attribute block 6904 [ 113.266931][ T4718] syz_tun (unregistering): left allmulticast mode [ 113.417959][ T4718] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.496407][ T4728] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 113.497365][ T4728] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 113.497684][ T4728] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 113.497994][ T4728] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 113.498241][ T4728] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 113.536718][ T8547] lo speed is unknown, defaulting to 1000 [ 113.600980][ T8547] bridge0: port 1(bridge_slave_0) entered blocking state [ 113.601062][ T8547] bridge0: port 1(bridge_slave_0) entered disabled state [ 113.601130][ T8547] bridge_slave_0: entered allmulticast mode [ 113.601591][ T8547] bridge_slave_0: entered promiscuous mode [ 113.602904][ T8547] bridge0: port 2(bridge_slave_1) entered blocking state [ 113.603147][ T8547] bridge0: port 2(bridge_slave_1) entered disabled state [ 113.603248][ T8547] bridge_slave_1: entered allmulticast mode [ 113.603657][ T8547] bridge_slave_1: entered promiscuous mode [ 113.613326][ T8547] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 113.614503][ T8547] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 113.623223][ T8547] team0: Port device team_slave_0 added [ 113.624453][ T8547] team0: Port device team_slave_1 added [ 113.631204][ T8547] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 113.631224][ T8547] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 113.631239][ T8547] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 113.631842][ T8547] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 113.631849][ T8547] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 113.631864][ T8547] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 113.645409][ T8547] hsr_slave_0: entered promiscuous mode [ 113.645804][ T8547] hsr_slave_1: entered promiscuous mode [ 113.646336][ T8547] debugfs: 'hsr0' already exists in 'hsr' [ 113.646346][ T8547] Cannot create hsr debugfs directory [ 113.750441][ T8560] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(5) [ 113.750462][ T8560] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 113.755585][ T8560] vhci_hcd vhci_hcd.0: Device attached [ 113.995523][ T26] usb 12-1: new high-speed USB device number 2 using vhci_hcd [ 114.665046][ T8482] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 114.922636][ T8562] vhci_hcd: connection reset by peer [ 114.939996][ T4721] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.957600][ T8547] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 114.959343][ T39] vhci_hcd vhci_hcd.5: stop threads [ 114.959780][ T39] vhci_hcd vhci_hcd.5: release socket [ 114.960233][ T39] vhci_hcd vhci_hcd.5: disconnect device [ 114.968333][ T8547] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 114.971269][ T8547] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 114.977418][ T8547] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 114.979426][ T8547] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 114.984545][ T8547] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 114.994198][ T8547] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 115.010335][ T8547] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 115.048745][ T8576] loop6: detected capacity change from 0 to 512 [ 115.066606][ T8576] EXT4-fs: Ignoring removed oldalloc option [ 115.090452][ T8576] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 115.111020][ T8576] EXT4-fs (loop6): 1 truncate cleaned up [ 115.112638][ T8576] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 115.122992][ T8547] 8021q: adding VLAN 0 to HW filter on device bond0 [ 115.133049][ T8547] 8021q: adding VLAN 0 to HW filter on device team0 [ 115.136976][ T1870] bridge0: port 1(bridge_slave_0) entered blocking state [ 115.137019][ T1870] bridge0: port 1(bridge_slave_0) entered forwarding state [ 115.142000][ T39] bridge0: port 2(bridge_slave_1) entered blocking state [ 115.142039][ T39] bridge0: port 2(bridge_slave_1) entered forwarding state [ 115.149996][ T8584] loop2: detected capacity change from 0 to 128 [ 115.152697][ T8584] EXT4-fs (loop2): Test dummy encryption mode enabled [ 115.154806][ T8584] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 115.166371][ T7383] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.202075][ T8584] fscrypt: AES-256-CBC-CTS using implementation "cts-cbc-aes-ce" [ 115.318781][ T8594] loop3: detected capacity change from 0 to 256 [ 115.320306][ T8594] vfat: Bad value for 'shortname' [ 115.363297][ T8602] netlink: 80 bytes leftover after parsing attributes in process `syz.6.1192'. [ 115.388645][ T4721] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 115.405598][ T8547] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 115.476374][ T8608] FAULT_INJECTION: forcing a failure. [ 115.476374][ T8608] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 115.476415][ T8608] CPU: 0 UID: 0 PID: 8608 Comm: syz.6.1194 Tainted: G M L syzkaller #0 PREEMPT [ 115.476434][ T8608] Tainted: [M]=MACHINE_CHECK, [L]=SOFTLOCKUP [ 115.476439][ T8608] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 115.476444][ T8608] Call trace: [ 115.476447][ T8608] show_stack+0x2c/0x3c (C) [ 115.476471][ T8608] __dump_stack+0x30/0x40 [ 115.476483][ T8608] dump_stack_lvl+0xd8/0x12c [ 115.476494][ T8608] dump_stack+0x1c/0x28 [ 115.476504][ T8608] should_fail_ex+0x41c/0x590 [ 115.476512][ T8608] should_fail_alloc_page+0xec/0x10c [ 115.476521][ T8608] prepare_alloc_pages+0x194/0x4a4 [ 115.476530][ T8608] __alloc_frozen_pages_noprof+0x134/0x320 [ 115.476539][ T8608] alloc_pages_mpol+0x1ec/0x3c0 [ 115.476548][ T8608] folio_alloc_mpol_noprof+0x4c/0x248 [ 115.476557][ T8608] shmem_alloc_folio+0xa0/0x150 [ 115.476565][ T8608] shmem_alloc_and_add_folio+0x28c/0xed8 [ 115.476572][ T8608] shmem_get_folio_gfp+0x4a8/0x1464 [ 115.476579][ T8608] shmem_write_begin+0x160/0x448 [ 115.476587][ T8608] generic_perform_write+0x23c/0x7a4 [ 115.476595][ T8608] shmem_file_write_iter+0x10c/0x134 [ 115.476602][ T8608] vfs_write+0x51c/0xa0c [ 115.476610][ T8608] ksys_write+0x12c/0x228 [ 115.476617][ T8608] __arm64_sys_write+0x84/0x98 [ 115.476624][ T8608] invoke_syscall+0x98/0x244 [ 115.476634][ T8608] el0_svc_common+0xec/0x23c [ 115.476643][ T8608] do_el0_svc+0x4c/0x5c [ 115.476653][ T8608] el0_svc+0x64/0x260 [ 115.476663][ T8608] el0t_64_sync_handler+0x44/0x104 [ 115.476671][ T8608] el0t_64_sync+0x198/0x19c [ 115.535078][ T50] Bluetooth: hci2: command tx timeout [ 115.817220][ T8547] veth0_vlan: entered promiscuous mode [ 115.818923][ T8547] veth1_vlan: entered promiscuous mode [ 115.824289][ T8547] veth0_macvtap: entered promiscuous mode [ 115.854633][ T8547] veth1_macvtap: entered promiscuous mode [ 115.859143][ T8547] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 115.860154][ T8547] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 115.882751][ T6284] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.882813][ T6284] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.882831][ T6284] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.882846][ T6284] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.894108][ T39] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 115.894132][ T39] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 115.913535][ T1870] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 115.913557][ T1870] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 115.960467][ T8624] xt_NFQUEUE: number of total queues is 0 [ 116.638871][ T8634] loop3: detected capacity change from 0 to 1024 [ 116.662563][ T8634] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 116.673085][ T8634] EXT4-fs error (device loop3): ext4_map_blocks:833: inode #15: comm syz.3.1201: lblock 0 mapped to illegal pblock 0 (length 1) [ 116.681976][ T8634] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 116.682020][ T8634] EXT4-fs (loop3): This should not happen!! Data will be lost [ 116.682020][ T8634] [ 116.687661][ T8634] EXT4-fs error (device loop3): ext4_map_blocks:791: inode #15: comm syz.3.1201: lblock 0 mapped to illegal pblock 0 (length 1) [ 116.698627][ T8634] EXT4-fs error (device loop3): ext4_map_blocks:791: inode #15: comm syz.3.1201: lblock 0 mapped to illegal pblock 0 (length 1) [ 117.066156][ T4711] EXT4-fs warning (device loop3): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 117.066989][ T4711] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 117.225736][ T8662] netlink: 'syz.7.1210': attribute type 21 has an invalid length. [ 117.227552][ T8662] IPv6: NLM_F_CREATE should be specified when creating new route [ 117.292368][ T8665] loop7: detected capacity change from 0 to 4096 [ 117.294024][ T8665] EXT4-fs: inline encryption not supported [ 117.304251][ T8665] EXT4-fs (loop7): Test dummy encryption mode enabled [ 117.312109][ T8665] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 117.385787][ T8669] tmpfs: Bad value for 'mpol' [ 117.616579][ T50] Bluetooth: hci2: command tx timeout [ 117.623738][ T8547] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.654795][ T8677] xt_NFQUEUE: number of total queues is 0 [ 117.734769][ T8679] loop2: detected capacity change from 0 to 256 [ 118.124236][ T8695] FAULT_INJECTION: forcing a failure. [ 118.124236][ T8695] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 118.129506][ T8695] CPU: 1 UID: 0 PID: 8695 Comm: syz.3.1219 Tainted: G M L syzkaller #0 PREEMPT [ 118.129535][ T8695] Tainted: [M]=MACHINE_CHECK, [L]=SOFTLOCKUP [ 118.129539][ T8695] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 118.129546][ T8695] Call trace: [ 118.129549][ T8695] show_stack+0x2c/0x3c (C) [ 118.129573][ T8695] __dump_stack+0x30/0x40 [ 118.129585][ T8695] dump_stack_lvl+0xd8/0x12c [ 118.129595][ T8695] dump_stack+0x1c/0x28 [ 118.129605][ T8695] should_fail_ex+0x41c/0x590 [ 118.129613][ T8695] should_fail_alloc_page+0xec/0x10c [ 118.129622][ T8695] prepare_alloc_pages+0x194/0x4a4 [ 118.129631][ T8695] __alloc_frozen_pages_noprof+0x134/0x320 [ 118.129640][ T8695] alloc_pages_mpol+0x1ec/0x3c0 [ 118.129649][ T8695] folio_alloc_mpol_noprof+0x4c/0x248 [ 118.129658][ T8695] shmem_alloc_folio+0xa0/0x150 [ 118.129665][ T8695] shmem_alloc_and_add_folio+0x28c/0xed8 [ 118.129673][ T8695] shmem_get_folio_gfp+0x4a8/0x1464 [ 118.129680][ T8695] shmem_write_begin+0x160/0x448 [ 118.129687][ T8695] generic_perform_write+0x23c/0x7a4 [ 118.129696][ T8695] shmem_file_write_iter+0x10c/0x134 [ 118.129703][ T8695] vfs_write+0x51c/0xa0c [ 118.129711][ T8695] ksys_write+0x12c/0x228 [ 118.129717][ T8695] __arm64_sys_write+0x84/0x98 [ 118.129725][ T8695] invoke_syscall+0x98/0x244 [ 118.129735][ T8695] el0_svc_common+0xec/0x23c [ 118.129745][ T8695] do_el0_svc+0x4c/0x5c [ 118.129754][ T8695] el0_svc+0x64/0x260 [ 118.129764][ T8695] el0t_64_sync_handler+0x44/0x104 [ 118.129772][ T8695] el0t_64_sync+0x198/0x19c [ 118.464027][ T8714] FAULT_INJECTION: forcing a failure. [ 118.464027][ T8714] name failslab, interval 1, probability 0, space 0, times 0 [ 118.464060][ T8714] CPU: 1 UID: 0 PID: 8714 Comm: syz.6.1227 Tainted: G M L syzkaller #0 PREEMPT [ 118.464074][ T8714] Tainted: [M]=MACHINE_CHECK, [L]=SOFTLOCKUP [ 118.464078][ T8714] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 118.464083][ T8714] Call trace: [ 118.464086][ T8714] show_stack+0x2c/0x3c (C) [ 118.464106][ T8714] __dump_stack+0x30/0x40 [ 118.464119][ T8714] dump_stack_lvl+0xd8/0x12c [ 118.464129][ T8714] dump_stack+0x1c/0x28 [ 118.464139][ T8714] should_fail_ex+0x41c/0x590 [ 118.464148][ T8714] should_failslab+0xc4/0x120 [ 118.464156][ T8714] __kmalloc_node_track_caller_noprof+0x108/0x6d4 [ 118.464167][ T8714] kstrdup+0x50/0x104 [ 118.464175][ T8714] apply_subsystem_event_filter+0x2cc/0x10dc [ 118.464185][ T8714] subsystem_filter_write+0xa0/0x108 [ 118.464193][ T8714] vfs_write+0x2a4/0xa0c [ 118.464200][ T8714] ksys_write+0x12c/0x228 [ 118.464207][ T8714] __arm64_sys_write+0x84/0x98 [ 118.464214][ T8714] invoke_syscall+0x98/0x244 [ 118.464224][ T8714] el0_svc_common+0xec/0x23c [ 118.464238][ T8714] do_el0_svc+0x4c/0x5c [ 118.464248][ T8714] el0_svc+0x64/0x260 [ 118.464259][ T8714] el0t_64_sync_handler+0x44/0x104 [ 118.464268][ T8714] el0t_64_sync+0x198/0x19c [ 118.506034][ T8711] 9pnet_fd: Insufficient options for proto=fd [ 118.554028][ T8720] batadv_slave_1: entered promiscuous mode [ 118.647894][ T8719] batadv_slave_1: left promiscuous mode [ 118.704309][ T8733] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1234'. [ 118.705961][ T8733] bridge0: port 2(bridge_slave_1) entered disabled state [ 118.706151][ T8733] bridge0: port 1(bridge_slave_0) entered disabled state [ 118.857926][ T8741] loop3: detected capacity change from 0 to 256 [ 118.864151][ T8741] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 118.958616][ T8748] xt_NFQUEUE: number of total queues is 0 [ 118.961535][ T8751] netlink: 16402 bytes leftover after parsing attributes in process `syz.7.1241'. [ 119.044763][ T8759] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size [ 119.127027][ T26] vhci_hcd vhci_hcd.5: vhci_device speed not set [ 119.194328][ T8771] loop5: detected capacity change from 0 to 256 [ 119.200423][ T8771] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 119.330027][ T25] I/O error, dev loop7, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 0 prio class 2 [ 119.338921][ T8786] IPVS: set_ctl: invalid protocol: 4 224.0.0.2:20002 [ 119.354361][ T8784] loop5: detected capacity change from 0 to 2048 [ 119.386482][ T8784] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 119.402019][ T8784] fs-verity (loop5, inode 16): fs-verity keyring is empty, rejecting signed file! [ 119.405682][ T30] audit: type=1326 audit(119.380:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8783 comm="syz.5.1253" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb2379228 code=0x7ffc0000 [ 119.410499][ T30] audit: type=1326 audit(119.380:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8783 comm="syz.5.1253" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb2379228 code=0x7ffc0000 [ 119.416239][ T30] audit: type=1326 audit(119.390:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8783 comm="syz.5.1253" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb2379228 code=0x7ffc0000 [ 119.416273][ T30] audit: type=1326 audit(119.390:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8783 comm="syz.5.1253" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb2379228 code=0x7ffc0000 [ 119.416292][ T30] audit: type=1326 audit(119.390:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8783 comm="syz.5.1253" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=277 compat=0 ip=0xffffb2379228 code=0x7ffc0000 [ 119.416310][ T30] audit: type=1326 audit(119.390:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8783 comm="syz.5.1253" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb2379228 code=0x7ffc0000 [ 119.416326][ T30] audit: type=1326 audit(119.390:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8783 comm="syz.5.1253" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb2379228 code=0x7ffc0000 [ 119.416340][ T30] audit: type=1326 audit(119.390:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8783 comm="syz.5.1253" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb2379228 code=0x7ffc0000 [ 119.416405][ T30] audit: type=1326 audit(119.390:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8783 comm="syz.5.1253" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=277 compat=0 ip=0xffffb2379228 code=0x7ffc0000 [ 119.440765][ T30] audit: type=1326 audit(119.410:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8783 comm="syz.5.1253" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb2379228 code=0x7ffc0000 [ 119.448728][ T25] I/O error, dev loop7, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 0 prio class 2 [ 119.450652][ T8797] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1257'. [ 119.450884][ T8797] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1257'. [ 119.567953][ T8801] FAULT_INJECTION: forcing a failure. [ 119.567953][ T8801] name failslab, interval 1, probability 0, space 0, times 0 [ 119.567996][ T8801] CPU: 1 UID: 0 PID: 8801 Comm: syz.2.1258 Tainted: G M L syzkaller #0 PREEMPT [ 119.568013][ T8801] Tainted: [M]=MACHINE_CHECK, [L]=SOFTLOCKUP [ 119.568016][ T8801] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 119.568021][ T8801] Call trace: [ 119.568025][ T8801] show_stack+0x2c/0x3c (C) [ 119.568044][ T8801] __dump_stack+0x30/0x40 [ 119.568055][ T8801] dump_stack_lvl+0xd8/0x12c [ 119.568065][ T8801] dump_stack+0x1c/0x28 [ 119.568075][ T8801] should_fail_ex+0x41c/0x590 [ 119.568084][ T8801] should_failslab+0xc4/0x120 [ 119.568092][ T8801] __kvmalloc_node_noprof+0x160/0x7d8 [ 119.568102][ T8801] bpf_compute_live_registers+0x114/0xfe0 [ 119.568113][ T8801] bpf_check+0x37f4/0x40dc [ 119.568122][ T8801] bpf_prog_load+0xfe4/0x158c [ 119.568130][ T8801] __sys_bpf+0x7d4/0x82c [ 119.568137][ T8801] __arm64_sys_bpf+0xd0/0xec [ 119.568144][ T8801] invoke_syscall+0x98/0x244 [ 119.568154][ T8801] el0_svc_common+0xec/0x23c [ 119.568163][ T8801] do_el0_svc+0x4c/0x5c [ 119.568173][ T8801] el0_svc+0x64/0x260 [ 119.568182][ T8801] el0t_64_sync_handler+0x44/0x104 [ 119.568191][ T8801] el0t_64_sync+0x198/0x19c [ 119.638853][ T5002] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.669974][ T8812] loop2: detected capacity change from 0 to 256 [ 119.679168][ T8812] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 119.701978][ T50] Bluetooth: hci2: command tx timeout [ 120.076792][ T8827] FAULT_INJECTION: forcing a failure. [ 120.076792][ T8827] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 120.079594][ T8827] CPU: 0 UID: 0 PID: 8827 Comm: syz.2.1269 Tainted: G M L syzkaller #0 PREEMPT [ 120.079614][ T8827] Tainted: [M]=MACHINE_CHECK, [L]=SOFTLOCKUP [ 120.079619][ T8827] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 120.079625][ T8827] Call trace: [ 120.079629][ T8827] show_stack+0x2c/0x3c (C) [ 120.079653][ T8827] __dump_stack+0x30/0x40 [ 120.079665][ T8827] dump_stack_lvl+0xd8/0x12c [ 120.079675][ T8827] dump_stack+0x1c/0x28 [ 120.079685][ T8827] should_fail_ex+0x41c/0x590 [ 120.079693][ T8827] should_fail_alloc_page+0xec/0x10c [ 120.079703][ T8827] prepare_alloc_pages+0x194/0x4a4 [ 120.079712][ T8827] __alloc_frozen_pages_noprof+0x134/0x320 [ 120.079721][ T8827] alloc_pages_mpol+0x1ec/0x3c0 [ 120.079730][ T8827] folio_alloc_mpol_noprof+0x4c/0x248 [ 120.079740][ T8827] shmem_alloc_folio+0xa0/0x150 [ 120.079747][ T8827] shmem_alloc_and_add_folio+0x28c/0xed8 [ 120.079755][ T8827] shmem_get_folio_gfp+0x4a8/0x1464 [ 120.079762][ T8827] shmem_write_begin+0x160/0x448 [ 120.079770][ T8827] generic_perform_write+0x23c/0x7a4 [ 120.079778][ T8827] shmem_file_write_iter+0x10c/0x134 [ 120.079785][ T8827] vfs_write+0x51c/0xa0c [ 120.079793][ T8827] ksys_write+0x12c/0x228 [ 120.079800][ T8827] __arm64_sys_write+0x84/0x98 [ 120.079807][ T8827] invoke_syscall+0x98/0x244 [ 120.079817][ T8827] el0_svc_common+0xec/0x23c [ 120.079827][ T8827] do_el0_svc+0x4c/0x5c [ 120.079837][ T8827] el0_svc+0x64/0x260 [ 120.079846][ T8827] el0t_64_sync_handler+0x44/0x104 [ 120.079855][ T8827] el0t_64_sync+0x198/0x19c [ 120.172747][ T8838] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1267'. [ 120.192552][ T8841] loop5: detected capacity change from 0 to 256 [ 120.337259][ T8852] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1276'. [ 120.339559][ T8852] bridge0: port 2(bridge_slave_1) entered disabled state [ 120.339802][ T8852] bridge0: port 1(bridge_slave_0) entered disabled state [ 120.350174][ T8851] loop5: detected capacity change from 0 to 256 [ 120.351894][ T8851] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 120.382338][ T8854] xt_NFQUEUE: number of total queues is 0 [ 120.520791][ T8863] loop7: detected capacity change from 0 to 256 [ 120.522617][ T8863] vfat: Bad value for 'uid' [ 120.523202][ T8861] loop2: detected capacity change from 0 to 2048 [ 120.525639][ T8863] vfat: Bad value for 'uid' [ 120.528142][ T8863] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1279'. [ 120.569670][ T8861] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 120.571696][ T8861] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.736878][ T8870] FAULT_INJECTION: forcing a failure. [ 120.736878][ T8870] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 120.736916][ T8870] CPU: 0 UID: 0 PID: 8870 Comm: syz.7.1281 Tainted: G M L syzkaller #0 PREEMPT [ 120.736935][ T8870] Tainted: [M]=MACHINE_CHECK, [L]=SOFTLOCKUP [ 120.736941][ T8870] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 120.736948][ T8870] Call trace: [ 120.736951][ T8870] show_stack+0x2c/0x3c (C) [ 120.736972][ T8870] __dump_stack+0x30/0x40 [ 120.736985][ T8870] dump_stack_lvl+0xd8/0x12c [ 120.736995][ T8870] dump_stack+0x1c/0x28 [ 120.737005][ T8870] should_fail_ex+0x41c/0x590 [ 120.737013][ T8870] should_fail_alloc_page+0xec/0x10c [ 120.737022][ T8870] prepare_alloc_pages+0x194/0x4a4 [ 120.737031][ T8870] __alloc_frozen_pages_noprof+0x134/0x320 [ 120.737040][ T8870] alloc_pages_mpol+0x1ec/0x3c0 [ 120.737049][ T8870] folio_alloc_mpol_noprof+0x4c/0x248 [ 120.737059][ T8870] shmem_alloc_folio+0xa0/0x150 [ 120.737067][ T8870] shmem_alloc_and_add_folio+0x28c/0xed8 [ 120.737074][ T8870] shmem_get_folio_gfp+0x4a8/0x1464 [ 120.737081][ T8870] shmem_write_begin+0x160/0x448 [ 120.737089][ T8870] generic_perform_write+0x23c/0x7a4 [ 120.737097][ T8870] shmem_file_write_iter+0x10c/0x134 [ 120.737104][ T8870] vfs_write+0x51c/0xa0c [ 120.737112][ T8870] ksys_write+0x12c/0x228 [ 120.737119][ T8870] __arm64_sys_write+0x84/0x98 [ 120.737125][ T8870] invoke_syscall+0x98/0x244 [ 120.737136][ T8870] el0_svc_common+0xec/0x23c [ 120.737145][ T8870] do_el0_svc+0x4c/0x5c [ 120.737155][ T8870] el0_svc+0x64/0x260 [ 120.737164][ T8870] el0t_64_sync_handler+0x44/0x104 [ 120.737173][ T8870] el0t_64_sync+0x198/0x19c [ 121.007560][ T8881] syzkaller0: entered promiscuous mode [ 121.007594][ T8881] syzkaller0: entered allmulticast mode [ 121.105849][ T8885] loop7: detected capacity change from 0 to 256 [ 121.109093][ T8885] FAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 121.141691][ T8889] xt_NFQUEUE: number of total queues is 0 [ 121.191899][ T8891] xt_NFQUEUE: number of total queues is 0 [ 122.127407][ T4728] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 122.127797][ T4728] Bluetooth: hci4: Injecting HCI hardware error event [ 122.129846][ T4728] Bluetooth: hci4: hardware error 0x00 [ 122.155039][ T50] Bluetooth: hci2: command tx timeout [ 122.341887][ T8905] Injecting memory failure for pfn 0x134e5d at process virtual address 0x20001000 [ 122.597456][ T8907] FAULT_INJECTION: forcing a failure. [ 122.597456][ T8907] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 122.597506][ T8907] CPU: 1 UID: 0 PID: 8907 Comm: syz.7.1295 Tainted: G M L syzkaller #0 PREEMPT [ 122.597527][ T8907] Tainted: [M]=MACHINE_CHECK, [L]=SOFTLOCKUP [ 122.597531][ T8907] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 122.597537][ T8907] Call trace: [ 122.597540][ T8907] show_stack+0x2c/0x3c (C) [ 122.597561][ T8907] __dump_stack+0x30/0x40 [ 122.597572][ T8907] dump_stack_lvl+0xd8/0x12c [ 122.597582][ T8907] dump_stack+0x1c/0x28 [ 122.597591][ T8907] should_fail_ex+0x41c/0x590 [ 122.597600][ T8907] should_fail+0x14/0x24 [ 122.597606][ T8907] should_fail_usercopy+0x20/0x30 [ 122.597613][ T8907] copy_folio_from_iter_atomic+0x384/0x1518 [ 122.597623][ T8907] generic_perform_write+0x4bc/0x7a4 [ 122.597632][ T8907] shmem_file_write_iter+0x10c/0x134 [ 122.597640][ T8907] vfs_write+0x51c/0xa0c [ 122.597648][ T8907] ksys_write+0x12c/0x228 [ 122.597654][ T8907] __arm64_sys_write+0x84/0x98 [ 122.597662][ T8907] invoke_syscall+0x98/0x244 [ 122.597672][ T8907] el0_svc_common+0xec/0x23c [ 122.597682][ T8907] do_el0_svc+0x4c/0x5c [ 122.597691][ T8907] el0_svc+0x64/0x260 [ 122.597701][ T8907] el0t_64_sync_handler+0x44/0x104 [ 122.597709][ T8907] el0t_64_sync+0x198/0x19c [ 122.607912][ T8907] loop7: detected capacity change from 0 to 512 [ 122.611599][ T8907] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 122.612839][ T8907] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.1295: bg 0: block 384: padding at end of block bitmap is not set [ 122.612856][ T8907] loop7: lost filesystem error report for type 5 error -117 [ 122.612970][ T8907] EXT4-fs (loop7): Remounting filesystem read-only [ 122.613031][ T8907] EXT4-fs (loop7): 1 truncate cleaned up [ 122.613498][ T8907] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 122.663193][ T8905] Memory failure: 0x134e5d: recovery action for dirty LRU page: Recovered [ 122.674719][ T8905] Injecting memory failure for pfn 0x13820e at process virtual address 0x20002000 [ 122.679352][ T8905] Memory failure: 0x13820e: recovery action for dirty LRU page: Recovered [ 122.679392][ T8905] Injecting memory failure for pfn 0x134e58 at process virtual address 0x20003000 [ 122.679464][ T8905] Memory failure: 0x134e58: recovery action for dirty LRU page: Recovered [ 122.695907][ T8547] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 122.699807][ T8917] loop5: detected capacity change from 0 to 512 [ 122.711054][ T8917] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 122.713118][ T8917] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.1297: bg 0: block 384: padding at end of block bitmap is not set [ 122.713164][ T8917] loop5: lost filesystem error report for type 5 error -117 [ 122.713440][ T8917] EXT4-fs (loop5): Remounting filesystem read-only [ 122.713541][ T8917] EXT4-fs (loop5): 1 truncate cleaned up [ 122.714967][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 122.714992][ C1] EXT4-fs (loop5): initial error at time 122: ext4_validate_block_bitmap:441 [ 122.715023][ C1] EXT4-fs (loop5): last error at time 122: ext4_validate_block_bitmap:441 [ 122.715968][ T8917] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 122.791894][ T5002] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 122.814383][ T8927] loop7: detected capacity change from 0 to 512 [ 122.822217][ T8927] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 122.823449][ T8927] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.1302: bg 0: block 384: padding at end of block bitmap is not set [ 122.823474][ T8927] loop7: lost filesystem error report for type 5 error -117 [ 122.823613][ T8927] EXT4-fs (loop7): Remounting filesystem read-only [ 122.823677][ T8927] EXT4-fs (loop7): 1 truncate cleaned up [ 122.824103][ T8927] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 122.861197][ T8547] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 122.889508][ T8944] loop2: detected capacity change from 0 to 512 [ 122.893202][ T8944] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 122.956873][ T8944] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.1307: bg 0: block 384: padding at end of block bitmap is not set [ 122.956918][ T8944] loop2: lost filesystem error report for type 5 error -117 [ 122.957823][ T8944] EXT4-fs (loop2): Remounting filesystem read-only [ 122.957907][ T8944] EXT4-fs (loop2): 1 truncate cleaned up [ 122.958361][ T8944] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 122.959807][ T8943] xt_NFQUEUE: number of total queues is 0 [ 123.071093][ T8950] loop3: detected capacity change from 0 to 128 [ 123.408282][ T8950] FAT-fs (loop3): data area starts beyond volume (414 > 128) [ 123.408358][ T8950] FAT-fs (loop3): Can't find a valid FAT filesystem [ 123.655318][ T8964] FAULT_INJECTION: forcing a failure. [ 123.655318][ T8964] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 123.655433][ T8964] CPU: 1 UID: 0 PID: 8964 Comm: syz.5.1312 Tainted: G M L syzkaller #0 PREEMPT [ 123.655451][ T8964] Tainted: [M]=MACHINE_CHECK, [L]=SOFTLOCKUP [ 123.655456][ T8964] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 123.655461][ T8964] Call trace: [ 123.655464][ T8964] show_stack+0x2c/0x3c (C) [ 123.655489][ T8964] __dump_stack+0x30/0x40 [ 123.655500][ T8964] dump_stack_lvl+0xd8/0x12c [ 123.655510][ T8964] dump_stack+0x1c/0x28 [ 123.655520][ T8964] should_fail_ex+0x41c/0x590 [ 123.655528][ T8964] should_fail_alloc_page+0xec/0x10c [ 123.655536][ T8964] prepare_alloc_pages+0x194/0x4a4 [ 123.655546][ T8964] __alloc_frozen_pages_noprof+0x134/0x320 [ 123.655554][ T8964] alloc_pages_mpol+0x1ec/0x3c0 [ 123.655563][ T8964] folio_alloc_mpol_noprof+0x4c/0x248 [ 123.655572][ T8964] shmem_alloc_folio+0xa0/0x150 [ 123.655580][ T8964] shmem_alloc_and_add_folio+0x28c/0xed8 [ 123.655588][ T8964] shmem_get_folio_gfp+0x4a8/0x1464 [ 123.655595][ T8964] shmem_write_begin+0x160/0x448 [ 123.655602][ T8964] generic_perform_write+0x23c/0x7a4 [ 123.655610][ T8964] shmem_file_write_iter+0x10c/0x134 [ 123.655618][ T8964] vfs_write+0x51c/0xa0c [ 123.655625][ T8964] ksys_write+0x12c/0x228 [ 123.655632][ T8964] __arm64_sys_write+0x84/0x98 [ 123.655639][ T8964] invoke_syscall+0x98/0x244 [ 123.655649][ T8964] el0_svc_common+0xec/0x23c [ 123.655659][ T8964] do_el0_svc+0x4c/0x5c [ 123.655668][ T8964] el0_svc+0x64/0x260 [ 123.655678][ T8964] el0t_64_sync_handler+0x44/0x104 [ 123.655686][ T8964] el0t_64_sync+0x198/0x19c [ 123.739595][ T8971] EXT4-fs: Ignoring removed nomblk_io_submit option [ 123.739638][ T8971] EXT4-fs: Ignoring removed nomblk_io_submit option [ 123.778140][ T8974] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 123.780688][ T8971] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 123.796807][ T8971] EXT4-fs (loop5): 1 truncate cleaned up [ 123.797283][ T8971] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 123.832835][ T5002] EXT4-fs error (device loop5): ext4_lookup:1785: inode #14: comm syz-executor: invalid fast symlink length 39 [ 123.839626][ T5002] EXT4-fs error (device loop5): ext4_lookup:1785: inode #14: comm syz-executor: invalid fast symlink length 39 [ 123.898598][ T4721] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 123.979549][ T8986] FAULT_INJECTION: forcing a failure. [ 123.979549][ T8986] name failslab, interval 1, probability 0, space 0, times 0 [ 123.979582][ T8986] CPU: 1 UID: 0 PID: 8986 Comm: syz.2.1319 Tainted: G M L syzkaller #0 PREEMPT [ 123.979595][ T8986] Tainted: [M]=MACHINE_CHECK, [L]=SOFTLOCKUP [ 123.979599][ T8986] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 123.979604][ T8986] Call trace: [ 123.979607][ T8986] show_stack+0x2c/0x3c (C) [ 123.979627][ T8986] __dump_stack+0x30/0x40 [ 123.979640][ T8986] dump_stack_lvl+0xd8/0x12c [ 123.979650][ T8986] dump_stack+0x1c/0x28 [ 123.979659][ T8986] should_fail_ex+0x41c/0x590 [ 123.979669][ T8986] should_failslab+0xc4/0x120 [ 123.979677][ T8986] __kmalloc_cache_noprof+0x94/0x5ec [ 123.979690][ T8986] apply_subsystem_event_filter+0x2b4/0x10dc [ 123.979700][ T8986] subsystem_filter_write+0xa0/0x108 [ 123.979708][ T8986] vfs_write+0x2a4/0xa0c [ 123.979716][ T8986] ksys_write+0x12c/0x228 [ 123.979723][ T8986] __arm64_sys_write+0x84/0x98 [ 123.979730][ T8986] invoke_syscall+0x98/0x244 [ 123.979741][ T8986] el0_svc_common+0xec/0x23c [ 123.979751][ T8986] do_el0_svc+0x4c/0x5c [ 123.979760][ T8986] el0_svc+0x64/0x260 [ 123.979771][ T8986] el0t_64_sync_handler+0x44/0x104 [ 123.979779][ T8986] el0t_64_sync+0x198/0x19c [ 123.986397][ T8262] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 123.986847][ T4711] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 124.104305][ T8995] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 124.104336][ T8995] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 124.128541][ T8995] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4222: comm syz.2.1325: Allocating blocks 41-42 which overlap fs metadata [ 124.131443][ T8995] loop2: lost filesystem error report for type 5 error -117 [ 124.132734][ T8995] EXT4-fs (loop2): Remounting filesystem read-only [ 124.135882][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 124.135897][ C0] EXT4-fs (loop2): initial error at time 124: ext4_mb_mark_diskspace_used:4222 [ 124.135915][ C0] EXT4-fs (loop2): last error at time 124: ext4_mb_mark_diskspace_used:4222 [ 124.141180][ T8995] EXT4-fs (loop2): 1 truncate cleaned up [ 124.178558][ T9010] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1330'. [ 124.205407][ T9012] netlink: 'syz.2.1331': attribute type 21 has an invalid length. [ 124.206944][ T9012] IPv6: NLM_F_CREATE should be specified when creating new route [ 124.247111][ T8262] syz_tun (unregistering): left allmulticast mode [ 124.335216][ T4728] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 124.390171][ T9021] fuse: Unknown parameter '�»' [ 124.430728][ T9034] FAT-fs (loop7): bogus logical sector size 0 [ 124.432180][ T9034] FAT-fs (loop7): Can't find a valid FAT filesystem [ 124.567704][ T9041] FAULT_INJECTION: forcing a failure. [ 124.567704][ T9041] name failslab, interval 1, probability 0, space 0, times 0 [ 124.567747][ T9041] CPU: 1 UID: 0 PID: 9041 Comm: syz.2.1340 Tainted: G M L syzkaller #0 PREEMPT [ 124.567761][ T9041] Tainted: [M]=MACHINE_CHECK, [L]=SOFTLOCKUP [ 124.567765][ T9041] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 124.567770][ T9041] Call trace: [ 124.567773][ T9041] show_stack+0x2c/0x3c (C) [ 124.567791][ T9041] __dump_stack+0x30/0x40 [ 124.567802][ T9041] dump_stack_lvl+0xd8/0x12c [ 124.567816][ T9041] dump_stack+0x1c/0x28 [ 124.567827][ T9041] should_fail_ex+0x41c/0x590 [ 124.567835][ T9041] should_failslab+0xc4/0x120 [ 124.567844][ T9041] __kmalloc_node_track_caller_noprof+0x108/0x6d4 [ 124.567855][ T9041] kstrdup+0x50/0x104 [ 124.567864][ T9041] apply_subsystem_event_filter+0x2cc/0x10dc [ 124.567873][ T9041] subsystem_filter_write+0xa0/0x108 [ 124.567881][ T9041] vfs_write+0x2a4/0xa0c [ 124.567888][ T9041] ksys_write+0x12c/0x228 [ 124.567895][ T9041] __arm64_sys_write+0x84/0x98 [ 124.567902][ T9041] invoke_syscall+0x98/0x244 [ 124.567912][ T9041] el0_svc_common+0xec/0x23c [ 124.567922][ T9041] do_el0_svc+0x4c/0x5c [ 124.567931][ T9041] el0_svc+0x64/0x260 [ 124.567941][ T9041] el0t_64_sync_handler+0x44/0x104 [ 124.567950][ T9041] el0t_64_sync+0x198/0x19c [ 124.685339][ T9044] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1341'. [ 124.910844][ T6284] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.928113][ T9051] netlink: 'syz.7.1343': attribute type 21 has an invalid length. [ 124.956104][ T50] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 124.957561][ T50] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 124.958741][ T50] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 124.960993][ T50] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 124.962528][ T50] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 124.997262][ T9055] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 124.998355][ T9055] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.1345: bg 0: block 384: padding at end of block bitmap is not set [ 124.998373][ T9055] loop6: lost filesystem error report for type 5 error -117 [ 124.998491][ T9055] EXT4-fs (loop6): Remounting filesystem read-only [ 124.998566][ T9055] EXT4-fs (loop6): 1 truncate cleaned up [ 125.013570][ T6284] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.022252][ T9061] netlink: 80 bytes leftover after parsing attributes in process `syz.7.1347'. [ 125.068602][ T9066] bridge1: entered promiscuous mode [ 125.068641][ T9066] bridge1: entered allmulticast mode [ 125.088331][ T6284] team0: Port device netdevsim1 removed [ 125.089492][ T6284] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.131226][ T9052] lo speed is unknown, defaulting to 1000 [ 125.148317][ T6284] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.262515][ T9052] bridge0: port 1(bridge_slave_0) entered blocking state [ 125.262604][ T9052] bridge0: port 1(bridge_slave_0) entered disabled state [ 125.262668][ T9052] bridge_slave_0: entered allmulticast mode [ 125.263098][ T9052] bridge_slave_0: entered promiscuous mode [ 125.264156][ T9052] bridge0: port 2(bridge_slave_1) entered blocking state [ 125.264205][ T9052] bridge0: port 2(bridge_slave_1) entered disabled state [ 125.264263][ T9052] bridge_slave_1: entered allmulticast mode [ 125.264701][ T9052] bridge_slave_1: entered promiscuous mode [ 125.272238][ T9052] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 125.273205][ T9052] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 125.282484][ T9052] team0: Port device team_slave_0 added [ 125.283258][ T9052] team0: Port device team_slave_1 added [ 125.396658][ T9085] set_capacity_and_notify: 7 callbacks suppressed [ 125.396707][ T9085] loop7: detected capacity change from 0 to 256 [ 125.995722][ T1595] ieee802154 phy0 wpan0: encryption failed: -22 [ 125.997241][ T1595] ieee802154 phy1 wpan1: encryption failed: -22 [ 126.235682][ T9052] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 126.235711][ T9052] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 126.235739][ T9052] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 126.236335][ T9052] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 126.236350][ T9052] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 126.236369][ T9052] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 126.292997][ T9089] overlayfs: fs on './bus' does not support file handles, falling back to xino=off. [ 126.302100][ T9052] hsr_slave_0: entered promiscuous mode [ 126.308296][ T9089] overlayfs: conflicting lowerdir path [ 126.318811][ T9052] hsr_slave_1: entered promiscuous mode [ 126.319043][ T9052] debugfs: 'hsr0' already exists in 'hsr' [ 126.319068][ T9052] Cannot create hsr debugfs directory [ 126.379910][ T9096] netlink: 'syz.7.1357': attribute type 21 has an invalid length. [ 126.432308][ T6284] bridge_slave_1: left allmulticast mode [ 126.433583][ T6284] bridge_slave_1: left promiscuous mode [ 126.434730][ T6284] bridge0: port 2(bridge_slave_1) entered disabled state [ 126.439323][ T6284] bridge_slave_0: left allmulticast mode [ 126.440545][ T6284] bridge_slave_0: left promiscuous mode [ 126.441864][ T6284] bridge0: port 1(bridge_slave_0) entered disabled state [ 126.565721][ T6284] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 126.628744][ T6284] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 126.716222][ T6284] bond0 (unregistering): Released all slaves [ 126.828477][ T6284] bond1 (unregistering): Released all slaves [ 126.944579][ T9052] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 126.947688][ T9121] FAULT_INJECTION: forcing a failure. [ 126.947688][ T9121] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 126.947727][ T9121] CPU: 0 UID: 0 PID: 9121 Comm: syz.6.1364 Tainted: G M L syzkaller #0 PREEMPT [ 126.947743][ T9121] Tainted: [M]=MACHINE_CHECK, [L]=SOFTLOCKUP [ 126.947747][ T9121] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 126.947752][ T9121] Call trace: [ 126.947755][ T9121] show_stack+0x2c/0x3c (C) [ 126.947773][ T9121] __dump_stack+0x30/0x40 [ 126.947784][ T9121] dump_stack_lvl+0xd8/0x12c [ 126.947794][ T9121] dump_stack+0x1c/0x28 [ 126.947803][ T9121] should_fail_ex+0x41c/0x590 [ 126.947811][ T9121] should_fail_alloc_page+0xec/0x10c [ 126.947820][ T9121] prepare_alloc_pages+0x194/0x4a4 [ 126.947829][ T9121] __alloc_frozen_pages_noprof+0x134/0x320 [ 126.947838][ T9121] alloc_pages_mpol+0x1ec/0x3c0 [ 126.947847][ T9121] folio_alloc_mpol_noprof+0x4c/0x248 [ 126.947856][ T9121] shmem_alloc_folio+0xa0/0x150 [ 126.947864][ T9121] shmem_alloc_and_add_folio+0x28c/0xed8 [ 126.947871][ T9121] shmem_get_folio_gfp+0x4a8/0x1464 [ 126.947878][ T9121] shmem_write_begin+0x160/0x448 [ 126.947885][ T9121] generic_perform_write+0x23c/0x7a4 [ 126.947893][ T9121] shmem_file_write_iter+0x10c/0x134 [ 126.947901][ T9121] vfs_write+0x51c/0xa0c [ 126.947908][ T9121] ksys_write+0x12c/0x228 [ 126.947915][ T9121] __arm64_sys_write+0x84/0x98 [ 126.947922][ T9121] invoke_syscall+0x98/0x244 [ 126.947932][ T9121] el0_svc_common+0xec/0x23c [ 126.947942][ T9121] do_el0_svc+0x4c/0x5c [ 126.947951][ T9121] el0_svc+0x64/0x260 [ 126.947961][ T9121] el0t_64_sync_handler+0x44/0x104 [ 126.947969][ T9121] el0t_64_sync+0x198/0x19c [ 126.975891][ T4728] Bluetooth: hci3: command tx timeout [ 126.993566][ T9052] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 126.995602][ T9052] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 127.008358][ T9052] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 127.041994][ T9052] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 127.044362][ T9052] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 127.046678][ T9052] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 127.049388][ T9052] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 127.081915][ T9144] loop6: detected capacity change from 0 to 256 [ 127.082393][ T9144] vfat: Bad value for 'shortname' [ 127.144159][ T4402] 8021q: adding VLAN 0 to HW filter on device eth9 [ 127.213067][ T9052] 8021q: adding VLAN 0 to HW filter on device bond0 [ 127.248334][ T6284] hsr_slave_0: left promiscuous mode [ 127.249903][ T6284] hsr_slave_1: left promiscuous mode [ 127.251280][ T6284] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 127.252899][ T6284] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 127.254755][ T6284] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 127.518835][ T6284] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 127.537936][ T6284] veth1_macvtap: left promiscuous mode [ 127.537977][ T6284] veth0_macvtap: left promiscuous mode [ 127.538021][ T6284] veth1_vlan: left promiscuous mode [ 127.538056][ T6284] veth0_vlan: left promiscuous mode [ 127.608931][ T9162] loop7: detected capacity change from 0 to 8 [ 127.612331][ T9162] squashfs: SQUASHFS error: Xattrs in filesystem, these will be ignored [ 127.614425][ T9162] unable to read xattr id index table [ 127.624859][ T9162] SQUASHFS error: zlib decompression failed, data probably corrupt [ 127.624920][ T9162] SQUASHFS error: Failed to read block 0x9b: -5 [ 127.624973][ T9162] SQUASHFS error: Unable to read metadata cache entry [99] [ 127.624991][ T9162] SQUASHFS error: Unable to read inode 0x127 [ 127.687056][ T9167] FAULT_INJECTION: forcing a failure. [ 127.687056][ T9167] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 127.687095][ T9167] CPU: 1 UID: 0 PID: 9167 Comm: syz.3.1375 Tainted: G M L syzkaller #0 PREEMPT [ 127.687109][ T9167] Tainted: [M]=MACHINE_CHECK, [L]=SOFTLOCKUP [ 127.687112][ T9167] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 127.687117][ T9167] Call trace: [ 127.687119][ T9167] show_stack+0x2c/0x3c (C) [ 127.687140][ T9167] __dump_stack+0x30/0x40 [ 127.687151][ T9167] dump_stack_lvl+0xd8/0x12c [ 127.687161][ T9167] dump_stack+0x1c/0x28 [ 127.687170][ T9167] should_fail_ex+0x41c/0x590 [ 127.687179][ T9167] should_fail+0x14/0x24 [ 127.687185][ T9167] should_fail_usercopy+0x20/0x30 [ 127.687192][ T9167] copy_folio_from_iter_atomic+0x384/0x1518 [ 127.687201][ T9167] generic_perform_write+0x4bc/0x7a4 [ 127.687210][ T9167] shmem_file_write_iter+0x10c/0x134 [ 127.687218][ T9167] vfs_write+0x51c/0xa0c [ 127.687226][ T9167] ksys_write+0x12c/0x228 [ 127.687232][ T9167] __arm64_sys_write+0x84/0x98 [ 127.687239][ T9167] invoke_syscall+0x98/0x244 [ 127.687250][ T9167] el0_svc_common+0xec/0x23c [ 127.687259][ T9167] do_el0_svc+0x4c/0x5c [ 127.687269][ T9167] el0_svc+0x64/0x260 [ 127.687279][ T9167] el0t_64_sync_handler+0x44/0x104 [ 127.687287][ T9167] el0t_64_sync+0x198/0x19c [ 127.688311][ T9167] loop3: detected capacity change from 0 to 512 [ 127.700874][ T9167] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 127.704824][ T9167] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.1375: bg 0: block 384: padding at end of block bitmap is not set [ 127.704840][ T9167] loop3: lost filesystem error report for type 5 error -117 [ 127.704965][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 127.704977][ C1] EXT4-fs (loop3): initial error at time 127: ext4_validate_block_bitmap:441 [ 127.704991][ C1] EXT4-fs (loop3): last error at time 127: ext4_validate_block_bitmap:441 [ 127.705254][ T9167] EXT4-fs (loop3): Remounting filesystem read-only [ 127.705317][ T9167] EXT4-fs (loop3): 1 truncate cleaned up [ 127.705757][ T9167] EXT4-fs mount: 6 callbacks suppressed [ 127.705763][ T9167] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 127.738718][ T4711] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.774715][ T6284] team0 (unregistering): Port device team_slave_1 removed [ 127.782596][ T6284] team0 (unregistering): Port device team_slave_0 removed [ 127.873351][ T9052] 8021q: adding VLAN 0 to HW filter on device team0 [ 127.880618][ T1870] bridge0: port 1(bridge_slave_0) entered blocking state [ 127.880662][ T1870] bridge0: port 1(bridge_slave_0) entered forwarding state [ 127.889273][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 127.889324][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 127.902957][ T9052] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 127.906386][ T9052] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 128.087873][ T9206] loop3: detected capacity change from 0 to 512 [ 128.093427][ T9206] EXT4-fs: Ignoring removed mblk_io_submit option [ 128.096003][ T9206] EXT4-fs (loop3): Test dummy encryption mode enabled [ 128.096027][ T9206] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 128.115924][ T9206] EXT4-fs error (device loop3): ext4_orphan_get:1425: comm syz.3.1383: bad orphan inode 131083 [ 128.115959][ T9206] loop3: lost filesystem error report for type 5 error -117 [ 128.118296][ T9206] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 128.124844][ T9206] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1383'. [ 128.421933][ T4402] 8021q: adding VLAN 0 to HW filter on device eth8 [ 128.439100][ T9220] ip_tables: iptables: counters copy to user failed while replacing table [ 128.443630][ T9220] loop2: detected capacity change from 0 to 512 [ 128.450584][ T4711] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.468771][ T9220] EXT4-fs (loop2): orphan cleanup on readonly fs [ 128.468798][ T9220] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -13 [ 128.469004][ T9220] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 128.474965][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 128.474985][ C1] EXT4-fs (loop2): initial error at time 128: ext4_mb_generate_buddy:1317 [ 128.475009][ C1] EXT4-fs (loop2): last error at time 128: ext4_mb_generate_buddy:1317 [ 128.482447][ T9220] EXT4-fs error (device loop2): ext4_clear_blocks:876: inode #13: comm syz.2.1384: attempt to clear invalid blocks 2 len 1 [ 128.482497][ T9220] loop2: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 128.483429][ T9052] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 128.491114][ T9220] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.1384: invalid indirect mapped block 1819239214 (level 0) [ 128.494178][ T9220] loop2: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 128.494822][ T9220] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.1384: invalid indirect mapped block 1819239214 (level 1) [ 128.499970][ T9220] loop2: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 128.502112][ T9220] EXT4-fs (loop2): 1 truncate cleaned up [ 128.507205][ T9220] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 128.521536][ T9228] FAULT_INJECTION: forcing a failure. [ 128.521536][ T9228] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 128.524413][ T6284] IPVS: stop unused estimator thread 0... [ 128.528901][ T9228] CPU: 0 UID: 0 PID: 9228 Comm: syz.3.1385 Tainted: G M L syzkaller #0 PREEMPT [ 128.528931][ T9228] Tainted: [M]=MACHINE_CHECK, [L]=SOFTLOCKUP [ 128.528936][ T9228] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 128.528941][ T9228] Call trace: [ 128.528946][ T9228] show_stack+0x2c/0x3c (C) [ 128.528967][ T9228] __dump_stack+0x30/0x40 [ 128.528978][ T9228] dump_stack_lvl+0xd8/0x12c [ 128.528988][ T9228] dump_stack+0x1c/0x28 [ 128.528998][ T9228] should_fail_ex+0x41c/0x590 [ 128.529006][ T9228] should_fail_alloc_page+0xec/0x10c [ 128.529015][ T9228] prepare_alloc_pages+0x194/0x4a4 [ 128.529024][ T9228] __alloc_frozen_pages_noprof+0x134/0x320 [ 128.529033][ T9228] alloc_pages_mpol+0x1ec/0x3c0 [ 128.529042][ T9228] folio_alloc_mpol_noprof+0x4c/0x248 [ 128.529051][ T9228] shmem_alloc_folio+0xa0/0x150 [ 128.529059][ T9228] shmem_alloc_and_add_folio+0x28c/0xed8 [ 128.529067][ T9228] shmem_get_folio_gfp+0x4a8/0x1464 [ 128.529074][ T9228] shmem_write_begin+0x160/0x448 [ 128.529081][ T9228] generic_perform_write+0x23c/0x7a4 [ 128.529089][ T9228] shmem_file_write_iter+0x10c/0x134 [ 128.529096][ T9228] vfs_write+0x51c/0xa0c [ 128.529104][ T9228] ksys_write+0x12c/0x228 [ 128.529111][ T9228] __arm64_sys_write+0x84/0x98 [ 128.529118][ T9228] invoke_syscall+0x98/0x244 [ 128.529128][ T9228] el0_svc_common+0xec/0x23c [ 128.529137][ T9228] do_el0_svc+0x4c/0x5c [ 128.529147][ T9228] el0_svc+0x64/0x260 [ 128.529157][ T9228] el0t_64_sync_handler+0x44/0x104 [ 128.529165][ T9228] el0t_64_sync+0x198/0x19c [ 128.602314][ T4721] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.659714][ T9244] loop2: detected capacity change from 0 to 512 [ 128.671570][ T9244] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 128.684803][ T9244] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.1388: bg 0: block 384: padding at end of block bitmap is not set [ 128.684843][ T9244] loop2: lost filesystem error report for type 5 error -117 [ 128.684972][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 128.684982][ C1] EXT4-fs (loop2): initial error at time 128: ext4_validate_block_bitmap:441 [ 128.684994][ C1] EXT4-fs (loop2): last error at time 128: ext4_validate_block_bitmap:441 [ 128.686939][ T9244] EXT4-fs (loop2): Remounting filesystem read-only [ 128.687010][ T9244] EXT4-fs (loop2): 1 truncate cleaned up [ 128.687477][ T9244] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 128.691262][ T9052] veth0_vlan: entered promiscuous mode [ 128.692880][ T9052] veth1_vlan: entered promiscuous mode [ 128.699898][ T4402] 8021q: adding VLAN 0 to HW filter on device eth11 [ 128.709899][ T9052] veth0_macvtap: entered promiscuous mode [ 128.712223][ T9052] veth1_macvtap: entered promiscuous mode [ 128.715734][ T4721] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.715765][ T9052] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 128.716842][ T9052] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 128.726836][ T6284] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.730774][ T6284] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.732913][ T6284] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.734909][ T6284] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.816864][ T6284] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 128.816889][ T6284] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 128.832042][ T6284] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 128.832067][ T6284] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 128.852858][ T9259] FAULT_INJECTION: forcing a failure. [ 128.852858][ T9259] name failslab, interval 1, probability 0, space 0, times 0 [ 128.852893][ T9259] CPU: 1 UID: 0 PID: 9259 Comm: syz.3.1392 Tainted: G M L syzkaller #0 PREEMPT [ 128.852910][ T9259] Tainted: [M]=MACHINE_CHECK, [L]=SOFTLOCKUP [ 128.852915][ T9259] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 128.852922][ T9259] Call trace: [ 128.852925][ T9259] show_stack+0x2c/0x3c (C) [ 128.852945][ T9259] __dump_stack+0x30/0x40 [ 128.852957][ T9259] dump_stack_lvl+0xd8/0x12c [ 128.852967][ T9259] dump_stack+0x1c/0x28 [ 128.852976][ T9259] should_fail_ex+0x41c/0x590 [ 128.852985][ T9259] should_failslab+0xc4/0x120 [ 128.852993][ T9259] __kmalloc_cache_noprof+0x94/0x5ec [ 128.853003][ T9259] do_check_common+0x190/0x32b8 [ 128.853013][ T9259] do_check_main+0x6c/0x1c8 [ 128.853023][ T9259] bpf_check+0x381c/0x40dc [ 128.853031][ T9259] bpf_prog_load+0xfe4/0x158c [ 128.853039][ T9259] __sys_bpf+0x7d4/0x82c [ 128.853046][ T9259] __arm64_sys_bpf+0xd0/0xec [ 128.853053][ T9259] invoke_syscall+0x98/0x244 [ 128.853063][ T9259] el0_svc_common+0xec/0x23c [ 128.853073][ T9259] do_el0_svc+0x4c/0x5c [ 128.853082][ T9259] el0_svc+0x64/0x260 [ 128.853092][ T9259] el0t_64_sync_handler+0x44/0x104 [ 128.853100][ T9259] el0t_64_sync+0x198/0x19c [ 128.862863][ T9262] RDS: rds_bind could not find a transport for fec0:ffff:ffff:ffff::1, load rds_tcp or rds_rdma? [ 128.959305][ T9272] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1396'. [ 129.000173][ T9277] FAULT_INJECTION: forcing a failure. [ 129.000173][ T9277] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 129.000216][ T9277] CPU: 1 UID: 0 PID: 9277 Comm: syz.7.1398 Tainted: G M L syzkaller #0 PREEMPT [ 129.000229][ T9277] Tainted: [M]=MACHINE_CHECK, [L]=SOFTLOCKUP [ 129.000233][ T9277] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 129.000238][ T9277] Call trace: [ 129.000241][ T9277] show_stack+0x2c/0x3c (C) [ 129.000259][ T9277] __dump_stack+0x30/0x40 [ 129.000270][ T9277] dump_stack_lvl+0xd8/0x12c [ 129.000280][ T9277] dump_stack+0x1c/0x28 [ 129.000289][ T9277] should_fail_ex+0x41c/0x590 [ 129.000297][ T9277] should_fail+0x14/0x24 [ 129.000304][ T9277] should_fail_usercopy+0x20/0x30 [ 129.000311][ T9277] copy_folio_from_iter_atomic+0x384/0x1518 [ 129.000321][ T9277] generic_perform_write+0x4bc/0x7a4 [ 129.000329][ T9277] shmem_file_write_iter+0x10c/0x134 [ 129.000337][ T9277] vfs_write+0x51c/0xa0c [ 129.000345][ T9277] ksys_write+0x12c/0x228 [ 129.000351][ T9277] __arm64_sys_write+0x84/0x98 [ 129.000358][ T9277] invoke_syscall+0x98/0x244 [ 129.000369][ T9277] el0_svc_common+0xec/0x23c [ 129.000378][ T9277] do_el0_svc+0x4c/0x5c [ 129.000388][ T9277] el0_svc+0x64/0x260 [ 129.000397][ T9277] el0t_64_sync_handler+0x44/0x104 [ 129.000406][ T9277] el0t_64_sync+0x198/0x19c [ 129.001281][ T9277] loop7: detected capacity change from 0 to 512 [ 129.004621][ T9277] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 129.026199][ T9277] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.1398: bg 0: block 384: padding at end of block bitmap is not set [ 129.026216][ T9277] loop7: lost filesystem error report for type 5 error -117 [ 129.026330][ T9277] EXT4-fs (loop7): Remounting filesystem read-only [ 129.026388][ T9277] EXT4-fs (loop7): 1 truncate cleaned up [ 129.026812][ T9277] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 129.096774][ T4728] Bluetooth: hci3: command tx timeout [ 129.108727][ T8547] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.180301][ T4402] 8021q: adding VLAN 0 to HW filter on device eth10 [ 130.254287][ T9313] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1404'. [ 130.254327][ T9313] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1404'. [ 130.302760][ T9312] FAULT_INJECTION: forcing a failure. [ 130.302760][ T9312] name failslab, interval 1, probability 0, space 0, times 0 [ 130.302795][ T9312] CPU: 0 UID: 0 PID: 9312 Comm: syz.6.1406 Tainted: G M L syzkaller #0 PREEMPT [ 130.302811][ T9312] Tainted: [M]=MACHINE_CHECK, [L]=SOFTLOCKUP [ 130.302816][ T9312] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 130.302822][ T9312] Call trace: [ 130.302825][ T9312] show_stack+0x2c/0x3c (C) [ 130.302844][ T9312] __dump_stack+0x30/0x40 [ 130.302855][ T9312] dump_stack_lvl+0xd8/0x12c [ 130.302864][ T9312] dump_stack+0x1c/0x28 [ 130.302874][ T9312] should_fail_ex+0x41c/0x590 [ 130.302882][ T9312] should_failslab+0xc4/0x120 [ 130.302891][ T9312] __kmalloc_cache_noprof+0x94/0x5ec [ 130.302900][ T9312] do_check_common+0x190/0x32b8 [ 130.302911][ T9312] do_check_main+0x6c/0x1c8 [ 130.302920][ T9312] bpf_check+0x381c/0x40dc [ 130.302928][ T9312] bpf_prog_load+0xfe4/0x158c [ 130.302936][ T9312] __sys_bpf+0x7d4/0x82c [ 130.302943][ T9312] __arm64_sys_bpf+0xd0/0xec [ 130.302950][ T9312] invoke_syscall+0x98/0x244 [ 130.302960][ T9312] el0_svc_common+0xec/0x23c [ 130.302970][ T9312] do_el0_svc+0x4c/0x5c [ 130.302979][ T9312] el0_svc+0x64/0x260 [ 130.302989][ T9312] el0t_64_sync_handler+0x44/0x104 [ 130.302997][ T9312] el0t_64_sync+0x198/0x19c [ 130.364378][ T9318] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1409'. [ 130.366737][ T9318] bridge0: port 2(bridge_slave_1) entered disabled state [ 130.366893][ T9318] bridge0: port 1(bridge_slave_0) entered disabled state [ 131.011134][ T9336] loop8: detected capacity change from 0 to 512 [ 131.015629][ T9336] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 131.022979][ T9336] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.1415: bg 0: block 384: padding at end of block bitmap is not set [ 131.023029][ T9336] loop8: lost filesystem error report for type 5 error -117 [ 131.025958][ C1] EXT4-fs (loop8): error count since last fsck: 1 [ 131.025975][ C1] EXT4-fs (loop8): initial error at time 130: ext4_validate_block_bitmap:441 [ 131.025990][ C1] EXT4-fs (loop8): last error at time 130: ext4_validate_block_bitmap:441 [ 131.032450][ T9336] EXT4-fs (loop8): Remounting filesystem read-only [ 131.032572][ T9336] EXT4-fs (loop8): 1 truncate cleaned up [ 131.033011][ T9336] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 131.094853][ T9052] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.103214][ T9341] FAULT_INJECTION: forcing a failure. [ 131.103214][ T9341] name failslab, interval 1, probability 0, space 0, times 0 [ 131.103244][ T9341] CPU: 0 UID: 0 PID: 9341 Comm: syz.7.1417 Tainted: G M L syzkaller #0 PREEMPT [ 131.103260][ T9341] Tainted: [M]=MACHINE_CHECK, [L]=SOFTLOCKUP [ 131.103265][ T9341] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 131.103270][ T9341] Call trace: [ 131.103273][ T9341] show_stack+0x2c/0x3c (C) [ 131.103293][ T9341] __dump_stack+0x30/0x40 [ 131.103304][ T9341] dump_stack_lvl+0xd8/0x12c [ 131.103314][ T9341] dump_stack+0x1c/0x28 [ 131.103323][ T9341] should_fail_ex+0x41c/0x590 [ 131.103332][ T9341] should_failslab+0xc4/0x120 [ 131.103341][ T9341] __kmalloc_node_track_caller_noprof+0x108/0x6d4 [ 131.103351][ T9341] kstrdup+0x50/0x104 [ 131.103360][ T9341] apply_subsystem_event_filter+0x2cc/0x10dc [ 131.103370][ T9341] subsystem_filter_write+0xa0/0x108 [ 131.103377][ T9341] vfs_write+0x2a4/0xa0c [ 131.103384][ T9341] ksys_write+0x12c/0x228 [ 131.103391][ T9341] __arm64_sys_write+0x84/0x98 [ 131.103398][ T9341] invoke_syscall+0x98/0x244 [ 131.103409][ T9341] el0_svc_common+0xec/0x23c [ 131.103418][ T9341] do_el0_svc+0x4c/0x5c [ 131.103428][ T9341] el0_svc+0x64/0x260 [ 131.103438][ T9341] el0t_64_sync_handler+0x44/0x104 [ 131.103446][ T9341] el0t_64_sync+0x198/0x19c [ 131.135641][ T4728] Bluetooth: hci3: command tx timeout [ 131.363977][ T9358] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1424'. [ 131.364247][ T9358] bridge0: port 2(bridge_slave_1) entered disabled state [ 131.364418][ T9358] bridge0: port 1(bridge_slave_0) entered disabled state [ 131.500976][ T9364] loop2: detected capacity change from 0 to 512 [ 131.501306][ T9364] vfat: Unknown parameter ' 1 0 ram0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 [ 131.501306][ T9364] 1 1 ram1 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 [ 131.501306][ T9364] 1 2 ram2 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 [ 131.501306][ T9364] 1 3 ram3 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 [ 131.501306][ T9364] 1 4 ram' [ 131.563512][ T9357] lo speed is unknown, defaulting to 1000 [ 131.916727][ T9382] FAULT_INJECTION: forcing a failure. [ 131.916727][ T9382] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 131.916770][ T9382] CPU: 0 UID: 0 PID: 9382 Comm: syz.2.1429 Tainted: G M L syzkaller #0 PREEMPT [ 131.916788][ T9382] Tainted: [M]=MACHINE_CHECK, [L]=SOFTLOCKUP [ 131.916793][ T9382] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 131.916798][ T9382] Call trace: [ 131.916802][ T9382] show_stack+0x2c/0x3c (C) [ 131.916822][ T9382] __dump_stack+0x30/0x40 [ 131.916833][ T9382] dump_stack_lvl+0xd8/0x12c [ 131.916843][ T9382] dump_stack+0x1c/0x28 [ 131.916852][ T9382] should_fail_ex+0x41c/0x590 [ 131.916861][ T9382] should_fail+0x14/0x24 [ 131.916868][ T9382] should_fail_usercopy+0x20/0x30 [ 131.916875][ T9382] bpf_verifier_vlog+0x2f0/0xbc0 [ 131.916885][ T9382] bpf_verifier_log_write+0x10c/0x18c [ 131.916894][ T9382] print_verifier_state+0x1f4/0xcdc [ 131.916903][ T9382] print_insn_state+0x144/0x178 [ 131.916912][ T9382] do_check_common+0x19f4/0x32b8 [ 131.916922][ T9382] do_check_main+0x6c/0x1c8 [ 131.916931][ T9382] bpf_check+0x381c/0x40dc [ 131.916940][ T9382] bpf_prog_load+0xfe4/0x158c [ 131.916947][ T9382] __sys_bpf+0x7d4/0x82c [ 131.916954][ T9382] __arm64_sys_bpf+0xd0/0xec [ 131.916961][ T9382] invoke_syscall+0x98/0x244 [ 131.916972][ T9382] el0_svc_common+0xec/0x23c [ 131.916982][ T9382] do_el0_svc+0x4c/0x5c [ 131.916991][ T9382] el0_svc+0x64/0x260 [ 131.917000][ T9382] el0t_64_sync_handler+0x44/0x104 [ 131.917009][ T9382] el0t_64_sync+0x198/0x19c [ 132.304250][ T9397] netlink: 36 bytes leftover after parsing attributes in process `syz.8.1435'. [ 132.453241][ T9392] can0: slcan on ttyS3. [ 132.506983][ T9408] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1438'. [ 132.515858][ T9403] can0 (unregistered): slcan off ttyS3. [ 132.518271][ T9403] Falling back ldisc for ttyS3. [ 132.573761][ T9412] FAULT_INJECTION: forcing a failure. [ 132.573761][ T9412] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 132.573802][ T9412] CPU: 0 UID: 0 PID: 9412 Comm: syz.8.1440 Tainted: G M L syzkaller #0 PREEMPT [ 132.573815][ T9412] Tainted: [M]=MACHINE_CHECK, [L]=SOFTLOCKUP [ 132.573819][ T9412] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 132.573823][ T9412] Call trace: [ 132.573826][ T9412] show_stack+0x2c/0x3c (C) [ 132.573844][ T9412] __dump_stack+0x30/0x40 [ 132.573855][ T9412] dump_stack_lvl+0xd8/0x12c [ 132.573865][ T9412] dump_stack+0x1c/0x28 [ 132.573875][ T9412] should_fail_ex+0x41c/0x590 [ 132.573883][ T9412] should_fail+0x14/0x24 [ 132.573889][ T9412] should_fail_usercopy+0x20/0x30 [ 132.573897][ T9412] copy_folio_from_iter_atomic+0x384/0x1518 [ 132.573906][ T9412] generic_perform_write+0x4bc/0x7a4 [ 132.573915][ T9412] shmem_file_write_iter+0x10c/0x134 [ 132.573923][ T9412] vfs_write+0x51c/0xa0c [ 132.573931][ T9412] ksys_write+0x12c/0x228 [ 132.573937][ T9412] __arm64_sys_write+0x84/0x98 [ 132.573944][ T9412] invoke_syscall+0x98/0x244 [ 132.573955][ T9412] el0_svc_common+0xec/0x23c [ 132.573964][ T9412] do_el0_svc+0x4c/0x5c [ 132.573974][ T9412] el0_svc+0x64/0x260 [ 132.573983][ T9412] el0t_64_sync_handler+0x44/0x104 [ 132.573992][ T9412] el0t_64_sync+0x198/0x19c [ 132.574868][ T9412] loop8: detected capacity change from 0 to 512 [ 132.589357][ T9412] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 132.605891][ T9414] loop2: detected capacity change from 0 to 512 [ 132.607838][ T9414] EXT4-fs: inline encryption not supported [ 132.609430][ T9414] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 132.615636][ T9412] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.1440: bg 0: block 384: padding at end of block bitmap is not set [ 132.615675][ T9412] loop8: lost filesystem error report for type 5 error -117 [ 132.616451][ T9414] EXT4-fs (loop2): 1 truncate cleaned up [ 132.616858][ T9414] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 132.619440][ T9412] EXT4-fs (loop8): Remounting filesystem read-only [ 132.619551][ T9412] EXT4-fs (loop8): 1 truncate cleaned up [ 132.619969][ T9412] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 132.624159][ T9414] EXT4-fs error (device loop2): __ext4_expand_extra_isize:6455: inode #15: comm syz.2.1441: bad extra_isize 62 (inode size 256) [ 132.631936][ T9414] EXT4-fs (loop2): Remounting filesystem read-only [ 132.654410][ T9419] loop6: detected capacity change from 0 to 2048 [ 132.670539][ T9419] loop6: p2 < > p4 [ 132.671564][ T9052] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.677045][ T9419] loop6: p4 size 8192 extends beyond EOD, truncated [ 132.701451][ T9424] loop8: detected capacity change from 0 to 512 [ 132.713378][ T9424] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 132.728796][ T9381] syz.3.1431 (9381): drop_caches: 2 [ 132.758604][ T9424] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.1443: bg 0: block 384: padding at end of block bitmap is not set [ 132.758651][ T9424] loop8: lost filesystem error report for type 5 error -117 [ 132.760865][ T9424] EXT4-fs (loop8): Remounting filesystem read-only [ 132.760967][ T9424] EXT4-fs (loop8): 1 truncate cleaned up [ 132.770337][ T9424] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 132.784428][ T4721] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.801352][ T9052] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.824852][ T4919] udevd[4919]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 132.829827][ T4703] udevd[4703]: inotify_add_watch(7, /dev/loop6p4, 10) failed: No such file or directory [ 132.843879][ T9435] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 132.846232][ T9435] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 132.858756][ T9431] FAULT_INJECTION: forcing a failure. [ 132.858756][ T9431] name failslab, interval 1, probability 0, space 0, times 0 [ 132.858787][ T9431] CPU: 0 UID: 0 PID: 9431 Comm: syz.7.1446 Tainted: G M L syzkaller #0 PREEMPT [ 132.858800][ T9431] Tainted: [M]=MACHINE_CHECK, [L]=SOFTLOCKUP [ 132.858804][ T9431] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 132.858810][ T9431] Call trace: [ 132.858813][ T9431] show_stack+0x2c/0x3c (C) [ 132.858835][ T9431] __dump_stack+0x30/0x40 [ 132.858847][ T9431] dump_stack_lvl+0xd8/0x12c [ 132.858857][ T9431] dump_stack+0x1c/0x28 [ 132.858867][ T9431] should_fail_ex+0x41c/0x590 [ 132.858876][ T9431] should_failslab+0xc4/0x120 [ 132.858884][ T9431] __kmalloc_noprof+0x108/0x6b8 [ 132.858893][ T9431] tracing_log_err+0x144/0x488 [ 132.858903][ T9431] append_filter_err+0x290/0x3e0 [ 132.858912][ T9431] apply_subsystem_event_filter+0x408/0x10dc [ 132.858921][ T9431] subsystem_filter_write+0xa0/0x108 [ 132.858928][ T9431] vfs_write+0x2a4/0xa0c [ 132.858936][ T9431] ksys_write+0x12c/0x228 [ 132.858943][ T9431] __arm64_sys_write+0x84/0x98 [ 132.858950][ T9431] invoke_syscall+0x98/0x244 [ 132.858960][ T9431] el0_svc_common+0xec/0x23c [ 132.858969][ T9431] do_el0_svc+0x4c/0x5c [ 132.858979][ T9431] el0_svc+0x64/0x260 [ 132.858989][ T9431] el0t_64_sync_handler+0x44/0x104 [ 132.858997][ T9431] el0t_64_sync+0x198/0x19c [ 132.969087][ T30] kauditd_printk_skb: 106 callbacks suppressed [ 132.969122][ T30] audit: type=1326 audit(132.940:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9443 comm="syz.7.1449" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffa3379228 code=0x0 [ 133.114118][ T9447] loop2: detected capacity change from 0 to 256 [ 133.206348][ T9448] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 133.210021][ T9448] batman_adv: batadv0: Adding interface: gretap1 [ 133.211367][ T9448] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 133.216649][ T9448] batman_adv: batadv0: Interface activated: gretap1 [ 133.223822][ T9448] netlink: 104 bytes leftover after parsing attributes in process `syz.7.1449'. [ 133.225118][ T4728] Bluetooth: hci3: command tx timeout [ 133.706424][ T9457] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1452'. [ 133.718080][ T9459] loop6: detected capacity change from 0 to 256 [ 133.720812][ T9459] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 133.762618][ T9462] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1454'. [ 133.762708][ T9462] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1454'. [ 133.762763][ T9462] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1454'. [ 133.762811][ T9462] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1454'. [ 133.762866][ T9462] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1454'. [ 133.762910][ T9462] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1454'. [ 133.762958][ T9462] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1454'. [ 133.763002][ T9462] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1454'. [ 133.778622][ T9464] loop3: detected capacity change from 0 to 512 [ 133.889257][ T9479] loop3: detected capacity change from 0 to 512 [ 133.893539][ T9471] FAULT_INJECTION: forcing a failure. [ 133.893539][ T9471] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 133.893574][ T9471] CPU: 0 UID: 0 PID: 9471 Comm: syz.7.1457 Tainted: G M L syzkaller #0 PREEMPT [ 133.893593][ T9471] Tainted: [M]=MACHINE_CHECK, [L]=SOFTLOCKUP [ 133.893599][ T9471] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 133.893605][ T9471] Call trace: [ 133.893608][ T9471] show_stack+0x2c/0x3c (C) [ 133.893629][ T9471] __dump_stack+0x30/0x40 [ 133.893640][ T9471] dump_stack_lvl+0xd8/0x12c [ 133.893650][ T9471] dump_stack+0x1c/0x28 [ 133.893659][ T9471] should_fail_ex+0x41c/0x590 [ 133.893667][ T9471] should_fail+0x14/0x24 [ 133.893674][ T9471] should_fail_usercopy+0x20/0x30 [ 133.893681][ T9471] bpf_verifier_vlog+0x2f0/0xbc0 [ 133.893691][ T9471] bpf_verifier_log_write+0x10c/0x18c [ 133.893701][ T9471] print_verifier_state+0x1e8/0xcdc [ 133.893710][ T9471] print_insn_state+0x144/0x178 [ 133.893719][ T9471] do_check_common+0x19f4/0x32b8 [ 133.893729][ T9471] do_check_main+0x6c/0x1c8 [ 133.893738][ T9471] bpf_check+0x381c/0x40dc [ 133.893747][ T9471] bpf_prog_load+0xfe4/0x158c [ 133.893754][ T9471] __sys_bpf+0x7d4/0x82c [ 133.893761][ T9471] __arm64_sys_bpf+0xd0/0xec [ 133.893768][ T9471] invoke_syscall+0x98/0x244 [ 133.893778][ T9471] el0_svc_common+0xec/0x23c [ 133.893788][ T9471] do_el0_svc+0x4c/0x5c [ 133.893798][ T9471] el0_svc+0x64/0x260 [ 133.893807][ T9471] el0t_64_sync_handler+0x44/0x104 [ 133.893816][ T9471] el0t_64_sync+0x198/0x19c [ 133.929767][ T9479] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 133.968597][ T9479] netlink: 'syz.3.1458': attribute type 29 has an invalid length. [ 134.032703][ T4711] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.064404][ T9497] FAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 134.147055][ T9500] tmpfs: Bad value for 'mpol' [ 135.369519][ T9518] nvme_fc: nvme_fc_parse_traddr: bad traddr string [ 135.463160][ T9533] vfat: Bad value for 'shortname' [ 135.571825][ T9542] FAULT_INJECTION: forcing a failure. [ 135.571825][ T9542] name failslab, interval 1, probability 0, space 0, times 0 [ 135.571864][ T9542] CPU: 0 UID: 0 PID: 9542 Comm: syz.3.1475 Tainted: G M L syzkaller #0 PREEMPT [ 135.571881][ T9542] Tainted: [M]=MACHINE_CHECK, [L]=SOFTLOCKUP [ 135.571886][ T9542] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 135.571892][ T9542] Call trace: [ 135.571896][ T9542] show_stack+0x2c/0x3c (C) [ 135.571914][ T9542] __dump_stack+0x30/0x40 [ 135.571925][ T9542] dump_stack_lvl+0xd8/0x12c [ 135.571935][ T9542] dump_stack+0x1c/0x28 [ 135.571945][ T9542] should_fail_ex+0x41c/0x590 [ 135.571953][ T9542] should_failslab+0xc4/0x120 [ 135.571961][ T9542] __kmalloc_noprof+0x108/0x6b8 [ 135.571970][ T9542] tomoyo_realpath_from_path+0xbc/0x4dc [ 135.571980][ T9542] tomoyo_path_number_perm+0x1f0/0x500 [ 135.571988][ T9542] tomoyo_file_ioctl+0x2c/0x3c [ 135.571996][ T9542] security_file_ioctl+0xdc/0x2b0 [ 135.572005][ T9542] __arm64_sys_ioctl+0xb0/0x1cc [ 135.572016][ T9542] invoke_syscall+0x98/0x244 [ 135.572026][ T9542] el0_svc_common+0xec/0x23c [ 135.572036][ T9542] do_el0_svc+0x4c/0x5c [ 135.572045][ T9542] el0_svc+0x64/0x260 [ 135.572055][ T9542] el0t_64_sync_handler+0x44/0x104 [ 135.572063][ T9542] el0t_64_sync+0x198/0x19c [ 135.572084][ T9542] ERROR: Out of memory at tomoyo_realpath_from_path. [ 135.667731][ T9550] EXT4-fs: inline encryption not supported [ 135.675699][ T9550] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 135.675738][ T9550] EXT4-fs (loop7): Test dummy encryption mode enabled [ 135.950148][ T9550] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 136.246317][ T9563] set_capacity_and_notify: 5 callbacks suppressed [ 136.246361][ T9563] loop8: detected capacity change from 0 to 512 [ 136.256590][ T9563] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 136.269913][ T9563] EXT4-fs error (device loop8): ext4_orphan_get:1425: comm syz.8.1479: bad orphan inode 131083 [ 136.269949][ T9563] loop8: lost filesystem error report for type 5 error -117 [ 136.272752][ T9563] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 136.301386][ T9559] EXT4-fs error (device loop8): ext4_find_dest_de:2050: inode #12: block 7: comm syz.8.1479: bad entry in directory: directory entry overrun - offset=16, inode=1560281102, rec_len=1024, size=56 fake=0 [ 136.441099][ T9573] FAULT_INJECTION: forcing a failure. [ 136.441099][ T9573] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 136.444013][ T9573] CPU: 0 UID: 0 PID: 9573 Comm: syz.3.1484 Tainted: G M L syzkaller #0 PREEMPT [ 136.444040][ T9573] Tainted: [M]=MACHINE_CHECK, [L]=SOFTLOCKUP [ 136.444044][ T9573] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 136.444049][ T9573] Call trace: [ 136.444053][ T9573] show_stack+0x2c/0x3c (C) [ 136.444075][ T9573] __dump_stack+0x30/0x40 [ 136.444087][ T9573] dump_stack_lvl+0xd8/0x12c [ 136.444097][ T9573] dump_stack+0x1c/0x28 [ 136.444107][ T9573] should_fail_ex+0x41c/0x590 [ 136.444115][ T9573] should_fail+0x14/0x24 [ 136.444121][ T9573] should_fail_usercopy+0x20/0x30 [ 136.444129][ T9573] _inline_copy_from_user+0x3c/0x174 [ 136.444140][ T9573] copy_msghdr_from_user+0xb8/0x194 [ 136.444150][ T9573] ___sys_sendmsg+0x14c/0x224 [ 136.444160][ T9573] __sys_sendmsg+0x158/0x204 [ 136.444169][ T9573] __arm64_sys_sendmsg+0x88/0x9c [ 136.444178][ T9573] invoke_syscall+0x98/0x244 [ 136.444189][ T9573] el0_svc_common+0xec/0x23c [ 136.444198][ T9573] do_el0_svc+0x4c/0x5c [ 136.444208][ T9573] el0_svc+0x64/0x260 [ 136.444218][ T9573] el0t_64_sync_handler+0x44/0x104 [ 136.444226][ T9573] el0t_64_sync+0x198/0x19c [ 136.767638][ T8547] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.990544][ T9052] EXT4-fs error (device loop8): htree_dirblock_to_tree:1080: inode #2: block 13: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 137.141266][ T9594] can0: slcan on ttyS3. [ 137.355986][ T9594] can0 (unregistered): slcan off ttyS3. [ 137.386939][ T9600] tls_set_device_offload_rx: netdev not found [ 137.419581][ T9603] loop2: detected capacity change from 0 to 512 [ 137.419937][ T9603] EXT4-fs: Ignoring removed i_version option [ 137.421708][ T9603] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 137.439917][ T9603] Quota error (device loop2): v2_read_file_info: Block with free entry 1 out of range (1, 6). [ 137.440015][ T9603] EXT4-fs warning (device loop2): ext4_enable_quotas:7276: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 137.441173][ T9603] EXT4-fs (loop2): mount failed [ 137.509595][ T9615] FAULT_INJECTION: forcing a failure. [ 137.509595][ T9615] name failslab, interval 1, probability 0, space 0, times 0 [ 137.512286][ T9615] CPU: 1 UID: 0 PID: 9615 Comm: syz.6.1497 Tainted: G M L syzkaller #0 PREEMPT [ 137.512311][ T9615] Tainted: [M]=MACHINE_CHECK, [L]=SOFTLOCKUP [ 137.512315][ T9615] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 137.512321][ T9615] Call trace: [ 137.512325][ T9615] show_stack+0x2c/0x3c (C) [ 137.512350][ T9615] __dump_stack+0x30/0x40 [ 137.512362][ T9615] dump_stack_lvl+0xd8/0x12c [ 137.512372][ T9615] dump_stack+0x1c/0x28 [ 137.512382][ T9615] should_fail_ex+0x41c/0x590 [ 137.512390][ T9615] should_failslab+0xc4/0x120 [ 137.512399][ T9615] kmem_cache_alloc_node_noprof+0x98/0x5f8 [ 137.512408][ T9615] __alloc_skb+0x1f0/0x610 [ 137.512418][ T9615] pfkey_sendmsg+0x158/0xdf8 [ 137.512428][ T9615] __sock_sendmsg+0xc8/0x17c [ 137.512437][ T9615] ____sys_sendmsg+0x3d0/0x6c8 [ 137.512446][ T9615] ___sys_sendmsg+0x198/0x224 [ 137.512455][ T9615] __sys_sendmsg+0x158/0x204 [ 137.512465][ T9615] __arm64_sys_sendmsg+0x88/0x9c [ 137.512479][ T9615] invoke_syscall+0x98/0x244 [ 137.512490][ T9615] el0_svc_common+0xec/0x23c [ 137.512500][ T9615] do_el0_svc+0x4c/0x5c [ 137.512511][ T9615] el0_svc+0x64/0x260 [ 137.512521][ T9615] el0t_64_sync_handler+0x44/0x104 [ 137.512529][ T9615] el0t_64_sync+0x198/0x19c [ 137.521580][ T9052] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.593404][ T9086] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.754811][ T9624] loop2: detected capacity change from 0 to 256 [ 138.654406][ T9086] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.867243][ T9642] loop6: detected capacity change from 0 to 512 [ 138.868129][ T9642] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 138.912266][ T9637] FAULT_INJECTION: forcing a failure. [ 138.912266][ T9637] name failslab, interval 1, probability 0, space 0, times 0 [ 138.912301][ T9637] CPU: 1 UID: 0 PID: 9637 Comm: syz.2.1506 Tainted: G M L syzkaller #0 PREEMPT [ 138.912316][ T9637] Tainted: [M]=MACHINE_CHECK, [L]=SOFTLOCKUP [ 138.912321][ T9637] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 138.912326][ T9637] Call trace: [ 138.912330][ T9637] show_stack+0x2c/0x3c (C) [ 138.912350][ T9637] __dump_stack+0x30/0x40 [ 138.912361][ T9637] dump_stack_lvl+0xd8/0x12c [ 138.912370][ T9637] dump_stack+0x1c/0x28 [ 138.912380][ T9637] should_fail_ex+0x41c/0x590 [ 138.912389][ T9637] should_failslab+0xc4/0x120 [ 138.912397][ T9637] __kmalloc_node_track_caller_noprof+0x108/0x6d4 [ 138.912408][ T9637] kstrdup+0x50/0x104 [ 138.912416][ T9637] apply_subsystem_event_filter+0x2cc/0x10dc [ 138.912426][ T9637] subsystem_filter_write+0xa0/0x108 [ 138.912433][ T9637] vfs_write+0x2a4/0xa0c [ 138.912440][ T9637] ksys_write+0x12c/0x228 [ 138.912447][ T9637] __arm64_sys_write+0x84/0x98 [ 138.912454][ T9637] invoke_syscall+0x98/0x244 [ 138.912465][ T9637] el0_svc_common+0xec/0x23c [ 138.912482][ T9637] do_el0_svc+0x4c/0x5c [ 138.912492][ T9637] el0_svc+0x64/0x260 [ 138.912502][ T9637] el0t_64_sync_handler+0x44/0x104 [ 138.912511][ T9637] el0t_64_sync+0x198/0x19c [ 138.947911][ T9642] EXT4-fs error (device loop6): __ext4_iget:5533: inode #11: block 2: comm syz.6.1505: invalid block [ 138.947947][ T9642] loop6: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 138.950210][ T9642] EXT4-fs error (device loop6): ext4_orphan_get:1404: comm syz.6.1505: couldn't read orphan inode 11 (err -117) [ 138.950256][ T9642] loop6: lost filesystem error report for type 5 error -117 [ 138.950831][ T50] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 138.951068][ T9642] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 138.954754][ T50] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 138.963145][ T50] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 138.978541][ T50] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 138.984388][ T50] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 138.992389][ T9086] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.997736][ T9645] netlink: 'syz.3.1507': attribute type 10 has an invalid length. [ 139.003356][ T9647] netlink: 'syz.3.1507': attribute type 10 has an invalid length. [ 139.082227][ T9656] loop2: detected capacity change from 0 to 1024 [ 139.082582][ T9656] EXT4-fs: Ignoring removed orlov option [ 139.082592][ T9656] EXT4-fs: Ignoring removed nobh option [ 139.087790][ T9656] EXT4-fs (loop2): blocks per group (131072) and clusters per group (8192) inconsistent [ 139.118172][ T9086] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.215469][ T9629] lo speed is unknown, defaulting to 1000 [ 139.238766][ T9670] FAULT_INJECTION: forcing a failure. [ 139.238766][ T9670] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 139.238806][ T9670] CPU: 0 UID: 0 PID: 9670 Comm: syz.2.1511 Tainted: G M L syzkaller #0 PREEMPT [ 139.238822][ T9670] Tainted: [M]=MACHINE_CHECK, [L]=SOFTLOCKUP [ 139.238827][ T9670] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 139.238832][ T9670] Call trace: [ 139.238835][ T9670] show_stack+0x2c/0x3c (C) [ 139.238856][ T9670] __dump_stack+0x30/0x40 [ 139.238867][ T9670] dump_stack_lvl+0xd8/0x12c [ 139.238877][ T9670] dump_stack+0x1c/0x28 [ 139.238887][ T9670] should_fail_ex+0x41c/0x590 [ 139.238896][ T9670] should_fail+0x14/0x24 [ 139.238902][ T9670] should_fail_usercopy+0x20/0x30 [ 139.238909][ T9670] _copy_from_iter+0x188/0x1064 [ 139.238918][ T9670] pfkey_sendmsg+0x1a0/0xdf8 [ 139.238928][ T9670] __sock_sendmsg+0xc8/0x17c [ 139.238938][ T9670] ____sys_sendmsg+0x3d0/0x6c8 [ 139.238947][ T9670] ___sys_sendmsg+0x198/0x224 [ 139.238957][ T9670] __sys_sendmsg+0x158/0x204 [ 139.238966][ T9670] __arm64_sys_sendmsg+0x88/0x9c [ 139.238975][ T9670] invoke_syscall+0x98/0x244 [ 139.238985][ T9670] el0_svc_common+0xec/0x23c [ 139.238995][ T9670] do_el0_svc+0x4c/0x5c [ 139.239005][ T9670] el0_svc+0x64/0x260 [ 139.239014][ T9670] el0t_64_sync_handler+0x44/0x104 [ 139.239023][ T9670] el0t_64_sync+0x198/0x19c [ 139.446245][ T9086] bridge_slave_1: left allmulticast mode [ 139.447564][ T9086] bridge_slave_1: left promiscuous mode [ 139.448779][ T9086] bridge0: port 2(bridge_slave_1) entered disabled state [ 139.452668][ T9086] bridge_slave_0: left allmulticast mode [ 139.456456][ T9086] bridge_slave_0: left promiscuous mode [ 139.457734][ T9086] bridge0: port 1(bridge_slave_0) entered disabled state [ 139.467848][ T4828] logitech-hidpp-device 0005:046D:B012.0002: hidraw0: BLUETOOTH HID v0.00 Device [syz0] on syz1 [ 139.484485][ T9681] loop3: detected capacity change from 0 to 4096 [ 139.492141][ T9681] ext2: block size(16384) > page size(4096) not supported by filesystem [ 139.495016][ T9681] EXT4-fs (loop3): bad block size 16384 [ 139.602450][ T7383] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.621098][ T9086] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 139.885647][ T9086] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 139.949939][ T9685] fido_id[9685]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 139.987061][ T9086] bond0 (unregistering): Released all slaves [ 140.270719][ T9629] bridge0: port 1(bridge_slave_0) entered blocking state [ 140.277882][ T9629] bridge0: port 1(bridge_slave_0) entered disabled state [ 140.279945][ T9629] bridge_slave_0: entered allmulticast mode [ 140.281933][ T9717] __nla_validate_parse: 25 callbacks suppressed [ 140.282141][ T9717] netlink: 2 bytes leftover after parsing attributes in process `syz.2.1521'. [ 140.290396][ T9629] bridge_slave_0: entered promiscuous mode [ 140.295692][ T9629] bridge0: port 2(bridge_slave_1) entered blocking state [ 140.295729][ T9629] bridge0: port 2(bridge_slave_1) entered disabled state [ 140.295807][ T9629] bridge_slave_1: entered allmulticast mode [ 140.296246][ T9629] bridge_slave_1: entered promiscuous mode [ 140.409154][ T9629] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 140.413179][ T9629] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 140.500265][ T9742] xt_NFQUEUE: number of total queues is 0 [ 140.573874][ T9722] bridge0: port 2(bridge_slave_1) entered blocking state [ 140.573934][ T9722] bridge0: port 2(bridge_slave_1) entered listening state [ 140.574028][ T9722] bridge0: port 1(bridge_slave_0) entered blocking state [ 140.574059][ T9722] bridge0: port 1(bridge_slave_0) entered listening state [ 140.648854][ T9745] FAULT_INJECTION: forcing a failure. [ 140.648854][ T9745] name failslab, interval 1, probability 0, space 0, times 0 [ 140.648891][ T9745] CPU: 0 UID: 0 PID: 9745 Comm: syz.7.1527 Tainted: G M L syzkaller #0 PREEMPT [ 140.648907][ T9745] Tainted: [M]=MACHINE_CHECK, [L]=SOFTLOCKUP [ 140.648912][ T9745] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 140.648918][ T9745] Call trace: [ 140.648922][ T9745] show_stack+0x2c/0x3c (C) [ 140.648944][ T9745] __dump_stack+0x30/0x40 [ 140.648956][ T9745] dump_stack_lvl+0xd8/0x12c [ 140.648966][ T9745] dump_stack+0x1c/0x28 [ 140.648976][ T9745] should_fail_ex+0x41c/0x590 [ 140.648985][ T9745] should_failslab+0xc4/0x120 [ 140.648993][ T9745] __kmalloc_noprof+0x108/0x6b8 [ 140.649002][ T9745] tracing_log_err+0x144/0x488 [ 140.649012][ T9745] append_filter_err+0x290/0x3e0 [ 140.649021][ T9745] apply_subsystem_event_filter+0x408/0x10dc [ 140.649030][ T9745] subsystem_filter_write+0xa0/0x108 [ 140.649037][ T9745] vfs_write+0x2a4/0xa0c [ 140.649045][ T9745] ksys_write+0x12c/0x228 [ 140.649051][ T9745] __arm64_sys_write+0x84/0x98 [ 140.649059][ T9745] invoke_syscall+0x98/0x244 [ 140.649069][ T9745] el0_svc_common+0xec/0x23c [ 140.649078][ T9745] do_el0_svc+0x4c/0x5c [ 140.649088][ T9745] el0_svc+0x64/0x260 [ 140.649098][ T9745] el0t_64_sync_handler+0x44/0x104 [ 140.649106][ T9745] el0t_64_sync+0x198/0x19c [ 140.951741][ T9722] 8021q: adding VLAN 0 to HW filter on device bond1 [ 140.954609][ T9722] hsr1: left promiscuous mode [ 140.957875][ T9722] bridge1: left promiscuous mode [ 141.034421][ T9086] hsr_slave_0: left promiscuous mode [ 141.037430][ T9086] hsr_slave_1: left promiscuous mode [ 141.037745][ T9086] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 141.037758][ T9086] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 141.039194][ T9086] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 141.039206][ T9086] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 141.070070][ T4728] Bluetooth: hci3: command tx timeout [ 141.075153][ T9086] veth1_macvtap: left promiscuous mode [ 141.075195][ T9086] veth0_macvtap: left promiscuous mode [ 141.075242][ T9086] veth1_vlan: left promiscuous mode [ 141.075283][ T9086] veth0_vlan: left promiscuous mode [ 141.101573][ T9754] x_tables: duplicate underflow at hook 3 [ 141.456459][ T9086] team0 (unregistering): Port device team_slave_1 removed [ 141.471203][ T9086] team0 (unregistering): Port device team_slave_0 removed [ 141.853040][ T4402] 8021q: adding VLAN 0 to HW filter on device eth12 [ 141.861302][ T9629] team0: Port device team_slave_0 added [ 141.862085][ T9629] team0: Port device team_slave_1 added [ 141.897091][ T9629] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 141.897126][ T9629] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 141.897143][ T9629] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 141.916582][ T9629] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 141.916608][ T9629] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 141.916621][ T9629] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 141.976197][ T9629] hsr_slave_0: entered promiscuous mode [ 141.977080][ T9629] hsr_slave_1: entered promiscuous mode [ 141.977310][ T9629] debugfs: 'hsr0' already exists in 'hsr' [ 141.977321][ T9629] Cannot create hsr debugfs directory [ 142.211889][ T9629] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 142.218687][ T9629] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 142.219030][ T9629] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 142.231254][ T9629] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 142.231703][ T9629] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 142.237130][ T9629] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 142.237446][ T9629] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 142.244294][ T9629] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 142.375711][ T9813] FAULT_INJECTION: forcing a failure. [ 142.375711][ T9813] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 142.375753][ T9813] CPU: 1 UID: 0 PID: 9813 Comm: syz.3.1545 Tainted: G M L syzkaller #0 PREEMPT [ 142.375770][ T9813] Tainted: [M]=MACHINE_CHECK, [L]=SOFTLOCKUP [ 142.375775][ T9813] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 142.375780][ T9813] Call trace: [ 142.375783][ T9813] show_stack+0x2c/0x3c (C) [ 142.375804][ T9813] __dump_stack+0x30/0x40 [ 142.375815][ T9813] dump_stack_lvl+0xd8/0x12c [ 142.375825][ T9813] dump_stack+0x1c/0x28 [ 142.375835][ T9813] should_fail_ex+0x41c/0x590 [ 142.375843][ T9813] should_fail+0x14/0x24 [ 142.375850][ T9813] should_fail_usercopy+0x20/0x30 [ 142.375857][ T9813] simple_read_from_buffer+0xc4/0x238 [ 142.375868][ T9813] proc_fail_nth_read+0x1a8/0x248 [ 142.375877][ T9813] vfs_read+0x230/0x8c8 [ 142.375884][ T9813] ksys_read+0x12c/0x228 [ 142.375891][ T9813] __arm64_sys_read+0x84/0x98 [ 142.375898][ T9813] invoke_syscall+0x98/0x244 [ 142.375908][ T9813] el0_svc_common+0xec/0x23c [ 142.375918][ T9813] do_el0_svc+0x4c/0x5c [ 142.375928][ T9813] el0_svc+0x64/0x260 [ 142.375937][ T9813] el0t_64_sync_handler+0x44/0x104 [ 142.375946][ T9813] el0t_64_sync+0x198/0x19c [ 142.452046][ T9629] 8021q: adding VLAN 0 to HW filter on device bond0 [ 142.516663][ T9629] 8021q: adding VLAN 0 to HW filter on device team0 [ 142.645571][ T988] bridge0: port 1(bridge_slave_0) entered blocking state [ 142.645618][ T988] bridge0: port 1(bridge_slave_0) entered forwarding state [ 142.646804][ T988] bridge0: port 2(bridge_slave_1) entered blocking state [ 142.646826][ T988] bridge0: port 2(bridge_slave_1) entered forwarding state [ 142.649759][ T4402] 8021q: adding VLAN 0 to HW filter on device eth13 [ 14 ** replaying previous printk message ** [ 142.718550][ T9824] Unable to handle kernel paging request at virtual address dfff800000000000 [ 142.718583][ T9824] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 142.718593][ T9824] Mem abort info: [ 142.718598][ T9824] ESR = 0x0000000096000005 [ 142.718603][ T9824] EC = 0x25: DABT (current EL), IL = 32 bits [ 142.718610][ T9824] SET = 0, FnV = 0 [ 142.718615][ T9824] EA = 0, S1PTW = 0 [ 142.718620][ T9824] FSC = 0x05: level 1 translation fault [ 142.718625][ T9824] Data abort info: [ 142.718628][ T9824] ISV = 0, ISS = 0x00000005, ISS2 = 0x00000000 [ 142.718633][ T9824] CM = 0, WnR = 0, TnD = 0, TagAccess = 0 [ 142.718639][ T9824] GCS = 0, Overlay = 0, DirtyBit = 0 [ 142.718645][ T9824] [dfff800000000000] address between user and kernel address ranges [ 142.718688][ T9824] Internal error: Oops: 0000000096000005 [#1] SMP [ 142.734469][ T9824] Modules linked in: [ 142.735184][ T9824] CPU: 1 UID: 0 PID: 9824 Comm: syz.3.1547 Tainted: G M L syzkaller #0 PREEMPT [ 142.737107][ T9824] Tainted: [M]=MACHINE_CHECK, [L]=SOFTLOCKUP [ 142.738110][ T9824] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 142.739827][ T9824] pstate: 83400005 (Nzcv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 142.741182][ T9824] pc : dummy_set_selfpowered+0xb0/0x158 [ 142.742155][ T9824] lr : dummy_set_selfpowered+0x80/0x158 [ 142.743080][ T9824] sp : ffff800095777570 [ 142.743781][ T9824] x29: ffff800095777570 x28: 1fffe0001aedf4a6 x27: 1fffe00018b2818b [ 142.745246][ T9824] x26: dfff800000000000 x25: ffff000118644710 x24: ffff000118644748 [ 142.746621][ T9824] x23: ffff0000d76fa6a0 x22: dfff800000000000 x21: 0000000000000003 [ 142.748055][ T9824] x20: 0000000000000000 x19: 0000000000000001 x18: 00000000ffffffff [ 142.749496][ T9824] x17: ffff80008a7d6000 x16: 0000000000000006 x15: ffff800080c9a6e8 [ 142.750986][ T9824] x14: ffff800080c9a568 x13: 0000000000000001 x12: 0000000000000000 [ 142.752440][ T9824] x11: 0000000000000000 x10: 1fffe00018b2818e x9 : 00000000000006a8 [ 142.753850][ T9824] x8 : 0000000000000000 x7 : ffff800080ef7694 x6 : 0000000000000000 [ 142.755245][ T9824] x5 : 0000000000000000 x4 : 0000000000000000 x3 : ffff8000835b2f40 [ 142.756608][ T9824] x2 : 0000000000000003 x1 : ffff0000cda4ba80 x0 : 0000000000000000 [ 142.758024][ T9824] Call trace: [ 142.758593][ T9824] dummy_set_selfpowered+0xb0/0x158 (P) [ 142.759589][ T9824] usb_gadget_set_selfpowered+0x74/0x450 [ 142.760613][ T9824] composite_dev_prepare+0x284/0x2b4 [ 142.761556][ T9824] configfs_composite_bind+0xa0/0x10b8 [ 142.762512][ T9824] gadget_bind_driver+0x274/0x834 [ 142.763402][ T9824] really_probe+0x29c/0x800 [ 142.764213][ T9824] __driver_probe_device+0x1e0/0x350 [ 142.765165][ T9824] driver_probe_device+0x6c/0x19c [ 142.766046][ T9824] __driver_attach+0x168/0x384 [ 142.766864][ T9824] bus_for_each_dev+0x128/0x1b4 [ 142.767732][ T9824] driver_attach+0x50/0x60 [ 142.768525][ T9824] bus_add_driver+0x208/0x500 [ 142.769379][ T9824] driver_register+0x220/0x310 [ 142.770224][ T9824] usb_gadget_register_driver_owner+0xf0/0x25c [ 142.771316][ T9824] gadget_dev_desc_UDC_store+0x164/0x22c [ 142.772310][ T9824] configfs_write_iter+0x27c/0x354 [ 142.773242][ T9824] vfs_write+0x51c/0xa0c [ 142.773956][ T9824] ksys_write+0x12c/0x228 [ 142.774706][ T9824] __arm64_sys_write+0x84/0x98 [ 142.775562][ T9824] invoke_syscall+0x98/0x244 [ 142.776373][ T9824] el0_svc_common+0xec/0x23c [ 142.777217][ T9824] do_el0_svc+0x4c/0x5c [ 142.777999][ T9824] el0_svc+0x64/0x260 [ 142.778746][ T9824] el0t_64_sync_handler+0x44/0x104 [ 142.779685][ T9824] el0t_64_sync+0x198/0x19c [ 142.780507][ T9824] Code: aa1403e0 9757997b f9400294 d343fe88 (38766908) [ 142.781738][ T9824] ---[ end trace 0000000000000000 ]--- [ 143.128870][ T9824] Kernel panic - not syncing: Oops: Fatal exception [ 143.130100][ T9824] SMP: stopping secondary CPUs [ 143.130992][ T9824] Kernel Offset: disabled [ 143.131783][ T9824] CPU features: 0x14000000,003c0008,27020a02,a84ff6a7 [ 143.132919][ T9824] Memory Limit: none [ 143.471858][ T9824] Rebooting in 86400 seconds..