last executing test programs: 4m0.806236014s ago: executing program 32 (id=973): r0 = add_key$fscrypt_v1(&(0x7f0000000240), 0x0, &(0x7f0000000440)={0x0, "dec557407795bb6fb33ff8685215d03bb3c57615baa8f98df3165e56695e5fdfec39f4eac81f7fdf77d881d13cbf4bfe44bcb0222522c867dfa97ba205b0f762", 0x22}, 0x48, 0xfffffffffffffffd) keyctl$clear(0x7, r0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) syz_open_procfs(0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bind$rds(0xffffffffffffffff, 0x0, 0x0) sendmsg$rds(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x7e, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x50, 0x0, 0x0) unshare(0x64000600) 3m56.898318072s ago: executing program 3 (id=1026): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000840)=ANY=[@ANYBLOB="6c00000002060108000000000000000001000000050005000a000000050001000700040005000400000000000900020073797a310000000016000300686173683a6e65742c706f72742c6e657400"], 0x6c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000009c0)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) 3m56.571395601s ago: executing program 5 (id=1028): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000000c0)={0x5c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x1}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x10}]}]}, 0x5c}}, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000300000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) r1 = socket$netlink(0x10, 0x3, 0xc) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) 3m40.808495714s ago: executing program 33 (id=1026): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000840)=ANY=[@ANYBLOB="6c00000002060108000000000000000001000000050005000a000000050001000700040005000400000000000900020073797a310000000016000300686173683a6e65742c706f72742c6e657400"], 0x6c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000009c0)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) 3m40.594146139s ago: executing program 34 (id=1028): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000000c0)={0x5c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x1}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x10}]}]}, 0x5c}}, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000300000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) r1 = socket$netlink(0x10, 0x3, 0xc) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2m9.618175073s ago: executing program 35 (id=1333): r0 = socket$kcm(0x11, 0x2, 0x300) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r1}, &(0x7f00000001c0), &(0x7f00000002c0)=r2}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000e40)={0xc, 0xe, &(0x7f0000000f00)=ANY=[@ANYBLOB="b70200001a000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b70600007fffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d78c07fa1f7e6185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946e0ebc622003b538dfd8e012e79578e51bc5f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f659cb132b803000000661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7b148ba532e6ea09c346dfebd38608b32a0080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c61a137462c7f2539479f49d4eb2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e14861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc16e7c337642d3e5a815232f5e16b089f37b3591a15c0a9be6eb18208404c1b30c3a6a71bc85018e5ff2c91018afc9ffc2cc788bee1b47683db01a469398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b74cd36e7487afa447e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae486aca54183fb01c73f979ca9857399537f5dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db7ab22e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f50714600fb6241c6e955031795b2c2f56411e48455b5a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c0977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6040099d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663dd472021d202eedd005b3d96c7aabf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9000071414c99d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe3594d4a3f2239cfe00000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed180d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e5dee734fe7da3770845cf442d488afdc0e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35f267632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e80339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd52364600000000000000000000000000000000000000000000dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db0c407081c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b4082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000a5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033ec14bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f3390343c12a851810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f314001a62863f6e04b4506ac2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab79e609c57a2a7332f4d8764c302ccd5aac114482b619fca4d97a0ae75ccf11e29a854380e2b4bb9905a1517ec40bb3fa44f9959bad67ccaba76408da35e9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734137ff17320adda5867947257f164391c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b5589829b6b0679b5d65a927de6f4c09f4b742e037381c85d2ec7bb2a8152f0d6a99a0370e0cbd65744eb2efd7b65f04aa7e72588757b9612bb4253a63bb303c0c68a07f115d104f2007237a4f771416741bfd63fdfe3ae6f8bea755d8b7202c2bbae137dc1c3cf40db74a4c1c219d8ddec8f91dae2cdea1353fe062830fa1d233296e99d8317872257e154665485e7f31cdbfbf435517faf93015b57417d84b8bc8662e097d5ba55000048e150695ffae3a676555b10da11751865126d19336116a1e58ab727dda6b343cc97f9479136a66f552abf8fe3d134f6d69df1cf7800b4bda4db5e68aaccf44d24e09f8a769e3ae7bf246673f15e3d1adae4384bdb7cd30a33e30466b421feb96006c810fd3830a1c75af2580727ffc699d2b04f476acc21419fad9b1baec88974da2db29b80859bde08b85c8086e4b7f1fd568042ad5396d3179c71b1dc43291e450ce9b8d7d80fcb44966d7ad4691a37870000000000000000000000000000000000000000000000000000000000000000000083a5765d06da91165d24bc316607e2d69344aa1c07ff7cd7bc3d17f122478b6e81077782b9c298edc2546045feff90e7aa7dc1a869fa5551b873e2c838e979e033b7707df75b93cf5b8d25242741a88f2d54a7107375b25911aa11efa3a4f87fc14f180e353615b3cb9a5cf5ea843014a277c3694a5a83266f73ef039dd739187923715548d58ff43be997e357e0cbed29faef19c0082e26fb867bf0ff0000000000000000000000a0616252abda1102c3eee13eddef0275f21752ee474e32d790ae1f3df77e303ae1968c2a4419d1ca13b97b2c3123ab5b8473b880644e6acfe1d346d1528262c6e91f38029ec24eeb4fe5c1b3726bcfd386ba153fed11692170e5a09432bd02fa9dba861ecad4dbf61a93733a21aeff5f541b8f78bccbf1ac0000000000000000000000145aaaa62ff74b216b2977e7b9261824f663cea60ec6e0fa03bd596cec6d12316c8ed147d4cdd140857444c27c1946b1afcd4ec260694cb71e421744cf1f860840b0decf9be35aeb02d1bf6137b3189edb2d21557e6804ed52305e7deace8b97cd2b423cb79c541762097e29c386634a4bcc3ee91266d808706aadbc4650183d71bf5341edfe4c815d3a87c05d75da20b260d39cdd8559292000cb06faf9972683d379565dcd932fbc6bfb13f938a693252fc3af8088fcf8e06a"], &(0x7f0000001b40)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001b80)={r3, 0x18000000000002a0, 0x36, 0x6000002c, &(0x7f0000001c00)="b9ff03316844268cb89e14f0080048e0050000000000002f77fbac141516e0000001440c0510b18000890304000084500806325f003901050b038da1002125181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014c0000c0adc043084617d7ecf41effff38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d7da058f6efa6d1f5f7ff400"/254, 0x0, 0x400fe, 0x60000000, 0x0, 0xfffffffe, &(0x7f0000001d00), &(0x7f0000001d40)}, 0x2c) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, 0x0, 0x0) 1m46.540626539s ago: executing program 36 (id=1436): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000740)={'syzkaller1\x00', 0x5001}) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000780)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_udp_int(r1, 0x11, 0x68, &(0x7f00000007c0)=0xa40, 0x4) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000800)={'syzkaller1\x00', 0x1}) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000840)={'syzkaller1\x00', {0x2, 0x0, @dev={0xac, 0x14, 0x0, 0x1}}}) recvmmsg(r1, &(0x7f0000003ac0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001040)=""/103, 0x67}, 0x77ee}], 0x1, 0x40010103, 0x0) write$tun(r0, &(0x7f00000008c0)={@void, @val={0x1, 0x5, 0x1c, 0x10, 0x14, 0x6}, @ipv4=@udp={{0x5, 0x4, 0x0, 0x0, 0x2d, 0x0, 0x0, 0x40, 0x11, 0x0, @dev={0xac, 0x14, 0x0, 0x2}, @dev={0xac, 0x14, 0x0, 0x1}}, {0x1234, 0x4e20, 0x19, 0x0, @opaque="0000800000a497aaf51b06323a78cb2ff6"}}}, 0x37) socket$inet6_sctp(0xa, 0x1, 0x84) 1m41.540497347s ago: executing program 37 (id=1451): bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="230000000800000002000000ffff000005"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000200007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000002c0)={r1}, 0xc) 1m37.448549061s ago: executing program 38 (id=1462): syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f00000003c0)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r0, 0xfffffffc) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000680)={0x2, 0x4e22, @local}, 0x10) sendto$inet(r1, &(0x7f00000006c0)="1c", 0x10002, 0x0, 0x0, 0x0) 1m37.421967023s ago: executing program 1 (id=1466): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000300)={'vxcan1\x00', 0x0}) bind$can_raw(r1, &(0x7f0000000000)={0x1d, r2}, 0x10) setsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@getchain={0x24, 0x11, 0x839, 0x70bd25, 0x3ffff, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xfff2, 0xffff}, {0xffff}}}, 0x24}}, 0x0) 1m36.342796068s ago: executing program 1 (id=1469): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) 1m36.004526435s ago: executing program 1 (id=1470): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f00000002c0)='./file0\x00', 0x2048c5, &(0x7f0000000180)={[{@iocharset={'iocharset', 0x3d, 'koi8-r'}}, {@shortname_mixed}, {@shortname_winnt}, {@utf8no}, {@uni_xlate}, {@iocharset={'iocharset', 0x3d, 'cp437'}}, {@numtail}, {@uni_xlateno}, {@rodir}, {@fat=@sys_immutable}, {@shortname_win95}, {@shortname_winnt}, {@numtail}]}, 0x0, 0x2b2, &(0x7f0000002c80)="$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") r0 = syz_open_procfs(0x0, &(0x7f0000000540)='mounts\x00') mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x1333404, 0x0) mount$bind(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0/file0\x00', 0x0, 0x13481, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) read$FUSE(r0, &(0x7f0000000840)={0x2020}, 0x2020) 1m35.619205926s ago: executing program 1 (id=1472): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setopts(0x4200, r0, 0x0, 0x1) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0x4212, r0, 0x58, &(0x7f0000002c00)="01") 1m34.459018036s ago: executing program 9 (id=1474): r0 = syz_clone(0x48000080, &(0x7f00000044c0)="3d3e489f992200ce3e000000", 0xc, 0x0, &(0x7f0000000140), 0x0) prctl$PR_SCHED_CORE(0x3e, 0x8000000000001, r0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) read$FUSE(r1, &(0x7f0000000340)={0x2020}, 0xfffffec1) read$FUSE(r1, &(0x7f0000002380)={0x2020}, 0xfffffce2) timer_create(0x0, 0x0, &(0x7f0000000300)) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x100000a, 0x12, 0xffffffffffffffff, 0xec776000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x1c5f1000) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0300"/21], 0x50) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000046c0)={0x0, 0x0, &(0x7f0000004700)={&(0x7f0000004740)=@newlink={0x50, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x4, 0x0, 0xa300}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_MACSEC_INC_SCI={0x5}, @IFLA_MACSEC_SCI={0xc, 0x1, 0x100}]}}}, @IFLA_LINK={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x24008000}, 0x800) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x69c000) modify_ldt$write2(0x11, &(0x7f0000000240)={0x6, 0x100000, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1}, 0x10) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000180), 0x10) 1m33.431901998s ago: executing program 1 (id=1475): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f00000001c0)=[{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000240)="a92e81d0991808e33c2330164cf023df", 0xfffffc81}], 0x1, &(0x7f0000000280)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x880}], 0x1, 0x80001) recvmmsg(r1, &(0x7f0000002e80)=[{{0x0, 0x0, 0x0}, 0x80000001}, {{0x0, 0x0, &(0x7f0000002dc0)=[{&(0x7f0000000b80)=""/4096, 0x1000}], 0x1}, 0x4}], 0x2, 0x161, 0x0) 1m32.238734638s ago: executing program 39 (id=1475): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f00000001c0)=[{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000240)="a92e81d0991808e33c2330164cf023df", 0xfffffc81}], 0x1, &(0x7f0000000280)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x880}], 0x1, 0x80001) recvmmsg(r1, &(0x7f0000002e80)=[{{0x0, 0x0, 0x0}, 0x80000001}, {{0x0, 0x0, &(0x7f0000002dc0)=[{&(0x7f0000000b80)=""/4096, 0x1000}], 0x1}, 0x4}], 0x2, 0x161, 0x0) 1m32.224851075s ago: executing program 9 (id=1477): connect$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETCHAIN(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000600)={0x14, 0x4, 0xa, 0x5, 0x0, 0x0, {0x7, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x840) 1m32.030552207s ago: executing program 9 (id=1478): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[], 0x38}}, 0x40004) socket$inet_mptcp(0x2, 0x1, 0x106) mount(0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)='source=//127.0.0.1/test,username=root,password=root,port=12345,handletimeout=1\x00') r1 = openat(0xffffffffffffff9c, 0x0, 0x20842, 0x8e) write$P9_RLERRORu(r1, &(0x7f00000006c0)=ANY=[], 0x10) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) syz_open_dev$usbmon(&(0x7f0000000300), 0x7, 0x82c0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x0, 0x0) recvmmsg(r3, 0x0, 0x0, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/diskstats\x00', 0x0, 0x0) read$FUSE(r5, &(0x7f0000000e40)={0x2020}, 0xfffffef4) lseek(r5, 0xfffffffffffffff5, 0x1) 1m30.974888216s ago: executing program 9 (id=1480): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f00000002c0)='./file0\x00', 0x2048c5, &(0x7f0000000180)={[{@iocharset={'iocharset', 0x3d, 'koi8-r'}}, {@shortname_mixed}, {@shortname_winnt}, {@utf8no}, {@uni_xlate}, {@iocharset={'iocharset', 0x3d, 'cp437'}}, {@numtail}, {@uni_xlateno}, {@rodir}, {@fat=@sys_immutable}, {@shortname_win95}, {@shortname_winnt}, {@numtail}]}, 0x0, 0x2b2, &(0x7f0000002c80)="$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") r0 = syz_open_procfs(0x0, &(0x7f0000000540)='mounts\x00') mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x1333404, 0x0) mount$bind(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0/file0\x00', 0x0, 0x13481, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) read$FUSE(r0, &(0x7f0000000840)={0x2020}, 0x2020) 1m30.543909484s ago: executing program 9 (id=1481): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) openat$cuse(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000280)={0x80000000, 0x2, {0xffffffffffffffff}, {}, 0x7, 0x7}) statx(0xffffffffffffff9c, &(0x7f00000002c0)='./proc\x00', 0x0, 0x10, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000400)={{{@in6=@initdev, @in6=@dev}}, {{@in6=@empty}, 0x0, @in=@loopback}}, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000580)='./file0\x00', 0x0, 0x1, 0x0) read$FUSE(r0, &(0x7f0000000680)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f00000026c0)={0x50, 0x0, r1, {0x7, 0x29, 0x0, 0x11812410, 0x0, 0x200, 0x81}}, 0x50) read$FUSE(0xffffffffffffffff, &(0x7f00000048c0)={0x2020}, 0x2020) r2 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) read$FUSE(r2, &(0x7f0000006a40)={0x2020}, 0x2020) syz_fuse_handle_req(r2, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000000c0)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x4000, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x202, 0x150) write(r3, &(0x7f0000000180)='27', 0x2) write$P9_RREADDIR(r3, &(0x7f0000000000)={0x3e, 0x29, 0x2, {0x180000, [{{0x4, 0x3, 0x2}, 0x100000000, 0xa, 0x1b, './proc/thread-self/fail-nth'}]}}, 0x3e) setns(r3, 0x4000000) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.net/syz1\x00', 0x1ff) 1m29.375574472s ago: executing program 9 (id=1482): openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) socket$inet6_tcp(0xa, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x38}, 0x80) clock_gettime(0xfffffffffffffffe, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) syz_ublk_setup_queues(r4, r2, &(0x7f00000004c0)={0x0, 0x42c9, 0x10, 0x1, 0x7f}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfd47, 0x1000, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x845, 0x2, 0x8, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe58c, 0x2000, 0x4003bfff, 0x2b9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x1, 0x230}}], 0x1, 0x0, 0x0) 1m28.40006783s ago: executing program 40 (id=1482): openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) socket$inet6_tcp(0xa, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x38}, 0x80) clock_gettime(0xfffffffffffffffe, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) syz_ublk_setup_queues(r4, r2, &(0x7f00000004c0)={0x0, 0x42c9, 0x10, 0x1, 0x7f}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfd47, 0x1000, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x845, 0x2, 0x8, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe58c, 0x2000, 0x4003bfff, 0x2b9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x1, 0x230}}], 0x1, 0x0, 0x0) 1m27.785482426s ago: executing program 6 (id=1486): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000000)={@multicast2, @loopback}, 0x40) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) setsockopt$inet_mreqsrc(r0, 0x0, 0x24, &(0x7f0000000580)={@multicast2, @loopback, @empty}, 0xc) 1m27.095744312s ago: executing program 6 (id=1487): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x5001}) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', 0x1}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newtfilter={0x80, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0xb, 0x7}, {0xfff1, 0xffff}, {0x300}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4c, 0x2, [@TCA_MATCHALL_ACT={0x48, 0x2, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x0, 0x0, 0x3}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}]}]}}]}, 0x80}}, 0x0) write$tun(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="03031b003000140006006300000e000006"], 0x76) 1m26.131747816s ago: executing program 6 (id=1488): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000280)='./sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./sys/class/net/bridge0/bridge/root_id\x00', 0x0, 0x168) read(r0, &(0x7f0000000a80)=""/128, 0x80) setsockopt$sock_int(r0, 0x1, 0x2d, &(0x7f0000000380)=0x3, 0x4) sched_setscheduler(0x0, 0x1, &(0x7f00000002c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_create_resource$futex(&(0x7f00000000c0)=0x1) futex(r1, 0x6, 0x0, &(0x7f0000000100)={0x77359400}, 0x0, 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) syz_io_uring_setup(0x111, &(0x7f00000003c0)={0x0, 0x0, 0x2, 0x4}, &(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0)) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="2400f6ff1800010066bd7000feff5d4f9d6c57dd0883f7316dd9238fee84535d1000000b0001000300000000060094640143"], 0x24}, 0x1, 0x0, 0x0, 0x20008880}, 0x4002050) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 1m24.40771545s ago: executing program 6 (id=1489): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f00000002c0)='./file0\x00', 0x2048c5, &(0x7f0000000180)={[{@iocharset={'iocharset', 0x3d, 'koi8-r'}}, {@shortname_mixed}, {@shortname_winnt}, {@utf8no}, {@uni_xlate}, {@iocharset={'iocharset', 0x3d, 'cp437'}}, {@numtail}, {@uni_xlateno}, {@rodir}, {@fat=@sys_immutable}, {@shortname_win95}, {@shortname_winnt}, {@numtail}]}, 0x0, 0x2b2, &(0x7f0000002c80)="$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") r0 = syz_open_procfs(0x0, &(0x7f0000000540)='mounts\x00') mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x1333404, 0x0) mount$bind(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0/file0\x00', 0x0, 0x13481, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) read$FUSE(r0, &(0x7f0000000840)={0x2020}, 0x2020) 1m24.116074954s ago: executing program 6 (id=1490): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) openat$cuse(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000280)={0x80000000, 0x2, {0xffffffffffffffff}, {}, 0x7, 0x7}) statx(0xffffffffffffff9c, &(0x7f00000002c0)='./proc\x00', 0x0, 0x10, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000400)={{{@in6=@initdev, @in6=@dev}}, {{@in6=@empty}, 0x0, @in=@loopback}}, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000580)='./file0\x00', 0x0, 0x1, 0x0) read$FUSE(r0, &(0x7f0000000680)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f00000026c0)={0x50, 0x0, r1, {0x7, 0x29, 0x0, 0x11812410, 0x0, 0x200, 0x81}}, 0x50) read$FUSE(0xffffffffffffffff, &(0x7f00000048c0)={0x2020}, 0x2020) mount$fuse(0x0, &(0x7f0000006940)='./file0\x00', &(0x7f0000006980), 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000006a40)={0x2020}, 0x2020) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000000c0)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x4000, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x202, 0x150) write(r2, &(0x7f0000000180)='27', 0x2) write$P9_RREADDIR(r2, &(0x7f0000000000)={0x3e, 0x29, 0x2, {0x180000, [{{0x4, 0x3, 0x2}, 0x100000000, 0xa, 0x1b, './proc/thread-self/fail-nth'}]}}, 0x3e) setns(r2, 0x4000000) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.net/syz1\x00', 0x1ff) 1m23.44713229s ago: executing program 6 (id=1491): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000004c0)={'syzkaller1\x00', 0xc201}) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=ANY=[@ANYBLOB="780000001000030400000000000000", @ANYRES32=0x0, @ANYBLOB="00000000600000005800128008000100677470004c00028008000100", @ANYRES32=r1], 0x78}, 0x1, 0x0, 0x0, 0x24008040}, 0x0) bind$inet(r1, &(0x7f00000005c0)={0x2, 0x4e20, @empty}, 0x10) r3 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000600)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000000000)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x2, 0x0, 0x2b}, @ipv4=@udp={{0x5, 0x4, 0x3, 0x1f, 0x31, 0x66, 0x0, 0x3, 0x11, 0x0, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x16}}, {0x4e20, 0x4e20, 0x1d, 0x0, @gue={{0x2, 0x0, 0x0, 0xff, 0x100}, "5eade82003000000000000004c"}}}}, 0x3f) 1m22.789912049s ago: executing program 41 (id=1491): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000004c0)={'syzkaller1\x00', 0xc201}) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=ANY=[@ANYBLOB="780000001000030400000000000000", @ANYRES32=0x0, @ANYBLOB="00000000600000005800128008000100677470004c00028008000100", @ANYRES32=r1], 0x78}, 0x1, 0x0, 0x0, 0x24008040}, 0x0) bind$inet(r1, &(0x7f00000005c0)={0x2, 0x4e20, @empty}, 0x10) r3 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000600)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000000000)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x2, 0x0, 0x2b}, @ipv4=@udp={{0x5, 0x4, 0x3, 0x1f, 0x31, 0x66, 0x0, 0x3, 0x11, 0x0, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x16}}, {0x4e20, 0x4e20, 0x1d, 0x0, @gue={{0x2, 0x0, 0x0, 0xff, 0x100}, "5eade82003000000000000004c"}}}}, 0x3f) 1m6.530559641s ago: executing program 3 (id=1454): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xa, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180500000800000000000000000000008500000075000000850000000700000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0xfffff000, 0xb, 0x0, &(0x7f00000001c0)="882f1242a03c3f98722780", 0x0, 0x990d, 0x7000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 1m6.106227874s ago: executing program 3 (id=1495): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x810}, 0x4000011) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r0 = socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000180), r1) getsockname$packet(r1, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="700000001000370427bd70000000000000000000", @ANYRES32=r2, @ANYBLOB="c30803000b2ebe2650001280080001006774700044000280080007000a010101080004000100000008000700ac1414330500", @ANYRES32=r1], 0x70}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1m5.606045037s ago: executing program 3 (id=1497): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f00000002c0)='./file0\x00', 0x2048c5, &(0x7f0000000180)={[{@iocharset={'iocharset', 0x3d, 'koi8-r'}}, {@shortname_mixed}, {@shortname_winnt}, {@utf8no}, {@uni_xlate}, {@iocharset={'iocharset', 0x3d, 'cp437'}}, {@numtail}, {@uni_xlateno}, {@rodir}, {@fat=@sys_immutable}, {@shortname_win95}, {@shortname_winnt}, {@numtail}]}, 0x0, 0x2b2, &(0x7f0000002c80)="$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") mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x1333404, 0x0) mount$bind(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0/file0\x00', 0x0, 0x13481, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000840)={0x2020}, 0x2020) 1m5.032059838s ago: executing program 3 (id=1499): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000780)={0xaa, 0x98}) openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_ublk_setup_io_uring(0x801fbd, &(0x7f0000000080)={0x0, 0x40e77, 0x4, 0x2, 0x37d}, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)) syz_io_uring_setup(0x10d, &(0x7f00000002c0)={0x0, 0xb6e8, 0x406, 0x3}, &(0x7f0000000340), &(0x7f0000000380), &(0x7f00000003c0)) r1 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f0000000400)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000440)=0x6, 0x4) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000480), 0x4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000840)={0x40, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0x40045}, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r2, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000940)=ANY=[@ANYBLOB="14000000020105"], 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000a00)=ANY=[@ANYBLOB="980000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c0002800500010000000000080007"], 0x98}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000b40)={0xac, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @mcast1}]}]}, 0xac}}, 0x0) 1m4.183616479s ago: executing program 3 (id=1501): r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000003340)=[{{0x0, 0x0, &(0x7f0000002200)=[{0x0}, {&(0x7f0000000cc0)=""/226, 0xe2}, {&(0x7f0000000dc0)=""/4096, 0x1000}, {&(0x7f0000000040)=""/59, 0x3b}, {&(0x7f0000001e00)=""/72, 0x48}, {&(0x7f0000000100)=""/85, 0x55}, {&(0x7f0000001f00)=""/204, 0xcc}, {&(0x7f0000002040)=""/156, 0x9c}, {&(0x7f0000002100)=""/225, 0xe1}], 0x9}, 0xa2a}, {{0x0, 0x0, 0x0}}], 0x2, 0x2120, 0x0) 1m2.860506258s ago: executing program 42 (id=1501): r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000003340)=[{{0x0, 0x0, &(0x7f0000002200)=[{0x0}, {&(0x7f0000000cc0)=""/226, 0xe2}, {&(0x7f0000000dc0)=""/4096, 0x1000}, {&(0x7f0000000040)=""/59, 0x3b}, {&(0x7f0000001e00)=""/72, 0x48}, {&(0x7f0000000100)=""/85, 0x55}, {&(0x7f0000001f00)=""/204, 0xcc}, {&(0x7f0000002040)=""/156, 0x9c}, {&(0x7f0000002100)=""/225, 0xe1}], 0x9}, 0xa2a}, {{0x0, 0x0, 0x0}}], 0x2, 0x2120, 0x0) 1m2.841330176s ago: executing program 5 (id=1465): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x6, &(0x7f00000003c0)=@framed={{}, [@jmp={0x6, 0x0, 0xc, 0x0, 0x0, 0x1, 0x10}, @func={0x85, 0x0, 0x1, 0x0, 0x1}, @exit]}, &(0x7f0000000400)='GPL\x00', 0x8, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd4}, 0x94) 1m2.543450999s ago: executing program 5 (id=1505): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x200000, &(0x7f0000000140), 0x1, 0x4dd, &(0x7f0000000d40)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x20c41, 0x83) fallocate(r0, 0x0, 0x2000, 0x18003) sendmsg$NL80211_CMD_SET_WOWLAN(r0, 0x0, 0x8000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x153042, 0x80) pwritev2(r1, &(0x7f0000000780)=[{&(0x7f0000000200)='\a', 0x1}], 0x1, 0x2, 0x0, 0xb) 1m1.982376699s ago: executing program 5 (id=1507): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f00000002c0)='./file0\x00', 0x2048c5, &(0x7f0000000180)={[{@iocharset={'iocharset', 0x3d, 'koi8-r'}}, {@shortname_mixed}, {@shortname_winnt}, {@utf8no}, {@uni_xlate}, {@iocharset={'iocharset', 0x3d, 'cp437'}}, {@numtail}, {@uni_xlateno}, {@rodir}, {@fat=@sys_immutable}, {@shortname_win95}, {@shortname_winnt}, {@numtail}]}, 0x0, 0x2b2, &(0x7f0000002c80)="$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") mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x1333404, 0x0) mount$bind(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0/file0\x00', 0x0, 0x13481, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000840)={0x2020}, 0x2020) 1m1.561268889s ago: executing program 5 (id=1508): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f00000000c0)={@mcast2, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @local, 0x1, 0x6, 0x2, 0x100, 0x4, 0x86020086, r1}) 1m1.101286508s ago: executing program 5 (id=1510): r0 = syz_io_uring_setup(0x17af, &(0x7f0000000500)={0x0, 0x5ccf, 0x13290, 0x0, 0x1e1}, &(0x7f0000000300), &(0x7f0000000100), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, &(0x7f0000000200), 0x1) r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x40002) ioctl$USBDEVFS_CLAIM_PORT(r1, 0x80045518, &(0x7f0000000080)=0x1) syz_open_dev$vim2m(&(0x7f0000000280), 0x6, 0x2) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r3 = fanotify_init(0x200, 0x0) fanotify_mark(r3, 0x1, 0x3a, r2, 0x0) syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100), &(0x7f0000000280), &(0x7f0000000140)) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup(r4) syz_ublk_setup_queues(r5, 0x0, &(0x7f0000000180)={0x0, 0x101, 0x800, 0x103, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x400, 0x2100, 0x10000001, 0x0, r5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e4, 0x4, 0xfffffffe, 0x146, 0x0, r5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf90e, 0x0, 0x0, 0x1f0, 0x0, r5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8dd0, 0x0, 0x2, 0x36b}}], 0x1, &(0x7f0000000340)={0x2e, 0x6, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x2, {}, 0x1f, 0x0, '\x00', {0x2, 0x0, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x2, 0x0, 0x0, &(0x7f00000002c0)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) close(r1) sendto$inet6(0xffffffffffffffff, &(0x7f0000000200)="4f7dcdbd2d4d3a56cab898d88b555f4443ffaecbe693892956d65ac0858b41388ea1c52e735ceddf61ee180486f96e5618db8b53da17343f0f6fb6ccf6961f4ae493bbbf1cf36c5be944c8f09c07b41bb5115b677802a5e85c776a9ebf0a2407a37cef1d048c34c9d405b26992174c36bb3b06e160cc9525d391cef9974eb8fddeb955b9533ad3a9", 0x88, 0x40010, 0x0, 0x0) 58.60393247s ago: executing program 43 (id=1510): r0 = syz_io_uring_setup(0x17af, &(0x7f0000000500)={0x0, 0x5ccf, 0x13290, 0x0, 0x1e1}, &(0x7f0000000300), &(0x7f0000000100), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, &(0x7f0000000200), 0x1) r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x40002) ioctl$USBDEVFS_CLAIM_PORT(r1, 0x80045518, &(0x7f0000000080)=0x1) syz_open_dev$vim2m(&(0x7f0000000280), 0x6, 0x2) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r3 = fanotify_init(0x200, 0x0) fanotify_mark(r3, 0x1, 0x3a, r2, 0x0) syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100), &(0x7f0000000280), &(0x7f0000000140)) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup(r4) syz_ublk_setup_queues(r5, 0x0, &(0x7f0000000180)={0x0, 0x101, 0x800, 0x103, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x400, 0x2100, 0x10000001, 0x0, r5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e4, 0x4, 0xfffffffe, 0x146, 0x0, r5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf90e, 0x0, 0x0, 0x1f0, 0x0, r5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8dd0, 0x0, 0x2, 0x36b}}], 0x1, &(0x7f0000000340)={0x2e, 0x6, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x2, {}, 0x1f, 0x0, '\x00', {0x2, 0x0, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x2, 0x0, 0x0, &(0x7f00000002c0)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) close(r1) sendto$inet6(0xffffffffffffffff, &(0x7f0000000200)="4f7dcdbd2d4d3a56cab898d88b555f4443ffaecbe693892956d65ac0858b41388ea1c52e735ceddf61ee180486f96e5618db8b53da17343f0f6fb6ccf6961f4ae493bbbf1cf36c5be944c8f09c07b41bb5115b677802a5e85c776a9ebf0a2407a37cef1d048c34c9d405b26992174c36bb3b06e160cc9525d391cef9974eb8fddeb955b9533ad3a9", 0x88, 0x40010, 0x0, 0x0) 41.849936863s ago: executing program 7 (id=1575): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f00000003c0)=@framed, &(0x7f0000000400)='GPL\x00', 0x8, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd4}, 0x94) 41.68269783s ago: executing program 7 (id=1577): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x840) write$nci(r0, &(0x7f0000000040)=ANY=[], 0xc) 38.870225285s ago: executing program 4 (id=1586): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000100)=0x4, 0xd) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x1000001, 0x8013, r1, 0xf6695000) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e22, 0x6, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x13}}, 0x6}, 0x1c) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000340)="5514377d925cfac68fa5e905ccd2593d6d0f37d8422f54e9fbc8881033b7e59b0ce2a896d5c195741b964850ca7444d0926630715341d8ef0611e595745d05bb0484b65adfe33ed3639e7722ef74b92df54d886779faf3deee20a0724362221a9fc4a7f86a07042dd5875131ff0d57107a01db1964be5dd15d8d3be6fd3209f87210f2e9de528884797a1c43157c6f56349e263c79cb13df66409f7cd33b9ebb000fd19d5521eab9eb89ad56a45108b1d3179077413d0e16044c0fe0", 0xbc}, {&(0x7f0000000400)="fc30dbe99679dd0987d9b79d2816807e5ae56a882530ffe1ae10045ba28c5dd5d248346be2a47ba7ee4ad5737e6f7ee5972f54c5c05986ceaefcd934112e67e808e7197431b1ccde1f3f6c5fc18a493805bc62c575cbdf0d821e4d78766945408115744f77f5fd65bbdc64876a8a4cc6c9ac20ba24e72a582ac25cf4c4abc66e220276c80ddfadfb0d2dbd81ac158689bb3ee37cd6030474f0b67ab077d71a4af43f2ad4865aebe10863d1fbc13d4b6fa0cf2ac1622bf3c908302f7e49debf566d5390f5cc4dca4aefa4823d39cb7dd4f4b9ccaa3deca2483f38c68a6dd882630c645b3731764f609c43fdf70d1426eb074aaf64f950877536287cbb548ae806ec459b787cbca0bbc12a0044111c8b688d9d2c1400cbd43c21fee0085f3a88a87d0acc4328488cf64db57a3ac6ca7ba0effedb266c9c8c2eb03d42aa488241af22018d2f94b6e657a54801b656a8806f1f6b009a6e9f37d02caa6795ca7bd3cac3507f37a462e1ac4439246310bfef901b7664009228e5db784966aa690a2a06414cb47c02440fb402a214f204030d28d13f1267dddfab49dc95ab673ec2a243ded076600e33fdca0495a0807d4a3057b703770316b6afd5dcd1ebe22e7922e67c8378c09623c068e49f788048bd2390e8d48301490e26b950018a18b196d038d9786f268a202b76acdeb0e879e291b0585aecc2b12b692e4ebde3703a7036408accf2a7ce0155b54bbd79aebb61e2f881ee21b5dc3b1971194f66e741442683da9d9015f3535458b69b1a231ddba9dedc1c3008bdf45b6b5d8d55f70d016836a1ffcf797c8e87451a3aea994e9a8bf28339910570d2c5fd5cf258e13649667da0fb5597144ba9beaae4488fab4bf92db02dd8a567a3448fbd4994c7ef6e94c1d94fe246a50dd0d4254dbde51ae8f0c135961175d68913beb0dbd725206beb1510ebb44319a9bdcb8949f46cf187faa8ff4095ec2ced4080e9510e16eac28ab16d2b52eef8131b6bb14059566c7b40ec939c3d9da8c07cea2a41943d2b0f2c46935e9d91e0f60933e70e83362e381f8c77bcf5462a8e951b2d268e27c0942c85ef832e731d9c0c72911fb8a5ad85e0d710b48d54d2c1ca5de57b3cc28c7ab7504c11e3ed03a68509159b8ca0b2be181a3ca748cd02969b94907c2687fca03fb6423854627f0c54f8af5b84630c34ec70815063c8ca0303bd6d97f53e2437a177381eb10ec1108d87285d3669fec1b2f31acc0f5663e888cabc8aeda7ca34f377377c7100edf49a914538835a916a0f84bfb5754fe3313c801168f806675b9813c3c3c5a52cbde1b907b2922ecda1db0a81108622e3517aea76f0debee7c452bef87f78394e0d9a85b90db51fd5d953a528d12ce517deef93b518ebc26197818238481940e1b8747f8d3e3398403837fe86a5c67a708c40e6c89275c1f9d07cfd5cee1d0379275899b1cda60b71f1ebe48867864529cd72e8437c01e71fd06c5c5b88752378932aaefc5dfb8580b00ba024cf132cfc2960d50aa0b33e3683f7f193accdd3ee2d0c47724165a0698d5098112ffa058ee93aa3b692ccbfd34274763c74f831c91fb84f7be645b0a00630226659d48e49da81a6d78f4478ad25458d91aae203a9b7413e65d7ae0b837312d09368852ef44960f71e9a2f915cfaa1b0848f2ef1dd6a7656bbfb0247a1f34e1b4d55c83578f2ba3eab5f94c878341e7c05d6a79a6e8c1024cebe808a09e1f202ecd024dfdd939d57ce4ed5a48d6a9b2df40b18d1f2e8b214e172fd05aa5159b71849bef0c9f576255a646453042c4d47e93ae8e0242e58c92fbdfe6748f4787c3ef1da49f0baa841ebbfe490cefca35910db567e59453824299cd26e625fbcfff898261de4f57e54ef909b2694adf79efec260f423055d48e38ed6e177550f6eae88f2f8618348396d006826349612401b40a318a29b5bcbc26e387944b31a852bc9c9cbf3947c9ecab7a9d22b57567c344947d734cfe39742632ff637c63f8134da78e499454cd2bb8c5faaabc32a5508e8cb053b49420f53a2fd3bc5496a2300e758f8f5e128e3edb039267e426b863aff638a460579e29be2c9938a2a273949152d0a83f757cdafbc664abefd59297f5dd112d47724e28f52a9660f9def5be26a5afc022e69c37dda79656042651c7bddefeaadabae7dd8ed9232f5e037cf586f5dcc319e18ceb90e7ce62b9ab270fbb62b29578b40614fa0dfba6a22a1cc2a3cc06e5c48d9ed3c145f3306e4e2f44812d908d558740b932229db5fccab7d43c53cd18063ec26da594fd0b2f4536b5dcb8b6c1fba1cf907140cda17207a9ba8a185cce514849f48c455574ab110750da0ec415e1e4279fbc63c298336f87b4b4776430195a4ee37f6a265792eb8d32e02ad6611a68cbe13202cc937fc5b3b8503ed59ee75ecf8a11f62d17e3ac0a797f9192217ae30a3ca3361d92cae64d1e00e8dad64c7ac5071df5a77b8cfb7b9e32b19d6c2c435bda45ec7e9bdd1cded92048bc65b346f427dbfe30561b14d73ea105c3866798524be7f211a58ae5db271441368dc68e95add6cb60b66135d3da6000acb5941c3e78c399886c71d9d9e401f9608bcf4e20fb024456d24054f96d7430eb3560e5dba6039190a855f9cfa3e0602a3fd4b7ecf70f7762e07ad1495b82ca660ffd82d1be4d9c098c42a70915d37157c27c7fc07b9eba5dad6bb798b76fe20df121d38ad3c1a33b8b707b1080e34bdd137dd73320a96ecd1d77ad5f73dac3b9a495fdd887c0ed81abb889d665b20fa0eea5ae0fabf7c4660604a3d767b281b8ff54a41af67da99a68598bfeb7060c40db6944cfb5a73058d31832b981b28e5c27c485feeb4a0d5913df851eb935c10b21c0e97f149040972ace826d5d55e09c70f9e43c3e57bfaa84ecbd44e5a4309511a8e5c73d4f7a5a05cc33598b1d5ce596d564b843ca60040358e4ca652d30b8dc3b00e73a3f284578321471cfc12316a80e1d77261598b540a14613100323f11e2bfd1db94d99e7a4cea7c18d82ef0b04eacc956bc032a6c0f3e7c6c0415f9d7ff18a7e72a60c0ec33779b6c4789616c0767294ca898a50ffc7887a4c7376c7d28eb0b74c29b4e399d99fcf91be83c922aabe8065533724c9d82f819bc7a7ebcfe3586b8e2ccde8a0e0ef4fa32e78d1ac90654e70fcb565e81dbe5e51801f501a379e98a74bd31e358950ecd8b5da2232bf90d48c1979d88c429ff77df926be757213796e457064fbff5cb7fee41c32159a9cdaa1176cd406f0823abd8c2b8f83dfb96e5e2474d79e30f726c47746520ff4b3227a636d1d24fc19515a63e8333211aa6bc63961eb810ec4830d16baacd52f96eb3d16adc4128500eda2188d88d9ef0235531455eed0657874b425d6ba68a67e3905ab6f4f729aa9ced5ceb96cd183806a6c3720e907f6c7b226c0fe15219c2ff3320c2e6880ad016dc8bdd911d60ea77d971ed05ca154b0e5ee7d6ebc28b86a66baedca6d39939943bff1d8b39dea87a59fecc6279f9b117b04562db7e952b516a91a364a3b57f9f51324764b4e2c50e0dd2b4a62d19fa665be338e0071edc2725a4a775e9eb0a9e1d01482ed9009e2b17deae69740399203d231b2cb54635aab4a5bc71c1d75d5c27a0e850ad7c39a38c2658d72e8bac7e9fd4f351ad427faafebf7beed212a2fae3cc0c811cb54c468d9aacc303567a5ab03d8c00007c80085b5d39285bb161d8db8de11ec6dce9eab7b7dadd892a4f25e3382a4fe72ce2b309d02ceeadb8daa6e28f4baf8535e7dbb888005651bb5f434ec32b45042363bc424dc3b3441fcc12cef6779ca4032835a225a4196aa952ed12eebd4712fe385dd933fc4110de767d0f9127e7cd815d613a454c56f3be15526c6af0cddae6a7ff375d283871b8761e1cc63f3ada963c127bcb528f971b50ebe6da93b36c1c0b11b7a677c3a2a5a09f2e9350b509f22a51e9c1f3e11383e703b9053ddb5884e9a5804b51fa06f7fbb2ddb8a2d72bebcced8d80834780cfcc578e0e2d0219b4d120b3587db65809709197a0c9f5f5262b091fbbf15f4767206f85406e2fad15c29407243834872d55f13a42a9745822b317edb26488e8517de1c61d5003776faa94fb2d851b4c914dfafea5f0228ce3c2c795511ea5d1bc2b47ee56f56cafd0670e81ee59d2a6125075e98d475f671eca2020d96b7cc33167fde43aa045ef9d71db070d02e642bab72d0e9ac64be602228d8e1e91e9486765c2bf6cfccd723564edbbf13a44809d5a03ae5800bde612ec4dc2a96cb9b8de34998b2ba891549d956f333eb2da9a67312d77c46cb1135694e582a4ac41d9eeb4ff87047e12418f9896ffc567c67a4d172203d79077b901ff42a34dadcbf4b80eacf84093206c563d377f30e427fcff6e1e8ad572e2e4dfc3def367feaacf526fcc75cf81d013d24d51adc630db4a51053e70ce6f482f4c41d973b68dac37214e9315556e5fba8dcd68bcaa24256045ada481af6dfd80b01336ba5405b3a6f810eccff2f79e640b8ec1871140f0b773b70f13fad81121fb16f4a92db25d29206c00b3768e47dbe827257e5901c62e2509438ac6596722d9882893e2ea8b1191e09a6638eaae77c8b52c5eba0c3fa2230e48510a1b810259101d75bc488bffdfe1a9c6da9e05e149ce2e9b865db0d884f1028f03c84d947cd33895d8581c83ec55431b340b7fb04cb36d187fe6bc204f6bc390aeec4c949ff0d3db4c1c5b85909f838cf3a56b5d610036a0cc851f836ad72b73377b6eb6a869b802d1c07c424dea55f91e88defff0f07a856a2ba15070f19d5fc5858ac33e233713a1a8445e3255bf43aea9c7cc18f1c225c4b194a333d42c4bb72c994a877b5ae840f1a4f52c9d3bb3afb187b251d1c68f380a5dbd1689a78d98e7edc49014ad7c79708758d8e23c5082298627e38f1e19e1623a8b7e12a6435deae6698f0015d8e2e1e918ab06d060dacad0d6cc6d835619fe361d5e8cde40565b76913a904b7e7c60ddfcce6afc9e4676ca526a68920bcf8fee9d5055ca360d390524ac6aee07060220e13f82d53d3048b7eb0657db4597bf9ad73b1963dee280f181d3d9428baa692e2486112a308c7c5e81f98dacc516909df9df934edc8db18b7d49afc2e00c863dfeb70362571bc9cf0c4c179df7b4ab5ae4737a611966cf9c3593d6731e31ac048f046f78a2ded8c71a5bd422fc7b68239175555896d42563c8cc5b950fd28fa54db2e0cc6cded799f087befa8acd68eea3644b2711259296667530c42e8ee3dab02ce2fe770e68fbbf12e1c274ad54bbd95d16530abfca59d268bd02d5a78d9a5bd91127fcb2bca57436f7bcbffc08", 0xeca}], 0x2) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000001380)={&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0}, &(0x7f00000013c0)=0x40) 38.467242209s ago: executing program 4 (id=1589): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000280)='./sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./sys/class/net/bridge0/bridge/root_id\x00', 0x0, 0x168) read(r0, &(0x7f0000000a80)=""/128, 0x80) setsockopt$sock_int(r0, 0x1, 0x2d, &(0x7f0000000380)=0x3, 0x4) sched_setscheduler(0x0, 0x1, &(0x7f00000002c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_create_resource$futex(&(0x7f00000000c0)=0x1) futex(r1, 0x6, 0x0, &(0x7f0000000100)={0x77359400}, 0x0, 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) syz_io_uring_setup(0x111, &(0x7f00000003c0)={0x0, 0x0, 0x2, 0x4}, &(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0)) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="2400f6ff1800010066bd7000feff5d4f9d6c57dd0883f7316dd9238fee84535d1000000b0001000300000000060094640143"], 0x24}, 0x1, 0x0, 0x0, 0x20008880}, 0x4002050) 38.460674715s ago: executing program 7 (id=1590): unshare(0xe040400) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt(r0, 0x400000000000003a, 0x1, 0x0, 0x0) 38.091224657s ago: executing program 7 (id=1592): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f00000002c0)='./file0\x00', 0x2048c5, &(0x7f0000000180)={[{@iocharset={'iocharset', 0x3d, 'koi8-r'}}, {@shortname_mixed}, {@shortname_winnt}, {@utf8no}, {@uni_xlate}, {@iocharset={'iocharset', 0x3d, 'cp437'}}, {@numtail}, {@uni_xlateno}, {@rodir}, {@fat=@sys_immutable}, {@shortname_win95}, {@shortname_winnt}, {@numtail}]}, 0x0, 0x2b2, &(0x7f0000002c80)="$eJzs3MFr024YwPFn7bZ2HVt7GD/4CeKDXvQStvoXFNlALChzFfUgZC7V0tiUpFYq4nbz6t8xPHpSUP+BXbx5Fy9DELzsIEbWJlvXRVenM936/cDIu/fJk7zhTcaTwN7Nm88fVMueUTYbkkirJETWZEskt90KjATbRLs9Lt3W5MLk1w+nr9+6faVQLM4vqi4Uli7mVXX6zJtHT16cfdeYvPFy+nVKNnJ3Nr/kP278t/H/5vel8OiOiKnLjtMwl21LVype1VC9ZlumZ2ml5lluQ011w3jZdur1lpq1lalM3bU8T81aS6tWSxuONtyWmvfMSk0Nw9CpjAyb5G9nlNYXF83CkQwGcZiI6nTdgpmMDJbW/8WgAADAYImr/r9f8bTiac3Zru9/Uf8npDt+QP0vMtT1/2HVfx6KrCdxvGzX/5ng+d2L+h8AAAAAAAAAAAAAAAAAAAAAgONgy/ezvu9nw234kxKRtIiEv8c9ThwN5n+4df3jXlrEftYsNUudbSdeKEtFbLFkdkzkW/t+CHTaC5eL87PalpO39mqQv9osJSUV5ody0flznXztzl+VMcl0nz8vWZmJzs9H5DdL43L+nJ8KzmyJIVl5f1ccsWWlfV/v5j+dU710tdiTP9HeDwAAAACAk8DQHfve39txQ8NlQ3rinc7d7wOSPeD7QM/79aicGo3vugEAAAAAGCbeuFRN27Zcr/X4pDfCxWz/ygFF4r6cdL87j4pI0PNqUOain0ZCRHpDY/t6ohvJP5vlzyJ7n4uZ2Kf70A0/uXOvfnrYeQL6SY/zrxIAAACAoxAW/SNxDwQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgCHW7ypi4f6HWYSs63TJeK4SAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAw/AgAA//9crBNs") r0 = syz_open_procfs(0x0, &(0x7f0000000540)='mounts\x00') mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x1333404, 0x0) mount$bind(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0/file0\x00', 0x0, 0x13481, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) read$FUSE(r0, &(0x7f0000000840)={0x2020}, 0x2020) 37.597032874s ago: executing program 7 (id=1594): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000c80)={0x4c, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xfdff}, [@IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast1}}, @IPSET_ATTR_IFACE={0x14, 0x17, 'batadv_slave_0\x00'}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x24008090}, 0x40c0080) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r2, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000ac0)=ANY=[@ANYBLOB], 0x1c}}, 0x0) 37.040548831s ago: executing program 7 (id=1597): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000c80)={0x2c, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xfdff}, [@IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008090}, 0x40c0080) 36.168465894s ago: executing program 44 (id=1597): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000c80)={0x2c, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xfdff}, [@IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008090}, 0x40c0080) 36.133213787s ago: executing program 4 (id=1600): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x840) write$nci(r0, &(0x7f0000000040)=ANY=[@ANYBLOB], 0xc) 32.9042535s ago: executing program 4 (id=1604): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f00000002c0)='./file0\x00', 0x2048c5, &(0x7f0000000180)={[{@iocharset={'iocharset', 0x3d, 'koi8-r'}}, {@shortname_mixed}, {@shortname_winnt}, {@utf8no}, {@uni_xlate}, {@iocharset={'iocharset', 0x3d, 'cp437'}}, {@numtail}, {@uni_xlateno}, {@rodir}, {@fat=@sys_immutable}, {@shortname_win95}, {@shortname_winnt}, {@numtail}]}, 0x0, 0x2b2, &(0x7f0000002c80)="$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") r0 = syz_open_procfs(0x0, &(0x7f0000000540)='mounts\x00') mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x1333404, 0x0) mount$bind(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0/file0\x00', 0x0, 0x13481, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) read$FUSE(r0, &(0x7f0000000840)={0x2020}, 0x2020) 32.795079199s ago: executing program 4 (id=1605): r0 = openat$dm_control(0xffffffffffffff9c, &(0x7f0000000140), 0x183641, 0x0) ioctl$DM_TABLE_LOAD(r0, 0xc138fd09, &(0x7f0000000ec0)={0x4, 0x0, 0x0, 0x180, 0x138, 0x1, 0x0, 0x0, 0x0, 0x0, @by_uuid={0x0, '\x00', {'CRP-syz', 0x0, '0\x00'}}, [@integrity={0x0, 0x146c, 0x0, 0x48, 'integrity\x00', {{@ram_num={'1:', 0x0}, 0x20, '1'}, 0x20, '32', 0x20, 'R', ' 0'}}]}) 32.333099404s ago: executing program 4 (id=1608): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000080), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x4008054) write$nci(r0, &(0x7f00000001c0)=@NCI_OP_RF_INTF_ACTIVATED_NTF={0x1, 0x0, 0x3, 0x5, 0xc, @f={0x6, 0x3, 0x5, 0x2, 0x8, 0x1, 0x0, {0x80, 0x9, "3f0bce3bb827483f50"}, 0x7, 0x0, 0x9, 0x53}}, 0x1a) 30.912486863s ago: executing program 45 (id=1608): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000080), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x4008054) write$nci(r0, &(0x7f00000001c0)=@NCI_OP_RF_INTF_ACTIVATED_NTF={0x1, 0x0, 0x3, 0x5, 0xc, @f={0x6, 0x3, 0x5, 0x2, 0x8, 0x1, 0x0, {0x80, 0x9, "3f0bce3bb827483f50"}, 0x7, 0x0, 0x9, 0x53}}, 0x1a) 5.960525377s ago: executing program 8 (id=1655): syz_mount_image$vfat(&(0x7f00000003c0), &(0x7f0000000400)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x10, &(0x7f0000000040)={[{@rodir}, {@numtail}, {@fat=@dmask={'dmask', 0x3d, 0x1}}, {@shortname_lower}, {@utf8no}, {@uni_xlate}, {@shortname_lower}, {@utf8no}, {@fat=@discard}, {@fat=@codepage={'codepage', 0x3d, '869'}}, {@fat=@check_strict}, {@iocharset={'iocharset', 0x3d, 'cp863'}}, {@utf8}, {@uni_xlate}, {@utf8no}, {@iocharset={'iocharset', 0x3d, 'cp1255'}}]}, 0x3, 0x28d, &(0x7f00000007c0)="$eJzs3cFqM1UUAOAzTdIkKiQLVyL8A7pw9dP6BC1SQSwIShbqQotNQZpQSCFQFWNXPoFP4CP4HG7EF/ABFHd2IY5MZhLTOmlJTRv1/75Fcjn3nrnnzgxJNnPz8cvD0+Oz85PLL36KViuJrb3Yi6skurEVM1/FTUn+8uMvf4sDAP8FV1kWv2aFZhG6uD6isSSzvvXgxQEAD2L6/f/dCxFZlm26FgDgcbz3/gdv7x8eHrybpq2I4dfjXhLFe9G/fxKfxiD6sROd+H36M6FUtN986/Ag6mmuG68OJ+Nenjn86Pvy+Ps/R0zzd6MT3er83bSwkD8Z9xrxXDn/3iD673wbnXixOv/1ivzobcdrryzU/zQ68cMncRaDOC5rm+V/uZumb2Tf/Pb5h3k0z08m415zPq4cXXvUCwMAAAAAAAAAAAAAAAAAAAAAwP/a03Sue33/ndnG/7f0L90fqJ1NFvbn2UnTNEuK8X/l1+OletQ3uXYAAAAAAAAAAAAAAAAAAAD4tzi/+Oz0aDDoj9bamD3WX9EVf1yPNCPi/nM9WTUramVpgyRitbka0Zxm3j24tuIq2nk9/VFSj/VdgmQeaS92PYlirjzSLhoLkX88eyumjdnddXqU3HVxW1U3yRoaWcXtV1uatX0z0i5XUDG4fcvs28/fq+ass6QriYjG/GTefpzGes/h430GAQAAAAAAAAAAAAAAAAAAheJZ30aMzis6LzdQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABsQPH//4P+aJXGpExeNiar5Y16lJENLxEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIBnwJ8BAAD//73oYuw=") renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', 0xffffffffffffff9c, 0x0, 0x0) 5.554010523s ago: executing program 8 (id=1656): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x400000000a882, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28011, r1, 0x0) syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f0000000740)='./file3\x00', 0x4010, &(0x7f0000000d00), 0x2, 0xbd8, &(0x7f0000000d40)="$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") madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x17) 4.187352937s ago: executing program 2 (id=1660): r0 = io_uring_setup(0x8, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) io_uring_register$IORING_REGISTER_NAPI(r0, 0x1b, &(0x7f0000000300)={0x3e8, 0x1, 0x0, '\x00', 0x1}, 0x1) io_uring_register$IORING_REGISTER_NAPI(r0, 0x1b, &(0x7f0000000340)={0x7f, 0x6, 0x1, '\x00', 0x9}, 0x1) io_uring_enter(r0, 0x0, 0x1, 0x9, &(0x7f0000000380), 0x18) 4.089942332s ago: executing program 0 (id=1661): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000280)='./sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./sys/class/net/bridge0/bridge/root_id\x00', 0x0, 0x168) read(r0, 0x0, 0x0) 3.627568214s ago: executing program 0 (id=1662): mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/thread-self/fail-nth\x00', 0x2, 0x12c) write(r0, &(0x7f0000000100)='27', 0x2) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) bind$bt_l2cap(r0, 0x0, 0x0) r1 = syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000140)) ioctl$PAGEMAP_SCAN(r1, 0xc0606610, 0x0) 3.051832604s ago: executing program 0 (id=1663): mkdirat(0xffffffffffffff9c, &(0x7f0000002d40)='./file1\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000002d80)='./file1/file4\x00', 0x1c0) mknodat(0xffffffffffffff9c, &(0x7f0000002dc0)='./file1/file4/file5\x00', 0x81c0, 0x0) symlinkat(&(0x7f0000002e00)='.\x00', 0xffffffffffffff9c, &(0x7f0000002e40)='./file0\x00') r0 = landlock_create_ruleset(&(0x7f0000002e80)={0x2000, 0x2, 0x3}, 0x18, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000002ec0)='./file0\x00', 0x0, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000002f00)={0x2000, r1}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002f40)='./file1/file4/file7\x00', 0x1c0) r2 = landlock_create_ruleset(&(0x7f0000002f80)={0x2001}, 0x18, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000002fc0)='./file1\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r2, 0x1, &(0x7f0000003000)={0x2000, r3}, 0x0) linkat(0xffffffffffffff9c, &(0x7f0000003040)='./file1/file4/file5\x00', 0xffffffffffffff9c, &(0x7f0000003080)='./file1/file4/file7/file5\x00', 0x0) 2.937452003s ago: executing program 2 (id=1664): syz_mount_image$vfat(&(0x7f00000003c0), &(0x7f0000000400)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x10, &(0x7f0000000040)={[{@rodir}, {@numtail}, {@fat=@dmask={'dmask', 0x3d, 0x1}}, {@shortname_lower}, {@utf8no}, {@uni_xlate}, {@shortname_lower}, {@utf8no}, {@fat=@discard}, {@fat=@codepage={'codepage', 0x3d, '869'}}, {@fat=@check_strict}, {@iocharset={'iocharset', 0x3d, 'cp863'}}, {@utf8}, {@uni_xlate}, {@utf8no}, {@iocharset={'iocharset', 0x3d, 'cp1255'}}]}, 0x3, 0x28d, &(0x7f00000007c0)="$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") renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', 0xffffffffffffff9c, 0x0, 0x0) 2.846785156s ago: executing program 8 (id=1665): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e21, @broadcast}, 0x2f) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000680)='dctcp', 0x5) connect$inet(r0, &(0x7f0000000300)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000440)="89000000120081ae08060cdc030000fe7f03214e000000000001ffca1b1f0000000024c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00150c00014003080c00bdad446b31007a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947e", 0x75}, {&(0x7f00000004c0)="11d6cb557c8496a2fe7a81f38210bfa9b70ee09c", 0x14}], 0x2}, 0x4000000) 2.595932735s ago: executing program 0 (id=1666): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f00000002c0)=0x2, 0x4) setsockopt(r0, 0x84, 0x7d, &(0x7f0000000300)="00000000010000", 0x7) setsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000380)=@assoc_value={0x0, 0x200}, 0x8) bind(r0, &(0x7f00000003c0)=@in={0x2, 0x4e20, @loopback}, 0x80) connect(r0, &(0x7f0000000400)=@in={0x2, 0x4e20, @loopback}, 0x10) sendto(r0, &(0x7f0000000500)='\x00', 0x2710, 0x0, 0x0, 0x0) 2.407541781s ago: executing program 2 (id=1667): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xa, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180500000800000000000000000000008500000075000000850000000700000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0xfffff000, 0xd, 0x0, &(0x7f00000001c0)="882f1242a03c3f98722780b605", 0x0, 0x990d, 0x7000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.982800065s ago: executing program 0 (id=1668): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_udp_int(r1, 0x11, 0x68, &(0x7f00000000c0)=0xa40, 0x4) setsockopt$inet6_udp_encap(r1, 0x11, 0x64, &(0x7f0000000100)=0x2, 0x4) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f00000001c0)=@req={0xffffff81, 0x6, 0x6, 0xd}, 0x10) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="0a000806000000000400aaaaaaaaaa2986dd6de7136600e91101addb0000000000000000000000000000ff0200000000"], 0x65) 1.787276111s ago: executing program 2 (id=1669): sendmsg$AUDIT_SET(0xffffffffffffffff, 0x0, 0x20000800) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r0 = syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0xe, &(0x7f0000000240)={[{@barrier_val={'barrier', 0x3d, 0x101}}, {@errors_remount}]}, 0x1, 0x445, &(0x7f0000000700)="$eJzs28+PE1UcAPDvTLeLCLgr4g9+qKto3PhjlwVUDh7UaOIBExM96HGzuxCksIZdEyFEwRg8GWPi3Xj0X/CkF2M8mXjVuyEhhgvgqWbaGbYtbdktLUX6+SQD78282fe+nXnte/PaAEbWVPZPErE1Iv6MiIl6trnAVP2/q5fPLly7fHYhiWr13X+SWrkrl88uFEWL87bkmek0Iv0iid1t6l05feb4fKWydCrPz66e+Gh25fSZF46dmD+6dHTp5P5Dhw4emHv5pf0v9iXOrE1Xdn26vGfnWx988/bhr5rib4mjT6a6HXy6Wu1zdcO1rSGdjA2xIWxIKSKyy1Wu9f+JKMXaxZuINz8fauOAgapWq9UtnQ+fqwJ3sSSa87o8jIrigz6b/xZb6yDg1cENP4bu0mv1CVAW99V8qx8ZizQvU26Z3/bTVES8f+7f77ItBvMcAgCgyU/Z+Of5duO/NB5qKHdfvjY0GRH3R8T2iHggInZExIMRtbIPR8QjG6y/dZHkxvFPerGnwNYpG/+9kq9tNY//itFfTJby3LZa/OXkyLHK0r78NZmO8qYsP9eljp/f+OPrTscax3/ZltVfjAXzdlwc29R8zuL86vytxNzo0vmIXWPt4k+urwQkEbEzInb1WMexZ3/Y0+nYzePvog/rTNXvI56pX/9z0RJ/Iem+Pjl7T1SW9s0Wd8WNfvv9wjud6r+l+Psgu/73tr3/r8c/mTSu165svI4Lf33ZcU7T6/0/nrxXS4/n+z6ZX109NRcxnhyuN7px//61c4t8UT6Lf3pv+/6/PdZeid0Rkd3Ej0bEYxHxeN72JyLiyYjY2yX+X19/6sPe4x+sLP7FDV3/tcR4tO5pnygd/+XHpkonb4j/Wvfrf7CWms73rOf9bz3t6u1uBgAAgP+fNCK2RpLOXE+n6cxM/fvyOyLSyvLK6nNHlj8+uVj/jcBklNPiSddEw/PQuXxaX8+fj4j6VwuK4wfy58bfljbX8jMLy5XFYQcPI25Lh/6f+bs07NYBA+f3WjC69H8YXfo/jC79H0ZXm/6/eRjtAG6/dp//nw2hHcDt19L/LfvBCDH/h9Gl/8Po0v9hJK1sjpv/SL5rovhLPZ5+1yaifEc0Y2CJSO+IZkgMKDHc9yUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIB++S8AAP///fHg0g==") r1 = socket$rds(0x15, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000b80)={0x8, 0x88}, 0x0) tee(r1, r0, 0x7, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETS2(r2, 0x402c542b, &(0x7f0000000bc0)={0x0, 0x0, 0x1000, 0x0, 0x0, "0e2092805b96fd01845531251637e116b87d15"}) sched_setscheduler(0x0, 0x1, &(0x7f0000000c00)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000c40)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000c80)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000cc0)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000d40), 0x651, 0x0) recvmmsg(r4, &(0x7f0000000d80), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000dc0)=0x6) bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000e00)='net/ip_tables_targets\x00') pread64(r6, 0x0, 0x0, 0x54) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000019e40)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f000001a240)={0x0, 0x0, &(0x7f000001a280)={&(0x7f000001a2c0)=@newtaction={0x64, 0x30, 0x1, 0x0, 0x0, {}, [{0x50, 0x1, [@m_vlan={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{}, 0x5}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) setsockopt$RDS_CONG_MONITOR(r1, 0x114, 0x6, &(0x7f000001a340)=0x1, 0x4) syz_mount_image$vfat(&(0x7f000001a380), &(0x7f000001a3c0)='./bus\x00', 0x19900c, 0x0, 0xfe, 0x0, &(0x7f000001a400)) madvise(&(0x7f00005ff000/0x400000)=nil, 0x400000, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_inet_SIOCSIFFLAGS(r7, 0x8914, &(0x7f000001a440)={'wlan1\x00', 0x2}) 1.787055096s ago: executing program 8 (id=1670): r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x20000007c, 0x80001) r2 = dup3(r0, r1, 0x0) ioctl$MON_IOCX_MFETCH(r2, 0xc0109207, &(0x7f00000004c0)={&(0x7f0000000480)=[0x0, 0x0], 0x2, 0x5}) 778.270543ms ago: executing program 0 (id=1671): r0 = syz_clone(0x48000080, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x0) prctl$PR_SCHED_CORE(0x3e, 0x8000000000001, r0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r1 = userfaultfd(0x801) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) read$FUSE(r2, &(0x7f0000000340)={0x2020}, 0xfffffec1) read$FUSE(r2, &(0x7f0000002380)={0x2020}, 0xfffffce2) timer_create(0x0, 0x0, &(0x7f0000000300)) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x100000a, 0x12, r1, 0xec776000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x1c5f1000) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0300"/21], 0x50) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000046c0)={0x0, 0x0, &(0x7f0000004700)={&(0x7f0000004740)=@newlink={0x50, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x4, 0x0, 0xa300}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_MACSEC_INC_SCI={0x5}, @IFLA_MACSEC_SCI={0xc, 0x1, 0x100}]}}}, @IFLA_LINK={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x24008000}, 0x800) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x69c000) modify_ldt$write2(0x11, &(0x7f0000000240)={0x6, 0x100000, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1}, 0x10) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000180), 0x10) 678.885341ms ago: executing program 2 (id=1672): mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/thread-self/fail-nth\x00', 0x2, 0x12c) write(r0, &(0x7f0000000100)='27', 0x2) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) bind$bt_l2cap(r0, 0x0, 0x0) r1 = syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000140)) ioctl$PAGEMAP_SCAN(r1, 0xc0606610, 0x0) 483.909536ms ago: executing program 8 (id=1673): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x7f, 0x200004d, 0x6, 0x0, 0x0}) r2 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000200)={0x200, 0x4f, 0x4}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0x8, 0x8000, 0x401}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000002c0)={0x5, 0x3, 0x9}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000300)={r1}) r3 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f00000004c0)={0x200, 0x51, 0x4}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000500)={0x1ff, 0x6, 0x8}) 345.807013ms ago: executing program 1 (id=1512): r0 = openat$dm_control(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) ioctl$DM_DEV_CREATE(r0, 0xc138fd03, &(0x7f0000000000)={0x4, 0x0, 0x0, 0x138, 0xfffffe65, 0x0, 0x0, 0xd800, 0x0, 0x0, {0x0, {'syz', 0x0, '0\x00'}, @uuid={'LVM-syz', 0x0, '2\x00'}}}) ioctl$DM_TABLE_LOAD(r0, 0xc138fd09, &(0x7f00000006c0)={0x4, 0x0, 0x0, 0x1b0, 0x138, 0x1, 0x0, 0x1, 0x0, 0x0, @by_dev={r1}, [@snapshot={0x0, 0x800, 0x0, 0x78, 'snapshot-merge\x00', {@ram_num={'1:', 0x1}, 0x20, @ram_num={'1:', 0x0}, 0x20, 'P', 0x20, '256', ' 1 discard_zeroes_cow'}}]}) 138.112007ms ago: executing program 2 (id=1674): socket$tipc(0x1e, 0x4, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0e000000040000000800"], 0x48) socket(0x2b, 0x80801, 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) socket$nl_audit(0x10, 0x3, 0x9) socket$inet_udp(0x2, 0x2, 0x0) socket$inet(0x2, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x2, 0x3, 0x2) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000580)='GPL\x00'}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000ac03000000000000850000003300000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r0}, &(0x7f0000000340), &(0x7f0000000380)=r1}, 0x20) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000003c0)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000400)={r1, r3, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x30, &(0x7f0000000440)={@multicast, @empty, @void, {@ipv4={0x800, @esp={{0x5, 0x4, 0x0, 0x2, 0x22, 0x64, 0x0, 0x1, 0x32, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x4d4, 0xa, @basic={0x0, 0x0, 0x200}}}}}}, 0x0) 0s ago: executing program 8 (id=1675): mkdirat(0xffffffffffffff9c, &(0x7f0000002d40)='./file1\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000002d80)='./file1/file4\x00', 0x1c0) mknodat(0xffffffffffffff9c, &(0x7f0000002dc0)='./file1/file4/file5\x00', 0x81c0, 0x0) symlinkat(&(0x7f0000002e00)='.\x00', 0xffffffffffffff9c, &(0x7f0000002e40)='./file0\x00') r0 = landlock_create_ruleset(&(0x7f0000002e80)={0x2000, 0x2, 0x3}, 0x18, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000002ec0)='./file0\x00', 0x0, 0x0) landlock_restrict_self(r0, 0xd) mkdirat(0xffffffffffffff9c, &(0x7f0000002f40)='./file1/file4/file7\x00', 0x1c0) r1 = landlock_create_ruleset(&(0x7f0000002f80)={0x2001}, 0x18, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000002fc0)='./file1\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r1, 0x1, &(0x7f0000003000)={0x2000, r2}, 0x0) linkat(0xffffffffffffff9c, &(0x7f0000003040)='./file1/file4/file5\x00', 0xffffffffffffff9c, &(0x7f0000003080)='./file1/file4/file7/file5\x00', 0x0) kernel console output (not intermixed with test programs): 5907] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 366.681585][ T5907] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 366.681613][ T5907] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 367.100665][ T9956] loop0: detected capacity change from 0 to 512 [ 367.132450][ T9956] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 367.132465][ T9956] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 367.132476][ T9956] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 367.207642][ T9956] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:487: comm syz.0.1220: Invalid block bitmap block 0 in block_group 0 [ 367.207772][ T9956] loop0: lost filesystem error report for type 5 error -117 [ 367.211309][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 367.211326][ C0] EXT4-fs (loop0): initial error at time 1792835616: ext4_read_block_bitmap_nowait:487 [ 367.211346][ C0] EXT4-fs (loop0): last error at time 1792835616: ext4_read_block_bitmap_nowait:487 [ 367.317422][ T9956] EXT4-fs (loop0): Remounting filesystem read-only [ 367.317703][ T9956] EXT4-fs (loop0): 1 truncate cleaned up [ 367.364928][ T9956] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 367.388877][ T211] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 367.388893][ T211] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 367.457490][ T9956] EXT4-fs (loop0): shut down requested (2) [ 367.677708][ T5630] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 367.718889][ T5991] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 367.718907][ T5991] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 370.988972][ T191] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 371.149285][ T5779] usb 3-1: USB disconnect, device number 16 [ 371.166705][ T191] usb 9-1: New USB device found, idVendor=046a, idProduct=0027, bcdDevice= 0.00 [ 371.186934][ T191] usb 9-1: config 0 has an invalid descriptor of length 251, skipping remainder of the config [ 371.186972][ T191] usb 9-1: config 0 interface 0 altsetting 8 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 371.186994][ T191] usb 9-1: config 0 interface 0 has no altsetting 0 [ 371.187021][ T191] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 371.188052][ T5779] cdc_ether 3-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.2-1, CDC Ethernet Device [ 371.277555][ T191] usb 9-1: config 0 descriptor?? [ 372.759247][ T9985] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 373.468091][ T191] usb 9-1: string descriptor 0 read error: -71 [ 373.504906][ T191] usbhid 9-1:0.0: couldn't find an input interrupt endpoint [ 373.540852][ T191] usb 9-1: USB disconnect, device number 2 [ 373.618158][T10023] loop1: detected capacity change from 0 to 512 [ 375.474513][T10035] binder_alloc: 10034: binder_alloc_buf, no vma [ 376.323336][T10054] bond1: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 376.363203][T10054] bond1 (unregistering): Released all slaves [ 376.405250][ T5771] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 376.582693][ T5771] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=df.bb [ 376.585642][ T5771] usb 2-1: config 0 has an invalid interface number: 74 but max is 0 [ 376.585664][ T5771] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 376.585685][ T5771] usb 2-1: config 0 has no interface number 0 [ 376.585720][ T5771] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 376.670199][ T5771] usb 2-1: config 0 descriptor?? [ 376.828488][ T5771] usb 2-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 377.139548][ T5764] usb 2-1: USB disconnect, device number 15 [ 377.272462][ T1005] usb 2-1: Failed to submit usb control message: -71 [ 377.272496][ T1005] usb 2-1: unable to send the bmi data to the device: -71 [ 377.272512][ T1005] usb 2-1: unable to get target info from device [ 377.272525][ T1005] usb 2-1: could not get target info (-71) [ 377.272541][ T1005] usb 2-1: could not probe fw (-71) [ 377.859357][T10109] loop8: detected capacity change from 0 to 1024 [ 377.897914][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 377.897961][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 377.989989][T10109] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 378.916212][T10121] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1234'. [ 378.979866][T10125] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1234'. [ 379.374606][T10137] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1258'. [ 379.875883][T10151] TC_ACT_REPEAT abuse ? [ 380.401892][T10165] ªªªªª»: renamed from vlan0 (while UP) [ 382.048069][T10191] loop1: detected capacity change from 0 to 512 [ 382.085430][T10191] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 382.119611][T10191] EXT4-fs (loop1): 1 truncate cleaned up [ 382.216000][T10191] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 382.242472][T10194] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1275'. [ 382.663293][ T5621] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 382.980590][T10218] futex_wake_op: syz.1.1280 tries to shift op by 144; fix this program [ 382.980773][T10218] futex_wake_op: syz.1.1280 tries to shift op by 144; fix this program [ 383.051199][ T9163] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 383.277079][T10220] FAULT_INJECTION: forcing a failure. [ 383.277079][T10220] name failslab, interval 1, probability 0, space 0, times 0 [ 383.277111][T10220] CPU: 0 UID: 0 PID: 10220 Comm: syz.7.1282 Tainted: G Y syzkaller #0 PREEMPT(full) [ 383.277135][T10220] Tainted: [Y]=FORCED_BIND [ 383.277142][T10220] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 383.277153][T10220] Call Trace: [ 383.277160][T10220] [ 383.277168][T10220] dump_stack_lvl+0xe8/0x150 [ 383.277202][T10220] should_fail_ex+0x410/0x560 [ 383.277229][T10220] should_failslab+0xa8/0x100 [ 383.277256][T10220] __kmalloc_cache_noprof+0x9e/0x600 [ 383.277277][T10220] ? sctp_add_bind_addr+0x8c/0x370 [ 383.277296][T10220] ? sctp_add_bind_addr+0x8c/0x370 [ 383.277322][T10220] sctp_add_bind_addr+0x8c/0x370 [ 383.277346][T10220] sctp_bind_addr_copy+0xb3/0x3c0 [ 383.277367][T10220] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 383.277400][T10220] sctp_connect_new_asoc+0x2ff/0x6b0 [ 383.277428][T10220] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 383.277455][T10220] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 383.277480][T10220] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 383.277504][T10220] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 383.277529][T10220] ? srso_alias_return_thunk+0x5/0xfbef5 [ 383.277551][T10220] ? srso_alias_return_thunk+0x5/0xfbef5 [ 383.277573][T10220] ? security_sctp_bind_connect+0x7e/0x2c0 [ 383.277602][T10220] sctp_sendmsg+0x159b/0x2d00 [ 383.277640][T10220] ? __pfx_sctp_sendmsg+0x10/0x10 [ 383.277669][T10220] ? srso_alias_return_thunk+0x5/0xfbef5 [ 383.277699][T10220] ? __lock_acquire+0x747/0x2de0 [ 383.277735][T10220] ? aa_sock_msg_perm+0xf5/0x210 [ 383.277752][T10220] ? srso_alias_return_thunk+0x5/0xfbef5 [ 383.277774][T10220] ? sock_rps_record_flow+0x19/0x350 [ 383.277795][T10220] ? srso_alias_return_thunk+0x5/0xfbef5 [ 383.277817][T10220] ? inet_sendmsg+0x298/0x320 [ 383.277833][T10220] ? apparmor_socket_sendmsg+0x98/0x360 [ 383.277863][T10220] ? __pfx_inet_sendmsg+0x10/0x10 [ 383.277881][T10220] sock_sendmsg_nosec+0x10f/0x190 [ 383.277909][T10220] ____sys_sendmsg+0x54e/0x850 [ 383.277934][T10220] ? __pfx_____sys_sendmsg+0x10/0x10 [ 383.277962][T10220] ? srso_alias_return_thunk+0x5/0xfbef5 [ 383.277984][T10220] ? import_iovec+0x73/0xa0 [ 383.278008][T10220] ___sys_sendmsg+0x2a5/0x360 [ 383.278026][T10220] ? __lock_acquire+0x747/0x2de0 [ 383.278053][T10220] ? __pfx____sys_sendmsg+0x10/0x10 [ 383.278077][T10220] ? futex_wait+0x2a2/0x390 [ 383.278126][T10220] ? srso_alias_return_thunk+0x5/0xfbef5 [ 383.278147][T10220] ? __fget_files+0x3a2/0x420 [ 383.278165][T10220] ? __fget_files+0x2a/0x420 [ 383.278192][T10220] __x64_sys_sendmsg+0x1b1/0x290 [ 383.278211][T10220] ? srso_alias_return_thunk+0x5/0xfbef5 [ 383.278235][T10220] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 383.278263][T10220] ? srso_alias_return_thunk+0x5/0xfbef5 [ 383.278296][T10220] do_syscall_64+0x166/0x520 [ 383.278316][T10220] ? trace_irq_disable+0x3b/0x140 [ 383.278340][T10220] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 383.278364][T10220] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 383.278386][T10220] RIP: 0033:0x7f3a8fb9f559 [ 383.278403][T10220] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 383.278419][T10220] RSP: 002b:00007f3a90a66028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 383.278438][T10220] RAX: ffffffffffffffda RBX: 00007f3a8fe25fa0 RCX: 00007f3a8fb9f559 [ 383.278452][T10220] RDX: 0000000000048043 RSI: 0000200000000400 RDI: 0000000000000004 [ 383.278464][T10220] RBP: 00007f3a8fc36b20 R08: 0000000000000000 R09: 0000000000000000 [ 383.278476][T10220] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 383.278487][T10220] R13: 00007f3a8fe26038 R14: 00007f3a8fe25fa0 R15: 00007ffe1c9c7988 [ 383.278517][T10220] [ 386.759276][T10255] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1290'. [ 387.247377][T10273] ªªªªª»: renamed from vlan0 (while UP) [ 388.278060][T10293] loop6: detected capacity change from 0 to 512 [ 388.298111][T10293] EXT4-fs: Ignoring removed nomblk_io_submit option [ 388.298131][T10293] EXT4-fs: Ignoring removed mblk_io_submit option [ 388.403116][T10293] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 388.403135][T10293] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c000e128, mo2=0002] [ 388.438934][T10293] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 388.490815][T10293] EXT4-fs error (device loop6): ext4_encrypted_get_link:46: inode #16: comm syz.6.1302: bad symlink. [ 388.522513][T10293] EXT4-fs (loop6): Remounting filesystem read-only [ 388.675983][T10299] loop8: detected capacity change from 0 to 2048 [ 388.814362][T10299] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 388.994061][T10299] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 389.027569][T10299] EXT4-fs (loop8): Remounting filesystem read-only [ 389.027755][T10299] overlayfs: failed to verify upper root origin [ 389.180483][ T9541] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 389.416124][ T9163] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 389.674852][T10322] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1312'. [ 389.696983][T10319] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 389.737868][T10319] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1308'. [ 390.011765][ T5764] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 390.170021][ T5764] usb 7-1: New USB device found, idVendor=2040, idProduct=5530, bcdDevice=a8.82 [ 390.188046][ T5764] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 390.188089][ T5764] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 390.219593][ T5764] usb 7-1: config 0 descriptor?? [ 390.257841][ T5764] smsusb:smsusb_probe: board id=8, interface number 0 [ 390.257905][ T5764] smsusb:smsusb_probe: Device initialized with return code -19 [ 390.636130][T10349] loop2: detected capacity change from 0 to 1024 [ 390.667669][ T5764] usb 7-1: USB disconnect, device number 2 [ 390.750202][T10349] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 390.802674][T10355] loop8: detected capacity change from 0 to 128 [ 391.199182][ T9163] FAT-fs (loop8): error, corrupted directory (invalid entries) [ 391.199671][ T9163] FAT-fs (loop8): error, corrupted directory (invalid entries) [ 391.325482][T10365] futex_wake_op: syz.0.1325 tries to shift op by 144; fix this program [ 391.325627][T10365] futex_wake_op: syz.0.1325 tries to shift op by 144; fix this program [ 391.570885][ T5631] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 391.824549][T10373] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1330'. [ 392.160962][ T8872] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 392.328744][T10388] netlink: 'syz.6.1335': attribute type 4 has an invalid length. [ 392.330947][T10388] netlink: 'syz.6.1335': attribute type 4 has an invalid length. [ 392.458913][ T8872] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 392.567799][ T8872] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 392.682168][ T8872] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 392.706641][T10325] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 393.197218][ T8872] bridge_slave_1: left allmulticast mode [ 393.197242][ T8872] bridge_slave_1: left promiscuous mode [ 393.197410][ T8872] bridge0: port 2(bridge_slave_1) entered disabled state [ 393.247118][ T8872] bridge_slave_0: left allmulticast mode [ 393.247139][ T8872] bridge_slave_0: left promiscuous mode [ 393.247300][ T8872] bridge0: port 1(bridge_slave_0) entered disabled state [ 393.335299][T10403] futex_wake_op: syz.6.1342 tries to shift op by 144; fix this program [ 393.335440][T10403] futex_wake_op: syz.6.1342 tries to shift op by 144; fix this program [ 393.375642][T10401] loop7: detected capacity change from 0 to 1024 [ 393.494217][T10401] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 393.836656][T10412] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1343'. [ 394.209034][ T5628] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 394.220723][ T5628] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 394.230006][ T5628] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 394.240975][ T5628] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 394.255807][ T5628] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 394.468373][T10434] loop0: detected capacity change from 0 to 128 [ 394.517478][ T9158] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 394.546122][T10434] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 394.577036][T10434] ext4 filesystem being mounted at /248/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 394.899816][ T5630] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 395.267225][ T8872] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 395.313954][ T8872] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 395.402164][ T8872] bond0 (unregistering): Released all slaves [ 395.654624][T10462] loop1: detected capacity change from 0 to 512 [ 395.760111][T10462] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 395.780952][T10462] ext4 filesystem being mounted at /274/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 396.149147][ T5621] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 396.372021][ T5638] Bluetooth: hci3: command tx timeout [ 396.507470][T10474] Bluetooth: MGMT ver 1.23 [ 396.524991][T10475] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1357'. [ 396.826429][T10477] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1358'. [ 396.951859][T10480] loop7: detected capacity change from 0 to 1024 [ 397.028800][T10480] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 397.421085][T10491] loop1: detected capacity change from 0 to 512 [ 397.494443][T10491] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 397.494557][T10491] ext4 filesystem being mounted at /277/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 397.655648][T10491] capability: warning: `syz.1.1362' uses 32-bit capabilities (legacy support in use) [ 397.717988][ T9158] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 397.868012][ T8872] hsr_slave_0: left promiscuous mode [ 397.883810][ T8872] hsr_slave_1: left promiscuous mode [ 397.884513][ T8872] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 397.884530][ T8872] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 397.918198][ T8872] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 397.918215][ T8872] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 397.979495][ T8872] veth1_macvtap: left promiscuous mode [ 397.979527][ T8872] veth0_macvtap: left promiscuous mode [ 397.979610][ T8872] veth1_vlan: left promiscuous mode [ 397.979740][ T8872] veth0_vlan: left promiscuous mode [ 398.013680][ T5621] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 399.245487][ T5638] Bluetooth: hci3: command tx timeout [ 399.248619][T10455] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 401.252014][ T5638] Bluetooth: hci3: command tx timeout [ 401.499331][T10540] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1370'. [ 401.525136][T10541] xt_l2tp: v2 tid > 0xffff: 37482740 [ 401.780039][T10541] sctp: [Deprecated]: syz.7.1369 (pid 10541) Use of int in max_burst socket option deprecated. [ 401.780039][T10541] Use struct sctp_assoc_value instead [ 401.915952][T10548] binder_alloc: 10546: binder_alloc_buf, no vma [ 402.405573][T10556] loop7: detected capacity change from 0 to 1024 [ 402.465791][T10556] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 402.610720][ T8872] team0 (unregistering): Port device team_slave_1 removed [ 402.656098][T10560] fuse: Bad value for 'fd' [ 402.708536][ T8872] team0 (unregistering): Port device team_slave_0 removed [ 402.977057][ T9158] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 403.315087][T10427] rxe_eth0 speed is unknown, defaulting to 1000 [ 403.331535][ T5638] Bluetooth: hci3: command tx timeout [ 403.475659][T10572] loop1: detected capacity change from 0 to 512 [ 405.862283][T10600] binder_alloc: 10598: binder_alloc_buf, no vma [ 405.968369][T10604] loop2: detected capacity change from 0 to 1024 [ 406.032634][T10604] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 406.210267][T10604] fuse: Bad value for 'fd' [ 406.502187][ T5631] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 406.769811][T10575] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 407.184273][T10631] sch_tbf: burst 2473 is lower than device lo mtu (65550) ! [ 407.854197][T10651] FAULT_INJECTION: forcing a failure. [ 407.854197][T10651] name failslab, interval 1, probability 0, space 0, times 0 [ 407.854229][T10651] CPU: 0 UID: 0 PID: 10651 Comm: syz.1.1400 Tainted: G Y syzkaller #0 PREEMPT(full) [ 407.854253][T10651] Tainted: [Y]=FORCED_BIND [ 407.854261][T10651] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 407.854272][T10651] Call Trace: [ 407.854279][T10651] [ 407.854287][T10651] dump_stack_lvl+0xe8/0x150 [ 407.854322][T10651] should_fail_ex+0x410/0x560 [ 407.854349][T10651] should_failslab+0xa8/0x100 [ 407.854377][T10651] __kmalloc_cache_noprof+0x9e/0x600 [ 407.854399][T10651] ? ioprio_alloc_cpd+0x73/0x120 [ 407.854424][T10651] ? ioprio_alloc_cpd+0x73/0x120 [ 407.854456][T10651] ioprio_alloc_cpd+0x73/0x120 [ 407.854483][T10651] blkcg_css_alloc+0x2f4/0xa80 [ 407.854507][T10651] cgroup_apply_control_enable+0x5bb/0xda0 [ 407.854552][T10651] cgroup_mkdir+0x1220/0x14b0 [ 407.854589][T10651] ? __pfx_cgroup_mkdir+0x10/0x10 [ 407.854618][T10651] kernfs_iop_mkdir+0x213/0x360 [ 407.854650][T10651] vfs_mkdir+0x40e/0x630 [ 407.854681][T10651] filename_mkdirat+0x285/0x510 [ 407.854711][T10651] ? __pfx_filename_mkdirat+0x10/0x10 [ 407.854748][T10651] ? srso_alias_return_thunk+0x5/0xfbef5 [ 407.854773][T10651] ? do_getname+0x151/0x250 [ 407.854804][T10651] __se_sys_mkdirat+0x35/0x150 [ 407.854831][T10651] do_syscall_64+0x166/0x520 [ 407.854852][T10651] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 407.854877][T10651] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 407.854896][T10651] RIP: 0033:0x7fc02339f559 [ 407.854913][T10651] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 407.854929][T10651] RSP: 002b:00007fc02429d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 407.854949][T10651] RAX: ffffffffffffffda RBX: 00007fc023625fa0 RCX: 00007fc02339f559 [ 407.854963][T10651] RDX: 00000000000001ff RSI: 00002000000001c0 RDI: ffffffffffffff9c [ 407.854976][T10651] RBP: 00007fc023436b20 R08: 0000000000000000 R09: 0000000000000000 [ 407.854988][T10651] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 407.855000][T10651] R13: 00007fc023626038 R14: 00007fc023625fa0 R15: 00007ffee8c68008 [ 407.855031][T10651] [ 408.185645][ T5282] 8021q: adding VLAN 0 to HW filter on device eth9 [ 408.271821][T10427] bridge0: port 1(bridge_slave_0) entered blocking state [ 408.271964][T10427] bridge0: port 1(bridge_slave_0) entered disabled state [ 408.272076][T10427] bridge_slave_0: entered allmulticast mode [ 408.278404][T10427] bridge_slave_0: entered promiscuous mode [ 408.319461][T10655] netlink: 'syz.2.1401': attribute type 10 has an invalid length. [ 408.355461][T10655] bond0: (slave dummy0): Releasing backup interface [ 408.400208][T10427] bridge0: port 2(bridge_slave_1) entered blocking state [ 408.400295][T10427] bridge0: port 2(bridge_slave_1) entered disabled state [ 408.400421][T10427] bridge_slave_1: entered allmulticast mode [ 408.435609][T10427] bridge_slave_1: entered promiscuous mode [ 408.779901][T10427] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 408.810968][T10427] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 408.966010][T10427] team0: Port device team_slave_0 added [ 408.996271][T10427] team0: Port device team_slave_1 added [ 409.137154][T10427] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 409.137170][T10427] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 409.137193][T10427] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 409.190282][T10427] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 409.190296][T10427] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 409.190319][T10427] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 409.702037][T10427] hsr_slave_0: entered promiscuous mode [ 409.705186][T10427] hsr_slave_1: entered promiscuous mode [ 409.705787][T10427] debugfs: 'hsr0' already exists in 'hsr' [ 409.708171][T10427] Cannot create hsr debugfs directory [ 410.058560][T10680] »»»»»»: renamed from vlan0 (while UP) [ 410.680572][T10686] syzkaller1: entered promiscuous mode [ 410.680593][T10686] syzkaller1: entered allmulticast mode [ 411.204732][T10702] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1412'. [ 411.566399][T10715] FAULT_INJECTION: forcing a failure. [ 411.566399][T10715] name fail_futex, interval 1, probability 0, space 0, times 0 [ 411.566430][T10715] CPU: 0 UID: 0 PID: 10715 Comm: syz.1.1416 Tainted: G Y syzkaller #0 PREEMPT(full) [ 411.566455][T10715] Tainted: [Y]=FORCED_BIND [ 411.566462][T10715] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 411.566473][T10715] Call Trace: [ 411.566480][T10715] [ 411.566488][T10715] dump_stack_lvl+0xe8/0x150 [ 411.566520][T10715] should_fail_ex+0x410/0x560 [ 411.566547][T10715] get_futex_key+0xed2/0x1410 [ 411.566590][T10715] ? __pfx_get_futex_key+0x10/0x10 [ 411.566626][T10715] futex_wake+0x119/0x5f0 [ 411.566649][T10715] ? srso_alias_return_thunk+0x5/0xfbef5 [ 411.566674][T10715] ? __pfx_futex_wake+0x10/0x10 [ 411.566704][T10715] ? mm_exit_exec_release+0x20/0x290 [ 411.566732][T10715] do_futex+0x458/0x4e0 [ 411.566772][T10715] ? __pfx_do_futex+0x10/0x10 [ 411.566806][T10715] ? __might_fault+0xaf/0x130 [ 411.566837][T10715] mm_exit_exec_release+0x10d/0x290 [ 411.566865][T10715] exit_mm+0x50/0x240 [ 411.566885][T10715] do_exit+0x6a8/0x2360 [ 411.566905][T10715] ? srso_alias_return_thunk+0x5/0xfbef5 [ 411.566932][T10715] ? __pfx_do_exit+0x10/0x10 [ 411.566954][T10715] ? do_raw_spin_lock+0x12b/0x2f0 [ 411.566985][T10715] ? srso_alias_return_thunk+0x5/0xfbef5 [ 411.567013][T10715] do_group_exit+0x22d/0x2f0 [ 411.567031][T10715] ? _raw_spin_unlock_irq+0x23/0x50 [ 411.567064][T10715] get_signal+0x1216/0x12c0 [ 411.567107][T10715] arch_do_signal_or_restart+0xbb/0x860 [ 411.567141][T10715] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 411.567188][T10715] exit_to_user_mode_loop+0x10e/0x770 [ 411.567212][T10715] ? srso_alias_return_thunk+0x5/0xfbef5 [ 411.567233][T10715] ? rcu_is_watching+0x16/0xb0 [ 411.567264][T10715] do_syscall_64+0x328/0x520 [ 411.567283][T10715] ? trace_irq_disable+0x3b/0x140 [ 411.567307][T10715] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 411.567331][T10715] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 411.567349][T10715] RIP: 0033:0x7fc02339f559 [ 411.567367][T10715] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 411.567382][T10715] RSP: 002b:00007fc02427c0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 411.567401][T10715] RAX: fffffffffffffe00 RBX: 00007fc023626098 RCX: 00007fc02339f559 [ 411.567415][T10715] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fc023626098 [ 411.567427][T10715] RBP: 00007fc023626090 R08: 0000000000000000 R09: 0000000000000000 [ 411.567439][T10715] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 411.567450][T10715] R13: 00007fc023626128 R14: 00007ffee8c67f20 R15: 00007ffee8c68008 [ 411.567480][T10715] [ 411.876790][T10665] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 411.908104][T10427] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 411.965550][T10427] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 411.975155][T10427] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 412.007309][T10427] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 412.029446][T10427] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 412.058707][T10427] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 412.077280][T10427] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 412.144618][T10427] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 412.148519][ T5282] 8021q: adding VLAN 0 to HW filter on device eth10 [ 412.407182][T10730] block nbd7: shutting down sockets [ 412.885075][T10427] 8021q: adding VLAN 0 to HW filter on device bond0 [ 413.029414][T10427] 8021q: adding VLAN 0 to HW filter on device team0 [ 413.080688][ T1005] bridge0: port 1(bridge_slave_0) entered blocking state [ 413.080778][ T1005] bridge0: port 1(bridge_slave_0) entered forwarding state [ 413.148882][ T5908] bridge0: port 2(bridge_slave_1) entered blocking state [ 413.148985][ T5908] bridge0: port 2(bridge_slave_1) entered forwarding state [ 413.473752][T10751] loop2: detected capacity change from 0 to 1024 [ 413.505520][T10751] EXT4-fs (loop2): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 413.544226][T10755] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1427'. [ 413.564230][T10751] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 413.791929][T10764] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2863: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 414.107525][T10776] loop7: detected capacity change from 0 to 128 [ 414.237906][ T5631] EXT4-fs error (device loop2): ext4_read_inline_dir:1512: inode #12: block 7: comm syz-executor: path /257/sys/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=60 fake=0 [ 414.273573][ T5631] EXT4-fs (loop2): Remounting filesystem read-only [ 414.347304][ T5631] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 414.431169][ T9158] FAT-fs (loop7): error, corrupted directory (invalid entries) [ 414.465955][ T9158] FAT-fs (loop7): error, corrupted directory (invalid entries) [ 415.319048][ T1005] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 415.626871][ T1005] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 415.750474][ T1005] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 415.864593][ T1005] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 416.274800][ T1005] bridge_slave_1: left allmulticast mode [ 416.274824][ T1005] bridge_slave_1: left promiscuous mode [ 416.274993][ T1005] bridge0: port 2(bridge_slave_1) entered disabled state [ 416.324027][ T1005] bridge_slave_0: left allmulticast mode [ 416.324050][ T1005] bridge_slave_0: left promiscuous mode [ 416.324221][ T1005] bridge0: port 1(bridge_slave_0) entered disabled state [ 416.439610][T10812] loop0: detected capacity change from 0 to 2048 [ 416.508996][T10812] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 416.991031][T10767] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 417.248103][ T5630] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 417.425606][T10822] loop1: detected capacity change from 0 to 2048 [ 417.543564][T10822] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 417.630071][T10828] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1443'. [ 417.676476][T10822] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 417.698812][T10822] EXT4-fs error (device loop1) in ext4_setattr:6247: error 28 [ 417.698830][T10822] forcing mempool usage for fserror_report+0x245/0x740 [ 417.722836][ T5628] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 417.728793][ T5628] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 417.730476][ T5628] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 417.764954][ T5628] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 417.780728][ T5628] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 417.979190][ T5621] EXT4-fs warning (device loop1): ext4_rmdir:3194: inode #11: comm syz-executor: empty directory 'lost+found' has too many links (1024) [ 418.098455][ T5621] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 418.169237][T10839] loop0: detected capacity change from 0 to 128 [ 418.523158][ T5630] FAT-fs (loop0): error, corrupted directory (invalid entries) [ 418.523318][ T5630] FAT-fs (loop0): error, corrupted directory (invalid entries) [ 418.566101][ T1005] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 418.602748][ T1005] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 418.609071][ T1005] bond0 (unregistering): Released all slaves [ 418.687174][T10830] tipc: Enabling of bearer rejected, failed to enable media [ 418.764633][T10427] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 419.109277][T10860] FAULT_INJECTION: forcing a failure. [ 419.109277][T10860] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 419.109310][T10860] CPU: 0 UID: 0 PID: 10860 Comm: syz.2.1450 Tainted: G Y syzkaller #0 PREEMPT(full) [ 419.109334][T10860] Tainted: [Y]=FORCED_BIND [ 419.109342][T10860] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 419.109353][T10860] Call Trace: [ 419.109361][T10860] [ 419.109369][T10860] dump_stack_lvl+0xe8/0x150 [ 419.109402][T10860] should_fail_ex+0x410/0x560 [ 419.109429][T10860] _copy_from_user+0x2d/0xb0 [ 419.109451][T10860] __se_sys_splice+0x28d/0x490 [ 419.109479][T10860] ? __pfx___se_sys_splice+0x10/0x10 [ 419.109505][T10860] ? srso_alias_return_thunk+0x5/0xfbef5 [ 419.109527][T10860] ? __x64_sys_splice+0x21/0xf0 [ 419.109551][T10860] do_syscall_64+0x166/0x520 [ 419.109571][T10860] ? trace_irq_disable+0x3b/0x140 [ 419.109596][T10860] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 419.109620][T10860] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 419.109644][T10860] RIP: 0033:0x7f95d8b9f559 [ 419.109661][T10860] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 419.109677][T10860] RSP: 002b:00007f95d9ab1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 419.109697][T10860] RAX: ffffffffffffffda RBX: 00007f95d8e25fa0 RCX: 00007f95d8b9f559 [ 419.109711][T10860] RDX: 0000000000000003 RSI: 0000000000000000 RDI: 0000000000000003 [ 419.109722][T10860] RBP: 00007f95d8c36b20 R08: 0000000000008000 R09: 0000000000000004 [ 419.109740][T10860] R10: 000020000000ac80 R11: 0000000000000246 R12: 0000000000000000 [ 419.109752][T10860] R13: 00007f95d8e26038 R14: 00007f95d8e25fa0 R15: 00007ffc32b9c288 [ 419.109782][T10860] [ 419.727805][T10864] FAULT_INJECTION: forcing a failure. [ 419.727805][T10864] name failslab, interval 1, probability 0, space 0, times 0 [ 419.727837][T10864] CPU: 0 UID: 0 PID: 10864 Comm: syz.2.1452 Tainted: G Y syzkaller #0 PREEMPT(full) [ 419.727862][T10864] Tainted: [Y]=FORCED_BIND [ 419.727870][T10864] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 419.727881][T10864] Call Trace: [ 419.727888][T10864] [ 419.727896][T10864] dump_stack_lvl+0xe8/0x150 [ 419.727930][T10864] should_fail_ex+0x410/0x560 [ 419.727957][T10864] should_failslab+0xa8/0x100 [ 419.727984][T10864] __kmalloc_node_track_caller_noprof+0xf6/0x720 [ 419.728006][T10864] ? __kmalloc_node_track_caller_noprof+0x2e6/0x720 [ 419.728026][T10864] ? nfs_get_tree+0xe45/0x1650 [ 419.728049][T10864] ? nfs_get_tree+0xe45/0x1650 [ 419.728079][T10864] kmemdup_nul+0x36/0xf0 [ 419.728100][T10864] nfs_get_tree+0xe45/0x1650 [ 419.728132][T10864] vfs_get_tree+0x92/0x2a0 [ 419.728157][T10864] do_new_mount+0x325/0xb00 [ 419.728186][T10864] ? srso_alias_return_thunk+0x5/0xfbef5 [ 419.728213][T10864] ? __pfx_do_new_mount+0x10/0x10 [ 419.728244][T10864] ? srso_alias_return_thunk+0x5/0xfbef5 [ 419.728266][T10864] ? ns_capable+0x84/0xe0 [ 419.728293][T10864] ? srso_alias_return_thunk+0x5/0xfbef5 [ 419.728314][T10864] ? path_mount+0x647/0x1050 [ 419.728345][T10864] ? srso_alias_return_thunk+0x5/0xfbef5 [ 419.728367][T10864] ? user_path_at+0xd4/0x160 [ 419.728390][T10864] __se_sys_mount+0x31d/0x420 [ 419.728425][T10864] ? __pfx___se_sys_mount+0x10/0x10 [ 419.728460][T10864] ? srso_alias_return_thunk+0x5/0xfbef5 [ 419.728481][T10864] ? __x64_sys_mount+0x20/0xc0 [ 419.728513][T10864] do_syscall_64+0x166/0x520 [ 419.728533][T10864] ? trace_irq_disable+0x3b/0x140 [ 419.728558][T10864] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 419.728582][T10864] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 419.728601][T10864] RIP: 0033:0x7f95d8b9f559 [ 419.728618][T10864] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 419.728634][T10864] RSP: 002b:00007f95d9ab1028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 419.728653][T10864] RAX: ffffffffffffffda RBX: 00007f95d8e25fa0 RCX: 00007f95d8b9f559 [ 419.728667][T10864] RDX: 0000200000000100 RSI: 00002000000000c0 RDI: 0000200000000080 [ 419.728681][T10864] RBP: 00007f95d8c36b20 R08: 0000200000000140 R09: 0000000000000000 [ 419.728694][T10864] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 419.728705][T10864] R13: 00007f95d8e26038 R14: 00007f95d8e25fa0 R15: 00007ffc32b9c288 [ 419.728741][T10864] [ 419.892041][ T5628] Bluetooth: hci4: command tx timeout [ 421.052730][ T1005] hsr_slave_0: left promiscuous mode [ 421.055901][ T1005] hsr_slave_1: left promiscuous mode [ 421.056585][ T1005] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 421.056601][ T1005] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 421.059027][ T1005] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 421.059043][ T1005] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 421.125500][ T1005] veth1_macvtap: left promiscuous mode [ 421.125529][ T1005] veth0_macvtap: left promiscuous mode [ 421.125612][ T1005] veth1_vlan: left promiscuous mode [ 421.125680][ T1005] veth0_vlan: left promiscuous mode [ 421.289899][T10889] loop1: detected capacity change from 0 to 512 [ 421.376855][T10889] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 421.435419][T10889] EXT4-fs (loop1): shut down requested (2) [ 421.586272][ T5621] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 421.865379][ T5638] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 421.890487][ T5638] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 421.903892][ T5638] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 421.906712][ T5638] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 421.907249][ T5638] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 421.971672][ T5638] Bluetooth: hci4: command tx timeout [ 422.085558][T10907] loop2: detected capacity change from 0 to 128 [ 422.279108][ T5631] FAT-fs (loop2): error, corrupted directory (invalid entries) [ 422.279297][ T5631] FAT-fs (loop2): error, corrupted directory (invalid entries) [ 422.597200][ T1005] team0 (unregistering): Port device team_slave_1 removed [ 422.638621][ T1005] team0 (unregistering): Port device team_slave_0 removed [ 422.965396][T10832] rxe_eth0 speed is unknown, defaulting to 1000 [ 423.047206][T10869] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 423.127388][T10427] veth0_vlan: entered promiscuous mode [ 423.203971][T10427] veth1_vlan: entered promiscuous mode [ 423.478045][T10427] veth0_macvtap: entered promiscuous mode [ 423.549139][T10427] veth1_macvtap: entered promiscuous mode [ 423.666457][T10922] loop6: detected capacity change from 0 to 1024 [ 423.719601][T10427] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 423.764659][T10922] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 423.799689][T10427] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 424.327085][ T5638] Bluetooth: hci5: command tx timeout [ 424.327902][ T5638] Bluetooth: hci4: command tx timeout [ 424.563963][ T1005] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 424.775841][ T9541] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 425.018144][ T1005] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 425.326288][ T1005] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 425.405546][T10944] loop6: detected capacity change from 0 to 256 [ 425.500484][T10948] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1466'. [ 425.695754][ T1005] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 425.819568][T10952] netlink: 88 bytes leftover after parsing attributes in process `syz.6.1468'. [ 425.848677][T10901] rxe_eth0 speed is unknown, defaulting to 1000 [ 425.882399][ T1021] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 425.882529][ T1021] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 425.882561][ T1021] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 425.882592][ T1021] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 425.885162][ T51] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 425.885177][ T51] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 425.998957][ T5638] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 426.015629][ T5638] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 426.016202][ T5638] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 426.018908][ T5638] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 426.019463][ T5638] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 426.371811][ T5638] Bluetooth: hci5: command tx timeout [ 426.371886][ T5628] Bluetooth: hci4: command tx timeout [ 426.427208][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 426.427226][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 426.693677][T10954] syzkaller1: entered promiscuous mode [ 426.693698][T10954] syzkaller1: entered allmulticast mode [ 426.770029][T10967] loop1: detected capacity change from 0 to 128 [ 427.083898][ T5621] FAT-fs (loop1): error, corrupted directory (invalid entries) [ 427.084062][ T5621] FAT-fs (loop1): error, corrupted directory (invalid entries) [ 427.297550][ T1005] vlan2: left allmulticast mode [ 427.297569][ T1005] bridge_slave_0: left allmulticast mode [ 427.297587][ T1005] vlan2: left promiscuous mode [ 427.297598][ T1005] bridge_slave_0: left promiscuous mode [ 427.297893][ T1005] bridge0: port 3(vlan2) entered disabled state [ 427.346087][T10975] FAULT_INJECTION: forcing a failure. [ 427.346087][T10975] name failslab, interval 1, probability 0, space 0, times 0 [ 427.346116][T10975] CPU: 0 UID: 0 PID: 10975 Comm: syz.6.1471 Tainted: G Y syzkaller #0 PREEMPT(full) [ 427.346141][T10975] Tainted: [Y]=FORCED_BIND [ 427.346148][T10975] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 427.346159][T10975] Call Trace: [ 427.346167][T10975] [ 427.346175][T10975] dump_stack_lvl+0xe8/0x150 [ 427.346209][T10975] should_fail_ex+0x410/0x560 [ 427.346237][T10975] should_failslab+0xa8/0x100 [ 427.346262][T10975] ? __kernfs_new_node+0xe6/0x980 [ 427.346288][T10975] kmem_cache_alloc_noprof+0x9c/0x600 [ 427.346321][T10975] ? srso_alias_return_thunk+0x5/0xfbef5 [ 427.346344][T10975] ? __kernfs_new_node+0xe6/0x980 [ 427.346369][T10975] ? kernfs_add_one+0xfc/0x510 [ 427.346397][T10975] __kernfs_new_node+0xe6/0x980 [ 427.346420][T10975] ? up_write+0x19d/0x4a0 [ 427.346449][T10975] ? srso_alias_return_thunk+0x5/0xfbef5 [ 427.346471][T10975] ? kernfs_activate_one+0x22d/0x340 [ 427.346501][T10975] ? __pfx___kernfs_new_node+0x10/0x10 [ 427.346524][T10975] ? lock_acquire+0x115/0x350 [ 427.346547][T10975] ? kernfs_root+0x1c/0x230 [ 427.346573][T10975] ? srso_alias_return_thunk+0x5/0xfbef5 [ 427.346599][T10975] ? kernfs_root+0x1c/0x230 [ 427.346622][T10975] ? kernfs_root+0x1c/0x230 [ 427.346642][T10975] ? kernfs_root+0x1c/0x230 [ 427.346670][T10975] kernfs_new_node+0xeb/0x140 [ 427.346699][T10975] __kernfs_create_file+0x4b/0x2e0 [ 427.346732][T10975] sysfs_add_file_mode_ns+0x237/0x300 [ 427.346767][T10975] sysfs_create_file_ns+0x12b/0x1b0 [ 427.346790][T10975] ? __pfx_sysfs_create_file_ns+0x10/0x10 [ 427.346808][T10975] ? srso_alias_return_thunk+0x5/0xfbef5 [ 427.346832][T10975] ? srso_alias_return_thunk+0x5/0xfbef5 [ 427.346857][T10975] ? srso_alias_return_thunk+0x5/0xfbef5 [ 427.346879][T10975] ? device_create_file+0xf4/0x1b0 [ 427.346902][T10975] device_add+0x432/0xb80 [ 427.346926][T10975] rfkill_register+0x170/0x9b0 [ 427.346949][T10975] nfc_register_device+0x13d/0x370 [ 427.346976][T10975] nci_register_device+0x8a2/0xa00 [ 427.347007][T10975] ? __pfx_nci_register_device+0x10/0x10 [ 427.347030][T10975] ? __raw_spin_lock_init+0x45/0x100 [ 427.347062][T10975] ? srso_alias_return_thunk+0x5/0xfbef5 [ 427.347084][T10975] ? __raw_spin_lock_init+0x45/0x100 [ 427.347115][T10975] ? srso_alias_return_thunk+0x5/0xfbef5 [ 427.347137][T10975] ? __init_waitqueue_head+0xa8/0x150 [ 427.347170][T10975] virtual_ncidev_open+0x129/0x1a0 [ 427.347198][T10975] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 427.347222][T10975] misc_open+0x2d5/0x350 [ 427.347254][T10975] chrdev_open+0x4d9/0x600 [ 427.347283][T10975] ? __pfx_chrdev_open+0x10/0x10 [ 427.347307][T10975] ? srso_alias_return_thunk+0x5/0xfbef5 [ 427.347330][T10975] ? fsnotify_open_perm_and_set_mode+0x135/0x6b0 [ 427.347354][T10975] ? devcgroup_check_permission+0x31/0x8f0 [ 427.347384][T10975] ? __pfx_chrdev_open+0x10/0x10 [ 427.347408][T10975] do_dentry_open+0x80e/0x1360 [ 427.347445][T10975] vfs_open_consume+0x4a/0x350 [ 427.347470][T10975] ? path_openat+0x16e1/0x20f0 [ 427.347495][T10975] path_openat+0x16fc/0x20f0 [ 427.347535][T10975] do_file_open+0x23e/0x4a0 [ 427.347563][T10975] ? __pfx_do_file_open+0x10/0x10 [ 427.347607][T10975] ? _raw_spin_unlock+0x28/0x50 [ 427.347634][T10975] ? srso_alias_return_thunk+0x5/0xfbef5 [ 427.347657][T10975] ? alloc_fd+0x6af/0x760 [ 427.347697][T10975] do_sys_openat2+0x115/0x200 [ 427.347724][T10975] ? srso_alias_return_thunk+0x5/0xfbef5 [ 427.347751][T10975] ? __se_sys_futex+0x3a8/0x450 [ 427.347771][T10975] ? __pfx_do_sys_openat2+0x10/0x10 [ 427.347804][T10975] ? rcu_is_watching+0x16/0xb0 [ 427.347832][T10975] ? srso_alias_return_thunk+0x5/0xfbef5 [ 427.347859][T10975] __x64_sys_openat+0x138/0x170 [ 427.347892][T10975] do_syscall_64+0x166/0x520 [ 427.347912][T10975] ? trace_irq_disable+0x3b/0x140 [ 427.347937][T10975] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 427.347962][T10975] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 427.347981][T10975] RIP: 0033:0x7fb334b9f559 [ 427.347999][T10975] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 427.348015][T10975] RSP: 002b:00007fb335a18028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 427.348034][T10975] RAX: ffffffffffffffda RBX: 00007fb334e25fa0 RCX: 00007fb334b9f559 [ 427.348048][T10975] RDX: 0000000000000002 RSI: 0000200000006a40 RDI: ffffffffffffff9c [ 427.348061][T10975] RBP: 00007fb334c36b20 R08: 0000000000000000 R09: 0000000000000000 [ 427.348073][T10975] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 427.348084][T10975] R13: 00007fb334e26038 R14: 00007fb334e25fa0 R15: 00007fff83552338 [ 427.348115][T10975] [ 428.136434][ T5628] Bluetooth: hci6: command tx timeout [ 428.454428][ T5638] Bluetooth: hci5: command tx timeout [ 428.761840][ T1005] bond0 (unregistering): Released all slaves [ 430.211805][ T5628] Bluetooth: hci6: command tx timeout [ 430.532545][ T5628] Bluetooth: hci5: command tx timeout [ 430.775391][T10953] rxe_eth0 speed is unknown, defaulting to 1000 [ 430.776567][T10832] bridge0: port 1(bridge_slave_0) entered blocking state [ 430.776653][T10832] bridge0: port 1(bridge_slave_0) entered disabled state [ 430.776769][T10832] bridge_slave_0: entered allmulticast mode [ 430.836331][T10832] bridge_slave_0: entered promiscuous mode [ 431.147724][T10832] bridge0: port 2(bridge_slave_1) entered blocking state [ 431.147821][T10832] bridge0: port 2(bridge_slave_1) entered disabled state [ 431.147952][T10832] bridge_slave_1: entered allmulticast mode [ 431.179137][T10832] bridge_slave_1: entered promiscuous mode [ 431.218066][ T5638] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 431.236973][ T5638] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 431.238564][ T5638] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 431.240544][ T5638] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 431.268513][T10986] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 431.284904][ T5638] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 431.367332][ T1005] hsr_slave_0: left promiscuous mode [ 431.369565][ T1005] hsr_slave_1: left promiscuous mode [ 431.410516][ T1005] veth1_macvtap: left promiscuous mode [ 431.410552][ T1005] veth0_macvtap: left promiscuous mode [ 431.410651][ T1005] veth1_vlan: left promiscuous mode [ 431.410706][ T1005] veth0_vlan: left promiscuous mode [ 431.856951][T11037] netlink: 88 bytes leftover after parsing attributes in process `syz.6.1479'. [ 431.884230][T11036] loop9: detected capacity change from 0 to 128 [ 432.146959][T10427] FAT-fs (loop9): error, corrupted directory (invalid entries) [ 432.147115][T10427] FAT-fs (loop9): error, corrupted directory (invalid entries) [ 432.292188][ T5628] Bluetooth: hci6: command tx timeout [ 433.099314][T11038] syzkaller1: entered promiscuous mode [ 433.099334][T11038] syzkaller1: entered allmulticast mode [ 433.160782][T10832] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 433.185710][T10832] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 433.332358][ T5628] Bluetooth: hci0: command tx timeout [ 433.688828][T10832] team0: Port device team_slave_0 added [ 433.691935][ T1005] IPVS: stop unused estimator thread 0... [ 433.839566][T10832] team0: Port device team_slave_1 added [ 434.090788][T10832] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 434.090804][T10832] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 434.090826][T10832] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 434.266702][ T1005] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 434.372491][ T5628] Bluetooth: hci6: command tx timeout [ 434.440144][T10832] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 434.440160][T10832] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 434.440183][T10832] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 434.753298][T11073] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1485'. [ 434.760658][ T1005] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 434.827822][T10901] bridge0: port 1(bridge_slave_0) entered blocking state [ 434.827916][T10901] bridge0: port 1(bridge_slave_0) entered disabled state [ 434.828047][T10901] bridge_slave_0: entered allmulticast mode [ 434.858745][T10901] bridge_slave_0: entered promiscuous mode [ 434.908191][ T5638] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 434.922362][ T5638] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 434.923012][ T5638] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 434.926488][ T5638] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 434.927015][ T5638] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 435.116731][ T1005] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 435.137873][T11083] netlink: 'syz.6.1486': attribute type 4 has an invalid length. [ 435.169241][T10901] bridge0: port 2(bridge_slave_1) entered blocking state [ 435.169364][T10901] bridge0: port 2(bridge_slave_1) entered disabled state [ 435.169502][T10901] bridge_slave_1: entered allmulticast mode [ 435.205960][T10901] bridge_slave_1: entered promiscuous mode [ 435.353645][T11027] rxe_eth0 speed is unknown, defaulting to 1000 [ 435.387767][T10832] hsr_slave_0: entered promiscuous mode [ 435.388594][T10832] hsr_slave_1: entered promiscuous mode [ 435.406043][T10832] debugfs: 'hsr0' already exists in 'hsr' [ 435.406062][T10832] Cannot create hsr debugfs directory [ 435.412077][ T5628] Bluetooth: hci0: command tx timeout [ 435.545004][T10901] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 435.667864][ T1005] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 435.872700][T10901] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 436.238098][T10901] team0: Port device team_slave_0 added [ 436.281820][ T5282] 8021q: adding VLAN 0 to HW filter on device eth11 [ 436.420567][T10901] team0: Port device team_slave_1 added [ 436.761104][T10901] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 436.761121][T10901] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 436.761157][T10901] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 436.818522][T10901] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 436.818537][T10901] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 436.818560][T10901] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 437.013337][ T5628] Bluetooth: hci3: command tx timeout [ 437.214997][T10953] bridge0: port 1(bridge_slave_0) entered blocking state [ 437.215082][T10953] bridge0: port 1(bridge_slave_0) entered disabled state [ 437.215187][T10953] bridge_slave_0: entered allmulticast mode [ 437.219817][T10953] bridge_slave_0: entered promiscuous mode [ 437.255676][T10953] bridge0: port 2(bridge_slave_1) entered blocking state [ 437.255791][T10953] bridge0: port 2(bridge_slave_1) entered disabled state [ 437.255898][T10953] bridge_slave_1: entered allmulticast mode [ 437.261923][T10953] bridge_slave_1: entered promiscuous mode [ 437.491866][ T5628] Bluetooth: hci0: command tx timeout [ 437.661767][T10901] hsr_slave_0: entered promiscuous mode [ 437.665745][T10901] hsr_slave_1: entered promiscuous mode [ 437.683700][T10901] debugfs: 'hsr0' already exists in 'hsr' [ 437.683716][T10901] Cannot create hsr debugfs directory [ 437.708638][T10953] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 437.730236][T10953] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 437.730284][T11076] rxe_eth0 speed is unknown, defaulting to 1000 [ 438.017062][ T1005] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 438.241111][T10832] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 438.355320][T10953] team0: Port device team_slave_0 added [ 438.383150][T11130] loop6: detected capacity change from 0 to 128 [ 438.568986][ T9541] FAT-fs (loop6): error, corrupted directory (invalid entries) [ 438.569152][ T9541] FAT-fs (loop6): error, corrupted directory (invalid entries) [ 438.608123][T10953] team0: Port device team_slave_1 added [ 438.718280][T10832] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 438.809508][ T1005] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 438.976586][T10832] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 439.022334][ T1005] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 439.060207][T10953] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 439.060221][T10953] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 439.060244][T10953] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 439.063837][ T5282] 8021q: adding VLAN 0 to HW filter on device eth12 [ 439.099385][ T5628] Bluetooth: hci3: command tx timeout [ 439.229456][T10953] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 439.229472][T10953] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 439.229495][T10953] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 439.334649][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.334696][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 439.357339][T10832] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 439.408556][ T1005] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 439.572808][ T5628] Bluetooth: hci0: command tx timeout [ 439.777390][T10953] hsr_slave_0: entered promiscuous mode [ 439.779711][T10953] hsr_slave_1: entered promiscuous mode [ 439.780276][T10953] debugfs: 'hsr0' already exists in 'hsr' [ 439.780292][T10953] Cannot create hsr debugfs directory [ 440.152434][ T5638] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 440.155287][ T5638] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 440.156098][ T5638] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 440.160926][ T5638] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 440.184631][ T5638] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 440.500765][T11027] bridge0: port 1(bridge_slave_0) entered blocking state [ 440.502171][T11027] bridge0: port 1(bridge_slave_0) entered disabled state [ 440.502296][T11027] bridge_slave_0: entered allmulticast mode [ 440.506430][T11027] bridge_slave_0: entered promiscuous mode [ 440.573208][ T1005] bridge_slave_1: left allmulticast mode [ 440.573230][ T1005] bridge_slave_1: left promiscuous mode [ 440.573378][ T1005] bridge0: port 2(bridge_slave_1) entered disabled state [ 440.609328][ T1005] bridge_slave_0: left allmulticast mode [ 440.609348][ T1005] bridge_slave_0: left promiscuous mode [ 440.626070][ T1005] bridge0: port 1(bridge_slave_0) entered disabled state [ 440.669794][ T1005] bridge_slave_1: left allmulticast mode [ 440.669818][ T1005] bridge_slave_1: left promiscuous mode [ 440.669979][ T1005] bridge0: port 2(bridge_slave_1) entered disabled state [ 440.696226][ T1005] bridge_slave_0: left allmulticast mode [ 440.696244][ T1005] bridge_slave_0: left promiscuous mode [ 440.696388][ T1005] bridge0: port 1(bridge_slave_0) entered disabled state [ 441.171936][ T5628] Bluetooth: hci3: command tx timeout [ 441.206366][ T1005] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 441.210226][ T1005] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 441.238738][ T1005] bond0 (unregistering): Released all slaves [ 441.529154][ T1005] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 441.548623][ T1005] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 441.551454][ T1005] bond0 (unregistering): Released all slaves [ 441.639090][T11027] bridge0: port 2(bridge_slave_1) entered blocking state [ 441.639190][T11027] bridge0: port 2(bridge_slave_1) entered disabled state [ 441.639292][T11027] bridge_slave_1: entered allmulticast mode [ 441.666222][T11027] bridge_slave_1: entered promiscuous mode [ 441.828202][ T5282] 8021q: adding VLAN 0 to HW filter on device eth13 [ 441.923145][T11027] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 442.055146][T10832] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 442.074903][T10832] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 442.081060][T11027] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 442.180463][T10832] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 442.199362][T10832] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 442.211542][ T5628] Bluetooth: hci1: command tx timeout [ 442.244109][T11027] team0: Port device team_slave_0 added [ 442.410579][T10832] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 442.424184][T10832] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 442.424927][T10832] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 442.427554][T10832] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 442.430655][T11027] team0: Port device team_slave_1 added [ 442.769282][T11140] rxe_eth0 speed is unknown, defaulting to 1000 [ 442.822844][T11027] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 442.822858][T11027] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 442.822881][T11027] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 442.831688][T11027] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 442.831701][T11027] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 442.831723][T11027] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 443.251437][ T5628] Bluetooth: hci3: command tx timeout [ 443.354036][T11076] bridge0: port 1(bridge_slave_0) entered blocking state [ 443.354177][T11076] bridge0: port 1(bridge_slave_0) entered disabled state [ 443.354290][T11076] bridge_slave_0: entered allmulticast mode [ 443.358991][T11076] bridge_slave_0: entered promiscuous mode [ 443.443572][T11027] hsr_slave_0: entered promiscuous mode [ 443.447538][T11027] hsr_slave_1: entered promiscuous mode [ 443.451202][T11027] debugfs: 'hsr0' already exists in 'hsr' [ 443.470354][T11027] Cannot create hsr debugfs directory [ 443.487001][T11076] bridge0: port 2(bridge_slave_1) entered blocking state [ 443.487084][T11076] bridge0: port 2(bridge_slave_1) entered disabled state [ 443.487201][T11076] bridge_slave_1: entered allmulticast mode [ 443.518357][T11076] bridge_slave_1: entered promiscuous mode [ 443.934047][T11076] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 443.957225][T11076] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 444.211175][ T5282] 8021q: adding VLAN 0 to HW filter on device eth14 [ 444.289130][T11076] team0: Port device team_slave_0 added [ 444.292240][ T5628] Bluetooth: hci1: command tx timeout [ 444.309609][T11076] team0: Port device team_slave_1 added [ 444.507026][T11076] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 444.507042][T11076] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 444.507065][T11076] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 444.573460][ T1005] hsr_slave_0: left promiscuous mode [ 444.574026][ T1005] hsr_slave_1: left promiscuous mode [ 444.574746][ T1005] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 444.574768][ T1005] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 444.575429][ T1005] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 444.575444][ T1005] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 444.579496][ T1005] hsr_slave_0: left promiscuous mode [ 444.580280][ T1005] hsr_slave_1: left promiscuous mode [ 444.581005][ T1005] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 444.581021][ T1005] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 444.655953][ T1005] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 444.655972][ T1005] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 444.686381][ T1005] veth1_macvtap: left promiscuous mode [ 444.686410][ T1005] veth0_macvtap: left promiscuous mode [ 444.686490][ T1005] veth1_vlan: left promiscuous mode [ 444.686559][ T1005] veth0_vlan: left promiscuous mode [ 444.687625][ T1005] veth1_macvtap: left promiscuous mode [ 444.687650][ T1005] veth0_macvtap: left promiscuous mode [ 444.687729][ T1005] veth1_vlan: left promiscuous mode [ 444.687791][ T1005] veth0_vlan: left promiscuous mode [ 445.068332][ T1005] team0 (unregistering): Port device team_slave_1 removed [ 445.089149][ T1005] team0 (unregistering): Port device team_slave_0 removed [ 445.410740][ T1005] team0 (unregistering): Port device team_slave_1 removed [ 445.434751][ T1005] team0 (unregistering): Port device team_slave_0 removed [ 445.595451][T11076] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 445.595483][T11076] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 445.595506][T11076] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 445.777369][T10901] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 445.797876][T10901] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 445.800248][T10901] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 445.821581][T10901] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 445.994163][T10901] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 446.016058][T10901] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 446.017148][T10901] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 446.043392][T10901] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 446.184075][T11076] hsr_slave_0: entered promiscuous mode [ 446.195429][T11076] hsr_slave_1: entered promiscuous mode [ 446.196087][T11076] debugfs: 'hsr0' already exists in 'hsr' [ 446.196103][T11076] Cannot create hsr debugfs directory [ 446.371876][ T5638] Bluetooth: hci1: command tx timeout [ 446.596077][T10832] 8021q: adding VLAN 0 to HW filter on device bond0 [ 446.649654][ T1005] IPVS: stop unused estimator thread 0... [ 446.989699][T10832] 8021q: adding VLAN 0 to HW filter on device team0 [ 447.106320][ T1005] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 447.254828][ T1005] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 447.305905][ T5282] 8021q: adding VLAN 0 to HW filter on device eth15 [ 447.307401][ T62] bridge0: port 1(bridge_slave_0) entered blocking state [ 447.307482][ T62] bridge0: port 1(bridge_slave_0) entered forwarding state [ 447.394629][ T1005] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 447.399865][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 447.399944][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 447.400557][T11140] bridge0: port 1(bridge_slave_0) entered blocking state [ 447.400644][T11140] bridge0: port 1(bridge_slave_0) entered disabled state [ 447.400746][T11140] bridge_slave_0: entered allmulticast mode [ 447.456851][T11140] bridge_slave_0: entered promiscuous mode [ 447.472965][T11140] bridge0: port 2(bridge_slave_1) entered blocking state [ 447.473048][T11140] bridge0: port 2(bridge_slave_1) entered disabled state [ 447.473152][T11140] bridge_slave_1: entered allmulticast mode [ 447.476474][T11140] bridge_slave_1: entered promiscuous mode [ 447.527118][ T1005] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 447.640865][T11140] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 447.689584][T11140] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 447.702151][T10953] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 447.705578][T10953] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 447.708264][T10953] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 447.738227][T10953] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 447.827943][T10953] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 447.838998][T10953] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 447.879479][T11140] team0: Port device team_slave_0 added [ 447.888573][T11140] team0: Port device team_slave_1 added [ 447.899626][T10953] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 447.913226][T10953] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 448.080736][T11140] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 448.080753][T11140] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 448.080780][T11140] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 448.173511][T10901] 8021q: adding VLAN 0 to HW filter on device bond0 [ 448.208807][T11140] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 448.208821][T11140] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 448.208864][T11140] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 448.301970][ T1005] bridge_slave_1: left allmulticast mode [ 448.301992][ T1005] bridge_slave_1: left promiscuous mode [ 448.302150][ T1005] bridge0: port 2(bridge_slave_1) entered disabled state [ 448.305421][ T1005] bridge_slave_0: left allmulticast mode [ 448.305438][ T1005] bridge_slave_0: left promiscuous mode [ 448.305591][ T1005] bridge0: port 1(bridge_slave_0) entered disabled state [ 448.453846][ T5628] Bluetooth: hci1: command tx timeout [ 448.513999][ T1005] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 448.516133][ T1005] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 448.518204][ T1005] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 448.519461][ T1005] bond0 (unregistering): Released all slaves [ 448.645881][T10901] 8021q: adding VLAN 0 to HW filter on device team0 [ 448.719884][T11140] hsr_slave_0: entered promiscuous mode [ 448.727935][T11140] hsr_slave_1: entered promiscuous mode [ 448.729462][T11140] debugfs: 'hsr0' already exists in 'hsr' [ 448.729478][T11140] Cannot create hsr debugfs directory [ 448.892429][ T5908] bridge0: port 1(bridge_slave_0) entered blocking state [ 448.892512][ T5908] bridge0: port 1(bridge_slave_0) entered forwarding state [ 449.070742][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 449.070834][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 449.790918][ T1005] hsr_slave_0: left promiscuous mode [ 449.798545][ T1005] hsr_slave_1: left promiscuous mode [ 449.801077][ T1005] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 449.801095][ T1005] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 449.826257][ T1005] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 449.826273][ T1005] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 449.852430][ T1005] veth1_macvtap: left promiscuous mode [ 449.852461][ T1005] veth0_macvtap: left promiscuous mode [ 449.852549][ T1005] veth1_vlan: left promiscuous mode [ 449.852603][ T1005] veth0_vlan: left promiscuous mode [ 450.343019][ T1005] team0 (unregistering): Port device team_slave_1 removed [ 450.375946][ T1005] team0 (unregistering): Port device team_slave_0 removed [ 450.650042][T10953] 8021q: adding VLAN 0 to HW filter on device bond0 [ 450.937824][T10953] 8021q: adding VLAN 0 to HW filter on device team0 [ 450.986365][T10832] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 451.045224][T11076] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 451.063954][T11076] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 451.067427][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 451.067506][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 451.126802][T11076] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 451.155572][T11076] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 451.183372][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 451.183453][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 451.205083][T11076] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 451.239065][T11076] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 451.268892][T11076] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 451.291186][T11076] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 451.621978][T11027] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 451.643214][T11027] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 451.651053][T11027] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 451.698910][T11027] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 451.810514][T11027] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 451.832872][T11027] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 451.863851][T11027] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 451.882971][T11027] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 452.614705][T11076] 8021q: adding VLAN 0 to HW filter on device bond0 [ 452.677786][T10832] veth0_vlan: entered promiscuous mode [ 452.827954][T10901] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 452.867908][T10832] veth1_vlan: entered promiscuous mode [ 452.895318][T11076] 8021q: adding VLAN 0 to HW filter on device team0 [ 452.992492][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 452.992590][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 453.057349][T11027] 8021q: adding VLAN 0 to HW filter on device bond0 [ 453.076041][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 453.076122][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 453.125655][T11140] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 453.147242][T11140] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 453.186980][T11140] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 453.203932][T11140] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 453.206827][T11140] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 453.234115][T11140] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 453.238055][T11140] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 453.268600][T11140] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 453.365147][T11027] 8021q: adding VLAN 0 to HW filter on device team0 [ 453.422458][T10832] veth0_macvtap: entered promiscuous mode [ 453.485547][T10832] veth1_macvtap: entered promiscuous mode [ 453.514772][ T5908] bridge0: port 1(bridge_slave_0) entered blocking state [ 453.514861][ T5908] bridge0: port 1(bridge_slave_0) entered forwarding state [ 453.547724][T10901] veth0_vlan: entered promiscuous mode [ 453.613207][ T5908] bridge0: port 2(bridge_slave_1) entered blocking state [ 453.613289][ T5908] bridge0: port 2(bridge_slave_1) entered forwarding state [ 453.706839][T10901] veth1_vlan: entered promiscuous mode [ 453.819644][T10832] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 453.909462][T10832] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 454.086615][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 454.086682][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 454.086730][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 454.086910][ T1005] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 454.146427][T10953] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 454.224201][T10901] veth0_macvtap: entered promiscuous mode [ 454.289121][T10901] veth1_macvtap: entered promiscuous mode [ 454.542448][T11140] 8021q: adding VLAN 0 to HW filter on device bond0 [ 454.614703][T10901] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 454.676599][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 454.676618][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 454.719910][T10901] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 454.817784][T11140] 8021q: adding VLAN 0 to HW filter on device team0 [ 454.926237][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 454.926320][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 454.990082][ T5907] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 454.990100][ T5907] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 455.008590][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 455.009938][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 455.009971][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 455.010002][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 455.050834][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 455.050915][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 455.520274][ T1005] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 455.520293][ T1005] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 455.796120][ T5905] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 455.796138][ T5905] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 456.073782][T11327] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1493'. [ 456.340439][T10953] veth0_vlan: entered promiscuous mode [ 456.435508][T10953] veth1_vlan: entered promiscuous mode [ 456.498177][T11336] netlink: 'syz.4.1494': attribute type 4 has an invalid length. [ 456.805239][T10953] veth0_macvtap: entered promiscuous mode [ 456.840220][T10953] veth1_macvtap: entered promiscuous mode [ 456.840411][T11343] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1495'. [ 456.980382][T10953] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 457.042687][T11076] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 457.070611][T10953] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 457.152384][ T12] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 457.153104][ T12] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 457.153138][ T12] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 457.153169][ T12] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 457.307480][T11351] loop3: detected capacity change from 0 to 128 [ 457.531124][T11027] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 457.637730][T11357] FAULT_INJECTION: forcing a failure. [ 457.637730][T11357] name failslab, interval 1, probability 0, space 0, times 0 [ 457.637825][T11357] CPU: 0 UID: 0 PID: 11357 Comm: syz.4.1498 Tainted: G Y syzkaller #0 PREEMPT(full) [ 457.637850][T11357] Tainted: [Y]=FORCED_BIND [ 457.637857][T11357] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 457.637868][T11357] Call Trace: [ 457.637875][T11357] [ 457.637883][T11357] dump_stack_lvl+0xe8/0x150 [ 457.637917][T11357] should_fail_ex+0x410/0x560 [ 457.637943][T11357] should_failslab+0xa8/0x100 [ 457.637970][T11357] __kmalloc_cache_noprof+0x9e/0x600 [ 457.637992][T11357] ? blkcg_css_alloc+0x6a/0xa80 [ 457.638008][T11357] ? blkcg_css_alloc+0x6a/0xa80 [ 457.638033][T11357] blkcg_css_alloc+0x6a/0xa80 [ 457.638049][T11357] ? srso_alias_return_thunk+0x5/0xfbef5 [ 457.638077][T11357] cgroup_apply_control_enable+0x5bb/0xda0 [ 457.638120][T11357] cgroup_mkdir+0x1220/0x14b0 [ 457.638157][T11357] ? __pfx_cgroup_mkdir+0x10/0x10 [ 457.638186][T11357] kernfs_iop_mkdir+0x213/0x360 [ 457.638217][T11357] vfs_mkdir+0x40e/0x630 [ 457.638247][T11357] filename_mkdirat+0x285/0x510 [ 457.638277][T11357] ? __pfx_filename_mkdirat+0x10/0x10 [ 457.638304][T11357] ? srso_alias_return_thunk+0x5/0xfbef5 [ 457.638326][T11357] ? do_getname+0x151/0x250 [ 457.638356][T11357] __se_sys_mkdirat+0x35/0x150 [ 457.638382][T11357] do_syscall_64+0x166/0x520 [ 457.638402][T11357] ? trace_irq_disable+0x3b/0x140 [ 457.638426][T11357] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 457.638451][T11357] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 457.638470][T11357] RIP: 0033:0x7f7a5a79f559 [ 457.638487][T11357] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 457.638502][T11357] RSP: 002b:00007f7a5b5e8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 457.638531][T11357] RAX: ffffffffffffffda RBX: 00007f7a5aa25fa0 RCX: 00007f7a5a79f559 [ 457.638545][T11357] RDX: 00000000000001ff RSI: 00002000000001c0 RDI: ffffffffffffff9c [ 457.638558][T11357] RBP: 00007f7a5a836b20 R08: 0000000000000000 R09: 0000000000000000 [ 457.638570][T11357] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 457.638581][T11357] R13: 00007f7a5aa26038 R14: 00007f7a5aa25fa0 R15: 00007ffc75a6be48 [ 457.638612][T11357] [ 457.758473][T10901] FAT-fs (loop3): error, corrupted directory (invalid entries) [ 457.758669][T10901] FAT-fs (loop3): error, corrupted directory (invalid entries) [ 458.030038][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 458.030057][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 458.498870][ T1005] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 458.498889][ T1005] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 458.850396][ T62] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 459.164486][ T62] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 459.396338][ T62] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 459.481206][T11140] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 459.565467][ T62] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 459.871014][T11076] veth0_vlan: entered promiscuous mode [ 459.929549][T11027] veth0_vlan: entered promiscuous mode [ 460.062954][T11140] veth0_vlan: entered promiscuous mode [ 460.084667][T11076] veth1_vlan: entered promiscuous mode [ 460.190298][ T62] bridge_slave_1: left allmulticast mode [ 460.190322][ T62] bridge_slave_1: left promiscuous mode [ 460.190489][ T62] bridge0: port 2(bridge_slave_1) entered disabled state [ 460.235982][ T62] bridge_slave_0: left allmulticast mode [ 460.236003][ T62] bridge_slave_0: left promiscuous mode [ 460.250525][ T62] bridge0: port 1(bridge_slave_0) entered disabled state [ 460.357143][T11393] loop5: detected capacity change from 0 to 512 [ 460.427046][T11393] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 460.427130][T11393] ext4 filesystem being mounted at /1/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 460.647359][ T5638] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 460.663943][ T5638] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 460.664497][ T5638] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 460.666626][ T5638] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 460.667168][ T5638] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 460.749397][T10953] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 460.959000][T11405] loop5: detected capacity change from 0 to 128 [ 461.117257][T10953] FAT-fs (loop5): error, corrupted directory (invalid entries) [ 461.117419][T10953] FAT-fs (loop5): error, corrupted directory (invalid entries) [ 461.230137][ T62] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 461.248489][ T62] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 461.249811][ T62] bond0 (unregistering): Released all slaves [ 461.433467][T11027] veth1_vlan: entered promiscuous mode [ 461.668354][T11140] veth1_vlan: entered promiscuous mode [ 462.343665][ T30] audit: type=1326 audit(1792835712.887:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11413 comm="syz.4.1511" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a5a79f559 code=0x7ffc0000 [ 462.343712][ T30] audit: type=1326 audit(1792835712.887:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11413 comm="syz.4.1511" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f7a5a79f559 code=0x7ffc0000 [ 462.343749][ T30] audit: type=1326 audit(1792835712.887:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11413 comm="syz.4.1511" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a5a79f559 code=0x7ffc0000 [ 462.343795][ T30] audit: type=1326 audit(1792835712.887:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11413 comm="syz.4.1511" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f7a5a75fd8e code=0x7ffc0000 [ 462.343832][ T30] audit: type=1326 audit(1792835712.887:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11413 comm="syz.4.1511" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f7a5a7a0857 code=0x7ffc0000 [ 462.343867][ T30] audit: type=1326 audit(1792835712.897:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11413 comm="syz.4.1511" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f7a5a79f559 code=0x7ffc0000 [ 462.343903][ T30] audit: type=1326 audit(1792835712.897:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11413 comm="syz.4.1511" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f7a5a7a0857 code=0x7ffc0000 [ 462.343939][ T30] audit: type=1326 audit(1792835712.897:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11413 comm="syz.4.1511" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f7a5a75fd8e code=0x7ffc0000 [ 462.343975][ T30] audit: type=1326 audit(1792835712.897:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11413 comm="syz.4.1511" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a5a79f559 code=0x7ffc0000 [ 462.344011][ T30] audit: type=1326 audit(1792835712.897:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11413 comm="syz.4.1511" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f7a5a75fd8e code=0x7ffc0000 [ 462.772640][ T5638] Bluetooth: hci5: command tx timeout [ 462.953392][T11027] veth0_macvtap: entered promiscuous mode [ 462.980210][T11027] veth1_macvtap: entered promiscuous mode [ 463.010151][T11076] veth0_macvtap: entered promiscuous mode [ 463.077061][T11076] veth1_macvtap: entered promiscuous mode [ 463.167647][T11140] veth0_macvtap: entered promiscuous mode [ 463.223650][T11027] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 463.248483][T11140] veth1_macvtap: entered promiscuous mode [ 463.275749][T11027] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 463.278246][T11076] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 463.352135][ T51] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 463.353826][ T51] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 463.353861][ T51] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 463.355166][T11076] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 463.488309][T11140] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 463.542286][ T5990] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 463.543745][ T5990] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 463.543785][ T5990] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 463.543816][ T5990] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 463.543847][ T5990] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 463.626503][T11140] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 463.786782][ T1021] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 463.787654][ T1021] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 463.882530][ T1021] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 463.884963][ T8872] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 464.190263][ T62] hsr_slave_0: left promiscuous mode [ 464.205722][ T62] hsr_slave_1: left promiscuous mode [ 464.206694][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 464.206710][ T62] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 464.209315][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 464.209332][ T62] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 464.266189][ T62] veth1_macvtap: left promiscuous mode [ 464.266220][ T62] veth0_macvtap: left promiscuous mode [ 464.266319][ T62] veth1_vlan: left promiscuous mode [ 464.266372][ T62] veth0_vlan: left promiscuous mode [ 464.577554][ T5628] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 464.589916][ T5628] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 464.590465][ T5628] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 464.617043][ T5628] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 464.618626][ T5628] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 464.853271][ T5638] Bluetooth: hci5: command tx timeout [ 465.120655][ T62] team0 (unregistering): Port device team_slave_1 removed [ 465.168884][ T62] team0 (unregistering): Port device team_slave_0 removed [ 465.524589][ T51] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 465.524608][ T51] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 465.718490][T11401] rxe_eth0 speed is unknown, defaulting to 1000 [ 465.865850][ T5990] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 465.865869][ T5990] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 466.077579][ T51] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 466.077598][ T51] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 466.279732][ T5908] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 466.279751][ T5908] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 466.528593][ T8872] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 466.528612][ T8872] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 466.692471][ T5638] Bluetooth: hci6: command tx timeout [ 466.932185][ T5638] Bluetooth: hci5: command tx timeout [ 466.940334][ T62] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 467.079700][T11477] loop8: detected capacity change from 0 to 512 [ 467.141165][T11477] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 467.159255][T11477] ext4 filesystem being mounted at /1/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 467.352521][T11027] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 467.521785][ T5908] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 467.521811][ T5908] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 467.729553][ T62] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 467.996897][ T62] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 468.237853][ T62] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 468.316788][T11434] rxe_eth0 speed is unknown, defaulting to 1000 [ 468.777660][ T5638] Bluetooth: hci6: command tx timeout [ 469.169230][ T5638] Bluetooth: hci5: command tx timeout [ 469.654185][T11526] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 469.715681][T11528] netlink: 'syz.4.1526': attribute type 10 has an invalid length. [ 469.827221][T11528] syz_tun: entered promiscuous mode [ 469.865288][T11528] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 469.942041][T11533] Bluetooth: MGMT ver 1.23 [ 470.039571][ T62] bridge_slave_1: left allmulticast mode [ 470.039595][ T62] bridge_slave_1: left promiscuous mode [ 470.039768][ T62] bridge0: port 2(bridge_slave_1) entered disabled state [ 470.106728][ T62] bridge_slave_0: left allmulticast mode [ 470.106750][ T62] bridge_slave_0: left promiscuous mode [ 470.126892][ T62] bridge0: port 1(bridge_slave_0) entered disabled state [ 470.211068][ T62] bridge_slave_1: left allmulticast mode [ 470.211091][ T62] bridge_slave_1: left promiscuous mode [ 470.228952][ T62] bridge0: port 2(bridge_slave_1) entered disabled state [ 470.252668][ T62] bridge_slave_0: left allmulticast mode [ 470.252688][ T62] bridge_slave_0: left promiscuous mode [ 470.252863][ T62] bridge0: port 1(bridge_slave_0) entered disabled state [ 470.279061][T11483] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 470.823160][T11548] FAULT_INJECTION: forcing a failure. [ 470.823160][T11548] name failslab, interval 1, probability 0, space 0, times 0 [ 470.823194][T11548] CPU: 0 UID: 0 PID: 11548 Comm: syz.7.1532 Tainted: G Y syzkaller #0 PREEMPT(full) [ 470.823219][T11548] Tainted: [Y]=FORCED_BIND [ 470.823226][T11548] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 470.823237][T11548] Call Trace: [ 470.823244][T11548] [ 470.823252][T11548] dump_stack_lvl+0xe8/0x150 [ 470.823285][T11548] should_fail_ex+0x410/0x560 [ 470.823312][T11548] should_failslab+0xa8/0x100 [ 470.823337][T11548] ? inet_twsk_alloc+0xe3/0x8d0 [ 470.823370][T11548] kmem_cache_alloc_noprof+0x9c/0x600 [ 470.823404][T11548] ? inet_twsk_alloc+0xe3/0x8d0 [ 470.823437][T11548] inet_twsk_alloc+0xe3/0x8d0 [ 470.823470][T11548] tcp_time_wait+0x5d/0xee0 [ 470.823494][T11548] tcp_rcv_state_process+0xbe1/0x48d0 [ 470.823524][T11548] ? srso_alias_return_thunk+0x5/0xfbef5 [ 470.823551][T11548] ? __pfx_tcp_rcv_state_process+0x10/0x10 [ 470.823585][T11548] ? srso_alias_return_thunk+0x5/0xfbef5 [ 470.823612][T11548] tcp_v6_do_rcv+0xf70/0x1cc0 [ 470.823649][T11548] ? __pfx_tcp_v6_do_rcv+0x10/0x10 [ 470.823675][T11548] __release_sock+0x1de/0x390 [ 470.823707][T11548] release_sock+0x190/0x260 [ 470.823734][T11548] ? __pfx_tcp_shutdown+0x10/0x10 [ 470.823758][T11548] inet_shutdown+0x2b1/0x390 [ 470.823780][T11548] __x64_sys_shutdown+0x13f/0x1a0 [ 470.823808][T11548] do_syscall_64+0x166/0x520 [ 470.823828][T11548] ? trace_irq_disable+0x3b/0x140 [ 470.823852][T11548] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 470.823877][T11548] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 470.823896][T11548] RIP: 0033:0x7f6600d9f559 [ 470.823912][T11548] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 470.823928][T11548] RSP: 002b:00007f6601c50028 EFLAGS: 00000246 ORIG_RAX: 0000000000000030 [ 470.823948][T11548] RAX: ffffffffffffffda RBX: 00007f6601025fa0 RCX: 00007f6600d9f559 [ 470.823961][T11548] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000003 [ 470.823972][T11548] RBP: 00007f6600e36b20 R08: 0000000000000000 R09: 0000000000000000 [ 470.823984][T11548] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 470.823995][T11548] R13: 00007f6601026038 R14: 00007f6601025fa0 R15: 00007fff3dceb048 [ 470.824025][T11548] [ 470.861131][ T5638] Bluetooth: hci6: command tx timeout [ 471.964515][ T62] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 471.970639][ T62] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 471.996222][ T62] bond0 (unregistering): Released all slaves [ 472.406023][ T62] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 472.423950][ T62] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 472.425803][ T62] bond0 (unregistering): Released all slaves [ 472.854690][T11566] syz.7.1538 (11566): /proc/11565/oom_adj is deprecated, please use /proc/11565/oom_score_adj instead. [ 472.931717][ T5638] Bluetooth: hci6: command tx timeout [ 473.038546][T11569] loop4: detected capacity change from 0 to 256 [ 473.326203][T11538] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 473.686970][T11401] bridge0: port 1(bridge_slave_0) entered blocking state [ 473.687063][T11401] bridge0: port 1(bridge_slave_0) entered disabled state [ 473.687189][T11401] bridge_slave_0: entered allmulticast mode [ 473.720028][T11401] bridge_slave_0: entered promiscuous mode [ 473.787377][T11401] bridge0: port 2(bridge_slave_1) entered blocking state [ 473.787463][T11401] bridge0: port 2(bridge_slave_1) entered disabled state [ 473.787580][T11401] bridge_slave_1: entered allmulticast mode [ 473.819318][T11401] bridge_slave_1: entered promiscuous mode [ 474.127263][T11401] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 474.159844][T11401] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 474.546003][T11401] team0: Port device team_slave_0 added [ 474.640400][T11401] team0: Port device team_slave_1 added [ 475.038918][T11401] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 475.038957][T11401] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 475.038979][T11401] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 475.122902][T11401] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 475.122918][T11401] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 475.122941][T11401] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 476.466940][T11579] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 476.644751][T11401] hsr_slave_0: entered promiscuous mode [ 476.664155][T11401] hsr_slave_1: entered promiscuous mode [ 476.666940][T11401] debugfs: 'hsr0' already exists in 'hsr' [ 476.666957][T11401] Cannot create hsr debugfs directory [ 477.666439][ T62] hsr_slave_0: left promiscuous mode [ 477.670694][ T62] hsr_slave_1: left promiscuous mode [ 477.683803][ T62] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 477.686047][ T62] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 477.726184][ T62] hsr_slave_0: left promiscuous mode [ 477.729323][ T62] hsr_slave_1: left promiscuous mode [ 477.730045][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 477.730062][ T62] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 477.761474][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 477.761491][ T62] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 477.803356][ T62] veth1_macvtap: left promiscuous mode [ 477.803389][ T62] veth0_macvtap: left promiscuous mode [ 477.803470][ T62] veth1_vlan: left promiscuous mode [ 477.803525][ T62] veth0_vlan: left promiscuous mode [ 477.811106][T11668] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1562'. [ 478.089367][ T5779] kernel read not supported for file /vga_arbiter (pid: 5779 comm: kworker/0:7) [ 479.063726][ T62] team0 (unregistering): Port device team_slave_1 removed [ 479.109716][ T62] team0 (unregistering): Port device team_slave_0 removed [ 479.377217][T11631] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 480.048769][ T62] team0 (unregistering): Port device team_slave_1 removed [ 480.109288][ T62] team0 (unregistering): Port device team_slave_0 removed [ 480.645090][T11673] syzkaller0: entered promiscuous mode [ 480.645112][T11673] syzkaller0: entered allmulticast mode [ 480.664782][T11434] bridge0: port 1(bridge_slave_0) entered blocking state [ 480.665004][T11434] bridge0: port 1(bridge_slave_0) entered disabled state [ 480.665115][T11434] bridge_slave_0: entered allmulticast mode [ 480.701788][T11434] bridge_slave_0: entered promiscuous mode [ 480.716810][T11434] bridge0: port 2(bridge_slave_1) entered blocking state [ 480.716894][T11434] bridge0: port 2(bridge_slave_1) entered disabled state [ 480.716995][T11434] bridge_slave_1: entered allmulticast mode [ 480.749874][T11434] bridge_slave_1: entered promiscuous mode [ 483.386514][T11434] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 483.413092][T11434] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 483.495337][T11769] FAULT_INJECTION: forcing a failure. [ 483.495337][T11769] name failslab, interval 1, probability 0, space 0, times 0 [ 483.495369][T11769] CPU: 0 UID: 0 PID: 11769 Comm: syz.0.1585 Tainted: G Y syzkaller #0 PREEMPT(full) [ 483.495393][T11769] Tainted: [Y]=FORCED_BIND [ 483.495401][T11769] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 483.495412][T11769] Call Trace: [ 483.495419][T11769] [ 483.495427][T11769] dump_stack_lvl+0xe8/0x150 [ 483.495461][T11769] should_fail_ex+0x410/0x560 [ 483.495488][T11769] should_failslab+0xa8/0x100 [ 483.495515][T11769] __kmalloc_cache_noprof+0x9e/0x600 [ 483.495537][T11769] ? blkcg_css_alloc+0x6a/0xa80 [ 483.495554][T11769] ? blkcg_css_alloc+0x6a/0xa80 [ 483.495578][T11769] blkcg_css_alloc+0x6a/0xa80 [ 483.495595][T11769] ? srso_alias_return_thunk+0x5/0xfbef5 [ 483.495623][T11769] cgroup_apply_control_enable+0x5bb/0xda0 [ 483.495671][T11769] cgroup_mkdir+0x1220/0x14b0 [ 483.495711][T11769] ? __pfx_cgroup_mkdir+0x10/0x10 [ 483.495739][T11769] kernfs_iop_mkdir+0x213/0x360 [ 483.495770][T11769] vfs_mkdir+0x40e/0x630 [ 483.495801][T11769] filename_mkdirat+0x285/0x510 [ 483.495835][T11769] ? __pfx_filename_mkdirat+0x10/0x10 [ 483.495862][T11769] ? srso_alias_return_thunk+0x5/0xfbef5 [ 483.495884][T11769] ? do_getname+0x151/0x250 [ 483.495914][T11769] __se_sys_mkdirat+0x35/0x150 [ 483.495941][T11769] do_syscall_64+0x166/0x520 [ 483.495961][T11769] ? trace_irq_disable+0x3b/0x140 [ 483.495985][T11769] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 483.496010][T11769] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 483.496029][T11769] RIP: 0033:0x7f1501b9f559 [ 483.496046][T11769] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 483.496062][T11769] RSP: 002b:00007f14ffdf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 483.496081][T11769] RAX: ffffffffffffffda RBX: 00007f1501e25fa0 RCX: 00007f1501b9f559 [ 483.496095][T11769] RDX: 00000000000001ff RSI: 00002000000001c0 RDI: ffffffffffffff9c [ 483.496109][T11769] RBP: 00007f1501c36b20 R08: 0000000000000000 R09: 0000000000000000 [ 483.496120][T11769] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 483.496132][T11769] R13: 00007f1501e26038 R14: 00007f1501e25fa0 R15: 00007fff4363f018 [ 483.496162][T11769] [ 484.026857][T11434] team0: Port device team_slave_0 added [ 484.041591][T11775] netlink: 28 bytes leftover after parsing attributes in process `syz.8.1587'. [ 484.043097][T11434] team0: Port device team_slave_1 added [ 484.049185][T11738] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 484.574325][T11434] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 484.574341][T11434] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 484.574363][T11434] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 484.574845][T11778] syzkaller0: entered promiscuous mode [ 484.574861][T11778] syzkaller0: entered allmulticast mode [ 484.736417][T11434] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 484.736433][T11434] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 484.736456][T11434] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 484.829746][T11790] loop7: detected capacity change from 0 to 128 [ 485.027638][ T62] IPVS: stop unused estimator thread 0... [ 485.109535][T11076] FAT-fs (loop7): error, corrupted directory (invalid entries) [ 485.137144][T11076] FAT-fs (loop7): error, corrupted directory (invalid entries) [ 485.362283][T11434] hsr_slave_0: entered promiscuous mode [ 485.372715][T11434] hsr_slave_1: entered promiscuous mode [ 485.373349][T11434] debugfs: 'hsr0' already exists in 'hsr' [ 485.373366][T11434] Cannot create hsr debugfs directory [ 485.750378][T11798] syzkaller0: entered promiscuous mode [ 485.750399][T11798] syzkaller0: entered allmulticast mode [ 487.060268][ T5628] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 487.071735][ T5628] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 487.072705][ T5628] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 487.074858][ T5628] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 487.075501][ T5628] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 489.173975][ T5638] Bluetooth: hci3: command tx timeout [ 489.646867][T11819] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 489.769319][T11863] loop4: detected capacity change from 0 to 128 [ 489.879379][T10832] FAT-fs (loop4): error, corrupted directory (invalid entries) [ 489.879601][T10832] FAT-fs (loop4): error, corrupted directory (invalid entries) [ 490.136880][ T5990] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 490.240039][T10832] bond0: (slave syz_tun): Releasing backup interface [ 490.816782][ T5990] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 491.253896][ T5638] Bluetooth: hci3: command tx timeout [ 491.296301][ T5990] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 491.527439][ T5990] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 491.927192][T11401] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 491.958638][T11401] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 491.977219][T11401] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 491.998848][T11401] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 492.074480][T11401] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 492.108079][T11401] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 492.108766][T11401] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 492.145231][T11401] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 492.419976][ T5628] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 492.433159][ T5628] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 492.434246][ T5628] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 492.436257][ T5628] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 492.437675][ T5628] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 492.533671][T11892] syzkaller0: Number of in use tx queues changed invalidating tc mappings. Priority traffic classification disabled! [ 492.850569][T11831] rxe_eth0 speed is unknown, defaulting to 1000 [ 493.006299][ T5990] bridge_slave_1: left allmulticast mode [ 493.006323][ T5990] bridge_slave_1: left promiscuous mode [ 493.006499][ T5990] bridge0: port 2(bridge_slave_1) entered disabled state [ 493.053759][ T5990] bridge_slave_0: left allmulticast mode [ 493.053781][ T5990] bridge_slave_0: left promiscuous mode [ 493.053960][ T5990] bridge0: port 1(bridge_slave_0) entered disabled state [ 493.276890][T11922] loop8: detected capacity change from 0 to 1024 [ 493.300280][T11922] EXT4-fs: Ignoring removed bh option [ 493.331621][ T5628] Bluetooth: hci3: command tx timeout [ 493.350498][T11922] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 493.685784][T11027] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 494.540091][ T5628] Bluetooth: hci4: command tx timeout [ 494.638185][ T5990] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 494.656168][ T5990] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 494.659634][ T5990] bond0 (unregistering): Released all slaves [ 495.411687][ T5628] Bluetooth: hci3: command tx timeout [ 495.618018][T11960] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1623'. [ 495.753731][T11965] loop8: detected capacity change from 0 to 512 [ 495.755905][T11965] ext4: Unknown parameter 'noacl' [ 496.981595][ T5628] Bluetooth: hci4: command tx timeout [ 499.011622][ T5628] Bluetooth: hci4: command tx timeout [ 500.774276][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 500.774325][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.092569][ T5628] Bluetooth: hci4: command tx timeout [ 501.786429][ T5990] hsr_slave_0: left promiscuous mode [ 501.797739][ T5990] hsr_slave_1: left promiscuous mode [ 501.798444][ T5990] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 501.798461][ T5990] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 501.829305][ T5990] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 501.829323][ T5990] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 501.875544][ T5990] veth1_macvtap: left promiscuous mode [ 501.875575][ T5990] veth0_macvtap: left promiscuous mode [ 501.875657][ T5990] veth1_vlan: left promiscuous mode [ 501.875711][ T5990] veth0_vlan: left promiscuous mode [ 502.732253][ T5990] team0 (unregistering): Port device team_slave_1 removed [ 502.765230][ T5990] team0 (unregistering): Port device team_slave_0 removed [ 503.017995][T11899] rxe_eth0 speed is unknown, defaulting to 1000 [ 503.099114][T11401] 8021q: adding VLAN 0 to HW filter on device bond0 [ 503.177832][T11401] 8021q: adding VLAN 0 to HW filter on device team0 [ 503.206715][ T5905] bridge0: port 1(bridge_slave_0) entered blocking state [ 503.206795][ T5905] bridge0: port 1(bridge_slave_0) entered forwarding state [ 503.297475][ T1005] bridge0: port 2(bridge_slave_1) entered blocking state [ 503.297558][ T1005] bridge0: port 2(bridge_slave_1) entered forwarding state [ 503.667981][ T5990] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 503.885879][ T5990] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 503.907525][T11831] bridge0: port 1(bridge_slave_0) entered blocking state [ 503.907618][T11831] bridge0: port 1(bridge_slave_0) entered disabled state [ 503.907729][T11831] bridge_slave_0: entered allmulticast mode [ 503.910526][T11831] bridge_slave_0: entered promiscuous mode [ 503.948071][T11831] bridge0: port 2(bridge_slave_1) entered blocking state [ 503.950704][T11831] bridge0: port 2(bridge_slave_1) entered disabled state [ 503.950814][T11831] bridge_slave_1: entered allmulticast mode [ 503.966514][T11831] bridge_slave_1: entered promiscuous mode [ 504.070022][T11831] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 504.111002][ T5990] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 504.159909][T11831] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 504.255565][ T5990] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 504.372319][T11831] team0: Port device team_slave_0 added [ 504.403510][T11831] team0: Port device team_slave_1 added [ 504.517211][T11831] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 504.517225][T11831] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 504.517247][T11831] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 504.641425][T11831] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 504.641440][T11831] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 504.641462][T11831] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 504.960658][T11994] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 505.076592][T11831] hsr_slave_0: entered promiscuous mode [ 505.091136][T11831] hsr_slave_1: entered promiscuous mode [ 505.101374][T11831] debugfs: 'hsr0' already exists in 'hsr' [ 505.101391][T11831] Cannot create hsr debugfs directory [ 505.185320][T11434] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 505.208999][T11434] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 505.224669][T11434] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 505.262237][T11434] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 505.320885][T12042] capability: warning: `syz.0.1632' uses deprecated v2 capabilities in a way that may be insecure [ 505.399292][ T5990] bridge_slave_1: left allmulticast mode [ 505.399314][ T5990] bridge_slave_1: left promiscuous mode [ 505.400501][ T5990] bridge0: port 2(bridge_slave_1) entered disabled state [ 505.428039][T12046] netlink: 32 bytes leftover after parsing attributes in process `syz.8.1633'. [ 505.459659][ T5990] bridge_slave_0: left allmulticast mode [ 505.459679][ T5990] bridge_slave_0: left promiscuous mode [ 505.459849][ T5990] bridge0: port 1(bridge_slave_0) entered disabled state [ 506.137524][ T5990] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 506.160879][ T5990] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 506.179514][ T5990] bond0 (unregistering): Released all slaves [ 506.216606][T11434] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 506.241922][T11434] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 506.479806][T11434] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 506.503220][T11434] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 508.740941][ T5990] hsr_slave_0: left promiscuous mode [ 508.754978][ T5990] hsr_slave_1: left promiscuous mode [ 508.755686][ T5990] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 508.755702][ T5990] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 508.761061][ T5990] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 508.761076][ T5990] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 508.817727][ T5990] veth1_macvtap: left promiscuous mode [ 508.817757][ T5990] veth0_macvtap: left promiscuous mode [ 508.817838][ T5990] veth1_vlan: left promiscuous mode [ 508.817896][ T5990] veth0_vlan: left promiscuous mode [ 509.408957][ T5990] team0 (unregistering): Port device team_slave_1 removed [ 509.445023][ T5990] team0 (unregistering): Port device team_slave_0 removed [ 509.720427][T11899] bridge0: port 1(bridge_slave_0) entered blocking state [ 509.720524][T11899] bridge0: port 1(bridge_slave_0) entered disabled state [ 509.720639][T11899] bridge_slave_0: entered allmulticast mode [ 509.747740][T11899] bridge_slave_0: entered promiscuous mode [ 509.859066][T11401] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 509.860084][T11899] bridge0: port 2(bridge_slave_1) entered blocking state [ 509.860167][T11899] bridge0: port 2(bridge_slave_1) entered disabled state [ 509.860270][T11899] bridge_slave_1: entered allmulticast mode [ 509.899707][T11899] bridge_slave_1: entered promiscuous mode [ 510.005296][T11899] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 510.087376][T11899] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 510.250009][T11899] team0: Port device team_slave_0 added [ 510.327912][T11899] team0: Port device team_slave_1 added [ 510.448403][T11899] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 510.448419][T11899] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 510.448441][T11899] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 510.555899][T11899] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 510.555917][T11899] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 510.555940][T11899] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 510.605199][T12090] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 510.968860][T11899] hsr_slave_0: entered promiscuous mode [ 510.978782][T11899] hsr_slave_1: entered promiscuous mode [ 510.988491][T11899] debugfs: 'hsr0' already exists in 'hsr' [ 510.988508][T11899] Cannot create hsr debugfs directory [ 511.010401][T11401] veth0_vlan: entered promiscuous mode [ 511.284045][T11434] 8021q: adding VLAN 0 to HW filter on device bond0 [ 511.299478][T12129] netlink: 32 bytes leftover after parsing attributes in process `syz.8.1644'. [ 511.457013][T11401] veth1_vlan: entered promiscuous mode [ 511.866292][T11434] 8021q: adding VLAN 0 to HW filter on device team0 [ 511.867208][T11831] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 511.902408][T11831] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 511.960323][T11831] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 511.989081][T11831] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 512.099693][T11831] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 512.123165][T11831] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 512.386987][ T1021] bridge0: port 1(bridge_slave_0) entered blocking state [ 512.387070][ T1021] bridge0: port 1(bridge_slave_0) entered forwarding state [ 512.418597][T11831] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 512.440400][T11831] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 512.737622][ T1021] bridge0: port 2(bridge_slave_1) entered blocking state [ 512.737705][ T1021] bridge0: port 2(bridge_slave_1) entered forwarding state [ 512.965936][T11401] veth0_macvtap: entered promiscuous mode [ 513.146949][T11401] veth1_macvtap: entered promiscuous mode [ 513.439521][T11401] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 513.518613][T11401] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 513.656397][ T5963] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 513.656466][ T5963] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 513.656526][ T5963] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 513.656667][ T5963] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 516.460521][T11831] 8021q: adding VLAN 0 to HW filter on device bond0 [ 516.844795][ T8872] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 516.844815][ T8872] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 516.904184][T12192] loop8: detected capacity change from 0 to 256 [ 516.955434][T11831] 8021q: adding VLAN 0 to HW filter on device team0 [ 517.055853][ T5963] bridge0: port 1(bridge_slave_0) entered blocking state [ 517.055937][ T5963] bridge0: port 1(bridge_slave_0) entered forwarding state [ 517.215625][ T5907] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 517.215644][ T5907] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 517.237986][ T5960] bridge0: port 2(bridge_slave_1) entered blocking state [ 517.238066][ T5960] bridge0: port 2(bridge_slave_1) entered forwarding state [ 517.297075][T11899] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 517.318597][T11899] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 517.337865][T11899] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 517.364179][T11899] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 517.403965][T11899] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 517.428817][T11899] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 517.474915][T11899] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 517.506768][T11899] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 517.637727][T12198] loop8: detected capacity change from 0 to 4096 [ 517.714514][T12198] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 518.618835][T11899] 8021q: adding VLAN 0 to HW filter on device bond0 [ 518.723626][T11899] 8021q: adding VLAN 0 to HW filter on device team0 [ 518.778975][ T5990] bridge0: port 1(bridge_slave_0) entered blocking state [ 518.779059][ T5990] bridge0: port 1(bridge_slave_0) entered forwarding state [ 518.823064][ T5960] bridge0: port 2(bridge_slave_1) entered blocking state [ 518.823168][ T5960] bridge0: port 2(bridge_slave_1) entered forwarding state [ 519.458340][T11434] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 519.795857][T11434] veth0_vlan: entered promiscuous mode [ 519.849739][T11027] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 519.883079][T11434] veth1_vlan: entered promiscuous mode [ 519.997005][T12250] loop2: detected capacity change from 0 to 256 [ 520.195241][T11434] veth0_macvtap: entered promiscuous mode [ 520.249843][T11434] veth1_macvtap: entered promiscuous mode [ 520.398020][T11434] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 520.460340][T11434] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 520.535520][ T5907] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 520.535891][ T5907] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 520.536128][ T5907] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 520.536388][ T5907] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 521.052306][ T5905] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 521.052324][ T5905] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 521.154484][T12270] loop2: detected capacity change from 0 to 512 [ 521.195439][T12270] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 521.195455][T12270] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 521.256906][T12270] EXT4-fs (loop2): 1 truncate cleaned up [ 521.285492][T12270] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 521.907365][ T5907] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 521.907384][ T5907] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 522.049339][T11401] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 522.238297][T11831] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 522.423156][T12291] faux_driver vgem: [drm] Unknown color mode 6; guessing buffer size. [ 522.857151][T12295] Oops: divide error: 0000 [#1] SMP KASAN NOPTI [ 522.863395][T12295] CPU: 0 UID: 0 PID: 12295 Comm: syz.1.1512 Tainted: G Y syzkaller #0 PREEMPT(full) [ 522.874395][T12295] Tainted: [Y]=FORCED_BIND [ 522.878798][T12295] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 522.888828][T12295] RIP: 0010:blk_stack_limits+0x1105/0x2d00 [ 522.894632][T12295] Code: 68 48 4c 89 e8 48 c1 e8 03 0f b6 04 18 84 c0 0f 85 7c 18 00 00 45 8b 65 00 c7 44 24 10 00 00 00 00 eb 5f 48 8b 44 24 48 31 d2 <41> f7 f5 44 01 e9 29 d1 89 c8 31 d2 41 f7 f5 48 8b 44 24 08 4c 8d [ 522.914217][T12295] RSP: 0018:ffffc9000390f4f8 EFLAGS: 00010246 [ 522.920261][T12295] RAX: 0000000000000000 RBX: dffffc0000000000 RCX: 0000000000000000 [ 522.928209][T12295] RDX: 0000000000000000 RSI: 00000000ffffffff RDI: 0000000000000000 [ 522.936155][T12295] RBP: ffffc9000390f850 R08: ffffc9000390f7e0 R09: 1ffffffff38040c4 [ 522.944104][T12295] R10: dffffc0000000000 R11: ffffffff88a97300 R12: 00000000ffffffff [ 522.952052][T12295] R13: 0000000000000000 R14: 1ffff92000721f0a R15: ffffc9000390f854 [ 522.960004][T12295] FS: 00007ff51dba96c0(0000) GS:ffff888123638000(0000) knlGS:0000000000000000 [ 522.968909][T12295] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 522.975487][T12295] CR2: 000000110c2c1658 CR3: 0000000054fde000 CR4: 0000000000350ef0 [ 522.983436][T12295] Call Trace: [ 522.986691][T12295] [ 522.989614][T12295] dm_calculate_queue_limits+0x70c/0x1510 [ 522.995333][T12295] ? __pfx_dm_calculate_queue_limits+0x10/0x10 [ 523.001481][T12295] ? kmem_cache_alloc_noprof+0x151/0x600 [ 523.007104][T12295] ? srso_alias_return_thunk+0x5/0xfbef5 [ 523.012718][T12295] ? kasan_save_free_info+0x40/0x50 [ 523.017940][T12295] ? srso_alias_return_thunk+0x5/0xfbef5 [ 523.023551][T12295] ? __kasan_mempool_poison_object+0x16e/0x1d0 [ 523.029692][T12295] ? srso_alias_return_thunk+0x5/0xfbef5 [ 523.035307][T12295] ? mempool_init_node+0x474/0x510 [ 523.040416][T12295] ? __pfx_bioset_init+0x10/0x10 [ 523.045338][T12295] ? srso_alias_return_thunk+0x5/0xfbef5 [ 523.050958][T12295] dm_setup_md_queue+0x199/0x4f0 [ 523.055878][T12295] ? dm_table_complete+0x1d84/0x22d0 [ 523.061151][T12295] ? __pfx_dm_setup_md_queue+0x10/0x10 [ 523.066616][T12295] ? __pfx_dm_table_complete+0x10/0x10 [ 523.072073][T12295] table_load+0x4fd/0x8a0 [ 523.076400][T12295] ? __pfx_table_load+0x10/0x10 [ 523.081236][T12295] ? srso_alias_return_thunk+0x5/0xfbef5 [ 523.086856][T12295] dm_ctl_ioctl+0x9ec/0xe10 [ 523.091344][T12295] ? seqcount_lockdep_reader_access+0xd4/0x100 [ 523.097484][T12295] ? __pfx_table_load+0x10/0x10 [ 523.102317][T12295] ? __pfx_dm_ctl_ioctl+0x10/0x10 [ 523.107347][T12295] ? __pfx_dm_ctl_ioctl+0x10/0x10 [ 523.112355][T12295] __se_sys_ioctl+0xfc/0x170 [ 523.116947][T12295] do_syscall_64+0x166/0x520 [ 523.121531][T12295] ? trace_irq_disable+0x3b/0x140 [ 523.126539][T12295] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 523.132586][T12295] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 523.138457][T12295] RIP: 0033:0x7ff51cd9f559 [ 523.142851][T12295] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 523.162435][T12295] RSP: 002b:00007ff51dba9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 523.170826][T12295] RAX: ffffffffffffffda RBX: 00007ff51d025fa0 RCX: 00007ff51cd9f559 [ 523.178780][T12295] RDX: 00002000000006c0 RSI: 00000000c138fd09 RDI: 0000000000000003 [ 523.186831][T12295] RBP: 00007ff51ce36b20 R08: 0000000000000000 R09: 0000000000000000 [ 523.194787][T12295] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 523.202731][T12295] R13: 00007ff51d026038 R14: 00007ff51d025fa0 R15: 00007ffd8877c4d8 [ 523.210691][T12295] [ 523.213686][T12295] Modules linked in: [ 523.220369][T12295] ---[ end trace 0000000000000000 ]--- SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 523.403351][T11899] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 524.654542][T12295] RIP: 0010:blk_stack_limits+0x1105/0x2d00 [ 524.654586][T12295] Code: 68 48 4c 89 e8 48 c1 e8 03 0f b6 04 18 84 c0 0f 85 7c 18 00 00 45 8b 65 00 c7 44 24 10 00 00 00 00 eb 5f 48 8b 44 24 48 31 d2 <41> f7 f5 44 01 e9 29 d1 89 c8 31 d2 41 f7 f5 48 8b 44 24 08 4c 8d [ 524.654606][T12295] RSP: 0018:ffffc9000390f4f8 EFLAGS: 00010246 [ 524.654623][T12295] RAX: 0000000000000000 RBX: dffffc0000000000 RCX: 0000000000000000 [ 524.654635][T12295] RDX: 0000000000000000 RSI: 00000000ffffffff RDI: 0000000000000000 [ 524.654647][T12295] RBP: ffffc9000390f850 R08: ffffc9000390f7e0 R09: 1ffffffff38040c4 [ 524.654661][T12295] R10: dffffc0000000000 R11: ffffffff88a97300 R12: 00000000ffffffff [ 524.654674][T12295] R13: 0000000000000000 R14: 1ffff92000721f0a R15: ffffc9000390f854 [ 524.654689][T12295] FS: 00007ff51dba96c0(0000) GS:ffff888123638000(0000) knlGS:0000000000000000 [ 524.654706][T12295] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 524.654718][T12295] CR2: 00007f881df30286 CR3: 0000000054fde000 CR4: 0000000000350ef0 [ 524.654735][T12295] Kernel panic - not syncing: Fatal exception [ 524.755270][T12295] Kernel Offset: disabled [ 524.759580][T12295] Rebooting in 86400 seconds..