last executing test programs: 4.410075031s ago: executing program 1 (id=477): openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x70) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0) read$FUSE(r0, &(0x7f0000002100)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000340)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x34808421, 0x401, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0xa4001f7a}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000041c0)="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", 0x2000, &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20, 0x0, 0xfffffffffffffff7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x20c01, 0x36) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r3, 0x2, &(0x7f0000000780)=[&(0x7f0000000440)={0xfffffffe, 0x20011004, 0x4, 0x1, 0x0, r2, &(0x7f00000000c0)='!', 0xb7f40, 0x3000000000000000}]) dup3(r2, r0, 0x0) 4.239987178s ago: executing program 1 (id=481): syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="1442f77a6069b2d56e8d99bc95d9ca04bcf5d445e6f9e92db13e82ccb5fe682074deb9388e751f6969519f630dc35de15af745c98981f1fbd52344178267ae1e9d6502880f50e65b0b6e8adbc66d9420d93739b71d632027730b08b8fde81d6bd2200c42f1e0b23333f54a7042bf2625e5504f5c791ba5893221625a47b2601183e977249ba24e00"/146, @ANYRESOCT, @ANYRES64, @ANYRESHEX, @ANYRES16=0x0], 0x7) socketpair$unix(0x1, 0x1, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1000000000021, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) 4.146659809s ago: executing program 1 (id=485): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a74000000060a010400000000000000000200000048000480440001800c0001007061796c6f616400340002800800044000000000080005400000000008000340000000570800024000000002080026400000000208000740000000080900010073797a30000000000900020073797a32"], 0x9c}}, 0x4) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x14, 0x38, 0x301, 0x70bd27, 0xfffffffc, {0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x48d3}, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r1) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_MGMT(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)={0x38, r2, 0x1, 0x60bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x34}, @NL80211_ATTR_TDLS_ACTION={0x5}, @NL80211_ATTR_IE={0x4}, @NL80211_ATTR_TDLS_DIALOG_TOKEN={0x5, 0x89, 0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x20008804}, 0x4000000) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r5, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r6 = socket(0x2, 0x805, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e20, @rand_addr=0x64010102}]}, &(0x7f00000007c0)=0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r8 = getpid() sched_setscheduler(r8, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r9, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r10, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r9, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) msgctl$MSG_INFO(0x0, 0xc, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x63, 0x11, 0xc}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6}, 0x70) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r6, 0x84, 0x6c, &(0x7f0000000180)={r11, 0x10, "c7dff70e4f853f3a4c1240f0f02fd60d"}, &(0x7f0000000200)=0x18) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r6, 0x84, 0x18, &(0x7f00000000c0)={r12, 0x7}, &(0x7f0000000140)=0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r6, 0x84, 0x75, &(0x7f00000001c0)={r7, 0x8}, 0x8) 3.101376588s ago: executing program 0 (id=491): mkdirat(0xffffffffffffff9c, &(0x7f00000000a0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f00000000a0)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)=@in6={0xa, 0x4e24, 0x3, @loopback, 0x5}, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x4855}, 0x24000052) io_setup(0x400007, &(0x7f0000000140)=0x0) r1 = openat$sysfs(0xffffff9c, &(0x7f00000000c0)='/sys/power/wakeup_count', 0x42, 0x0) io_submit(r0, 0x1, &(0x7f0000000500)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0xfffffc98}]) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newlink={0x4c, 0x10, 0x401, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_SNOOPING={0x5, 0x17, 0x1}, @IFLA_BR_STP_STATE={0x8}, @IFLA_BR_PRIORITY={0x6, 0x6, 0x6}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x400c824}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000800)='./dev/ttyGS0\x00', 0x2, 0x0) 3.085180481s ago: executing program 2 (id=492): openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x70) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0) read$FUSE(r0, &(0x7f0000002100)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000340)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x34808421, 0x401, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0xa4001f7a}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000041c0)="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", 0x2000, &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20, 0x0, 0xfffffffffffffff7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x20c01, 0x36) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r3, 0x2, &(0x7f0000000780)=[&(0x7f0000000440)={0xfffffffe, 0x20011004, 0x4, 0x1, 0x0, r2, &(0x7f00000000c0)='!', 0xb7f40, 0x3000000000000000}]) dup3(r2, r0, 0x0) 2.866747559s ago: executing program 0 (id=494): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4001}) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000080)={'syzkaller0\x00', {0x2, 0x0, @rand_addr=0xac140001}}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) r2 = socket$inet_sctp(0x2, 0x1, 0x84) bind(r2, &(0x7f0000000000)=@in={0x2, 0x3210, @rand_addr=0xac140001}, 0x10) listen(r2, 0x5) write$tun(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="00000800010000000000140008004500003c000000004084ca2502020202ac14000104d2321000000000000000000100001c1122334400008000000500050000000580040008"], 0x4a) (fail_nth: 7) 2.822987576s ago: executing program 4 (id=496): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000580)={0x0}}, 0x0) 2.772689429s ago: executing program 2 (id=497): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r1, 0xffffffffffffffff, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) clock_gettime(0xfffffffffffffffb, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4001}) ioctl$TUNSETVNETBE(r0, 0x400454de, &(0x7f0000000140)=0x1) r2 = socket$inet(0x2, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_SET(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000c00)=ANY=[@ANYBLOB="ac020000", @ANYRES16=r4, @ANYBLOB="bf4400000000000000000c0000008000058014000280080001000000000008000100090000002c0002800800020001000000080004005fbe0000080001001b00000008000200000000000800020009000000070001006962000034000280080003006400000008000400090000000800030051bd000008000300fc00000008000300a90f0000080001"], 0x2ac}}, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000080)={'syzkaller0\x00', {0x2, 0x0, @rand_addr=0xac140001}}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002900)=ANY=[@ANYBLOB="b702000001040000bfa30000000000000703000000feffff7a0af0fff8bffffd79a4f0ff00000000b7060000ffffffff2d640500000000006502040001001f000404000001007d60b7030000000000006a0a00fefdff00008500000026000000b7000000000000009500000000000000c743a0c8e3ebbadc20e5a7efcc9ac1467fb2ea80dbcf8df265e1b40e4c8afd5c0c000000008da68076774bbcdb2c769937000090af27db5b56024db96bcbbbd2cb2000ce03000000000000007e357754508535766c80114604a86fe569b05614eab9297eb290a248a120c9c6e39f403ff065fd3052aae80675eeba68562eaeaea5fecf298ca20f274233106eab63ecf772de7b265040b6c50b7420b48a93fe94c756108afc5bceeb78040000005f02a5a6474ae549070004000000001294fba0ed5020e6474ac921fee1f6d8ad6a80d0947cd6d4a561ced21a0b4a902be6af7ec2d1ba002e57f301000000000000000000000000100000aaf25343063e6581f9e6de14ad72e5ad84309f47f96a576cd20cef7ed951a73ea73d7c7f14e306f1f1d1377e57bbb19700f0077e9d0000b93eb0f2c6f8141e350dc68147e5958128d22d58625cf9dba211bfff9c3709c9b134625d3d2369f516a49eeeb1a662c8dfb875bdf5c6ba73cccdfacb202994c40d322717faff03323dce8a34ee0ca2cf61efb4b30000642735d6d482ba98d252f36c54333a8b1aa736369392b9067665339820f5f1557b0bf7cc06a5a13c714e0b1a1f000000ff3283076cda3d0b1a2905cfc3d04f1db264b530abcbe44bc405f600807970727fb819afa1907228fa9e83433eedb4ac88d0285594ffb0d14c09d5c77f33702822b02488ea570204c8441ced81cacf945dcb2486d65ceec8bcaffbe800a041a378b40dc9e3600e916ae6307bd8325a442095bc9a8b0c95905979f34adddbb26f0d24425c8ab9d937d84b521914f92eed3d3e9de82942a952e86b567aff5bc2e3c1fcc00f618363df5d0d181ee8f4b8fd356c9eb365adc037e443820c05c5db16ff07a9cf471e2ebf91ab00a05f88c1cd55f8c81f5eb1f8d615ca27efb2193bb61665a1ce37f30c2efc9c3b5a4a5d95479fac471ba60fbd0e50225563cd37343d09da72472efc2b2877fbab12a891513e5f0763ae06c0610a2869747c143d7500760600f3ffb2310e19ac58bf29d7f178d09a9f634a3ae492f54649589e3692768a0f3a08ff275df45508ad85950d8e08465fa1067ea8f383b3e7a7ddf5977d46f4bc38f914b4a496426d8468f9ba618b6b2218b50c8fc9efbce3ba799cf70de7e13be871aa7eb402e2b11f440361e18d4e334bfc6ae54e62e67a03b4c756c544189e4519a029674e2a2bbbc7f6600000000000800000e5e30b70b1eb176d3a62660600000030a0af132e680510811d3ab71af5d98e2d3d928a749e8b9402d14655612bd58fb40b4625cb69bf6cea97b447f2d970d99100000000086000001b881afb2cc500003a73562af4878f75b4c98274eeb666aa1f5fcf91990cf0dcfef9540057b8a3fff2bc02c5941626d2015f414546e87835ba18e9101734a9e9c6955fc6b9a25fe2a3dd8bab7f21beccba5493a164c663eceed401737c12c65804712236a9a29a43b1e27e9b6816f2328ea8423121f12b7b35aa721fef26934ccafde573bee5c33ef15309f43cbd5d61aa679a9c402d337ebf57a5eacb569401c1df7b9c45b09743c61d1db37f0000000000020000000061d7d6818db785d8ba13dc577fe61a68eb365de5661f43d4c789bb117a3d208ae44a381b718b3157e218959156ff8e92b7e92bc275d2c9114547351a0d0f2a70d13be0194b6cb68b03000000000000004f153bbc7f52861e4e5df0d19e4e40ac44cfda6f87807e5b5ed7072c04da88afd3d4b79f060e004a0e2f00b9e726ac75d2ac0691314c627e9a8a07bdd607919fd48f01ad6d2f7621d9a75b134f1bc25ed7c33d411a5baa4daa3add16afc502b2b7629541d722e91d631e5ffb9d4beb5aa5a2c4e490a5bd5cf4538ba310b8cbc221af38ea842d4cb908bcd574f794459fd54b58c6a791e6df620047bade4ba41ee0141843958479544619f749ff70088b0fd115077f7eff7c5a3315ca604d110df1c54407f191a78d8362e4dc6e1138391c2af2b96779bb76c9f1daea4f085f38810edef6dd047937c231cba791a4e7713c5b3b0a0b6ba37db5016e02d114d714459d065a79609fea4efebad04edac11aac0e53dd094827453144fa419ee81823d00a90a9058ba740d2f41253a8d01a8c1a7265a084e30ad10d412aee8170a7111d62473e7bd8f3d64fb7ebdd32aada331900000000000000000000000084ef49dd02000000bf48ea48e0e1f463d9dcb285038ec38d5f4969ed0e98a71ac7bf8159a234833a5241722b2d24aa2fa4965d4eb7966fb27d118b6ef3308627e67d42f1041d5e92da28e0a7724ce715854775cbe06c5166f1dac0745f1373156a536cb6394c2c4473e2050cacf693fdf8e305080000001a901ecd90a5f53b8327a485557bc2a147b036477915e600000000034258ebbb6099b597d17ee2fc97ca850b8580b1337016a40566814594c13052b9d2b0741326825f19a24460e545c71e1940c998f39ac04a0c29691a7c8f7a78c1a7590a293c561f304533c638ae635f5ce026f7fa034d8cfe0e11831d4829692beab26891ef583cfcb713a4d3a2d8b958c0875d7e4bdcf98802db086ebcbb9d82fa569a18f06facc2ffe1ea9ae4231e1e503faa2de7f898c97788c4b9c61c70ff92abdf7476cc351156d11c0ada7614f315f4c6cca119d16827d4e864f5a7a9b690272a510c451dc07f391309d02e31e53b2bf0b5f86e776b1bcfe6c85ccd7ddf8a9559d596b5603895f265685fdd11263c946f8ef3ccec1b0d45a47a89b8237cbbdab14e4ca6dc76b2c41e071b93a065c0f5aa718e1cfab29beea78a6bd9a3114f0fb92be9a5862627b4bd99db2c08e4636e43f05f33535d5d1f9bb40e1fd8e5125a3d29b31dd94a6744bbc21722222b976089f073a4d3fcafc6d06518cf0c4fc6c3e3da0000000000000000000000007d3b60775243f2143d9f54804b11102cf0e4c641db1ba8bf75e46ab3a8fdece6562e7ebb3e407f3c7504dfa3da3aecbd49af3d1edeea11cc970416fadeedc8423bfdc85041ac4d8243a1130e6f4cb5bbfed9d095e18c98c7d690e4c491a7ddcd5635bc61dbed719ca28e8ca3f1fbbe588913ed057f1d6e34a79f4dc10df54d1993a5bc5f9ef6dbd339ee4b0b5764169f305e284ef82cc23e9366d4bc7eb45c7230b13433e5240657cb8eba33260147be8620b6d98cc48b000000000000000000000000c1ce872b18984f080100000000000000bd3fded92547d41809b398f36749083a147eb09ff1ed601bd36b873d3947fb223da647052528e0466cb917db7800f7c7000b593fca1903991cca1343882e3a1f60044f11c081dae4fc5bcf20efacdd2c577f4bcda2eea6f75a31dc90eebb6135b6fb824052181b0ad8a49ebf03ccf61d7e39bf6b0762d24d19796016301d1415b5110ba9df7f204aedb2a2e4e621c0553d312b309db67192f98ef7800000d629c04e216afc8fc66616bbf304e452373aa927c2ad6f5417f1b9bc322b802c1a1c42112a92a331cdc113b9ace3ff52ede7a853f9a89002ba070bac2f635a03db3375e5564f1a798bf9c0f8c72725d2eca9b0ec7e453d78ea20eca61530fe574299b393ca144adcb06108dfbb934065a87972739150a8752ac111c4d9062ccb95c54034fbdee131d94dfbaab1854d55665746fb7b47d25e54070b0d14c0a29c57bc4930075e1761913b036d43852c6df9f10e15105b2a1866b598a3577943514db0dce953dcec62139ff3f16066efec5d8cbc0600000000007289be5883aab951ea67cf2ff691d05c1ea91dd569ed9897fe8d88a0a6977dc8955be17e8026aff11c61fa5cc76196c1423cd597345253ba5d5ab46938e8fb23fa7047bc59c4345e912585a8adb5fe2ff51b64a326321b594e3f2d339f4090bdae6b30b62064bacbc155d3c930576f506b093ca7c60957bdfdd6536baaa871cf6a603c736b78761e6463b8ac503e219cc3d98f649602ad24d5667368290ee926fba76ee482a201a03efece3b236f4ee2ffcd5d90d92a2f0c5cea48c87f27c2f1e92988a6508c12f6b7755cc48eb10edafca92cb0260c72295a27a24846d3a2334bd60e94c0fd07e5db0a4964a7fc4e89e11a300510776934e87bb3c21394f46954a012b2a3b0760f5bad1dbd6b466ed7153bd18ee2c0b2353c38df9e0782eb000000000000000000000000001b58cadcc5aaf65e05663985a177aa1d1ea2ad1b8151c7d58f5b92827f550269b3585d98e1394e816a477e52ce2f6de2bd7192f46cf965e774968d151d2bda084b10ec4c8d2c6ab582b1e5e3ed874235ff128c661298ed75879d8a4025ad1c3d9ef6355dc7284c6e648a61da026a777fcc7ae2c60ce64a2f2b0000000000000000000000000000003022110d1230e998429a6fd8f35939a8ae5acc89125539d84b98df6f8ee2ad0b238759bf400ac14c591aefe9660076a494f73b0ea8f3cb4a9c2e4f745a2afb593fabb9481600b2f44e6415153c1f8cf974a226d2700608bb2838ef07d75aed8b082716be3c37f60f48b9995f6325fdaa1c164b1e2bcbde000000000000000000d4fd710a526223440f9df8d22bf9224e4b71b0757dbc8311a2ffbf680a2c09a893ffd79f0a645df3e2dce61e24c28750f50ccb9244fdb344773f79483ec0b6936fd853fda9ee154914a00831cf4bf6f9e6fe6cdfab5ab31de15450e6e703316d9597100d83d0444d511ec95edfc460461eef194209655b2a966078be83da84fe699fa66295c9995c869c18501c3d3bf6b17e5b2211c4903580dcdc7ea2bf9e3b202d7b01ea0b800868eb22cbb86e927b364c9c5642ea6188f53c36dffecbdeda61ceb3b1c1f4a7bc77e39a9ff7e547cef240c3cf78f61d3e0000000000000000005053dce6504d3a9b5e891fc0bd9b81af50ea72cad72041fbdb6cead0ffb504bfb37a892a68a84b184e5643f2ba5bc612cffa1a4edfa6defd6ef2e15df10c7b988d56bb0da9436025cae5adc9e6f5a137aba102c4064232018ba0434333d60bc2cce49623a06b190f21abb52c411d7454a38a14495a683bf0b91ad6c19f04d36541a92e5148b9292d48d9be857b"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfe37}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r5, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="b907ef19edfff007049e0ff0888e", 0x0, 0x4000, 0x18000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) setsockopt$MRT_DEL_MFC(r2, 0x0, 0xcd, &(0x7f0000000180)={@multicast1, @rand_addr=0x64010100, 0x1, "785e00061d18b11a78a944299ac9b3f755cd642f3205f66b91c8e4b9da51ca5e", 0x1000, 0x0, 0x0, 0x3}, 0x3c) r6 = socket$inet_sctp(0x2, 0x1, 0x84) bind(r6, &(0x7f0000000000)=@in={0x2, 0x3210, @rand_addr=0xac140001}, 0x10) listen(r6, 0x5) ioctl$XFS_IOC_GETBMAP(r2, 0xc0205826, &(0x7f00000001c0)={0x1ff, 0x77601a29, 0x2, 0x2db}) r7 = socket$pppoe(0x18, 0x1, 0x0) r8 = openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) write$khugepaged_scan(r8, &(0x7f0000000180), 0x8) ioctl$PPPOEIOCDFWD(r7, 0xb101, 0x0) write$tun(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="00000800010000000000140008004500003c000000004084ca2502020202ac14000104d2321000000000000000000100001c1122334400008000000500050000000580040008"], 0x4a) 2.772313117s ago: executing program 4 (id=498): socket$packet(0x11, 0x3, 0x300) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) prctl$PR_SET_THP_DISABLE(0x29, 0x1) syz_io_uring_setup(0x34b8, &(0x7f0000000540)={0x0, 0xc3b1, 0x800, 0x1, 0x82, 0x0, 0x0}, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) munmap(&(0x7f0000002000/0x2000)=nil, 0x2000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x17, 0xb, &(0x7f0000001980)=ANY=[@ANYBLOB="18000000000000000000000005000004180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f6ffffffb702000008000000b703000001000080850000001000000095"], &(0x7f0000000140)='GPL\x00', 0x7, 0xfe7, &(0x7f0000001e00)=""/4071, 0x60680}, 0x94) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0xb, 0x4004, @fd, 0xf8, 0x0, 0x0, 0x11, 0x1, {0x0, 0x0, 0x0, '\x00', 0x0}}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r0) sendmsg$NL80211_CMD_ASSOCIATE(r0, &(0x7f0000000bc0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000b80)={&(0x7f00000005c0)={0x5b0, r5, 0x200, 0x70bd2a, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_FILS_NONCES={0x24, 0xf3, [0x4, 0x3, 0x1, 0x8001, 0x1, 0x0, 0x800, 0xa5b1, 0x6, 0x1ff, 0x0, 0x6, 0x90e1, 0x4, 0x401, 0x7]}, @NL80211_ATTR_IE={0x231, 0x2a, [@ext_channel_switch={0x3c, 0x4, {0x0, 0x7, 0x0, 0x2}}, @fast_bss_trans={0x37, 0xef, {0x5, 0x6, "2e2c7d04fd13a88e00b494080b9c090f", "5be284337b57e02b215188fb6d7de86ae47ef755f6b75096ff9465236fa8ab74", "1e40848dddca3f84640c157d8e555ac4dd82df3886c6c5c32c458a21a9ae7d86", [{0x3, 0x14, "9208bfef044dfd0146dd7fab6d263b98743d3c70"}, {0x1, 0x28, "d466a75b2b08efb6ca1ef1030c547973aedd4511a68695d2afe7f012f56debdb62b2e9586c0d8d14"}, {0x3, 0xb, "25de9a811d1537c79a1963"}, {0x2}, {0x3, 0x23, "e1dcc96c87e796e45fe47f618a35514502528cb33d5b9b1008b81b579eb57a98dad1e1"}, {0x3, 0x27, "46448d3882dc2af456400522d74103eab2f934731f6b2a2a907cb179196d2bcf40267756a7155e"}]}}, @random_vendor={0xdd, 0xa7, "483f1728b2576290b47fb43c2a767115c722b6319e52bc71c15177ced6f0e5b8ce05e9a59618c665e94de05bc204428d41385efdefa944881eea5c891168ebc99a6c01c206b10d00c1a9a385989650d24f3610110e63ad7e7318470b6e16d0d829c77c1ab8332c87642b342350832b7e458a1fc3ee0f184fdbef3bc73bcf17d3d30c7b3640bbdb051c9586671cc21d177519660c2ef3c4cdb1113743d3a608dd6e38144e6605a1"}, @fast_bss_trans={0x37, 0x52, {0x1, 0x0, "59703ce0c11f154679517dc1f4009bb7", "f258abf28065ea4cc142fe4480b9ee8dab417fb95fd19ede15292d355d457f9b", "9f3cc7fe8221c7ca48b6b6bff1e0e53619ee0f9534d7fa810eec5c1be6e7b28f"}}, @link_id={0x65, 0x12, {@from_mac=@device_b, @device_b, @broadcast}}, @ssid={0x0, 0x6, @default_ibss_ssid}, @peer_mgmt={0x75, 0x16, {0x0, 0x8cd, @void, @val=0x30, @val="a9c5969214bf183b4318a217795d5fbf"}}, @channel_switch={0x25, 0x3, {0x0, 0x40, 0xa9}}]}, @NL80211_ATTR_FILS_KEK={0x23, 0xf2, "69168da5c90687a610a2c9d1ed1cc4bc128351ef18ad545ae4f7b7919379a9"}, @NL80211_ATTR_DISABLE_HT={0x4}, @NL80211_ATTR_IE={0x2cd, 0x2a, [@tim={0x5, 0x4d, {0x9, 0x18, 0x4, "455721101b18bbf7e6b89b1a0065264f73b3098ffce002c572f87e69aa4087685bc031defa248f2de4cd748eb9282ec3d39a86318a272a59054d18de5cc79d361aae0bd29407e7e4dbd4"}}, @fast_bss_trans={0x37, 0xcd, {0x0, 0x6, "c8b77b5ab662c22b28b78dcf2d3e35c4", "6ea323a05b7a93f8f072fe438268a4d1bbff66493cc563c087da750207932277", "307ef27cdd817fedd0e6e93c0e2741de683e7615621df5d0030e1aeccb9cd895", [{0x2}, {0x1, 0x17, "f4ad93cdc55540355e5c1aff8345e7ee89237bbc84db2c"}, {0x4, 0x21, "2265eb9aacf83c20f40253eb72aa5da0de73d56bc7ba3889425f23b34ece3cf02f"}, {0x4, 0x23, "1fe7f8c6511a3436dca7f35f5228cd054965198d19ad31bd8984e1b8c45d1c7da52505"}, {0x4, 0x3, "854352"}, {0x2, 0x11, "a2b25a0497a36199c1291dfaf14d0452dd"}]}}, @channel_switch={0x25, 0x3, {0x1, 0xa5}}, @fast_bss_trans={0x37, 0x108, {0x6, 0x7, "4ecfc367240951c95e4e6443b5a1f4e5", "fedf39e1e73aae58113bbd2a4d0c481c7346874d1004ccfb04eaddc41bbc96a8", "2fbba94f54a4087a3e13e43ebd9a4cc5d0acbc7dbdcb19602005eb0f08c3b2da", [{0x3, 0x27, "532c6e429f373c5701c8ed96fa34999b13ebe3b5cfc3776aad23672e30311dc48156bdd3b308c1"}, {0x1, 0x26, "a554cb2f5229af941bd426ce52d5163b7fc7e25874761759f06605e3289d4d694dbc66d9cfde"}, {0x3, 0x5, "db73fa6618"}, {0x4, 0x1a, "236226f6b04949e8dccfc62a57cfb9496cb8f952a1d550103b91"}, {0x1, 0x4, "e73b03a5"}, {0x2, 0x27, "700c872879e1fd473177d35fb62a8499020375598c3332b7445a1c133985028511c4091293b3a6"}, {0x4, 0x11, "181b55f8e8a7d0389d3573b0d9d1b0e3bd"}]}}, @dsss={0x3, 0x1, 0x64}, @mesh_chsw={0x76, 0x6, {0x0, 0x1, 0xc}}, @ht={0x2d, 0x1a, {0x20, 0x1, 0x4, 0x0, {0x3, 0x1, 0x0, 0x2dc, 0x0, 0x0, 0x1, 0x3, 0x1}, 0x300, 0x6, 0x80}}, @measure_req={0x26, 0x73, {0x0, 0x0, 0xf8, "de23fc57f8bcff487989809fad7879be153c9fffc8abbc9e596c9577153c7dfc67fcb9042aacd1fe940d1ceafedd9baf380f6dfd36ab0cb65948bfdc96cd3ae95ee9680f2f22898c22aeddc66f03674c3964d0aa9e12c776b313bd76e310dc29d0e445f687224dff4d470a6e08714826"}}]}, @NL80211_ATTR_HT_CAPABILITY={0x1e, 0x1f, {0x4000, 0x0, 0x6, 0x0, {0x100, 0xe11, 0x0, 0x6, 0x0, 0x0, 0x1, 0x1}, 0x800, 0x1, 0x4}}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}, @NL80211_ATTR_USE_RRM={0x4}, @NL80211_ATTR_PREV_BSSID={0xa, 0x4f, @from_mac=@broadcast}, @NL80211_ATTR_VHT_CAPABILITY_MASK={0x10, 0xb0, {0xc, {0x3, 0x2, 0x4, 0x468}}}]}, 0x5b0}, 0x1, 0x0, 0x0, 0x10000}, 0x44) r6 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r6, &(0x7f00000000c0)="a084d380d3fc030000e50788031c43a461a43446371635f468f76371de2a1bac1e6cba9e0647795d1468c30c9cd1d22b413e2b8447be410b8c96d0cdbf7a4ebcbcdc5b2d08262a7cdda393e6a921093afb2665e8d3464476ec327d5bdc1db7237dc25bbe16fff0bf3c4b13e38dc459bf6a4978dc32f28fd660cd02390fca30e401104ddcaf9631d960a240d279862bd5826f00235fbda827007655d45400"/171, 0xab, 0x2000c0b0, &(0x7f0000000000)={0x11, 0x86dd, r1, 0x1, 0xb, 0x6, @remote}, 0x14) 2.686238962s ago: executing program 0 (id=501): r0 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r0, &(0x7f0000003340)=[{{0x0, 0x0, &(0x7f0000002000)=[{&(0x7f0000000340)=""/82, 0x52}, {&(0x7f0000001f00)=""/91, 0x5b}, {&(0x7f0000001f80)=""/118, 0x76}], 0x3, &(0x7f0000000400)=""/126, 0x7e}, 0x328e}], 0x1, 0x0, 0x0) setsockopt$inet_int(r0, 0x0, 0x7, &(0x7f0000000140)=0x6, 0x4) syz_emit_ethernet(0xda, &(0x7f0000000540)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv4={0x800, @udp={{0xc, 0x4, 0x0, 0x0, 0xcc, 0x66, 0x0, 0x0, 0x11, 0x0, @empty, @empty, {[@timestamp={0x44, 0x1c, 0x8d, 0x0, 0x0, [0x3, 0x6ba5, 0x8, 0x6, 0x4, 0x4]}]}}, {0x1, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x3, "e82ca9233cd8ac0fe6b4d73798030c0f667ad86fff3f32fa33c2e0fe1ae43d64", "acfb88723558ceeaf86fbed72cf31046bbffe5819111088759971568602602fdceba64124e79599871b0e53eaa3e6c8e", "c0527a7fed7f0b210a44e41677011b892290d4df235708ae273d1dab", {"99829b51f486c2ce12e69f9ed88756da", "af73eef74a94e7bf437f1c274e4abedb"}}}}}}}, 0x0) 2.652451996s ago: executing program 2 (id=502): syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000280)='./file1\x00', 0x200c000, &(0x7f0000000080)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000"], 0x1, 0x2bc, &(0x7f0000000440)="$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") r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="00022b8070000200000002000000080061000000000008003f00f3ff6b"], 0x24}, 0x1, 0x0, 0x0, 0x4048040}, 0x20000000) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000040)={0x28, r1, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}}, 0x28}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x5c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_EXPR={0x20, 0x11, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0xfffff274}]}}}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuset.memory_pressure\x00', 0x275a, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'bond0\x00'}) writev(r4, &(0x7f0000000080)=[{&(0x7f0000000000)="4673c875ca4d9cb6f1d39f116100f2510db1e88217a55acb8319f17ef647c524516c0e45ec91a98a614276cb321854", 0x2f}, {&(0x7f0000000400)="e146badcd6aca239c46b952e5dd493f4578940a27af1978ab8560c3b60f6060b76", 0x21}], 0x2) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r5, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x80) syz_emit_ethernet(0x4e, &(0x7f0000000080)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x18, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x11, 0x0, 0x3, {[@window={0x3, 0x3}]}}}}}}}}, 0x0) 2.488882216s ago: executing program 1 (id=503): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x2000)=nil, 0x2000, &(0x7f0000000000)) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000400)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r3, &(0x7f0000003700)={0x0, 0x0, 0x0}, 0x800) prctl$PR_SET_MM(0x23, 0x4, &(0x7f0000ffd000/0x2000)=nil) r4 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000440)={0xd8, 0x1403, 0x1, 0x1ffff, 0x0, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'bridge_slave_0\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'netpci0\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth1_to_bond\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'team0\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'bond_slave_0\x00'}}]}, 0xd8}, 0x1, 0x0, 0x0, 0x80c9}, 0x20000000) sched_setparam(r0, &(0x7f0000000000)=0x1) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x1, 0x8000}, 0x28) ioctl$VIDIOC_DQEVENT(0xffffffffffffffff, 0x80785659, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565a, &(0x7f0000000140)={0x3, 0x98f90f, 0x1}) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000008c0)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@bridge_delvlan={0x24, 0x71, 0x425, 0x70bd2d, 0x7f, {0x7, 0x0, 0x0, r6}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x63, 0x1}}}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000001}, 0x4040010) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) 2.473263542s ago: executing program 2 (id=505): socket$kcm(0x2, 0x2, 0x0) 2.294519158s ago: executing program 2 (id=506): setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x0, 0x20}, 0xc) socket$inet6(0xa, 0x1, 0x100) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x1, 0xb, &(0x7f0000000380)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41100}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000000c0)=@nat={'nat\x00', 0x670, 0x5, 0x360, 0x178, 0x178, 0xfeffffff, 0x220, 0x0, 0x2c8, 0x2c8, 0xffffffff, 0x2c8, 0x2c8, 0x5, 0x0, {[{{@uncond, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x1, @private=0xa010102, @rand_addr=0x640100ff, @gre_key=0x4, @icmp_id=0x68}}}}, {{@ip={@private=0xa010101, @multicast2, 0xffffff00, 0xffffffff, 'vxcan1\x00', 'veth1_to_team\x00', {0xff}, {}, 0x34, 0x2, 0x20}, 0x0, 0x98, 0xd0, 0x0, {0x0, 0x7}, [@common=@inet=@length={{0x28}, {0x7ff, 0x9}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0xe, @private=0xa010100, @empty, @port=0x4e24, @port=0x4e23}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0x0, @loopback, @multicast2, @icmp_id=0x68, @icmp_id=0x66}}}}, {{@ip={@loopback, @rand_addr=0x64010101, 0x0, 0x0, 'veth1_virt_wifi\x00', 'veth0_macvtap\x00', {}, {}, 0x8, 0x1, 0x10}, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0xe, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @port=0x9, @gre_key=0x8}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3c0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x80000002) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)=@bridge_getvlan={0x30, 0x72, 0x100, 0x70bd26, 0x25dfdbff, {}, [@BRIDGE_VLANDB_DUMP_FLAGS={0x8}, @BRIDGE_VLANDB_DUMP_FLAGS={0x8, 0x1, 0x1}, @BRIDGE_VLANDB_DUMP_FLAGS={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x4085}, 0x4010) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) add_key(&(0x7f0000000000)='rxrpc\x00', &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x6) prctl$PR_SET_NO_NEW_PRIVS(0x41, 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7, 0x40033, 0xffffffffffffffff, 0x1000000) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) lsetxattr(&(0x7f0000000100)='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000000480)=@known='security.apparmor\x00', 0x0, 0x0, 0x1) ioctl$VT_RESIZE(r5, 0x5609, &(0x7f0000000040)={0x1, 0x7, 0x3}) syz_emit_ethernet(0x7e, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000086dd60fb6809001b2f00fc020000000000000000000000000000ff020000000000000000000000000001242088a88dff00000006000000000800000086dd88a888"], 0x0) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000240), 0x35c, 0x0) socket$kcm(0x1e, 0x5, 0x0) r6 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f00000001c0)="39000000140081ae0000dc676f97daf01e2357f9ffffffffffffff0521", 0x1d}], 0x1}, 0x0) unshare(0x64000600) 1.427245734s ago: executing program 3 (id=507): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4001}) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000080)={'syzkaller0\x00', {0x2, 0x0, @rand_addr=0xac140001}}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) r2 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x2, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x200400dc}, 0x0) bind(r2, &(0x7f0000000000)=@in={0x2, 0x3210, @rand_addr=0xac140001}, 0x10) listen(r2, 0x5) write$tun(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="00280800010000000000140008004500003c000000004084ca2502020202ac14000104d2321000000000000000000100001c1122334400008000000500050000000580080008"], 0x4a) 1.39526103s ago: executing program 0 (id=508): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000580)={0x0}}, 0x0) 1.242939167s ago: executing program 4 (id=509): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000001300)={0x0, 0x0, 0x0}, 0x0) 1.1985603s ago: executing program 4 (id=510): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendto$inet(r0, &(0x7f0000000000)="046c4658dbb945e5", 0x8, 0x0, &(0x7f0000000080)={0x2, 0x4e22, @empty}, 0x10) r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) sendmsg$TCPDIAG_GETSOCK(r1, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)={0x138, 0x12, 0x200, 0x70bd2c, 0x25dfdbfb, {0x29, 0x6, 0xa, 0x3, {0x4e23, 0x4e22, [0x200, 0x6, 0xfffffff8], [0x800, 0x1, 0x8, 0x7], 0x0, [0x8, 0x9]}, 0x5f970769, 0xdbf}, [@INET_DIAG_REQ_BYTECODE={0xea, 0x1, "f773d77b8cc1adb8b6588a7da446eeedf06bcc6426aeaa1ed9aa3cdb58655554a45151e2eefcac8dadb607cbd0c38df2cb56b50064304bea06e85c031630d459c94568d39cebec76f5e49348ab4d56d78a07cc199bceb8c4c398fe6b029b742a33ccd24647e3f5aad42d6e25040d6a1aea2af8b9b20ae36477225bdaf9af8447273197b6a96ce5f6e511e060f92d354f302d2edae1354667bc4e9e601893328dc4920acd54ede35cc34893557d65e995928838b58376cf2f12986f56c07e2af60ff084708b05731f44d3984fa5b035c31a6520d4d4798defd7b4bda5231a240a157b09d6c2ac"}]}, 0x138}, 0x1, 0x0, 0x0, 0x20044004}, 0x0) 1.198360599s ago: executing program 0 (id=511): mkdirat(0xffffffffffffff9c, &(0x7f00000000a0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f00000000a0)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/functions/acm.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) symlinkat(&(0x7f0000000400)='./config/usb_gadget/g1/functions/acm.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000500)='./config/usb_gadget/g1/configs/c.1/acm.usb0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r0, &(0x7f0000000700)='dummy_udc.0', 0xb) r1 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./dev/ttyGS0\x00', 0x2, 0x0) write(r1, &(0x7f0000000a00)='h', 0x1) close(r1) 1.11728548s ago: executing program 1 (id=512): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x800714, &(0x7f00000000c0)={[{@test_dummy_encryption}]}, 0x1, 0x4c0, &(0x7f00000006c0)="$eJzs3M1rXFUfAODfnXz0K23y9u3b923fVqNVLH4kTfphFy5UFAQVBF3UZUzSWjttpInQlqBRpK4L7sWl4NKVOzeiLsQ/QMGlFIoGoakgRO5XOklm0nx22szzwGTOuffce86595zJmXvm3gBaVm/6J4noioifI6I7j85P0Ju/zUxPDt+anhxOYnb29d+TLN3N6cnhMmm53Y4icrgSUfk4iWeTxfmOX75ybqhaHb1YxPsnzr/bP375ylNnzw+dGT0zemHw5MljRweePjF4fN52dXa1yLY6y9J63dz//tiBfS+9ee3V4VPX3vr+y3Rfew/m62vrcUe3FpXi5XrJetOj9sdsZuG6R5ed2f1hZ004aW9iQViRtohIT1dH1v+7oy1un7zuePGjphYO2FDp/6YtjVdPzQKbWBLNLgHQHOU/+vT7b/mKv+/S4OMecOO5iM4iPDM9OTwzdx2gPSrF8o4NzL83Ik5N/fVZ+oqVXocAAFiFbGzz5ILxX6YSe7P3fK5jVzGH0hMR/4qI3RHx74jYExH/icjS/jci/pdvPNu9zPx7F8QXj38q1+uWeZ2k479nasZ+MzX1L9562orYzqz+Hcnps9XRI8UxORwdW9L4wBJ5fPNCZ8N1teO/9JXmX44FiwJcb88v0M3tZGRoYmi9DsKNDyP2t9erfzI3E5C2gH0RsX9lu95VBs4+/sWBRonuXP8lrMM80+znEY/l538qFtS/lDSYn0zb+InB4/1bozp6pL9sFYv98NPV1xrlv6b6r4P0/G+f3/4XpOj+M8nnazuiWh29OL7yPK7+8knD7zQraP9z0vbfmbyRzVn/+Ha+7NLQxMTFgYjO5JUsXnSWrZEuH7y97aUiXqZP63/4UP3+v7vYJq3//yMibcQHI3Y9EBEPFmV/KCIejohDS9T/u+cfeWeJ+ieRRFPP/0jdz7+59t+T1M7XryLQdu7brxvN2y/v/B+LqeyzNpd9/t3Bcgu4xsMHAAAA94VKRHRFUunLw71dUan09eW/4d8T2yvVsfGJJ06PvXdhJL9HoCc6KuWVru6a66EDyVSxxzw+WFwrLtcfLa4bf9q2LYv3DY9VR5pcd2h1O+b3/yj7f+q3tmaXDthwjefRlrg1ANgUFvb/SpPKAdx9y/kdje8CsDnV6f/1nqEBbEKe1wKtq17//2BBfNH43wgBNoXF/f/XOo+sAzYj439oXfo/tC79H1rSWu7rX32gvFlgycRlEeum2brsO/xbJVA+HmYj89oWt5dEJQt0xT1Q99UEupeTOCK+WnNebetQ5rTH3N3jU/PAIQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgPvYPwEAAP//O47fqw==") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) write$cgroup_int(r0, &(0x7f00000000c0), 0x12) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r2, &(0x7f0000000240)={0x2, 0x4e20, @local}, 0x10) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x300) setsockopt$inet_int(r2, 0x0, 0xd, &(0x7f00000000c0)=0x5, 0x4) setsockopt$inet_int(r2, 0x0, 0x14, &(0x7f0000000000)=0x40, 0x4) recvmmsg(r2, &(0x7f0000004e00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002740)=""/44, 0x2c}, 0xb}], 0x1, 0x40012020, 0x0) write$binfmt_script(r1, &(0x7f0000000100), 0x4) ioctl$EXT4_IOC_MOVE_EXT(r0, 0x40305829, &(0x7f0000000000)={0x17c04, 0xffffffffffffffff, 0x0, 0x100000001}) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x800714, &(0x7f00000000c0)={[{@test_dummy_encryption}]}, 0x1, 0x4c0, &(0x7f00000006c0)="$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") (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) (async) write$cgroup_int(r0, &(0x7f00000000c0), 0x12) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) (async) bind$inet(r2, &(0x7f0000000240)={0x2, 0x4e20, @local}, 0x10) (async) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) (async) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x300) (async) setsockopt$inet_int(r2, 0x0, 0xd, &(0x7f00000000c0)=0x5, 0x4) (async) setsockopt$inet_int(r2, 0x0, 0x14, &(0x7f0000000000)=0x40, 0x4) (async) recvmmsg(r2, &(0x7f0000004e00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002740)=""/44, 0x2c}, 0xb}], 0x1, 0x40012020, 0x0) (async) write$binfmt_script(r1, &(0x7f0000000100), 0x4) (async) ioctl$EXT4_IOC_MOVE_EXT(r0, 0x40305829, &(0x7f0000000000)={0x17c04, 0xffffffffffffffff, 0x0, 0x100000001}) (async) 1.103235869s ago: executing program 4 (id=513): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @link_local}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000b80)) syz_usb_connect(0x3, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040501d89600001010203010902"], 0x0) r3 = dup(r1) r4 = fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000340)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/251, 0x0}) ioctl$VHOST_NET_SET_BACKEND(r4, 0x4008af30, &(0x7f0000000080)={0x0, r3}) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000018c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r5, 0xffffffffffffffff, 0x0) 966.543329ms ago: executing program 3 (id=514): openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000400), 0x8080, 0x0) (async) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/schedule_icmp\x00', 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x11) (async) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0001, 0x0) ioctl$PPPIOCATTCHAN(r1, 0x40047438, &(0x7f0000000340)=0x1) (async) ioctl$PPPIOCSMAXCID(r1, 0x40047457, &(0x7f0000000040)=0x7) (async) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x181041, 0x0) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000640)=@newqdisc={0x5c, 0x24, 0xd776d5ef74850466, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x7, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x3}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x2c, 0x2, [@TCA_CODEL_LIMIT={0x8, 0x2, 0xffffffff}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x2}, @TCA_CODEL_INTERVAL={0x8}, @TCA_CODEL_LIMIT={0x8, 0x2, 0x1}, @TCA_CODEL_INTERVAL={0x8}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r6, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0xfffffff9}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) (async) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f00000004c0)={'syzkaller0\x00', @random="5fa144c19a4c"}) (async) syz_genetlink_get_family_id$tipc(&(0x7f0000000380), 0xffffffffffffffff) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r9 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r9, &(0x7f0000002900)={&(0x7f0000000500)=@xdp={0x2c, 0x8, r8, 0x109}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000380)="da", 0x14}], 0x1}, 0x20000885) (async) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP(r2, 0x3b85, &(0x7f0000000200)={0x28, 0x5, r10, 0x0, &(0x7f0000000a40)="7f", 0x1, 0x4}) (async) ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, &(0x7f00000002c0)={0x28, 0x6, r10, 0x0, &(0x7f0000ae0000/0x2000)=nil, 0x2000, 0x7}) (async) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) (async) r12 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r12, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_KEY(r12, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="090000000000feffffff0a00000008000300", @ANYRES32=r13, @ANYBLOB="0c005080fd3c926ea3a555572d78103c00000000000000"], 0x28}}, 0x0) (async) ioctl$IOMMU_IOAS_MAP(r2, 0x3b85, &(0x7f0000000280)={0x28, 0x2, r10, 0x0, &(0x7f00000001c0)='d', 0x1, 0xf136}) (async) ioctl$IOMMU_IOAS_MAP(r2, 0x3b85, &(0x7f0000000140)={0x28, 0x6, r10, 0x0, &(0x7f0000000440)='/', 0x1, 0xa}) 906.071896ms ago: executing program 3 (id=515): syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000280)='./file1\x00', 0x200c000, &(0x7f0000000080)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000"], 0x1, 0x2bc, &(0x7f0000000440)="$eJzs3EFrE08Yx/Hn37RNmtImfxBBQX3Qi16WNr4ADdKCGFBqU9SDsLUbDVmTshsiEbG5iFdfR/HoTVDfQC/ixbu3IgheehBXupttk5rWbU2a2H4/UGa2M7/OLN2WZwud9TuvHpcKrlEwqzKUUBkSaciGSHqz1/Rfsx3y+6PSqiGXxr9/PnP77r0b2VxuZk51Njt/OaOqk+fePXn2+vyH6vjCm8m3cVlL31//lvmydnLt1PrP+UdFV4uulitVNXWxUqmai7alS0W3ZKjesi3TtbRYdi2nbbxgV5aX62qWlyaSy47lumqW61qy6lqtaNWpq/nQLJbVMAydSMrxNhxhTn51bs7M7jrsxbq6I3RfvP1yrNMcx8k2Og/mV3u1LwAAMLj2rv+DWn/3+j+3ELRdrv9FqP97pNF29Yf6H0eC42TNZPPntx31PwAAAAAAAAAAAAAAAAAAAAAA/4INz0t5npcK2/AjLiIJEQmv+71P9MYBv/9X+rRddFnLP+4lROyXtXwtH7TBeLYgRbHFkilJyQ//eWgK+rPXczNT6htpfsnN/EotH/PPJvDzoXSn/Nn/p4O8yvvNXK2ZH5Fk6/oZScmJzutntvPhcQgrtfyoXLzQkjckJR8fSEVsWfKf6+3882nVazdzO9Yf8+ftJsrpGgAAAAAADApDt6Tb33+Dsx8Nf0JCfh8P8vv4+8CO9+thOc1LNAAAAAAAh8KtPy2Ztm05B+jEReQv4ke1E5OB2MaOzlUROfRFRaTRn1tOiEjwGT1I/OtWPFLKizBnWEQG4kmI2On3byYAAAAA3bZd9O8j9OlFD3cEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMDxE/U8sHB+yVuRtvPtwoE94i3LxQ79BgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAB8isAAP//0KwZYw==") r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="00022b8070000200000002000000080061000000000008003f00f3ff6b"], 0x24}, 0x1, 0x0, 0x0, 0x4048040}, 0x20000000) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000040)={0x28, r1, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}}, 0x28}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x5c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_EXPR={0x20, 0x11, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0xfffff274}]}}}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuset.memory_pressure\x00', 0x275a, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'bond0\x00'}) writev(r4, &(0x7f0000000080)=[{&(0x7f0000000000)="4673c875ca4d9cb6f1d39f116100f2510db1e88217a55acb8319f17ef647c524516c0e45ec91a98a614276cb321854", 0x2f}, {&(0x7f0000000400)="e146badcd6aca239c46b952e5dd493f4578940a27af1978ab8560c3b60f6060b76", 0x21}], 0x2) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c) fsmount(0xffffffffffffffff, 0x0, 0x80) syz_emit_ethernet(0x4e, &(0x7f0000000080)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x18, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x11, 0x0, 0x3, {[@window={0x3, 0x3}]}}}}}}}}, 0x0) 767.628173ms ago: executing program 3 (id=516): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0, {0x4}}, './bus\x00'}) (async) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0, {0x4}}, './bus\x00'}) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_GET(r1, &(0x7f0000000b40)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a40)={0xb8, r2, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@TIPC_NLA_SOCK={0x8, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_NET={0x28, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x7}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x900000}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xffff}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3}]}, @TIPC_NLA_MEDIA={0x4c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}]}, @TIPC_NLA_MEDIA={0x28, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x939}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}]}, 0xb8}, 0x1, 0x0, 0x0, 0xc004}, 0x4) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000040)={0xc}) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x8, 0x94, 0x7fff0000}]}) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000540), 0x1, 0x490, &(0x7f0000000580)="$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") syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='./file1\x00', 0x280440e, &(0x7f0000000380)={[{@debug}, {@test_dummy_encryption_v1}, {@inlinecrypt}, {@user_xattr}, {@noinit_itable}, {@norecovery}, {@minixdf}, {@nodioread_nolock}, {@errors_remount}, {@jqfmt_vfsv0}, {@usrquota}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x8}}]}, 0x1, 0xbdb, &(0x7f0000001000)="$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") openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42042, 0x14a) (async) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42042, 0x14a) fallocate(r5, 0x0, 0x8, 0x8000) (async) fallocate(r5, 0x0, 0x8, 0x8000) syz_mount_image$fuse(0x0, &(0x7f0000000100)='./bus\x00', 0x20020, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000680)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@nfs_export_on}]}) (async) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000680)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@nfs_export_on}]}) chdir(&(0x7f0000000300)='./file0\x00') renameat2(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000a00)='./file1\x00', 0x0) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x12, 0x9, &(0x7f0000000680)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x5}, @call={0x85, 0x0, 0x0, 0xf}, @generic={0xa7, 0x0, 0x0, 0x0, 0x85ffffff}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x8}, 0x80) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) (async) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r6, &(0x7f0000006200)={0x2020, 0x0, 0x0}, 0x2020) syz_mount_image$fuse(0x0, &(0x7f0000001140)='./file0/file0\x00', 0x2bd10e5, 0x0, 0x0, 0x0, 0x0) (async) syz_mount_image$fuse(0x0, &(0x7f0000001140)='./file0/file0\x00', 0x2bd10e5, 0x0, 0x0, 0x0, 0x0) write$FUSE_INIT(r6, &(0x7f0000000100)={0x50, 0xffffffffffffffda, r7, {0x7, 0x2b, 0x200, 0x400c0010, 0xfffd, 0xffff, 0x9, 0xa15, 0x0, 0x0, 0x100}}, 0xffe7) close_range(r4, 0xffffffffffffffff, 0x0) (async) close_range(r4, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x79af, 0x3380, 0x1, 0x40024e}, 0x0, 0x0, 0x0) (async) syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x79af, 0x3380, 0x1, 0x40024e}, 0x0, 0x0, 0x0) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x0, @hyper}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x1f, &(0x7f00000000c0)=[r3], 0x1) (async) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x1f, &(0x7f00000000c0)=[r3], 0x1) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x87) tee(r3, r8, 0xa853, 0xb) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='blkio.bfq.time\x00', 0x275a, 0x0) (async) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='blkio.bfq.time\x00', 0x275a, 0x0) sendfile(r8, r9, &(0x7f0000000080)=0x31, 0xffff) 722.585803ms ago: executing program 1 (id=517): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) quotactl$Q_GETQUOTA(0xffffffff80000700, 0x0, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[]) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) getpgid(0x0) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r4, 0x84, 0xb, &(0x7f0000000180)={0x20, 0x2, 0x4, 0x0, 0x0, 0x6, 0x0, 0x0, 0x5, 0x0, 0x3, 0x2, 0x0, 0x93}, 0xe) ioctl$int_in(r4, 0x5452, &(0x7f0000000280)=0xffffffffffffffff) sendto$inet6(r4, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) shutdown(r4, 0x1) sendmsg$nl_xfrm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=@allocspi={0x10c, 0x16, 0x1, 0x0, 0x0, {{{@in, @in6=@mcast1}, {@in6=@loopback, 0x0, 0x32}, @in6=@private2}, 0x0, 0x2000000}, [@XFRMA_IF_ID={0x8}, @mark={0xc}]}, 0xffffffffffffffe5}}, 0x20000080) 300.606047ms ago: executing program 2 (id=518): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x301c48a, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x6, 0x2d5, &(0x7f0000000680)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_mount_image$fuse(0x0, &(0x7f0000001040)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) renameat2(r3, &(0x7f0000000640)='./bus\x00', r3, &(0x7f0000000980)='./file2\x00', 0x1) syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x44010, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) syz_mount_image$fuse(&(0x7f0000000140), &(0x7f00000001c0)='./file0\x00', 0x40000, &(0x7f0000000380)=ANY=[], 0x1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mkdirat(0xffffffffffffffff, &(0x7f0000000a00)='./file1/file4/file7/file5\x00', 0x1c0) mknodat(0xffffffffffffff9c, &(0x7f0000000200)='./file1/file4/file5\x00', 0x81c0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file1/file4/file7\x00', 0x1c0) r4 = landlock_create_ruleset(&(0x7f00000002c0)={0x2001}, 0x18, 0x0) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r4, 0x1, &(0x7f0000000340)={0x2000, r5}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x141842, 0x0) 171.819494ms ago: executing program 0 (id=519): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a090400000000000000000200000040000480100001800c0001006e6f747261636b002c0001800e000100696d6d656469617465000000180002800c00028005000100c402000008000140000000080900010073797a30000000000900020073797a320000000014000000110001"], 0x94}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000700)={{0x14}, [@NFT_MSG_DELRULE={0x20, 0x8, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x4009}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELCHAIN={0x2c, 0x5, 0xa, 0x3, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x74}, 0x1, 0x0, 0x0, 0x10}, 0x8084) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @link_local}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000b80)) r4 = socket$packet(0x11, 0x3, 0x300) r5 = dup(r1) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="014d8fda6a17800c00040b"], 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0x0) r8 = fcntl$dupfd(r0, 0x406, r4) ioctl$UI_SET_KEYBIT(r5, 0x40045565, 0x4) r9 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_ifreq(r9, 0x8943, &(0x7f0000000100)={'syzkaller1\x00', @ifru_ivalue=0x1}) ioctl$VHOST_SET_VRING_ADDR(r8, 0x4028af11, &(0x7f0000000340)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/251, 0x0}) ioctl$VHOST_NET_SET_BACKEND(r8, 0x4008af30, &(0x7f0000000080)={0x0, r5}) 126.791952ms ago: executing program 3 (id=520): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000001300)={0x0, 0x0, 0x0}, 0x0) 75.582318ms ago: executing program 4 (id=521): syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r3, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f00000016c0)={0x29, 0x0, [{0x2, 0x28, &(0x7f0000000080)=""/40}, {0xd100828e98ba2273, 0xef, &(0x7f00000015c0)=""/239}]}) 0s ago: executing program 3 (id=522): mkdirat(0xffffffffffffff9c, &(0x7f00000000a0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f00000000a0)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000800)='./dev/ttyGS0\x00', 0x2, 0x0) (fail_nth: 15) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.249' (ED25519) to the list of known hosts. [ 28.516146][ T4697] cgroup: Unknown subsys name 'net' [ 28.597241][ T4697] cgroup: Unknown subsys name 'cpuset' [ 28.599401][ T4697] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 28.749116][ T4697] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SS [ 29.525529][ T4714] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 29.527755][ T4714] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 29.529368][ T4714] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 29.534633][ T4722] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 29.537269][ T4721] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 29.537883][ T4723] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 29.538605][ T4723] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 29.542055][ T4722] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 29.543559][ T4722] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 29.543804][ T4722] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 29.547065][ T4721] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 29.547105][ T50] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 29.547326][ T4721] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 29.547557][ T4721] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 29.548258][ T4713] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 29.548501][ T4713] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 29.549560][ T4723] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 29.549668][ T4713] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 29.551935][ T4713] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 29.555314][ T4721] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 29.555563][ T4721] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 29.556572][ T4721] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 29.573023][ T4714] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 29.588323][ T50] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 29.590091][ T50] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 29.939466][ T4709] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.941297][ T4709] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.942840][ T4709] bridge_slave_0: entered allmulticast mode [ 29.944061][ T4709] bridge_slave_0: entered promiscuous mode [ 29.948542][ T4709] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.948601][ T4709] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.948660][ T4709] bridge_slave_1: entered allmulticast mode [ 29.949120][ T4709] bridge_slave_1: entered promiscuous mode [ 29.967681][ T4709] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.968653][ T4709] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.976972][ T4710] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.978221][ T4710] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.979656][ T4710] bridge_slave_0: entered allmulticast mode [ 29.981421][ T4710] bridge_slave_0: entered promiscuous mode [ 29.992353][ T4709] team0: Port device team_slave_0 added [ 29.993255][ T4709] team0: Port device team_slave_1 added [ 29.998038][ T4710] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.999497][ T4710] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.001008][ T4710] bridge_slave_1: entered allmulticast mode [ 30.002684][ T4710] bridge_slave_1: entered promiscuous mode [ 30.028212][ T4709] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.028241][ T4709] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.028256][ T4709] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.029238][ T4709] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.029247][ T4709] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.029263][ T4709] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.040106][ T4709] hsr_slave_0: entered promiscuous mode [ 30.040442][ T4709] hsr_slave_1: entered promiscuous mode [ 30.051255][ T4716] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.052935][ T4716] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.054548][ T4716] bridge_slave_0: entered allmulticast mode [ 30.056109][ T4716] bridge_slave_0: entered promiscuous mode [ 30.060850][ T4716] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.060890][ T4716] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.061001][ T4716] bridge_slave_1: entered allmulticast mode [ 30.061444][ T4716] bridge_slave_1: entered promiscuous mode [ 30.084670][ T4710] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.102805][ T4710] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.107822][ T4715] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.108127][ T4715] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.108187][ T4715] bridge_slave_0: entered allmulticast mode [ 30.108639][ T4715] bridge_slave_0: entered promiscuous mode [ 30.114727][ T4716] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.114907][ T4720] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.114941][ T4720] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.115005][ T4720] bridge_slave_0: entered allmulticast mode [ 30.115449][ T4720] bridge_slave_0: entered promiscuous mode [ 30.120014][ T4715] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.120071][ T4715] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.120159][ T4715] bridge_slave_1: entered allmulticast mode [ 30.120682][ T4715] bridge_slave_1: entered promiscuous mode [ 30.129155][ T4720] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.129202][ T4720] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.129298][ T4720] bridge_slave_1: entered allmulticast mode [ 30.129749][ T4720] bridge_slave_1: entered promiscuous mode [ 30.138424][ T4716] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.153875][ T4710] team0: Port device team_slave_0 added [ 30.156218][ T4715] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.157507][ T4715] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.164834][ T4720] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.165841][ T4720] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.174748][ T4710] team0: Port device team_slave_1 added [ 30.179468][ T4716] team0: Port device team_slave_0 added [ 30.184993][ T4715] team0: Port device team_slave_0 added [ 30.188069][ T4715] team0: Port device team_slave_1 added [ 30.192867][ T4716] team0: Port device team_slave_1 added [ 30.194888][ T4720] team0: Port device team_slave_0 added [ 30.195902][ T4720] team0: Port device team_slave_1 added [ 30.201136][ T4710] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.201161][ T4710] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.201189][ T4710] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.202257][ T4710] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.202276][ T4710] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.202292][ T4710] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.230547][ T4715] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.231237][ T4715] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.231262][ T4715] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.232993][ T4710] hsr_slave_0: entered promiscuous mode [ 30.233329][ T4710] hsr_slave_1: entered promiscuous mode [ 30.233538][ T4710] debugfs: 'hsr0' already exists in 'hsr' [ 30.233578][ T4710] Cannot create hsr debugfs directory [ 30.234979][ T4715] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.234988][ T4715] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.235004][ T4715] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.237917][ T4720] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.237926][ T4720] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.237940][ T4720] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.238540][ T4720] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.238547][ T4720] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.238561][ T4720] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.247916][ T4716] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.247928][ T4716] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.247945][ T4716] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.248567][ T4716] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.248574][ T4716] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.248589][ T4716] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.272959][ T4720] hsr_slave_0: entered promiscuous mode [ 30.273392][ T4720] hsr_slave_1: entered promiscuous mode [ 30.273621][ T4720] debugfs: 'hsr0' already exists in 'hsr' [ 30.273631][ T4720] Cannot create hsr debugfs directory [ 30.279072][ T4715] hsr_slave_0: entered promiscuous mode [ 30.279401][ T4715] hsr_slave_1: entered promiscuous mode [ 30.279609][ T4715] debugfs: 'hsr0' already exists in 'hsr' [ 30.279618][ T4715] Cannot create hsr debugfs directory [ 30.285462][ T4716] hsr_slave_0: entered promiscuous mode [ 30.285794][ T4716] hsr_slave_1: entered promiscuous mode [ 30.286022][ T4716] debugfs: 'hsr0' already exists in 'hsr' [ 30.286033][ T4716] Cannot create hsr debugfs directory [ 30.319806][ T4709] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 30.323222][ T4709] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 30.337065][ T4709] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 30.339502][ T4709] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 30.350133][ T4709] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 30.352501][ T4709] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 30.368114][ T4709] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 30.370818][ T4709] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 30.438927][ T4709] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.438981][ T4709] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.439121][ T4709] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.439208][ T4709] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.452758][ T4710] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 30.455560][ T4710] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 30.456129][ T4710] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 30.457765][ T4710] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 30.461194][ T4710] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 30.463574][ T4710] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 30.463877][ T4710] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 30.467305][ T4710] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 30.485508][ T4710] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.485553][ T4710] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.485640][ T4710] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.485673][ T4710] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.493186][ T4715] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 30.496236][ T4715] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 30.496577][ T4715] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 30.498498][ T4715] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 30.501631][ T4715] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 30.503223][ T4715] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 30.503798][ T4715] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 30.505801][ T4715] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 30.513860][ T4709] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.527201][ T1075] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.528688][ T1075] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.530380][ T1075] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.531709][ T1075] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.543779][ T4709] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.552270][ T4720] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 30.555603][ T4720] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 30.557376][ T4720] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 30.559488][ T4720] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 30.561121][ T4720] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 30.563174][ T4720] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 30.579322][ T4710] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.587760][ T4720] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 30.590199][ T4720] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 30.590570][ T4716] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 30.592348][ T4716] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 30.592694][ T4716] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 30.596773][ T4716] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 30.598733][ T15] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.598787][ T15] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.599451][ T15] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.599481][ T15] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.599808][ T4716] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 30.602285][ T4716] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 30.608651][ T4716] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 30.611199][ T4716] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 30.625208][ T4710] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.635721][ T39] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.635772][ T39] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.636132][ T39] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.636159][ T39] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.669221][ T4710] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 30.671269][ T4710] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 30.688026][ T4709] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 30.696507][ T4715] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.709676][ T4715] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.721907][ T40] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.721954][ T40] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.730208][ T4720] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.735515][ T40] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.735569][ T40] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.741497][ T4716] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.769357][ T4716] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.776947][ T40] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.776997][ T40] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.791115][ T40] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.791303][ T40] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.795099][ T4720] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.808241][ T4720] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 30.810413][ T4720] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 30.830250][ T39] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.830297][ T39] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.833324][ T39] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.833365][ T39] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.906856][ T4710] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.996909][ T4709] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.028605][ T4715] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.044440][ T4709] veth0_vlan: entered promiscuous mode [ 31.060939][ T4720] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.069439][ T4709] veth1_vlan: entered promiscuous mode [ 31.079077][ T4720] veth0_vlan: entered promiscuous mode [ 31.082364][ T4716] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.097617][ T4720] veth1_vlan: entered promiscuous mode [ 31.098484][ T4715] veth0_vlan: entered promiscuous mode [ 31.113482][ T4710] veth0_vlan: entered promiscuous mode [ 31.116349][ T4709] veth0_macvtap: entered promiscuous mode [ 31.118108][ T4715] veth1_vlan: entered promiscuous mode [ 31.123767][ T4720] veth0_macvtap: entered promiscuous mode [ 31.126432][ T4720] veth1_macvtap: entered promiscuous mode [ 31.130292][ T4716] veth0_vlan: entered promiscuous mode [ 31.132297][ T4716] veth1_vlan: entered promiscuous mode [ 31.140037][ T4720] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.142167][ T4709] veth1_macvtap: entered promiscuous mode [ 31.146165][ T4720] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.148208][ T4710] veth1_vlan: entered promiscuous mode [ 31.162572][ T4715] veth0_macvtap: entered promiscuous mode [ 31.163884][ T4715] veth1_macvtap: entered promiscuous mode [ 31.165565][ T39] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.170008][ T1075] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.170064][ T1075] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.170086][ T1075] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.175605][ T4710] veth0_macvtap: entered promiscuous mode [ 31.177084][ T4710] veth1_macvtap: entered promiscuous mode [ 31.183517][ T4715] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.186720][ T4709] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.188298][ T4709] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.196132][ T4710] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.201688][ T4715] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.203607][ T832] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.203697][ T832] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.203854][ T832] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.203964][ T832] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.221525][ T4710] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.242287][ T40] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.242339][ T40] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.242375][ T40] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.242393][ T40] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.242410][ T40] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.242426][ T40] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.242442][ T40] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.242457][ T40] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.257863][ T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.257877][ T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.270699][ T4716] veth0_macvtap: entered promiscuous mode [ 31.279896][ T4716] veth1_macvtap: entered promiscuous mode [ 31.298615][ T1075] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.300356][ T1075] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.319814][ T1075] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.319852][ T1075] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.326858][ T4716] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.331250][ T4716] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.346035][ T39] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.346069][ T39] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.350872][ T1075] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.352761][ T1075] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.352894][ T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.352908][ T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.353429][ T1075] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.353452][ T1075] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.369781][ T4720] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 31.373425][ T832] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.373463][ T832] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.390657][ T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.390693][ T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.431314][ T39] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.431343][ T39] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.433118][ T4890] syz.1.2 uses obsolete (PF_INET,SOCK_PACKET) [ 31.439368][ T4890] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 31.439696][ T4890] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 31.453080][ T832] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.453115][ T832] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.467259][ T39] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.467299][ T39] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.542717][ T4818] IPVS: starting estimator thread 0... [ 31.559070][ T4897] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 31.559258][ T4897] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 31.605001][ T50] Bluetooth: hci4: command tx timeout [ 31.605109][ T50] Bluetooth: hci1: command tx timeout [ 31.605191][ T50] Bluetooth: hci2: command tx timeout [ 31.605257][ T50] Bluetooth: hci3: command tx timeout [ 31.605322][ T50] Bluetooth: hci0: command tx timeout [ 31.623819][ T4908] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7'. [ 31.634858][ T4899] IPVS: using max 60 ests per chain, 144000 per kthread [ 31.655331][ T4910] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 31.655518][ T4910] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 31.954742][ T4819] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 32.003852][ T4920] Zero length message leads to an empty skb [ 32.115427][ T4925] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 32.126363][ T4819] usb 1-1: config 0 has no interfaces? [ 32.130632][ T4819] usb 1-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice= 1.00 [ 32.130665][ T4819] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 32.130681][ T4819] usb 1-1: Product: syz [ 32.130689][ T4819] usb 1-1: Manufacturer: syz [ 32.130696][ T4819] usb 1-1: SerialNumber: syz [ 32.138406][ T4819] usb 1-1: config 0 descriptor?? [ 32.998233][ T4930] infiniband syz2: set active [ 32.998273][ T4930] infiniband syz2: added bond_slave_0 [ 33.169072][ T4930] RDS/IB: syz2: added [ 33.169192][ T4930] smc: adding ib device syz2 with port count 1 [ 33.169220][ T4930] smc: ib device syz2 port 1 has no pnetid [ 33.218528][ T4934] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 33.293305][ T4939] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 33.316127][ T4939] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 33.589832][ T4712] usb 1-1: USB disconnect, device number 2 [ 33.684469][ T4722] Bluetooth: hci0: command tx timeout [ 33.684952][ T4722] Bluetooth: hci3: command tx timeout [ 33.684984][ T4722] Bluetooth: hci2: command tx timeout [ 33.685004][ T4722] Bluetooth: hci1: command tx timeout [ 33.685022][ T4722] Bluetooth: hci4: command tx timeout [ 33.829473][ T4951] FAULT_INJECTION: forcing a failure. [ 33.829473][ T4951] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 33.832158][ T4951] CPU: 0 UID: 0 PID: 4951 Comm: syz.4.21 Not tainted syzkaller #0 PREEMPT [ 33.832182][ T4951] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 33.832188][ T4951] Call trace: [ 33.832192][ T4951] show_stack+0x2c/0x3c (C) [ 33.832216][ T4951] __dump_stack+0x30/0x40 [ 33.832233][ T4951] dump_stack_lvl+0xd8/0x12c [ 33.832244][ T4951] dump_stack+0x1c/0x28 [ 33.832255][ T4951] should_fail_ex+0x41c/0x590 [ 33.832268][ T4951] should_fail+0x14/0x24 [ 33.832278][ T4951] should_fail_usercopy+0x20/0x30 [ 33.832288][ T4951] _inline_copy_from_user+0x3c/0x174 [ 33.832299][ T4951] copy_msghdr_from_user+0xb8/0x194 [ 33.832309][ T4951] ___sys_sendmsg+0x14c/0x224 [ 33.832317][ T4951] __sys_sendmsg+0x158/0x204 [ 33.832326][ T4951] __arm64_sys_sendmsg+0x80/0x94 [ 33.832334][ T4951] invoke_syscall+0x98/0x244 [ 33.832344][ T4951] el0_svc_common+0xec/0x23c [ 33.832354][ T4951] do_el0_svc+0x4c/0x5c [ 33.832363][ T4951] el0_svc+0x64/0x260 [ 33.832374][ T4951] el0t_64_sync_handler+0x48/0x148 [ 33.832383][ T4951] el0t_64_sync+0x198/0x19c [ 34.101667][ T4956] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 34.426146][ T4958] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 34.471325][ T4962] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 34.952131][ T4964] loop1: detected capacity change from 0 to 512 [ 34.959606][ T4964] binder: 4963:4964 tried to acquire reference to desc 0, got 1 instead [ 34.959887][ T4964] binder: 4963:4964 got transaction with too large buffer [ 34.959971][ T4964] binder: 4963:4964 transaction call to 4963:0 failed 5/29201/-22, code 0 size 88-24 line 3682 [ 34.976942][ T11] binder: undelivered TRANSACTION_ERROR: 29201 [ 34.997550][ T4966] netlink: 'syz.1.28': attribute type 10 has an invalid length. [ 34.999243][ T4966] syz_tun: entered promiscuous mode [ 35.002407][ T4966] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 35.764634][ T4722] Bluetooth: hci1: command tx timeout [ 35.764698][ T4722] Bluetooth: hci2: command tx timeout [ 35.764728][ T4722] Bluetooth: hci3: command tx timeout [ 35.764748][ T4722] Bluetooth: hci0: command tx timeout [ 35.765321][ T50] Bluetooth: hci4: command tx timeout [ 35.913715][ T4308] IPVS: starting estimator thread 0... [ 36.001063][ T4958] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 36.008662][ T4956] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 36.015027][ T4972] IPVS: using max 48 ests per chain, 115200 per kthread [ 36.058683][ T4958] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 36.109441][ T4956] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 36.139198][ T4979] netlink: 8 bytes leftover after parsing attributes in process `syz.0.33'. [ 36.143448][ T4958] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 36.192502][ T4956] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 36.218232][ T4988] gadgetfs expected dummy_udc controller not usbip-vudc [ 36.218276][ T4988] udc usbip-vudc.0: failed to start USB Gadget filesystem: -19 [ 36.218839][ T4988] UDC core: USB Gadget filesystem: couldn't find an available UDC [ 36.266322][ T40] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.271426][ T40] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.277263][ T3363] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.281964][ T3363] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.299903][ T4962] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 36.311223][ T3363] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.316256][ T40] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.320118][ T40] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.323194][ T40] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.358830][ T4962] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 36.404996][ T9] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 36.410654][ T4994] gadgetfs expected dummy_udc controller not usbip-vudc [ 36.410679][ T4994] udc usbip-vudc.0: failed to start USB Gadget filesystem: -19 [ 36.411352][ T4994] UDC core: USB Gadget filesystem: couldn't find an available UDC [ 36.412260][ T4994] FAULT_INJECTION: forcing a failure. [ 36.412260][ T4994] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 36.412277][ T4994] CPU: 1 UID: 0 PID: 4994 Comm: syz.0.39 Not tainted syzkaller #0 PREEMPT [ 36.412290][ T4994] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 36.412296][ T4994] Call trace: [ 36.412301][ T4994] show_stack+0x2c/0x3c (C) [ 36.412319][ T4994] __dump_stack+0x30/0x40 [ 36.412329][ T4994] dump_stack_lvl+0xd8/0x12c [ 36.412339][ T4994] dump_stack+0x1c/0x28 [ 36.412349][ T4994] should_fail_ex+0x41c/0x590 [ 36.412360][ T4994] should_fail+0x14/0x24 [ 36.412369][ T4994] should_fail_usercopy+0x20/0x30 [ 36.412380][ T4994] simple_read_from_buffer+0xc4/0x238 [ 36.412390][ T4994] proc_fail_nth_read+0x1a8/0x248 [ 36.412398][ T4994] vfs_read+0x230/0x8c8 [ 36.412409][ T4994] ksys_read+0x12c/0x228 [ 36.412415][ T4994] __arm64_sys_read+0x7c/0x90 [ 36.412422][ T4994] invoke_syscall+0x98/0x244 [ 36.412432][ T4994] el0_svc_common+0xec/0x23c [ 36.412441][ T4994] do_el0_svc+0x4c/0x5c [ 36.412451][ T4994] el0_svc+0x64/0x260 [ 36.412461][ T4994] el0t_64_sync_handler+0x48/0x148 [ 36.412471][ T4994] el0t_64_sync+0x198/0x19c [ 36.430164][ T4962] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 36.500926][ T3363] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.504272][ T3363] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.507876][ T3363] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.511894][ T3363] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.555112][ T9] usb 1-1: Dual-Role OTG device on HNP port [ 36.566187][ T9] usb 1-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 7.02 [ 36.566205][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 36.591225][ T9] cdc_acm 1-1:1.0: ttyACM0: USB ACM device [ 36.620027][ T5003] FAULT_INJECTION: forcing a failure. [ 36.620027][ T5003] name failslab, interval 1, probability 0, space 0, times 1 [ 36.622687][ T5003] CPU: 0 UID: 0 PID: 5003 Comm: syz.0.53 Not tainted syzkaller #0 PREEMPT [ 36.622704][ T5003] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 36.622710][ T5003] Call trace: [ 36.622714][ T5003] show_stack+0x2c/0x3c (C) [ 36.622740][ T5003] __dump_stack+0x30/0x40 [ 36.622757][ T5003] dump_stack_lvl+0xd8/0x12c [ 36.622768][ T5003] dump_stack+0x1c/0x28 [ 36.622778][ T5003] should_fail_ex+0x41c/0x590 [ 36.622789][ T5003] should_failslab+0xc4/0x120 [ 36.622798][ T5003] __kmalloc_noprof+0x108/0x6b8 [ 36.622806][ T5003] tomoyo_encode2+0x10c/0x330 [ 36.622815][ T5003] tomoyo_encode+0x34/0x50 [ 36.622823][ T5003] tomoyo_realpath_from_path+0x488/0x4dc [ 36.622831][ T5003] tomoyo_path_number_perm+0x1f0/0x500 [ 36.622839][ T5003] tomoyo_file_ioctl+0x2c/0x3c [ 36.622847][ T5003] security_file_ioctl+0xdc/0x2b0 [ 36.622855][ T5003] __arm64_sys_ioctl+0xa8/0x1c4 [ 36.622865][ T5003] invoke_syscall+0x98/0x244 [ 36.622876][ T5003] el0_svc_common+0xec/0x23c [ 36.622885][ T5003] do_el0_svc+0x4c/0x5c [ 36.622894][ T5003] el0_svc+0x64/0x260 [ 36.622910][ T5003] el0t_64_sync_handler+0x48/0x148 [ 36.622920][ T5003] el0t_64_sync+0x198/0x19c [ 36.635397][ T5003] ERROR: Out of memory at tomoyo_realpath_from_path. [ 36.665636][ T5008] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 36.672305][ T5005] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 36.672520][ T5005] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 36.699132][ T5012] loop0: detected capacity change from 0 to 512 [ 36.702256][ T5012] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 36.702289][ T5012] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 36.709638][ T5012] EXT4-fs error (device loop0): __ext4_iget:5533: inode #11: block 2: comm syz.0.45: invalid block [ 36.711733][ T5012] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 36.712486][ T5012] EXT4-fs error (device loop0): ext4_orphan_get:1404: comm syz.0.45: couldn't read orphan inode 11 (err -117) [ 36.713978][ T5012] loop0: lost filesystem error report for type 5 error -117 [ 36.715334][ T5012] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 36.774061][ T4715] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.888171][ T5030] netlink: 40 bytes leftover after parsing attributes in process `syz.3.54'. [ 36.888221][ T5030] netlink: 40 bytes leftover after parsing attributes in process `syz.3.54'. [ 36.933158][ T5036] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 36.941391][ T5039] FAULT_INJECTION: forcing a failure. [ 36.941391][ T5039] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 36.941435][ T5039] CPU: 1 UID: 0 PID: 5039 Comm: syz.3.56 Not tainted syzkaller #0 PREEMPT [ 36.941448][ T5039] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 36.941455][ T5039] Call trace: [ 36.941459][ T5039] show_stack+0x2c/0x3c (C) [ 36.941481][ T5039] __dump_stack+0x30/0x40 [ 36.941492][ T5039] dump_stack_lvl+0xd8/0x12c [ 36.941503][ T5039] dump_stack+0x1c/0x28 [ 36.941513][ T5039] should_fail_ex+0x41c/0x590 [ 36.941524][ T5039] should_fail+0x14/0x24 [ 36.941533][ T5039] should_fail_usercopy+0x20/0x30 [ 36.941544][ T5039] simple_read_from_buffer+0xc4/0x238 [ 36.941554][ T5039] proc_fail_nth_read+0x1a8/0x248 [ 36.941563][ T5039] vfs_read+0x230/0x8c8 [ 36.941573][ T5039] ksys_read+0x12c/0x228 [ 36.941580][ T5039] __arm64_sys_read+0x7c/0x90 [ 36.941586][ T5039] invoke_syscall+0x98/0x244 [ 36.941596][ T5039] el0_svc_common+0xec/0x23c [ 36.941606][ T5039] do_el0_svc+0x4c/0x5c [ 36.941615][ T5039] el0_svc+0x64/0x260 [ 36.941626][ T5039] el0t_64_sync_handler+0x48/0x148 [ 36.941636][ T5039] el0t_64_sync+0x198/0x19c [ 36.990778][ T5043] FAULT_INJECTION: forcing a failure. [ 36.990778][ T5043] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 36.990818][ T5043] CPU: 1 UID: 0 PID: 5043 Comm: syz.4.59 Not tainted syzkaller #0 PREEMPT [ 36.990833][ T5043] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 36.990840][ T5043] Call trace: [ 36.990844][ T5043] show_stack+0x2c/0x3c (C) [ 36.990865][ T5043] __dump_stack+0x30/0x40 [ 36.990876][ T5043] dump_stack_lvl+0xd8/0x12c [ 36.990886][ T5043] dump_stack+0x1c/0x28 [ 36.990896][ T5043] should_fail_ex+0x41c/0x590 [ 36.990907][ T5043] should_fail+0x14/0x24 [ 36.990922][ T5043] should_fail_usercopy+0x20/0x30 [ 36.990932][ T5043] simple_read_from_buffer+0xc4/0x238 [ 36.990943][ T5043] proc_fail_nth_read+0x1a8/0x248 [ 36.990952][ T5043] vfs_read+0x230/0x8c8 [ 36.990962][ T5043] ksys_read+0x12c/0x228 [ 36.990968][ T5043] __arm64_sys_read+0x7c/0x90 [ 36.990975][ T5043] invoke_syscall+0x98/0x244 [ 36.990985][ T5043] el0_svc_common+0xec/0x23c [ 36.990995][ T5043] do_el0_svc+0x4c/0x5c [ 36.991004][ T5043] el0_svc+0x64/0x260 [ 36.991015][ T5043] el0t_64_sync_handler+0x48/0x148 [ 36.991024][ T5043] el0t_64_sync+0x198/0x19c [ 37.005384][ T5047] syzkaller1: entered promiscuous mode [ 37.005401][ T5047] syzkaller1: entered allmulticast mode [ 37.072393][ T5052] loop4: detected capacity change from 0 to 4096 [ 37.082134][ T5052] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 37.088982][ T5052] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.232801][ T5073] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 37.299791][ T5078] netlink: 'syz.4.73': attribute type 10 has an invalid length. [ 37.301492][ T5078] syz_tun: entered promiscuous mode [ 37.303507][ T5080] gadgetfs expected dummy_udc controller not usbip-vudc [ 37.305439][ T5080] udc usbip-vudc.0: failed to start USB Gadget filesystem: -19 [ 37.306784][ T5078] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 37.308994][ T5080] UDC core: USB Gadget filesystem: couldn't find an available UDC [ 37.357193][ T5086] loop3: detected capacity change from 0 to 512 [ 37.361203][ T5086] ======================================================= [ 37.361203][ T5086] WARNING: The mand mount option has been deprecated and [ 37.361203][ T5086] and is ignored by this kernel. Remove the mand [ 37.361203][ T5086] option from the mount to silence this warning. [ 37.361203][ T5086] ======================================================= [ 37.371843][ T5086] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 37.381059][ T5086] EXT4-fs error (device loop3): ext4_get_branch:178: inode #11: block 4294967295: comm syz.3.75: invalid block [ 37.381102][ T5086] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 37.383751][ T5086] EXT4-fs (loop3): Remounting filesystem read-only [ 37.384015][ T5086] EXT4-fs (loop3): 2 truncates cleaned up [ 37.384621][ T5086] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 37.419037][ T5090] FAULT_INJECTION: forcing a failure. [ 37.419037][ T5090] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 37.419071][ T5090] CPU: 0 UID: 0 PID: 5090 Comm: syz.4.77 Not tainted syzkaller #0 PREEMPT [ 37.419083][ T5090] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 37.419088][ T5090] Call trace: [ 37.419090][ T5090] show_stack+0x2c/0x3c (C) [ 37.419108][ T5090] __dump_stack+0x30/0x40 [ 37.419118][ T5090] dump_stack_lvl+0xd8/0x12c [ 37.419128][ T5090] dump_stack+0x1c/0x28 [ 37.419137][ T5090] should_fail_ex+0x41c/0x590 [ 37.419148][ T5090] should_fail+0x14/0x24 [ 37.419158][ T5090] should_fail_usercopy+0x20/0x30 [ 37.419168][ T5090] simple_read_from_buffer+0xc4/0x238 [ 37.419178][ T5090] proc_fail_nth_read+0x1a8/0x248 [ 37.419186][ T5090] vfs_read+0x230/0x8c8 [ 37.419197][ T5090] ksys_read+0x12c/0x228 [ 37.419203][ T5090] __arm64_sys_read+0x7c/0x90 [ 37.419220][ T5090] invoke_syscall+0x98/0x244 [ 37.419230][ T5090] el0_svc_common+0x19c/0x23c [ 37.419240][ T5090] do_el0_svc+0x4c/0x5c [ 37.419249][ T5090] el0_svc+0x64/0x260 [ 37.419260][ T5090] el0t_64_sync_handler+0x48/0x148 [ 37.419270][ T5090] el0t_64_sync+0x198/0x19c [ 37.425280][ T4716] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.846270][ T5109] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Query Mapping response ret = -22) [ 37.848476][ T4714] Bluetooth: hci0: command tx timeout [ 37.848499][ T4714] Bluetooth: hci3: command tx timeout [ 37.848513][ T4714] Bluetooth: hci2: command tx timeout [ 37.848526][ T4714] Bluetooth: hci1: command tx timeout [ 37.848563][ T50] Bluetooth: hci4: command tx timeout [ 38.345021][ T1075] bond0: (slave bond_slave_0): interface is now down [ 38.345058][ T1075] bond0: (slave bond_slave_1): interface is now down [ 38.345087][ T1075] bond0: (slave syz_tun): interface is now down [ 38.361793][ T5134] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 38.362006][ T5134] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 38.366132][ T1075] bond0: (slave bond_slave_0): interface is now down [ 38.366163][ T1075] bond0: (slave bond_slave_1): interface is now down [ 38.366178][ T1075] bond0: (slave syz_tun): interface is now down [ 38.370581][ T1075] bond0: now running without any active interface! [ 38.392957][ T5136] netlink: 8 bytes leftover after parsing attributes in process `syz.1.94'. [ 38.396523][ T5134] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 38.458901][ T5134] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 38.529703][ T5134] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 38.904295][ T5134] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.815466][ T1075] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.819382][ T5151] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.843738][ T1075] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.843799][ T1075] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.859254][ T5156] netlink: 84 bytes leftover after parsing attributes in process `syz.1.99'. [ 39.969865][ T5161] netlink: 24 bytes leftover after parsing attributes in process `syz.3.101'. [ 40.395872][ T5170] capability: warning: `syz.0.104' uses 32-bit capabilities (legacy support in use) [ 40.459858][ T5172] netlink: 8 bytes leftover after parsing attributes in process `syz.0.105'. [ 40.492884][ T5174] loop0: detected capacity change from 0 to 512 [ 40.523998][ T5176] loop0: detected capacity change from 0 to 256 [ 40.711178][ T5180] FAULT_INJECTION: forcing a failure. [ 40.711178][ T5180] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 40.711247][ T5180] CPU: 0 UID: 0 PID: 5180 Comm: syz.0.108 Not tainted syzkaller #0 PREEMPT [ 40.711260][ T5180] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 40.711266][ T5180] Call trace: [ 40.711269][ T5180] show_stack+0x2c/0x3c (C) [ 40.711290][ T5180] __dump_stack+0x30/0x40 [ 40.711300][ T5180] dump_stack_lvl+0xd8/0x12c [ 40.711310][ T5180] dump_stack+0x1c/0x28 [ 40.711319][ T5180] should_fail_ex+0x41c/0x590 [ 40.711331][ T5180] should_fail+0x14/0x24 [ 40.711340][ T5180] should_fail_usercopy+0x20/0x30 [ 40.711350][ T5180] _inline_copy_to_user+0x3c/0x144 [ 40.711361][ T5180] vt_ioctl+0x18e0/0x1e0c [ 40.711370][ T5180] tty_ioctl+0x880/0xd50 [ 40.711378][ T5180] __arm64_sys_ioctl+0x14c/0x1c4 [ 40.711390][ T5180] invoke_syscall+0x98/0x244 [ 40.711400][ T5180] el0_svc_common+0xec/0x23c [ 40.711410][ T5180] do_el0_svc+0x4c/0x5c [ 40.711419][ T5180] el0_svc+0x64/0x260 [ 40.711430][ T5180] el0t_64_sync_handler+0x48/0x148 [ 40.711439][ T5180] el0t_64_sync+0x198/0x19c [ 40.920741][ T5182] Dropped outbound packet type=18 [ 41.297176][ T5190] fuse: blksize only supported for fuseblk [ 41.441719][ T5199] FAULT_INJECTION: forcing a failure. [ 41.441719][ T5199] name failslab, interval 1, probability 0, space 0, times 0 [ 41.441755][ T5199] CPU: 0 UID: 0 PID: 5199 Comm: syz.0.115 Not tainted syzkaller #0 PREEMPT [ 41.441770][ T5199] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 41.441778][ T5199] Call trace: [ 41.441782][ T5199] show_stack+0x2c/0x3c (C) [ 41.441804][ T5199] __dump_stack+0x30/0x40 [ 41.441815][ T5199] dump_stack_lvl+0xd8/0x12c [ 41.441825][ T5199] dump_stack+0x1c/0x28 [ 41.441835][ T5199] should_fail_ex+0x41c/0x590 [ 41.441846][ T5199] should_failslab+0xc4/0x120 [ 41.441854][ T5199] kmem_cache_alloc_noprof+0x94/0x5d8 [ 41.441863][ T5199] skb_clone+0x1ac/0x320 [ 41.441873][ T5199] __netlink_deliver_tap+0x364/0x6f4 [ 41.441884][ T5199] netlink_deliver_tap+0x1d8/0x1dc [ 41.441892][ T5199] netlink_unicast+0x5dc/0x7f8 [ 41.441905][ T5199] netlink_sendmsg+0x648/0x948 [ 41.441913][ T5199] __sock_sendmsg+0xc8/0x17c [ 41.441922][ T5199] ____sys_sendmsg+0x3d0/0x6c8 [ 41.441931][ T5199] ___sys_sendmsg+0x198/0x224 [ 41.441940][ T5199] __sys_sendmsg+0x158/0x204 [ 41.441949][ T5199] __arm64_sys_sendmsg+0x80/0x94 [ 41.441958][ T5199] invoke_syscall+0x98/0x244 [ 41.441968][ T5199] el0_svc_common+0xec/0x23c [ 41.441977][ T5199] do_el0_svc+0x4c/0x5c [ 41.441987][ T5199] el0_svc+0x64/0x260 [ 41.441997][ T5199] el0t_64_sync_handler+0x48/0x148 [ 41.442007][ T5199] el0t_64_sync+0x198/0x19c [ 41.497084][ T5201] netlink: 84 bytes leftover after parsing attributes in process `syz.2.118'. [ 41.550370][ T5213] netlink: 8 bytes leftover after parsing attributes in process `syz.3.120'. [ 41.853088][ T5231] loop0: detected capacity change from 0 to 8192 [ 41.897586][ T5231] loop0: p1 p2 p3 p4[DM] [ 41.897724][ T5231] loop0: p1 size 835329 extends beyond EOD, truncated [ 41.900472][ T5231] loop0: p3 start 134217728 is beyond EOD, truncated [ 41.900523][ T5231] loop0: p4 size 262144 extends beyond EOD, truncated [ 41.949398][ T5237] 9p: Bad value for 'rfdno' [ 41.969738][ T4701] udevd[4701]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 41.973369][ T4699] udevd[4699]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 41.975649][ T4702] udevd[4702]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 42.445079][ T5252] netlink: 8 bytes leftover after parsing attributes in process `syz.2.136'. [ 42.551136][ T5265] gadgetfs expected dummy_udc controller not usbip-vudc [ 42.551173][ T5265] udc usbip-vudc.0: failed to start USB Gadget filesystem: -19 [ 42.551496][ T5265] UDC core: USB Gadget filesystem: couldn't find an available UDC [ 42.589409][ T5267] Dropped outbound packet type=18 [ 42.713192][ T5282] Bluetooth: MGMT ver 1.23 [ 42.756569][ T5287] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 42.859165][ T5301] loop0: detected capacity change from 0 to 8 [ 42.896292][ T5301] netlink: 4 bytes leftover after parsing attributes in process `syz.0.141'. [ 42.896334][ T5301] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 42.896349][ T5301] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 42.903506][ T5301] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 42.903545][ T5301] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 42.993881][ T5314] loop4: detected capacity change from 0 to 256 [ 43.010729][ T5314] FAT-fs (loop4): error, allocated dir entry found after end-of-directory marker (i_pos 1) [ 43.013647][ T5314] FAT-fs (loop4): Filesystem has been set read-only [ 43.198229][ T5322] IPVS: fo: FWM 3 0x00000003 - no destination available [ 43.232295][ T5308] netlink: 'syz.1.155': attribute type 10 has an invalid length. [ 43.234787][ T5308] team0: Device veth0_vlan failed to register rx_handler [ 43.316010][ T5328] loop3: detected capacity change from 0 to 2048 [ 43.332988][ T5327] gadgetfs expected dummy_udc controller not usbip-vudc [ 43.335108][ T5327] udc usbip-vudc.0: failed to start USB Gadget filesystem: -19 [ 43.337841][ T5327] UDC core: USB Gadget filesystem: couldn't find an available UDC [ 43.358570][ T5328] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 43.388335][ T4716] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.453580][ T5347] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 43.482062][ T3254] bond0: (slave bond_slave_0): interface is now down [ 43.482104][ T3254] bond0: (slave bond_slave_1): interface is now down [ 43.482125][ T3254] bond0: (slave syz_tun): interface is now down [ 43.495622][ T3254] bond0: (slave bond_slave_0): interface is now down [ 43.496104][ T3254] bond0: (slave bond_slave_1): interface is now down [ 43.496112][ T3254] bond0: (slave syz_tun): interface is now down [ 43.499008][ T3254] bond0: now running without any active interface! [ 43.597441][ T5362] FAULT_INJECTION: forcing a failure. [ 43.597441][ T5362] name failslab, interval 1, probability 0, space 0, times 0 [ 43.597478][ T5362] CPU: 0 UID: 0 PID: 5362 Comm: syz.4.171 Not tainted syzkaller #0 PREEMPT [ 43.597493][ T5362] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 43.597500][ T5362] Call trace: [ 43.597504][ T5362] show_stack+0x2c/0x3c (C) [ 43.597523][ T5362] __dump_stack+0x30/0x40 [ 43.597534][ T5362] dump_stack_lvl+0xd8/0x12c [ 43.597544][ T5362] dump_stack+0x1c/0x28 [ 43.597554][ T5362] should_fail_ex+0x41c/0x590 [ 43.597566][ T5362] should_failslab+0xc4/0x120 [ 43.597574][ T5362] __kmalloc_cache_noprof+0x94/0x5ec [ 43.597584][ T5362] tcf_proto_create+0x78/0x2e8 [ 43.597593][ T5362] tc_new_tfilter+0xc74/0x132c [ 43.597600][ T5362] rtnetlink_rcv_msg+0x66c/0x9bc [ 43.597608][ T5362] netlink_rcv_skb+0x238/0x414 [ 43.597618][ T5362] rtnetlink_rcv+0x28/0x38 [ 43.597625][ T5362] netlink_unicast+0x600/0x7f8 [ 43.597633][ T5362] netlink_sendmsg+0x648/0x948 [ 43.597641][ T5362] __sock_sendmsg+0xc8/0x17c [ 43.597650][ T5362] ____sys_sendmsg+0x3d0/0x6c8 [ 43.597658][ T5362] ___sys_sendmsg+0x198/0x224 [ 43.597667][ T5362] __sys_sendmsg+0x158/0x204 [ 43.597676][ T5362] __arm64_sys_sendmsg+0x80/0x94 [ 43.597684][ T5362] invoke_syscall+0x98/0x244 [ 43.597694][ T5362] el0_svc_common+0xec/0x23c [ 43.597704][ T5362] do_el0_svc+0x4c/0x5c [ 43.597713][ T5362] el0_svc+0x64/0x260 [ 43.597724][ T5362] el0t_64_sync_handler+0x48/0x148 [ 43.597734][ T5362] el0t_64_sync+0x198/0x19c [ 43.847577][ T5382] gadgetfs expected dummy_udc controller not usbip-vudc [ 43.847610][ T5382] udc usbip-vudc.0: failed to start USB Gadget filesystem: -19 [ 43.847955][ T5382] UDC core: USB Gadget filesystem: couldn't find an available UDC [ 43.883740][ T5389] FAULT_INJECTION: forcing a failure. [ 43.883740][ T5389] name failslab, interval 1, probability 0, space 0, times 0 [ 43.883778][ T5389] CPU: 0 UID: 0 PID: 5389 Comm: syz.1.182 Not tainted syzkaller #0 PREEMPT [ 43.883792][ T5389] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 43.883800][ T5389] Call trace: [ 43.883804][ T5389] show_stack+0x2c/0x3c (C) [ 43.883828][ T5389] __dump_stack+0x30/0x40 [ 43.883840][ T5389] dump_stack_lvl+0xd8/0x12c [ 43.883850][ T5389] dump_stack+0x1c/0x28 [ 43.883860][ T5389] should_fail_ex+0x41c/0x590 [ 43.883871][ T5389] should_failslab+0xc4/0x120 [ 43.883879][ T5389] __kmalloc_noprof+0x108/0x6b8 [ 43.883888][ T5389] tomoyo_realpath_from_path+0xbc/0x4dc [ 43.883904][ T5389] tomoyo_path_number_perm+0x1f0/0x500 [ 43.883912][ T5389] tomoyo_file_ioctl+0x2c/0x3c [ 43.883920][ T5389] security_file_ioctl+0xdc/0x2b0 [ 43.883928][ T5389] __arm64_sys_ioctl+0xa8/0x1c4 [ 43.883938][ T5389] invoke_syscall+0x98/0x244 [ 43.883949][ T5389] el0_svc_common+0xec/0x23c [ 43.883958][ T5389] do_el0_svc+0x4c/0x5c [ 43.883968][ T5389] el0_svc+0x64/0x260 [ 43.883978][ T5389] el0t_64_sync_handler+0x48/0x148 [ 43.883988][ T5389] el0t_64_sync+0x198/0x19c [ 43.884010][ T5389] ERROR: Out of memory at tomoyo_realpath_from_path. [ 43.952410][ T5394] loop1: detected capacity change from 0 to 4096 [ 43.964022][ T5394] Quota error (device loop1): v2_read_file_info: Can't read info structure [ 43.964127][ T5394] EXT4-fs warning (device loop1): ext4_enable_quotas:7276: Failed to enable quota tracking (type=0, err=-5, ino=3). Please run e2fsck to fix. [ 43.964490][ T5394] EXT4-fs (loop1): mount failed [ 44.856101][ T5443] trusted_key: syz.2.202 sent an empty control message without MSG_MORE. [ 44.861316][ T5443] loop2: detected capacity change from 0 to 512 [ 44.869397][ T5443] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 44.879951][ T5443] EXT4-fs error (device loop2): ext4_orphan_get:1425: comm syz.2.202: bad orphan inode 13 [ 44.879993][ T5443] loop2: lost filesystem error report for type 5 error -117 [ 44.881719][ T5443] ext4_test_bit(bit=12, block=18) = 1 [ 44.881735][ T5443] is_bad_inode(inode)=0 [ 44.881742][ T5443] NEXT_ORPHAN(inode)=0 [ 44.881747][ T5443] max_ino=32 [ 44.881751][ T5443] i_nlink=1 [ 44.884667][ T5443] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 44.902596][ T5443] EXT4-fs warning (device loop2): ext4_update_dynamic_rev:1148: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 44.905075][ T5443] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.202: bg 0: block 248: padding at end of block bitmap is not set [ 44.906964][ T5443] Quota error (device loop2): write_blk: dquota write failed [ 44.907002][ T5443] Quota error (device loop2): qtree_write_dquot: Error -28 occurred while creating quota [ 44.907028][ T5443] EXT4-fs error (device loop2): ext4_acquire_dquot:7041: comm syz.2.202: Failed to acquire dquot type 1 [ 44.926246][ T5443] warning: `syz.2.202' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 44.970732][ T4709] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 45.300649][ T5461] netlink: 16 bytes leftover after parsing attributes in process `syz.1.207'. [ 45.300688][ T5461] netlink: 24 bytes leftover after parsing attributes in process `syz.1.207'. [ 45.331657][ T5466] FAULT_INJECTION: forcing a failure. [ 45.331657][ T5466] name failslab, interval 1, probability 0, space 0, times 0 [ 45.331700][ T5466] CPU: 0 UID: 0 PID: 5466 Comm: syz.2.208 Not tainted syzkaller #0 PREEMPT [ 45.331713][ T5466] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 45.331720][ T5466] Call trace: [ 45.331724][ T5466] show_stack+0x2c/0x3c (C) [ 45.331747][ T5466] __dump_stack+0x30/0x40 [ 45.331759][ T5466] dump_stack_lvl+0xd8/0x12c [ 45.331769][ T5466] dump_stack+0x1c/0x28 [ 45.331779][ T5466] should_fail_ex+0x41c/0x590 [ 45.331790][ T5466] should_failslab+0xc4/0x120 [ 45.331798][ T5466] __kmalloc_noprof+0x108/0x6b8 [ 45.331807][ T5466] tomoyo_encode2+0x10c/0x330 [ 45.331817][ T5466] tomoyo_encode+0x34/0x50 [ 45.331824][ T5466] tomoyo_realpath_from_path+0x488/0x4dc [ 45.331832][ T5466] tomoyo_path_number_perm+0x1f0/0x500 [ 45.331840][ T5466] tomoyo_file_ioctl+0x2c/0x3c [ 45.331848][ T5466] security_file_ioctl+0xdc/0x2b0 [ 45.331856][ T5466] __arm64_sys_ioctl+0xa8/0x1c4 [ 45.331866][ T5466] invoke_syscall+0x98/0x244 [ 45.331877][ T5466] el0_svc_common+0xec/0x23c [ 45.331886][ T5466] do_el0_svc+0x4c/0x5c [ 45.331895][ T5466] el0_svc+0x64/0x260 [ 45.331913][ T5466] el0t_64_sync_handler+0x48/0x148 [ 45.331922][ T5466] el0t_64_sync+0x198/0x19c [ 45.331935][ T5466] ERROR: Out of memory at tomoyo_realpath_from_path. [ 45.392275][ T5471] loop2: detected capacity change from 0 to 1024 [ 45.398819][ T5471] EXT4-fs (loop2): stripe (4) is not aligned with cluster size (16), stripe is disabled [ 45.417493][ T5471] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 45.431482][ T4709] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.955771][ T5501] rdma_rxe: rxe_newlink: failed to add bond_slave_0 [ 46.671024][ T30] audit: type=1326 audit(46.650:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5508 comm="syz.4.222" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffa757a168 code=0x0 [ 46.696591][ T5511] loop2: detected capacity change from 0 to 512 [ 46.712391][ T5511] EXT4-fs error (device loop2): dx_probe:791: inode #2: comm syz.2.223: Directory hole found for htree index block 0 [ 46.715187][ T5511] loop2: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117 [ 46.716269][ T5511] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117 [ 46.720492][ T5511] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.725273][ T5511] EXT4-fs (loop2): shut down requested (2) [ 48.375039][ T5469] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 48.418196][ T5524] FAULT_INJECTION: forcing a failure. [ 48.418196][ T5524] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 48.418235][ T5524] CPU: 0 UID: 0 PID: 5524 Comm: syz.3.227 Not tainted syzkaller #0 PREEMPT [ 48.418251][ T5524] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 48.418258][ T5524] Call trace: [ 48.418262][ T5524] show_stack+0x2c/0x3c (C) [ 48.418282][ T5524] __dump_stack+0x30/0x40 [ 48.418294][ T5524] dump_stack_lvl+0xd8/0x12c [ 48.418304][ T5524] dump_stack+0x1c/0x28 [ 48.418313][ T5524] should_fail_ex+0x41c/0x590 [ 48.418325][ T5524] should_fail+0x14/0x24 [ 48.418334][ T5524] should_fail_usercopy+0x20/0x30 [ 48.418345][ T5524] dvb_usercopy+0x144/0x4d4 [ 48.418353][ T5524] dvb_frontend_ioctl+0x68/0x8c [ 48.418362][ T5524] __arm64_sys_ioctl+0x14c/0x1c4 [ 48.418373][ T5524] invoke_syscall+0x98/0x244 [ 48.418383][ T5524] el0_svc_common+0xec/0x23c [ 48.418393][ T5524] do_el0_svc+0x4c/0x5c [ 48.418402][ T5524] el0_svc+0x64/0x260 [ 48.418413][ T5524] el0t_64_sync_handler+0x48/0x148 [ 48.418422][ T5524] el0t_64_sync+0x198/0x19c [ 48.444117][ T5529] fuse: Bad value for 'fd' [ 48.449496][ T5529] gadgetfs expected dummy_udc controller not usbip-vudc [ 48.449529][ T5529] udc usbip-vudc.0: failed to start USB Gadget filesystem: -19 [ 48.450909][ T5529] UDC core: USB Gadget filesystem: couldn't find an available UDC [ 48.497549][ T5534] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 48.518715][ T5536] loop3: detected capacity change from 0 to 2048 [ 48.553785][ T5536] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 48.792555][ T5558] loop0: detected capacity change from 0 to 128 [ 49.923227][ T4709] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.135481][ T5562] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 50.135774][ T5562] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 2 with error 28 [ 50.135795][ T5562] EXT4-fs (loop3): This should not happen!! Data will be lost [ 50.135795][ T5562] [ 50.135807][ T5562] EXT4-fs (loop3): Total free blocks count 0 [ 50.135819][ T5562] EXT4-fs (loop3): Free/Dirty block details [ 50.135834][ T5562] EXT4-fs (loop3): free_blocks=2415919104 [ 50.135849][ T5562] EXT4-fs (loop3): dirty_blocks=16 [ 50.135860][ T5562] EXT4-fs (loop3): Block reservation details [ 50.135869][ T5562] EXT4-fs (loop3): i_reserved_data_blocks=1 [ 51.044321][ T4308] IPVS: starting estimator thread 0... [ 51.119248][ T5561] syz2: rxe_newlink: already configured on bond_slave_0 [ 51.194617][ T5571] IPVS: using max 55 ests per chain, 132000 per kthread [ 51.267644][ T5572] FAULT_INJECTION: forcing a failure. [ 51.267644][ T5572] name failslab, interval 1, probability 0, space 0, times 0 [ 51.267682][ T5572] CPU: 1 UID: 0 PID: 5572 Comm: syz.0.242 Not tainted syzkaller #0 PREEMPT [ 51.267696][ T5572] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 51.267703][ T5572] Call trace: [ 51.267707][ T5572] show_stack+0x2c/0x3c (C) [ 51.267727][ T5572] __dump_stack+0x30/0x40 [ 51.267738][ T5572] dump_stack_lvl+0xd8/0x12c [ 51.267748][ T5572] dump_stack+0x1c/0x28 [ 51.267757][ T5572] should_fail_ex+0x41c/0x590 [ 51.267769][ T5572] should_failslab+0xc4/0x120 [ 51.267777][ T5572] __kmalloc_noprof+0x108/0x6b8 [ 51.267785][ T5572] genl_family_rcv_msg_attrs_parse+0xcc/0x27c [ 51.267797][ T5572] genl_family_rcv_msg_doit+0xd8/0x2d4 [ 51.267806][ T5572] genl_rcv_msg+0x43c/0x620 [ 51.267815][ T5572] netlink_rcv_skb+0x238/0x414 [ 51.267823][ T5572] genl_rcv+0x38/0x50 [ 51.267832][ T5572] netlink_unicast+0x600/0x7f8 [ 51.267840][ T5572] netlink_sendmsg+0x648/0x948 [ 51.267848][ T5572] __sock_sendmsg+0xc8/0x17c [ 51.267857][ T5572] ____sys_sendmsg+0x3d0/0x6c8 [ 51.267866][ T5572] ___sys_sendmsg+0x198/0x224 [ 51.267874][ T5572] __sys_sendmsg+0x158/0x204 [ 51.267883][ T5572] __arm64_sys_sendmsg+0x80/0x94 [ 51.267892][ T5572] invoke_syscall+0x98/0x244 [ 51.267902][ T5572] el0_svc_common+0xec/0x23c [ 51.267917][ T5572] do_el0_svc+0x4c/0x5c [ 51.267927][ T5572] el0_svc+0x64/0x260 [ 51.267938][ T5572] el0t_64_sync_handler+0x48/0x148 [ 51.267948][ T5572] el0t_64_sync+0x198/0x19c [ 51.340430][ T5576] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 51.623714][ T4716] EXT4-fs warning (device loop3): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 51.630985][ T4716] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.757151][ T5600] gadgetfs expected dummy_udc controller not usbip-vudc [ 51.758595][ T5600] udc usbip-vudc.0: failed to start USB Gadget filesystem: -19 [ 51.760185][ T5600] UDC core: USB Gadget filesystem: couldn't find an available UDC [ 51.778593][ T5602] IPVS: fo: FWM 3 0x00000003 - no destination available [ 52.055617][ T5608] rdma_rxe: rxe_newlink: failed to add bond_slave_0 [ 52.722444][ T5615] loop0: detected capacity change from 0 to 256 [ 52.764649][ T5617] tipc: Started in network mode [ 52.765698][ T5617] tipc: Node identity 4, cluster identity 4711 [ 52.766917][ T5617] tipc: Node number set to 4 [ 52.991101][ T5631] loop3: detected capacity change from 0 to 256 [ 53.060996][ T5633] syz2: rxe_newlink: already configured on bond_slave_0 [ 54.019807][ T5638] netlink: 392 bytes leftover after parsing attributes in process `syz.1.267'. [ 54.059324][ T5642] IPVS: fo: FWM 3 0x00000003 - no destination available [ 54.160003][ T5648] loop2: detected capacity change from 0 to 128 [ 54.160656][ T5648] vfat: Unknown parameter 'rodhâV {ÇÆ¶Œàm•ryr' [ 54.381483][ T5669] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 54.424565][ T4819] IPVS: starting estimator thread 0... [ 54.534541][ T5673] IPVS: using max 60 ests per chain, 144000 per kthread [ 54.607102][ T5684] gadgetfs expected dummy_udc controller not usbip-vudc [ 54.609113][ T5684] udc usbip-vudc.0: failed to start USB Gadget filesystem: -19 [ 54.609454][ T5684] UDC core: USB Gadget filesystem: couldn't find an available UDC [ 54.617303][ T5685] loop1: detected capacity change from 0 to 256 [ 54.990998][ T5709] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 55.045672][ T5719] netlink: 84 bytes leftover after parsing attributes in process `syz.4.297'. [ 55.069259][ T5724] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 55.072551][ T5724] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 55.075878][ T5722] netlink: 824 bytes leftover after parsing attributes in process `syz.3.298'. [ 55.233359][ T5731] netlink: 16 bytes leftover after parsing attributes in process `syz.0.302'. [ 55.307108][ T5736] process 'syz.4.305' launched '/dev/fd/4' with NULL argv: empty string added [ 55.349788][ T5739] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 55.395531][ T5746] loop0: detected capacity change from 0 to 512 [ 55.438603][ T5746] EXT4-fs error (device loop0): ext4_xattr_inode_iget:441: inode #11: comm syz.0.309: ea_inode with extended attributes [ 55.438651][ T5746] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 55.444536][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 55.444571][ C0] EXT4-fs (loop0): initial error at time 55: ext4_xattr_inode_iget:441: inode 11 [ 55.444607][ C0] EXT4-fs (loop0): last error at time 55: ext4_xattr_inode_iget:441: inode 11 [ 55.445200][ T5746] EXT4-fs (loop0): Remounting filesystem read-only [ 55.445330][ T5746] EXT4-fs warning (device loop0): ext4_evict_inode:287: xattr delete (err -30) [ 55.445366][ T5746] EXT4-fs (loop0): 1 orphan inode deleted [ 55.493539][ T5746] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 55.523671][ T4715] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.603427][ T5757] loop0: detected capacity change from 0 to 256 [ 55.609123][ T5757] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 56.376004][ T5762] overlay: ./file0 is not a directory [ 56.457107][ T5768] gadgetfs expected dummy_udc controller not usbip-vudc [ 56.457138][ T5768] udc usbip-vudc.0: failed to start USB Gadget filesystem: -19 [ 56.457446][ T5768] UDC core: USB Gadget filesystem: couldn't find an available UDC [ 56.726791][ T5776] loop1: detected capacity change from 0 to 128 [ 57.489637][ T5779] bond1: Removing last ns target with arp_interval on [ 57.568489][ T5785] netlink: 68 bytes leftover after parsing attributes in process `syz.2.321'. [ 57.578199][ T5785] [U] ^R [ 57.830323][ T5806] xt_recent: hitcount (16777216) is larger than allowed maximum (65535) [ 57.903105][ T5810] siw: device registration error -23 [ 58.189395][ T5814] loop0: detected capacity change from 0 to 1024 [ 58.226734][ T5814] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 58.361675][ T4715] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.408594][ T5827] IPVS: fo: FWM 3 0x00000003 - no destination available [ 58.534586][ T5837] loop2: detected capacity change from 0 to 128 [ 58.536442][ T5837] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 58.539539][ T5837] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 58.561322][ T5837] netlink: 4 bytes leftover after parsing attributes in process `syz.2.335'. [ 59.724831][ T5254] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 59.880221][ T5841] loop0: detected capacity change from 0 to 128 [ 59.883859][ T5842] sock: sock_timestamping_bind_phc: sock not bind to device [ 59.990756][ T5859] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 60.183037][ T5878] siw: device registration error -23 [ 61.021247][ T5885] netlink: 56 bytes leftover after parsing attributes in process `syz.4.346'. [ 61.342035][ T5898] loop3: detected capacity change from 0 to 128 [ 61.342527][ T5898] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 61.344972][ T5898] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 61.353075][ T5898] netlink: 4 bytes leftover after parsing attributes in process `syz.3.349'. [ 61.506404][ T3254] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 61.840459][ T5914] loop3: detected capacity change from 0 to 128 [ 62.601453][ T5922] netlink: 44 bytes leftover after parsing attributes in process `syz.2.358'. [ 62.603944][ T5922] netlink: 44 bytes leftover after parsing attributes in process `syz.2.358'. [ 62.606017][ T5922] netlink: 24 bytes leftover after parsing attributes in process `syz.2.358'. [ 62.843583][ T4797] usb 1-1: USB disconnect, device number 3 [ 62.863117][ T5939] loop3: detected capacity change from 0 to 256 [ 62.867490][ T5939] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 62.950942][ T5935] loop1: detected capacity change from 0 to 128 [ 63.046229][ T5948] overlay: ./file0 is not a directory [ 64.486810][ T1594] ieee802154 phy0 wpan0: encryption failed: -22 [ 64.488449][ T1594] ieee802154 phy1 wpan1: encryption failed: -22 [ 64.503495][ T24] cfg80211: failed to load regulatory.db [ 64.550564][ T6003] loop2: detected capacity change from 0 to 512 [ 64.553701][ T6003] EXT4-fs: Ignoring removed orlov option [ 64.553745][ T6003] EXT4-fs: Ignoring removed mblk_io_submit option [ 64.562922][ T6003] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -13 [ 64.566869][ T6003] EXT4-fs error (device loop2): ext4_clear_blocks:876: inode #13: comm syz.2.373: attempt to clear invalid blocks 1 len 1 [ 64.566905][ T6003] loop2: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 64.570889][ T6003] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 64.576019][ C1] EXT4-fs (loop2): error count since last fsck: 2 [ 64.576036][ C1] EXT4-fs (loop2): initial error at time 64: ext4_clear_blocks:876: inode 13 [ 64.576052][ C1] EXT4-fs (loop2): last error at time 64: ext4_mb_generate_buddy:1317 [ 64.581774][ T6003] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.373: invalid indirect mapped block 1819239214 (level 0) [ 64.581823][ T6003] loop2: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 64.615401][ T6003] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.373: invalid indirect mapped block 1819239214 (level 1) [ 64.615513][ T6003] loop2: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 64.620255][ T24] IPVS: starting estimator thread 0... [ 64.626203][ T6003] EXT4-fs (loop2): 1 truncate cleaned up [ 64.629228][ T6003] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 64.640824][ T6003] netlink: 'syz.2.373': attribute type 1 has an invalid length. [ 64.649768][ T39] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 64.649814][ T39] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 64.649838][ T39] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 64.649858][ T39] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 64.705593][ T6009] IPVS: using max 60 ests per chain, 144000 per kthread [ 64.768891][ T6028] netlink: 24 bytes leftover after parsing attributes in process `syz.1.380'. [ 64.810520][ T6035] loop1: detected capacity change from 0 to 2048 [ 64.811305][ T6035] ext4: Unknown parameter 'fsname' [ 64.855117][ T6015] vlan2: entered allmulticast mode [ 64.855154][ T6015] macsec0: entered allmulticast mode [ 64.855177][ T6015] veth1_macvtap: entered allmulticast mode [ 64.855463][ T6015] bridge0: port 3(vlan2) entered blocking state [ 64.855967][ T6015] bridge0: port 3(vlan2) entered disabled state [ 64.857104][ T6015] vlan2: entered promiscuous mode [ 64.857117][ T6015] macsec0: entered promiscuous mode [ 64.963603][ T6048] loop0: detected capacity change from 0 to 512 [ 64.965821][ T6048] EXT4-fs: Ignoring removed nobh option [ 64.967255][ T6048] fscrypt (loop0, inode 2): Error -61 getting encryption context [ 64.967645][ T6048] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -61 [ 64.967938][ T6048] EXT4-fs error (device loop0): ext4_orphan_get:1399: inode #13: comm syz.0.386: inode has both inline data and extents flags [ 64.968132][ T6048] loop0: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 64.968351][ T6048] EXT4-fs error (device loop0): ext4_orphan_get:1404: comm syz.0.386: couldn't read orphan inode 13 (err -117) [ 64.968742][ T6048] loop0: lost filesystem error report for type 5 error -117 [ 64.969535][ T6048] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 64.970953][ T6048] EXT4-fs (loop0): shut down requested (2) [ 64.987050][ T4715] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.327037][ T4709] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.407500][ T6064] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 66.133354][ T6112] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 66.135382][ T6112] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 66.536030][ T6132] loop0: detected capacity change from 0 to 256 [ 66.728619][ T6161] Bluetooth: MGMT ver 1.23 [ 66.842118][ T6173] FAULT_INJECTION: forcing a failure. [ 66.842118][ T6173] name failslab, interval 1, probability 0, space 0, times 0 [ 66.845810][ T6173] CPU: 1 UID: 0 PID: 6173 Comm: syz.4.414 Tainted: G L syzkaller #0 PREEMPT [ 66.845838][ T6173] Tainted: [L]=SOFTLOCKUP [ 66.845843][ T6173] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 66.845851][ T6173] Call trace: [ 66.845856][ T6173] show_stack+0x2c/0x3c (C) [ 66.845876][ T6173] __dump_stack+0x30/0x40 [ 66.845887][ T6173] dump_stack_lvl+0xd8/0x12c [ 66.845897][ T6173] dump_stack+0x1c/0x28 [ 66.845906][ T6173] should_fail_ex+0x41c/0x590 [ 66.845922][ T6173] should_failslab+0xc4/0x120 [ 66.845931][ T6173] kmem_cache_alloc_noprof+0x94/0x5d8 [ 66.845940][ T6173] security_file_alloc+0x3c/0x300 [ 66.845948][ T6173] init_file+0x90/0x28c [ 66.845956][ T6173] alloc_empty_file+0x80/0x1cc [ 66.845964][ T6173] path_openat+0x7c/0x2a60 [ 66.845972][ T6173] do_file_open+0x1c8/0x2e8 [ 66.845980][ T6173] do_sys_openat2+0x114/0x1e8 [ 66.845990][ T6173] do_sys_open+0xb0/0xe0 [ 66.845999][ T6173] __arm64_sys_openat+0xa0/0xbc [ 66.846009][ T6173] invoke_syscall+0x98/0x244 [ 66.846019][ T6173] el0_svc_common+0xec/0x23c [ 66.846029][ T6173] do_el0_svc+0x4c/0x5c [ 66.846038][ T6173] el0_svc+0x64/0x260 [ 66.846049][ T6173] el0t_64_sync_handler+0x48/0x148 [ 66.846058][ T6173] el0t_64_sync+0x198/0x19c [ 67.008303][ T6186] netlink: 4 bytes leftover after parsing attributes in process `syz.4.419'. [ 67.212393][ T6209] netlink: 12 bytes leftover after parsing attributes in process `syz.4.424'. [ 67.255541][ T6216] FAULT_INJECTION: forcing a failure. [ 67.255541][ T6216] name failslab, interval 1, probability 0, space 0, times 0 [ 67.257950][ T6216] CPU: 1 UID: 0 PID: 6216 Comm: syz.2.426 Tainted: G L syzkaller #0 PREEMPT [ 67.257967][ T6216] Tainted: [L]=SOFTLOCKUP [ 67.257971][ T6216] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 67.257976][ T6216] Call trace: [ 67.257980][ T6216] show_stack+0x2c/0x3c (C) [ 67.258001][ T6216] __dump_stack+0x30/0x40 [ 67.258012][ T6216] dump_stack_lvl+0xd8/0x12c [ 67.258022][ T6216] dump_stack+0x1c/0x28 [ 67.258031][ T6216] should_fail_ex+0x41c/0x590 [ 67.258042][ T6216] should_failslab+0xc4/0x120 [ 67.258051][ T6216] __kmalloc_noprof+0x108/0x6b8 [ 67.258059][ T6216] tomoyo_encode2+0x10c/0x330 [ 67.258068][ T6216] tomoyo_encode+0x34/0x50 [ 67.258076][ T6216] tomoyo_realpath_from_path+0x488/0x4dc [ 67.258084][ T6216] tomoyo_check_open_permission+0x1c4/0x394 [ 67.258092][ T6216] tomoyo_file_open+0x78/0xcc [ 67.258100][ T6216] security_file_open+0xbc/0x258 [ 67.258108][ T6216] do_dentry_open+0x2a8/0xfc0 [ 67.258118][ T6216] vfs_open+0x44/0x2dc [ 67.258127][ T6216] path_openat+0x21fc/0x2a60 [ 67.258136][ T6216] do_file_open+0x1c8/0x2e8 [ 67.258144][ T6216] do_sys_openat2+0x114/0x1e8 [ 67.258153][ T6216] do_sys_open+0xb0/0xe0 [ 67.258162][ T6216] __arm64_sys_openat+0xa0/0xbc [ 67.258172][ T6216] invoke_syscall+0x98/0x244 [ 67.258182][ T6216] el0_svc_common+0xec/0x23c [ 67.258191][ T6216] do_el0_svc+0x4c/0x5c [ 67.258200][ T6216] el0_svc+0x64/0x260 [ 67.258211][ T6216] el0t_64_sync_handler+0x48/0x148 [ 67.258221][ T6216] el0t_64_sync+0x198/0x19c [ 67.288735][ T6216] ERROR: Out of memory at tomoyo_realpath_from_path. [ 67.314313][ T6217] loop0: detected capacity change from 0 to 512 [ 67.315361][ T6217] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 67.906747][ T6231] netlink: 76 bytes leftover after parsing attributes in process `syz.2.431'. [ 67.913766][ T6234] netlink: 52 bytes leftover after parsing attributes in process `syz.4.430'. [ 68.046204][ T6247] netlink: 8 bytes leftover after parsing attributes in process `syz.3.437'. [ 68.049811][ T6249] SET target dimension over the limit! [ 68.052791][ T6249] SET target dimension over the limit! [ 68.053967][ T6249] SET target dimension over the limit! [ 68.056090][ T6249] SET target dimension over the limit! [ 68.058926][ T6249] SET target dimension over the limit! [ 68.060860][ T6249] SET target dimension over the limit! [ 68.062976][ T6249] SET target dimension over the limit! [ 68.070405][ T6249] SET target dimension over the limit! [ 68.071660][ T6249] SET target dimension over the limit! [ 68.072935][ T6249] SET target dimension over the limit! [ 68.247256][ T6262] loop2: detected capacity change from 0 to 4096 [ 68.282273][ T6262] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 68.297886][ T6262] EXT4-fs (loop2): shut down requested (0) [ 68.411478][ T4709] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.421744][ T6272] netlink: 48 bytes leftover after parsing attributes in process `syz.1.443'. [ 68.468052][ T6277] loop1: detected capacity change from 0 to 512 [ 68.474476][ T6277] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 68.476358][ T6277] EXT4-fs (loop1): 1 truncate cleaned up [ 68.476829][ T6277] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 68.525581][ T4720] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.687349][ T6303] IPVS: fo: FWM 3 0x00000003 - no destination available [ 68.784986][ T6310] netlink: 48 bytes leftover after parsing attributes in process `syz.0.456'. [ 69.107245][ T6330] loop4: detected capacity change from 0 to 128 [ 70.079393][ T6338] loop0: detected capacity change from 0 to 4096 [ 70.082248][ T6338] EXT4-fs: inline encryption not supported [ 70.110943][ T6348] loop3: detected capacity change from 0 to 128 [ 70.111426][ T6348] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 70.117424][ T6348] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 70.119543][ T6338] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 70.119574][ T6338] EXT4-fs (loop0): Test dummy encryption mode enabled [ 70.126985][ T6348] netlink: 4 bytes leftover after parsing attributes in process `syz.3.466'. [ 70.137080][ T6338] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=280ec1a8, mo2=0003] [ 70.137140][ T6338] System zones: 0-5 [ 70.140005][ T6338] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 70.161182][ T6338] fscrypt: AES-256-CBC-CTS using implementation "cts-cbc-aes-ce" [ 70.169091][ T6338] fscrypt: AES-256-XTS using implementation "xts-aes-ce" [ 70.224962][ T39] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 70.320005][ T4715] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.460211][ T6364] loop3: detected capacity change from 0 to 512 [ 70.488326][ T6364] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 71.307115][ T6364] EXT4-fs error (device loop3): ext4_init_orphan_info:618: comm syz.3.472: orphan file block 0: bad magic [ 71.307162][ T6364] loop3: lost filesystem error report for type 5 error -117 [ 71.314401][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 71.314429][ C1] EXT4-fs (loop3): initial error at time 71: ext4_init_orphan_info:618 [ 71.314457][ C1] EXT4-fs (loop3): last error at time 71: ext4_init_orphan_info:618 [ 71.324156][ T6364] EXT4-fs (loop3): Remounting filesystem read-only [ 71.328205][ T6364] EXT4-fs (loop3): mount failed [ 71.428351][ T6367] netlink: 12 bytes leftover after parsing attributes in process `syz.4.470'. [ 71.497081][ T6375] loop4: detected capacity change from 0 to 128 [ 71.501144][ T6375] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 71.595906][ T4710] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 71.607548][ T6380] loop3: detected capacity change from 0 to 1024 [ 71.631787][ T6380] EXT4-fs (loop3): stripe (4) is not aligned with cluster size (16), stripe is disabled [ 71.672718][ T6380] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 71.770815][ T4716] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.804991][ T6403] netlink: 'syz.2.480': attribute type 1 has an invalid length. [ 71.904325][ T6414] bond2: (slave geneve2): making interface the new active one [ 71.912517][ T6414] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 71.940576][ T5262] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 20000 - 0 [ 71.942279][ T5262] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 20000 - 0 [ 71.944959][ T5262] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 20000 - 0 [ 71.945008][ T5262] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 20000 - 0 [ 72.037564][ T6403] netlink: 28 bytes leftover after parsing attributes in process `syz.2.480'. [ 72.038099][ T6403] 8021q: adding VLAN 0 to HW filter on device bond2 [ 72.052638][ T6422] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 72.127480][ T6424] loop4: detected capacity change from 0 to 128 [ 73.139161][ T6440] netlink: 8 bytes leftover after parsing attributes in process `syz.3.495'. [ 73.226950][ T6450] netlink: 536 bytes leftover after parsing attributes in process `syz.2.497'. [ 73.330924][ T6461] loop2: detected capacity change from 0 to 128 [ 73.333107][ T6461] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 73.338492][ T6461] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 73.352356][ T6461] netlink: 4 bytes leftover after parsing attributes in process `syz.2.502'. [ 73.478036][ T3363] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 73.510192][ T6470] loop3: detected capacity change from 0 to 256 [ 73.522437][ T6470] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 73.686404][ T6479] overlay: ./file0 is not a directory [ 73.966766][ T6481] rdma_rxe: rxe_newlink: failed to add bond_slave_0 [ 74.899140][ T6508] loop1: detected capacity change from 0 to 512 [ 74.901157][ T6508] EXT4-fs (loop1): Test dummy encryption mode enabled [ 74.909734][ T6508] EXT4-fs error (device loop1): ext4_orphan_get:1399: inode #15: comm syz.1.512: inode has both inline data and extents flags [ 74.912491][ T6508] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 74.912867][ T6508] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.512: couldn't read orphan inode 15 (err -117) [ 74.914776][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 74.914786][ C1] EXT4-fs (loop1): initial error at time 74: ext4_orphan_get:1399: inode 15 [ 74.914801][ C1] EXT4-fs (loop1): last error at time 74: ext4_orphan_get:1399: inode 15 [ 74.924718][ T6508] loop1: lost filesystem error report for type 5 error -117 [ 74.926267][ T6508] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.970234][ T6510] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 74.973044][ T6510] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 75.068124][ T6529] loop3: detected capacity change from 0 to 128 [ 75.070196][ T6529] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 75.082151][ T6529] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 75.105480][ T6529] netlink: 4 bytes leftover after parsing attributes in process `syz.3.515'. [ 75.179729][ T5262] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 75.189098][ T4720] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.248990][ T6540] loop3: detected capacity change from 0 to 512 [ 75.292599][ T6540] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 75.670787][ T6555] loop2: detected capacity change from 0 to 256 [ 75.673721][ T6555] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 75.676520][ T6541] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 75.793629][ T6557] overlay: ./file0 is not a directory [ 75.853702][ T4716] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.872200][ T6561] netlink: 16 bytes leftover after parsing attributes in process `syz.0.519'. [ 76.032267][ T6574] FAULT_INJECTION: forcing a failure. [ 76.032267][ T6574] name failslab, interval 1, probability 0, space 0, times 0 [ 76.039793][ T6574] CPU: 0 UID: 0 PID: 6574 Comm: syz.3.522 Tainted: G L syzkaller #0 PREEMPT [ 76.039816][ T6574] Tainted: [L]=SOFTLOCKUP [ 76.039820][ T6574] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 76.039825][ T6574] Call trace: [ 76.039829][ T6574] show_stack+0x2c/0x3c (C) [ 76.039855][ T6574] __dump_stack+0x30/0x40 [ 76.039869][ T6574] dump_stack_lvl+0xd8/0x12c [ 76.039880][ T6574] dump_stack+0x1c/0x28 [ 76.039889][ T6574] should_fail_ex+0x41c/0x590 [ 76.039904][ T6574] should_failslab+0xc4/0x120 [ 76.039914][ T6574] __kmalloc_node_noprof+0x10c/0x6d8 [ 76.039924][ T6574] __kfifo_alloc_node+0x10c/0x208 [ 76.039934][ T6574] gs_open+0x144/0x514 [ 76.039942][ T6574] tty_open+0x404/0x89c [ 76.039952][ T6574] chrdev_open+0x398/0x3e8 [ 76.039961][ T6574] do_dentry_open+0x5c4/0xfc0 [ 76.039971][ T6574] vfs_open+0x44/0x2dc [ 76.039980][ T6574] path_openat+0x21fc/0x2a60 [ 76.039988][ T6574] do_file_open+0x1c8/0x2e8 [ 76.039996][ T6574] do_sys_openat2+0x114/0x1e8 [ 76.040006][ T6574] do_sys_open+0xb0/0xe0 [ 76.040015][ T6574] __arm64_sys_openat+0xa0/0xbc [ 76.040024][ T6574] invoke_syscall+0x98/0x244 [ 76.040034][ T6574] el0_svc_common+0xec/0x23c [ 76.040044][ T6574] do_el0_svc+0x4c/0x5c [ 76.040054][ T6574] el0_svc+0x64/0x260 [ 76.040064][ T6574] el0t_64_sync_handler+0x48/0x148 [ 76.040074][ T6574] el0t_64_sync+0x198/0x19c [ 76.223202][ T6574] Unable to handle kernel paging request at virtual address dfff800000000074 [ 76.223227][ T6574] KASAN: null-ptr-deref in range [0x00000000000003a0-0x00000000000003a7] [ 76.223239][ T6574] Mem abort info: [ 76.223243][ T6574] ESR = 0x0000000096000005 [ 76.223250][ T6574] EC = 0x25: DABT (current EL), IL = 32 bits [ 76.223257][ T6574] SET = 0, FnV = 0 [ 76.223261][ T6574] EA = 0, S1PTW = 0 [ 76.223265][ T6574] FSC = 0x05: level 1 translation fault [ 76.223269][ T6574] Data abort info: [ 76.223271][ T6574] ISV = 0, ISS = 0x00000005, ISS2 = 0x00000000 [ 76.223274][ T6574] CM = 0, WnR = 0, TnD = 0, TagAccess = 0 [ 76.223279][ T6574] GCS = 0, Overlay = 0, DirtyBit = 0 [ 76.223283][ T6574] [dfff800000000074] address between user and kernel address ranges [ 76.223364][ T6574] Internal error: Oops: 0000000096000005 [#1] SMP [ 76.238251][ T6574] Modules linked in: [ 76.239009][ T6574] CPU: 1 UID: 0 PID: 6574 Comm: syz.3.522 Tainted: G L syzkaller #0 PREEMPT [ 76.240775][ T6574] Tainted: [L]=SOFTLOCKUP [ 76.241553][ T6574] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 76.243312][ T6574] pstate: 234000c5 (nzCv daIF +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 76.244705][ T6574] pc : kasan_byte_accessible+0x10/0x20 [ 76.245711][ T6574] lr : __kasan_check_byte+0x20/0x54 [ 76.246691][ T6574] sp : ffff80009a287300 [ 76.247405][ T6574] x29: ffff80009a287300 x28: ffff800088b0a000 x27: ffff0000c7cb9d40 [ 76.248844][ T6574] x26: 25f080008690a624 x25: 0000000000000000 x24: 0000000000000001 [ 76.250285][ T6574] x23: 0000000000000000 x22: 00000000000003a0 x21: 00000000000003a0 [ 76.251708][ T6574] x20: 0000000000000000 x19: ffff80008690a624 x18: 1fffe00035bc5428 [ 76.253095][ T6574] x17: 0000000000000003 x16: 0000000000000001 x15: 0000000000000000 [ 76.254412][ T6574] x14: 0000000000000000 x13: 0000000000000001 x12: 0000000000000000 [ 76.255745][ T6574] x11: ffff800080156ee8 x10: 0000000000000003 x9 : dfff800000000000 [ 76.257093][ T6574] x8 : 0000000000000074 x7 : 0000000000000000 x6 : ffff800083659a38 [ 76.258443][ T6574] x5 : 0000000000000000 x4 : 0000000000000001 x3 : 0000000000000000 [ 76.259854][ T6574] x2 : 0000000000000000 x1 : ffff80008690a624 x0 : 00000000000003a0 [ 76.261344][ T6574] Call trace: [ 76.261960][ T6574] kasan_byte_accessible+0x10/0x20 (P) [ 76.262986][ T6574] lock_acquire+0xa4/0x364 [ 76.263787][ T6574] _raw_spin_lock_irq+0x58/0x70 [ 76.264624][ T6574] gs_close+0xac/0x65c [ 76.265322][ T6574] tty_release+0x2c4/0xffc [ 76.266115][ T6574] tty_open+0x46c/0x89c [ 76.266867][ T6574] chrdev_open+0x398/0x3e8 [ 76.267648][ T6574] do_dentry_open+0x5c4/0xfc0 [ 76.268532][ T6574] vfs_open+0x44/0x2dc [ 76.269277][ T6574] path_openat+0x21fc/0x2a60 [ 76.270066][ T6574] do_file_open+0x1c8/0x2e8 [ 76.270873][ T6574] do_sys_openat2+0x114/0x1e8 [ 76.271684][ T6574] do_sys_open+0xb0/0xe0 [ 76.272440][ T6574] __arm64_sys_openat+0xa0/0xbc [ 76.273311][ T6574] invoke_syscall+0x98/0x244 [ 76.274087][ T6574] el0_svc_common+0xec/0x23c [ 76.274852][ T6574] do_el0_svc+0x4c/0x5c [ 76.275569][ T6574] el0_svc+0x64/0x260 [ 76.276257][ T6574] el0t_64_sync_handler+0x48/0x148 [ 76.277141][ T6574] el0t_64_sync+0x198/0x19c [ 76.277951][ T6574] Code: d503245f d343fc08 d2d00009 f2fbffe9 (38696908) [ 76.279052][ T6574] ---[ end trace 0000000000000000 ]--- [ 76.524156][ T6574] Kernel panic - not syncing: Oops: Fatal exception [ 76.525261][ T6574] SMP: stopping secondary CPUs [ 76.526113][ T6574] Kernel Offset: disabled [ 76.526802][ T6574] CPU features: 0x14000000,003c0008,27020501,5427fea7 [ 76.528028][ T6574] Memory Limit: none [ 76.768057][ T6574] Rebooting in 86400 seconds..