last executing test programs: 7.180567198s ago: executing program 0 (id=80): r0 = socket$inet(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCGARP(r0, 0x8954, &(0x7f0000000180)={{0x2, 0x4e24, @multicast1}, {0x1, @local}, 0xa0, {0x2, 0x4e20, @remote}, 'tunl0\x00'}) bind$inet(r0, &(0x7f0000000000)={0x2, 0x1111, @loopback}, 0x10) listen(r0, 0x1) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write(r1, &(0x7f0000000200)='nqn=test,transport=tcp,traddr=127.0.0.1,trsvcid=4369', 0x34) nanosleep(&(0x7f0000000080)={0x0, 0x5f5e100}, 0x0) r2 = accept$inet(r0, 0x0, 0x0) write(r2, &(0x7f0000000100)="01008000800000000000000200004000"/128, 0x80) nanosleep(&(0x7f0000000080)={0x0, 0x1dcd6500}, 0x0) close(r2) close(r0) close(r1) 6.740081756s ago: executing program 2 (id=86): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) io_uring_setup(0x133a, 0xffffffffffffffff) setresuid(0x0, 0x0, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000018c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r3, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) r5 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000780)={@cgroup=r6, r4, 0x12, 0x200e, 0x0, @value=r6}, 0x20) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000003c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x7, 0x2, 0x1}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040001}, 0x0) r8 = socket(0x400000000010, 0x3, 0x0) ioctl$FS_IOC_FSGETXATTR(r8, 0x801c581f, &(0x7f0000000000)={0x2, 0x6, 0x6, 0x5, 0x1}) socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'pimreg\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r9, {0x5, 0xffff}, {}, {0x10}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_KEYS={0x8, 0x1, 0x9200}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0xc010) r10 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) recvmmsg$unix(r8, &(0x7f0000000900)=[{{&(0x7f0000000080)=@abs, 0x6e, &(0x7f0000000740)=[{&(0x7f00000005c0)=""/246, 0xf6}, {&(0x7f00000006c0)=""/79, 0x4f}], 0x2, &(0x7f0000000780)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x150}}], 0x1, 0x2001, &(0x7f0000000940)={0x0, 0x3938700}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r11, {0xc, 0xc}, {0x0, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) r12 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r12, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@newtfilter={0x2c, 0x2c, 0xd27, 0x70bd2d, 0x2, {0x0, 0x0, 0x0, r13, {0x1, 0x9}, {}, {0x1, 0x4}}, [@TCA_RATE={0x6, 0x5, {0xfb, 0x2}}]}, 0x2c}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) 6.432462024s ago: executing program 2 (id=87): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1002}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000740)=ANY=[@ANYBLOB="3c00000010000500"/20, @ANYRES32=0x0, @ANYBLOB="01000000010000001400030073797a6b616c6c65723000000000000008000a00", @ANYRES32], 0x3c}}, 0x0) r3 = openat$smackfs_syslog(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r4 = landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x18, 0x0) landlock_restrict_self(r4, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x42, 0xde0f9e45a02cc906) prlimit64(0x0, 0x7, &(0x7f00000000c0)={0x5, 0x7}, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000140), 0x802, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu/syz1\x00', 0x1ff) syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) write(r3, &(0x7f0000000700)="ffffffffffff0011223344554305000f32001800000100112233445521112233445500ff9000", 0x26) r5 = accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000080), 0xc0400) ioctl$sock_inet6_SIOCDELRT(r5, 0x890c, &(0x7f00000000c0)={@mcast1, @private0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1c}}, 0x2, 0x58, 0xe1e, 0x380, 0x7fffffffffffffff, 0x4000000}) 6.430457968s ago: executing program 2 (id=88): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000002980)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x4001ffe, 0xa68d7c519fc00ff1, 0xffbc, 0x6, 0x1d45, 0x0, 0x0, 0x0, 0x40}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000006380)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20, 0x0, 0x68cc, {0x0, 0x14}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) writev(r2, &(0x7f0000000380)=[{&(0x7f0000000700)="f313af2b28", 0x5}], 0x1) 6.311479549s ago: executing program 0 (id=93): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000280)={{r1, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)='%ps \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r2, 0xffffffffffffffff}, 0x4) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0500000001000000080000000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000bfa200000000000007020000f8ffffffbfa300000000000007030000f0ffffffb7040000040f000085000000020000009500"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$TOKEN_CREATE(0x24, &(0x7f0000000100)={0x0, r1}, 0x8) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x1f, 0x10, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0feffffb70200000800000018230000", @ANYRESOCT=r4, @ANYRES32=r3], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@RTM_NEWMDB={0x38, 0x54, 0x1, 0x70bd2a, 0x2, {0x7, r9}, [@MDBA_SET_ENTRY={0x20, 0x1, {r8, 0x0, 0x2, 0x2, {@ip4=@multicast1, 0x86dd}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x40080c0) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x9, 0x5, 0x9fd, 0x84, 0x0, 0xffffffffffffffff, 0xfffffffe, '\x00', r8}, 0x50) sendmsg$kcm(r10, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000340)="ee5a7056c36f871a1541a61036be432a7bd2299074500d759c7594849e26582530c8b065f66826d0c6f892fda7a821f333a2ba748a7ae23dadc11c16813bd94b3e9a167bf3f4195595fe0ae3851a99a900ed5ade2a6e83a2a8647669afdd3a2397bea5da3b704bcf6b476722425a9fae93669aa34f6d372b2879c2b7e08a1295d114048a4696e5aa50d51937801ec6768ac8d0c77294920856e811aa2b1cf74c1608d990e7b949bd4d69", 0xaa}, {&(0x7f0000000400)="df33ef0ddfb5b8d4e4e4151079e834a8666b98579cf8d5ea96b0f7611b786907b694770d79a6a3de70", 0x29}], 0x2, &(0x7f0000000840)}, 0x4004000) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000240), 0x800, r10}, 0x38) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000680), &(0x7f0000000540), 0x6c, r10}, 0x38) fdatasync(r4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r5, 0x2f08, 0xe, 0x0, &(0x7f00000004c0)="a162cef0563a20f5177241ee8f52", 0x0, 0x0, 0x6000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7}, 0x50) 6.237433917s ago: executing program 0 (id=96): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000002f40)={[{@nodelalloc}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x5}}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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") (async) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000002f40)={[{@nodelalloc}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x5}}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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") syz_mount_image$fuse(0x0, &(0x7f0000000100)='./bus\x00', 0x20020, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000680)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x34, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x5}}}, &(0x7f0000000480)=0x0) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = syz_io_uring_setup(0x34bc, &(0x7f0000000540)={0x0, 0xd989, 0xc00, 0x2, 0x53}, &(0x7f0000000780)=0x0, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x0, 0x0, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x57, '\x00', 0x0, @cgroup_sock_addr=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) syz_io_uring_submit(r3, r4, r5, &(0x7f0000000000)=@IORING_OP_SPLICE={0x1e, 0xc, 0x0, @fd_index, 0x6, 0x0, 0x0, 0x1, 0x0, {0x0, 0x0, r2}}) io_uring_enter(r2, 0x66ec, 0xffeb, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000540)={'veth0_to_bond\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newlink={0x44, 0x10, 0xffffffffffffffff, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x3971d, 0x4a298}, [@IFLA_MASTER={0x8, 0xa, r7}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r8}]}, 0x44}, 0x1, 0x0, 0x0, 0x24004844}, 0x8000002) r9 = dup(r1) syz_ublk_setup_queues(r9, r0, 0x0, 0x0, 0x1, &(0x7f0000000340)={0x2e, 0x8, 0x0, r9, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x8004, 0x0, 0x0}}, 0x0) ioctl$SIOCX25SCAUSEDIAG(r9, 0x89ec, &(0x7f0000000140)={0x7, 0x6}) chdir(&(0x7f0000000300)='./file0\x00') (async) chdir(&(0x7f0000000300)='./file0\x00') setxattr$trusted_overlay_nlink(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080), &(0x7f00000000c0)={'L-', 0x8}, 0x16, 0x1) (async) setxattr$trusted_overlay_nlink(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080), &(0x7f00000000c0)={'L-', 0x8}, 0x16, 0x1) syz_open_procfs(0x0, &(0x7f0000000240)='cgroup\x00') (async) syz_open_procfs(0x0, &(0x7f0000000240)='cgroup\x00') renameat2(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000a00)='./file1\x00', 0x0) 6.128132357s ago: executing program 0 (id=97): syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x2000200, &(0x7f0000000240)={[{@nodiscard}]}, 0x7, 0x504, &(0x7f0000001180)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x188) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x1860, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000) 6.127542407s ago: executing program 0 (id=98): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000001300)={0xc, {"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", 0x1000}}, 0x1006) 5.886117163s ago: executing program 0 (id=103): io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x7, 0x36c}) syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000980)={0x8, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800008080b63428e900"/20, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x47, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x14, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff100004000", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd4992861ac00", "f4bd000000801900", [0x8, 0xffffffff9673e35d]}}) 5.837731984s ago: executing program 32 (id=103): io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x7, 0x36c}) syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000980)={0x8, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800008080b63428e900"/20, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x47, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x14, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff100004000", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd4992861ac00", "f4bd000000801900", [0x8, 0xffffffff9673e35d]}}) 3.448330492s ago: executing program 2 (id=124): syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x2000200, &(0x7f0000000240)={[{@nodiscard}]}, 0x7, 0x504, &(0x7f0000001180)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x188) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x1860, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') r0 = openat$dir(0xffffffffffffff9c, 0x0, 0x101000, 0x108) getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000) 3.254375347s ago: executing program 2 (id=126): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000580)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08a0ab73ffcf5ad07693727980eea946e6cba1723e81bfa5c3688803c8a124dcb27df7938e7ddfdd52"}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000004a40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.683482343s ago: executing program 3 (id=133): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x2004800, &(0x7f0000000300)=ANY=[], 0xfe, 0x3bc, &(0x7f0000003040)="$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") truncate(&(0x7f0000000040)='./file2\x00', 0xffff) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x100000000) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000380)=""/70, 0x0, 0x50000}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/module/usbcore/parameters/quirks\x00', 0x2, 0x0) write(r1, &(0x7f0000000180)="306663353a313232373a720afaf6379a24cd3db04935649cad5c8b678d1d6868", 0x20) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) write$sysctl(r1, &(0x7f0000000200)='2\x00', 0x2) write$uinput_user_dev(r2, &(0x7f00000007c0)={'syz1\x00', {0x7fff, 0x2, 0x0, 0x7f}, 0x25, [0x2d9b, 0xc4000000, 0x1, 0x8000, 0x4c8, 0x9, 0xb275, 0x2, 0x5, 0x101, 0x9a97, 0x7f, 0x400, 0x0, 0x2, 0x4, 0x5, 0xffffffff, 0x8, 0x0, 0x200, 0xfff, 0x7, 0xbcf, 0x0, 0x5, 0x67a7, 0xe18, 0x2, 0x9, 0x1ff, 0x80000001, 0x9, 0x5, 0x3, 0x8c, 0x6, 0x4, 0x5, 0x10, 0xea, 0x80000001, 0x4f, 0x7, 0x5, 0x10000, 0xffffffff, 0x1, 0xfffffffa, 0xffff, 0x400, 0x400, 0x680f4e20, 0x1, 0x20000000, 0x0, 0x9, 0x0, 0xb617, 0x9, 0x5, 0x5, 0x8001, 0xe5d], [0xb9e, 0xfffffff9, 0xe3, 0xfffffffb, 0x80000001, 0x0, 0x2, 0xb, 0x368, 0x7fffffff, 0x1fe, 0xf6a5, 0x7, 0x747, 0xd5, 0x4, 0x81, 0x7fffffff, 0x3, 0x7fffffff, 0x10, 0x7fff, 0xd3, 0x5, 0x6, 0x9, 0xe6e, 0x9, 0x3, 0x7, 0xff, 0x215f, 0x8, 0xffff, 0x1000, 0x8001, 0xfb, 0x4, 0x780, 0x7, 0x9, 0x3, 0xbbe, 0x5, 0x0, 0xfffffffb, 0x4, 0x3, 0x10001, 0xe, 0x9, 0x6, 0x5, 0x2, 0x9, 0x3, 0x10, 0x5, 0x4, 0xfffffe01, 0x4, 0xc, 0xd10d, 0x80000000], [0xfffffffb, 0xece, 0x80000000, 0x800, 0xffffffff, 0x4, 0x4, 0x7, 0x6, 0x1, 0x9, 0x8eba, 0x5, 0x4, 0x7, 0x0, 0x1000, 0xa, 0x8000, 0x0, 0x1, 0x6, 0x1, 0x6, 0x8, 0x9, 0x9, 0x52d, 0xf, 0x6, 0x2, 0x1, 0xb, 0xffffffff, 0xb, 0x71, 0x1, 0x0, 0x4, 0x7ff, 0x8000, 0x40, 0x7e, 0x7fff, 0xbb5, 0xe, 0x2, 0x75c8, 0x101, 0x8, 0x4, 0x0, 0x40, 0x8, 0x0, 0xfffffff8, 0x9, 0x400, 0x2, 0x3, 0xfffffffc, 0x2, 0x0, 0xb], [0x800, 0x3, 0x2, 0x69, 0x2, 0xfff, 0x36b, 0x800, 0x9, 0x0, 0x54, 0x2, 0x9, 0x7, 0x1, 0x1, 0xb349, 0x57, 0xffffff01, 0x7, 0x2, 0x0, 0x0, 0x8, 0x1, 0x10000, 0x9, 0x7fffffff, 0x8, 0x4, 0x3, 0x3, 0x792, 0x0, 0xa9a7, 0x10000, 0x0, 0x5, 0x5, 0x2, 0x851c, 0x2888, 0x7, 0x2, 0x2d80, 0x0, 0xfff, 0xff, 0xdf, 0x4, 0x7f, 0x8, 0x6f, 0x1, 0x8fd, 0xe, 0x0, 0x0, 0x2, 0x80000001, 0x5dfa, 0xfff, 0xe, 0xeaa]}, 0x45c) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'veth1_to_bond\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x3, 0x8}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newtfilter={0x188, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {}, {0x2, 0xfff1}}, [@filter_kind_options=@f_fw={{0x7}, {0x15c, 0x2, [@TCA_FW_ACT={0x158, 0x4, [@m_mpls={0x154, 0xc, 0x0, 0x0, {{0x9}, {0x3c, 0x2, 0x0, 0x1, [@TCA_MPLS_TC={0x5, 0x6, 0x7}, @TCA_MPLS_LABEL={0x8, 0x5, 0x73771}, @TCA_MPLS_PROTO={0x6, 0x4, 0x5}, @TCA_MPLS_PROTO={0x6, 0x4, 0x88fb}, @TCA_MPLS_LABEL={0x8, 0x5, 0xc7f51}, @TCA_MPLS_TTL={0x5, 0x7, 0xa}, @TCA_MPLS_LABEL={0x8, 0x5, 0xf6c25}]}, {0xef, 0x6, "50c11d8c71f4747f05a2903a87cebe935e07820739139bdabac1ead1085b7e448a917ff1b24fcc922e6c31c00f5ff61b903eadd2bd3b85795a96783a7bbf4bbf3541f61add12e4f406dea773dfa038b93150826bfb63e79d1215d2f914fd07fd5728956a350f1551a5775f1bc89b58576a59fad11cf43fa6a7d3fbe188a72c28babdea4be9692f1faceeb8d05b1156479c3ae44390e37b65851a44a3b19ea1910ddd865e03b2b2a6f06c3e350cf3298fdba747b95bd0d83b4c4ef7fc8fbe14b6612610cb70a5a43c5311a7dbfef08e10a964e16c7b113bcf17d55ffbf4d85743b05698ee91c0ab39e3b13f"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}]}}]}, 0x188}, 0x1, 0x0, 0x0, 0x4}, 0x4000800) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, 0x0, 0x100000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000500)) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_GET(r7, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)={0x3c, r8, 0x1, 0x170bd25, 0x25dfdbfc, {0x39}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x73, 0x3}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x448c9}, 0x4004810) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0x1, 0x8, 0x7fffffff, 0x2, 0x80007, 0x8001, 0x20000006, 0xca, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x100001, 0x3, 0x65, 0x5, 0x6, 0x2000001, 0x7, 0x3c5b, 0xe, 0x24, 0x8006, 0x1, 0xf4e4, 0xffffffff, 0xe661, 0x4, 0x7, 0x1, 0x8, 0x4c74, 0x0, 0x40000, 0x20003, 0xe, 0xfffffffc, 0x80008071, 0x7, 0x8000017, 0xd, 0x3, 0x2, 0x3e, 0x8f, 0x4006, 0x6, 0x7fffffff, 0x0, 0x4, 0x8, 0x80, 0x80, 0x0, 0x4, 0x7, 0x8, 0x5, 0x5, 0x3f], [0x1000000f, 0xf0000000, 0x8000012e, 0xaf5b, 0x5, 0x6, 0x129432e6, 0xc8, 0x7, 0xe, 0x2bf, 0x6c7, 0x6, 0xfffffffc, 0x20000003, 0x0, 0x0, 0x5, 0x2f, 0xfffffff4, 0x312, 0xd, 0xaf7d, 0xffffffff, 0x4, 0x7, 0x7fff, 0x5a7c, 0x8000, 0x401, 0x6, 0x0, 0xff, 0x1, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x20ff, 0x20009, 0x8, 0x9, 0x9, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0xfffffffe, 0x800007, 0x8a8, 0x5, 0x8, 0x8, 0xa6d, 0x0, 0x6c0, 0xbc45, 0x48c93690, 0x42, 0x3], [0xc60, 0x408, 0x8004, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x3, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x9, 0x5, 0x2000002, 0x1ef, 0x5, 0x8, 0x10000, 0x3, 0x5, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x2, 0x800003, 0x1fe, 0x7e, 0x40000007, 0x4, 0x2950bfaf, 0xffe, 0xa2, 0x7, 0x4000a9, 0x5, 0x9, 0xac8, 0x2000ad, 0xffffbffe, 0x8, 0x6ff, 0x12b, 0x4, 0x1, 0x0, 0x0, 0x1, 0x1, 0x120000, 0x3, 0x2004, 0x80a2ed, 0x4, 0x25], [0x3, 0xbb33, 0x7, 0x2, 0x5, 0x42c2, 0x6, 0x6, 0x0, 0xb9, 0x4e7, 0x200005, 0x2, 0x58, 0x4, 0x8000003, 0x101, 0x10000, 0x4, 0x3fff, 0xffff, 0x2000a61f, 0x2, 0x5, 0x1, 0x2, 0x5, 0xe7, 0x9, 0x16, 0xfffffffe, 0x80000003, 0x6, 0x4, 0xcb, 0x9, 0xfffff000, 0x10000, 0x3, 0x7e, 0x6, 0x9602, 0x7, 0xaf, 0x8, 0x6, 0x80, 0x5, 0x45, 0x8, 0x9, 0x5, 0x1f40, 0x7, 0x41, 0x6c1b, 0xfffffffc, 0x804, 0xac1, 0xb1e, 0xd7, 0x100009, 0xffff3440, 0xfff]}, 0x45c) mount(&(0x7f0000000240)=@sg0, &(0x7f00000002c0)='./file3\x00', &(0x7f0000000300)='adfs\x00', 0x80024, &(0x7f0000000340)='\x00') r9 = socket(0x1e, 0x1, 0x0) listen(r9, 0x3a4) 2.628909453s ago: executing program 2 (id=134): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'dummy0\x00', 0x0}) sendmsg$ETHTOOL_MSG_WOL_GET(r0, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000001080)={0x20, r1, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x400c001}, 0x800) 2.521311844s ago: executing program 33 (id=134): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'dummy0\x00', 0x0}) sendmsg$ETHTOOL_MSG_WOL_GET(r0, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000001080)={0x20, r1, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x400c001}, 0x800) 2.448481544s ago: executing program 3 (id=138): syz_usb_connect(0x5, 0x0, 0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0}) r0 = syz_usb_connect(0x0, 0x2d, 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x0, 0x24, 0x0, 0x0) syz_usb_connect(0x5, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="1201500264382c10e91789b85cec0102030109021b00019f05c0050904c30501ff00000309050102", @ANYRES32], &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$evdev(&(0x7f0000000180), 0xd4c, 0x0) ioctl$EVIOCSKEYCODE_V2(r1, 0x80104592, &(0x7f0000000200)={0x0, 0x16, 0x0, 0x1000101, "0020946fc67f0000201b14700c1e0ac74f000000001600000000000900"}) syz_usb_connect$printer(0x1, 0x0, 0x0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x1, [{0xb0, &(0x7f0000000500)=@string={0xb0, 0x3, "342f22871f2980dca0e4709842c1ee0cdb9cd0ce029c2dd16fc627f2f62957938c6dc2ae168888f23461b62dfd2d2e7cc9b6bd792f078842cfd2f84f38db23ed027ea3efd40eaccffec31e51188f25b506b2dfa863e66fefd1fb96259be727452e3787ea80c29518f684776b331485451fc57f1ee7fc1c6900038b14106923dfb367701023a3cdf5da05ef57bf1e427406ed1cfc918431d95a88eeb9d88667b3a93581ebb66d89419d1cacfbd137"}}]}) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="002205000000a70fc1cd79058894b9051506f2b0a2cadf0668d4ca9e104d88f6c85d574ea4b1dd7e044d137560da8bf99b4d7fa2095d376153bb4a416ef418aaa0d61e918d49bbed5073e84afc6483032e729a36ca52830476097a76c25c15443ae149ce52bcd1135a1e006270a5af67ce203c7b30ba0c521ac3a98f7d109cc4ad309bc456312e02d1d62a5041a6f1f7221d9100000000000000"], 0x0}, &(0x7f0000000640)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000400), 0x0}) syz_usb_connect(0x0, 0x3f, &(0x7f00000012c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109024a0001100000000904000003fe03010009cd8d1f00020000000905050200067e001009058b1e", @ANYRES32], 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000300)={0x0, 0x8, &(0x7f0000000200)="952bb3e006ae9a4c"}) 2.18031929s ago: executing program 4 (id=143): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x42) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$unix(0x1, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) (async) socket$inet_udp(0x2, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) (async) socket$inet6_sctp(0xa, 0x5, 0x84) socket$netlink(0x10, 0x3, 0xc) (async) socket$netlink(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_tcp(0xa, 0x1, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x15, &(0x7f0000000100)=ANY=[@ANYRES64=0x0], &(0x7f00000000c0)='GPL\x00', 0x100, 0x0, 0x0, 0x0, 0x6c}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x781, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x81}, 0x50) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x781, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x81}, 0x50) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000900), r0) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="01002dbd0900fedbdf2509000000"], 0x14}, 0x1, 0x0, 0x0, 0x840}, 0x64000) (async) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="01002dbd0900fedbdf2509000000"], 0x14}, 0x1, 0x0, 0x0, 0x840}, 0x64000) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) statx(0xffffffffffffff9c, 0x0, 0x100, 0x88c, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x810, 0x0) (async) mount$fuse(0x0, 0x0, 0x0, 0x810, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) (async) socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0x2, 0x300) 2.052208453s ago: executing program 4 (id=147): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)=ANY=[@ANYRES32=0x0, @ANYRESHEX=r1, @ANYRESDEC=r1], 0x44}}, 0x4042084) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r3 = dup3(r2, r0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="3801000010000100feffffbf00010000ff020000000000000000000000000001ac1414aa000000000000000000000000000107944e230005000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000004990f1c701000004d4330000007f000001000000000000000000000000000000000000000001000000000000000600000000000000ffff0000000000001c250800000000000200000000000000f8ffffffffffffff0000000000000000ffffffffffffffff00000000000000001f00e80000000000ff0100000000000002000000fcffffff000000002abd700004350000020001fdb400000000000000480001007467723139322d67656e65726963000000000000000000000000000000000000000000000000020000000000000000000000488d41fd6700"/245], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x10) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000380)={r3, 0x58, &(0x7f00000006c0)}, 0x10) r4 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x2, 0x325}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x39, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) io_uring_enter(r4, 0x12a, 0xffffffdc, 0x17, 0x0, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000600)='./binderfs/custom0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r5, 0x0) setsockopt$IP_VS_SO_SET_EDIT(r3, 0x0, 0x483, &(0x7f0000000200)={0x32, @private=0xa010101, 0x4e21, 0x2, 'nq\x00', 0x3b, 0x4, 0x1d}, 0x2c) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire={0x40046305, 0x1}], 0x0, 0x0, 0x0}) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x1100, 0x2}) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) dup3(r7, r6, 0x0) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r8, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r8, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) r9 = mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r6, 0x10000000000) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000004a40)={0xc, 0x0, &(0x7f00000049c0)=[@free_buffer={0x40086303, r9}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000001c0)={0xc, 0x0, &(0x7f0000000fc0)=[@free_buffer={0x40086303, r9}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000580)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08a0ab73ffcf5ad07693727980eea946e6cba1723e81bfa5c3688803c8a124dcb27df7938e7ddfdd52"}) 1.984751868s ago: executing program 4 (id=149): socket$inet_udp(0x2, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$rxrpc(0x21, 0x2, 0x2) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'syzkaller1\x00', 0x0}) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0x14, 0x4fcb, 0x4, 0x10004, 0x14, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x7}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000300)={r3, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x1c, 0x10, &(0x7f00000003c0)=@framed={{}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}}]}, &(0x7f0000000240)='GPL\x00', 0x4, 0x4, &(0x7f0000002500)=""/4105, 0x0, 0x68}, 0x94) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="680000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e00300002800800010010000000100005800a000400aaaaaaaaaabb000008000300030000000a000400aaaaaaaab1aa000008000500", @ANYRES32=r2], 0x68}}, 0x0) r5 = socket(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f0000000000), 0x4000000000001f2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$rxrpc(0x21, 0x2, 0x2) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'syzkaller1\x00'}) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0x14, 0x4fcb, 0x4, 0x10004, 0x14, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x7}, 0x50) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000300)={r3}, 0x4) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x1c, 0x10, &(0x7f00000003c0)=@framed={{}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}}]}, &(0x7f0000000240)='GPL\x00', 0x4, 0x4, &(0x7f0000002500)=""/4105, 0x0, 0x68}, 0x94) (async) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="680000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e00300002800800010010000000100005800a000400aaaaaaaaaabb000008000300030000000a000400aaaaaaaab1aa000008000500", @ANYRES32=r2], 0x68}}, 0x0) (async) socket(0x10, 0x3, 0x0) (async) sendmmsg(r5, &(0x7f0000000000), 0x4000000000001f2, 0x0) (async) 1.824505545s ago: executing program 4 (id=150): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0xfffe, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000003c0)=@gcm_128={{0x303}, "77b4040000000008", "bb67102a8bcaae4ffc222da7000200", "8c76287d", "3d8efa05fdffffff"}, 0x28) 1.772264264s ago: executing program 4 (id=152): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x1) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r0, 0xc01064ab, &(0x7f0000000900)={0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000013c0)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x4000) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r3, 0x4018f50b, &(0x7f0000000240)={0x1, 0xaf6e, 0x4}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getchain={0x24, 0x66, 0x903, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0xc, 0x8}, {0xe, 0x6}, {0x9, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) r7 = socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f00000009c0), 0xff, 0x55c, &(0x7f0000000440)="$eJzs3c9rHFUcAPDvbDb9rU2hFPQgwR6s1G6axB8VPNSjaLGg97ok01Cy6ZbspjSxYHuwFy9SBBEL4h/g3WPxH/CvKGihSAl68BKZzUx+7ubntkndzwdm+97O27757pv3+mbelA2gZw1mL6WIVyLi2yTi+Ip95ch3Di6Wm396eyzbklhY+OyvJJL8vaJ8kv95tMiUI377OuJsaVWVA9lLY3ZuslqrpdP5m0PNqRtDjdm5c9emqhPpRHp9ZHT0wjujI++/9+7aQ07u7DDWNy//88OnDz+68M3p+e9/eXzifhIX41i+b2Ucu7Dq0AZjMP9O+uPimoLDXahsP0n2+gDYkb68n/dHNgYcj7681wP/f19FxALQoxL9H3pUMQ8oru27dB38wnjy4eIF0Pr4y4v3RuJQ69royHyy6sooKW5k7FJWx69/PrifbdG9+xAAm7pzNyLOl8vrx78kH/927vwWyqytw/gHz8/DbP7zVrv5T2lp/hNt5j9H2/Tdndi8/5ced6GajrL53wdt57/5otVADPTluZda2f7k6rVamo1tL0fEmeg/mOU3Ws+5MP9oodO+lfO/bMvqL+aC+XE8Lh9c/ZnxarO6u6iXPbkb8Wrb+W+y1P5Jm/bPvo/LW6zjVPrgtU77No//2Vr4OeKNtu2/vKKVbLw+OdQ6H4aKs2K9v++d+r1T/Xsdf9b+RzaOfyBZuV7b2H4dPx36N+20r2P8B4oS7c//A8nnrXRR7Fa12ZwejjiQfLL+/ZHlzxb5onwW/5nTG49/7c7/wxHxxRbjv3fyXseiu2r/Liy6ZvGPb6v9t5949PGXP24//kv53Yms/d9ulT2Tf2Yr499WD3D33yAAAAAAAADsH6WIOBZJqbKULpUqlcXnO07GkVKt3mievVp/PVr7Ws8/lIqV7uMrnocYzp+HLfIja/KjEXEiIr7rO9zKV8bqtfG9Dh4AAAAAAAAAAAAAAAAAAAD2iaMd/v9/5o++vT464Jnzk9/Quzbt/934pSdgX/LvP/Qu/R96l/4PvUv/h96l/0Pv0v+hd+n/0Lv0fwAAAAAAAAAAAAAAAAAAAAAAAAAAAOiqy5cuZdvC/NPbY1l+/ObszGT95rnxtDFZmZoZq4zVp29UJur1iVpaGatPbfb31er1G8MjMXNrqJk2mkON2bkrU/WZ680r16aqE+mVtP+5RAUAAAAAAAAAAAAAAAAAAAAvlsbs3GS1VkunJSR2lCjvj8OQ6HJir0cmAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFj2XwAAAP//4Uw7cA==") openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0xa0) chdir(&(0x7f0000000240)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000280)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x42, 0x54) sendmsg$TCPDIAG_GETSOCK(r2, &(0x7f0000000540)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000500)={&(0x7f00000003c0)={0x11c, 0x12, 0x400, 0x70bd26, 0x25dfdbfe, {0xa, 0xfc, 0x9, 0x8, {0x4e21, 0x4e22, [0x4, 0x9, 0x8, 0x3], [0x9, 0x0, 0xfff0000, 0xffffffff], r5, [0x4, 0x2]}, 0x80000001, 0x94}, [@INET_DIAG_REQ_BYTECODE={0x3e, 0x1, "5b0224462eba89f36239da281898ade17ffa36c9ce4df36a84dfb5b2aef9998e26ee6ad0cd2256efbf15e3b1daae546604ba069a1a402aa2f5e9"}, @INET_DIAG_REQ_BYTECODE={0x4}, @INET_DIAG_REQ_BYTECODE={0x6c, 0x1, "d6e027d25f7c97635c82495dc318a31781328a468505a0a17bc3b45b93c0e7b38da76101cd3ae3aaeb6f093b0578bf13ac3721699a39df7039970a42d6431af653d669c7d4f20fbeacb480f3cd158ca9f9e0fa429148fcddf0e689c3c94540366ede1cbc6a574ab3"}, @INET_DIAG_REQ_BYTECODE={0x1e, 0x1, "0505714b3729f51725385406b76bc5660cc011906c3843cba98f"}]}, 0x11c}, 0x1, 0x0, 0x0, 0x40c1}, 0x1) write(0xffffffffffffffff, &(0x7f0000000000)="300000001c00010401000000000000002d0000000100000080000001050001", 0x1f) setsockopt$netlink_NETLINK_NO_ENOBUFS(r7, 0x10e, 0xc, &(0x7f0000000340)=0x6, 0x4) sendmsg$nl_route(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001a0001000000ff7f0000000080000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\b'], 0x24}}, 0x0) 1.676345289s ago: executing program 3 (id=153): connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xf0}}, 0xffc00003}, 0x1c) syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000007880)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000040)="af0ac95ab194f93f8e795a9b29420fa62d", 0x11}], 0x1}}], 0x1, 0x24088000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xf, &(0x7f0000000580)=ANY=[@ANYRESDEC, @ANYRES32, @ANYRESHEX], 0x0, 0x9, 0x0, 0x0, 0x0, 0x13, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x20) write(r0, &(0x7f0000000000)='3', 0x4e) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@union={0x0, 0x1, 0x0, 0x5, 0x1, 0x0, [{0x2, 0x2}]}]}, {0x0, [0x5f, 0x4f]}}, &(0x7f0000001540)=""/4096, 0x34, 0x1000, 0xa}, 0x28) r1 = syz_open_dev$loop(&(0x7f0000000100), 0x4, 0x2001) r2 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) fspick(0xffffffffffffff9c, 0x0, 0x0) listen(r2, 0x8) r3 = accept4(r2, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r3, 0x84, 0x7c, &(0x7f0000000080)={0x0, 0x9}, 0x8) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r3, 0x84, 0x7c, &(0x7f0000000040)={0x0, 0x9, 0x2}, &(0x7f00000000c0)=0x8) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r5 = socket$kcm(0x2, 0xa, 0x2) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd608a37f200082c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa3a000005", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='P\x00\x00\x00zx\x00\x00'], 0x0) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) setns(r0, 0x10000000) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r6, 0x1000f0000) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) writev(r4, &(0x7f0000000a00)=[{&(0x7f0000000080)="2e9b3d0007e03dd65193dfb6c575963f8864", 0x12}, {&(0x7f0000000540)="1100f8ae", 0x4}, {&(0x7f0000000a40)="13f6ea02", 0x4}], 0x3) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r7, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f00000002c0)={r7, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x13, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff100004000", "2827e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd4992861ac008000000000000200", "f4bd000000801900", [0x8, 0xffffffff9673e359]}}) 1.444270655s ago: executing program 1 (id=154): prlimit64(0x0, 0xe, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys_sec\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys_sec\x00', &(0x7f0000000080)='securityfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys_sec/tomoyo/domain_policy\x00', 0x2, 0x0) read$FUSE(r0, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000140)={{0x1, 0x1, 0x18, r3, {0x2}}, './sys_sec\x00'}) sendmsg$nl_route_sched(r2, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd31, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_HH_FLOWS_LIMIT={0x8}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r5 = socket$unix(0x1, 0x2, 0x0) r6 = socket$kcm(0x11, 0x3, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x20a201, 0x0) close(r7) socket$tipc(0x1e, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r6, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r8, 0x36}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000000)="27030200000214000e00002fb96dffff1144ee163cddcb000000800000827600000000000000", 0x26}, {&(0x7f0000000640)="442ea407603a16ff", 0x8}], 0x2}, 0x20000085) 1.192964211s ago: executing program 5 (id=156): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000800000002000000ffff000005"], 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000140)={r1, &(0x7f0000000000), 0x0}, 0x20) (async) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000140)={r1, &(0x7f0000000000), 0x0}, 0x20) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) (async) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r4 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x41, 0x0) write$nbd(r4, &(0x7f0000000500)=ANY=[@ANYBLOB="01000000"], 0x40) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000000c0)={0x3, &(0x7f0000000040)=[{0x45, 0x0, 0x1, 0xfffffffc}, {0x0, 0x0, 0x0, 0xfffffffe}, {0x6, 0x0, 0x1, 0x7fff2000}]}) 876.429155ms ago: executing program 3 (id=157): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1002}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x3c}}, 0x0) r4 = openat$smackfs_syslog(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r5 = landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x18, 0x0) landlock_restrict_self(r5, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x42, 0xde0f9e45a02cc906) prlimit64(0x0, 0x7, &(0x7f00000000c0)={0x5, 0x7}, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000140), 0x802, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu/syz1\x00', 0x1ff) syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) write(r4, &(0x7f0000000700)="ffffffffffff0011223344554305000f32001800000100112233445521112233445500ff9000", 0x26) r6 = accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000080), 0xc0400) ioctl$sock_inet6_SIOCDELRT(r6, 0x890c, &(0x7f00000000c0)={@mcast1, @private0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1c}}, 0x2, 0x58, 0xe1e, 0x380, 0x7fffffffffffffff, 0x4000000, r3}) 682.277197ms ago: executing program 4 (id=158): r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x268}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000824000/0x1000)=nil, 0x1000}, 0x6}) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{0x1, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f00000000c0)}, 0x20) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000440)={'syztnl0\x00', &(0x7f00000003c0)={'syztnl2\x00', 0x0, 0x1, 0x1, 0x5b, 0x8000, {{0xf, 0x4, 0x0, 0x29, 0x3c, 0x66, 0x0, 0x81, 0x2f, 0x0, @loopback, @rand_addr=0x64010102, {[@rr={0x7, 0x27, 0x3e, [@broadcast, @rand_addr=0x64010100, @broadcast, @broadcast, @private=0xa010101, @rand_addr=0x64010100, @local, @loopback, @remote]}]}}}}}) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r0, 0x4048587b, &(0x7f00000006c0)={{r0, &(0x7f0000000480)='\x00', 0x2, &(0x7f00000004c0)={@align=0x800, {0x0, 0x3, 0x9, 0x8000000000000000}}, 0xfff, &(0x7f0000000500), &(0x7f0000000540)=0x8}, 0x1, &(0x7f0000000680)=[{0x1, 0x2, &(0x7f0000000580)='+\x00', &(0x7f00000005c0)="c2f4d9f26cfe481b7202af926b3b3a116927bc45cf53302061c4cf2992935fc96cddb589ff53679df015d7b477ffd7b63cb4903c619ff572ddee9e8e75c46c2352bf549a894746ea2dd3065b8ce731decd10e7be38c4f789e912448b5536a8cb20300cd2a846ae7321e3d55c61138b9793dad61c604bab0304088e5071ffee79ae866414edcb9f39f0cc6f90cf4230bd88f8", 0x92, 0x2}]}) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x0, 0x0}, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x1, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000300000000000000fcf142525f0000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000580)=r4, 0x4) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a80)={0x11, 0x36, &(0x7f00000007c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x3}, {}, {}, [@tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}, @btf_id={0x18, 0x1, 0x3, 0x0, 0x5}, @map_fd={0x18, 0x3}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7f}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @map_fd={0x18, 0x9}, @func={0x85, 0x0, 0x1, 0x0, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000980)='syzkaller\x00', 0x7f, 0x6d, &(0x7f00000009c0)=""/109, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000a40)=[{0x2, 0x1, 0x1, 0x17}, {0x3, 0x3, 0x3, 0x5}], 0x10, 0x9}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x4, 0x1f, &(0x7f0000000180)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@alu={0x7, 0x0, 0x9, 0x4, 0x8, 0x80, 0x10}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x1}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @map_fd={0x18, 0x7, 0x1, 0x0, 0x1}, @ldst={0x3, 0x1, 0x2, 0x5, 0x1, 0x10, 0x10}, @generic={0x4, 0x4, 0x6, 0x0, 0x4}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000280)='GPL\x00', 0x7, 0x0, 0x0, 0x60680, 0x2, '\x00', r2, @fallback=0xa, r3, 0x8, &(0x7f0000000740)={0x1, 0x3}, 0x8, 0x10, &(0x7f0000000780)={0x4, 0x3, 0x8, 0x9}, 0x10, r4, r5, 0x4, 0x0, &(0x7f0000000b40)=[{0x2, 0x1, 0xe, 0x5}, {0x0, 0x1, 0xd, 0x3}, {0x2, 0x3, 0x5}, {0x3, 0x4, 0x1, 0x1}], 0x10, 0x3}, 0x94) read(r0, &(0x7f0000000300)=""/172, 0xdc) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x80000a, 0x31, 0xffffffffffffffff, 0xd0fb8000) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000080)={&(0x7f00002f4000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x3000}) 478.170693ms ago: executing program 5 (id=159): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xe, 0x4, 0x4, 0x100, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0}, 0x50) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xe, 0xd, &(0x7f0000000280)=@framed={{}, [@generic={0x61, 0x8, 0x1}, @generic={0x7a, 0xa, 0x0, 0xfffffff8}, @map_fd={0x18, 0x1, 0x1, 0x0, r0}, @generic={0x15, 0x8, 0x0, 0x2}, @map_fd={0x18, 0x1, 0x1, 0x0, r1}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0x85, 0x0, 0x0, 0x0, 0x1}]}, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="380000005500e50226bd70000100000007000000", @ANYRES32, @ANYBLOB="20000100", @ANYRES32=0x0, @ANYBLOB="0100fe5a"], 0x38}, 0x1, 0x2000000, 0x0, 0x2000c844}, 0x20000114) 431.083329ms ago: executing program 5 (id=160): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0xfffe, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000003c0)=@gcm_128={{0x303}, "77b4040000000008", "bb67102a8bcaae4ffc222da7000200", "8c76287d", "3d8efa05fdffffff"}, 0x28) (fail_nth: 2) 429.279304ms ago: executing program 1 (id=161): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000002980)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x4001ffe, 0xa68d7c519fc00ff1, 0xffbc, 0x6, 0x1d45, 0x0, 0x0, 0x0, 0x40}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000006380)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20, 0x0, 0x68cc, {0x0, 0x14}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) writev(r2, &(0x7f0000000380)=[{&(0x7f0000000700)="f313af2b28", 0x5}], 0x1) close(r0) 380.742047ms ago: executing program 5 (id=162): syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000240)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x3fe7d3ed3346f027, &(0x7f0000000040)=ANY=[], 0x4, 0x266, &(0x7f0000000580)="$eJzs281OE1EYxvGHDwVBmCqKgjG+0Y1uJlCvoCGQGJtokBo/EpNBptp0aEmnwdQYYefW6yAu3ZkYb4CNV+DCHRuXLIxjmKnQlhrDQiba/29zXnJ4mnP6njZn0dl58Ha1XAzdoldXf59pUNrUrpRRvwaU6GuO/XF9Uq02dWMi/+XyvYePbufy+flFs4Xc0s2smY1f+fji1burn+qj99+PfxjSdubJzrfs1+3J7amdH0vPS6GVQqtU6+bZcrVa95YD31ZKYdk1uxv4XuhbqRL6tbb5YlBdW2uYV1kZG1mr+WFoXqVhZb9h9arVaw3znnmlirmua2Mjwp8UthYXvVzaq8DfVavlvDlJ04dmClupLAgAAKSK+38v4/7fC/bu/4+bn9923P8BAAAAAAAAAAAAAAAAAAAAAPgX7EaRE0WR82s8IcVP+ETNv09JGpE0Kum0pDFJ45IcSRlJZySdlTQh6Zyk85ImJV2QdFHSVMtrpb1XHEb/exv97230v7e1PLg7LK2+WS+sF5Ixmc8VVVIgXzNy9D3uZVNSL9zKz89YLKNLqxvN/MZ6YaA9Pytn78B0y88meWvPD8Xnbj+flbN3wLrls13zw7p+rSXvytHnp6oq0Ep8Jg/yr2fN5u7kO/LT8f/971zb17V/rvu7+SR/hPPR8f4Oanow3b1DChsvy14Q+DUKCgqK/SLtbyYch4Omp70SAAAAAAAAAAAAAAAAAMBRHMfPCdPeIwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAnX4GAAD//5KSYE0=") r0 = socket(0xa, 0x5, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000000)=0x2) ioctl$PPPIOCSPASS(r1, 0x40107447, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x6, 0xfd}]}) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) r3 = add_key$user(&(0x7f0000000440), &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000240)="c5", 0x1, 0xfffffffffffffffb) r4 = add_key$user(&(0x7f0000002300), &(0x7f0000002340)={'syz', 0x3}, &(0x7f0000000100)="370c099069effa43de3e1404db09b4ce1ef77bde4b371532dd16447c1b13403656c86711f6e750026f23029a50d44299c7bf5c78dc5efae2d041016160e8bef7b30c05e298aa9572540dd950307987eef2115e1bcf512bea3410ca5a9e9f827e4b13490dbbd4fc5a45e0738b959acafd2c12863045265bcbc2c9426ac3f614746b436fe86a72dc642dd67d970604a69b4f22cd0076beedc18056ab4bea4c825b69a7a77adcd5488684872b1bb9eb84586549e11b080468668e8fd0e52ce0705a", 0xc0, 0xffffffffffffffff) keyctl$dh_compute(0x17, &(0x7f0000000000)={r3, r4, r3}, &(0x7f00000005c0)=""/208, 0xd0, &(0x7f00000001c0)={&(0x7f0000000340)={'wp384-generic\x00'}}) close_range(r2, 0xffffffffffffffff, 0x0) unshare(0x22020600) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='yeah', 0x4) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r6 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={0xffffffffffffffff, r5, 0x26, 0x0, @void}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000013c0)={r6, 0x0, 0x0}, 0x10) 379.799383ms ago: executing program 3 (id=163): syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000240)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x3fe7d3ed3346f027, &(0x7f0000000040)=ANY=[], 0x4, 0x266, &(0x7f0000000580)="$eJzs281OE1EYxvGHDwVBmCqKgjG+0Y1uJlCvoCGQGJtokBo/EpNBptp0aEmnwdQYYefW6yAu3ZkYb4CNV+DCHRuXLIxjmKnQlhrDQiba/29zXnJ4mnP6njZn0dl58Ha1XAzdoldXf59pUNrUrpRRvwaU6GuO/XF9Uq02dWMi/+XyvYePbufy+flFs4Xc0s2smY1f+fji1burn+qj99+PfxjSdubJzrfs1+3J7amdH0vPS6GVQqtU6+bZcrVa95YD31ZKYdk1uxv4XuhbqRL6tbb5YlBdW2uYV1kZG1mr+WFoXqVhZb9h9arVaw3znnmlirmua2Mjwp8UthYXvVzaq8DfVavlvDlJ04dmClupLAgAAKSK+38v4/7fC/bu/4+bn9923P8BAAAAAAAAAAAAAAAAAAAAAPgX7EaRE0WR82s8IcVP+ETNv09JGpE0Kum0pDFJ45IcSRlJZySdlTQh6Zyk85ImJV2QdFHSVMtrpb1XHEb/exv97230v7e1PLg7LK2+WS+sF5Ixmc8VVVIgXzNy9D3uZVNSL9zKz89YLKNLqxvN/MZ6YaA9Pytn78B0y88meWvPD8Xnbj+flbN3wLrls13zw7p+rSXvytHnp6oq0Ep8Jg/yr2fN5u7kO/LT8f/971zb17V/rvu7+SR/hPPR8f4Oanow3b1DChsvy14Q+DUKCgqK/SLtbyYch4Omp70SAAAAAAAAAAAAAAAAAMBRHMfPCdPeIwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAnX4GAAD//5KSYE0=") r0 = socket(0xa, 0x5, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000000)=0x2) ioctl$PPPIOCSPASS(r1, 0x40107447, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x6, 0xfd}]}) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) r3 = add_key$user(&(0x7f0000000440), &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000240)="c5", 0x1, 0xfffffffffffffffb) r4 = add_key$user(&(0x7f0000002300), &(0x7f0000002340)={'syz', 0x3}, &(0x7f0000000100)="370c099069effa43de3e1404db09b4ce1ef77bde4b371532dd16447c1b13403656c86711f6e750026f23029a50d44299c7bf5c78dc5efae2d041016160e8bef7b30c05e298aa9572540dd950307987eef2115e1bcf512bea3410ca5a9e9f827e4b13490dbbd4fc5a45e0738b959acafd2c12863045265bcbc2c9426ac3f614746b436fe86a72dc642dd67d970604a69b4f22cd0076beedc18056ab4bea4c825b69a7a77adcd5488684872b1bb9eb84586549e11b080468668e8fd0e52ce0705a", 0xc0, 0xffffffffffffffff) keyctl$dh_compute(0x17, &(0x7f0000000000)={r3, r4, r3}, &(0x7f00000005c0)=""/208, 0xd0, &(0x7f00000001c0)={&(0x7f0000000340)={'wp384-generic\x00'}}) close_range(r2, 0xffffffffffffffff, 0x0) unshare(0x22020600) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='yeah', 0x4) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r6 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={0xffffffffffffffff, r5, 0x26, 0x0, @void}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000013c0)={r6, 0x0, 0x0}, 0x10) 266.447936ms ago: executing program 5 (id=164): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r0, 0xffffffffffffffff, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0xc, &(0x7f0000000140)=0x6, 0x4) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001a0001000000ff7f0000000080002000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\b\x00', @ANYRES32=r1], 0x24}}, 0x0) (fail_nth: 2) 197.215345ms ago: executing program 3 (id=165): r0 = socket$packet(0x11, 0x2, 0x300) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"/3569], 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000040)=r1, 0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) r6 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000240)=@newtfilter={0x8c, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x1, 0xfff8}, {0x1, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x5c, 0x2, [@TCA_BASIC_ACT={0x58, 0x3, [@m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x3, 0x9, 0x6, 0x5, 0x1}, @multicast2, @multicast2, 0x0, 0x8001}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x8c}}, 0x0) write$tun(r3, &(0x7f0000000500)=ANY=[@ANYBLOB='\x00\x00\b\x00E\x00\x00'], 0xfdef) 196.245646ms ago: executing program 1 (id=166): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SET_VERSION(r0, 0xc0106407, &(0x7f00000000c0)={0x1, 0x3, 0x5, 0x8}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./debug\x00', &(0x7f0000000040)='debugfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./debug/dri/0/name\x00', 0x0, 0x0) read(r1, &(0x7f0000000100)=""/256, 0x100) 162.770461ms ago: executing program 5 (id=167): r0 = syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='mnt\x00', 0x4, &(0x7f0000000180)={[{@nodiscard}]}, 0x0, 0x236, &(0x7f0000000b40)="$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") setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x2f8, 0x0, 0x12, 0x60d, 0x1d8, 0x202, 0x2e8, 0x2e8, 0x2e8, 0x2e8, 0x2c0, 0x4, 0x0, {[{{@ipv6={@private1, @ipv4={'\x00', '\xff\xff', @empty}, [0x0, 0xff], [], 'ip_vti0\x00', 'macsec0\x00', {0xff}}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@icmp6={{0x28}, {0xd, "ea9c", 0x1}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@ipv6={@mcast1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0xff, 0x0, 0xffffff00, 0xff000000], [0xff, 0xff000000, 0x0, 0xff], 'ipvlan1\x00', 'erspan0\x00', {}, {0xff}, 0x2b, 0x5, 0x6, 0x33}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x10, 0x5, 0x8001, 0xf53, 'syz0\x00', 'syz1\x00', {0xffffffffffffff7f}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x358) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x18, &(0x7f0000000300)=ANY=[@ANYBLOB='shortname=win95,shortname=win95,\x00\x00ortname=win95,nonumtail=0,rodir,check=strict,shortname=winnt,nnonumtail=1,iocharset=iso8859-1,shortname=mixed,nfs=stale_rw,uni_xlate=1,shortname=lower,utf8=0,allow_utime=00000000000000000000001,utf8=1,shortname=win95,\x00'], 0x7, 0x2ac, &(0x7f0000000800)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$UBLK_U_CMD_ADD_DEV(r3, 0xc0207504, &(0x7f0000000400)={0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x45, 0x0, 0x0, 0x1000, 0xffffffff, r1, 0x0, 0x63}}) openat(0xffffffffffffff9c, &(0x7f0000000540)='mnt\x00', 0x0, 0x0) r4 = socket$inet(0x2, 0x3, 0x4) fsetxattr$smack_xattr_label(r4, &(0x7f0000000140)='security.SMACK64\x00', &(0x7f0000000180)={']'}, 0x2, 0x2) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r0, 0xc0506617, &(0x7f0000000700)={@id={0x2, 0x0, @a}, 0x40, 0x0, '\x00', @a}) setrlimit(0xc, &(0x7f0000000040)={0xfffffffffffffff9, 0x99a}) syz_genetlink_get_family_id$nfc(&(0x7f0000000140), 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(&(0x7f0000000100), &(0x7f0000000140)='./mnt\x00', &(0x7f0000000300)='ecryptfs\x00', 0x0, &(0x7f0000000340)='ecryptfs_sig=syz0,ecryptfs_cipher=aes,ecryptfs_key_bytes=16,ecryptfs_passthrough\x00') 99.547614ms ago: executing program 1 (id=168): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000002c0), 0x8900, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_VFIO_IOAS$SET(r0, 0x3b88, &(0x7f00000001c0)={0xc, r1}) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x5, r1, 0x0, &(0x7f00000017c0)="4322ac76fd27aab4021884b143b524abf04d5144385fac73f1fd293ceede6a10", 0x20, 0x4}) ioctl$IOMMU_VFIO_SET_IOMMU(r0, 0x3b66, 0x1) 28.495465ms ago: executing program 1 (id=169): syz_open_procfs(0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000001, 0x401d132, 0xffffffffffffffff, 0x0) add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) connect$inet(0xffffffffffffffff, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)={0x48, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @local}}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x84}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4620}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x34040017}, 0x80) 0s ago: executing program 1 (id=170): prlimit64(0x0, 0xe, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys_sec\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys_sec\x00', &(0x7f0000000080)='securityfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys_sec/tomoyo/domain_policy\x00', 0x2, 0x0) read$FUSE(r0, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000140)={{0x1, 0x1, 0x18, r3, {0x2}}, './sys_sec\x00'}) sendmsg$nl_route_sched(r2, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd31, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_HH_FLOWS_LIMIT={0x8}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r5 = socket$unix(0x1, 0x2, 0x0) r6 = socket$kcm(0x11, 0x3, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x20a201, 0x0) close(r7) socket$tipc(0x1e, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r6, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r8, 0x36}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000000)="27030200000214000e00002fb96dffff1144ee163cddcb000000800000827600000000000000", 0x26}, {&(0x7f0000000640)="442ea407603a16ff", 0x8}], 0x2}, 0x20000085) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.47' (ED25519) to the list of known hosts. [ 27.590402][ T4695] cgroup: Unknown subsys name 'net' [ 27.730508][ T4695] cgroup: Unknown subsys name 'cpuset' [ 27.732094][ T4695] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 27.882292][ T4695] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SS [ 29.250939][ T4707] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 29.251432][ T4707] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 29.251631][ T4707] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 29.252038][ T4707] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 29.252274][ T4707] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 29.281918][ T51] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 29.282221][ T51] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 29.282372][ T51] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 29.282666][ T51] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 29.282873][ T51] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 29.299296][ T4721] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 29.299703][ T4721] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 29.300039][ T4721] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 29.300196][ T4708] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 29.300671][ T4708] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 29.301668][ T4708] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 29.304791][ T4724] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 29.305365][ T4724] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 29.311142][ T4724] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 29.311370][ T4724] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 29.319576][ T4724] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 29.326274][ T4721] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 29.328205][ T4724] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 29.330408][ T4724] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 29.336172][ T4724] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 29.610490][ T4706] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.610763][ T4706] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.610840][ T4706] bridge_slave_0: entered allmulticast mode [ 29.611315][ T4706] bridge_slave_0: entered promiscuous mode [ 29.618819][ T4706] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.618851][ T4706] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.618942][ T4706] bridge_slave_1: entered allmulticast mode [ 29.623207][ T4706] bridge_slave_1: entered promiscuous mode [ 29.654230][ T4706] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.656616][ T4706] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.681206][ T4706] team0: Port device team_slave_0 added [ 29.682297][ T4706] team0: Port device team_slave_1 added [ 29.704883][ T4711] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.704942][ T4711] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.704997][ T4711] bridge_slave_0: entered allmulticast mode [ 29.705754][ T4711] bridge_slave_0: entered promiscuous mode [ 29.709640][ T4711] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.709668][ T4711] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.709719][ T4711] bridge_slave_1: entered allmulticast mode [ 29.710203][ T4711] bridge_slave_1: entered promiscuous mode [ 29.717311][ T4711] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.721626][ T4706] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.721635][ T4706] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 29.721646][ T4706] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.723468][ T4706] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.723477][ T4706] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 29.723488][ T4706] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.742651][ T4711] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.765140][ T4706] hsr_slave_0: entered promiscuous mode [ 29.765487][ T4706] hsr_slave_1: entered promiscuous mode [ 29.766413][ T4711] team0: Port device team_slave_0 added [ 29.777059][ T4711] team0: Port device team_slave_1 added [ 29.821382][ T4711] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.821395][ T4711] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 29.821408][ T4711] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.824629][ T4711] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.824636][ T4711] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 29.824648][ T4711] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.837904][ T4711] hsr_slave_0: entered promiscuous mode [ 29.838170][ T4711] hsr_slave_1: entered promiscuous mode [ 29.838366][ T4711] debugfs: 'hsr0' already exists in 'hsr' [ 29.838408][ T4711] Cannot create hsr debugfs directory [ 29.856090][ T4715] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.856154][ T4715] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.856215][ T4715] bridge_slave_0: entered allmulticast mode [ 29.856622][ T4715] bridge_slave_0: entered promiscuous mode [ 29.860263][ T4715] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.860287][ T4715] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.860376][ T4715] bridge_slave_1: entered allmulticast mode [ 29.860781][ T4715] bridge_slave_1: entered promiscuous mode [ 29.882470][ T4712] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.882535][ T4712] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.882588][ T4712] bridge_slave_0: entered allmulticast mode [ 29.883028][ T4712] bridge_slave_0: entered promiscuous mode [ 29.898529][ T4712] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.898590][ T4712] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.898649][ T4712] bridge_slave_1: entered allmulticast mode [ 29.899505][ T4712] bridge_slave_1: entered promiscuous mode [ 29.925694][ T4715] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.941855][ T4712] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.944449][ T4712] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.953157][ T4715] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.953746][ T4712] team0: Port device team_slave_0 added [ 29.956951][ T4712] team0: Port device team_slave_1 added [ 29.971912][ T4715] team0: Port device team_slave_0 added [ 29.977467][ T4712] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.977477][ T4712] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 29.977489][ T4712] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.977758][ T4711] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 29.981118][ T4711] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 29.981453][ T4711] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 29.982538][ T4711] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 29.987662][ T4715] team0: Port device team_slave_1 added [ 29.991619][ T4717] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.991832][ T4717] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.991935][ T4717] bridge_slave_0: entered allmulticast mode [ 29.992483][ T4717] bridge_slave_0: entered promiscuous mode [ 29.993583][ T4717] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.993601][ T4717] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.993649][ T4717] bridge_slave_1: entered allmulticast mode [ 29.994453][ T4717] bridge_slave_1: entered promiscuous mode [ 29.995048][ T4712] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.995055][ T4712] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 29.995069][ T4712] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.995523][ T4711] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 29.998027][ T4711] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 29.998347][ T4711] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 30.000984][ T4711] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 30.016866][ T4717] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.020853][ T4715] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.020864][ T4715] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.020880][ T4715] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.021646][ T4715] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.021653][ T4715] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.021667][ T4715] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.027605][ T4717] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.035958][ T4712] hsr_slave_0: entered promiscuous mode [ 30.036276][ T4712] hsr_slave_1: entered promiscuous mode [ 30.036468][ T4712] debugfs: 'hsr0' already exists in 'hsr' [ 30.036478][ T4712] Cannot create hsr debugfs directory [ 30.051777][ T4711] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.051809][ T4711] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.051968][ T4711] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.051998][ T4711] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.066303][ T4717] team0: Port device team_slave_0 added [ 30.067162][ T4717] team0: Port device team_slave_1 added [ 30.072328][ T4715] hsr_slave_0: entered promiscuous mode [ 30.072636][ T4715] hsr_slave_1: entered promiscuous mode [ 30.072828][ T4715] debugfs: 'hsr0' already exists in 'hsr' [ 30.072839][ T4715] Cannot create hsr debugfs directory [ 30.072929][ T4706] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 30.074186][ T4706] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 30.074791][ T4706] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 30.075989][ T4706] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 30.093281][ T4717] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.093292][ T4717] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.093304][ T4717] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.093491][ T4706] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 30.095161][ T4706] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 30.099988][ T4717] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.099998][ T4717] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.100014][ T4717] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.106442][ T4706] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 30.108634][ T4706] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 30.129929][ T4717] hsr_slave_0: entered promiscuous mode [ 30.130224][ T4717] hsr_slave_1: entered promiscuous mode [ 30.130405][ T4717] debugfs: 'hsr0' already exists in 'hsr' [ 30.130415][ T4717] Cannot create hsr debugfs directory [ 30.191765][ T4706] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.191797][ T4706] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.191874][ T4706] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.191903][ T4706] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.214734][ T4711] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.229408][ T4711] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.232842][ T897] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.233282][ T897] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.253321][ T4712] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 30.256254][ T4712] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 30.256645][ T4712] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 30.257514][ T4712] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 30.264409][ T4711] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 30.264423][ T4711] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 30.279858][ T4712] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 30.280981][ T4712] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 30.281311][ T4712] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 30.282193][ T4712] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 30.301562][ T4715] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 30.303769][ T4715] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 30.304088][ T4715] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 30.305596][ T4715] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 30.306909][ T4715] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 30.308546][ T4715] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 30.308827][ T4715] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 30.314530][ T4715] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 30.329877][ T4706] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.342617][ T4706] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.360866][ T182] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.360907][ T182] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.361611][ T182] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.361632][ T182] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.362940][ T4717] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 30.364298][ T4717] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 30.395068][ T4715] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.396653][ T4706] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 30.396668][ T4706] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 30.408708][ T4712] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.408867][ T4717] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 30.415943][ T4717] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 30.424708][ T4715] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.425445][ T4717] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 30.427151][ T4717] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 30.436121][ T4717] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 30.437773][ T4717] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 30.440561][ T4712] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.443892][ T182] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.443963][ T182] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.444280][ T182] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.444299][ T182] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.459712][ T897] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.459741][ T897] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.460067][ T897] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.460086][ T897] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.481344][ T4711] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.507462][ T4712] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 30.507481][ T4712] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 30.546934][ T4711] veth0_vlan: entered promiscuous mode [ 30.559898][ T4717] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.562725][ T4717] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.566679][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.566708][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.567326][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.567347][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.579175][ T4711] veth1_vlan: entered promiscuous mode [ 30.582971][ T4717] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 30.582986][ T4717] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 30.618233][ T4711] veth0_macvtap: entered promiscuous mode [ 30.622614][ T4711] veth1_macvtap: entered promiscuous mode [ 30.626464][ T4711] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.639962][ T4711] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.661075][ T40] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.661807][ T40] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.661829][ T40] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.661857][ T40] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.684978][ T4706] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.714739][ T4706] veth0_vlan: entered promiscuous mode [ 30.716858][ T4715] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.718172][ T4706] veth1_vlan: entered promiscuous mode [ 30.730939][ T1150] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 30.730956][ T1150] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 30.747587][ T1150] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 30.747603][ T1150] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 30.757534][ T4706] veth0_macvtap: entered promiscuous mode [ 30.758580][ T4706] veth1_macvtap: entered promiscuous mode [ 30.764651][ T4706] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.765617][ T4706] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.768006][ T897] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.768042][ T897] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.768068][ T897] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.789197][ T897] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.821400][ T4711] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 30.842456][ T4712] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.862148][ T4712] veth0_vlan: entered promiscuous mode [ 30.863972][ T4712] veth1_vlan: entered promiscuous mode [ 30.884404][ T4712] veth0_macvtap: entered promiscuous mode [ 30.886600][ T4712] veth1_macvtap: entered promiscuous mode [ 30.902402][ T4715] veth0_vlan: entered promiscuous mode [ 30.903989][ T4715] veth1_vlan: entered promiscuous mode [ 30.909724][ T1896] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 30.909736][ T1896] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 30.925596][ T4715] veth0_macvtap: entered promiscuous mode [ 30.926658][ T4715] veth1_macvtap: entered promiscuous mode [ 30.930147][ T4717] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.954005][ T4712] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.964960][ T897] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 30.964976][ T897] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 30.967921][ T4715] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.968909][ T4715] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.981749][ T4712] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.004467][ T1150] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.004959][ T1150] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.005019][ T1150] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.005171][ T1150] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.005312][ T1150] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.005409][ T1150] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.005546][ T1150] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.005624][ T1150] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.049200][ T182] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.049214][ T182] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.071729][ T4717] veth0_vlan: entered promiscuous mode [ 31.078442][ T4717] veth1_vlan: entered promiscuous mode [ 31.084823][ T182] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.084848][ T182] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.106829][ T4717] veth0_macvtap: entered promiscuous mode [ 31.107904][ T4717] veth1_macvtap: entered promiscuous mode [ 31.135465][ T1150] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.135568][ T1150] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.339431][ T4721] Bluetooth: hci0: command tx timeout [ 31.364088][ T4717] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.365734][ T4717] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.369250][ T4721] Bluetooth: hci2: command tx timeout [ 31.369399][ T4708] Bluetooth: hci4: command tx timeout [ 31.369623][ T4708] Bluetooth: hci3: command tx timeout [ 31.369694][ T4724] Bluetooth: hci1: command tx timeout [ 31.379043][ T49] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.379125][ T49] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.379152][ T49] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.379176][ T49] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.383998][ T4892] syzkaller0: entered promiscuous mode [ 31.384016][ T4892] syzkaller0: entered allmulticast mode [ 31.388545][ T1150] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.388560][ T1150] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.445889][ T897] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.445908][ T897] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.476973][ T1150] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.476991][ T1150] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.483754][ T4896] loop3: detected capacity change from 0 to 4096 [ 31.503753][ T4896] EXT4-fs (loop3): Test dummy encryption mode enabled [ 31.510183][ T4896] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 31.920890][ T4896] EXT4-fs: Ignoring removed nobh option [ 31.920928][ T4896] EXT4-fs: Can't set or change test_dummy_encryption on remount [ 31.934521][ T4896] capability: warning: `syz.3.5' uses 32-bit capabilities (legacy support in use) [ 32.005416][ T4712] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.300464][ T4381] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 32.430225][ T897] IPVS: starting estimator thread 0... [ 32.539066][ T4381] usb 1-1: Using ep0 maxpacket: 16 [ 32.540786][ T4381] usb 1-1: unable to get BOS descriptor or descriptor too short [ 32.540848][ T4381] usb 1-1: New USB device found, idVendor=17e9, idProduct=b889, bcdDevice=ec.5c [ 32.541939][ T4381] usb 1-1: config 159 has an invalid interface number: 195 but max is 0 [ 32.541953][ T4381] usb 1-1: config 159 has no interface number 0 [ 32.541968][ T4381] usb 1-1: config 159 interface 195 altsetting 5 endpoint 0x1 has invalid maxpacket 65535, setting to 1024 [ 32.541979][ T4381] usb 1-1: config 159 interface 195 altsetting 5 bulk endpoint 0x1 has invalid maxpacket 1024 [ 32.541989][ T4381] usb 1-1: config 159 interface 195 has no altsetting 0 [ 32.543335][ T4381] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 32.543345][ T4381] usb 1-1: Product: syz [ 32.543353][ T4381] usb 1-1: Manufacturer: syz [ 32.543359][ T4381] usb 1-1: SerialNumber: syz [ 32.546453][ T4898] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 32.921338][ T4920] IPVS: using max 60 ests per chain, 144000 per kthread [ 32.944823][ T4898] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 32.945035][ T4898] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 32.955801][ T4381] udl 1-1:159.195: [drm] Unrecognized vendor firmware descriptor [ 32.956103][ T4381] [drm:udl_init] *ERROR* Selecting channel failed [ 32.963911][ T4381] [drm] Initialized udl 0.0.1 for 1-1:159.195 on minor 2 [ 32.963926][ T4381] [drm] Initialized udl on minor 2 [ 32.965136][ T4381] udl 1-1:159.195: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 32.965577][ T4381] udl 1-1:159.195: [drm] Cannot find any crtc or sizes [ 32.970366][ T4791] udl 1-1:159.195: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 32.977277][ T4791] udl 1-1:159.195: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 32.977402][ T4791] udl 1-1:159.195: [drm] Cannot find any crtc or sizes [ 32.979324][ T4381] usb 1-1: USB disconnect, device number 2 [ 33.369647][ T4721] Bluetooth: hci0: command tx timeout [ 33.449140][ T4724] Bluetooth: hci2: command tx timeout [ 33.449167][ T4724] Bluetooth: hci1: command tx timeout [ 33.449182][ T4724] Bluetooth: hci4: command tx timeout [ 33.449265][ T4721] Bluetooth: hci3: command tx timeout [ 33.454705][ T4943] Injecting memory failure for pfn 0x133891 at process virtual address 0x20001000 [ 33.461839][ T4943] Memory failure: 0x133891: recovery action for clean LRU page: Recovered [ 33.461861][ T4943] Injecting memory failure for pfn 0x133892 at process virtual address 0x20002000 [ 33.461938][ T4943] Memory failure: 0x133892: recovery action for clean LRU page: Recovered [ 33.461948][ T4943] Injecting memory failure for pfn 0x13388b at process virtual address 0x20003000 [ 33.462005][ T4943] Memory failure: 0x13388b: recovery action for clean LRU page: Recovered [ 33.541720][ T4946] loop1: detected capacity change from 0 to 256 [ 33.586176][ T4948] loop0: detected capacity change from 0 to 256 [ 33.593443][ T4948] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 33.742282][ T4954] loop1: detected capacity change from 0 to 128 [ 33.858617][ T4959] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 33.861434][ T4959] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 33.866981][ T4959] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 33.867169][ T4959] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 33.868741][ T4961] syzkaller0: entered promiscuous mode [ 33.868755][ T4961] syzkaller0: entered allmulticast mode [ 34.072152][ T4959] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 34.072334][ T4959] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 34.073767][ T4959] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 34.074042][ T4959] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 34.075939][ T4959] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 34.076131][ T4959] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 34.077810][ T4959] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 34.078329][ T4959] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 35.529267][ T4708] Bluetooth: hci4: command tx timeout [ 35.529293][ T4708] Bluetooth: hci1: command tx timeout [ 35.529307][ T4708] Bluetooth: hci2: command tx timeout [ 35.529423][ T4721] Bluetooth: hci3: command tx timeout [ 35.690149][ T4721] Bluetooth: hci0: command tx timeout [ 35.944956][ T4977] loop0: detected capacity change from 0 to 512 [ 35.953734][ T4977] EXT4-fs error (device loop0): ext4_validate_block_bitmap:436: comm syz.0.28: bg 0: block 5: invalid block bitmap [ 35.953776][ T4977] loop0: lost filesystem error report for type 5 error -117 [ 35.954506][ T4977] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6680: Corrupt filesystem [ 35.954521][ T4977] loop0: lost filesystem error report for type 5 error -117 [ 35.954903][ T4977] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.28: invalid indirect mapped block 3 (level 2) [ 35.954942][ T4977] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 35.955379][ T4977] EXT4-fs (loop0): 1 orphan inode deleted [ 35.955391][ T4977] EXT4-fs (loop0): 1 truncate cleaned up [ 35.956017][ T4977] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 35.972636][ T4977] overlayfs: missing 'lowerdir' [ 35.987732][ T4706] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.074495][ T4981] Injecting memory failure for pfn 0x1349e0 at process virtual address 0x20001000 [ 36.077029][ T4981] Memory failure: 0x1349e0: recovery action for clean LRU page: Recovered [ 36.077044][ T4981] Injecting memory failure for pfn 0x134b9f at process virtual address 0x20002000 [ 36.077095][ T4981] Memory failure: 0x134b9f: recovery action for clean LRU page: Recovered [ 36.077104][ T4981] Injecting memory failure for pfn 0x134b9e at process virtual address 0x20003000 [ 36.077136][ T4981] Memory failure: 0x134b9e: recovery action for clean LRU page: Recovered [ 36.529047][ T4983] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 36.529220][ T4983] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 36.531504][ T4983] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 36.531654][ T4983] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 36.572826][ T4999] loop3: detected capacity change from 0 to 512 [ 36.580466][ T4999] EXT4-fs error (device loop3): ext4_validate_block_bitmap:436: comm syz.3.36: bg 0: block 5: invalid block bitmap [ 36.580486][ T4999] loop3: lost filesystem error report for type 5 error -117 [ 36.580751][ T4999] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6680: Corrupt filesystem [ 36.580763][ T4999] loop3: lost filesystem error report for type 5 error -117 [ 36.581239][ T4999] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.36: invalid indirect mapped block 3 (level 2) [ 36.581260][ T4999] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 36.581481][ T4999] EXT4-fs (loop3): 1 orphan inode deleted [ 36.581492][ T4999] EXT4-fs (loop3): 1 truncate cleaned up [ 36.587847][ T4999] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 36.594052][ T4999] overlayfs: missing 'lowerdir' [ 36.620411][ T4712] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.660595][ T5005] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 36.660768][ T5005] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 36.664057][ T5005] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 36.664215][ T5005] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 36.971630][ T5005] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 36.971912][ T5005] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 36.973373][ T5005] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 36.973529][ T5005] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 36.981251][ T5005] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 36.981411][ T5005] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 36.982306][ T5005] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 36.982466][ T5005] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 37.017872][ T5009] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 37.018062][ T5009] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 37.223571][ T5009] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 37.223736][ T5009] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 37.281468][ T5013] Injecting memory failure for pfn 0x121b33 at process virtual address 0x20001000 [ 37.282787][ T5013] Memory failure: 0x121b33: recovery action for clean LRU page: Recovered [ 37.282799][ T5013] Injecting memory failure for pfn 0x121b23 at process virtual address 0x20002000 [ 37.282838][ T5013] Memory failure: 0x121b23: recovery action for clean LRU page: Recovered [ 37.282847][ T5013] Injecting memory failure for pfn 0x122b11 at process virtual address 0x20003000 [ 37.282879][ T5013] Memory failure: 0x122b11: recovery action for clean LRU page: Recovered [ 37.447143][ T5022] loop2: detected capacity change from 0 to 7 [ 37.448749][ T5022] Dev loop2: unable to read RDB block 7 [ 37.448767][ T5022] loop2: unable to read partition table [ 37.448834][ T5022] loop2: partition table beyond EOD, truncated [ 37.448851][ T5022] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 37.519710][ T5024] TC_ACT_REPEAT abuse ? [ 37.559234][ T5026] Injecting memory failure for pfn 0x1349d2 at process virtual address 0x20001000 [ 37.561321][ T5026] Memory failure: 0x1349d2: recovery action for clean LRU page: Recovered [ 37.561335][ T5026] Injecting memory failure for pfn 0x13415e at process virtual address 0x20002000 [ 37.561433][ T5026] Memory failure: 0x13415e: recovery action for clean LRU page: Recovered [ 37.561442][ T5026] Injecting memory failure for pfn 0x122832 at process virtual address 0x20003000 [ 37.561474][ T5026] Memory failure: 0x122832: recovery action for clean LRU page: Recovered [ 37.614059][ T4721] Bluetooth: hci3: command tx timeout [ 37.614087][ T4721] Bluetooth: hci2: command tx timeout [ 37.614103][ T4721] Bluetooth: hci1: command tx timeout [ 37.614117][ T4721] Bluetooth: hci4: command tx timeout [ 37.628186][ T30] audit: type=1326 audit(37.600:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5029 comm="syz.1.47" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa3f79368 code=0x7ffc0000 [ 37.628216][ T30] audit: type=1326 audit(37.600:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5029 comm="syz.1.47" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa3f79368 code=0x7ffc0000 [ 37.628234][ T30] audit: type=1326 audit(37.600:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5029 comm="syz.1.47" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffa3f79368 code=0x7ffc0000 [ 37.628250][ T30] audit: type=1326 audit(37.600:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5029 comm="syz.1.47" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa3f79368 code=0x7ffc0000 [ 37.628267][ T30] audit: type=1326 audit(37.600:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5029 comm="syz.1.47" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa3f79368 code=0x7ffc0000 [ 37.628283][ T30] audit: type=1326 audit(37.600:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5029 comm="syz.1.47" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=97 compat=0 ip=0xffffa3f79368 code=0x7ffc0000 [ 37.628297][ T30] audit: type=1326 audit(37.600:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5029 comm="syz.1.47" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa3f79368 code=0x7ffc0000 [ 37.628311][ T30] audit: type=1326 audit(37.600:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5029 comm="syz.1.47" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa3f79368 code=0x7ffc0000 [ 37.663422][ T5033] netlink: 16 bytes leftover after parsing attributes in process `syz.4.48'. [ 37.667447][ T5033] tun0: tun_chr_ioctl cmd 1074025675 [ 37.667459][ T5033] tun0: persist enabled [ 37.667529][ T5033] tun0: tun_chr_ioctl cmd 1074025675 [ 37.667536][ T5033] tun0: persist disabled [ 37.733860][ T5036] loop1: detected capacity change from 0 to 512 [ 37.735922][ T5036] EXT4-fs error (device loop1): ext4_validate_block_bitmap:436: comm syz.1.49: bg 0: block 5: invalid block bitmap [ 37.735939][ T5036] loop1: lost filesystem error report for type 5 error -117 [ 37.736098][ T5036] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6680: Corrupt filesystem [ 37.736108][ T5036] loop1: lost filesystem error report for type 5 error -117 [ 37.736219][ T5036] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.49: invalid indirect mapped block 3 (level 2) [ 37.736232][ T5036] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 37.736772][ T5036] EXT4-fs (loop1): 1 orphan inode deleted [ 37.736782][ T5036] EXT4-fs (loop1): 1 truncate cleaned up [ 37.750654][ T5036] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 37.765650][ T5036] overlayfs: missing 'lowerdir' [ 37.783145][ T4717] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.800913][ T5042] netlink: 20 bytes leftover after parsing attributes in process `syz.1.51'. [ 37.970269][ T5040] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 37.970617][ T5040] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 37.976646][ T5040] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 37.976795][ T5040] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 38.100882][ T5058] FAULT_INJECTION: forcing a failure. [ 38.100882][ T5058] name failslab, interval 1, probability 0, space 0, times 1 [ 38.100903][ T5058] CPU: 0 UID: 0 PID: 5058 Comm: syz.4.58 Not tainted syzkaller #0 PREEMPT [ 38.100915][ T5058] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 38.100922][ T5058] Call trace: [ 38.100925][ T5058] show_stack+0x2c/0x3c (C) [ 38.100945][ T5058] __dump_stack+0x30/0x40 [ 38.100956][ T5058] dump_stack_lvl+0xd8/0x12c [ 38.100966][ T5058] dump_stack+0x1c/0x28 [ 38.100975][ T5058] should_fail_ex+0x418/0x58c [ 38.100985][ T5058] should_failslab+0xc4/0x120 [ 38.100996][ T5058] kmem_cache_alloc_node_noprof+0x98/0x604 [ 38.101007][ T5058] __alloc_skb+0x1f0/0x610 [ 38.101016][ T5058] netlink_alloc_large_skb+0xd4/0x114 [ 38.101025][ T5058] netlink_sendmsg+0x4c4/0x948 [ 38.101033][ T5058] __sock_sendmsg+0xc8/0x17c [ 38.101041][ T5058] ____sys_sendmsg+0x3d0/0x6c8 [ 38.101049][ T5058] ___sys_sendmsg+0x198/0x224 [ 38.101057][ T5058] __sys_sendmsg+0x158/0x204 [ 38.101065][ T5058] __arm64_sys_sendmsg+0x88/0x9c [ 38.101074][ T5058] invoke_syscall+0x98/0x244 [ 38.101084][ T5058] el0_svc_common+0xec/0x23c [ 38.101093][ T5058] do_el0_svc+0x4c/0x5c [ 38.101102][ T5058] el0_svc+0x60/0x1d8 [ 38.101112][ T5058] el0t_64_sync_handler+0x44/0x104 [ 38.101120][ T5058] el0t_64_sync+0x198/0x19c [ 38.165210][ T5062] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 38.166219][ T5062] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 38.369178][ T5062] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 38.369802][ T5062] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 38.456312][ T5064] loop3: detected capacity change from 0 to 512 [ 38.460267][ T5064] EXT4-fs error (device loop3): ext4_validate_block_bitmap:436: comm syz.3.61: bg 0: block 5: invalid block bitmap [ 38.460286][ T5064] loop3: lost filesystem error report for type 5 error -117 [ 38.460521][ T5064] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6680: Corrupt filesystem [ 38.460534][ T5064] loop3: lost filesystem error report for type 5 error -117 [ 38.460646][ T5064] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.61: invalid indirect mapped block 3 (level 2) [ 38.460660][ T5064] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 38.460810][ T5064] EXT4-fs (loop3): 1 orphan inode deleted [ 38.460826][ T5064] EXT4-fs (loop3): 1 truncate cleaned up [ 38.461269][ T5064] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.465000][ T5064] overlayfs: missing 'workdir' [ 38.477137][ T4712] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.505023][ T30] audit: type=1326 audit(38.480:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5068 comm="syz.2.63" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa0179368 code=0x7ffc0000 [ 38.505115][ T30] audit: type=1326 audit(38.480:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5068 comm="syz.2.63" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa0179368 code=0x7ffc0000 [ 38.513163][ T5067] netlink: 4 bytes leftover after parsing attributes in process `syz.3.62'. [ 38.604563][ T5079] netlink: 20 bytes leftover after parsing attributes in process `syz.3.68'. [ 38.657903][ T5081] loop2: detected capacity change from 0 to 256 [ 38.685390][ T5083] loop2: detected capacity change from 0 to 128 [ 39.095567][ T5092] netlink: 12 bytes leftover after parsing attributes in process `syz.4.73'. [ 39.095593][ T5092] netlink: 8 bytes leftover after parsing attributes in process `syz.4.73'. [ 39.111065][ T5092] binder: 5091:5092 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 39.141884][ T5095] loop4: detected capacity change from 0 to 512 [ 39.147201][ T5095] EXT4-fs error (device loop4): ext4_validate_block_bitmap:436: comm syz.4.74: bg 0: block 5: invalid block bitmap [ 39.147281][ T5095] loop4: lost filesystem error report for type 5 error -117 [ 39.147458][ T5095] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6680: Corrupt filesystem [ 39.147472][ T5095] loop4: lost filesystem error report for type 5 error -117 [ 39.147615][ T5095] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.74: invalid indirect mapped block 3 (level 2) [ 39.147631][ T5095] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 39.147911][ T5095] EXT4-fs (loop4): 1 orphan inode deleted [ 39.147919][ T5095] EXT4-fs (loop4): 1 truncate cleaned up [ 39.148377][ T5095] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.163586][ T5095] overlayfs: missing 'workdir' [ 39.173961][ T4715] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.367628][ T5104] FAULT_INJECTION: forcing a failure. [ 39.367628][ T5104] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 39.367648][ T5104] CPU: 1 UID: 0 PID: 5104 Comm: syz.0.78 Not tainted syzkaller #0 PREEMPT [ 39.367658][ T5104] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 39.367663][ T5104] Call trace: [ 39.367665][ T5104] show_stack+0x2c/0x3c (C) [ 39.367684][ T5104] __dump_stack+0x30/0x40 [ 39.367695][ T5104] dump_stack_lvl+0xd8/0x12c [ 39.367704][ T5104] dump_stack+0x1c/0x28 [ 39.367713][ T5104] should_fail_ex+0x418/0x58c [ 39.367724][ T5104] should_fail+0x14/0x24 [ 39.367733][ T5104] should_fail_usercopy+0x20/0x30 [ 39.367742][ T5104] _inline_copy_from_user+0x3c/0x174 [ 39.367752][ T5104] move_addr_to_kernel+0x88/0x168 [ 39.367760][ T5104] __copy_msghdr+0x2e0/0x3d4 [ 39.367768][ T5104] copy_msghdr_from_user+0xe8/0x194 [ 39.367777][ T5104] ___sys_sendmsg+0x14c/0x224 [ 39.367785][ T5104] __sys_sendmsg+0x158/0x204 [ 39.367793][ T5104] __arm64_sys_sendmsg+0x88/0x9c [ 39.367801][ T5104] invoke_syscall+0x98/0x244 [ 39.367811][ T5104] el0_svc_common+0xec/0x23c [ 39.367821][ T5104] do_el0_svc+0x4c/0x5c [ 39.367830][ T5104] el0_svc+0x60/0x1d8 [ 39.367847][ T5104] el0t_64_sync_handler+0x44/0x104 [ 39.367857][ T5104] el0t_64_sync+0x198/0x19c [ 39.410092][ T5100] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 39.410923][ T5100] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 39.413477][ T5100] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 39.413641][ T5100] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 39.466852][ T5112] loop3: detected capacity change from 0 to 256 [ 39.770712][ T5116] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 39.770909][ T5116] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 39.791202][ T5118] loop2: detected capacity change from 0 to 256 [ 39.822716][ T5120] FAULT_INJECTION: forcing a failure. [ 39.822716][ T5120] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 39.822737][ T5120] CPU: 1 UID: 0 PID: 5120 Comm: syz.2.84 Not tainted syzkaller #0 PREEMPT [ 39.822750][ T5120] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 39.822756][ T5120] Call trace: [ 39.822760][ T5120] show_stack+0x2c/0x3c (C) [ 39.822780][ T5120] __dump_stack+0x30/0x40 [ 39.822791][ T5120] dump_stack_lvl+0xd8/0x12c [ 39.822801][ T5120] dump_stack+0x1c/0x28 [ 39.822810][ T5120] should_fail_ex+0x418/0x58c [ 39.822821][ T5120] should_fail+0x14/0x24 [ 39.822837][ T5120] should_fail_usercopy+0x20/0x30 [ 39.822848][ T5120] _inline_copy_from_user+0x3c/0x174 [ 39.822860][ T5120] move_addr_to_kernel+0x88/0x168 [ 39.822868][ T5120] __sys_sendto+0x1b0/0x328 [ 39.822876][ T5120] __arm64_sys_sendto+0xec/0x10c [ 39.822885][ T5120] invoke_syscall+0x98/0x244 [ 39.822895][ T5120] el0_svc_common+0xec/0x23c [ 39.822904][ T5120] do_el0_svc+0x4c/0x5c [ 39.822913][ T5120] el0_svc+0x60/0x1d8 [ 39.822923][ T5120] el0t_64_sync_handler+0x44/0x104 [ 39.822932][ T5120] el0t_64_sync+0x198/0x19c [ 39.828344][ T5109] nvme_tcp: queue 0: data digest mismatch host: disabled ctrl: enabled [ 39.865302][ T5123] loop2: detected capacity change from 0 to 512 [ 39.869429][ T5123] EXT4-fs error (device loop2): ext4_validate_block_bitmap:436: comm syz.2.85: bg 0: block 5: invalid block bitmap [ 39.869668][ T5123] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6680: Corrupt filesystem [ 39.869794][ T5123] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.85: invalid indirect mapped block 3 (level 2) [ 39.869808][ T5123] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 39.870311][ T5123] EXT4-fs (loop2): 1 orphan inode deleted [ 39.870325][ T5123] EXT4-fs (loop2): 1 truncate cleaned up [ 39.870791][ T5123] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.873827][ T5123] overlayfs: missing 'workdir' [ 39.890702][ T4711] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.981597][ T5116] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 39.981768][ T5116] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 40.173600][ T5137] binder: 5136:5137 tried to acquire reference to desc 0, got 1 instead [ 40.173841][ T5137] binder: 5136:5137 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 40.173853][ T5137] binder: 5137 RLIMIT_NICE not set [ 40.173892][ T5137] binder: 5137 RLIMIT_NICE not set [ 40.174018][ T5137] binder: 5136:5137 ioctl c0306201 0 returned -14 [ 40.174289][ T4793] binder: release 5136:5137 transaction 5 out, still active [ 40.174300][ T4793] binder: undelivered TRANSACTION_COMPLETE [ 40.179601][ T4793] binder: release 5136:5137 transaction 5 in, still active [ 40.179619][ T4793] binder: send failed reply for transaction 5, target dead [ 40.373372][ T5151] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 40.373646][ T5151] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 40.481156][ T5163] EXT4-fs error (device loop0): ext4_validate_block_bitmap:436: comm syz.0.97: bg 0: block 5: invalid block bitmap [ 40.481818][ T5163] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6680: Corrupt filesystem [ 40.482566][ T5163] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.97: invalid indirect mapped block 3 (level 2) [ 40.482592][ T5163] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 40.482783][ T5163] EXT4-fs (loop0): 1 orphan inode deleted [ 40.482792][ T5163] EXT4-fs (loop0): 1 truncate cleaned up [ 40.483292][ T5163] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.490505][ T5163] overlayfs: failed to set uuid (/file0, err=-28); falling back to uuid=null. [ 40.497275][ T4706] EXT4-fs error (device loop0): ext4_lookup:1787: inode #17: comm syz-executor: iget: bad extended attribute block 6904 [ 40.503948][ T4706] EXT4-fs error (device loop0): ext4_lookup:1787: inode #17: comm syz-executor: iget: bad extended attribute block 6904 [ 40.737325][ T4706] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.758407][ T49] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.806134][ T49] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.826938][ T4721] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 40.827380][ T4721] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 40.827579][ T4721] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 40.828090][ T4721] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 40.828309][ T4721] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 40.873168][ T49] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.886244][ T5180] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 40.886425][ T5180] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 40.887520][ T5180] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 40.887951][ T5180] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 40.934060][ T49] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.024604][ T5200] FAULT_INJECTION: forcing a failure. [ 41.024604][ T5200] name failslab, interval 1, probability 0, space 0, times 0 [ 41.024625][ T5200] CPU: 0 UID: 0 PID: 5200 Comm: syz.1.106 Not tainted syzkaller #0 PREEMPT [ 41.024636][ T5200] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 41.024641][ T5200] Call trace: [ 41.024645][ T5200] show_stack+0x2c/0x3c (C) [ 41.024664][ T5200] __dump_stack+0x30/0x40 [ 41.024676][ T5200] dump_stack_lvl+0xd8/0x12c [ 41.024685][ T5200] dump_stack+0x1c/0x28 [ 41.024694][ T5200] should_fail_ex+0x418/0x58c [ 41.024706][ T5200] should_failslab+0xc4/0x120 [ 41.024717][ T5200] __kmalloc_noprof+0x108/0x6c8 [ 41.024728][ T5200] tomoyo_realpath_from_path+0xbc/0x4dc [ 41.024738][ T5200] tomoyo_path_number_perm+0x1f0/0x500 [ 41.024746][ T5200] tomoyo_file_ioctl+0x2c/0x3c [ 41.024755][ T5200] security_file_ioctl+0xdc/0x2b0 [ 41.024763][ T5200] __arm64_sys_ioctl+0xb0/0x1cc [ 41.024773][ T5200] invoke_syscall+0x98/0x244 [ 41.024783][ T5200] el0_svc_common+0xec/0x23c [ 41.024793][ T5200] do_el0_svc+0x4c/0x5c [ 41.024802][ T5200] el0_svc+0x60/0x1d8 [ 41.024811][ T5200] el0t_64_sync_handler+0x44/0x104 [ 41.024827][ T5200] el0t_64_sync+0x198/0x19c [ 41.024837][ T5200] ERROR: Out of memory at tomoyo_realpath_from_path. [ 41.026715][ T5200] Dev loop2: unable to read RDB block 7 [ 41.026730][ T5200] loop2: unable to read partition table [ 41.039298][ T5200] loop2: partition table beyond EOD, truncated [ 41.039325][ T5200] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 41.061655][ T5182] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.061712][ T5182] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.061763][ T5182] bridge_slave_0: entered allmulticast mode [ 41.062210][ T5182] bridge_slave_0: entered promiscuous mode [ 41.070246][ T5182] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.070299][ T5182] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.070360][ T5182] bridge_slave_1: entered allmulticast mode [ 41.070774][ T5182] bridge_slave_1: entered promiscuous mode [ 41.092996][ T5203] FAULT_INJECTION: forcing a failure. [ 41.092996][ T5203] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 41.093015][ T5203] CPU: 0 UID: 0 PID: 5203 Comm: syz.1.107 Not tainted syzkaller #0 PREEMPT [ 41.093024][ T5203] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 41.093029][ T5203] Call trace: [ 41.093032][ T5203] show_stack+0x2c/0x3c (C) [ 41.093050][ T5203] __dump_stack+0x30/0x40 [ 41.093061][ T5203] dump_stack_lvl+0xd8/0x12c [ 41.093070][ T5203] dump_stack+0x1c/0x28 [ 41.093079][ T5203] should_fail_ex+0x418/0x58c [ 41.093090][ T5203] should_fail+0x14/0x24 [ 41.093099][ T5203] should_fail_usercopy+0x20/0x30 [ 41.093108][ T5203] _inline_copy_from_user+0x3c/0x174 [ 41.093119][ T5203] move_addr_to_kernel+0x88/0x168 [ 41.093126][ T5203] __copy_msghdr+0x2e0/0x3d4 [ 41.093134][ T5203] copy_msghdr_from_user+0xe8/0x194 [ 41.093143][ T5203] ___sys_sendmsg+0x14c/0x224 [ 41.093151][ T5203] __sys_sendmsg+0x158/0x204 [ 41.093152][ T49] bridge_slave_1: left allmulticast mode [ 41.093159][ T5203] __arm64_sys_sendmsg+0x88/0x9c [ 41.093168][ T5203] invoke_syscall+0x98/0x244 [ 41.093178][ T5203] el0_svc_common+0xec/0x23c [ 41.093185][ T49] bridge_slave_1: left promiscuous mode [ 41.093187][ T5203] do_el0_svc+0x4c/0x5c [ 41.093196][ T5203] el0_svc+0x60/0x1d8 [ 41.093206][ T5203] el0t_64_sync_handler+0x44/0x104 [ 41.093214][ T5203] el0t_64_sync+0x198/0x19c [ 41.093887][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.105906][ T49] bridge_slave_0: left allmulticast mode [ 41.105926][ T49] bridge_slave_0: left promiscuous mode [ 41.106013][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.194112][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 41.220464][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 41.240346][ T49] bond0 (unregistering): Released all slaves [ 41.247494][ T5182] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 41.248744][ T5182] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 41.255148][ T5182] team0: Port device team_slave_0 added [ 41.255864][ T5182] team0: Port device team_slave_1 added [ 41.261574][ T5182] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 41.261583][ T5182] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 41.261596][ T5182] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 41.262112][ T5182] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 41.262120][ T5182] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 41.262132][ T5182] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 41.272027][ T5182] hsr_slave_0: entered promiscuous mode [ 41.272304][ T5182] hsr_slave_1: entered promiscuous mode [ 41.272472][ T5182] debugfs: 'hsr0' already exists in 'hsr' [ 41.272482][ T5182] Cannot create hsr debugfs directory [ 41.352850][ T5216] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 41.353032][ T5216] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 41.382890][ T5182] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 41.385398][ T5182] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 41.385738][ T5182] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 41.386692][ T5182] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 41.386994][ T5182] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 41.387863][ T5182] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 41.388217][ T5182] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 41.403568][ T5182] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 41.446716][ T4398] 8021q: adding VLAN 0 to HW filter on device eth0 [ 41.464738][ T5182] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.464767][ T5182] bridge0: port 2(bridge_slave_1) entered forwarding state [ 41.464853][ T5182] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.464888][ T5182] bridge0: port 1(bridge_slave_0) entered forwarding state [ 41.485440][ T5228] syzkaller0: entered promiscuous mode [ 41.485461][ T5228] syzkaller0: entered allmulticast mode [ 41.547308][ T5182] 8021q: adding VLAN 0 to HW filter on device bond0 [ 41.561427][ T5216] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 41.561804][ T5216] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 41.564271][ T49] hsr_slave_0: left promiscuous mode [ 41.564556][ T49] hsr_slave_1: left promiscuous mode [ 41.564863][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 41.564881][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 41.565490][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 41.565502][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 41.580707][ T49] veth1_macvtap: left promiscuous mode [ 41.580745][ T49] veth0_macvtap: left promiscuous mode [ 41.581060][ T49] veth1_vlan: left promiscuous mode [ 41.581118][ T49] veth0_vlan: left promiscuous mode [ 41.611956][ T5248] set_capacity_and_notify: 5 callbacks suppressed [ 41.611969][ T5248] loop3: detected capacity change from 0 to 128 [ 41.632483][ T5248] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 41.662144][ T5248] FAULT_INJECTION: forcing a failure. [ 41.662144][ T5248] name failslab, interval 1, probability 0, space 0, times 0 [ 41.662167][ T5248] CPU: 1 UID: 0 PID: 5248 Comm: syz.3.112 Not tainted syzkaller #0 PREEMPT [ 41.662179][ T5248] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 41.662185][ T5248] Call trace: [ 41.662188][ T5248] show_stack+0x2c/0x3c (C) [ 41.662210][ T5248] __dump_stack+0x30/0x40 [ 41.662222][ T5248] dump_stack_lvl+0xd8/0x12c [ 41.662234][ T5248] dump_stack+0x1c/0x28 [ 41.662244][ T5248] should_fail_ex+0x418/0x58c [ 41.662257][ T5248] should_failslab+0xc4/0x120 [ 41.662269][ T5248] kmem_cache_alloc_lru_noprof+0x98/0x5d8 [ 41.662282][ T5248] sock_alloc_inode+0x30/0x180 [ 41.662295][ T5248] alloc_inode+0x68/0x198 [ 41.662305][ T5248] sock_alloc+0x4c/0x204 [ 41.662313][ T5248] __sock_create+0x108/0x670 [ 41.662321][ T5248] __sys_socketpair+0x2a4/0x528 [ 41.662330][ T5248] __arm64_sys_socketpair+0xa8/0xc4 [ 41.662340][ T5248] invoke_syscall+0x98/0x244 [ 41.662352][ T5248] el0_svc_common+0xec/0x23c [ 41.662363][ T5248] do_el0_svc+0x4c/0x5c [ 41.662374][ T5248] el0_svc+0x60/0x1d8 [ 41.662385][ T5248] el0t_64_sync_handler+0x44/0x104 [ 41.662395][ T5248] el0t_64_sync+0x198/0x19c [ 41.662407][ T5248] socket: no more sockets [ 41.709818][ T4712] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 41.734666][ T49] team0 (unregistering): Port device team_slave_1 removed [ 41.738867][ T49] team0 (unregistering): Port device team_slave_0 removed [ 41.796746][ T4398] 8021q: adding VLAN 0 to HW filter on device eth2 [ 41.806897][ T897] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.807243][ T897] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.815630][ T5182] 8021q: adding VLAN 0 to HW filter on device team0 [ 41.825444][ T897] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.825479][ T897] bridge0: port 1(bridge_slave_0) entered forwarding state [ 41.828762][ T1896] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.828791][ T1896] bridge0: port 2(bridge_slave_1) entered forwarding state [ 42.230474][ T5277] Injecting memory failure for pfn 0x122db6 at process virtual address 0x20001000 [ 42.231259][ T5277] Memory failure: 0x122db6: recovery action for clean LRU page: Recovered [ 42.231270][ T5277] Injecting memory failure for pfn 0x122a12 at process virtual address 0x20002000 [ 42.231398][ T5277] Memory failure: 0x122a12: recovery action for clean LRU page: Recovered [ 42.231407][ T5277] Injecting memory failure for pfn 0x122a13 at process virtual address 0x20003000 [ 42.231518][ T5277] Memory failure: 0x122a13: recovery action for clean LRU page: Recovered [ 42.248223][ T5182] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 42.306209][ T5287] loop1: detected capacity change from 0 to 128 [ 42.316269][ T4398] 8021q: adding VLAN 0 to HW filter on device eth1 [ 42.368430][ T5182] veth0_vlan: entered promiscuous mode [ 42.375551][ T5182] veth1_vlan: entered promiscuous mode [ 42.387700][ T5182] veth0_macvtap: entered promiscuous mode [ 42.393986][ T5182] veth1_macvtap: entered promiscuous mode [ 42.402852][ T5182] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 42.405919][ T5182] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 42.408132][ T14] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.424713][ T5298] TC_ACT_REPEAT abuse ? [ 42.451636][ T897] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 42.451652][ T897] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 42.464566][ T897] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 42.464581][ T897] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 42.481518][ T14] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.482376][ T897] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.482400][ T897] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.530091][ T4398] 8021q: adding VLAN 0 to HW filter on device eth3 [ 42.637262][ T5321] loop3: detected capacity change from 0 to 512 [ 42.665633][ T5321] EXT4-fs: Mount option(s) incompatible with ext3 [ 42.704022][ T5327] loop3: detected capacity change from 0 to 256 [ 42.814640][ T5331] loop5: detected capacity change from 0 to 512 [ 42.816783][ T5331] overlayfs: failed lookup in lower (newroot/1, name='file0', err=-40): overlapping layers [ 42.817039][ T5331] overlayfs: failed lookup in lower (newroot/1, name='file0', err=-40): overlapping layers [ 42.881797][ T5325] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 42.881987][ T5325] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 42.888229][ T5325] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 42.889111][ T4721] Bluetooth: hci0: command tx timeout [ 42.891530][ T5325] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 43.223185][ T5340] loop2: detected capacity change from 0 to 512 [ 43.236751][ T5343] loop4: detected capacity change from 0 to 128 [ 43.242843][ T5340] EXT4-fs error (device loop2): ext4_validate_block_bitmap:436: comm syz.2.124: bg 0: block 5: invalid block bitmap [ 43.242863][ T5340] fserror_report: 4 callbacks suppressed [ 43.242870][ T5340] loop2: lost filesystem error report for type 5 error -117 [ 43.247440][ T5340] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6680: Corrupt filesystem [ 43.247460][ T5340] loop2: lost filesystem error report for type 5 error -117 [ 43.247762][ T5340] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.124: invalid indirect mapped block 3 (level 2) [ 43.247787][ T5340] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 43.247995][ T5340] EXT4-fs (loop2): 1 orphan inode deleted [ 43.248003][ T5340] EXT4-fs (loop2): 1 truncate cleaned up [ 43.248447][ T5340] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.300957][ T5340] overlayfs: failed to set uuid (/file0, err=-28); falling back to uuid=null. [ 43.332599][ T4711] EXT4-fs error (device loop2): ext4_lookup:1787: inode #17: comm syz-executor: iget: bad extended attribute block 6904 [ 43.342462][ T4711] EXT4-fs error (device loop2): ext4_lookup:1787: inode #17: comm syz-executor: iget: bad extended attribute block 6904 [ 43.448896][ T5348] FAULT_INJECTION: forcing a failure. [ 43.448896][ T5348] name failslab, interval 1, probability 0, space 0, times 0 [ 43.448918][ T5348] CPU: 1 UID: 0 PID: 5348 Comm: syz.4.127 Not tainted syzkaller #0 PREEMPT [ 43.448930][ T5348] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 43.448936][ T5348] Call trace: [ 43.448939][ T5348] show_stack+0x2c/0x3c (C) [ 43.448958][ T5348] __dump_stack+0x30/0x40 [ 43.448969][ T5348] dump_stack_lvl+0xd8/0x12c [ 43.448979][ T5348] dump_stack+0x1c/0x28 [ 43.448989][ T5348] should_fail_ex+0x418/0x58c [ 43.449000][ T5348] should_failslab+0xc4/0x120 [ 43.449011][ T5348] kmem_cache_alloc_node_noprof+0x98/0x604 [ 43.449022][ T5348] __alloc_skb+0x1f0/0x610 [ 43.449031][ T5348] netlink_alloc_large_skb+0xd4/0x114 [ 43.449040][ T5348] netlink_sendmsg+0x4c4/0x948 [ 43.449048][ T5348] __sock_sendmsg+0xc8/0x17c [ 43.449055][ T5348] ____sys_sendmsg+0x3d0/0x6c8 [ 43.449064][ T5348] ___sys_sendmsg+0x198/0x224 [ 43.449072][ T5348] __sys_sendmsg+0x158/0x204 [ 43.449080][ T5348] __arm64_sys_sendmsg+0x88/0x9c [ 43.449088][ T5348] invoke_syscall+0x98/0x244 [ 43.449098][ T5348] el0_svc_common+0xec/0x23c [ 43.449107][ T5348] do_el0_svc+0x4c/0x5c [ 43.449116][ T5348] el0_svc+0x60/0x1d8 [ 43.449126][ T5348] el0t_64_sync_handler+0x44/0x104 [ 43.449134][ T5348] el0t_64_sync+0x198/0x19c [ 43.911442][ T5357] binder: 5356:5357 tried to acquire reference to desc 0, got 1 instead [ 43.911621][ T5357] binder: 5356:5357 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 43.911631][ T5357] binder: 5357 RLIMIT_NICE not set [ 43.911641][ T5357] binder: 5357 RLIMIT_NICE not set [ 43.911835][ T5357] FAULT_INJECTION: forcing a failure. [ 43.911835][ T5357] name failslab, interval 1, probability 0, space 0, times 0 [ 43.911850][ T5357] CPU: 0 UID: 0 PID: 5357 Comm: syz.3.131 Not tainted syzkaller #0 PREEMPT [ 43.911860][ T5357] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 43.911865][ T5357] Call trace: [ 43.911868][ T5357] show_stack+0x2c/0x3c (C) [ 43.911890][ T5357] __dump_stack+0x30/0x40 [ 43.911900][ T5357] dump_stack_lvl+0xd8/0x12c [ 43.911911][ T5357] dump_stack+0x1c/0x28 [ 43.911920][ T5357] should_fail_ex+0x418/0x58c [ 43.911932][ T5357] should_failslab+0xc4/0x120 [ 43.911943][ T5357] __kmalloc_noprof+0x108/0x6c8 [ 43.911954][ T5357] tomoyo_encode2+0x10c/0x330 [ 43.911963][ T5357] tomoyo_encode+0x34/0x50 [ 43.911972][ T5357] tomoyo_realpath_from_path+0x488/0x4dc [ 43.911981][ T5357] tomoyo_path_number_perm+0x1f0/0x500 [ 43.911989][ T5357] tomoyo_file_ioctl+0x2c/0x3c [ 43.911998][ T5357] security_file_ioctl+0xdc/0x2b0 [ 43.912006][ T5357] __arm64_sys_ioctl+0xb0/0x1cc [ 43.912016][ T5357] invoke_syscall+0x98/0x244 [ 43.912026][ T5357] el0_svc_common+0xec/0x23c [ 43.912035][ T5357] do_el0_svc+0x4c/0x5c [ 43.912044][ T5357] el0_svc+0x60/0x1d8 [ 43.912054][ T5357] el0t_64_sync_handler+0x44/0x104 [ 43.912062][ T5357] el0t_64_sync+0x198/0x19c [ 43.912515][ T5357] ERROR: Out of memory at tomoyo_realpath_from_path. [ 43.913213][ T4381] binder: release 5356:5357 transaction 10 out, still active [ 43.913227][ T4381] binder: undelivered TRANSACTION_COMPLETE [ 43.917593][ T4381] binder: release 5356:5357 transaction 10 in, still active [ 43.917606][ T4381] binder: send failed reply for transaction 10, target dead [ 43.942533][ T5359] loop4: detected capacity change from 0 to 256 [ 43.980256][ T5361] loop3: detected capacity change from 0 to 512 [ 43.982124][ T4711] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.985227][ T5361] syz.3.133: attempt to access beyond end of device [ 43.985227][ T5361] loop3: rw=8388608, sector=17179852721, nr_sectors = 1 limit=512 [ 43.985709][ T5361] FAT-fs (loop3): error, invalid access to FAT (entry 0x0fffff00) [ 43.985722][ T5361] FAT-fs (loop3): Filesystem has been set read-only [ 43.985768][ T5361] FAT-fs (loop3): error, invalid access to FAT (entry 0x0fffff00) [ 44.054000][ T40] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.157370][ T4724] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 44.158140][ T4724] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 44.158689][ T4724] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 44.163365][ T40] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.164546][ T4724] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 44.164937][ T4724] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 44.208788][ T5372] loop5: detected capacity change from 0 to 512 [ 44.216761][ T5372] EXT4-fs warning (device loop5): ext4_multi_mount_protect:287: Invalid MMP block in superblock [ 44.239890][ T40] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.328391][ T40] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.347461][ T5389] squashfs: SQUASHFS error: Xattrs in filesystem, these will be ignored [ 44.347475][ T5389] unable to read xattr id index table [ 44.378918][ T5377] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 44.379173][ T5377] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 44.380203][ T5377] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 44.380352][ T5377] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 44.387846][ T5393] syzkaller0: entered promiscuous mode [ 44.387860][ T5393] syzkaller0: entered allmulticast mode [ 44.470562][ T5405] binder: 5404:5405 tried to acquire reference to desc 0, got 1 instead [ 44.470806][ T5405] binder: 5404:5405 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 44.470825][ T5405] binder: 5405 RLIMIT_NICE not set [ 44.470837][ T5405] binder: 5405 RLIMIT_NICE not set [ 44.471097][ T4792] binder: release 5404:5405 transaction 15 out, still active [ 44.471108][ T4792] binder: undelivered TRANSACTION_COMPLETE [ 44.507960][ T40] bridge_slave_1: left allmulticast mode [ 44.507981][ T40] bridge_slave_1: left promiscuous mode [ 44.508069][ T40] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.526825][ T40] bridge_slave_0: left allmulticast mode [ 44.526853][ T40] bridge_slave_0: left promiscuous mode [ 44.526960][ T40] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.595326][ T5413] binder: 5412:5413 Acquire 1 refcount change on invalid ref 1 ret -22 [ 44.609788][ T5413] binder: 5412:5413 BC_FREE_BUFFER no match for buffer at offset 1000 [ 44.666646][ T40] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 44.689664][ T40] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 44.710035][ T40] bond0 (unregistering): Released all slaves [ 44.956202][ T5444] FAULT_INJECTION: forcing a failure. [ 44.956202][ T5444] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 44.956223][ T5444] CPU: 0 UID: 0 PID: 5444 Comm: syz.3.153 Not tainted syzkaller #0 PREEMPT [ 44.956233][ T5444] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 44.956239][ T5444] Call trace: [ 44.956242][ T5444] show_stack+0x2c/0x3c (C) [ 44.956264][ T5444] __dump_stack+0x30/0x40 [ 44.956277][ T5444] dump_stack_lvl+0xd8/0x12c [ 44.956288][ T5444] dump_stack+0x1c/0x28 [ 44.956299][ T5444] should_fail_ex+0x418/0x58c [ 44.956312][ T5444] should_fail+0x14/0x24 [ 44.956323][ T5444] should_fail_usercopy+0x20/0x30 [ 44.956335][ T5444] bpf_verifier_vlog+0x3f4/0xbc0 [ 44.956348][ T5444] __btf_verifier_log+0xe8/0x13c [ 44.956361][ T5444] btf_verifier_log_member+0x524/0x718 [ 44.956374][ T5444] btf_struct_resolve+0x854/0xa40 [ 44.956383][ T5444] btf_resolve+0x1cc/0xd78 [ 44.956392][ T5444] btf_parse_type_sec+0xd08/0x17a8 [ 44.956401][ T5444] btf_new_fd+0x33c/0xa24 [ 44.956412][ T5444] bpf_btf_load+0x144/0x190 [ 44.956423][ T5444] __sys_bpf+0x7f0/0x82c [ 44.956431][ T5444] __arm64_sys_bpf+0xd0/0xec [ 44.956439][ T5444] invoke_syscall+0x98/0x244 [ 44.956452][ T5444] el0_svc_common+0xec/0x23c [ 44.956463][ T5444] do_el0_svc+0x4c/0x5c [ 44.956474][ T5444] el0_svc+0x60/0x1d8 [ 44.956486][ T5444] el0t_64_sync_handler+0x44/0x104 [ 44.956496][ T5444] el0t_64_sync+0x198/0x19c [ 44.980017][ T4721] Bluetooth: hci0: command tx timeout [ 45.002736][ T5373] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.002780][ T5373] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.002883][ T5373] bridge_slave_0: entered allmulticast mode [ 45.003361][ T5373] bridge_slave_0: entered promiscuous mode [ 45.080121][ T5453] syz.3.153 uses obsolete (PF_INET,SOCK_PACKET) [ 45.126184][ T5454] /dev/loop4: Can't open blockdev [ 45.132929][ T5373] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.132994][ T5373] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.133092][ T5373] bridge_slave_1: entered allmulticast mode [ 45.134099][ T5373] bridge_slave_1: entered promiscuous mode [ 45.173001][ T40] hsr_slave_0: left promiscuous mode [ 45.178216][ T40] hsr_slave_1: left promiscuous mode [ 45.178555][ T40] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 45.178567][ T40] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 45.178919][ T40] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 45.178928][ T40] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 45.195188][ T40] veth1_macvtap: left promiscuous mode [ 45.195221][ T40] veth0_macvtap: left promiscuous mode [ 45.195271][ T40] veth1_vlan: left promiscuous mode [ 45.196500][ T40] veth0_vlan: left promiscuous mode [ 45.248571][ T5459] device-mapper: thin metadata: sb_check failed: magic 0: wanted 27022010 [ 45.248618][ T5459] device-mapper: block manager: superblock validator check failed for block 0 [ 45.248628][ T5459] device-mapper: thin metadata: couldn't read superblock [ 45.326399][ T40] team0 (unregistering): Port device team_slave_1 removed [ 45.334415][ T40] team0 (unregistering): Port device team_slave_0 removed [ 45.354294][ T5459] device-mapper: table: 248:0: thin-pool: Error creating metadata object (-EILSEQ) [ 45.354313][ T5459] device-mapper: ioctl: error adding target to table [ 45.416276][ T4398] 8021q: adding VLAN 0 to HW filter on device eth4 [ 45.512352][ T5464] syzkaller0: entered promiscuous mode [ 45.512374][ T5464] syzkaller0: entered allmulticast mode [ 45.525044][ T5373] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 45.525922][ T5373] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 45.534655][ T5373] team0: Port device team_slave_0 added [ 45.535355][ T5373] team0: Port device team_slave_1 added [ 45.541594][ T5373] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 45.541605][ T5373] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 45.541619][ T5373] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 45.542861][ T5373] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 45.542870][ T5373] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 45.542884][ T5373] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 45.555391][ T5373] hsr_slave_0: entered promiscuous mode [ 45.555682][ T5373] hsr_slave_1: entered promiscuous mode [ 46.210761][ T5485] FAULT_INJECTION: forcing a failure. [ 46.210761][ T5485] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 46.210784][ T5485] CPU: 0 UID: 0 PID: 5485 Comm: syz.5.160 Not tainted syzkaller #0 PREEMPT [ 46.210795][ T5485] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 46.210801][ T5485] Call trace: [ 46.210804][ T5485] show_stack+0x2c/0x3c (C) [ 46.210837][ T5485] __dump_stack+0x30/0x40 [ 46.210849][ T5485] dump_stack_lvl+0xd8/0x12c [ 46.210860][ T5485] dump_stack+0x1c/0x28 [ 46.210870][ T5485] should_fail_ex+0x418/0x58c [ 46.210882][ T5485] should_fail+0x14/0x24 [ 46.210892][ T5485] should_fail_usercopy+0x20/0x30 [ 46.210902][ T5485] copy_from_sockptr_offset+0x84/0x1e8 [ 46.210914][ T5485] tls_setsockopt+0xbec/0x1520 [ 46.210924][ T5485] sock_common_setsockopt+0xb0/0xcc [ 46.210934][ T5485] do_sock_setsockopt+0x1f0/0x330 [ 46.210943][ T5485] __sys_setsockopt+0x104/0x170 [ 46.210951][ T5485] __arm64_sys_setsockopt+0xc8/0xe4 [ 46.210959][ T5485] invoke_syscall+0x98/0x244 [ 46.210970][ T5485] el0_svc_common+0xec/0x23c [ 46.210979][ T5485] do_el0_svc+0x4c/0x5c [ 46.210988][ T5485] el0_svc+0x60/0x1d8 [ 46.210999][ T5485] el0t_64_sync_handler+0x44/0x104 [ 46.211007][ T5485] el0t_64_sync+0x198/0x19c [ 46.249183][ T4721] Bluetooth: hci1: command tx timeout [ 46.354785][ T5373] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 46.362972][ T5373] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 46.363326][ T5373] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 46.367807][ T5373] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 46.377528][ T5373] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 46.385636][ T5373] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 46.385996][ T5373] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 46.386970][ T5373] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 46.388488][ T5500] FAULT_INJECTION: forcing a failure. [ 46.388488][ T5500] name failslab, interval 1, probability 0, space 0, times 0 [ 46.388506][ T5500] CPU: 1 UID: 0 PID: 5500 Comm: syz.5.164 Not tainted syzkaller #0 PREEMPT [ 46.388518][ T5500] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 46.388523][ T5500] Call trace: [ 46.388526][ T5500] show_stack+0x2c/0x3c (C) [ 46.388544][ T5500] __dump_stack+0x30/0x40 [ 46.388554][ T5500] dump_stack_lvl+0xd8/0x12c [ 46.388563][ T5500] dump_stack+0x1c/0x28 [ 46.388572][ T5500] should_fail_ex+0x418/0x58c [ 46.388583][ T5500] should_failslab+0xc4/0x120 [ 46.388593][ T5500] kmem_cache_alloc_node_noprof+0x98/0x604 [ 46.388604][ T5500] __alloc_skb+0x1f0/0x610 [ 46.388614][ T5500] netlink_alloc_large_skb+0xd4/0x114 [ 46.388622][ T5500] netlink_sendmsg+0x4c4/0x948 [ 46.388630][ T5500] __sock_sendmsg+0xc8/0x17c [ 46.388638][ T5500] ____sys_sendmsg+0x3d0/0x6c8 [ 46.388646][ T5500] ___sys_sendmsg+0x198/0x224 [ 46.388654][ T5500] __sys_sendmsg+0x158/0x204 [ 46.388662][ T5500] __arm64_sys_sendmsg+0x88/0x9c [ 46.388675][ T5500] invoke_syscall+0x98/0x244 [ 46.388687][ T5500] el0_svc_common+0x19c/0x23c [ 46.388698][ T5500] do_el0_svc+0x4c/0x5c [ 46.388708][ T5500] el0_svc+0x60/0x1d8 [ 46.388718][ T5500] el0t_64_sync_handler+0x44/0x104 [ 46.388726][ T5500] el0t_64_sync+0x198/0x19c [ 46.459068][ T5373] 8021q: adding VLAN 0 to HW filter on device bond0 [ 46.462423][ T5373] 8021q: adding VLAN 0 to HW filter on device team0 [ 46.464557][ T40] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.464586][ T40] bridge0: port 1(bridge_slave_0) entered forwarding state [ 46.478800][ T14] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.478835][ T14] bridge0: port 2(bridge_slave_1) entered forwarding state [ 46.501069][ T5373] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 46.501087][ T5373] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 46.525318][ T5516] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 46.607412][ T5510] TC_ACT_REPEAT abuse ? [ 46.717998][ T5535] ================================================================== [ 46.718010][ T5535] BUG: KASAN: slab-out-of-bounds in ecryptfs_verify_auth_tok_from_key+0x324/0x360 [ 46.718030][ T5535] Read of size 2 at addr ffff0000d9790319 by task syz.5.167/5535 [ 46.718038][ T5535] [ 46.718042][ T5535] CPU: 0 UID: 0 PID: 5535 Comm: syz.5.167 Not tainted syzkaller #0 PREEMPT [ 46.718052][ T5535] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 46.718057][ T5535] Call trace: [ 46.718060][ T5535] show_stack+0x2c/0x3c (C) [ 46.718074][ T5535] __dump_stack+0x30/0x40 [ 46.718085][ T5535] dump_stack_lvl+0xd8/0x12c [ 46.718097][ T5535] print_address_description+0xb0/0x238 [ 46.718105][ T5535] print_report+0x68/0x84 [ 46.718113][ T5535] kasan_report+0x8c/0xc4 [ 46.718131][ T5535] __asan_report_load_n_noabort+0x1c/0x28 [ 46.718141][ T5535] ecryptfs_verify_auth_tok_from_key+0x324/0x360 [ 46.718151][ T5535] ecryptfs_keyring_auth_tok_for_sig+0xe8/0x1a0 [ 46.718160][ T5535] ecryptfs_get_tree+0x478/0x1044 [ 46.718173][ T5535] vfs_get_tree+0x90/0x28c [ 46.718183][ T5535] fc_mount+0x24/0xac [ 46.718192][ T5535] do_new_mount+0x2a4/0x538 [ 46.718202][ T5535] path_mount+0x5f0/0xa88 [ 46.718212][ T5535] do_mount+0xe8/0x148 [ 46.718221][ T5535] __arm64_sys_mount+0x33c/0x388 [ 46.718232][ T5535] invoke_syscall+0x98/0x244 [ 46.718244][ T5535] el0_svc_common+0xec/0x23c [ 46.718256][ T5535] do_el0_svc+0x4c/0x5c [ 46.718267][ T5535] el0_svc+0x60/0x1d8 [ 46.718277][ T5535] el0t_64_sync_handler+0x44/0x104 [ 46.718288][ T5535] el0t_64_sync+0x198/0x19c [ 46.718296][ T5535] [ 46.718298][ T5535] Allocated by task 5343: [ 46.718303][ T5535] kasan_save_track+0x40/0x78 [ 46.718310][ T5535] kasan_save_alloc_info+0x40/0x50 [ 46.718318][ T5535] __kasan_kmalloc+0x9c/0xb4 [ 46.718325][ T5535] __kmalloc_noprof+0x34c/0x6c8 [ 46.718336][ T5535] user_preparse+0x94/0x160 [ 46.718345][ T5535] __key_create_or_update+0x2a4/0x848 [ 46.718356][ T5535] key_create_or_update+0x60/0x7c [ 46.718367][ T5535] __arm64_sys_add_key+0x384/0x43c [ 46.718374][ T5535] invoke_syscall+0x98/0x244 [ 46.718383][ T5535] el0_svc_common+0x19c/0x23c [ 46.718393][ T5535] do_el0_svc+0x4c/0x5c [ 46.718403][ T5535] el0_svc+0x60/0x1d8 [ 46.718410][ T5535] el0t_64_sync_handler+0x44/0x104 [ 46.718419][ T5535] el0t_64_sync+0x198/0x19c [ 46.718425][ T5535] [ 46.718427][ T5535] The buggy address belongs to the object at ffff0000d9790300 [ 46.718427][ T5535] which belongs to the cache kmalloc-32 of size 32 [ 46.718433][ T5535] The buggy address is located 0 bytes to the right of [ 46.718433][ T5535] allocated 25-byte region [ffff0000d9790300, ffff0000d9790319) [ 46.718442][ T5535] [ 46.718444][ T5535] The buggy address belongs to the physical page: [ 46.718448][ T5535] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x119790 [ 46.718455][ T5535] flags: 0x5ffc00000000000(node=0|zone=2|lastcpupid=0x7ff) [ 46.718463][ T5535] page_type: f5(slab) [ 46.718471][ T5535] raw: 05ffc00000000000 ffff0000c0001780 dead000000000100 dead000000000122 [ 46.718477][ T5535] raw: 0000000000000000 0000000000400040 00000000f5000000 0000000000000000 [ 46.718482][ T5535] page dumped because: kasan: bad access detected [ 46.718485][ T5535] [ 46.718487][ T5535] Memory state around the buggy address: [ 46.718491][ T5535] ffff0000d9790200: fa fb fb fb fc fc fc fc fa fb fb fb fc fc fc fc [ 46.718496][ T5535] ffff0000d9790280: fa fb fb fb fc fc fc fc fa fb fb fb fc fc fc fc [ 46.718501][ T5535] >ffff0000d9790300: 00 00 00 01 fc fc fc fc fa fb fb fb fc fc fc fc [ 46.718505][ T5535] ^ [ 46.718509][ T5535] ffff0000d9790380: fa fb fb fb fc fc fc fc fa fb fb fb fc fc fc fc [ 46.718515][ T5535] ffff0000d9790400: fa fb fb fb fc fc fc fc fa fb fb fb fc fc fc fc [ 46.718518][ T5535] ================================================================== [ 46.718536][ T5535] Disabling lock debugging due to kernel taint [ 46.718559][ T5535] ecryptfs_verify_version: Minor version number mismatch. Expected [4]; got [197] [ 46.718575][ T5535] Data structure version mismatch. Userspace tools must match eCryptfs kernel module with major version [0] and minor version [4] [ 46.718599][ T5535] Could not find valid key in user session keyring for sig specified in mount option: [syz0] [ 46.718612][ T5535] One or more global auth toks could not properly register; rc = [-22] [ 46.718665][ T5535] Error validating options; rc = [-22] [ 46.844696][ T5534] syzkaller0: entered promiscuous mode [ 46.844710][ T5534] syzkaller0: entered allmulticast mode [ 46.852492][ T4398] 8021q: adding VLAN 0 to HW filter on device eth5 [ 46.957100][ T5373] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 46.997203][ T4398] 8021q: adding VLAN 0 to HW filter on device eth6 [ 47.030469][ T5373] veth0_vlan: entered promiscuous mode [ 47.032227][ T5373] veth1_vlan: entered promiscuous mode [ 47.037166][ T5373] veth0_macvtap: entered promiscuous mode [ 47.043421][ T5373] veth1_macvtap: entered promiscuous mode [ 47.047431][ T5373] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 47.050715][ T5373] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 47.061557][ T4721] Bluetooth: hci0: command tx timeout [ 47.085054][ T1896] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 47.085068][ T1896] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 47.089283][ T40] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.089308][ T40] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.089322][ T40] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.089336][ T40] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.095167][ T1896] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 47.095179][ T1896] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 47.146483][ T4398] 8021q: adding VLAN 0 to HW filter on device eth7 [ 47.348605][ T5182] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 48.329080][ T4721] Bluetooth: hci1: command tx timeout [ 49.139064][ T4721] Bluetooth: hci0: command tx timeout [ 50.419135][ T4721] Bluetooth: hci1: command tx timeout [ 52.489114][ T4721] Bluetooth: hci1: command tx timeout