last executing test programs: 7m33.232930404s ago: executing program 2 (id=819): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6d71b000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) r3 = syz_open_dev$vim2m(0x0, 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r3, 0xc0405602, &(0x7f0000000000)={0x21, 0x1, 0x1, "ff00000000000000050040000000000700ef3809000000000000000000000004", 0x494e4f4b}) sendto$inet6(0xffffffffffffffff, 0x0, 0x2c, 0x4004800, &(0x7f0000000180)={0xa, 0x4e22, 0x10003, @mcast2={0xff, 0x5}, 0xfffffffc}, 0x1c) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000100)={0x7, 'vlan0\x00', {0xa}, 0x1fb}) r4 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r4, &(0x7f0000001200)=[{{&(0x7f0000000280)={0x2, 0x4e20, @private=0xa010101}, 0x10, &(0x7f0000000980)=[{&(0x7f0000000200)="9c", 0x1}], 0x1}}, {{&(0x7f0000000880)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000900)=[{&(0x7f00000008c0)='w', 0x1}], 0x1}}], 0x2, 0x8080) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r4, 0x84, 0x19, &(0x7f0000000240)={r5, 0x1d07}, 0x8) r6 = getpid() syz_open_procfs$pagemap(r6, &(0x7f0000000000)) syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000540)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2008404, &(0x7f0000000200)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000", @ANYBLOB="999c07c03c5bc6a3d07b90faae21d196274f93a6593a9830472d5633665f2f51cfb24aaad481c74e142cd734ec6fd04935a94af71c756dbd6f5e2f39b2c4c30725d103d40d7e65129bb928ef73849dae618e438695e0a9078605ba418298145bf2fec11b0d16763288e7ecfe663aa5ff450d1e46d251160109c0378e04fe2629890c28366a6489e706ecf23195dc7f19e03fad", @ANYRESHEX, @ANYRESDEC, @ANYBLOB="c5ce1b9733c91520022860834995bd440de70a56f9b17205184d3be668bd36e2d9b2c62fb43e3a2a12e69d2eea113cf5ab1f668b2855d9a2bb426304b9bbf1debf4d593fe5"], 0x41, 0x2bd, &(0x7f00000007c0)="$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") syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x380c07b, 0x0, 0x1, 0x0, &(0x7f0000000140)) name_to_handle_at(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x442, 0x40) r7 = socket$netlink(0x10, 0x3, 0x9) bind$netlink(r7, &(0x7f0000000040)={0x10, 0x0, 0x25dfdbfb}, 0xc) bind$netlink(r7, &(0x7f0000000480)={0x10, 0x0, 0x25dfdbfb, 0x1}, 0xc) 7m30.885358273s ago: executing program 2 (id=824): sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002d00)={0x0, 0x0, 0x4f, 0x0, 0x8}, 0x28) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/zoneinfo\x00', 0x0, 0x0) setsockopt$inet6_IPV6_RTHDR(0xffffffffffffffff, 0x29, 0x39, 0x0, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) futex(&(0x7f0000000000)=0x1, 0x5, 0x0, 0x0, &(0x7f0000000140), 0xc4fbfffe) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() r0 = openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$FUSE_DIRENTPLUS(r0, &(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES64=0x3], 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000140)) syz_init_net_socket$llc(0x1a, 0x2, 0x0) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) mlock(&(0x7f0000c00000/0x400000)=nil, 0x400000) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mlock(&(0x7f0000c00000/0x400000)=nil, 0x400000) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x12, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000010000000000000000000000711206000000000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000300)={r3, 0xffffffffffffffff, 0x1d, 0x0, @void}, 0x10) 7m27.236674756s ago: executing program 2 (id=837): socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() syz_mount_image$vfat(&(0x7f0000003880), &(0x7f0000000e80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], 0xfd, 0x2c6, &(0x7f00000010c0)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x101042, 0x15) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000100), r2) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000600)={0x14, r3, 0x800, 0x20}, 0x14}, 0x1, 0x0, 0x0, 0x404c844}, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000100)=0x7) syz_genetlink_get_family_id$batadv(&(0x7f0000000280), r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) getgid() mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f0000000300)={0xa, 0x2, 0xfffffffc, @empty, 0x80000001}, 0x1c) r7 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_udp_SIOCINQ(r7, 0x541b, &(0x7f00000000c0)) setsockopt$inet6_tcp_int(r6, 0x6, 0x22, &(0x7f0000000000)=0x1, 0x4) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000005c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x538, 0x2c0, 0x398, 0x398, 0x398, 0x0, 0x468, 0x468, 0x468, 0x468, 0x468, 0x6, 0x0, {[{{@ipv6={@mcast1, @private1, [0xffffff00], [], 'nicvf0\x00', 'veth1_to_batadv\x00'}, 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x3a010000}}, @HL={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@broadcast, @ipv6=@empty, 0x39, 0x16}}}, {{@uncond, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@ah={{0x30}, {[0x4d4, 0x4d4], 0x0, 0x5, 0x1}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00', 0x0, {0x0}}}, {{@ipv6={@mcast1, @loopback, [], [], 'batadv_slave_0\x00', 'ipvlan1\x00', {}, {}, 0x2}, 0x0, 0xa8, 0xd8}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xffffffffffffffff}}}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'batadv0\x00', 'virt_wifi0\x00', {}, {0xff}}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x598) sendto$inet6(r6, &(0x7f0000000340)="fb", 0x1, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) syz_open_dev$usbmon(&(0x7f0000004bc0), 0x1, 0x50082) 7m25.131917144s ago: executing program 2 (id=843): openat$rfkill(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$key(0xf, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/functions/gser.usb0\x00', 0x1ff) symlinkat(&(0x7f00000002c0)='./config/usb_gadget/g1/functions/gser.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/configs/c.1/gser.usb0\x00') r3 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r3, &(0x7f0000000380)='dummy_udc.0', 0xb) 7m23.480498601s ago: executing program 2 (id=848): sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002d00)={0x0, 0x0, 0x4f, 0x0, 0x8}, 0x28) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/zoneinfo\x00', 0x0, 0x0) setsockopt$inet6_IPV6_RTHDR(0xffffffffffffffff, 0x29, 0x39, 0x0, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) futex(&(0x7f0000000000)=0x1, 0x5, 0x0, 0x0, &(0x7f0000000140), 0xc4fbfffe) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() r0 = openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$FUSE_DIRENTPLUS(r0, &(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES64=0x3], 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000140)) syz_init_net_socket$llc(0x1a, 0x2, 0x0) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) mlock(&(0x7f0000c00000/0x400000)=nil, 0x400000) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mlock(&(0x7f0000c00000/0x400000)=nil, 0x400000) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x12, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000010000000000000000000000711206000000000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000300)={r3, 0xffffffffffffffff, 0x1d, 0x0, @void}, 0x10) 7m18.547407246s ago: executing program 2 (id=858): openat$rfkill(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$key(0xf, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/functions/gser.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) symlinkat(&(0x7f00000002c0)='./config/usb_gadget/g1/functions/gser.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/configs/c.1/gser.usb0\x00') r4 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r4, &(0x7f0000000380)='dummy_udc.0', 0xb) r5 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r5, &(0x7f0000000400)='\n', 0x1) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@mpls_delroute={0x30, 0x19, 0x1, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1}, [@RTA_VIA={0x14, 0x12, {0xa, "f5d6a6c4b0639b11374230874419"}}]}, 0x30}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="bbbbbbbbbbbbc59a1b7447f53fe76bb1121121be6cc815dd6003000000206cfffe8000000000000000080000000000aa000c000000007349384346f85bc22c22054aad9b3be48b4a62590e51bf97e2431e1c1b5b2a1adf9da6ae757747180e8be950a5484efc9339223b13f0c6605cb51463e1afe677187bc8f04bb4803af5d35160e591d3194faf817715c2f4529a02ed32c7e7a8ce3f0f"], 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}]}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, 0x0) 7m3.532515659s ago: executing program 32 (id=858): openat$rfkill(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$key(0xf, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/functions/gser.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) symlinkat(&(0x7f00000002c0)='./config/usb_gadget/g1/functions/gser.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/configs/c.1/gser.usb0\x00') r4 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r4, &(0x7f0000000380)='dummy_udc.0', 0xb) r5 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r5, &(0x7f0000000400)='\n', 0x1) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@mpls_delroute={0x30, 0x19, 0x1, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1}, [@RTA_VIA={0x14, 0x12, {0xa, "f5d6a6c4b0639b11374230874419"}}]}, 0x30}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="bbbbbbbbbbbbc59a1b7447f53fe76bb1121121be6cc815dd6003000000206cfffe8000000000000000080000000000aa000c000000007349384346f85bc22c22054aad9b3be48b4a62590e51bf97e2431e1c1b5b2a1adf9da6ae757747180e8be950a5484efc9339223b13f0c6605cb51463e1afe677187bc8f04bb4803af5d35160e591d3194faf817715c2f4529a02ed32c7e7a8ce3f0f"], 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}]}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, 0x0) 6.879878649s ago: executing program 5 (id=3115): syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000007c0), 0x1, 0x73a, &(0x7f0000000800)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000f40)='./file2\x00', 0x321481, 0x3d) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, &(0x7f0000000a80)={0x1, 0x1, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./bus\x00', 0x30040a9, 0x0, 0xf, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x804008, &(0x7f0000000240)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_on}, {@lowerdir={'lowerdir', 0x3d, '.'}}]}) fchownat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xee01, 0x0, 0x1000) 6.676311283s ago: executing program 3 (id=3116): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000001700), 0xffffffffffffffff) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x48241, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x1100, 0x2}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r3 = dup3(r2, r1, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$PPPIOCGNPMODE(r3, 0xc008744c, &(0x7f0000000080)={0x2f}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) setreuid(0xee01, 0xee01) r4 = socket$inet(0x2b, 0x801, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r4, 0x0, 0x48b, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r5 = getpid() sched_setscheduler(r5, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f00003c7000/0x3000)=nil, 0x3000, 0xb635773f07ebbee8, 0x17, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$FBIOGET_CON2FBMAP(r0, 0x460f, &(0x7f0000000040)={0x29, 0x2}) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 6.638782875s ago: executing program 3 (id=3117): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, &(0x7f0000000080)={0x1f, @none}, 0x8) listen(r0, 0x4) shutdown(r0, 0x1) r1 = memfd_secret(0x80000) ioctl$sock_qrtr_TIOCOUTQ(r1, 0x5411, &(0x7f0000000000)) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@bridge_newvlan={0x18, 0x70, 0x1}, 0x18}}, 0x0) 6.551994502s ago: executing program 5 (id=3118): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) migrate_pages(r0, 0xd, &(0x7f0000000000)=0x4, &(0x7f00000000c0)=0x8) r1 = fspick(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000300)='ct\x00', &(0x7f0000000340)='#@]\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000180), 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) r6 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000540)='.pending_reads\x00', 0x1a10c1, 0x9c37611dc13d0db7) fchown(r6, 0x0, 0xee01) fchown(r6, 0x0, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)=@newtaction={0x78, 0x30, 0xb, 0x7, 0x0, {}, [{0x64, 0x1, [@m_ct={0x60, 0x3ffd, 0x0, 0x0, {{0x7}, {0x38, 0x2, 0x0, 0x1, [@TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @initdev={0xac, 0x1e, 0x0, 0x0}}, @TCA_CT_ACTION={0x6, 0x3, 0x19}, @TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @private0={0xfc, 0x0, '\x00', 0x1}}, @TCA_CT_NAT_PORT_MIN={0x6, 0xd, 0x4e24}, @TCA_CT_NAT_PORT_MAX={0x6, 0xe, 0x4e22}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x8890}, 0x40) 6.551759678s ago: executing program 3 (id=3119): syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) unshare(0x28000600) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x820}, 0x0, &(0x7f0000000240)={0x1f, 0x0, 0x8000000000000000}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) 6.495794495s ago: executing program 4 (id=3120): mmap(&(0x7f000029d000/0x1000)=nil, 0x1000, 0xb635773f06ebbee1, 0x10, 0xffffffffffffffff, 0x4000) io_pgetevents(0x0, 0x1, 0x0, 0x0, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) get_mempolicy(0x0, 0x0, 0x73e, &(0x7f0000433000/0x2000)=nil, 0x3) (async) map_shadow_stack(&(0x7f000003e000/0x800000)=nil, 0x800000, 0x1) r0 = shmget(0x0, 0x4000, 0x80, &(0x7f0000218000/0x4000)=nil) (async) r1 = socket$packet(0x11, 0x3, 0x300) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket(0x6, 0xa, 0x5) syz_genetlink_get_family_id$l2tp(&(0x7f0000000180), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=@newqdisc={0x74, 0x24, 0xe0b, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xffff, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x44, 0x2, {{0x1ff, 0x4, 0x0, 0x3, 0xfffffffd, 0x8}, [@TCA_NETEM_REORDER={0xc, 0x3, {0x1000, 0x8}}, @TCA_NETEM_LOSS={0x1c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0x0, 0x565d, 0x7, 0xffff0eb3, 0xa3}}]}]}}}]}, 0x74}}, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) sendto$packet(r1, &(0x7f00000002c0)="44c33b69ebc9e05e9bdec0c286dd", 0xe, 0x830, &(0x7f0000000440)={0x11, 0x0, r4, 0x1, 0x2, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x28}}, 0x14) (async) shmat(r0, &(0x7f00005c2000/0x2000)=nil, 0x1000) 5.451934743s ago: executing program 4 (id=3122): sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002d00)={0x0, 0x0, 0x4f, 0x0, 0x8}, 0x28) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/zoneinfo\x00', 0x0, 0x0) setsockopt$inet6_IPV6_RTHDR(0xffffffffffffffff, 0x29, 0x39, 0x0, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) futex(&(0x7f0000000000)=0x1, 0x5, 0x0, 0x0, &(0x7f0000000140), 0xc4fbfffe) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() r1 = openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$FUSE_DIRENTPLUS(r1, &(0x7f0000000080)=ANY=[@ANYRES64=0x3], 0x10) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000140)) syz_init_net_socket$llc(0x1a, 0x2, 0x0) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) mlock(&(0x7f0000c00000/0x400000)=nil, 0x400000) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mlock(&(0x7f0000c00000/0x400000)=nil, 0x400000) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x12, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000010000000000000000000000711206000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000300)={r4, 0xffffffffffffffff, 0x1d, 0x0, @void}, 0x10) 5.451478732s ago: executing program 3 (id=3123): openat$rfkill(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/functions/gser.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) r3 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r3, &(0x7f0000000380)='dummy_udc.0', 0xb) r4 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r4, &(0x7f0000000400)='\n', 0x1) 3.095735724s ago: executing program 5 (id=3124): mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x8, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="85000000070000006a0a00ff01010000260000000019e1b6950000000000000018100000", @ANYRES32, @ANYBLOB="100000250000002505000000000000009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x2, 0x3, &(0x7f0000000180)=""/149, 0x0, 0x2c, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x2c, 0x0, 0xffffffffffffffff, 0x1c}, 0x2d) 3.077768952s ago: executing program 4 (id=3125): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x12, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000040000000000000000000000711206000000000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.972116655s ago: executing program 5 (id=3129): socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x18, r1, 0x719, 0x0, 0x25dfdbfe, {0x8}, [@TIPC_NLA_LINK={0x4}]}, 0x18}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000000)={'netdevsim0\x00', &(0x7f00000002c0)=@ethtool_sfeatures={0x3b, 0x2, [{0xfe, 0x80000000}, {0xfffffff9}]}}) 2.971793323s ago: executing program 4 (id=3130): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_open_procfs(0x0, &(0x7f0000000400)='net/snmp6\x00') sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x502419}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, 0x1, 0x4, 0x401, 0x0, 0x0, {0x7, 0x0, 0x3}, [@NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x8001}, @NFULA_CFG_QTHRESH={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x4008000) r2 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x88440) syz_usb_disconnect(r2) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000440)={&(0x7f0000000180)="06d612131436b27160cb24acbbd7915cd6de8f026456267a0bcc10038e2f8b61236d640ad13fc1ccbb2cf48a60c40a9f9f4a6a1e9d015d319baaddf5729af48064daf2e2460ad205f79cf139fe3bb821aa3b29fbce388696a2b4b7abba765da90eb0d5f8dc0691db098d7d1715576a9c05f17cab12fa380de0c72617270467874fead0d98184b97ab28a378fda756d7c83d2e21b6385ae52dc619176c1a3f2fe2e16b70a54034643797dbc7ecea5608cbb76f2b995bd0e9e43605178bd6bd5d46485174f6db849ef8ecb02", &(0x7f0000000280)=""/4, &(0x7f00000002c0)="1e5dc9f3f0fa9abdee392deb70c6ee1dbf13a87fc0e57fd5e62799c96e1048ad3c5571c2d14cb043de15dcf6639cc265540c6cd0f431d1bebd05e7290745b102af1ec7cfc33146e84688caafb3045feb49a0539385abc075501ded0b7639c07782ac57f460dd4a0713bd362e9eb198cc4959187583c690db5b6ebd2a112310f6e1ff920ddec33c8cdd39", &(0x7f0000000380)="098fd2a8e74edbaca71de2dc5b4fe0825a2654adef465d857aca15fdcde8f794b8db7b3d240b825af3969d182831736cddc07abda9d9b905bfee7706248d73e983b8b0a8217ea813f35b62449af7bd8412cdf40ad8217670461bf80d0c31e958f3bbafa5ed454e", 0x5, r1}, 0x38) 2.970729429s ago: executing program 5 (id=3131): openat$rfkill(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$key(0xf, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/functions/gser.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) symlinkat(&(0x7f00000002c0)='./config/usb_gadget/g1/functions/gser.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/configs/c.1/gser.usb0\x00') r4 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r4, &(0x7f0000000380)='dummy_udc.0', 0xb) r5 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r5, &(0x7f0000000400)='\n', 0x1) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@mpls_delroute={0x30, 0x19, 0x1, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1}, [@RTA_VIA={0x14, 0x12, {0xa, "f5d6a6c4b0639b11374230874419"}}]}, 0x30}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="bbbbbbbbbbbbc59a1b7447f53fe76bb1121121be6cc815dd6003000000206cfffe8000000000000000080000000000aa000c000000007349384346f85bc22c22054aad9b3be48b4a62590e51bf97e2431e1c1b5b2a1adf9da6ae757747180e8be950a5484efc9339223b13f0c6605cb51463e1afe677187bc8f04bb4803af5d35160e591d3194faf817715c2f4529a02ed32c7e7a8ce3f0f"], 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}]}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, 0x0) 2.915029269s ago: executing program 1 (id=3132): unshare(0x2c020400) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSETATTR(r1, &(0x7f0000000000)={0x7, 0x1b, 0x4}, 0x7) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha1\x00'}, 0x58) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)={0x44, r4, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0x18, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8}]}]}]}]}, 0x44}}, 0x0) r5 = accept4$alg(r2, 0x0, 0x0, 0x80800) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r3, 0x4048587b, &(0x7f00000007c0)={{r2, &(0x7f0000000380)='sha1\x00', 0x0, &(0x7f00000003c0)={@align=0x4, {0x100, 0x1, 0xb, 0xffff}}, 0x40, &(0x7f0000000400)={@_ha_fsid}, &(0x7f0000000440)=0xb}, 0x2, &(0x7f0000000780)=[{0x3, 0x8, &(0x7f0000000480)='\xae%\xb8+\x00', &(0x7f00000004c0)="47cf250c0a8398256b6d9c46d4606d7b06f96f39d80dba738aafb4dd64712ba2fd9dc271f00d4b", 0x27, 0x5a}, {0x3, 0x3ff, &(0x7f0000000500)='syz_tun\x00', &(0x7f0000000680)="138a230f3e154e68a39eee9fb762131ea154fe675796a17c5ee93f0928ddb7c5f084b6ea27131f0ed12f2ad1e9cd7afdaad60663bd8ec2023cfadd95dc24355ca1c3839cae68266025ccb9457b00bf53d13249a9cef6cfcc8c4f43e4c5e8a13fa365b8b25b8b4c3f3cd5aeb56ccd4d0293167439ecb1af95df615d5f53fc8ae1be3d8e356b68d404d2198913117ef435bd2032668a0b0721e1cd6c20cfe454a54972a29d0e21f17852cdaf54f2883e03452b2c8cfe1def2a230919a958ab563a07ef5654b2", 0xc5, 0x8}]}) sendmsg$nl_route(r6, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000540)=@ipmr_delroute={0x48, 0x19, 0x0, 0x70bd2d, 0x25dfdbff, {0x80, 0x0, 0x0, 0x1, 0x0, 0x3, 0xfe, 0x5, 0x2a00}, [@RTA_ENCAP={0xc, 0x16, 0x0, 0x1, @LWTUNNEL_IP_TOS={0x5, 0x5, 0xe}}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x1}, @RTA_IP_PROTO={0x5, 0x1b, 0x1}, @RTA_TABLE={0x8}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x1}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x20048044) splice(r0, 0x0, r5, 0x0, 0x20000000000002, 0x2) openat$urandom(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) setsockopt$sock_void(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) accept4$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, &(0x7f0000000140)=0x1c, 0x80800) r7 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) r8 = syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007c, 0x80001) r9 = dup3(r7, r8, 0x0) ioctl$MON_IOCG_STATS(r9, 0xc0109207, &(0x7f0000000180)) 2.891810922s ago: executing program 1 (id=3133): r0 = syz_open_pts(0xffffffffffffffff, 0x84400) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000540)=0x4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000002c00)=@delchain={0x658, 0x65, 0x400, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x1, 0x2}, {0x0, 0x1}, {0x5}}, [@filter_kind_options=@f_bpf={{0x8}, {0x62c, 0x2, [@TCA_BPF_ACT={0x628, 0x1, [@m_bpf={0xfc, 0x11, 0x0, 0x0, {{0x8}, {0x38, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_FD={0x8}, @TCA_ACT_BPF_NAME={0x5, 0x6, '\x00'}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0xffffffff, 0x3, 0xffffffffffffffff, 0x10001, 0x6}}]}, {0x9d, 0x6, "a41f25d22b1bae1b6bfb4a42ad5ba9db462fca41280c331f630e2c9f0be1093117392575082305ebc27660464ef802792ce06133244235023f0f4882fc0a47f4d5e499a8857cd81b0e6fda422cbc53ad098872214190756df6bbd0e760248aa97e200702fd569bd27d4a70df1d4a123ffc42d2592c81751e15e260622f14aeaaca5dc8acab93651fdd1d5614d98f28fc76d402e1028d910282"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_xt={0x1bc, 0x5, 0x0, 0x0, {{0x7}, {0xa8, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0xa1, 0x6, {0x7, 'raw\x00', 0x7, 0x100, "5922b40f3b9231ba6e0c37dcda932a70335da3c7ed969269be350eede0a5fda559f5cb1d2965da3399446c574f0d7ed3b4810fc3efe0304c7bb1d3ed00a60a15519cae499f11ac626316a075637035e57ffcbd48e9b64edfcef2bcef40dc7e09e080d742bd84c2df1d8326e58c401490153b89d988036c"}}]}, {0xed, 0x6, "a5fd64840366fd7ad44f3f053221ded9ced495590e2bc8690a2765e56ded8425cb3eb0e04bbcfec50e639bf373167e617b24eccd260f28bb850873b1e2154b158987d6e585e10ffeaba32641bae47de041e1169d8e4a65b8ce3633a4469c93c5228320c572237d92a9ae6bbc2d2bd3a2d1e27de283017ecf9fca6b2cd8a119dee59702830717b694625f60f5c81f688775c5e292f76a0ffa39e1d2cabd639d1c111c01e0d2f9faa220154db33399242bca9f4fac65c74cb6264c28ac7a50037564c7b417fb61d617d212ab3243c30e0e82d9a12651b74553d539b991a302489af94626e5aac41c53b2"}, {0xc, 0x7, {0x1, 0xeb0757422c733451}}, {0xc, 0x8, {0x3, 0x3}}}}, @m_bpf={0xbc, 0x8, 0x0, 0x0, {{0x8}, {0x14, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x3}]}, {0x81, 0x6, "5d3aee85a6264cff4a2163adaec321e008985cfa435b8922eeb16f1932265618158a3fe72c442a68b182e8f673f9251a03dc831c5947be17ca906c3dcb99adb55bc5f0ad8886f235f45d7e29bb727715f2e7a3200ac63eb79f7a023835874514b60b0177c40370157c0c21b37875e7e4a2e75b3cc54be7d719fa695469"}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_xt={0x2b0, 0x13, 0x0, 0x0, {{0x7}, {0x248, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0xc9, 0x6, {0x9, 'nat\x00', 0xef, 0x7, "859b467c76be5255b2d4f6101cf6d6cb72c6b46512ecba82df24523b07075e859fd68154d7171a2ca3415ec79cc8ff85b058dae9f1d49e867787957d80637320c0378f6dd94a52c2fc850929bb787aaf6e604a1f57d44fa7775cf7a4a456f808f135c349fb4aefe7e2bc180a4665f5c90321659b9d7722c18c63d8c5ac244a1245b6673adcb794eced4f5288970c153c5b1cd1be29cd924c9446734f9e4568"}}, @TCA_IPT_TABLE={0x24, 0x1, 'security\x00'}, @TCA_IPT_TARG={0xc1, 0x6, {0x800, 'security\x00', 0x1, 0x7, "d5e486c3628c9e8c7a111651b758fe819fd071b9b7f85b09d69fe633753b56c91ebb716bda7cbe3f10db8feb7bc1aa6f7814145a0e3654c9f2b23521e6b910aa4c428134bb648bffc21f0a74a340b278cc3949b549385a407cd95c5697ed222bd3d4e4c2a0bf56c7937d87120b4f89a05bbde47670503d8a27ee2823502a90679b7fb497e236ea19c82fa844f28657c37f81f51a102feb"}}, @TCA_IPT_TARG={0x61, 0x6, {0x8, 'filter\x00', 0xd, 0x6ccd, "51100666dd78f1337c421065ba00caa97aaa8e1aa207a78c6d7e2a3e620334de1a64a8d40af7536c5a07a1997c6fd28e7ed1f866f9454e"}}, @TCA_IPT_INDEX={0x8, 0x3, 0x2}, @TCA_IPT_TABLE={0x24, 0x1, 'filter\x00'}]}, {0x41, 0x6, "3f664d65ad79178dad4d7815e4c50308bf9a3f35e2b90387936ecd02a67777e4d51dfa578f9f5021013f0c9a057bc84da50e9717ad55f6dba06dd18f82"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3}}}}]}]}}]}, 0x658}, 0x1, 0x0, 0x0, 0x2404c080}, 0x20000080) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$nfc_llcp(r1, &(0x7f0000000240)={0x27, 0x0, 0x0, 0x4, 0x0, 0x1, "e88509de7f1939e8abff005597c8ef039a5be42200", 0x13}, 0x60) listen(r1, 0x0) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r1, 0x118, 0x1, 0x0, 0x0) r2 = socket(0x10, 0x803, 0x0) sendto(r2, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) ioctl$TIOCMBIS(r0, 0x5416, &(0x7f0000000580)=0x2) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x9, 0x400000) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000040)={{{@in6=@private1, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in6=@ipv4={""/10, ""/2, @empty}}}, &(0x7f0000000300)=0xe8) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="7000000010000104feffffff0900000000000000", @ANYRES32=0x0, @ANYBLOB="72b8817dbcb5f31a140003006272696467655f736c6176655f3000003c001280110001006272696467655f736c617665000000002400058005001e000000000008002500020000000800", @ANYRES32=r5], 0x70}, 0x1, 0x0, 0x0, 0x20044014}, 0x4840) quotactl_fd$Q_QUOTAON(r3, 0xffffffff80000200, r4, &(0x7f0000000340)='./file0\x00') recvmmsg(r2, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 2.732029015s ago: executing program 1 (id=3134): r0 = socket$packet(0x11, 0x2, 0x300) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r3, &(0x7f0000000600)={0x10, 0x0, 0x0, 0x8822d55593a2179}, 0xc) r4 = socket$inet6(0xa, 0x3, 0x2f) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@loopback, 0x0, 0x0, 0xffff, 0x0, 0xa}, {}, {0x0, 0x3, 0x42}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x6c}, 0x0, @in6=@empty, 0x34ff, 0x0, 0x0, 0x3, 0x0, 0x0, 0x2}}, 0xe8) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback={0xfffffffd}}, 0x1c) 1.889668323s ago: executing program 5 (id=3135): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001700), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_GET(r1, &(0x7f0000001880)={0x0, 0x0, &(0x7f0000001840)={&(0x7f0000000540)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="1db126bd7000fedbdf250b0000004c000580070001"], 0x60}, 0x1, 0x0, 0x0, 0x10}, 0x4008144) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x4010, &(0x7f0000000000), 0x1, 0x44b, &(0x7f0000000640)="$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") ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) r4 = openat$tun(0xffffffffffffff9c, 0x0, 0x48241, 0x0) write$tun(r4, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r5 = getpid() sched_setscheduler(r5, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r7, 0x0, 0x0, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r8 = syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0x6d8b, 0x40, 0x2, 0x2c}, &(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r8, 0x18, &(0x7f0000000000)={0x8000000000000000, 0xffffffffffffffff, 0x2d, {0x7855, 0x8000000000000001}, 0x54}, 0x1) r9 = inotify_init1(0x0) inotify_add_watch(r9, &(0x7f0000000040)='./cgroup.cpu/cgroup.procs\x00', 0x94000516) r10 = pidfd_getfd(0xffffffffffffffff, r9, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f0000001fc0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001f80)={&(0x7f00000018c0)={0x68c, 0x0, 0x2, 0x70bd27, 0x25dfdbff, {}, [{{0x8}, {0x7c, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xe5a2}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r3}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}, {{0x8, 0x1, r3}, {0x130, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r3}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x100}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r3}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r3}}, {0x8}}}]}}, {{0x8}, {0x84, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r3}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r3}}}]}}, {{0x8}, {0x7c, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xffffff80}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}]}}, {{0x8}, {0xb4, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x10001}}, {0x8, 0x6, r3}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8001}}}]}}, {{0x8}, {0xac, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x1f0, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r3}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffeffff}}}, {0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0x3, 0x3, 0x5, 0x2}, {0x3, 0xe, 0x2, 0x8}, {0x7, 0x40, 0x6f, 0x4}]}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r3}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}]}}]}, 0x68c}, 0x1, 0x0, 0x0, 0x42}, 0x5) mkdirat(r10, 0x0, 0x3a) open_tree(r10, &(0x7f0000001280)='./cgroup.cpu/cgroup.procs/file0\x00', 0x80100) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0xa, 0x4, 0x9, 0x2, 0x0, 0x1, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180), &(0x7f0000000300), 0x105, r11}, 0x38) openat(0xffffffffffffffff, 0x0, 0x92462658b1035413, 0xed) 1.874370104s ago: executing program 0 (id=3136): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd2a, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@dev={0xac, 0x14, 0x14, 0x15}, 0x0, 0x5, 0x0, 0x0, 0xa, 0x180, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xac, 0xfff, 0x0, 0x0, 0xffffffffffffffff, 0x7fffffff}, {0x2, 0xa00, 0x40800000000000, 0x800000000000000}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in=@empty, 0x4d2, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3, 0x0, 0x49}]}]}, 0xfc}}, 0x8080) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x0, 0xc95a, 0xf, 0x8, 0x80, 0x4, 0x3, 0x80000000, 0x20000006, 0x4d, 0x9, 0x5d, 0xa, 0x5, 0xffff2d38, 0xffffff03, 0x6, 0x3, 0x0, 0xe, 0x7, 0x0, 0x7, 0x23c5b, 0x1, 0x20, 0xd, 0x7, 0x0, 0xffffffff, 0xe661, 0x3, 0x7, 0x7, 0x8, 0x4c74, 0x80000000, 0x242, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0x1, 0x7, 0x6, 0x3e, 0x4000008c, 0x7, 0x5, 0x0, 0x4, 0x4, 0x8008, 0x400, 0x80, 0x0, 0x5, 0x6, 0x6, 0x4, 0x1, 0xf], [0x10000007, 0x9, 0x8000012f, 0x2008004, 0x5, 0xfffffff3, 0x129432e6, 0xc8, 0xf9, 0xe, 0x2c0, 0x2, 0x9, 0xfffffffe, 0x3, 0x0, 0x0, 0x5, 0x2f, 0x0, 0x312, 0x78, 0xe, 0xfffffffe, 0x4, 0x7, 0x7fff, 0x5, 0x400, 0x401, 0x7, 0x1, 0xff, 0x5, 0x1000005, 0x5f2e, 0x1, 0x4e2, 0xc, 0x4, 0xb, 0x10000, 0x9, 0x8, 0x1009, 0x6, 0x47, 0x8000, 0x1, 0xfe000000, 0xfff7, 0x0, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0x94f, 0x48c93690, 0x42, 0x3], [0x5, 0x408, 0x7, 0x5, 0xfffffffe, 0x6, 0x8d2, 0x9, 0x5, 0x8002, 0x0, 0x5, 0xb, 0x4, 0x5, 0x7, 0x0, 0x1ef, 0x5, 0x5, 0x86, 0x3, 0x303c, 0x3e7, 0xf, 0x5, 0x2, 0x2, 0x3, 0x2, 0x4, 0x6d01, 0x3, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0xc8, 0xa2, 0x7, 0x9, 0x5, 0x6, 0xac8, 0xca, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0x0, 0x1, 0x1c, 0x7, 0x3, 0x3, 0x5, 0x4, 0x3c484551], [0x9, 0xbb33, 0x7, 0x0, 0x5, 0x93a, 0x5, 0x2, 0xfffffffc, 0xb9, 0xce7, 0x203, 0x2, 0x9, 0x5, 0x3, 0x101, 0x10000, 0xb8, 0x3, 0x29, 0xa620, 0x2, 0x5, 0x1, 0x7ff, 0x14c, 0x20a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x8, 0xc8, 0xfffffff9, 0xfffff000, 0x10000, 0x10001, 0x7e, 0x100, 0x9602, 0x7, 0xaf, 0x5, 0xfffffff9, 0x226, 0x5, 0x5, 0x8, 0x30b1d693, 0xb1f, 0x8, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd8, 0x200, 0xffff3441, 0xfff]}, 0x45c) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={0xffffffffffffffff, 0xc0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0}}, 0x10) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x3c1, 0xfffffffe, 0x298, 0x1d8, 0x12, 0x60d, 0x0, 0x202, 0x2d8, 0x2e8, 0x2e8, 0x2d8, 0x2c0, 0x4, 0x0, {[{{@ipv6={@private1, @remote, [], [], 'veth0_to_team\x00', 'macsec0\x00'}, 0x0, 0xa8, 0xf0}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0xa8, 0xd8}, @common=@inet=@SET2={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2f8) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000480)={0x40, r5, 0x1, 0x0, 0xffffffff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x2001, 0x56}}}}, [@NL80211_ATTR_TX_RATES={0x18, 0x10d, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x14, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0xd, 0x2, [{0x2, 0x6}, {0x1, 0x1}, {0x7, 0x7}, {0x3}, {0x1, 0x19}, {0x3, 0x2}, {0x5, 0x6}, {0x2, 0x16}, {0x2, 0x7}]}]}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000065}, 0x4008000) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000064010100000000000000000000000000fc01000000000000000000000000000000000000000000000a0000"], 0xfc}}, 0x0) r7 = socket$key(0xf, 0x3, 0x2) r8 = socket$key(0xf, 0x3, 0x2) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r9}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$key(r8, 0x0, 0x0) sendmsg$key(r7, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=@newlink={0x50, 0x10, 0xffffff1f, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4408}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE6={0x14, 0x7, @loopback}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 1.792444041s ago: executing program 1 (id=3137): r0 = syz_open_dev$vim2m(&(0x7f0000000140), 0xffffffffffffff89, 0x2) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)={0x20000001, 0x2000000000000000}) 1.720086043s ago: executing program 1 (id=3138): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect$uac2(0x6, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$sock_SIOCOUTQ(r2, 0x5411, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='timers\x00') close(r6) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f0000001800)=[{{&(0x7f00000000c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, &(0x7f0000001740)=[{&(0x7f0000000440)=""/248, 0xf8}, {&(0x7f0000000540)=""/13, 0xd}, {&(0x7f0000000580)=""/4096, 0x1000}, {&(0x7f0000001580)=""/132, 0x84}, {&(0x7f0000001640)=""/83, 0x53}, {&(0x7f0000000180)=""/102, 0x66}], 0x6, &(0x7f00000017c0)=""/64, 0x40}, 0x81}], 0x1, 0x2, 0x0) write$smackfs_cipsonum(0xffffffffffffffff, 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$kcm(0x10, 0x2, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r8, 0x8982, &(0x7f0000000380)={0x0, 'batadv0\x00', {0x805}}) sendmsg$nl_route_sched(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@newtfilter={0x24, 0x11, 0x1, 0x691522eb, 0x0, {0x0, 0x0, 0x74, r1, {0x10, 0x4}, {}, {0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x80}, 0x0) 1.719699689s ago: executing program 0 (id=3139): ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x3, &(0x7f0000000040)=@framed={{0x26, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x9c}}, 0x0}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xe, 0x8031, 0xffffffffffffffff, 0x3000) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000040)='./file0\x00', 0x381081a, &(0x7f00000010c0)=ANY=[], 0xfc, 0x2d5, &(0x7f0000000400)="$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") ptrace(0x10, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x193042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) pwrite64(r1, &(0x7f0000000140), 0x0, 0x10c6b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) write$FUSE_INIT(r0, &(0x7f0000000000)={0x50, 0x1040000}, 0x2000) 1.603790779s ago: executing program 0 (id=3140): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001c40)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x5, [@struct={0x3, 0x1, 0x0, 0xf, 0x0, 0x7, [{0x3, 0x801, 0x5}]}]}, {0x0, [0x4f, 0x0, 0x30]}}, &(0x7f00000006c0)=""/262, 0x35, 0x106, 0x9}, 0x28) r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'bridge_slave_1\x00', 0x0}) accept(r2, &(0x7f0000000300)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, &(0x7f0000000500)=0x80) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0xffffffffffffffdd, &(0x7f0000000280)={&(0x7f0000000180)=@setlink={0x30, 0x13, 0x1, 0x70bd29, 0x25dfd9fc, {0x0, 0x0, 0x0, r3, 0x12a06, 0x409}, [@IFLA_CARRIER={0x5, 0x21, 0xe}, @IFLA_MASTER={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x8804) mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x21c0, 0x103) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x158) getsockopt$IP6T_SO_GET_ENTRIES(r2, 0x29, 0x41, &(0x7f00000003c0)={'filter\x00', 0xae, "ddcfb37b9a3052c6ca963dc33dc54f44436ad3280c52c38307c024264c1ca52eab44100e2a3586e5ec8c114eb6b40067330e9c8701dbb4b5e47543d2f15b2898754aee26ee00a8ead775273920efcf71d8d955b62da68a004819795b36094f9f234dd0a24287e2af84ca22937ae798e07a943b1b48d3c4766e9f1be987073283b9427b4a7a1bd024535a4dc70597ac2ce6b6907b0e57d11eb12d9f4e4976555b0376849d0687de8c123321ffda0b"}, &(0x7f00000004c0)=0xd2) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f00000001c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@uuid_off}]}) setxattr$trusted_overlay_origin(&(0x7f0000000140)='./file0\x00', &(0x7f0000000200), 0x0, 0x0, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0x9) sendto$inet6(r2, &(0x7f00000005c0)="6ffa296bf4861f66bccb632900a537b0146e18dde3b765920c21e4e0f18921147aacc79e4228bcf7fcecdef7b52f09e687bb4d04bb2cac9496f53834737842f6308d44f6dc6af93b326d705a71feb4533cca451a7d6ea4942ecbd496f8fa1b91235a8d26f05b3e9db69893fecd4fe845b1abc16ea7875d762e43371f057b5a2c2c6287081b7b96798c9671c5d32e3117794f836a318699fe4691e66d63d4913698aad1582bda057d231337f241a78ce5", 0xb0, 0x40000, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f0000000b80), 0x4008, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@nfs_export_on}]}) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="1b0000001e0081054e81f782dbe8abd22d267e8e1c007c09e8fe08", 0x1b}], 0x1}, 0x40400) 1.569695972s ago: executing program 0 (id=3141): syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000280)='./file1\x00', 0x200c000, &(0x7f0000000080)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000"], 0x1, 0x2bc, &(0x7f0000000440)="$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") socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) fsmount(r1, 0x0, 0x80) syz_init_net_socket$llc(0x1a, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup(r4) syz_ublk_add_dev(r5, 0x0, r0, 0x0, &(0x7f0000000340)={0x2e, 0x40, 0x0, r2, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, r3, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000000)=@new_dev={0x4, 0xb19, 0x0, 0x0, 0x1000, 0xffffffff, 0xffffffffffffffff}}}, &(0x7f00000003c0)=0x0) syz_ublk_setup_queues(r5, r6, &(0x7f00000004c0)={0x0, 0xbd, 0x800, 0x1, 0x7f}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2ee7, 0x0, 0x3, 0x94, 0x0, r5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7835, 0x200, 0x1, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93e8, 0x2000, 0x800003, 0xa5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x820, 0x1, 0x100f5}}], 0x1, 0x0, 0x0) 1.280616817s ago: executing program 3 (id=3142): r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000000000)={&(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c, 0x0, 0x0, &(0x7f0000000100)=[@rthdr_2292={{0x28, 0x29, 0x5, {0x0, 0x2, 0x2, 0x1, 0x97, [@remote]}}}], 0x28}, 0x0) 1.220103829s ago: executing program 4 (id=3143): r0 = socket$nl_route(0x10, 0x3, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) mremap(&(0x7f000004f000/0x4000)=nil, 0x4000, 0x2000, 0x3, &(0x7f000016c000/0x2000)=nil) syz_mount_image$fuse(&(0x7f0000002040), 0x0, 0x524008, &(0x7f0000001400)=ANY=[], 0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000680)=ANY=[@ANYBLOB="540000001000010029bd7100ffdbdf25ffffff7f", @ANYRES32=0x0, @ANYBLOB="c5af07000f0e000014000300766c616e3000000000000000000000000a000100aaaa"], 0x54}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=@RTM_GETNSID={0x34, 0x5a, 0x10, 0x70bd2c, 0x25dfdbfb, {}, [@NETNSA_FD={0x8}, @NETNSA_NSID={0x8, 0x1, 0x4}, @NETNSA_PID={0x8}, @NETNSA_PID={0x8}]}, 0x34}}, 0x0) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000540)='/proc/sys/net/ipv4/tcp_mtu_probing\x00', 0x1, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0) connect$inet(r2, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmmsg$inet(r2, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000003ac0)="bb", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000004200)=[{&(0x7f00000001c0)="5a93f8b25eabafa3997fcf0068bfdf4b6db2997a52846a38dac5a545e912cd6b4ced1fedd92c1fa0afab1c4ee981049fde0806bb84989a69b540d6910ca212cb9b5e65f99979c194938a9b13f2f5adf765d69aca3eb5a439537d7333352252c8b35a6361182331ce07c70ec53d713563d033d0de532272a01e00"/139, 0xf111973a6f6ab58}], 0x1}}, {{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)="0000585195c18b846c30882ada03476b025b0800000000000000fa6303d4808d2b4955ecd0cfe25cd6425819161e305a8f387300895f1a75f5b7116d1e3ad0345ed0fc", 0x2}], 0x1}}], 0x3, 0x60cd894) socket$nl_route(0x10, 0x3, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x64) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'virt_wifi0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x4, 0x0, 0x300}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_LINKMODE={0x5, 0x11, 0x1}]}, 0x44}}, 0x0) 1.219732839s ago: executing program 3 (id=3144): r0 = syz_open_dev$vim2m(&(0x7f0000000140), 0xffffffffffffff89, 0x2) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000240)='./file0\x00', 0x2808080, &(0x7f00000000c0)={[{@uni_xlate}, {@numtail}, {@fat=@errors_remount}, {@uni_xlate}, {@rodir}, {@fat=@codepage={'codepage', 0x3d, '860'}}, {@fat=@showexec}, {@uni_xlate}, {@shortname_winnt}, {@fat=@nfs_stale_rw}, {@iocharset={'iocharset', 0x3d, 'koi8-r'}}, {@utf8}, {@numtail}]}, 0x1, 0x2ae, &(0x7f0000001980)="$eJzs3c+KI0UYAPCvJ52ZjArJwZMINujB07CzT7BBRljMSemDXlTcLMgkLEwgsCrGPXkXPPkOvoMP4MU38OBR8OYexJakO3+nM2wkZmX297vM11X1VVdV18xAoCufvD68fPBo9PDJV79Gq5XE0b24F0+T6MRRzH0TAMBt8rQo4o+iFHF8Y9t0Vl+0q6ujw4wQANi39f//AMCL4IMPP3qv2+tdvJ9lrYjht+M8iYhhMs7L+u7D+DwG0Y870Y6/IoqFMn7lfu8i0iybfxgwPo08Yvjxz9V19/eIWf55tKNzPf/d+72L86wUbw0n43x65+nPZryURHSLpOzobrTj1YiiGVUny/y7NfmRH8fbb/5Qjf/vfpxFO375LB7FIB7Muljmf32eZe8U3//5ZTmDPCKZjPOTWbulonGwhwIAAAAAAAAAAAAAAAAAAAAAwK13li10Vs/PmZ8GeHZWXz87H6hRcz5QdcLPZOV8nTtZls2P8RnnzSjz03gtjfS5Th4AAAAAAAAAAAAAAAAAAAD+J0aPv7j8dDDoX60FPxWbJTVB9UZ/VCXpSlW6XnVzPzXB5Y8Ru2c9SxCNamiD5Not5hN65g7T7Y1PdhnYaV0/cbRtDdNBlIP/bvdFeGOnCU6D4l+s83x3TTfJDY0bMXrcqt8kKzvztOrsajR7QKfbNu16UNQsXWNr1vGe9tjxy/vdtNMZNxeLud6mNX2SKyXNPf+mbEj+iz8/AAAAAAAAAAAAAAAAAADAiuVLv/Hbtconz2VIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHBwy+//XwTR2SzZDCZVcr8ufSM4uRrV3LZz4GkCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwy/0TAAD//0dFVzc=") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, 0x0) preadv(r5, &(0x7f0000002840)=[{&(0x7f0000000180)=""/212, 0xd4}], 0x1, 0x80, 0xe7) ioctl$vim2m_VIDIOC_QBUF(r5, 0xc058560f, &(0x7f0000000340)=@multiplanar_mmap={0x7, 0x1, 0x4, 0x1040, 0x5, {}, {0x4, 0xc, 0x81, 0xe, 0xb, 0x6, "9e3e517f"}, 0x10, 0x1, {&(0x7f00000002c0)=[{0x1, 0xe, {0xfffffffffffff562}, 0x2}, {0x8, 0xffff, {0x2}, 0x8001}]}, 0x6, 0x0, r1}) unshare(0x4000400) r6 = socket$netlink(0x10, 0x3, 0x8000000004) capset(&(0x7f0000000000)={0x20080522}, 0x0) writev(r6, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@nogrpid}, {@quota}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) pwrite64(r7, &(0x7f0000000140)='2', 0xfdef, 0xe7c) r8 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x133042, 0x19) sendfile(r8, r8, 0x0, 0x400) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000000)={0xe0002010}) 1.143485645s ago: executing program 4 (id=3145): syz_emit_vhci(&(0x7f0000000300)=ANY=[@ANYBLOB="6d0d328ca4491319e85fa62586c7d4e7e01670b180f89b6ecf853d0ff806bc17578c9c91869814952d6c9065e9ab0ca8af66cd4b92ee2176eba15de221fa9a70f3ad4ce85ece51be6416f12599b1a6d13938a94b33d65377448a6d2c319044309fd0b53b765d6fed0cb8a0b4ecb8ebc77fd3515471d0d224efc14ec80128a3df2170f55a4a730bb8bb75e6303606855ca6a72d26536eb1b1658499339db08629239e3a15672138607b248c7d26c372180dc6a07accee0f7c15cc4f52e8726cb47916fba2615ead157a3fe7c8242b5e679376bb71f405c6d018d59a0d372e7bd740a0149f64989da1470386d7a5453ee5", @ANYRES8=0x0], 0xf) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x4000000000091}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r3, &(0x7f0000000480)={0x2, 0x4e21, @multicast1}, 0x10) ptrace$peekuser(0x3, 0xffffffffffffffff, 0x81) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f00000013c0)=0x80000000001, 0x4) connect$inet6(r4, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r4, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x0) sendto$inet6(r4, &(0x7f00000002c0)="e8", 0xfffffffffffffd79, 0x2000c850, 0x0, 0x4d) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup3(r4, r5, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r5, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r5, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000001f00)=""/4106, 0xfffffffffffffccb, 0x0, 0x0}, &(0x7f0000000080)=0x40) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r6, 0x6, 0x23, &(0x7f0000000280)={&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0}, &(0x7f0000001380)=0x40) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0) recvmmsg(r3, 0x0, 0x0, 0x45833af92e4b39ff, 0x0) 1.127940262s ago: executing program 1 (id=3146): openat$rfkill(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$key(0xf, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/functions/gser.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) symlinkat(&(0x7f00000002c0)='./config/usb_gadget/g1/functions/gser.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/configs/c.1/gser.usb0\x00') r4 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r4, &(0x7f0000000380)='dummy_udc.0', 0xb) r5 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r5, &(0x7f0000000400)='\n', 0x1) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@mpls_delroute={0x30, 0x19, 0x1, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1}, [@RTA_VIA={0x14, 0x12, {0xa, "f5d6a6c4b0639b11374230874419"}}]}, 0x30}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="bbbbbbbbbbbbc59a1b7447f53fe76bb1121121be6cc815dd6003000000206cfffe8000000000000000080000000000aa000c000000007349384346f85bc22c22054aad9b3be48b4a62590e51bf97e2431e1c1b5b2a1adf9da6ae757747180e8be950a5484efc9339223b13f0c6605cb51463e1afe677187bc8f04bb4803af5d35160e591d3194faf817715c2f4529a02ed32c7e7a8ce3f0f"], 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}]}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, 0x0) 224.340808ms ago: executing program 0 (id=3147): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000035000000180001801400020073797a5f74756e00000000000000000018000280080002000a00000004000100080004"], 0x44}}, 0x0) 0s ago: executing program 0 (id=3148): add_key(&(0x7f0000000040)='dns_resolver\x00', &(0x7f0000000400)={'syz', 0x3}, &(0x7f0000000080)="000001", 0x3, 0xfffffffffffffffb) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe) syz_mount_image$fuse(0x0, 0x0, 0x3000009, 0x0, 0x1, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x26) syz_open_procfs(0x0, &(0x7f00000003c0)='net/snmp\x00') prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) execveat$binfmt(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x100) r3 = socket$inet(0x2, 0x2, 0x1) r4 = fspick(r3, &(0x7f0000000100)='./file1\x00', 0x0) fsmount(r4, 0x0, 0x80) bind$inet(r3, &(0x7f0000000000)={0x2, 0x6e24, @empty}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x12, 0x5, &(0x7f0000000040)=@framed={{0xb6, 0xa, 0x0, 0x0, 0x4000, 0x63, 0x11, 0x2c}, [@initr0]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x80) kernel console output (not intermixed with test programs): 1.670615][T13208] __alloc_skb+0x1f0/0x610 [ 501.670625][T13208] netlink_ack+0x11c/0x890 [ 501.670634][T13208] netlink_rcv_skb+0x21c/0x414 [ 501.670642][T13208] rtnetlink_rcv+0x28/0x38 [ 501.670650][T13208] netlink_unicast+0x600/0x7f8 [ 501.670658][T13208] netlink_sendmsg+0x648/0x948 [ 501.670666][T13208] __sock_sendmsg+0xc8/0x17c [ 501.670674][T13208] ____sys_sendmsg+0x3d0/0x6c8 [ 501.670683][T13208] ___sys_sendmsg+0x198/0x224 [ 501.670692][T13208] __sys_sendmsg+0x158/0x204 [ 501.670700][T13208] __arm64_sys_sendmsg+0x80/0x94 [ 501.670712][T13208] invoke_syscall+0x98/0x244 [ 501.670723][T13208] el0_svc_common+0xec/0x23c [ 501.670733][T13208] do_el0_svc+0x4c/0x5c [ 501.670743][T13208] el0_svc+0x64/0x260 [ 501.670754][T13208] el0t_64_sync_handler+0x48/0x148 [ 501.670763][T13208] el0t_64_sync+0x198/0x19c [ 501.894431][T13218] futex_wake_op: syz.1.2456 tries to shift op by -65; fix this program [ 503.025342][ T24] syz_tun: tun_net_xmit 110 [ 503.895388][ T24] syz_tun: tun_net_xmit 110 [ 504.232341][T13248] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2463'. [ 504.260161][T13248] 8021q: adding VLAN 0 to HW filter on device bond4 [ 504.290938][T13248] bond4: (slave gretap1): Enslaving as an active interface with an up link [ 505.418080][T13256] overlayfs: failed to resolve './cgroup': -2 [ 507.234166][T13280] netlink: 'syz.4.2473': attribute type 2 has an invalid length. [ 507.267169][T13280] : entered promiscuous mode [ 507.639684][ T4899] syz_tun: tun_net_xmit 110 [ 508.489518][ T1500] syz_tun: tun_net_xmit 110 [ 508.501888][ T4470] syz_tun: tun_net_xmit 110 [ 508.661985][ T4390] block nbd1: Possible stuck request 000000007ea73d32: control (read@0,4096B). Runtime 210 seconds [ 509.209987][ T4804] syz_tun: tun_net_xmit 110 [ 509.409118][ T4899] syz_tun: tun_net_xmit 110 [ 510.047176][ T1500] syz_tun: tun_net_xmit 110 [ 511.990584][ T30] audit: type=1326 audit(767.848:311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13369 comm="syz.4.2498" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffa1977fe8 code=0x0 [ 513.683763][T13343] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 514.503804][T13419] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2511'. [ 515.151946][ T1500] syz_tun: tun_net_xmit 110 [ 516.211371][ T1500] syz_tun: tun_net_xmit 110 [ 516.374840][T13451] FAULT_INJECTION: forcing a failure. [ 516.374840][T13451] name failslab, interval 1, probability 0, space 0, times 0 [ 516.374882][T13451] CPU: 0 UID: 0 PID: 13451 Comm: syz.5.2523 Tainted: G L syzkaller #0 PREEMPT [ 516.374899][T13451] Tainted: [L]=SOFTLOCKUP [ 516.374904][T13451] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 516.374911][T13451] Call trace: [ 516.374915][T13451] show_stack+0x2c/0x3c (C) [ 516.374937][T13451] __dump_stack+0x30/0x40 [ 516.374948][T13451] dump_stack_lvl+0xd8/0x12c [ 516.374959][T13451] dump_stack+0x1c/0x28 [ 516.374969][T13451] should_fail_ex+0x41c/0x590 [ 516.374980][T13451] should_failslab+0xc4/0x120 [ 516.374989][T13451] kmem_cache_alloc_noprof+0x94/0x5d8 [ 516.374999][T13451] do_getname+0x48/0x234 [ 516.375007][T13451] getname_flags+0x2c/0x3c [ 516.375014][T13451] do_sys_openat2+0xd0/0x1e8 [ 516.375024][T13451] do_sys_open+0xb0/0xe0 [ 516.375034][T13451] __arm64_sys_openat+0xa0/0xbc [ 516.375044][T13451] invoke_syscall+0x98/0x244 [ 516.375054][T13451] el0_svc_common+0xec/0x23c [ 516.375064][T13451] do_el0_svc+0x4c/0x5c [ 516.375073][T13451] el0_svc+0x64/0x260 [ 516.375084][T13451] el0t_64_sync_handler+0x48/0x148 [ 516.375094][T13451] el0t_64_sync+0x198/0x19c [ 516.456391][T13454] netlink: 'syz.5.2524': attribute type 21 has an invalid length. [ 516.456456][T13454] netlink: 144 bytes leftover after parsing attributes in process `syz.5.2524'. [ 516.492301][T13462] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2526'. [ 516.636482][T13456] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2525'. [ 519.671005][T13496] can: request_module (can-proto-0) failed. [ 519.707053][T13503] ip6gre1: entered allmulticast mode [ 521.014953][T13506] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 521.016139][T13506] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 521.656852][T13524] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 521.661561][T13524] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 521.769968][ T4725] Bluetooth: hci0: command 0x0406 tx timeout [ 521.851027][T13506] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 521.851060][T13506] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 521.943197][T13506] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 521.943229][T13506] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 521.971559][T13531] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2546'. [ 522.624326][ T1500] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 522.740358][ T24] syz_tun: tun_net_xmit 110 [ 522.810938][ T1500] usb 1-1: Dual-Role OTG device on HNP port [ 522.812319][ T1500] usb 1-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 7.02 [ 522.812350][ T1500] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 522.818389][ T1500] gspca_main: spca501-2.14.0 probing 0000:0000 [ 522.820069][ T1500] gspca_spca501: reg write: error -32 [ 522.821215][ T1500] spca501 1-1:1.0: Reg write failed for 0x02,0x0f,0x05 [ 522.822629][ T1500] spca501 1-1:1.0: probe with driver spca501 failed with error -22 [ 522.930075][T13546] futex_wake_op: syz.0.2551 tries to shift op by -65; fix this program [ 523.831212][ T1500] syz_tun: tun_net_xmit 110 [ 524.161749][ T1500] usb 1-1: USB disconnect, device number 16 [ 524.210196][T13569] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2558'. [ 525.049999][ T1500] syz_tun: tun_net_xmit 110 [ 525.130214][ T1500] syz_tun: tun_net_xmit 110 [ 525.193084][T13591] futex_wake_op: syz.3.2565 tries to shift op by -65; fix this program [ 526.081633][T13600] futex_wake_op: syz.3.2567 tries to shift op by -65; fix this program [ 526.818799][ T24] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 526.977430][ T24] usb 1-1: Dual-Role OTG device on HNP port [ 526.978750][ T24] usb 1-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 7.02 [ 526.978763][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 526.992157][ T24] gspca_main: spca501-2.14.0 probing 0000:0000 [ 526.993514][ T24] gspca_spca501: reg write: error -32 [ 526.993540][ T24] spca501 1-1:1.0: Reg write failed for 0x02,0x0f,0x05 [ 526.993574][ T24] spca501 1-1:1.0: probe with driver spca501 failed with error -22 [ 528.098762][ T30] audit: type=1326 audit(784.088:312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13641 comm="syz.0.2580" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff88777fe8 code=0x7ffc0000 [ 528.098820][ T30] audit: type=1326 audit(784.088:313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13641 comm="syz.0.2580" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff88777fe8 code=0x7ffc0000 [ 528.107635][ T30] audit: type=1326 audit(784.088:314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13641 comm="syz.0.2580" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff88777fe8 code=0x7ffc0000 [ 528.107673][ T30] audit: type=1326 audit(784.088:315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13641 comm="syz.0.2580" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff88777fe8 code=0x7ffc0000 [ 528.107706][ T30] audit: type=1326 audit(784.088:316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13641 comm="syz.0.2580" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=100 compat=0 ip=0xffff88777fe8 code=0x7ffc0000 [ 528.107729][ T30] audit: type=1326 audit(784.088:317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13641 comm="syz.0.2580" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff88777fe8 code=0x7ffc0000 [ 528.107749][ T30] audit: type=1326 audit(784.088:318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13641 comm="syz.0.2580" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff88777fe8 code=0x7ffc0000 [ 528.107768][ T30] audit: type=1326 audit(784.088:319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13641 comm="syz.0.2580" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff88777fe8 code=0x7ffc0000 [ 528.107787][ T30] audit: type=1326 audit(784.088:320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13641 comm="syz.0.2580" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff88777fe8 code=0x7ffc0000 [ 528.107805][ T30] audit: type=1326 audit(784.088:321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13641 comm="syz.0.2580" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=56 compat=0 ip=0xffff88777fe8 code=0x7ffc0000 [ 528.574850][T13656] FAULT_INJECTION: forcing a failure. [ 528.574850][T13656] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 528.574899][T13656] CPU: 0 UID: 0 PID: 13656 Comm: syz.4.2584 Tainted: G L syzkaller #0 PREEMPT [ 528.574924][T13656] Tainted: [L]=SOFTLOCKUP [ 528.574928][T13656] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 528.574934][T13656] Call trace: [ 528.574937][T13656] show_stack+0x2c/0x3c (C) [ 528.574958][T13656] __dump_stack+0x30/0x40 [ 528.574969][T13656] dump_stack_lvl+0xd8/0x12c [ 528.574979][T13656] dump_stack+0x1c/0x28 [ 528.574989][T13656] should_fail_ex+0x41c/0x590 [ 528.575000][T13656] should_fail+0x14/0x24 [ 528.575010][T13656] should_fail_usercopy+0x20/0x30 [ 528.575021][T13656] _inline_copy_from_user+0x3c/0x174 [ 528.575029][T13656] kstrtouint_from_user+0xcc/0x174 [ 528.575037][T13656] proc_fail_nth_write+0x9c/0x234 [ 528.575050][T13656] vfs_write+0x2a4/0xa0c [ 528.575062][T13656] ksys_write+0x12c/0x228 [ 528.575069][T13656] __arm64_sys_write+0x7c/0x90 [ 528.575077][T13656] invoke_syscall+0x98/0x244 [ 528.575087][T13656] el0_svc_common+0xec/0x23c [ 528.575097][T13656] do_el0_svc+0x4c/0x5c [ 528.575107][T13656] el0_svc+0x64/0x260 [ 528.575117][T13656] el0t_64_sync_handler+0x48/0x148 [ 528.575127][T13656] el0t_64_sync+0x198/0x19c [ 530.176125][ T4804] syz_tun: tun_net_xmit 90 [ 530.192165][T13694] netlink: 'syz.3.2596': attribute type 2 has an invalid length. [ 530.192204][T13694] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2596'. [ 530.195716][T13694] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 530.383013][ T4804] usb 1-1: USB disconnect, device number 17 [ 530.438788][ T9] syz_tun: tun_net_xmit 90 [ 530.514013][T13706] fuse: Unknown parameter '$Ž0x0000000000000005' [ 532.400618][T13755] netlink: 148 bytes leftover after parsing attributes in process `syz.3.2616'. [ 533.608470][ C0] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 533.653640][T13778] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 533.653662][T13778] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 533.653777][T13778] vhci_hcd vhci_hcd.0: Device attached [ 533.939678][ T4804] usb 2-1: new low-speed USB device number 2 using vhci_hcd [ 534.313890][T13779] vhci_hcd: connection reset by peer [ 534.317384][ T1070] vhci_hcd vhci_hcd.0: stop threads [ 534.318376][ T1070] vhci_hcd vhci_hcd.0: release socket [ 534.319633][ T1070] vhci_hcd vhci_hcd.0: disconnect device [ 534.590032][ T4899] syz_tun: tun_net_xmit 110 [ 534.949096][ T4899] syz_tun: tun_net_xmit 110 [ 535.684507][ T30] kauditd_printk_skb: 50 callbacks suppressed [ 535.684542][ T30] audit: type=1326 audit(525079.662:372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13801 comm="syz.3.2631" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffac777fe8 code=0x7ffc0000 [ 535.684573][ T30] audit: type=1326 audit(525079.662:373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13801 comm="syz.3.2631" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffac777fe8 code=0x7ffc0000 [ 535.684595][ T30] audit: type=1326 audit(525079.662:374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13801 comm="syz.3.2631" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffac777fe8 code=0x7ffc0000 [ 535.684616][ T30] audit: type=1326 audit(525079.662:375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13801 comm="syz.3.2631" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffac777fe8 code=0x7ffc0000 [ 535.684637][ T30] audit: type=1326 audit(525079.662:376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13801 comm="syz.3.2631" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=100 compat=0 ip=0xffffac777fe8 code=0x7ffc0000 [ 535.684655][ T30] audit: type=1326 audit(525079.662:377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13801 comm="syz.3.2631" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffac777fe8 code=0x7ffc0000 [ 535.684673][ T30] audit: type=1326 audit(525079.662:378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13801 comm="syz.3.2631" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffac777fe8 code=0x7ffc0000 [ 535.721115][ T30] audit: type=1326 audit(525079.692:379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13801 comm="syz.3.2631" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffac777fe8 code=0x7ffc0000 [ 535.721147][ T30] audit: type=1326 audit(525079.692:380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13801 comm="syz.3.2631" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffac777fe8 code=0x7ffc0000 [ 535.721164][ T30] audit: type=1326 audit(525079.692:381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13801 comm="syz.3.2631" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=29 compat=0 ip=0xffffac777fe8 code=0x7ffc0000 [ 535.829016][T13809] FAULT_INJECTION: forcing a failure. [ 535.829016][T13809] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 535.829057][T13809] CPU: 0 UID: 0 PID: 13809 Comm: syz.5.2635 Tainted: G L syzkaller #0 PREEMPT [ 535.829074][T13809] Tainted: [L]=SOFTLOCKUP [ 535.829078][T13809] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 535.829085][T13809] Call trace: [ 535.829089][T13809] show_stack+0x2c/0x3c (C) [ 535.829108][T13809] __dump_stack+0x30/0x40 [ 535.829120][T13809] dump_stack_lvl+0xd8/0x12c [ 535.829130][T13809] dump_stack+0x1c/0x28 [ 535.829139][T13809] should_fail_ex+0x41c/0x590 [ 535.829152][T13809] should_fail+0x14/0x24 [ 535.829161][T13809] should_fail_usercopy+0x20/0x30 [ 535.829172][T13809] _inline_copy_from_user+0x3c/0x174 [ 535.829183][T13809] copy_msghdr_from_user+0xb8/0x194 [ 535.829192][T13809] ___sys_sendmsg+0x14c/0x224 [ 535.829201][T13809] __sys_sendmsg+0x158/0x204 [ 535.829210][T13809] __arm64_sys_sendmsg+0x80/0x94 [ 535.829219][T13809] invoke_syscall+0x98/0x244 [ 535.829229][T13809] el0_svc_common+0xec/0x23c [ 535.829239][T13809] do_el0_svc+0x4c/0x5c [ 535.829248][T13809] el0_svc+0x64/0x260 [ 535.829259][T13809] el0t_64_sync_handler+0x48/0x148 [ 535.829269][T13809] el0t_64_sync+0x198/0x19c [ 536.006767][T13818] hsr0: entered promiscuous mode [ 536.012075][T13818] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2637'. [ 536.208900][T13821] fuse: Bad value for 'group_id' [ 536.208930][T13821] fuse: Bad value for 'group_id' [ 536.539280][T13830] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2641'. [ 537.777444][T13864] netlink: 80 bytes leftover after parsing attributes in process `syz.4.2653'. [ 537.777811][T13864] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 537.781823][T13864] tipc: Enabled bearer , priority 10 [ 538.736360][ T4390] block nbd1: Possible stuck request 000000007ea73d32: control (read@0,4096B). Runtime 240 seconds [ 539.415344][ T4804] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 539.480829][T13895] futex_wake_op: syz.0.2664 tries to shift op by -65; fix this program [ 540.085406][T13908] futex_wake_op: syz.5.2666 tries to shift op by -65; fix this program [ 540.513280][T13921] ip6erspan0: entered allmulticast mode [ 540.714366][T13924] wlan0 speed is unknown, defaulting to 1000 [ 541.042722][T13934] netlink: 'syz.0.2675': attribute type 2 has an invalid length. [ 541.042760][T13934] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2675'. [ 541.043862][T13934] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 541.232068][T13944] netlink: 63 bytes leftover after parsing attributes in process `syz.5.2678'. [ 541.946390][ T4899] syz_tun: tun_net_xmit 110 [ 542.384202][ T4899] syz_tun: tun_net_xmit 110 [ 542.846912][T13977] fuse: Unknown parameter 'fJÉVèd' [ 544.367872][T13995] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2691'. [ 544.367974][T13995] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2691'. [ 544.368099][T13995] netlink: 'syz.3.2691': attribute type 11 has an invalid length. [ 544.485047][T13995] syz_tun: tun_net_xmit 42 [ 544.485432][T13995] syz_tun: tun_net_xmit 42 [ 544.485751][T13995] syz_tun: tun_net_xmit 42 [ 544.486071][T13995] syz_tun: tun_net_xmit 42 [ 544.486452][T13995] syz_tun: tun_net_xmit 42 [ 544.486784][T13995] syz_tun: tun_net_xmit 42 [ 544.487111][T13995] syz_tun: tun_net_xmit 42 [ 544.487463][T13995] syz_tun: tun_net_xmit 42 [ 544.487777][T13995] syz_tun: tun_net_xmit 42 [ 544.488154][T13995] syz_tun: tun_net_xmit 42 [ 544.488502][T13995] syz_tun: tun_net_xmit 42 [ 544.488840][T13995] syz_tun: tun_net_xmit 42 [ 544.489230][T13995] syz_tun: tun_net_xmit 42 [ 544.489571][T13995] syz_tun: tun_net_xmit 42 [ 544.489886][T13995] syz_tun: tun_net_xmit 42 [ 544.490197][T13995] syz_tun: tun_net_xmit 42 [ 544.490520][T13995] syz_tun: tun_net_xmit 42 [ 544.490830][T13995] syz_tun: tun_net_xmit 42 [ 544.491152][T13995] syz_tun: tun_net_xmit 42 [ 544.491478][T13995] syz_tun: tun_net_xmit 42 [ 544.491830][T13995] syz_tun: tun_net_xmit 42 [ 544.492165][T13995] syz_tun: tun_net_xmit 42 [ 544.492506][T13995] syz_tun: tun_net_xmit 42 [ 544.492850][T13995] syz_tun: tun_net_xmit 42 [ 544.493174][T13995] syz_tun: tun_net_xmit 42 [ 544.493521][T13995] syz_tun: tun_net_xmit 42 [ 544.493868][T13995] syz_tun: tun_net_xmit 42 [ 544.494193][T13995] syz_tun: tun_net_xmit 42 [ 544.494522][T13995] syz_tun: tun_net_xmit 42 [ 544.494833][T13995] syz_tun: tun_net_xmit 42 [ 544.495160][T13995] syz_tun: tun_net_xmit 42 [ 544.495518][T13995] syz_tun: tun_net_xmit 42 [ 544.495817][T13995] syz_tun: tun_net_xmit 42 [ 544.496145][T13995] syz_tun: tun_net_xmit 42 [ 544.496448][T13995] syz_tun: tun_net_xmit 42 [ 544.496733][T13995] syz_tun: tun_net_xmit 42 [ 544.497051][T13995] syz_tun: tun_net_xmit 42 [ 544.497356][T13995] syz_tun: tun_net_xmit 42 [ 544.497717][T13995] syz_tun: tun_net_xmit 42 [ 544.498038][T13995] syz_tun: tun_net_xmit 42 [ 544.498301][T13995] syz_tun: tun_net_xmit 42 [ 544.498705][T13995] syz_tun: tun_net_xmit 42 [ 544.499027][T13995] syz_tun: tun_net_xmit 42 [ 544.499354][T13995] syz_tun: tun_net_xmit 42 [ 544.499645][T13995] syz_tun: tun_net_xmit 42 [ 544.499932][T13995] syz_tun: tun_net_xmit 42 [ 544.500228][T13995] syz_tun: tun_net_xmit 42 [ 544.500550][T13995] syz_tun: tun_net_xmit 42 [ 544.500839][T13995] syz_tun: tun_net_xmit 42 [ 544.501148][T13995] syz_tun: tun_net_xmit 42 [ 544.501442][T13995] syz_tun: tun_net_xmit 42 [ 544.501741][T13995] syz_tun: tun_net_xmit 42 [ 544.502103][T13995] syz_tun: tun_net_xmit 42 [ 544.502392][T13995] syz_tun: tun_net_xmit 42 [ 544.502697][T13995] syz_tun: tun_net_xmit 42 [ 544.502999][T13995] syz_tun: tun_net_xmit 42 [ 544.503352][T13995] syz_tun: tun_net_xmit 42 [ 544.503660][T13995] syz_tun: tun_net_xmit 42 [ 544.503968][T13995] syz_tun: tun_net_xmit 42 [ 544.504274][T13995] syz_tun: tun_net_xmit 42 [ 544.504571][T13995] syz_tun: tun_net_xmit 42 [ 544.504880][T13995] syz_tun: tun_net_xmit 42 [ 544.505201][T13995] syz_tun: tun_net_xmit 42 [ 544.505515][T13995] syz_tun: tun_net_xmit 42 [ 544.505839][T13995] syz_tun: tun_net_xmit 42 [ 544.506174][T13995] syz_tun: tun_net_xmit 42 [ 544.506513][T13995] syz_tun: tun_net_xmit 42 [ 544.506805][T13995] syz_tun: tun_net_xmit 42 [ 544.507127][T13995] syz_tun: tun_net_xmit 42 [ 544.507513][T13995] syz_tun: tun_net_xmit 42 [ 544.507814][T13995] syz_tun: tun_net_xmit 42 [ 544.508111][T13995] syz_tun: tun_net_xmit 42 [ 544.508489][T13995] syz_tun: tun_net_xmit 42 [ 544.508791][T13995] syz_tun: tun_net_xmit 42 [ 544.509104][T13995] syz_tun: tun_net_xmit 42 [ 544.509418][T13995] syz_tun: tun_net_xmit 42 [ 544.509721][T13995] syz_tun: tun_net_xmit 42 [ 544.510007][T13995] syz_tun: tun_net_xmit 42 [ 544.510297][T13995] syz_tun: tun_net_xmit 42 [ 544.510659][T13995] syz_tun: tun_net_xmit 42 [ 544.510991][T13995] syz_tun: tun_net_xmit 42 [ 544.511313][T13995] syz_tun: tun_net_xmit 42 [ 544.511604][T13995] syz_tun: tun_net_xmit 42 [ 544.511886][T13995] syz_tun: tun_net_xmit 42 [ 544.512186][T13995] syz_tun: tun_net_xmit 42 [ 544.512497][T13995] syz_tun: tun_net_xmit 42 [ 544.512768][T13995] syz_tun: tun_net_xmit 42 [ 544.513062][T13995] syz_tun: tun_net_xmit 42 [ 544.513352][T13995] syz_tun: tun_net_xmit 42 [ 544.513652][T13995] syz_tun: tun_net_xmit 42 [ 544.513937][T13995] syz_tun: tun_net_xmit 42 [ 544.514232][T13995] syz_tun: tun_net_xmit 42 [ 544.514550][T13995] syz_tun: tun_net_xmit 42 [ 544.514902][T13995] syz_tun: tun_net_xmit 42 [ 544.515241][T13995] syz_tun: tun_net_xmit 42 [ 544.515591][T13995] syz_tun: tun_net_xmit 42 [ 544.515875][T13995] syz_tun: tun_net_xmit 42 [ 544.516215][T13995] syz_tun: tun_net_xmit 42 [ 544.516492][T13995] syz_tun: tun_net_xmit 42 [ 544.516775][T13995] syz_tun: tun_net_xmit 42 [ 544.517065][T13995] syz_tun: tun_net_xmit 42 [ 544.517355][T13995] syz_tun: tun_net_xmit 42 [ 544.517680][T13995] syz_tun: tun_net_xmit 42 [ 544.517974][T13995] syz_tun: tun_net_xmit 42 [ 544.518275][T13995] syz_tun: tun_net_xmit 42 [ 544.518586][T13995] syz_tun: tun_net_xmit 42 [ 544.518896][T13995] syz_tun: tun_net_xmit 42 [ 544.519242][T13995] syz_tun: tun_net_xmit 42 [ 544.519613][T13995] syz_tun: tun_net_xmit 42 [ 544.519925][T13995] syz_tun: tun_net_xmit 42 [ 544.520216][T13995] syz_tun: tun_net_xmit 42 [ 544.520520][T13995] syz_tun: tun_net_xmit 42 [ 544.520777][T13995] syz_tun: tun_net_xmit 42 [ 544.521096][T13995] syz_tun: tun_net_xmit 42 [ 544.521448][T13995] syz_tun: tun_net_xmit 42 [ 544.521730][T13995] syz_tun: tun_net_xmit 42 [ 544.522038][T13995] syz_tun: tun_net_xmit 42 [ 544.522333][T13995] syz_tun: tun_net_xmit 42 [ 544.522628][T13995] syz_tun: tun_net_xmit 42 [ 544.522927][T13995] syz_tun: tun_net_xmit 42 [ 544.523346][T13995] syz_tun: tun_net_xmit 42 [ 544.523668][T13995] syz_tun: tun_net_xmit 42 [ 544.523977][T13995] syz_tun: tun_net_xmit 42 [ 544.524264][T13995] syz_tun: tun_net_xmit 42 [ 544.524588][T13995] syz_tun: tun_net_xmit 42 [ 544.524925][T13995] syz_tun: tun_net_xmit 42 [ 544.525263][T13995] syz_tun: tun_net_xmit 42 [ 544.525555][T13995] syz_tun: tun_net_xmit 42 [ 544.525871][T13995] syz_tun: tun_net_xmit 42 [ 544.526178][T13995] syz_tun: tun_net_xmit 42 [ 544.526508][T13995] syz_tun: tun_net_xmit 42 [ 544.526818][T13995] syz_tun: tun_net_xmit 42 [ 544.527201][T13995] syz_tun: tun_net_xmit 42 [ 544.527502][T13995] syz_tun: tun_net_xmit 42 [ 544.527796][T13995] syz_tun: tun_net_xmit 42 [ 544.528122][T13995] syz_tun: tun_net_xmit 42 [ 544.528462][T13995] syz_tun: tun_net_xmit 42 [ 544.528743][T13995] syz_tun: tun_net_xmit 42 [ 544.529052][T13995] syz_tun: tun_net_xmit 42 [ 544.529404][T13995] syz_tun: tun_net_xmit 42 [ 544.529693][T13995] syz_tun: tun_net_xmit 42 [ 544.529988][T13995] syz_tun: tun_net_xmit 42 [ 544.530296][T13995] syz_tun: tun_net_xmit 42 [ 544.530604][T13995] syz_tun: tun_net_xmit 42 [ 544.530895][T13995] syz_tun: tun_net_xmit 42 [ 544.531208][T13995] syz_tun: tun_net_xmit 42 [ 544.531524][T13995] syz_tun: tun_net_xmit 42 [ 544.531808][T13995] syz_tun: tun_net_xmit 42 [ 544.532122][T13995] syz_tun: tun_net_xmit 42 [ 544.532458][T13995] syz_tun: tun_net_xmit 42 [ 544.532790][T13995] syz_tun: tun_net_xmit 42 [ 544.533166][T13995] syz_tun: tun_net_xmit 42 [ 544.533497][T13995] syz_tun: tun_net_xmit 42 [ 544.533844][T13995] syz_tun: tun_net_xmit 42 [ 544.534153][T13995] syz_tun: tun_net_xmit 42 [ 544.534484][T13995] syz_tun: tun_net_xmit 42 [ 544.534801][T13995] syz_tun: tun_net_xmit 42 [ 544.535103][T13995] syz_tun: tun_net_xmit 42 [ 544.535404][T13995] syz_tun: tun_net_xmit 42 [ 544.535697][T13995] syz_tun: tun_net_xmit 42 [ 544.535988][T13995] syz_tun: tun_net_xmit 42 [ 544.536259][T13995] syz_tun: tun_net_xmit 42 [ 544.536624][T13995] syz_tun: tun_net_xmit 42 [ 544.536950][T13995] syz_tun: tun_net_xmit 42 [ 544.537304][T13995] syz_tun: tun_net_xmit 42 [ 544.537600][T13995] syz_tun: tun_net_xmit 42 [ 544.537882][T13995] syz_tun: tun_net_xmit 42 [ 544.538200][T13995] syz_tun: tun_net_xmit 42 [ 544.538511][T13995] syz_tun: tun_net_xmit 42 [ 544.538803][T13995] syz_tun: tun_net_xmit 42 [ 544.539089][T13995] syz_tun: tun_net_xmit 42 [ 544.539409][T13995] syz_tun: tun_net_xmit 42 [ 544.539686][T13995] syz_tun: tun_net_xmit 42 [ 544.539982][T13995] syz_tun: tun_net_xmit 42 [ 544.540275][T13995] syz_tun: tun_net_xmit 42 [ 544.540575][T13995] syz_tun: tun_net_xmit 42 [ 544.540870][T13995] syz_tun: tun_net_xmit 42 [ 544.541213][T13995] syz_tun: tun_net_xmit 42 [ 544.541591][T13995] syz_tun: tun_net_xmit 42 [ 544.541909][T13995] syz_tun: tun_net_xmit 42 [ 544.542195][T13995] syz_tun: tun_net_xmit 42 [ 544.542571][T13995] syz_tun: tun_net_xmit 42 [ 544.542862][T13995] syz_tun: tun_net_xmit 42 [ 544.543125][T13995] syz_tun: tun_net_xmit 42 [ 544.543395][T13995] syz_tun: tun_net_xmit 42 [ 544.543686][T13995] syz_tun: tun_net_xmit 42 [ 544.543982][T13995] syz_tun: tun_net_xmit 42 [ 544.544270][T13995] syz_tun: tun_net_xmit 42 [ 544.544583][T13995] syz_tun: tun_net_xmit 42 [ 544.544872][T13995] syz_tun: tun_net_xmit 42 [ 544.545172][T13995] syz_tun: tun_net_xmit 42 [ 544.545508][T13995] syz_tun: tun_net_xmit 42 [ 544.545891][T13995] syz_tun: tun_net_xmit 42 [ 544.546177][T13995] syz_tun: tun_net_xmit 42 [ 544.546482][T13995] syz_tun: tun_net_xmit 42 [ 544.546767][T13995] syz_tun: tun_net_xmit 42 [ 544.547058][T13995] syz_tun: tun_net_xmit 42 [ 544.547355][T13995] syz_tun: tun_net_xmit 42 [ 544.547639][T13995] syz_tun: tun_net_xmit 42 [ 544.547938][T13995] syz_tun: tun_net_xmit 42 [ 544.548232][T13995] syz_tun: tun_net_xmit 42 [ 544.548542][T13995] syz_tun: tun_net_xmit 42 [ 544.548829][T13995] syz_tun: tun_net_xmit 42 [ 544.549130][T13995] syz_tun: tun_net_xmit 42 [ 544.549443][T13995] syz_tun: tun_net_xmit 42 [ 544.549843][T13995] syz_tun: tun_net_xmit 42 [ 544.550203][T13995] syz_tun: tun_net_xmit 42 [ 544.550524][T13995] syz_tun: tun_net_xmit 42 [ 544.550807][T13995] syz_tun: tun_net_xmit 42 [ 544.551139][T13995] syz_tun: tun_net_xmit 42 [ 544.551473][T13995] syz_tun: tun_net_xmit 42 [ 544.551756][T13995] syz_tun: tun_net_xmit 42 [ 544.552055][T13995] syz_tun: tun_net_xmit 42 [ 544.552358][T13995] syz_tun: tun_net_xmit 42 [ 544.552658][T13995] syz_tun: tun_net_xmit 42 [ 544.552952][T13995] syz_tun: tun_net_xmit 42 [ 544.553281][T13995] syz_tun: tun_net_xmit 42 [ 544.553575][T13995] syz_tun: tun_net_xmit 42 [ 544.553858][T13995] syz_tun: tun_net_xmit 42 [ 544.554199][T13995] syz_tun: tun_net_xmit 42 [ 544.554562][T13995] syz_tun: tun_net_xmit 42 [ 544.554828][T13995] syz_tun: tun_net_xmit 42 [ 544.555183][T13995] syz_tun: tun_net_xmit 42 [ 544.555465][T13995] syz_tun: tun_net_xmit 42 [ 544.555767][T13995] syz_tun: tun_net_xmit 42 [ 544.556082][T13995] syz_tun: tun_net_xmit 42 [ 544.556396][T13995] syz_tun: tun_net_xmit 42 [ 544.556686][T13995] syz_tun: tun_net_xmit 42 [ 544.557002][T13995] syz_tun: tun_net_xmit 42 [ 544.557281][T13995] syz_tun: tun_net_xmit 42 [ 544.557570][T13995] syz_tun: tun_net_xmit 42 [ 544.557884][T13995] syz_tun: tun_net_xmit 42 [ 544.558178][T13995] syz_tun: tun_net_xmit 42 [ 544.558531][T13995] syz_tun: tun_net_xmit 42 [ 544.558864][T13995] syz_tun: tun_net_xmit 42 [ 544.559183][T13995] syz_tun: tun_net_xmit 42 [ 544.559505][T13995] syz_tun: tun_net_xmit 42 [ 544.559846][T13995] syz_tun: tun_net_xmit 42 [ 544.560138][T13995] syz_tun: tun_net_xmit 42 [ 544.560463][T13995] syz_tun: tun_net_xmit 42 [ 544.560753][T13995] syz_tun: tun_net_xmit 42 [ 544.561031][T13995] syz_tun: tun_net_xmit 42 [ 544.561337][T13995] syz_tun: tun_net_xmit 42 [ 544.561627][T13995] syz_tun: tun_net_xmit 42 [ 544.561924][T13995] syz_tun: tun_net_xmit 42 [ 544.562219][T13995] syz_tun: tun_net_xmit 42 [ 544.562532][T13995] syz_tun: tun_net_xmit 42 [ 544.562836][T13995] syz_tun: tun_net_xmit 42 [ 544.563185][T13995] syz_tun: tun_net_xmit 42 [ 544.563491][T13995] syz_tun: tun_net_xmit 42 [ 544.563762][T13995] syz_tun: tun_net_xmit 42 [ 544.564054][T13995] syz_tun: tun_net_xmit 42 [ 544.564383][T13995] syz_tun: tun_net_xmit 42 [ 544.564663][T13995] syz_tun: tun_net_xmit 42 [ 544.564973][T13995] syz_tun: tun_net_xmit 42 [ 544.565272][T13995] syz_tun: tun_net_xmit 42 [ 544.565586][T13995] syz_tun: tun_net_xmit 42 [ 544.565896][T13995] syz_tun: tun_net_xmit 42 [ 544.566188][T13995] syz_tun: tun_net_xmit 42 [ 544.566508][T13995] syz_tun: tun_net_xmit 42 [ 544.566792][T13995] syz_tun: tun_net_xmit 42 [ 544.567155][T13995] syz_tun: tun_net_xmit 42 [ 544.567528][T13995] syz_tun: tun_net_xmit 42 [ 544.567825][T13995] syz_tun: tun_net_xmit 42 [ 544.568095][T13995] syz_tun: tun_net_xmit 42 [ 544.568430][T13995] syz_tun: tun_net_xmit 42 [ 544.568721][T13995] syz_tun: tun_net_xmit 42 [ 544.569027][T13995] syz_tun: tun_net_xmit 42 [ 544.569356][T13995] syz_tun: tun_net_xmit 42 [ 544.569652][T13995] syz_tun: tun_net_xmit 42 [ 544.569940][T13995] syz_tun: tun_net_xmit 42 [ 544.570261][T13995] syz_tun: tun_net_xmit 42 [ 544.570561][T13995] syz_tun: tun_net_xmit 42 [ 544.570865][T13995] syz_tun: tun_net_xmit 42 [ 544.571138][T13995] syz_tun: tun_net_xmit 42 [ 544.571458][T13995] syz_tun: tun_net_xmit 42 [ 544.571779][T13995] syz_tun: tun_net_xmit 42 [ 544.572092][T13995] syz_tun: tun_net_xmit 42 [ 544.572413][T13995] syz_tun: tun_net_xmit 42 [ 544.572690][T13995] syz_tun: tun_net_xmit 42 [ 544.573033][T13995] syz_tun: tun_net_xmit 42 [ 544.573327][T13995] syz_tun: tun_net_xmit 42 [ 544.573670][T13995] syz_tun: tun_net_xmit 42 [ 544.573941][T13995] syz_tun: tun_net_xmit 42 [ 544.574253][T13995] syz_tun: tun_net_xmit 42 [ 544.574566][T13995] syz_tun: tun_net_xmit 42 [ 544.574854][T13995] syz_tun: tun_net_xmit 42 [ 544.575164][T13995] syz_tun: tun_net_xmit 42 [ 544.575451][T13995] syz_tun: tun_net_xmit 42 [ 544.575770][T13995] syz_tun: tun_net_xmit 42 [ 544.576112][T13995] syz_tun: tun_net_xmit 42 [ 544.576387][T13995] syz_tun: tun_net_xmit 42 [ 544.576678][T13995] syz_tun: tun_net_xmit 42 [ 544.577011][T13995] syz_tun: tun_net_xmit 42 [ 544.577333][T13995] syz_tun: tun_net_xmit 42 [ 544.577622][T13995] syz_tun: tun_net_xmit 42 [ 544.577916][T13995] syz_tun: tun_net_xmit 42 [ 544.578205][T13995] syz_tun: tun_net_xmit 42 [ 544.578503][T13995] syz_tun: tun_net_xmit 42 [ 544.578781][T13995] syz_tun: tun_net_xmit 42 [ 544.579092][T13995] syz_tun: tun_net_xmit 42 [ 544.579417][T13995] syz_tun: tun_net_xmit 42 [ 544.579704][T13995] syz_tun: tun_net_xmit 42 [ 544.580019][T13995] syz_tun: tun_net_xmit 42 [ 544.580344][T13995] syz_tun: tun_net_xmit 42 [ 544.580631][T13995] syz_tun: tun_net_xmit 42 [ 544.580911][T13995] syz_tun: tun_net_xmit 42 [ 544.581186][T13995] syz_tun: tun_net_xmit 42 [ 544.581489][T13995] syz_tun: tun_net_xmit 42 [ 544.581777][T13995] syz_tun: tun_net_xmit 42 [ 544.582073][T13995] syz_tun: tun_net_xmit 42 [ 544.582371][T13995] syz_tun: tun_net_xmit 42 [ 544.582718][T13995] syz_tun: tun_net_xmit 42 [ 544.583074][T13995] syz_tun: tun_net_xmit 42 [ 544.583410][T13995] syz_tun: tun_net_xmit 42 [ 544.583707][T13995] syz_tun: tun_net_xmit 42 [ 544.584004][T13995] syz_tun: tun_net_xmit 42 [ 544.584341][T13995] syz_tun: tun_net_xmit 42 [ 544.584704][T13995] syz_tun: tun_net_xmit 42 [ 544.584997][T13995] syz_tun: tun_net_xmit 42 [ 544.585318][T13995] syz_tun: tun_net_xmit 42 [ 544.585646][T13995] syz_tun: tun_net_xmit 42 [ 544.585967][T13995] syz_tun: tun_net_xmit 42 [ 544.586267][T13995] syz_tun: tun_net_xmit 42 [ 544.586564][T13995] syz_tun: tun_net_xmit 42 [ 544.586836][T13995] syz_tun: tun_net_xmit 42 [ 544.587138][T13995] syz_tun: tun_net_xmit 42 [ 544.587467][T13995] syz_tun: tun_net_xmit 42 [ 544.587744][T13995] syz_tun: tun_net_xmit 42 [ 544.588043][T13995] syz_tun: tun_net_xmit 42 [ 544.588334][T13995] syz_tun: tun_net_xmit 42 [ 544.588681][T13995] syz_tun: tun_net_xmit 42 [ 544.588999][T13995] syz_tun: tun_net_xmit 42 [ 544.589283][T13995] syz_tun: tun_net_xmit 42 [ 544.589577][T13995] syz_tun: tun_net_xmit 42 [ 544.589868][T13995] syz_tun: tun_net_xmit 42 [ 544.590163][T13995] syz_tun: tun_net_xmit 42 [ 544.590466][T13995] syz_tun: tun_net_xmit 42 [ 544.590743][T13995] syz_tun: tun_net_xmit 42 [ 544.591024][T13995] syz_tun: tun_net_xmit 42 [ 544.591359][T13995] syz_tun: tun_net_xmit 42 [ 544.591649][T13995] syz_tun: tun_net_xmit 42 [ 544.591991][T13995] syz_tun: tun_net_xmit 42 [ 544.592254][T13995] syz_tun: tun_net_xmit 42 [ 544.592580][T13995] syz_tun: tun_net_xmit 42 [ 544.592945][T13995] syz_tun: tun_net_xmit 42 [ 544.593319][T13995] syz_tun: tun_net_xmit 42 [ 544.593614][T13995] syz_tun: tun_net_xmit 42 [ 544.593923][T13995] syz_tun: tun_net_xmit 42 [ 544.594243][T13995] syz_tun: tun_net_xmit 42 [ 544.594560][T13995] syz_tun: tun_net_xmit 42 [ 544.594862][T13995] syz_tun: tun_net_xmit 42 [ 544.595192][T13995] syz_tun: tun_net_xmit 42 [ 544.595494][T13995] syz_tun: tun_net_xmit 42 [ 544.595809][T13995] syz_tun: tun_net_xmit 42 [ 544.596108][T13995] syz_tun: tun_net_xmit 42 [ 544.596406][T13995] syz_tun: tun_net_xmit 42 [ 544.596693][T13995] syz_tun: tun_net_xmit 42 [ 544.596997][T13995] syz_tun: tun_net_xmit 42 [ 544.597353][T13995] syz_tun: tun_net_xmit 42 [ 544.597678][T13995] syz_tun: tun_net_xmit 42 [ 544.597966][T13995] syz_tun: tun_net_xmit 42 [ 544.598228][T13995] syz_tun: tun_net_xmit 42 [ 544.598517][T13995] syz_tun: tun_net_xmit 42 [ 544.598805][T13995] syz_tun: tun_net_xmit 42 [ 544.599089][T13995] syz_tun: tun_net_xmit 42 [ 544.599384][T13995] syz_tun: tun_net_xmit 42 [ 544.599664][T13995] syz_tun: tun_net_xmit 42 [ 544.599967][T13995] syz_tun: tun_net_xmit 42 [ 544.600279][T13995] syz_tun: tun_net_xmit 42 [ 544.600573][T13995] syz_tun: tun_net_xmit 42 [ 544.600865][T13995] syz_tun: tun_net_xmit 42 [ 544.601212][T13995] syz_tun: tun_net_xmit 42 [ 544.601572][T13995] syz_tun: tun_net_xmit 42 [ 544.601906][T13995] syz_tun: tun_net_xmit 42 [ 544.602196][T13995] syz_tun: tun_net_xmit 42 [ 544.602493][T13995] syz_tun: tun_net_xmit 42 [ 544.602851][T13995] syz_tun: tun_net_xmit 42 [ 544.603187][T13995] syz_tun: tun_net_xmit 42 [ 544.603505][T13995] syz_tun: tun_net_xmit 42 [ 544.603804][T13995] syz_tun: tun_net_xmit 42 [ 544.604091][T13995] syz_tun: tun_net_xmit 42 [ 544.604399][T13995] syz_tun: tun_net_xmit 42 [ 544.604712][T13995] syz_tun: tun_net_xmit 42 [ 544.605021][T13995] syz_tun: tun_net_xmit 42 [ 544.605340][T13995] syz_tun: tun_net_xmit 42 [ 544.605648][T13995] syz_tun: tun_net_xmit 42 [ 544.605985][T13995] syz_tun: tun_net_xmit 42 [ 544.606334][T13995] syz_tun: tun_net_xmit 42 [ 544.606630][T13995] syz_tun: tun_net_xmit 42 [ 544.606938][T13995] syz_tun: tun_net_xmit 42 [ 544.607254][T13995] syz_tun: tun_net_xmit 42 [ 544.607553][T13995] syz_tun: tun_net_xmit 42 [ 544.607912][T13995] syz_tun: tun_net_xmit 42 [ 544.608206][T13995] syz_tun: tun_net_xmit 42 [ 544.608540][T13995] syz_tun: tun_net_xmit 42 [ 544.608817][T13995] syz_tun: tun_net_xmit 42 [ 544.609117][T13995] syz_tun: tun_net_xmit 42 [ 544.609406][T13995] syz_tun: tun_net_xmit 42 [ 544.609705][T13995] syz_tun: tun_net_xmit 42 [ 544.610018][T13995] syz_tun: tun_net_xmit 42 [ 544.610424][T13995] syz_tun: tun_net_xmit 42 [ 544.610801][T13995] syz_tun: tun_net_xmit 42 [ 544.611068][T13995] syz_tun: tun_net_xmit 42 [ 544.611415][T13995] syz_tun: tun_net_xmit 42 [ 544.611719][T13995] syz_tun: tun_net_xmit 42 [ 544.612018][T13995] syz_tun: tun_net_xmit 42 [ 544.612292][T13995] syz_tun: tun_net_xmit 42 [ 544.612626][T13995] syz_tun: tun_net_xmit 42 [ 544.612946][T13995] syz_tun: tun_net_xmit 42 [ 544.613271][T13995] syz_tun: tun_net_xmit 42 [ 544.613580][T13995] syz_tun: tun_net_xmit 42 [ 544.613871][T13995] syz_tun: tun_net_xmit 42 [ 544.614163][T13995] syz_tun: tun_net_xmit 42 [ 544.614496][T13995] syz_tun: tun_net_xmit 42 [ 544.614821][T13995] syz_tun: tun_net_xmit 42 [ 544.615166][T13995] syz_tun: tun_net_xmit 42 [ 544.615535][T13995] syz_tun: tun_net_xmit 42 [ 544.615835][T13995] syz_tun: tun_net_xmit 42 [ 544.616137][T13995] syz_tun: tun_net_xmit 42 [ 544.616457][T13995] syz_tun: tun_net_xmit 42 [ 544.616733][T13995] syz_tun: tun_net_xmit 42 [ 544.617036][T13995] syz_tun: tun_net_xmit 42 [ 544.617337][T13995] syz_tun: tun_net_xmit 42 [ 544.617619][T13995] syz_tun: tun_net_xmit 42 [ 544.617935][T13995] syz_tun: tun_net_xmit 42 [ 544.618243][T13995] syz_tun: tun_net_xmit 42 [ 544.618543][T13995] syz_tun: tun_net_xmit 42 [ 544.618839][T13995] syz_tun: tun_net_xmit 42 [ 544.619206][T13995] syz_tun: tun_net_xmit 42 [ 544.619551][T13995] syz_tun: tun_net_xmit 42 [ 544.619854][T13995] syz_tun: tun_net_xmit 42 [ 544.620200][T13995] syz_tun: tun_net_xmit 42 [ 544.620567][T13995] syz_tun: tun_net_xmit 42 [ 544.620844][T13995] syz_tun: tun_net_xmit 42 [ 544.621153][T13995] syz_tun: tun_net_xmit 42 [ 544.621453][T13995] syz_tun: tun_net_xmit 42 [ 544.621770][T13995] syz_tun: tun_net_xmit 42 [ 544.622059][T13995] syz_tun: tun_net_xmit 42 [ 544.622356][T13995] syz_tun: tun_net_xmit 42 [ 544.622642][T13995] syz_tun: tun_net_xmit 42 [ 544.622959][T13995] syz_tun: tun_net_xmit 42 [ 544.623296][T13995] syz_tun: tun_net_xmit 42 [ 544.623662][T13995] syz_tun: tun_net_xmit 42 [ 544.624009][T13995] syz_tun: tun_net_xmit 42 [ 544.624302][T13995] syz_tun: tun_net_xmit 42 [ 544.624597][T13995] syz_tun: tun_net_xmit 42 [ 544.624883][T13995] syz_tun: tun_net_xmit 42 [ 544.625229][T13995] syz_tun: tun_net_xmit 42 [ 544.625567][T13995] syz_tun: tun_net_xmit 42 [ 544.625866][T13995] syz_tun: tun_net_xmit 42 [ 544.626151][T13995] syz_tun: tun_net_xmit 42 [ 544.626450][T13995] syz_tun: tun_net_xmit 42 [ 544.626748][T13995] syz_tun: tun_net_xmit 42 [ 544.627021][T13995] syz_tun: tun_net_xmit 42 [ 544.627357][T13995] syz_tun: tun_net_xmit 42 [ 544.627654][T13995] syz_tun: tun_net_xmit 42 [ 544.628063][T13995] syz_tun: tun_net_xmit 42 [ 544.628405][T13995] syz_tun: tun_net_xmit 42 [ 544.628683][T13995] syz_tun: tun_net_xmit 42 [ 544.628991][T13995] syz_tun: tun_net_xmit 42 [ 544.629333][T13995] syz_tun: tun_net_xmit 42 [ 544.629666][T13995] syz_tun: tun_net_xmit 42 [ 544.629939][T13995] syz_tun: tun_net_xmit 42 [ 544.630240][T13995] syz_tun: tun_net_xmit 42 [ 544.630588][T13995] syz_tun: tun_net_xmit 42 [ 544.630875][T13995] syz_tun: tun_net_xmit 42 [ 544.631173][T13995] syz_tun: tun_net_xmit 42 [ 544.631452][T13995] syz_tun: tun_net_xmit 42 [ 544.631744][T13995] syz_tun: tun_net_xmit 42 [ 544.632057][T13995] syz_tun: tun_net_xmit 42 [ 544.632391][T13995] syz_tun: tun_net_xmit 42 [ 544.632712][T13995] syz_tun: tun_net_xmit 42 [ 544.633104][T13995] syz_tun: tun_net_xmit 42 [ 544.633392][T13995] syz_tun: tun_net_xmit 42 [ 544.633692][T13995] syz_tun: tun_net_xmit 42 [ 544.633998][T13995] syz_tun: tun_net_xmit 42 [ 544.634275][T13995] syz_tun: tun_net_xmit 42 [ 544.634567][T13995] syz_tun: tun_net_xmit 42 [ 544.634868][T13995] syz_tun: tun_net_xmit 42 [ 544.635151][T13995] syz_tun: tun_net_xmit 42 [ 544.635494][T13995] syz_tun: tun_net_xmit 42 [ 544.635821][T13995] syz_tun: tun_net_xmit 42 [ 544.636129][T13995] syz_tun: tun_net_xmit 42 [ 544.636441][T13995] syz_tun: tun_net_xmit 42 [ 544.636797][T13995] syz_tun: tun_net_xmit 42 [ 544.637126][T13995] syz_tun: tun_net_xmit 42 [ 544.637434][T13995] syz_tun: tun_net_xmit 42 [ 544.637726][T13995] syz_tun: tun_net_xmit 42 [ 544.638124][T13995] syz_tun: tun_net_xmit 42 [ 544.638417][T13995] syz_tun: tun_net_xmit 42 [ 544.638713][T13995] syz_tun: tun_net_xmit 42 [ 544.639043][T13995] syz_tun: tun_net_xmit 42 [ 544.639365][T13995] syz_tun: tun_net_xmit 42 [ 544.639647][T13995] syz_tun: tun_net_xmit 42 [ 544.639939][T13995] syz_tun: tun_net_xmit 42 [ 544.640246][T13995] syz_tun: tun_net_xmit 42 [ 544.640568][T13995] syz_tun: tun_net_xmit 42 [ 544.640865][T13995] syz_tun: tun_net_xmit 42 [ 544.641234][T13995] syz_tun: tun_net_xmit 42 [ 544.641603][T13995] syz_tun: tun_net_xmit 42 [ 544.641951][T13995] syz_tun: tun_net_xmit 42 [ 544.642243][T13995] syz_tun: tun_net_xmit 42 [ 544.642526][T13995] syz_tun: tun_net_xmit 42 [ 544.642821][T13995] syz_tun: tun_net_xmit 42 [ 544.643198][T13995] syz_tun: tun_net_xmit 42 [ 544.643519][T13995] syz_tun: tun_net_xmit 42 [ 544.643805][T13995] syz_tun: tun_net_xmit 42 [ 544.644115][T13995] syz_tun: tun_net_xmit 42 [ 544.644420][T13995] syz_tun: tun_net_xmit 42 [ 544.644695][T13995] syz_tun: tun_net_xmit 42 [ 544.644992][T13995] syz_tun: tun_net_xmit 42 [ 544.645278][T13995] syz_tun: tun_net_xmit 42 [ 544.645650][T13995] syz_tun: tun_net_xmit 42 [ 544.646000][T13995] syz_tun: tun_net_xmit 42 [ 544.646290][T13995] syz_tun: tun_net_xmit 42 [ 544.646615][T13995] syz_tun: tun_net_xmit 42 [ 544.646943][T13995] syz_tun: tun_net_xmit 42 [ 544.647235][T13995] syz_tun: tun_net_xmit 42 [ 544.647540][T13995] syz_tun: tun_net_xmit 42 [ 544.647813][T13995] syz_tun: tun_net_xmit 42 [ 544.648153][T13995] syz_tun: tun_net_xmit 42 [ 544.648490][T13995] syz_tun: tun_net_xmit 42 [ 544.648781][T13995] syz_tun: tun_net_xmit 42 [ 544.649081][T13995] syz_tun: tun_net_xmit 42 [ 544.649356][T13995] syz_tun: tun_net_xmit 42 [ 544.649610][T13995] syz_tun: tun_net_xmit 42 [ 544.649963][T13995] syz_tun: tun_net_xmit 42 [ 544.650285][T13995] syz_tun: tun_net_xmit 42 [ 544.650617][T13995] syz_tun: tun_net_xmit 42 [ 544.650879][T13995] syz_tun: tun_net_xmit 42 [ 544.651183][T13995] syz_tun: tun_net_xmit 42 [ 544.651518][T13995] syz_tun: tun_net_xmit 42 [ 544.651791][T13995] syz_tun: tun_net_xmit 42 [ 544.652072][T13995] syz_tun: tun_net_xmit 42 [ 544.652369][T13995] syz_tun: tun_net_xmit 42 [ 544.652651][T13995] syz_tun: tun_net_xmit 42 [ 544.652994][T13995] syz_tun: tun_net_xmit 42 [ 544.653315][T13995] syz_tun: tun_net_xmit 42 [ 544.653602][T13995] syz_tun: tun_net_xmit 42 [ 544.653925][T13995] syz_tun: tun_net_xmit 42 [ 544.654269][T13995] syz_tun: tun_net_xmit 42 [ 544.654588][T13995] syz_tun: tun_net_xmit 42 [ 544.654888][T13995] syz_tun: tun_net_xmit 42 [ 544.655184][T13995] syz_tun: tun_net_xmit 42 [ 544.655604][T13995] syz_tun: tun_net_xmit 42 [ 544.655879][T13995] syz_tun: tun_net_xmit 42 [ 544.656175][T13995] syz_tun: tun_net_xmit 42 [ 544.656466][T13995] syz_tun: tun_net_xmit 42 [ 544.656738][T13995] syz_tun: tun_net_xmit 42 [ 544.657040][T13995] syz_tun: tun_net_xmit 42 [ 544.657343][T13995] syz_tun: tun_net_xmit 42 [ 544.657676][T13995] syz_tun: tun_net_xmit 42 [ 544.658004][T13995] syz_tun: tun_net_xmit 42 [ 544.658300][T13995] syz_tun: tun_net_xmit 42 [ 544.658676][T13995] syz_tun: tun_net_xmit 42 [ 544.659020][T13995] syz_tun: tun_net_xmit 42 [ 544.659322][T13995] syz_tun: tun_net_xmit 42 [ 544.659618][T13995] syz_tun: tun_net_xmit 42 [ 544.659906][T13995] syz_tun: tun_net_xmit 42 [ 544.660195][T13995] syz_tun: tun_net_xmit 42 [ 544.660546][T13995] syz_tun: tun_net_xmit 42 [ 544.660820][T13995] syz_tun: tun_net_xmit 42 [ 544.661123][T13995] syz_tun: tun_net_xmit 42 [ 544.661435][T13995] syz_tun: tun_net_xmit 42 [ 544.661717][T13995] syz_tun: tun_net_xmit 42 [ 544.662014][T13995] syz_tun: tun_net_xmit 42 [ 544.662333][T13995] syz_tun: tun_net_xmit 42 [ 544.662644][T13995] syz_tun: tun_net_xmit 42 [ 544.662987][T13995] syz_tun: tun_net_xmit 42 [ 544.663226][T13995] syz_tun: tun_net_xmit 42 [ 544.663546][T13995] syz_tun: tun_net_xmit 42 [ 544.663874][T13995] syz_tun: tun_net_xmit 42 [ 544.664205][T13995] syz_tun: tun_net_xmit 42 [ 544.664502][T13995] syz_tun: tun_net_xmit 42 [ 544.664775][T13995] syz_tun: tun_net_xmit 42 [ 544.665069][T13995] syz_tun: tun_net_xmit 42 [ 544.665419][T13995] syz_tun: tun_net_xmit 42 [ 544.665713][T13995] syz_tun: tun_net_xmit 42 [ 544.666005][T13995] syz_tun: tun_net_xmit 42 [ 544.666305][T13995] syz_tun: tun_net_xmit 42 [ 544.666597][T13995] syz_tun: tun_net_xmit 42 [ 544.666944][T13995] syz_tun: tun_net_xmit 42 [ 544.667269][T13995] syz_tun: tun_net_xmit 42 [ 544.667596][T13995] syz_tun: tun_net_xmit 42 [ 544.667933][T13995] syz_tun: tun_net_xmit 42 [ 544.668228][T13995] syz_tun: tun_net_xmit 42 [ 544.668507][T13995] syz_tun: tun_net_xmit 42 [ 544.668817][T13995] syz_tun: tun_net_xmit 42 [ 544.669113][T13995] syz_tun: tun_net_xmit 42 [ 544.669451][T13995] syz_tun: tun_net_xmit 42 [ 544.669733][T13995] syz_tun: tun_net_xmit 42 [ 544.670039][T13995] syz_tun: tun_net_xmit 42 [ 544.670367][T13995] syz_tun: tun_net_xmit 42 [ 544.670655][T13995] syz_tun: tun_net_xmit 42 [ 544.670934][T13995] syz_tun: tun_net_xmit 42 [ 544.671218][T13995] syz_tun: tun_net_xmit 42 [ 544.671623][T13995] syz_tun: tun_net_xmit 42 [ 544.671979][T13995] syz_tun: tun_net_xmit 42 [ 544.672287][T13995] syz_tun: tun_net_xmit 42 [ 544.672600][T13995] syz_tun: tun_net_xmit 42 [ 544.672982][T13995] syz_tun: tun_net_xmit 42 [ 544.673320][T13995] syz_tun: tun_net_xmit 42 [ 544.673609][T13995] syz_tun: tun_net_xmit 42 [ 544.673896][T13995] syz_tun: tun_net_xmit 42 [ 544.674186][T13995] syz_tun: tun_net_xmit 42 [ 544.674491][T13995] syz_tun: tun_net_xmit 42 [ 544.674758][T13995] syz_tun: tun_net_xmit 42 [ 544.675111][T13995] syz_tun: tun_net_xmit 42 [ 544.675428][T13995] syz_tun: tun_net_xmit 42 [ 544.675706][T13995] syz_tun: tun_net_xmit 42 [ 544.676087][T13995] syz_tun: tun_net_xmit 42 [ 544.676513][T13995] syz_tun: tun_net_xmit 42 [ 544.676786][T13995] syz_tun: tun_net_xmit 42 [ 544.677070][T13995] syz_tun: tun_net_xmit 42 [ 544.677407][T13995] syz_tun: tun_net_xmit 42 [ 544.677715][T13995] syz_tun: tun_net_xmit 42 [ 544.678038][T13995] syz_tun: tun_net_xmit 42 [ 544.678343][T13995] syz_tun: tun_net_xmit 42 [ 544.678671][T13995] syz_tun: tun_net_xmit 42 [ 544.678948][T13995] syz_tun: tun_net_xmit 42 [ 544.679260][T13995] syz_tun: tun_net_xmit 42 [ 544.679537][T13995] syz_tun: tun_net_xmit 42 [ 544.679846][T13995] syz_tun: tun_net_xmit 42 [ 544.680120][T13995] syz_tun: tun_net_xmit 42 [ 544.680527][T13995] syz_tun: tun_net_xmit 42 [ 544.680876][T13995] syz_tun: tun_net_xmit 42 [ 544.681171][T13995] syz_tun: tun_net_xmit 42 [ 544.681477][T13995] syz_tun: tun_net_xmit 42 [ 544.681815][T13995] syz_tun: tun_net_xmit 42 [ 544.682095][T13995] syz_tun: tun_net_xmit 42 [ 544.682414][T13995] syz_tun: tun_net_xmit 42 [ 544.682691][T13995] syz_tun: tun_net_xmit 42 [ 544.683079][T13995] syz_tun: tun_net_xmit 42 [ 544.683396][T13995] syz_tun: tun_net_xmit 42 [ 544.683685][T13995] syz_tun: tun_net_xmit 42 [ 544.683982][T13995] syz_tun: tun_net_xmit 42 [ 544.684340][T13995] syz_tun: tun_net_xmit 42 [ 544.684655][T13995] syz_tun: tun_net_xmit 42 [ 544.684994][T13995] syz_tun: tun_net_xmit 42 [ 544.685359][T13995] syz_tun: tun_net_xmit 42 [ 544.685695][T13995] syz_tun: tun_net_xmit 42 [ 544.686025][T13995] syz_tun: tun_net_xmit 42 [ 544.686341][T13995] syz_tun: tun_net_xmit 42 [ 544.686641][T13995] syz_tun: tun_net_xmit 42 [ 544.686937][T13995] syz_tun: tun_net_xmit 42 [ 544.687232][T13995] syz_tun: tun_net_xmit 42 [ 544.687525][T13995] syz_tun: tun_net_xmit 42 [ 544.687832][T13995] syz_tun: tun_net_xmit 42 [ 544.688160][T13995] syz_tun: tun_net_xmit 42 [ 544.688453][T13995] syz_tun: tun_net_xmit 42 [ 544.688743][T13995] syz_tun: tun_net_xmit 42 [ 544.689041][T13995] syz_tun: tun_net_xmit 42 [ 544.689422][T13995] syz_tun: tun_net_xmit 42 [ 544.689758][T13995] syz_tun: tun_net_xmit 42 [ 544.690051][T13995] syz_tun: tun_net_xmit 42 [ 544.690350][T13995] syz_tun: tun_net_xmit 42 [ 544.690721][T13995] syz_tun: tun_net_xmit 42 [ 544.691076][T13995] syz_tun: tun_net_xmit 42 [ 544.691359][T13995] syz_tun: tun_net_xmit 42 [ 544.691673][T13995] syz_tun: tun_net_xmit 42 [ 544.691977][T13995] syz_tun: tun_net_xmit 42 [ 544.692280][T13995] syz_tun: tun_net_xmit 42 [ 544.692590][T13995] syz_tun: tun_net_xmit 42 [ 544.692900][T13995] syz_tun: tun_net_xmit 42 [ 544.693169][T13995] syz_tun: tun_net_xmit 42 [ 544.693469][T13995] syz_tun: tun_net_xmit 42 [ 544.693802][T13995] syz_tun: tun_net_xmit 42 [ 544.694142][T13995] syz_tun: tun_net_xmit 42 [ 544.694439][T13995] syz_tun: tun_net_xmit 42 [ 544.694713][T13995] syz_tun: tun_net_xmit 42 [ 544.695006][T13995] syz_tun: tun_net_xmit 42 [ 544.695359][T13995] syz_tun: tun_net_xmit 42 [ 544.695677][T13995] syz_tun: tun_net_xmit 42 [ 544.695977][T13995] syz_tun: tun_net_xmit 42 [ 544.696277][T13995] syz_tun: tun_net_xmit 42 [ 544.696588][T13995] syz_tun: tun_net_xmit 42 [ 544.696892][T13995] syz_tun: tun_net_xmit 42 [ 544.697190][T13995] syz_tun: tun_net_xmit 42 [ 544.697516][T13995] syz_tun: tun_net_xmit 42 [ 544.697799][T13995] syz_tun: tun_net_xmit 42 [ 544.698167][T13995] syz_tun: tun_net_xmit 42 [ 544.698536][T13995] syz_tun: tun_net_xmit 42 [ 544.698798][T13995] syz_tun: tun_net_xmit 42 [ 544.699112][T13995] syz_tun: tun_net_xmit 42 [ 544.699438][T13995] syz_tun: tun_net_xmit 42 [ 544.699720][T13995] syz_tun: tun_net_xmit 42 [ 544.700031][T13995] syz_tun: tun_net_xmit 42 [ 544.700296][T13995] syz_tun: tun_net_xmit 42 [ 544.700612][T13995] syz_tun: tun_net_xmit 42 [ 544.700933][T13995] syz_tun: tun_net_xmit 42 [ 544.701238][T13995] syz_tun: tun_net_xmit 42 [ 544.701523][T13995] syz_tun: tun_net_xmit 42 [ 544.701807][T13995] syz_tun: tun_net_xmit 42 [ 544.702094][T13995] syz_tun: tun_net_xmit 42 [ 544.702430][T13995] syz_tun: tun_net_xmit 42 [ 544.702762][T13995] syz_tun: tun_net_xmit 42 [ 544.703247][T13995] syz_tun: tun_net_xmit 42 [ 544.703541][T13995] syz_tun: tun_net_xmit 42 [ 544.703842][T13995] syz_tun: tun_net_xmit 42 [ 544.704134][T13995] syz_tun: tun_net_xmit 42 [ 544.704476][T13995] syz_tun: tun_net_xmit 42 [ 544.704813][T13995] syz_tun: tun_net_xmit 42 [ 544.705116][T13995] syz_tun: tun_net_xmit 42 [ 544.705409][T13995] syz_tun: tun_net_xmit 42 [ 544.705716][T13995] syz_tun: tun_net_xmit 42 [ 544.706028][T13995] syz_tun: tun_net_xmit 42 [ 544.706302][T13995] syz_tun: tun_net_xmit 42 [ 544.706586][T13995] syz_tun: tun_net_xmit 42 [ 544.706931][T13995] syz_tun: tun_net_xmit 42 [ 544.707272][T13995] syz_tun: tun_net_xmit 42 [ 544.707544][T13995] syz_tun: tun_net_xmit 42 [ 544.707833][T13995] syz_tun: tun_net_xmit 42 [ 544.708220][T13995] syz_tun: tun_net_xmit 42 [ 544.708539][T13995] syz_tun: tun_net_xmit 42 [ 544.708833][T13995] syz_tun: tun_net_xmit 42 [ 544.709144][T13995] syz_tun: tun_net_xmit 42 [ 544.709442][T13995] syz_tun: tun_net_xmit 42 [ 544.709714][T13995] syz_tun: tun_net_xmit 42 [ 544.710022][T13995] syz_tun: tun_net_xmit 42 [ 544.710303][T13995] syz_tun: tun_net_xmit 42 [ 544.710644][T13995] syz_tun: tun_net_xmit 42 [ 544.710937][T13995] syz_tun: tun_net_xmit 42 [ 544.711269][T13995] syz_tun: tun_net_xmit 42 [ 544.711592][T13995] syz_tun: tun_net_xmit 42 [ 544.711869][T13995] syz_tun: tun_net_xmit 42 [ 544.712176][T13995] syz_tun: tun_net_xmit 42 [ 544.712456][T13995] syz_tun: tun_net_xmit 42 [ 544.712747][T13995] syz_tun: tun_net_xmit 42 [ 544.713082][T13995] syz_tun: tun_net_xmit 42 [ 544.713385][T13995] syz_tun: tun_net_xmit 42 [ 544.713674][T13995] syz_tun: tun_net_xmit 42 [ 544.714004][T13995] syz_tun: tun_net_xmit 42 [ 544.714290][T13995] syz_tun: tun_net_xmit 42 [ 544.714577][T13995] syz_tun: tun_net_xmit 42 [ 544.714868][T13995] syz_tun: tun_net_xmit 42 [ 544.715136][T13995] syz_tun: tun_net_xmit 42 [ 544.715537][T13995] syz_tun: tun_net_xmit 42 [ 544.715884][T13995] syz_tun: tun_net_xmit 42 [ 544.716175][T13995] syz_tun: tun_net_xmit 42 [ 544.716472][T13995] syz_tun: tun_net_xmit 42 [ 544.716790][T13995] syz_tun: tun_net_xmit 42 [ 544.717083][T13995] syz_tun: tun_net_xmit 42 [ 544.717373][T13995] syz_tun: tun_net_xmit 42 [ 544.717677][T13995] syz_tun: tun_net_xmit 42 [ 544.718007][T13995] syz_tun: tun_net_xmit 42 [ 544.718290][T13995] syz_tun: tun_net_xmit 42 [ 544.718561][T13995] syz_tun: tun_net_xmit 42 [ 544.718840][T13995] syz_tun: tun_net_xmit 42 [ 544.719138][T13995] syz_tun: tun_net_xmit 42 [ 544.719426][T13995] syz_tun: tun_net_xmit 42 [ 544.719743][T13995] syz_tun: tun_net_xmit 42 [ 544.720088][T13995] syz_tun: tun_net_xmit 42 [ 544.720391][T13995] syz_tun: tun_net_xmit 42 [ 544.720687][T13995] syz_tun: tun_net_xmit 42 [ 544.720986][T13995] syz_tun: tun_net_xmit 42 [ 544.721274][T13995] syz_tun: tun_net_xmit 42 [ 544.721586][T13995] syz_tun: tun_net_xmit 42 [ 544.721887][T13995] syz_tun: tun_net_xmit 42 [ 544.722196][T13995] syz_tun: tun_net_xmit 42 [ 544.722531][T13995] syz_tun: tun_net_xmit 42 [ 544.722845][T13995] syz_tun: tun_net_xmit 42 [ 544.723478][T13995] syz_tun: tun_net_xmit 42 [ 544.723763][T13995] syz_tun: tun_net_xmit 42 [ 544.724071][T13995] syz_tun: tun_net_xmit 42 [ 544.724521][T13995] syz_tun: tun_net_xmit 42 [ 544.724819][T13995] syz_tun: tun_net_xmit 42 [ 544.725251][T13995] syz_tun: tun_net_xmit 42 [ 544.725566][T13995] syz_tun: tun_net_xmit 42 [ 544.725913][T13995] syz_tun: tun_net_xmit 42 [ 544.726222][T13995] syz_tun: tun_net_xmit 42 [ 544.726541][T13995] syz_tun: tun_net_xmit 42 [ 544.726832][T13995] syz_tun: tun_net_xmit 42 [ 544.727131][T13995] syz_tun: tun_net_xmit 42 [ 544.727425][T13995] syz_tun: tun_net_xmit 42 [ 544.727713][T13995] syz_tun: tun_net_xmit 42 [ 544.728003][T13995] syz_tun: tun_net_xmit 42 [ 544.728334][T13995] syz_tun: tun_net_xmit 42 [ 544.728632][T13995] syz_tun: tun_net_xmit 42 [ 544.729045][T13995] syz_tun: tun_net_xmit 42 [ 544.729347][T13995] syz_tun: tun_net_xmit 42 [ 544.729645][T13995] syz_tun: tun_net_xmit 42 [ 544.729936][T13995] syz_tun: tun_net_xmit 42 [ 544.730236][T13995] syz_tun: tun_net_xmit 42 [ 544.730553][T13995] syz_tun: tun_net_xmit 42 [ 544.730865][T13995] syz_tun: tun_net_xmit 42 [ 544.731170][T13995] syz_tun: tun_net_xmit 42 [ 544.731476][T13995] syz_tun: tun_net_xmit 42 [ 544.731762][T13995] syz_tun: tun_net_xmit 42 [ 544.732044][T13995] syz_tun: tun_net_xmit 42 [ 544.732335][T13995] syz_tun: tun_net_xmit 42 [ 544.732628][T13995] syz_tun: tun_net_xmit 42 [ 544.733030][T13995] syz_tun: tun_net_xmit 42 [ 544.733506][T13995] syz_tun: tun_net_xmit 42 [ 544.733785][T13995] syz_tun: tun_net_xmit 42 [ 544.734136][T13995] syz_tun: tun_net_xmit 42 [ 544.734438][T13995] syz_tun: tun_net_xmit 42 [ 544.734715][T13995] syz_tun: tun_net_xmit 42 [ 544.734990][T13995] syz_tun: tun_net_xmit 42 [ 544.735292][T13995] syz_tun: tun_net_xmit 42 [ 544.735589][T13995] syz_tun: tun_net_xmit 42 [ 544.735927][T13995] syz_tun: tun_net_xmit 42 [ 544.736230][T13995] syz_tun: tun_net_xmit 42 [ 544.736525][T13995] syz_tun: tun_net_xmit 42 [ 544.736800][T13995] syz_tun: tun_net_xmit 42 [ 544.737076][T13995] syz_tun: tun_net_xmit 42 [ 544.737392][T13995] syz_tun: tun_net_xmit 42 [ 544.737764][T13995] syz_tun: tun_net_xmit 42 [ 544.738058][T13995] syz_tun: tun_net_xmit 42 [ 544.738408][T13995] syz_tun: tun_net_xmit 42 [ 544.738687][T13995] syz_tun: tun_net_xmit 42 [ 544.738965][T13995] syz_tun: tun_net_xmit 42 [ 544.739262][T13995] syz_tun: tun_net_xmit 42 [ 544.739544][T13995] syz_tun: tun_net_xmit 42 [ 544.739829][T13995] syz_tun: tun_net_xmit 42 [ 544.740118][T13995] syz_tun: tun_net_xmit 42 [ 544.740440][T13995] syz_tun: tun_net_xmit 42 [ 544.740737][T13995] syz_tun: tun_net_xmit 42 [ 544.741029][T13995] syz_tun: tun_net_xmit 42 [ 544.741345][T13995] syz_tun: tun_net_xmit 42 [ 544.741647][T13995] syz_tun: tun_net_xmit 42 [ 544.742046][T13995] syz_tun: tun_net_xmit 42 [ 544.742408][T13995] syz_tun: tun_net_xmit 42 [ 544.742776][T13995] syz_tun: tun_net_xmit 42 [ 544.743069][T13995] syz_tun: tun_net_xmit 42 [ 544.743425][T13995] syz_tun: tun_net_xmit 42 [ 544.743737][T13995] syz_tun: tun_net_xmit 42 [ 544.744031][T13995] syz_tun: tun_net_xmit 42 [ 544.744301][T13995] syz_tun: tun_net_xmit 42 [ 544.744610][T13995] syz_tun: tun_net_xmit 42 [ 544.744913][T13995] syz_tun: tun_net_xmit 42 [ 544.745203][T13995] syz_tun: tun_net_xmit 42 [ 544.745511][T13995] syz_tun: tun_net_xmit 42 [ 544.745831][T13995] syz_tun: tun_net_xmit 42 [ 544.746118][T13995] syz_tun: tun_net_xmit 42 [ 544.746538][T13995] syz_tun: tun_net_xmit 42 [ 544.746852][T13995] syz_tun: tun_net_xmit 42 [ 544.747150][T13995] syz_tun: tun_net_xmit 42 [ 544.747430][T13995] syz_tun: tun_net_xmit 42 [ 544.747706][T13995] syz_tun: tun_net_xmit 42 [ 544.748000][T13995] syz_tun: tun_net_xmit 42 [ 544.748357][T13995] syz_tun: tun_net_xmit 42 [ 544.748654][T13995] syz_tun: tun_net_xmit 42 [ 544.748954][T13995] syz_tun: tun_net_xmit 42 [ 544.749261][T13995] syz_tun: tun_net_xmit 42 [ 544.749524][T13995] syz_tun: tun_net_xmit 42 [ 544.749811][T13995] syz_tun: tun_net_xmit 42 [ 544.750086][T13995] syz_tun: tun_net_xmit 42 [ 544.750381][T13995] syz_tun: tun_net_xmit 42 [ 544.750814][T13995] syz_tun: tun_net_xmit 42 [ 544.751088][T13995] syz_tun: tun_net_xmit 42 [ 544.751439][T13995] syz_tun: tun_net_xmit 42 [ 544.751789][T13995] syz_tun: tun_net_xmit 42 [ 544.752088][T13995] syz_tun: tun_net_xmit 42 [ 544.752397][T13995] syz_tun: tun_net_xmit 42 [ 544.752698][T13995] syz_tun: tun_net_xmit 42 [ 544.753065][T13995] syz_tun: tun_net_xmit 42 [ 544.753435][T13995] syz_tun: tun_net_xmit 42 [ 544.753734][T13995] syz_tun: tun_net_xmit 42 [ 544.754022][T13995] syz_tun: tun_net_xmit 42 [ 544.754347][T13995] syz_tun: tun_net_xmit 42 [ 544.754639][T13995] syz_tun: tun_net_xmit 42 [ 544.754915][T13995] syz_tun: tun_net_xmit 42 [ 544.755287][T13995] syz_tun: tun_net_xmit 42 [ 544.755592][T13995] syz_tun: tun_net_xmit 42 [ 544.755915][T13995] syz_tun: tun_net_xmit 42 [ 544.756208][T13995] syz_tun: tun_net_xmit 42 [ 544.756523][T13995] syz_tun: tun_net_xmit 42 [ 544.756805][T13995] syz_tun: tun_net_xmit 42 [ 544.757103][T13995] syz_tun: tun_net_xmit 42 [ 544.757405][T13995] syz_tun: tun_net_xmit 42 [ 544.757685][T13995] syz_tun: tun_net_xmit 42 [ 544.757990][T13995] syz_tun: tun_net_xmit 42 [ 544.758307][T13995] syz_tun: tun_net_xmit 42 [ 544.758624][T13995] syz_tun: tun_net_xmit 42 [ 544.758942][T13995] syz_tun: tun_net_xmit 42 [ 544.759243][T13995] syz_tun: tun_net_xmit 42 [ 544.759705][T13995] syz_tun: tun_net_xmit 42 [ 544.759999][T13995] syz_tun: tun_net_xmit 42 [ 544.760355][T13995] syz_tun: tun_net_xmit 42 [ 544.760644][T13995] syz_tun: tun_net_xmit 42 [ 544.760995][T13995] syz_tun: tun_net_xmit 42 [ 544.761361][T13995] syz_tun: tun_net_xmit 42 [ 544.761636][T13995] syz_tun: tun_net_xmit 42 [ 544.761943][T13995] syz_tun: tun_net_xmit 42 [ 544.762225][T13995] syz_tun: tun_net_xmit 42 [ 544.762534][T13995] syz_tun: tun_net_xmit 42 [ 544.762823][T13995] syz_tun: tun_net_xmit 42 [ 544.763148][T13995] syz_tun: tun_net_xmit 42 [ 544.763458][T13995] syz_tun: tun_net_xmit 42 [ 544.763752][T13995] syz_tun: tun_net_xmit 42 [ 544.764135][T13995] syz_tun: tun_net_xmit 42 [ 544.764430][T13995] syz_tun: tun_net_xmit 42 [ 544.764741][T13995] syz_tun: tun_net_xmit 42 [ 544.765046][T13995] syz_tun: tun_net_xmit 42 [ 544.765350][T13995] syz_tun: tun_net_xmit 42 [ 544.765648][T13995] syz_tun: tun_net_xmit 42 [ 544.765968][T13995] syz_tun: tun_net_xmit 42 [ 544.766258][T13995] syz_tun: tun_net_xmit 42 [ 544.766567][T13995] syz_tun: tun_net_xmit 42 [ 544.766854][T13995] syz_tun: tun_net_xmit 42 [ 544.767136][T13995] syz_tun: tun_net_xmit 42 [ 544.767432][T13995] syz_tun: tun_net_xmit 42 [ 544.767720][T13995] syz_tun: tun_net_xmit 42 [ 544.767998][T13995] syz_tun: tun_net_xmit 42 [ 544.768456][T13995] syz_tun: tun_net_xmit 42 [ 544.768744][T13995] syz_tun: tun_net_xmit 42 [ 544.769093][T13995] syz_tun: tun_net_xmit 42 [ 544.769380][T13995] syz_tun: tun_net_xmit 42 [ 544.769654][T13995] syz_tun: tun_net_xmit 42 [ 544.769934][T13995] syz_tun: tun_net_xmit 42 [ 544.770240][T13995] syz_tun: tun_net_xmit 42 [ 544.770589][T13995] syz_tun: tun_net_xmit 42 [ 544.770906][T13995] syz_tun: tun_net_xmit 42 [ 544.771215][T13995] syz_tun: tun_net_xmit 42 [ 544.771516][T13995] syz_tun: tun_net_xmit 42 [ 544.771779][T13995] syz_tun: tun_net_xmit 42 [ 544.772096][T13995] syz_tun: tun_net_xmit 42 [ 544.772398][T13995] syz_tun: tun_net_xmit 42 [ 544.772790][T13995] syz_tun: tun_net_xmit 42 [ 544.773092][T13995] syz_tun: tun_net_xmit 42 [ 544.773442][T13995] syz_tun: tun_net_xmit 42 [ 544.773721][T13995] syz_tun: tun_net_xmit 42 [ 544.773999][T13995] syz_tun: tun_net_xmit 42 [ 544.774292][T13995] syz_tun: tun_net_xmit 42 [ 544.774580][T13995] syz_tun: tun_net_xmit 42 [ 544.774858][T13995] syz_tun: tun_net_xmit 42 [ 544.775239][T13995] syz_tun: tun_net_xmit 42 [ 544.775563][T13995] syz_tun: tun_net_xmit 42 [ 544.775897][T13995] syz_tun: tun_net_xmit 42 [ 544.776196][T13995] syz_tun: tun_net_xmit 42 [ 544.776523][T13995] syz_tun: tun_net_xmit 42 [ 544.776816][T13995] syz_tun: tun_net_xmit 42 [ 544.777210][T13995] syz_tun: tun_net_xmit 42 [ 544.777508][T13995] syz_tun: tun_net_xmit 42 [ 544.777852][T13995] syz_tun: tun_net_xmit 42 [ 544.778162][T13995] syz_tun: tun_net_xmit 42 [ 544.778486][T13995] syz_tun: tun_net_xmit 42 [ 544.778773][T13995] syz_tun: tun_net_xmit 42 [ 544.779066][T13995] syz_tun: tun_net_xmit 42 [ 544.779359][T13995] syz_tun: tun_net_xmit 42 [ 544.779630][T13995] syz_tun: tun_net_xmit 42 [ 544.779982][T13995] syz_tun: tun_net_xmit 42 [ 544.780263][T13995] syz_tun: tun_net_xmit 42 [ 544.780569][T13995] syz_tun: tun_net_xmit 42 [ 544.780876][T13995] syz_tun: tun_net_xmit 42 [ 544.781182][T13995] syz_tun: tun_net_xmit 42 [ 544.781602][T13995] syz_tun: tun_net_xmit 42 [ 544.781892][T13995] syz_tun: tun_net_xmit 42 [ 544.782183][T13995] syz_tun: tun_net_xmit 42 [ 544.782490][T13995] syz_tun: tun_net_xmit 42 [ 544.782762][T13995] syz_tun: tun_net_xmit 42 [ 544.783070][T13995] syz_tun: tun_net_xmit 42 [ 544.783392][T13995] syz_tun: tun_net_xmit 42 [ 544.783664][T13995] syz_tun: tun_net_xmit 42 [ 544.783961][T13995] syz_tun: tun_net_xmit 42 [ 544.784255][T13995] syz_tun: tun_net_xmit 42 [ 544.784564][T13995] syz_tun: tun_net_xmit 42 [ 544.784858][T13995] syz_tun: tun_net_xmit 42 [ 544.785148][T13995] syz_tun: tun_net_xmit 42 [ 544.785451][T13995] syz_tun: tun_net_xmit 42 [ 544.785872][T13995] syz_tun: tun_net_xmit 42 [ 544.786164][T13995] syz_tun: tun_net_xmit 42 [ 544.786532][T13995] syz_tun: tun_net_xmit 42 [ 544.786811][T13995] syz_tun: tun_net_xmit 42 [ 544.787110][T13995] syz_tun: tun_net_xmit 42 [ 544.787431][T13995] syz_tun: tun_net_xmit 42 [ 544.787690][T13995] syz_tun: tun_net_xmit 42 [ 544.787977][T13995] syz_tun: tun_net_xmit 42 [ 544.788304][T13995] syz_tun: tun_net_xmit 42 [ 544.788599][T13995] syz_tun: tun_net_xmit 42 [ 544.788878][T13995] syz_tun: tun_net_xmit 42 [ 544.789221][T13995] syz_tun: tun_net_xmit 42 [ 544.789529][T13995] syz_tun: tun_net_xmit 42 [ 544.789799][T13995] syz_tun: tun_net_xmit 42 [ 544.790159][T13995] syz_tun: tun_net_xmit 42 [ 544.790430][T13995] syz_tun: tun_net_xmit 42 [ 544.790730][T13995] syz_tun: tun_net_xmit 42 [ 544.791015][T13995] syz_tun: tun_net_xmit 42 [ 544.791308][T13995] syz_tun: tun_net_xmit 42 [ 544.791618][T13995] syz_tun: tun_net_xmit 42 [ 544.791912][T13995] syz_tun: tun_net_xmit 42 [ 544.792187][T13995] syz_tun: tun_net_xmit 42 [ 544.792516][T13995] syz_tun: tun_net_xmit 42 [ 544.792801][T13995] syz_tun: tun_net_xmit 42 [ 544.793185][T13995] syz_tun: tun_net_xmit 42 [ 544.793482][T13995] syz_tun: tun_net_xmit 42 [ 544.793758][T13995] syz_tun: tun_net_xmit 42 [ 544.794039][T13995] syz_tun: tun_net_xmit 42 [ 544.794424][T13995] syz_tun: tun_net_xmit 42 [ 544.794702][T13995] syz_tun: tun_net_xmit 42 [ 544.795068][T13995] syz_tun: tun_net_xmit 42 [ 544.795386][T13995] syz_tun: tun_net_xmit 42 [ 545.772727][ T1500] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 545.923979][ T1500] usb 1-1: Dual-Role OTG device on HNP port [ 545.924358][ T1500] usb 1-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 7.02 [ 545.924392][ T1500] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 545.956530][ T1500] gspca_main: spca501-2.14.0 probing 0000:0000 [ 545.957128][ T1500] gspca_spca501: reg write: error -32 [ 545.957146][ T1500] spca501 1-1:1.0: Reg write failed for 0x02,0x0f,0x05 [ 545.957259][ T1500] spca501 1-1:1.0: probe with driver spca501 failed with error -22 [ 546.338077][ C0] syz_tun: tun_net_xmit 42 [ 546.338104][ C0] syz_tun: tun_net_xmit 42 [ 546.338118][ C0] syz_tun: tun_net_xmit 42 [ 546.338130][ C0] syz_tun: tun_net_xmit 42 [ 546.338141][ C0] syz_tun: tun_net_xmit 42 [ 546.338150][ C0] syz_tun: tun_net_xmit 42 [ 546.338158][ C0] syz_tun: tun_net_xmit 42 [ 546.338166][ C0] syz_tun: tun_net_xmit 42 [ 546.338174][ C0] syz_tun: tun_net_xmit 42 [ 546.338182][ C0] syz_tun: tun_net_xmit 42 [ 546.338190][ C0] syz_tun: tun_net_xmit 42 [ 546.338197][ C0] syz_tun: tun_net_xmit 42 [ 546.338205][ C0] syz_tun: tun_net_xmit 42 [ 546.338213][ C0] syz_tun: tun_net_xmit 42 [ 546.338220][ C0] syz_tun: tun_net_xmit 42 [ 546.338228][ C0] syz_tun: tun_net_xmit 42 [ 546.338236][ C0] syz_tun: tun_net_xmit 42 [ 546.338243][ C0] syz_tun: tun_net_xmit 42 [ 546.338251][ C0] syz_tun: tun_net_xmit 42 [ 546.338259][ C0] syz_tun: tun_net_xmit 42 [ 546.338267][ C0] syz_tun: tun_net_xmit 42 [ 546.338274][ C0] syz_tun: tun_net_xmit 42 [ 546.338282][ C0] syz_tun: tun_net_xmit 42 [ 546.338294][ C0] syz_tun: tun_net_xmit 42 [ 546.338303][ C0] syz_tun: tun_net_xmit 42 [ 546.338311][ C0] syz_tun: tun_net_xmit 42 [ 546.338319][ C0] syz_tun: tun_net_xmit 42 [ 546.338326][ C0] syz_tun: tun_net_xmit 42 [ 546.338334][ C0] syz_tun: tun_net_xmit 42 [ 546.338341][ C0] syz_tun: tun_net_xmit 42 [ 546.338349][ C0] syz_tun: tun_net_xmit 42 [ 546.995648][T14014] netlink: 'syz.1.2699': attribute type 8 has an invalid length. [ 546.995761][T14014] sch_fq: defrate 0 ignored. [ 547.003469][T14014] ptrace attach of "ci-upstream-gce-arm64/syz-executor exec"[4710] was attempted by ""[14014] [ 547.424108][T14026] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2704'. [ 547.424143][T14026] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 547.424174][T14026] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 547.424676][T14026] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 547.424694][T14026] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 548.287544][T14038] pim6reg: entered allmulticast mode [ 550.190931][ T4899] syz_tun: tun_net_xmit 110 [ 551.120090][ T1500] syz_tun: tun_net_xmit 110 [ 551.198702][ T9] usb 1-1: USB disconnect, device number 18 [ 551.853080][T14085] No such timeout policy "syz1" [ 552.246338][T14090] syz_tun: tun_net_xmit 86 [ 553.116685][ T4899] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 553.203249][T14103] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2726'. [ 553.222534][T14105] netlink: 'syz.4.2727': attribute type 3 has an invalid length. [ 553.298558][ T4899] usb 1-1: Dual-Role OTG device on HNP port [ 553.298784][ T4899] usb 1-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 7.02 [ 553.298833][ T4899] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 553.307189][ T4899] gspca_main: spca501-2.14.0 probing 0000:0000 [ 553.330103][ T4899] gspca_spca501: reg write: error -32 [ 553.331816][ T4899] spca501 1-1:1.0: Reg write failed for 0x02,0x0f,0x05 [ 553.333357][ T4899] spca501 1-1:1.0: probe with driver spca501 failed with error -22 [ 553.390916][T14109] input: syz0 as /devices/virtual/input/input9 [ 554.280554][T14102] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 554.287001][T14102] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 554.603474][ T1291] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 554.603546][ T1291] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 554.603583][ T1291] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 554.603643][T14120] netlink: 'syz.5.2730': attribute type 2 has an invalid length. [ 554.603665][T14120] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2730'. [ 554.604000][T14120] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 554.618337][ T4899] syz_tun: tun_net_xmit 110 [ 554.718788][ T4899] syz_tun: tun_net_xmit 110 [ 555.051850][T14133] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2735'. [ 556.616273][ T1500] usb 1-1: USB disconnect, device number 19 [ 556.627678][ T1587] ieee802154 phy1 wpan1: encryption failed: -22 [ 559.117805][T14202] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2756'. [ 559.137731][T14204] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2757'. [ 559.496358][T14228] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2764'. [ 559.593941][T14234] binder: tried to use weak ref as strong ref [ 559.593973][T14234] binder: 14233:14234 Acquire 1 refcount change on invalid ref 0 ret -22 [ 559.595645][T14234] binder: 14233:14234 BC_FREE_BUFFER no match for buffer at offset 1000 [ 559.598046][T14234] binder: 14233:14234 BC_FREE_BUFFER no match for buffer at offset 20ffe000 [ 559.598076][T14234] binder: 14233:14234 BC_REQUEST_DEATH_NOTIFICATION invalid ref 2 [ 559.598210][T14234] binder: 14233:14234 got reply transaction with no transaction stack [ 559.598241][T14234] binder: 14233:14234 transaction reply to 0:0 failed 20/29201/-71, code 0 size 80-24 line 3155 [ 559.598717][ T9] binder: undelivered TRANSACTION_ERROR: 29201 [ 559.838405][T14235] netlink: 168 bytes leftover after parsing attributes in process `syz.0.2766'. [ 559.864883][T14239] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 559.983946][T14255] FAULT_INJECTION: forcing a failure. [ 559.983946][T14255] name failslab, interval 1, probability 0, space 0, times 0 [ 559.983982][T14255] CPU: 1 UID: 0 PID: 14255 Comm: syz.0.2774 Tainted: G L syzkaller #0 PREEMPT [ 559.983997][T14255] Tainted: [L]=SOFTLOCKUP [ 559.984002][T14255] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 559.984009][T14255] Call trace: [ 559.984013][T14255] show_stack+0x2c/0x3c (C) [ 559.984035][T14255] __dump_stack+0x30/0x40 [ 559.984046][T14255] dump_stack_lvl+0xd8/0x12c [ 559.984056][T14255] dump_stack+0x1c/0x28 [ 559.984066][T14255] should_fail_ex+0x41c/0x590 [ 559.984078][T14255] should_failslab+0xc4/0x120 [ 559.984087][T14255] kmem_cache_alloc_noprof+0x94/0x5d8 [ 559.984096][T14255] skb_clone+0x1ac/0x320 [ 559.984106][T14255] __netlink_deliver_tap+0x364/0x6f4 [ 559.984116][T14255] netlink_deliver_tap+0x1d8/0x1dc [ 559.984124][T14255] __netlink_sendskb+0x78/0xd0 [ 559.984132][T14255] netlink_sendskb+0x2c/0xdc [ 559.984140][T14255] netlink_unicast+0x2c0/0x7f8 [ 559.984148][T14255] netlink_ack+0x570/0x890 [ 559.984155][T14255] netlink_rcv_skb+0x21c/0x414 [ 559.984164][T14255] rtnetlink_rcv+0x28/0x38 [ 559.984171][T14255] netlink_unicast+0x600/0x7f8 [ 559.984179][T14255] netlink_sendmsg+0x648/0x948 [ 559.984187][T14255] __sock_sendmsg+0xc8/0x17c [ 559.984195][T14255] ____sys_sendmsg+0x3d0/0x6c8 [ 559.984204][T14255] ___sys_sendmsg+0x198/0x224 [ 559.984213][T14255] __sys_sendmsg+0x158/0x204 [ 559.984221][T14255] __arm64_sys_sendmsg+0x80/0x94 [ 559.984230][T14255] invoke_syscall+0x98/0x244 [ 559.984244][T14255] el0_svc_common+0xec/0x23c [ 559.984255][T14255] do_el0_svc+0x4c/0x5c [ 559.984265][T14255] el0_svc+0x64/0x260 [ 559.984276][T14255] el0t_64_sync_handler+0x48/0x148 [ 559.984285][T14255] el0t_64_sync+0x198/0x19c [ 560.110583][T14263] overlay: Unknown parameter 'obj_user' [ 562.735714][T14305] syzkaller1: entered promiscuous mode [ 562.735751][T14305] syzkaller1: entered allmulticast mode [ 563.051973][T14311] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2792'. [ 564.408084][T14324] netlink: 'syz.3.2797': attribute type 3 has an invalid length. [ 564.471374][T14334] futex_wake_op: syz.3.2800 tries to shift op by -65; fix this program [ 564.917996][T14346] futex_wake_op: syz.5.2803 tries to shift op by -65; fix this program [ 565.297887][T14354] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2801'. [ 565.516708][T14357] futex_wake_op: syz.4.2807 tries to shift op by -65; fix this program [ 565.732499][T14365] FAULT_INJECTION: forcing a failure. [ 565.732499][T14365] name failslab, interval 1, probability 0, space 0, times 0 [ 565.732574][T14365] CPU: 1 UID: 0 PID: 14365 Comm: syz.4.2807 Tainted: G L syzkaller #0 PREEMPT [ 565.732589][T14365] Tainted: [L]=SOFTLOCKUP [ 565.732593][T14365] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 565.732598][T14365] Call trace: [ 565.732601][T14365] show_stack+0x2c/0x3c (C) [ 565.732622][T14365] __dump_stack+0x30/0x40 [ 565.732633][T14365] dump_stack_lvl+0xd8/0x12c [ 565.732643][T14365] dump_stack+0x1c/0x28 [ 565.732652][T14365] should_fail_ex+0x41c/0x590 [ 565.732664][T14365] should_failslab+0xc4/0x120 [ 565.732672][T14365] kmem_cache_alloc_lru_noprof+0x98/0x5dc [ 565.732682][T14365] __d_alloc+0x50/0x690 [ 565.732690][T14365] d_alloc_pseudo+0x2c/0xd8 [ 565.732698][T14365] alloc_path_pseudo+0xe8/0x1d4 [ 565.732706][T14365] alloc_file_pseudo+0xb0/0x198 [ 565.732714][T14365] __anon_inode_getfile+0x118/0x1c8 [ 565.732724][T14365] anon_inode_getfile+0x44/0x58 [ 565.732734][T14365] bpf_link_prime+0x100/0x1f8 [ 565.732745][T14365] cgroup_bpf_link_attach+0x19c/0x3d4 [ 565.732756][T14365] link_create+0x2e8/0x668 [ 565.732764][T14365] __sys_bpf+0x800/0x8c8 [ 565.732771][T14365] __arm64_sys_bpf+0xc8/0xe4 [ 565.732781][T14365] invoke_syscall+0x98/0x244 [ 565.732791][T14365] el0_svc_common+0xec/0x23c [ 565.732801][T14365] do_el0_svc+0x4c/0x5c [ 565.732811][T14365] el0_svc+0x64/0x260 [ 565.732821][T14365] el0t_64_sync_handler+0x48/0x148 [ 565.732831][T14365] el0t_64_sync+0x198/0x19c [ 566.089265][T14374] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 566.090808][T14374] vhci_hcd vhci_hcd.2: invalid port number 96 [ 566.092034][T14374] vhci_hcd vhci_hcd.2: default hub control req: 0311 v0005 i0060 l7 [ 566.095177][T14374] 9p: p9: multiple sources not supported [ 566.198474][T14376] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2811'. [ 568.000065][T14428] ipvlan2: entered allmulticast mode [ 568.001163][T14428] batadv_slave_1: entered allmulticast mode [ 568.003226][T14428] batman_adv: batadv0: Adding interface: ipvlan2 [ 568.004614][T14428] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 568.009559][T14428] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 568.011645][T14428] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 568.015039][T14428] batman_adv: batadv0: Interface activated: ipvlan2 [ 568.060525][ T1500] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 568.096135][T14432] FAULT_INJECTION: forcing a failure. [ 568.096135][T14432] name failslab, interval 1, probability 0, space 0, times 0 [ 568.096168][T14432] CPU: 0 UID: 0 PID: 14432 Comm: syz.0.2831 Tainted: G L syzkaller #0 PREEMPT [ 568.096183][T14432] Tainted: [L]=SOFTLOCKUP [ 568.096187][T14432] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 568.096194][T14432] Call trace: [ 568.096198][T14432] show_stack+0x2c/0x3c (C) [ 568.096217][T14432] __dump_stack+0x30/0x40 [ 568.096229][T14432] dump_stack_lvl+0xd8/0x12c [ 568.096239][T14432] dump_stack+0x1c/0x28 [ 568.096249][T14432] should_fail_ex+0x41c/0x590 [ 568.096261][T14432] should_failslab+0xc4/0x120 [ 568.096270][T14432] __kmalloc_noprof+0x108/0x6b8 [ 568.096278][T14432] tomoyo_realpath_from_path+0xbc/0x4dc [ 568.096293][T14432] tomoyo_check_open_permission+0x1c4/0x394 [ 568.096301][T14432] tomoyo_file_open+0x78/0xcc [ 568.096310][T14432] security_file_open+0xbc/0x258 [ 568.096318][T14432] do_dentry_open+0x2a8/0xfc0 [ 568.096329][T14432] vfs_open+0x44/0x2dc [ 568.096338][T14432] path_openat+0x21fc/0x2a60 [ 568.096347][T14432] do_file_open+0x1c8/0x2e8 [ 568.096355][T14432] do_sys_openat2+0x114/0x1e8 [ 568.096365][T14432] do_sys_open+0xb0/0xe0 [ 568.096375][T14432] __arm64_sys_openat+0xa0/0xbc [ 568.096385][T14432] invoke_syscall+0x98/0x244 [ 568.096395][T14432] el0_svc_common+0xec/0x23c [ 568.096405][T14432] do_el0_svc+0x4c/0x5c [ 568.096414][T14432] el0_svc+0x64/0x260 [ 568.096425][T14432] el0t_64_sync_handler+0x48/0x148 [ 568.096434][T14432] el0t_64_sync+0x198/0x19c [ 568.096444][T14432] ERROR: Out of memory at tomoyo_realpath_from_path. [ 568.774464][ T1500] usb 1-1: Dual-Role OTG device on HNP port [ 568.778163][ T1500] usb 1-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 7.02 [ 568.781023][ T1500] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 568.854350][ T1500] gspca_main: spca501-2.14.0 probing 0000:0000 [ 568.863324][ T1500] gspca_spca501: reg write: error -32 [ 568.863359][ T1500] spca501 1-1:1.0: Reg write failed for 0x02,0x0f,0x05 [ 568.863401][ T1500] spca501 1-1:1.0: probe with driver spca501 failed with error -22 [ 568.962073][T14441] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2833'. [ 568.998635][ T4390] block nbd1: Possible stuck request 000000007ea73d32: control (read@0,4096B). Runtime 270 seconds [ 569.155532][T14441] 8021q: adding VLAN 0 to HW filter on device bond7 [ 569.197252][T14456] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2836'. [ 569.454124][ T1500] usb 1-1: USB disconnect, device number 20 [ 570.225579][T14490] FAULT_INJECTION: forcing a failure. [ 570.225579][T14490] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 570.225629][T14490] CPU: 0 UID: 0 PID: 14490 Comm: syz.5.2850 Tainted: G L syzkaller #0 PREEMPT [ 570.225647][T14490] Tainted: [L]=SOFTLOCKUP [ 570.225651][T14490] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 570.225657][T14490] Call trace: [ 570.225661][T14490] show_stack+0x2c/0x3c (C) [ 570.225681][T14490] __dump_stack+0x30/0x40 [ 570.225692][T14490] dump_stack_lvl+0xd8/0x12c [ 570.225702][T14490] dump_stack+0x1c/0x28 [ 570.225712][T14490] should_fail_ex+0x41c/0x590 [ 570.225724][T14490] should_fail+0x14/0x24 [ 570.225735][T14490] should_fail_usercopy+0x20/0x30 [ 570.225746][T14490] simple_read_from_buffer+0xc4/0x238 [ 570.225757][T14490] proc_fail_nth_read+0x1a8/0x248 [ 570.225766][T14490] vfs_read+0x230/0x8c8 [ 570.225777][T14490] ksys_read+0x12c/0x228 [ 570.225787][T14490] __arm64_sys_read+0x7c/0x90 [ 570.225794][T14490] invoke_syscall+0x98/0x244 [ 570.225804][T14490] el0_svc_common+0xec/0x23c [ 570.225814][T14490] do_el0_svc+0x4c/0x5c [ 570.225824][T14490] el0_svc+0x64/0x260 [ 570.225835][T14490] el0t_64_sync_handler+0x48/0x148 [ 570.225844][T14490] el0t_64_sync+0x198/0x19c [ 571.630504][T14508] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2853'. [ 572.952198][ T1500] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 573.119312][ T1500] usb 1-1: Dual-Role OTG device on HNP port [ 573.120723][ T1500] usb 1-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 7.02 [ 573.120754][ T1500] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 573.134997][ T1500] gspca_main: spca501-2.14.0 probing 0000:0000 [ 573.140083][ T1500] gspca_spca501: reg write: error -32 [ 573.140113][ T1500] spca501 1-1:1.0: Reg write failed for 0x02,0x0f,0x05 [ 573.140160][ T1500] spca501 1-1:1.0: probe with driver spca501 failed with error -22 [ 573.571189][T14541] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 574.796942][T14555] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 576.092163][ T1500] usb 1-1: USB disconnect, device number 21 [ 576.778252][ T1500] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 576.991011][ T1500] usb 1-1: Dual-Role OTG device on HNP port [ 576.992444][ T1500] usb 1-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 7.02 [ 576.994280][ T1500] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 577.008699][ T1500] gspca_main: spca501-2.14.0 probing 0000:0000 [ 577.012437][ T1500] gspca_spca501: reg write: error -32 [ 577.017293][ T1500] spca501 1-1:1.0: Reg write failed for 0x02,0x0f,0x05 [ 577.019420][ T1500] spca501 1-1:1.0: probe with driver spca501 failed with error -22 [ 577.198375][T14583] netlink: 'syz.3.2876': attribute type 3 has an invalid length. [ 577.235355][T14588] futex_wake_op: syz.3.2879 tries to shift op by -65; fix this program [ 577.235694][T14588] PKCS7: Unknown OID: [4] 4.2(bad) [ 577.235717][T14588] PKCS7: Only support pkcs7_signedData type [ 577.388739][ T30] kauditd_printk_skb: 28 callbacks suppressed [ 577.388776][ T30] audit: type=1326 audit(525121.392:410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14589 comm="syz.1.2878" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff93177fe8 code=0x0 [ 577.681366][T14590] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2878'. [ 581.125624][T14644] FAULT_INJECTION: forcing a failure. [ 581.125624][T14644] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 581.125719][T14644] CPU: 1 UID: 0 PID: 14644 Comm: syz.0.2893 Tainted: G L syzkaller #0 PREEMPT [ 581.125734][T14644] Tainted: [L]=SOFTLOCKUP [ 581.125738][T14644] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 581.125743][T14644] Call trace: [ 581.125747][T14644] show_stack+0x2c/0x3c (C) [ 581.125767][T14644] __dump_stack+0x30/0x40 [ 581.125778][T14644] dump_stack_lvl+0xd8/0x12c [ 581.125788][T14644] dump_stack+0x1c/0x28 [ 581.125798][T14644] should_fail_ex+0x41c/0x590 [ 581.125809][T14644] should_fail+0x14/0x24 [ 581.125818][T14644] should_fail_usercopy+0x20/0x30 [ 581.125829][T14644] _inline_copy_from_user+0x3c/0x174 [ 581.125840][T14644] copy_msghdr_from_user+0xb8/0x194 [ 581.125849][T14644] ___sys_recvmsg+0x11c/0x1f4 [ 581.125858][T14644] do_recvmmsg+0x288/0x7d4 [ 581.125867][T14644] __sys_recvmmsg+0x1e0/0x270 [ 581.125875][T14644] __arm64_sys_recvmmsg+0xdc/0x104 [ 581.125884][T14644] invoke_syscall+0x98/0x244 [ 581.125895][T14644] el0_svc_common+0xec/0x23c [ 581.125905][T14644] do_el0_svc+0x4c/0x5c [ 581.125914][T14644] el0_svc+0x64/0x260 [ 581.125925][T14644] el0t_64_sync_handler+0x48/0x148 [ 581.125934][T14644] el0t_64_sync+0x198/0x19c [ 581.870897][T14649] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2895'. [ 581.883928][T14649] 8021q: adding VLAN 0 to HW filter on device bond5 [ 582.021444][T14656] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2899'. [ 582.080980][T14660] futex_wake_op: syz.3.2901 tries to shift op by -65; fix this program [ 583.027255][T14675] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 583.249964][ T50] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 583.252476][ T50] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 583.254953][ T50] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 583.256938][ T50] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 583.258665][ T50] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 583.355056][ T4725] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 583.357707][ T4725] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 583.359313][ T4725] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 583.362311][ T4725] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 583.364138][ T4725] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 583.371572][ T1500] usb 1-1: USB disconnect, device number 22 [ 583.474161][T14706] futex_wake_op: syz.5.2914 tries to shift op by -65; fix this program [ 583.819013][T14210] syz_tun (unregistering): left allmulticast mode [ 583.882769][T14686] wlan0 speed is unknown, defaulting to 1000 [ 584.390650][T14735] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2918'. [ 584.471937][ T1070] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 584.504659][T14686] bridge0: port 1(bridge_slave_0) entered blocking state [ 584.504711][T14686] bridge0: port 1(bridge_slave_0) entered disabled state [ 584.504881][T14686] bridge_slave_0: entered allmulticast mode [ 584.505371][T14686] bridge_slave_0: entered promiscuous mode [ 584.506666][T14686] bridge0: port 2(bridge_slave_1) entered blocking state [ 584.506720][T14686] bridge0: port 2(bridge_slave_1) entered disabled state [ 584.506782][T14686] bridge_slave_1: entered allmulticast mode [ 584.507265][T14686] bridge_slave_1: entered promiscuous mode [ 584.522136][T14686] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 584.526129][T14686] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 584.683860][ T1070] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 584.709200][T14757] bridge0: port 2(bridge_slave_1) entered disabled state [ 584.709579][T14757] bridge_slave_1: left allmulticast mode [ 584.709609][T14757] bridge_slave_1: left promiscuous mode [ 584.709685][T14757] bridge0: port 2(bridge_slave_1) entered disabled state [ 584.718031][T14757] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 584.726348][T14686] team0: Port device team_slave_0 added [ 584.733659][T14686] team0: Port device team_slave_1 added [ 584.839015][ T1070] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 584.845748][T14686] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 584.845761][T14686] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 584.845777][T14686] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 584.846500][T14686] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 584.846508][T14686] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 584.846521][T14686] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 584.917838][T14686] hsr_slave_0: entered promiscuous mode [ 584.919342][T14686] hsr_slave_1: entered promiscuous mode [ 584.921453][T14686] debugfs: 'hsr0' already exists in 'hsr' [ 584.922669][T14686] Cannot create hsr debugfs directory [ 585.057858][ T1070] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 585.134927][T14769] futex_wake_op: syz.0.2929 tries to shift op by -65; fix this program [ 585.454977][ T4725] Bluetooth: hci4: command tx timeout [ 585.559639][ T1070] bridge_slave_1: left allmulticast mode [ 585.559679][ T1070] bridge_slave_1: left promiscuous mode [ 585.559800][ T1070] bridge0: port 2(bridge_slave_1) entered disabled state [ 585.567089][ T1070] bridge_slave_0: left allmulticast mode [ 585.567125][ T1070] bridge_slave_0: left promiscuous mode [ 585.567225][ T1070] bridge0: port 1(bridge_slave_0) entered disabled state [ 585.577345][ T1070] pim6reg: left allmulticast mode [ 585.810799][ T1070] bond4 (unregistering): (slave bridge1): Releasing backup interface [ 585.810842][ T1070] bridge1 (unregistering): left promiscuous mode [ 585.810904][ T1070] bridge1 (unregistering): left allmulticast mode [ 585.884310][ T1070] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 585.897098][ T1070] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 585.925165][ T1070] bond0 (unregistering): Released all slaves [ 585.928908][ T1070] bond1 (unregistering): Released all slaves [ 585.942585][ T1070] bond2 (unregistering): Released all slaves [ 585.947083][ T1070] bond3 (unregistering): Released all slaves [ 585.957751][ T1070] bond4 (unregistering): Released all slaves [ 585.989274][ T4399] 8021q: adding VLAN 0 to HW filter on device eth4 [ 586.017718][T14795] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 586.097648][ T1070] tipc: Left network mode [ 586.204777][T14809] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2935'. [ 586.655856][T14834] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2940'. [ 586.658276][T14834] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2940'. [ 586.965991][ T1070] hsr_slave_0: left promiscuous mode [ 586.966339][ T1070] hsr_slave_1: left promiscuous mode [ 587.026645][ T1070] veth1_macvtap: left promiscuous mode [ 587.028000][ T1070] veth1_vlan: left promiscuous mode [ 587.029257][ T1070] veth0_vlan: left promiscuous mode [ 587.067872][T14844] futex_wake_op: syz.4.2944 tries to shift op by -65; fix this program [ 587.135921][ T5483] smc: removing ib device syz2 [ 587.488857][T14855] futex_wake_op: syz.1.2945 tries to shift op by -65; fix this program [ 587.502791][ T4725] Bluetooth: hci4: command tx timeout [ 587.601723][T14842] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2943'. [ 587.835407][T14686] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 587.841465][T14686] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 587.845513][T14686] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 587.859021][T14686] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 587.861006][T14686] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 587.871849][T14686] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 587.872349][T14686] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 587.880880][T14686] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 587.946935][T14686] 8021q: adding VLAN 0 to HW filter on device bond0 [ 587.960465][T14888] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 587.960465][T14888] The task syz.5.2949 (14888) triggered the difference, watch for misbehavior. [ 587.966546][T14686] 8021q: adding VLAN 0 to HW filter on device team0 [ 587.971960][ T3697] bridge0: port 1(bridge_slave_0) entered blocking state [ 587.972015][ T3697] bridge0: port 1(bridge_slave_0) entered forwarding state [ 588.023639][ T3697] bridge0: port 2(bridge_slave_1) entered blocking state [ 588.023692][ T3697] bridge0: port 2(bridge_slave_1) entered forwarding state [ 588.648754][T14920] netlink: 'syz.1.2955': attribute type 1 has an invalid length. [ 588.887640][T14686] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 588.968561][T14686] veth0_vlan: entered promiscuous mode [ 588.986813][T14686] veth1_vlan: entered promiscuous mode [ 589.089231][T14686] veth0_macvtap: entered promiscuous mode [ 589.094572][T14686] veth1_macvtap: entered promiscuous mode [ 589.129312][T14686] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 589.143385][T14686] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 589.145562][ T1070] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 589.145660][ T1070] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 589.145734][ T1070] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 589.145805][ T1070] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 589.258820][T14953] futex_wake_op: syz.0.2962 tries to shift op by -65; fix this program [ 589.379978][ T3697] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 589.380008][ T3697] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 589.411316][ T3697] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 589.411356][ T3697] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 589.581973][ T4725] Bluetooth: hci4: command tx timeout [ 589.620072][T14971] loop3: detected capacity change from 0 to 512 [ 590.809029][T14989] 9pnet_fd: Insufficient options for proto=fd [ 590.971539][T14995] syz_tun: tun_net_xmit 86 [ 590.978008][ T50] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 590.979208][ T50] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 590.979632][ T50] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 590.980078][ T50] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 590.980295][ T50] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 591.040110][T15002] loop3: detected capacity change from 0 to 1024 [ 591.045252][T15002] EXT4-fs: Ignoring removed bh option [ 591.050797][T15002] EXT4-fs (loop3): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 591.067188][T15002] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 591.110735][T14996] wlan0 speed is unknown, defaulting to 1000 [ 591.116377][T15002] EXT4-fs error (device loop3): ext4_find_dest_de:2050: inode #12: block 7: comm syz.3.2973: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=56 fake=0 [ 591.130166][T15002] EXT4-fs (loop3): Remounting filesystem read-only [ 591.131273][T15002] overlayfs: cleanup of 'work/#2f' failed (-30) [ 591.185425][T14686] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 591.226752][T15018] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 591.940740][ T4725] Bluetooth: hci4: command tx timeout [ 591.977359][T15021] input: syz1 as /devices/virtual/input/input11 [ 591.991165][ C0] syz_tun: tun_net_xmit 86 [ 592.004727][ T866] kernel read not supported for file /bus/input/devices (pid: 866 comm: kworker/0:2) [ 592.113358][T15026] futex_wake_op: syz.4.2978 tries to shift op by -65; fix this program [ 592.479913][T15036] FAULT_INJECTION: forcing a failure. [ 592.479913][T15036] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 592.482627][T15036] CPU: 1 UID: 0 PID: 15036 Comm: syz.3.2980 Tainted: G L syzkaller #0 PREEMPT [ 592.482655][T15036] Tainted: [L]=SOFTLOCKUP [ 592.482662][T15036] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 592.482669][T15036] Call trace: [ 592.482674][T15036] show_stack+0x2c/0x3c (C) [ 592.482695][T15036] __dump_stack+0x30/0x40 [ 592.482706][T15036] dump_stack_lvl+0xd8/0x12c [ 592.482716][T15036] dump_stack+0x1c/0x28 [ 592.482726][T15036] should_fail_ex+0x41c/0x590 [ 592.482737][T15036] should_fail+0x14/0x24 [ 592.482746][T15036] should_fail_usercopy+0x20/0x30 [ 592.482757][T15036] _inline_copy_from_user+0x3c/0x174 [ 592.482768][T15036] do_sock_getsockopt+0x210/0x720 [ 592.482777][T15036] __sys_getsockopt+0xfc/0x168 [ 592.482785][T15036] __arm64_sys_getsockopt+0xc0/0xdc [ 592.482795][T15036] invoke_syscall+0x98/0x244 [ 592.482805][T15036] el0_svc_common+0xec/0x23c [ 592.482815][T15036] do_el0_svc+0x4c/0x5c [ 592.482825][T15036] el0_svc+0x64/0x260 [ 592.482835][T15036] el0t_64_sync_handler+0x48/0x148 [ 592.482845][T15036] el0t_64_sync+0x198/0x19c [ 592.508327][T14996] bridge0: port 1(bridge_slave_0) entered blocking state [ 592.509682][T14996] bridge0: port 1(bridge_slave_0) entered disabled state [ 592.509777][T14996] bridge_slave_0: entered allmulticast mode [ 592.517075][T14996] bridge_slave_0: entered promiscuous mode [ 592.522058][T14996] bridge0: port 2(bridge_slave_1) entered blocking state [ 592.522807][T14996] bridge0: port 2(bridge_slave_1) entered disabled state [ 592.522909][T14996] bridge_slave_1: entered allmulticast mode [ 592.523384][T14996] bridge_slave_1: entered promiscuous mode [ 592.539148][T14996] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 592.546678][T14996] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 592.562916][T14996] team0: Port device team_slave_0 added [ 592.563938][T14996] team0: Port device team_slave_1 added [ 592.575964][T14996] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 592.576054][T14996] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 592.576075][T14996] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 592.576711][T14996] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 592.576719][T14996] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 592.576735][T14996] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 592.593752][T14996] hsr_slave_0: entered promiscuous mode [ 592.594212][T14996] hsr_slave_1: entered promiscuous mode [ 592.594552][T14996] debugfs: 'hsr0' already exists in 'hsr' [ 592.594565][T14996] Cannot create hsr debugfs directory [ 592.682294][T14996] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 592.755280][T15041] @0Ù: renamed from dummy0 (while UP) [ 592.828906][T14996] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 592.978735][T14996] netdevsim netdevsim0  (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 593.020351][ C0] syz_tun: tun_net_xmit 86 [ 593.061998][ T4725] Bluetooth: hci3: command tx timeout [ 593.394957][T15052] netlink: 148 bytes leftover after parsing attributes in process `syz.4.2984'. [ 593.823601][T15054] netlink: 'syz.5.2985': attribute type 2 has an invalid length. [ 593.823642][T15054] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2985'. [ 593.824115][T15054] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 594.964196][T14996] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 594.975945][T15066] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2990'. [ 594.975983][T15066] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 594.976415][T15066] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 594.976747][T15066] batman_adv: batadv0: Interface deactivated: ipvlan2 [ 594.976764][T15066] batman_adv: batadv0: Removing interface: ipvlan2 [ 594.983122][T15063] netlink: 76 bytes leftover after parsing attributes in process `syz.5.2989'. [ 595.100820][ T4725] Bluetooth: hci3: command tx timeout [ 595.145245][T14996] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 595.147747][T14996] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 595.435069][T14996] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 595.959950][T14996] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 595.960391][T14996] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 595.967726][T14996] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 595.974255][T14996] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 595.978246][T14996] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 596.011277][T14996] 8021q: adding VLAN 0 to HW filter on device bond0 [ 596.018126][T14996] 8021q: adding VLAN 0 to HW filter on device team0 [ 596.022233][ T1070] bridge0: port 1(bridge_slave_0) entered blocking state [ 596.022290][ T1070] bridge0: port 1(bridge_slave_0) entered forwarding state [ 596.030643][ T1070] bridge0: port 2(bridge_slave_1) entered blocking state [ 596.030686][ T1070] bridge0: port 2(bridge_slave_1) entered forwarding state [ 596.111621][T15089] FAULT_INJECTION: forcing a failure. [ 596.111621][T15089] name failslab, interval 1, probability 0, space 0, times 0 [ 596.111664][T15089] CPU: 1 UID: 0 PID: 15089 Comm: syz.3.2994 Tainted: G L syzkaller #0 PREEMPT [ 596.111680][T15089] Tainted: [L]=SOFTLOCKUP [ 596.111684][T15089] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 596.111690][T15089] Call trace: [ 596.111693][T15089] show_stack+0x2c/0x3c (C) [ 596.111715][T15089] __dump_stack+0x30/0x40 [ 596.111726][T15089] dump_stack_lvl+0xd8/0x12c [ 596.111736][T15089] dump_stack+0x1c/0x28 [ 596.111745][T15089] should_fail_ex+0x41c/0x590 [ 596.111757][T15089] should_failslab+0xc4/0x120 [ 596.111765][T15089] __kvmalloc_node_noprof+0x160/0x7d8 [ 596.111775][T15089] bpf_compute_postorder+0xd0/0x768 [ 596.111785][T15089] bpf_check+0x1048/0x40dc [ 596.111794][T15089] bpf_prog_load+0x1050/0x15f8 [ 596.111802][T15089] __sys_bpf+0x870/0x8c8 [ 596.111809][T15089] __arm64_sys_bpf+0xc8/0xe4 [ 596.111819][T15089] invoke_syscall+0x98/0x244 [ 596.111830][T15089] el0_svc_common+0xec/0x23c [ 596.111839][T15089] do_el0_svc+0x4c/0x5c [ 596.111849][T15089] el0_svc+0x64/0x260 [ 596.111859][T15089] el0t_64_sync_handler+0x48/0x148 [ 596.111869][T15089] el0t_64_sync+0x198/0x19c [ 596.149535][T15093] futex_wake_op: syz.3.2995 tries to shift op by -65; fix this program [ 596.188007][T14996] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 596.221130][T14996] veth0_vlan: entered promiscuous mode [ 596.224847][T14996] veth1_vlan: entered promiscuous mode [ 596.233729][T14996] veth0_macvtap: entered promiscuous mode [ 596.239267][T14996] veth1_macvtap: entered promiscuous mode [ 596.250703][T14996] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 596.254158][T14996] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 596.259769][ T1070] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 596.259815][ T1070] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 596.259836][ T1070] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 596.259851][ T1070] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 596.301987][ T3697] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 596.304369][ T3697] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 596.317250][ T1070] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 596.317277][ T1070] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 596.496981][T15107] dlm: non-version read from control device 0 [ 596.517914][T15110] random: crng reseeded on system resumption [ 596.626028][T15112] futex_wake_op: syz.1.2999 tries to shift op by -65; fix this program [ 597.678053][ T4725] Bluetooth: hci3: command tx timeout [ 598.344067][T15127] futex_wake_op: syz.1.3004 tries to shift op by -65; fix this program [ 598.855277][T15147] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3010'. [ 599.080300][T15158] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3011'. [ 599.411587][T15163] futex_wake_op: syz.1.3014 tries to shift op by -65; fix this program [ 599.500529][ T4390] block nbd1: Possible stuck request 000000007ea73d32: control (read@0,4096B). Runtime 300 seconds [ 599.737290][ T4725] Bluetooth: hci3: command tx timeout [ 600.132216][T15181] loop3: detected capacity change from 0 to 4096 [ 600.135053][T15181] ext4: Unknown parameter 'appraise' [ 600.157879][T15181] loop3: detected capacity change from 0 to 8 [ 600.165890][T15181] squashfs: SQUASHFS error: Xattrs in filesystem, these will be ignored [ 600.168912][T15181] unable to read xattr id index table [ 600.171213][T15181] unable to read fragment index table [ 600.249568][T15186] loop3: detected capacity change from 0 to 512 [ 600.251344][T15186] ext4: Unknown parameter 'subj_role' [ 600.336312][T15102] syz_tun: tun_net_xmit 110 [ 600.349201][T15179] futex_wake_op: syz.4.3020 tries to shift op by 32; fix this program [ 600.379519][T15194] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3024'. [ 600.489641][T15196] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3025'. [ 600.620135][T15208] futex_wake_op: syz.0.3028 tries to shift op by -65; fix this program [ 600.669086][ T1500] syz_tun: tun_net_xmit 110 [ 601.146681][T15216] FAULT_INJECTION: forcing a failure. [ 601.146681][T15216] name failslab, interval 1, probability 0, space 0, times 0 [ 601.146715][T15216] CPU: 1 UID: 0 PID: 15216 Comm: syz.5.3029 Tainted: G L syzkaller #0 PREEMPT [ 601.146731][T15216] Tainted: [L]=SOFTLOCKUP [ 601.146735][T15216] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 601.146741][T15216] Call trace: [ 601.146744][T15216] show_stack+0x2c/0x3c (C) [ 601.146766][T15216] __dump_stack+0x30/0x40 [ 601.146777][T15216] dump_stack_lvl+0xd8/0x12c [ 601.146787][T15216] dump_stack+0x1c/0x28 [ 601.146797][T15216] should_fail_ex+0x41c/0x590 [ 601.146808][T15216] should_failslab+0xc4/0x120 [ 601.146817][T15216] __kmalloc_cache_noprof+0x94/0x5ec [ 601.146826][T15216] mon_bin_open+0xe4/0x380 [ 601.146835][T15216] chrdev_open+0x398/0x3e8 [ 601.146845][T15216] do_dentry_open+0x5c4/0xfc0 [ 601.146855][T15216] vfs_open+0x44/0x2dc [ 601.146864][T15216] path_openat+0x21fc/0x2a60 [ 601.146873][T15216] do_file_open+0x1c8/0x2e8 [ 601.146881][T15216] do_sys_openat2+0x114/0x1e8 [ 601.146891][T15216] do_sys_open+0xb0/0xe0 [ 601.146900][T15216] __arm64_sys_openat+0xa0/0xbc [ 601.146910][T15216] invoke_syscall+0x98/0x244 [ 601.146920][T15216] el0_svc_common+0xec/0x23c [ 601.146930][T15216] do_el0_svc+0x4c/0x5c [ 601.146940][T15216] el0_svc+0x64/0x260 [ 601.146951][T15216] el0t_64_sync_handler+0x48/0x148 [ 601.146961][T15216] el0t_64_sync+0x198/0x19c [ 601.521355][T15228] loop3: detected capacity change from 0 to 256 [ 601.547467][T15229] futex_wake_op: syz.0.3034 tries to shift op by -65; fix this program [ 601.713119][ T50] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 601.715195][ T50] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 601.715957][ T50] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 601.716749][ T50] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 601.717003][ T50] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 601.997416][T15233] wlan0 speed is unknown, defaulting to 1000 [ 602.066008][ C0] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 602.275622][T15233] bridge0: port 1(bridge_slave_0) entered blocking state [ 602.277298][T15233] bridge0: port 1(bridge_slave_0) entered disabled state [ 602.281650][T15233] bridge_slave_0: entered allmulticast mode [ 602.284563][T15233] bridge_slave_0: entered promiscuous mode [ 602.290739][T15233] bridge0: port 2(bridge_slave_1) entered blocking state [ 602.293430][T15233] bridge0: port 2(bridge_slave_1) entered disabled state [ 602.293607][T15233] bridge_slave_1: entered allmulticast mode [ 602.294098][T15233] bridge_slave_1: entered promiscuous mode [ 602.317033][T15233] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 602.341910][T15233] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 602.415976][T15233] team0: Port device team_slave_0 added [ 602.416917][T15233] team0: Port device team_slave_1 added [ 602.557458][T15259] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3040'. [ 602.557494][T15259] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 602.557524][T15259] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 602.564059][T15259] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 602.564090][T15259] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 602.604901][T15233] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 602.604929][T15233] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 602.604961][T15233] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 602.605685][T15233] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 602.605700][T15233] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 602.605719][T15233] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 602.671614][T15233] hsr_slave_0: entered promiscuous mode [ 602.674282][T15233] hsr_slave_1: entered promiscuous mode [ 602.677271][T15233] debugfs: 'hsr0' already exists in 'hsr' [ 602.677315][T15233] Cannot create hsr debugfs directory [ 602.773447][ T30] audit: type=1400 audit(1049434.789:411): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="*" object="_" requested=w pid=15264 comm="syz.3.3042" src=1 [ 603.011236][ T3697] bond4 (unregistering): (slave gretap1): Releasing backup interface [ 603.097145][ T3697] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 603.138325][ T3697] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 603.156388][ T3697] bond0 (unregistering): (slave 4@0Ù): Releasing backup interface [ 603.196627][ T3697] bond0 (unregistering): Released all slaves [ 603.202309][ T3697] bond1 (unregistering): Released all slaves [ 603.210171][ T3697] bond2 (unregistering): Released all slaves [ 603.219693][ T3697] bond3 (unregistering): Released all slaves [ 603.223746][ T3697] bond4 (unregistering): Released all slaves [ 603.231354][ T3697] bond5 (unregistering): Released all slaves [ 603.359114][ T4399] 8021q: adding VLAN 0 to HW filter on device eth4 [ 603.391493][ T3697] tipc: Disabling bearer [ 603.391633][ T3697] tipc: Left network mode [ 603.662901][T15296] netlink: 'syz.4.3048': attribute type 1 has an invalid length. [ 603.670189][T15299] loop3: detected capacity change from 0 to 128 [ 603.745203][ T4725] Bluetooth: hci2: command tx timeout [ 603.778163][T15303] 8021q: adding VLAN 0 to HW filter on device bond6 [ 603.780652][T15303] bond5: (slave bond6): making interface the new active one [ 603.783798][T15303] bond5: (slave bond6): Enslaving as an active interface with an up link [ 603.870246][T15296] bond5: (slave gretap2): Enslaving as a backup interface with an up link [ 604.026314][T15322] loop3: detected capacity change from 0 to 256 [ 604.310996][ T3697] hsr_slave_0: left promiscuous mode [ 604.312528][ T3697] hsr_slave_1: left promiscuous mode [ 605.526012][ T3697] team0 (unregistering): Port device team_slave_1 removed [ 605.530025][ T3697] team0 (unregistering): Port device team_slave_0 removed [ 605.754795][T15363] loop3: detected capacity change from 0 to 256 [ 605.780960][T15356] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 605.780993][T15356] FAT-fs (loop3): Filesystem has been set read-only [ 605.781072][T15356] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 605.781092][T15356] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 605.795078][T15356] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 605.798252][T15356] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 605.798340][T15356] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 605.798361][T15356] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 605.798393][T15356] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 605.798412][T15356] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 605.798441][T15356] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 605.814327][ T4725] Bluetooth: hci2: command tx timeout [ 605.887421][T15233] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 605.893135][T15233] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 605.894678][T15233] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 605.905895][T15233] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 605.906521][T15233] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 605.912824][T15233] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 605.929961][T15233] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 605.932289][T15233] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 606.051484][T15233] 8021q: adding VLAN 0 to HW filter on device bond0 [ 606.062373][T15233] 8021q: adding VLAN 0 to HW filter on device team0 [ 606.068736][ T3697] bridge0: port 1(bridge_slave_0) entered blocking state [ 606.068786][ T3697] bridge0: port 1(bridge_slave_0) entered forwarding state [ 606.072191][ T1070] bridge0: port 2(bridge_slave_1) entered blocking state [ 606.072246][ T1070] bridge0: port 2(bridge_slave_1) entered forwarding state [ 606.416668][T15233] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 607.290893][T15233] veth0_vlan: entered promiscuous mode [ 607.306105][T15233] veth1_vlan: entered promiscuous mode [ 607.312857][T15233] veth0_macvtap: entered promiscuous mode [ 607.365587][T15233] veth1_macvtap: entered promiscuous mode [ 607.401997][T15233] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 607.414281][T15233] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 607.454919][ T1070] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 607.454978][ T1070] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 607.455014][ T1070] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 607.455037][ T1070] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 607.558389][ T1070] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 607.558427][ T1070] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 607.595581][ T9582] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 607.595614][ T9582] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 607.662173][T15434] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3075'. [ 607.668376][T15440] futex_wake_op: syz.3.3076 tries to shift op by -65; fix this program [ 607.902822][ T4725] Bluetooth: hci2: command tx timeout [ 608.117210][T15449] loop3: detected capacity change from 0 to 512 [ 608.241078][T15449] EXT4-fs error (device loop3): ext4_iget_extra_inode:5180: inode #15: comm syz.3.3077: corrupted in-inode xattr: invalid ea_ino [ 608.241154][T15449] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 608.244437][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 608.244448][ C1] EXT4-fs (loop3): initial error at time 1049440: ext4_iget_extra_inode:5180: inode 15 [ 608.244464][ C1] EXT4-fs (loop3): last error at time 1049440: ext4_iget_extra_inode:5180: inode 15 [ 608.253765][T15449] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.3077: couldn't read orphan inode 15 (err -117) [ 608.253829][T15449] loop3: lost filesystem error report for type 5 error -117 [ 608.261887][T15449] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 609.025757][T14686] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 609.388362][T15461] @0Ù: renamed from dummy0 (while UP) [ 609.578060][ T50] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 609.579535][ T50] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 609.580033][ T50] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 609.580454][ T50] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 609.580667][ T50] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 609.697597][T15464] wlan0 speed is unknown, defaulting to 1000 [ 609.972913][ T4725] Bluetooth: hci2: command tx timeout [ 610.674751][T15491] futex_wake_op: syz.0.3087 tries to shift op by -65; fix this program [ 610.775266][T15505] loop3: detected capacity change from 0 to 1024 [ 610.830056][T15464] bridge0: port 1(bridge_slave_0) entered blocking state [ 610.841304][T15464] bridge0: port 1(bridge_slave_0) entered disabled state [ 610.841492][T15464] bridge_slave_0: entered allmulticast mode [ 610.842026][T15464] bridge_slave_0: entered promiscuous mode [ 610.846733][T15464] bridge0: port 2(bridge_slave_1) entered blocking state [ 610.846771][T15464] bridge0: port 2(bridge_slave_1) entered disabled state [ 610.846911][T15464] bridge_slave_1: entered allmulticast mode [ 610.847378][T15464] bridge_slave_1: entered promiscuous mode [ 610.848519][T15502] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3090'. [ 610.848580][T15502] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 610.848593][T15502] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 610.850210][T15502] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 610.850223][T15502] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 610.876197][T15505] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 610.955818][T15464] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 610.959994][T15464] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 610.978706][T15464] team0: Port device team_slave_0 added [ 610.979604][T15464] team0: Port device team_slave_1 added [ 610.985610][T15464] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 610.985633][T15464] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 610.985650][T15464] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 610.986273][T15464] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 610.986282][T15464] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 610.986306][T15464] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 611.183765][T15464] hsr_slave_0: entered promiscuous mode [ 611.184137][T15464] hsr_slave_1: entered promiscuous mode [ 611.301575][T15464] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 611.301626][T15464] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 611.384222][T15464] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 611.387074][T15464] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 611.476546][T15464] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 611.478756][T15464] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 611.638396][T14686] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 612.514918][ T4725] Bluetooth: hci1: command tx timeout [ 612.844074][T15517] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3094'. [ 612.936333][T15464] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 612.945739][T15464] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 612.947737][T15464] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 612.951784][T15464] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 612.954048][T15464] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 612.957693][T15464] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 612.959643][T15464] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 612.962684][T15464] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 613.002612][T15464] 8021q: adding VLAN 0 to HW filter on device bond0 [ 613.011762][T15464] 8021q: adding VLAN 0 to HW filter on device team0 [ 613.015265][T15542] futex_wake_op: syz.0.3098 tries to shift op by -65; fix this program [ 613.019888][ T3697] bridge0: port 1(bridge_slave_0) entered blocking state [ 613.019939][ T3697] bridge0: port 1(bridge_slave_0) entered forwarding state [ 613.030353][ T3697] bridge0: port 2(bridge_slave_1) entered blocking state [ 613.030411][ T3697] bridge0: port 2(bridge_slave_1) entered forwarding state [ 614.209375][T15464] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 614.241122][T15569] FAULT_INJECTION: forcing a failure. [ 614.241122][T15569] name failslab, interval 1, probability 0, space 0, times 0 [ 614.241163][T15569] CPU: 1 UID: 0 PID: 15569 Comm: syz.5.3103 Tainted: G L syzkaller #0 PREEMPT [ 614.241180][T15569] Tainted: [L]=SOFTLOCKUP [ 614.241184][T15569] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 614.241189][T15569] Call trace: [ 614.241193][T15569] show_stack+0x2c/0x3c (C) [ 614.241214][T15569] __dump_stack+0x30/0x40 [ 614.241225][T15569] dump_stack_lvl+0xd8/0x12c [ 614.241235][T15569] dump_stack+0x1c/0x28 [ 614.241245][T15569] should_fail_ex+0x41c/0x590 [ 614.241256][T15569] should_failslab+0xc4/0x120 [ 614.241265][T15569] __kvmalloc_node_noprof+0x160/0x7d8 [ 614.241274][T15569] bpf_compute_postorder+0x114/0x768 [ 614.241285][T15569] bpf_check+0x1048/0x40dc [ 614.241294][T15569] bpf_prog_load+0x1050/0x15f8 [ 614.241308][T15569] __sys_bpf+0x870/0x8c8 [ 614.241315][T15569] __arm64_sys_bpf+0xc8/0xe4 [ 614.241326][T15569] invoke_syscall+0x98/0x244 [ 614.241337][T15569] el0_svc_common+0xec/0x23c [ 614.241347][T15569] do_el0_svc+0x4c/0x5c [ 614.241357][T15569] el0_svc+0x64/0x260 [ 614.241367][T15569] el0t_64_sync_handler+0x48/0x148 [ 614.241377][T15569] el0t_64_sync+0x198/0x19c [ 614.284913][T15464] veth0_vlan: entered promiscuous mode [ 614.291031][T15464] veth1_vlan: entered promiscuous mode [ 614.299510][T15464] veth0_macvtap: entered promiscuous mode [ 614.305152][T15464] veth1_macvtap: entered promiscuous mode [ 614.316279][T15464] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 614.317419][T15464] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 614.327692][ T9582] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 614.327746][ T9582] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 614.327769][ T9582] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 614.327785][ T9582] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 614.332749][T15579] futex_wake_op: syz.5.3105 tries to shift op by -65; fix this program [ 614.379034][T15587] futex_wake_op: syz.5.3108 tries to shift op by -65; fix this program [ 614.422849][ T39] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 614.422882][ T39] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 614.438197][ T5483] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 614.438233][ T5483] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 614.464420][T15584] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3107'. [ 614.533449][ T4725] Bluetooth: hci1: command tx timeout [ 616.464354][T15616] binder: tried to use weak ref as strong ref [ 616.465627][T15616] binder: 15615:15616 Acquire 1 refcount change on invalid ref 0 ret -22 [ 616.467455][T15616] binder: 15615:15616 got transaction to invalid handle, 1 [ 616.469639][T15616] binder: 15615:15616 cannot find target node [ 616.470945][T15616] binder: 15615:15616 transaction call to 0:0 failed 23/29201/-22, code 0 size 72-24 line 3252 [ 616.473382][T15616] binder: 15615:15616 ioctl c008744c 20000080 returned -22 [ 616.476386][ T4804] binder: undelivered TRANSACTION_ERROR: 29201 [ 616.614486][ T4725] Bluetooth: hci1: command tx timeout [ 616.646922][T15624] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3120'. [ 617.609125][ T1587] ieee802154 phy1 wpan1: encryption failed: -22 [ 617.664087][T15635] futex_wake_op: syz.4.3122 tries to shift op by -65; fix this program [ 618.917156][ T4725] Bluetooth: hci1: command tx timeout [ 620.099430][T15655] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3128'. [ 620.128149][ T1070] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 620.248900][T15671] netlink: 'syz.1.3133': attribute type 5 has an invalid length. [ 620.250672][T15671] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3133'. [ 621.160386][ T4838] syz_tun: tun_net_xmit 110 [ 621.254258][T15678] netlink: 64 bytes leftover after parsing attributes in process `syz.5.3135'. [ 621.326068][ T4899] syz_tun: tun_net_xmit 110 [ 621.449678][T15687] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3138'. [ 621.531567][T15695] bridge0: port 2(bridge_slave_1) entered disabled state [ 621.532062][T15695] bridge_slave_1: left allmulticast mode [ 621.532078][T15695] bridge_slave_1: left promiscuous mode [ 621.532141][T15695] bridge0: port 2(bridge_slave_1) entered disabled state [ 621.537352][T15695] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 621.889086][T15701] loop3: detected capacity change from 0 to 256 [ 621.907938][T15703] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3143'. [ 621.909638][T15703] vlan0: entered allmulticast mode [ 621.909845][T15703] veth0_vlan: entered allmulticast mode [ 621.915993][T15703] Injecting memory failure for pfn 0x169600 at process virtual address 0x20000000 [ 621.922650][T15703] Memory failure: 0x169600: Sending SIGBUS to syz.4.3143:15703 due to hardware memory corruption [ 621.924709][T15703] Memory failure: 0x169600: recovery action for unsplit thp: Failed [ 621.931553][T15703] macvlan2: entered promiscuous mode [ 621.931606][T15703] macvlan2: entered allmulticast mode [ 623.173147][ T31] INFO: task udevd:9308 blocked in I/O wait for more than 143 seconds. [ 623.173222][ T31] Tainted: G L syzkaller #0 [ 623.173262][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 623.173297][ T31] task:udevd state:D stack:0 pid:9308 tgid:9308 ppid:4342 task_flags:0x400140 flags:0x00800011 [ 623.173366][ T31] Call trace: [ 623.173398][ T31] __switch_to+0x2b0/0x6e0 (T) [ 623.173442][ T31] __schedule+0x1370/0x2d80 [ 623.173477][ T31] schedule+0x13c/0x20c [ 623.173510][ T31] io_schedule+0x1c/0xe0 [ 623.173544][ T31] folio_wait_bit_common+0x6b8/0xa30 [ 623.173585][ T31] do_read_cache_folio+0x23c/0x5a8 [ 623.173618][ T31] read_cache_folio+0x68/0x88 [ 623.173651][ T31] read_part_sector+0xcc/0x708 [ 623.173692][ T31] adfspart_check_POWERTEC+0x94/0x5b8 [ 623.173726][ T31] bdev_disk_changed+0x6e4/0x1224 [ 623.173764][ T31] blkdev_get_whole+0x15c/0x240 [ 623.173803][ T31] bdev_open+0x2b4/0x880 [ 623.173840][ T31] blkdev_open+0x2d4/0x408 [ 623.173878][ T31] do_dentry_open+0x5c4/0xfc0 [ 623.173916][ T31] vfs_open+0x44/0x2dc [ 623.173951][ T31] path_openat+0x21fc/0x2a60 [ 623.173986][ T31] do_file_open+0x1c8/0x2e8 [ 623.174024][ T31] do_sys_openat2+0x114/0x1e8 [ 623.174059][ T31] do_sys_open+0xb0/0xe0 [ 623.174095][ T31] __arm64_sys_openat+0xa0/0xbc [ 623.174130][ T31] invoke_syscall+0x98/0x244 [ 623.174167][ T31] el0_svc_common+0xec/0x23c [ 623.174206][ T31] do_el0_svc+0x4c/0x5c [ 623.174242][ T31] el0_svc+0x64/0x260 [ 623.174277][ T31] el0t_64_sync_handler+0x48/0x148 [ 623.174316][ T31] el0t_64_sync+0x198/0x19c [ 623.174614][ T31] [ 623.174614][ T31] Showing all locks held in the system: [ 623.174646][ T31] 1 lock held by khungtaskd/31: [ 623.174676][ T31] #0: ffff800088cf6fe0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x4c/0x188 [ 623.174853][ T31] 2 locks held by kworker/u8:3/40: [ 623.174883][ T31] #0: ffff0000c3575940 ((wq_completion)iou_exit){+.+.}-{0:0}, at: process_scheduled_works+0x734/0x10b8 [ 623.175080][ T31] #1: ffff8000901a7c40 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_scheduled_works+0x73c/0x10b8 [ 623.175276][ T31] 2 locks held by getty/4492: [ 623.175317][ T31] #0: ffff0000c999c0a0 (&tty->ldisc_sem){++++}-{0:0}, at: ldsem_down_read+0x3c/0x4c [ 623.175500][ T31] #1: ffff8000924cb2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x348/0xf78 [ 623.175671][ T31] 2 locks held by kworker/u8:8/5483: [ 623.175705][ T31] 2 locks held by kworker/u8:9/6573: [ 623.175735][ T31] 1 lock held by udevd/9308: [ 623.175764][ T31] #0: ffff0000c6128350 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xc4/0x880 [ 623.175930][ T31] 3 locks held by kworker/u8:13/9582: [ 623.175972][ T31] 4 locks held by syz.3.3144/15704: [ 623.176001][ T31] 2 locks held by syz.3.3144/15710: [ 623.176031][ T31] #0: ffff0000ceb32450 (sb_writers#11){.+.+}-{0:0}, at: vfs_write+0x248/0xa0c [ 623.176226][ T31] #1: ffff0000f1e06180 (&sb->s_type->i_mutex_key#25){++++}-{4:4}, at: generic_file_write_iter+0x84/0x2c0 [ 623.176424][ T31] 2 locks held by syz.0.3148/15715: [ 623.176454][ T31] [ 623.176481][ T31] ============================================= [ 623.176481][ T31] [ 623.176511][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 623.229094][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT [ 623.230824][ T31] Tainted: [L]=SOFTLOCKUP [ 623.231561][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 623.233321][ T31] Call trace: [ 623.233880][ T31] show_stack+0x2c/0x3c (C) [ 623.234664][ T31] __dump_stack+0x30/0x40 [ 623.235374][ T31] dump_stack_lvl+0x30/0x12c [ 623.236184][ T31] dump_stack+0x1c/0x28 [ 623.236921][ T31] vpanic+0x594/0xaf8 [ 623.237578][ T31] vpanic+0x0/0xaf8 [ 623.238216][ T31] hung_task_panic+0x0/0x2c [ 623.238998][ T31] kthread+0x304/0x3d4 [ 623.239688][ T31] ret_from_fork+0x10/0x20 [ 623.240462][ T31] SMP: stopping secondary CPUs [ 623.241278][ T31] Kernel Offset: disabled [ 623.242033][ T31] CPU features: 0x14000000,003c0008,27020501,5427fea7 [ 623.243392][ T31] Memory Limit: none [ 623.641274][ T31] Rebooting in 86400 seconds..