last executing test programs: 2m58.89012432s ago: executing program 32 (id=93): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f0000002780)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="030325bd7000fbdbdf251f"], 0x1c}}, 0x20000000) 2m26.479025577s ago: executing program 1 (id=300): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), r0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$pppl2tp(0x18, 0x1, 0x1) accept(r3, 0x0, &(0x7f0000000040)) r4 = openat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x60001, 0xa3) r5 = syz_io_uring_setup(0xf03, &(0x7f0000000400)={0x0, 0x5b5a, 0x80, 0xfffffffc, 0x51, 0x0, r4}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000200)=0x0) syz_io_uring_submit(r6, r7, r8, &(0x7f0000000280)=@IORING_OP_SENDMSG_ZC={0x30, 0x0, 0x28, r2, 0x0, &(0x7f0000000d40)={0x0, 0x0, 0x0}, 0x40000002, 0x4048000, 0x0, {0x2}}) io_uring_enter(r5, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) r9 = inotify_add_watch(r4, &(0x7f0000000180)='./file0\x00', 0x40) inotify_rm_watch(r4, r9) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r10 = gettid() syz_init_net_socket$llc(0x1a, 0x1, 0x0) process_vm_writev(r10, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r11, &(0x7f0000000140)={0xa, 0x4e22, 0xd, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x13}}, 0x6}, 0x1c) connect$inet6(r11, &(0x7f0000000080)={0xa, 0x4e22, 0x460000, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x106}, 0x1c) sendmsg$SMC_PNETID_ADD(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="05000000000000000000020100000900010073797a3000000000070002006c6f0000070003006c6f"], 0x30}, 0x1, 0x0, 0x0, 0x20000081}, 0x0) 2m26.285323804s ago: executing program 1 (id=303): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1800040, &(0x7f00000001c0)={[{@nodelalloc}, {}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x1}}, {@barrier}, {@block_validity}, {@nodioread_nolock}, {@grpid}, {@resuid}, {@errors_remount}]}, 0x1, 0x5b0, &(0x7f00000004c0)="$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") r0 = openat(0xffffffffffffff9c, 0x0, 0x141442, 0x40) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x808410, &(0x7f0000000080)=ANY=[@ANYBLOB="666c7573682c757466383d312c6e6f6e756d7461696c3d302c726f6469722c757466383d312c6e6f6e756d7461696c3d302c73686f72746e616d653d6c6f7765722c6e6f6e756d7461696c3d302c756e695f786c6174653d302c757466383d312c756e695f786c6174653d302c757466383d312c756e695f786c6174653d312c6e6f6e756d7461696c3d302c646f733178666c6f7070792c726f6469722c756e695f786c6174653d312c71756965742c00c8702cc583177e7c953d2b6c6e43b73645f2acb80cc28520c3cd61e54370886d9caa3a1ec165ec59309153922716cb0f95f435e2af"], 0x1, 0x2fc, &(0x7f0000000180)="$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") clock_gettime(0x0, &(0x7f00000025c0)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000002500)=[{{0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000ac0)=""/94, 0x5e}, {&(0x7f0000000bc0)}], 0x2, &(0x7f0000000c40)=""/218, 0xda}, 0x81}, {{&(0x7f0000000d40)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, 0x80, &(0x7f0000002000)=[{&(0x7f0000000dc0)=""/173, 0xad}, {&(0x7f0000000e80)=""/24, 0x18}, {&(0x7f0000000ec0)=""/132, 0x84}, {&(0x7f0000000f80)=""/4096, 0x1000}, {&(0x7f0000001f80)=""/122, 0x7a}], 0x5, &(0x7f0000002080)=""/41, 0x29}, 0x6}, {{&(0x7f00000020c0)=@alg, 0x80, &(0x7f0000002400)=[{&(0x7f0000002140)=""/195, 0xc3}, {&(0x7f0000002240)=""/182, 0xb6}, {&(0x7f0000002300)=""/201, 0xc9}], 0x3, &(0x7f0000002440)=""/158, 0x9e}, 0x3}], 0x3, 0x2141, &(0x7f0000002600)={r2, r3+10000000}) syz_emit_ethernet(0x17b, &(0x7f0000000200)=ANY=[], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000a80)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e22}, 0x6e) socket$inet6_mptcp(0xa, 0x1, 0x106) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$video4linux(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0xe, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x8}, [@generic={0x91, 0x1, 0x1, 0xb8}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[], 0x50) r7 = open_tree(0xffffffffffffffff, &(0x7f0000000640)='\x00', 0x89901) move_mount(r7, 0x0, 0xffffffffffffffff, 0x0, 0x46) r8 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$IPT_SO_SET_REPLACE(r8, 0x0, 0x40, &(0x7f00000000c0)=@mangle={'mangle\x00', 0x44, 0x6, 0x398, 0x0, 0x268, 0x138, 0x0, 0x268, 0x300, 0x300, 0x300, 0x300, 0x300, 0x6, 0x0, {[{{@ip={@loopback, @dev={0xac, 0x14, 0x14, 0x13}, 0xff, 0xff000000, 'bond_slave_0\x00', 'bridge_slave_0\x00', {}, {0xff}, 0xc, 0x3, 0x74}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x2, 0x9}}}, {{@ip={@loopback, @dev={0xac, 0x14, 0x14, 0x8}, 0x0, 0xffffff00, 'wg2\x00', 'veth0_virt_wifi\x00', {}, {0xff}, 0x6, 0x1}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0xd69, 0x1, @broadcast, 0x4e24}}}, {{@ip={@rand_addr=0x64010100, @loopback, 0x0, 0xffffff00, 'team0\x00', 'hsr0\x00', {}, {}, 0xff, 0x2, 0x68}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@private=0xa010102, @multicast1, 0x0, 0xffffff00, 'syzkaller0\x00', 'team_slave_0\x00'}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x0, 0xfc}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f8) connect$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) syz_emit_ethernet(0x72, &(0x7f0000000b40)={@broadcast, @random="ce3500590a7f", @val={@val={0x88a8, 0x0, 0x0, 0x1}, {0x8100, 0x0, 0x0, 0x1}}, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x1c, 0x5c, 0x0, 0x2, 0x2, 0x11, 0x0, @empty, @empty}, {0x4e23, 0x0, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "eed95425ef497343e285ee56ff9cd27f91306943185560d0", "424927f0b3a5b1a5bae583a55bca1d80986985716b5fe7237cbf62ea040ff7c4"}}}}}}, 0x0) 2m25.312833755s ago: executing program 1 (id=308): syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x200000, &(0x7f0000000040)={[{@grpquota}]}, 0x1, 0xbaf, &(0x7f0000002f00)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) setns(0xc9, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f0000000080)=0x4e27, 0x4) connect$inet(r4, &(0x7f00000002c0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) pwritev2(r0, &(0x7f0000000500)=[{&(0x7f0000000000)='d', 0xc0000}], 0x1c, 0xa00, 0x0, 0x22) 2m24.371404604s ago: executing program 1 (id=316): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/class/net/eth0/threaded\x00', 0x2, 0x0) write(r0, &(0x7f0000000300)='1\n', 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/class/net/veth0/threaded\x00', 0x2, 0x0) write(r1, &(0x7f0000000300)='1\n', 0x2) ioctl$F2FS_IOC_GET_PIN_FILE(r1, 0x8004f50e, &(0x7f0000000080)) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x101c088, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], 0x6, 0x2c3, &(0x7f0000000900)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) utimensat(r2, 0x0, 0x0, 0x0) 2m24.084595798s ago: executing program 1 (id=319): unshare(0xd17854e25bfaab50) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000000)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/swaps\x00', 0x0, 0x0) read(r0, &(0x7f0000000100)=""/100, 0x64) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="180200000200000000000000000000008500000041000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000008000000850000000e00000095"], &(0x7f00000001c0)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) socket$inet6_sctp(0xa, 0x801, 0x84) removexattr(&(0x7f0000000180)='none\x00', &(0x7f0000000240)=@known='trusted.overlay.opaque\x00') r2 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2, 0x9}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r3, r4, r5, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, {0x2011}}) io_uring_enter(r2, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0) 2m23.550192482s ago: executing program 1 (id=323): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="ac00000000010505000000faff0000000a0000003c0002802c00018014000300ff01000000000000000000000000000114000400ff02000000000000009d0000000000010c00028005000100000000003c0001800c00028005000100000000002c00018014000300ff0200000000000000000000000000011400040000000000000000000000ffffac1e00010800074000000001180006801400040000000000000000000000000000000001"], 0xac}}, 0x0) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="b80000000001050500000000000000000a0000003c0002802c00018014000300ff02000000000000000000000000000114000400ff0200000000000000002f00000000010c00028005000100000000003c0001800c00028005000100000000002c00018014000300ff0200000000000000000000000000011400040000000001000000000000ffffffffffff08000740010000012400068014000400000000000000000000000000000000010c000380060001"], 0xb8}}, 0x0) 2m15.800493542s ago: executing program 5 (id=377): r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.net/devices.allow\x00', 0x2, 0x48) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x20, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0xc, 0x2, 0x0, 0x0, @str='nl80211\x00'}]}, 0x20}}, 0x0) recvmmsg(r2, &(0x7f0000001b40)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)=""/189, 0xbd}, {&(0x7f00000003c0)=""/152, 0x98}, {&(0x7f0000000480)=""/4096, 0x1000}], 0x3}}], 0x7, 0x0, 0x0) setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x30, &(0x7f0000000600)=ANY=[@ANYBLOB="020000000000000002000000e00000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000"], 0x110) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000100)={@map=r0, 0x9, 0x0, 0x7, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0], 0x0}, 0x40) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r4, 0x74) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r7, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r5, &(0x7f0000000680)={0x15, 0x110, 0xfa08, {0xffffffffffffffff, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x4e26, @local}, @in6={0xa, 0x4e22, 0x6, @mcast1, 0xf0b}}}, 0x118) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000001c0)={@map=r0, r0, 0x2c, 0x15, r0, @void, @value=r0, @void, @void, r3}, 0x20) write$cgroup_devices(r0, &(0x7f0000000140)=ANY=[@ANYBLOB='b *:'], 0x9) 2m15.612323716s ago: executing program 5 (id=380): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008001bc2000000032c000000030a01030000e6ff0000000002f500000900010073797a30"], 0x7c}, 0x1, 0x0, 0x0, 0x20000000}, 0x8800) 2m15.49660669s ago: executing program 5 (id=381): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x3938700}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000050000000900010073797a30000000002c000000030a01010000000000000000050000000900010073797a30000000000900030073797a300000000054000000060a010400000000000000000500000408000b40000400002c0004802800018008000100667764001c000280080002400000000a080003400000000808000140000000170900010073797a3000000000140000009e000100"], 0xc8}, 0x1, 0x100000000000000}, 0x0) 2m15.335740885s ago: executing program 5 (id=383): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x74) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r3, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000240)={0x4, &(0x7f0000000280)=[{0x20, 0x4, 0x9, 0xfffff038}, {0x20, 0x0, 0x8, 0xfffff010}, {0x50, 0x0, 0x2}, {0x6, 0xba, 0x2, 0xffff}]}, 0x10) syz_emit_ethernet(0x4a, &(0x7f00000002c0)={@local, @random="b84fbdff8a20", @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "ff00f5", 0x14, 0x6, 0x0, @dev={0xfe, 0x80, '\x00', 0x34}, @local, {[], {{0x2, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x8}}}}}}}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) (async) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) (async) listen(r0, 0x74) (async) socket$inet_mptcp(0x2, 0x1, 0x106) (async) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) (async) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r3, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0) (async) socket$packet(0x11, 0x3, 0x300) (async) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000240)={0x4, &(0x7f0000000280)=[{0x20, 0x4, 0x9, 0xfffff038}, {0x20, 0x0, 0x8, 0xfffff010}, {0x50, 0x0, 0x2}, {0x6, 0xba, 0x2, 0xffff}]}, 0x10) (async) syz_emit_ethernet(0x4a, &(0x7f00000002c0)={@local, @random="b84fbdff8a20", @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "ff00f5", 0x14, 0x6, 0x0, @dev={0xfe, 0x80, '\x00', 0x34}, @local, {[], {{0x2, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x8}}}}}}}, 0x0) (async) 2m15.221473865s ago: executing program 5 (id=384): unshare(0xd17854e25bfaab50) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000000)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/swaps\x00', 0x0, 0x0) read(r0, &(0x7f0000000100)=""/100, 0x64) r1 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2, 0x9}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, {0x2011}}) io_uring_enter(r1, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0) 2m15.137734896s ago: executing program 5 (id=385): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4001}) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000080)={'syzkaller0\x00', {0x2, 0x0, @rand_addr=0xac140001}}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) r2 = socket$inet_sctp(0x2, 0x1, 0x84) bind(r2, &(0x7f0000000000)=@in={0x2, 0x3210, @rand_addr=0xac140001}, 0x10) listen(r2, 0x5) write$tun(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="00000800010000000000140008004500003c000000004084ca2502020202ac14000104d2321000000000000000000100001c11223344000800c1ff0500050000000580080008c1"], 0x4a) 2m8.489979835s ago: executing program 33 (id=323): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="ac00000000010505000000faff0000000a0000003c0002802c00018014000300ff01000000000000000000000000000114000400ff02000000000000009d0000000000010c00028005000100000000003c0001800c00028005000100000000002c00018014000300ff0200000000000000000000000000011400040000000000000000000000ffffac1e00010800074000000001180006801400040000000000000000000000000000000001"], 0xac}}, 0x0) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="b80000000001050500000000000000000a0000003c0002802c00018014000300ff02000000000000000000000000000114000400ff0200000000000000002f00000000010c00028005000100000000003c0001800c00028005000100000000002c00018014000300ff0200000000000000000000000000011400040000000001000000000000ffffffffffff08000740010000012400068014000400000000000000000000000000000000010c000380060001"], 0xb8}}, 0x0) 2m7.213920574s ago: executing program 4 (id=421): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r2, r1, 0x25, 0x2, @val=@netkit={@void, @value=r2}}, 0x1c) syz_emit_ethernet(0xeff, &(0x7f0000000300)={@local, @broadcast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "fa00", 0x48, 0x11, 0x1, @local, @local, {[], {0x4e20, 0xe22, 0x48, 0x0, @wg=@cookie={0x3, 0x2, "88c73b21f267636d01dbe5712c1c941e1cdafbbb43f09c28", "e138060072381f41e5fff9620915b6f78670dfaf9a195fcb2a79cf6b7931c9b4"}}}}}}}, 0x0) r3 = socket(0x11, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x89f0, &(0x7f0000000000)={'ip6gretap0\x00', 0x0}) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x40, 0x16f) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) connect$inet6(r4, &(0x7f00000004c0)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) sendmmsg$inet6(r4, &(0x7f0000001d00)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="8f92a4", 0x3}], 0x1}}, {{&(0x7f0000000100)={0xa, 0x4e20, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x6}, 0x1c, 0x0}}], 0x2, 0x4400c800) 2m6.667678594s ago: executing program 4 (id=422): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="1400da60ec65082d3a76882393f8ac8100001000010000000000000000000200000a14000000000a0108000000000000000002000000140000001100010000000000000000000200000a"], 0x3c}}, 0x20000000) r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001b80), r2) sendmsg$IEEE802154_START_REQ(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010026bd7040fddbdf250300305206000e"], 0x1c}, 0x1, 0x0, 0x0, 0x20004090}, 0x8040) mount(&(0x7f0000000040)=@md0, &(0x7f0000000080)='./file0\x00', 0x0, 0xc008, 0x0) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1) ioctl$SIOCX25SDTEFACILITIES(r0, 0x89eb, &(0x7f0000000000)={0x401, 0xa, 0x10, 0x2, 0x6b, 0xf, 0xfd, "d48283cf5eb388b31bed056da363b62d4288e03d", "a2f5baaa44d85db1c9041280676a36194716c0c9"}) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) setresuid(0x0, 0xee01, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x8) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r4, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, r0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r5) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e22, 0x77c, @empty, 0x1}, 0x1c) listen(r6, 0x0) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r7, 0x1, 0x8, &(0x7f0000000700)=0x2000008, 0x4) connect$inet(r7, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r8 = accept(r5, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}}, 0x1) socket$inet(0x2, 0x1, 0x0) 2m5.533976022s ago: executing program 4 (id=427): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2000c16, &(0x7f0000000280)={[{@usrquota}, {@nodelalloc}]}, 0xff, 0x25e, &(0x7f0000000e80)="$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") socket$nl_generic(0x10, 0x3, 0x10) openat2$dir(0xffffffffffffff9c, 0x0, 0xffffffffffffffff, 0x18) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000001c0)) syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x595e, 0x10000, 0x0, 0x4e}, &(0x7f0000000100), &(0x7f0000000000), 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000080)={[{@grpid}, {@jqfmt_vfsv0}]}, 0x4, 0x4eb, &(0x7f0000000540)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f00000005c0)=ANY=[@ANYBLOB="9feb0100180000000000000054000000540000000600000003000000000000080500000004000000010000040900000004000000ba21432c03000000040000000080000c030000000000000000000003000000000100000002000000ff010000030000000000000604000000002e615f5f"], 0x0, 0x72, 0x0, 0x1}, 0x28) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000b, 0x8031, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x56, &(0x7f0000000340)=ANY=[@ANYBLOB="aaaaaaaaaaaaaa4c77b99cbb86dd60c61e000000000000000100000000e01f00000000000000ff0200000000000000000000000000010100c204"], 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r4, 0x13) tkill(r4, 0x12) waitid(0x1, r4, 0x0, 0x8, &(0x7f00000003c0)) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)={0x98, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x4}]}, 0x98}}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x5) pwrite64(r5, &(0x7f0000000100)='\n', 0x1, 0x8000c5b) fallocate(r5, 0x8, 0x4000, 0x4000) 2m4.614297943s ago: executing program 4 (id=430): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x4b0, 0x0, 0xffffffff, 0xffffffff, 0x150, 0xffffffff, 0x3e0, 0xffffffff, 0xffffffff, 0x3e0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x128, 0x150, 0x0, {}, [@common=@unspec=@cgroup0={{0x28}, {0xc, 0x1}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x290, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0xe, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3, 0x20}}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff, 0x1}, {0x2, 0x0, 0x7}, {0x1, 0x5, 0x4}, 0x0, 0xa}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x510) r0 = socket$inet6(0xa, 0x2, 0x3a) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000100)=0xffff, 0x4) sendto$inet6(r0, &(0x7f0000000000)="800037bbfa9ba1ce", 0x8, 0x4000, &(0x7f0000000700)={0xa, 0x0, 0x400000, @loopback}, 0x1c) recvmmsg(r0, &(0x7f0000000380)=[{{&(0x7f0000000640)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000a00)=[{&(0x7f0000000140)=""/144, 0x90}, {&(0x7f0000000a80)=""/230, 0xe6}, {&(0x7f0000000300)=""/82, 0x52}, {&(0x7f00000004c0)=""/208, 0xd0}, {&(0x7f00000003c0)=""/253, 0xfd}, {&(0x7f0000000740)=""/214, 0xd6}], 0x6}, 0x3422a61a}], 0x1, 0x10102, 0x0) syz_mount_image$ext4(&(0x7f0000000bc0)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x4000, &(0x7f00000006c0)={[{@noquota}, {@errors_continue}, {@noinit_itable}]}, 0xfe, 0xbc2, &(0x7f0000002380)="$eJzs3M1rXOUaAPDnnEymaZt7J71cLrd3c3O5SAviNKmk2CLYSsWNC0G3QkM6KSHTD5JITZrFRP8BUdeCG0EtFhd23Y2iWzfabhUXQpHYKIho5MxHEptMmjYzPSH9/eCd877nnZnneeYwc84LMxPAI2swu0kjDkbEmSSi1NyfRkSx3uuLqDXut7Q4P/bL4vxYEsvLL/2YRBIRdxbnx1rPlTS3+5uDvoj46tkk/vHG+rjTs3OTo9VqZao5PjJz/tKR6dm5JybOj56rnKtcGD721MjRkWNDx0c6Vuuv3568/vP/nv++9tuHv1/96e33kzgZ/c25tXV0ymAMrrwmaxUiYrTTwXLS06xnbZ1J4R4PSrucFAAAbaVrruH+FaXoidWLt1J89nWuyQEAAAAdsdwTsQwAAADscon1PwAAAOxyre8B3FmcH2u1fL+R8HDdPhURA436l5qtMVOIWn3bF70Rse9OEmt/1po0HrZtgxHx3a3j17IWXfod8mZqCxHx742Of1Kvf6D+K+719acRMdSB+IN3jbdS/7UOxG3ZTv0nOxD/QeoHgO26capxIlt//ktXrn9ig/NfYYNz14PI+/zXuv5bWnf9t1p/T5vrvxe3GOPKB+9ebjeX1f/09ec+brUsfrbdVlH34fZCxH8KG9WfrNSftKn/zBZjlP64XGk3l3f9y+9FHIqN629JNv9/oiPjE9XKUON2wxgLX4581C5+3vVnx39fm/pb///U7vhf2mKMV06f/mTdzlur3c3rT38oJi/Xe8XmntdGZ2amhiOKyQvr9x/dPJfWfVrPkdV/+P+bv/83qj/7TKg1X4dsLbDQ3Gbj1++K+czVK5+2y6e1/svz+J9tc/zX1v9FYf3xf3OLMR77/K3D7ebWrn+zlsVvrYUBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoCWNiP5I0vJKP03L5Yj9EfHP2JdWL07PPD5+8dULZ7O5iIHoTccnqpWhiCg1xkk2Hq73V8dH7xo/GREHIuKd0t76uDx2sXo27+IBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABYsT8i+iNJyxGRRsRSKU3L5byzAgAAADpuIO8EAAAAgK6z/gcAAIDdz/ofAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACALjvw3xs3k4iondhbb5lic64318yAbkvzTgDITU/eCQC5KeSdAJCb+1zju1yAXSi5x3xf25k9Hc8FAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgJ3r0MEbN5OIqJ3YW2+ZYnOuN9fMgG5L804AyE3PZpOFh5cH8PB5i8OjyxofSO4x37d6n9pfZ/Z0LScAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAdp7+ekvSckQUm/vK5Yi/RcRA9CbjE9XKUET8PSK+KfXuycbDOecMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABA503Pzk2OVquVqayTRrOzskdntZM0XrHaTslHZ5udYuyINHZoJ+9PJgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8jA9Ozc5Wq1WpqbzzgQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADI2/Ts3ORotVqZ6mIn7xoBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMjPnwEAAP//DP4LIw==") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb0100180000000000000040000000400000000200000000000000000000020400000000000000000000010500000008000000000000000000000300000000010000000200000004000000000000000000000d"], 0x0, 0x5a}, 0x28) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet6_udp(0xa, 0x2, 0x0) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x15) unshare(0x40400) mq_notify(0xffffffffffffffff, &(0x7f00000000c0)={0x110c230000, 0x3, 0x2, @tid=r1}) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00000007000000020000000400000005000000", @ANYRES32, @ANYBLOB="00000300000033063100", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000200"/28], 0x48) ioctl$FS_IOC_GETFLAGS(r3, 0x80086601, &(0x7f0000000040)) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/disk', 0x1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./debug\x00', &(0x7f0000000300)='debugfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./debug/split_huge_pages\x00', 0x1, 0x0) write(r4, &(0x7f0000000600)='/,0x7f0000800000,0x7f0000a00000,0,-1', 0x24) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000060000000800000000000000", @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) 2m2.676663697s ago: executing program 4 (id=432): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=@setlink={0x28, 0x13, 0x100, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x40982, 0x14090}, [@IFLA_CARRIER_CHANGES={0x8, 0x23, 0x78}]}, 0x28}, 0x1, 0x0, 0x0, 0x240400c0}, 0x40010010) r1 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) r2 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4e24, 0x1, @mcast2, 0x5}, 0x1c) sendto$inet6(r2, &(0x7f0000000040)="800037bbfa9ba1ce", 0xffe9, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f0000003680)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000001c0)=""/66, 0x42}], 0x1}, 0x3}], 0x1, 0x8140, 0x0) connect$inet6(r2, &(0x7f00000001c0)={0xa, 0x4e23, 0x100002, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x32}}, 0x1}, 0x1c) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e5b, 0x80000003, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x40009}, 0x1c) setsockopt$inet6_tcp_int(r1, 0x6, 0x2, &(0x7f0000000380)=0x38, 0x4) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x9, 0x4, 0x8, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x6, 0xb, &(0x7f0000000200)=@framed={{}, [@map_fd={0x18, 0x1, 0x1, 0x0, r4}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0xbf, 0x3, 0xa}, @generic={0x7, 0x3, 0x0, 0x0, 0xfffffff0}, @generic={0xb7, 0x4, 0x0, 0x0, 0x6}, @generic={0x85, 0x0, 0x0, 0x0, 0x2}]}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r5, 0x0, 0xe, 0x0, &(0x7f0000000340)='\x00'/14, 0x0, 0x3b66, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000d00)={0x14, 0x14, 0x1, 0x0, 0x0, {0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) r6 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)='\x00\x00\x00', 0x3}, 0x1, 0x0, 0x0, 0x40894}, 0x24046006) sendmmsg$unix(r1, &(0x7f0000001f80)=[{{&(0x7f0000000200)=@file={0x1, './dev/console\x00'}, 0x6e, &(0x7f0000001d40)=[{&(0x7f0000000280)="d853f681f652f82a7ce5c860e289e262febe9eb1c4c4a39cf6b109dc324f6756cdc3d4e08277ccfc924cd5ada0a7c57a0fe0b4b4b624cd1033641f5e6883", 0x3e}, {&(0x7f00000002c0)="e66102851c1a9a3aeb88db2ce438093cfaea3689149e0669e9d84e03b308f1fa889e09818b24a6cb8ef045", 0x2b}, {&(0x7f00000003c0)="c84954c714de3d8d0077f2824fae6a3e2ce35d5bf410cc705200fceb46d773b94aa5a6c944a052b90ce0f87a896ed8d73a66eccd1003e9d5a6b8e8c41f001527c9bd15d5ea59b16a93ef1557adfd8de213198b7c3cd6e459b9", 0x59}, {&(0x7f0000000440)="43a4c0bd5bf88eb87052803bed46db21b4903de5efe2e3e90d542e04d700a553d2116df231dc98ce1a0835b738936f647cf00de9805e3a1c11c229a08242ea45006e0906804700cafa88213f894328bbeb568be7962472fe7ce8241b7306f6cd6ffe4d06dec6b8b4104587babd0028d3d6dda36b3aac5d7267cf0d51fcaae7c26c7215f3f64886d7be9aa51e138bf5a6ac506b2614949b38f7f68ab9533e904dc8147a8658eea5ee256bf0de7c0d1dc493e80296", 0xb4}, {&(0x7f0000000500)="94584326730376d0378ccb976cb1ffb602a2473d1b01cc49e14f9484a91cccf10f4a150ee9b957f17c16d8c46188ada99a772f38ff4ec3563720dc", 0x3b}, {&(0x7f0000000540)="c55812d7a0780a505595d3ebc478c3c71e98abbe027a772786563a16bf20c9a6692d42d8c29e4625ea153e3f376d5979ac1ec4af71ff971a416cf47da5e70e03f395e4879fa3f5e08779df4f1de5b1b3dc5ebb88699db45451e16b28e7d65c1180bdc345d62427f4e9aeb108", 0x6c}, {&(0x7f00000005c0)="896e250a85804ff93c93353a31b15aa3cfd5844f165672761bd8a5e247a46e899d4a5eef184031c9fdb851ad4e36b953cc4a3e07ce1193cf9bf85355893632ce24d2334cfdbc9926b004486c80187bd1531bc385709d37ec70c8e3cb653aad7ca5f6adef4a7d1136a767962fa0106e24989860b987be61d755ec55250e34cc8ee516b727985eb31553a230407fc9e0b55b114bb31b0354dfcaddb49c7c2e367552c18c6df0152d798242d7e5825603a4a624798dbb8b73", 0xb7}, {&(0x7f0000000680)="719d118a786b6f4c3272e32a7cab261d649eac180fa7bf667a2fc89947a64f02058cf5", 0x23}, {&(0x7f00000006c0)="cb18c87f3e380a37e5f5df26ddddfff8ca3e589b926dc2574957062410e8a53155a0382e15c512116dd00b634245be28996c57325eb48427f9e2e7074b9fa38c8068a39e584c0daa098b3c22d2558eefe7d7666fb242e0b40ce8fd521b573d399bcd153990f0501d12c3b43fac151dc9f396d0b03422d70d2ca6d2b86bce1f5a970cd0d4cbf757f5ed999bb9a909a5e829036814be58ce0ee18e2a02a1b604656c1e6f1f542cdc75624a9301757a5ae023", 0xb1}, {&(0x7f0000000d40)="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", 0x1000}], 0xa, &(0x7f0000000a00)=ANY=[@ANYBLOB="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", @ANYRES32=r3, @ANYRES32=r0, @ANYRES32=r6, @ANYBLOB='\x00\x00\x00\x00'], 0x20, 0x80}}, {{&(0x7f0000001e40)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000001f40)=[{&(0x7f0000001ec0)="03a8976f998ca97da4e851106627bc9b9b4469b1efbef67a28ff6b7ab4dcbdec3afff77b370f9da3b04dc75dae79bf7358d3c2d5d80e29d47f7bcb326da8c86b6a", 0x41}], 0x1, 0x0, 0x0, 0x1}}], 0x2, 0x20040000) r7 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r7, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x20000080) sendmsg$NFT_BATCH(r8, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40000c0) ioctl$XFS_IOC_PATH_TO_HANDLE(r5, 0xc0385869, &(0x7f0000000880)={r3, &(0x7f0000000780)='I)[\xca*[(/[\x00', 0x60000, &(0x7f00000007c0)={@align=0x7, {0x2237, 0x8, 0x8, 0x1}}, 0x9, &(0x7f0000000800)={@_ha_fsid}, &(0x7f0000000840)=0x9}) syz_io_uring_setup(0x51c3, &(0x7f00000008c0)={0x0, 0xd149, 0x4000, 0x2, 0x147, 0x0, r9}, &(0x7f0000000940), &(0x7f0000000980), &(0x7f00000009c0)) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) r10 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./dev/console\x00', 0x1, 0x0) ioctl$TCSETS2(r10, 0x402c542b, &(0x7f0000000300)={0x81, 0x8, 0x21cb2, 0x7fffffff, 0x6, "f21059be8b65aca30f3dbbdf7065bfeea59c28", 0x9, 0x1}) 2m0.508707413s ago: executing program 4 (id=440): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000080)={0x6b16, 0x3, 0x10001, 0x400e0a, 0x10, "203c5e0000ff765e000080fffffffffffffff2", 0xb, 0x5}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0xff) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xd4ad1185e214d3bd}}, [@NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x5, 0x0, 0x0, {0xa}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x20, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14}}, 0x70}, 0x1, 0x0, 0x0, 0x1}, 0x0) 2m0.155610582s ago: executing program 34 (id=440): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000080)={0x6b16, 0x3, 0x10001, 0x400e0a, 0x10, "203c5e0000ff765e000080fffffffffffffff2", 0xb, 0x5}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0xff) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xd4ad1185e214d3bd}}, [@NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x5, 0x0, 0x0, {0xa}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x20, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14}}, 0x70}, 0x1, 0x0, 0x0, 0x1}, 0x0) 2m0.058380169s ago: executing program 35 (id=385): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4001}) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000080)={'syzkaller0\x00', {0x2, 0x0, @rand_addr=0xac140001}}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) r2 = socket$inet_sctp(0x2, 0x1, 0x84) bind(r2, &(0x7f0000000000)=@in={0x2, 0x3210, @rand_addr=0xac140001}, 0x10) listen(r2, 0x5) write$tun(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="00000800010000000000140008004500003c000000004084ca2502020202ac14000104d2321000000000000000000100001c11223344000800c1ff0500050000000580080008c1"], 0x4a) 1m18.824467976s ago: executing program 2 (id=677): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="ac00000000010505000000faff0000000a0000003c0002802c00018014000300ff01000000000000000000000000000114000400ff02000000000000009d0000000000010c00028005000100000000003c0001800c00028005000100000000002c00018014000300ff0200000000000000000000000000011400040000000000000000000000ffffac1e00010800074000000001180006801400040000000000000000000000000000000001"], 0xac}}, 0x0) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="b80000000001050500000000000000000a0000003c0002802c00018014000300ff02000000000000000000000000000114000400ff02000000000000000000f5ff0000010c00028005000100000000003c0001800c00028005000100000000002c00018014000300ff0200000000000000000000000000011400040000000001000000000000ffffffffffff08000740010000012400068014000400000000000000000000000000000000010c000380060001"], 0xb8}}, 0x0) 1m18.678931431s ago: executing program 2 (id=678): getresuid(&(0x7f00000000c0), &(0x7f0000000100)=0x0, &(0x7f0000000680)) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000080)='./bus\x00', 0x80c002, &(0x7f0000000700)={[{@errors_remount}, {@grpquota}], [{@euid_eq={'euid', 0x3d, r0}}]}, 0x2, 0x517, &(0x7f0000000140)="$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") (async) r1 = socket(0x10, 0x3, 0x4) getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f00000006c0), &(0x7f0000000740)=0x4) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="18000000270001031dbd7002fadbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x40000d0}, 0x0) (async) recvmmsg(r2, &(0x7f00000036c0)=[{{0x0, 0x0, 0x0}, 0x1000009}, {{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, 0x0}, 0x6}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)=""/155, 0x9b}, {&(0x7f0000000b00)=""/96, 0x60}, {&(0x7f0000000ec0)=""/237, 0xed}, {&(0x7f0000000fc0)=""/4083, 0xff3}, {&(0x7f0000000600)=""/104, 0x68}, {&(0x7f0000002080)=""/58, 0x3a}, {&(0x7f0000000380)=""/257, 0x101}], 0x7}, 0x2}], 0x4, 0x40000000, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newqdisc={0x68, 0x14, 0xf0b, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, {0xffe0}, {0xb, 0x2}, {0x3}}, [@TCA_STAB={0x44, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0xe, 0xfa, 0xa, 0x0, 0x3, 0x7e}}, {0x4}}, {{0x1c, 0x1, {0x0, 0x4, 0x7, 0xd, 0x0, 0x0, 0xcd5b}}, {0x4}}]}]}, 0x68}}, 0x40000) 1m17.584594524s ago: executing program 2 (id=683): r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) ioctl$sock_inet_SIOCSIFBRDADDR(r0, 0x891a, &(0x7f0000000100)={'vxcan1\x00', {0x2, 0x4e20, @multicast2}}) ioctl$BTRFS_IOC_DEFRAG(r0, 0x50009402, 0x0) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x703, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pselect6(0x40, &(0x7f0000003d00)={0x9, 0x2, 0xffffffffffffff7f, 0xffe, 0x1, 0xf5, 0x40, 0xb08}, 0x0, 0x0, 0x0, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000140)=0x10, 0x4) mmap$xdp(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xb, 0x11, r2, 0x100000000) bind$rds(r1, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="100000030000005f9ae0bbe64a4249030660948d770008b9850008"], 0x50) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x2, 0x6, 0xfffffff7, 0x0, r3, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5, 0x1, 0x7}, 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000003c0)={r3, 0x0, 0x0, 0x4}, 0x20) sendmsg$rds(r1, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x8, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000140)=[@rdma_dest={0x17, 0x114, 0x2, {0xec, 0x5}}], 0x18}, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r4, 0x942e, 0x0) 1m17.03912929s ago: executing program 2 (id=687): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r0 = socket(0x2, 0xa, 0x0) r1 = syz_io_uring_setup(0xf00, &(0x7f0000000080)={0x0, 0x5078, 0xc00, 0x2, 0x0, 0x0, 0x0}, &(0x7f0000000040), &(0x7f00000002c0), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_PBUF_RING(r1, 0x25, &(0x7f0000000400)={0x0, 0x0, 0x2, 0x3}, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8953, 0xfffffffffffffffe) syz_mount_image$ext4(&(0x7f0000000bc0)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x100c410, &(0x7f0000000040), 0x2, 0xbdb, &(0x7f0000002380)="$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") openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffe}, 0x50) add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) close(r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) socket$l2tp6(0xa, 0x2, 0x73) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x208080, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/class/vtconsole/vtcon1/bind\x00', 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x1, './file1\x00'}, 0x5a) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) write$FUSE_INTERRUPT(r3, &(0x7f0000002bc0)={0x10, 0xffffffffffffffda}, 0x10) write(r3, &(0x7f0000000280)='1', 0x1) 1m16.031649041s ago: executing program 2 (id=698): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000402, &(0x7f0000000600)={[{@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x4, 0x521, &(0x7f0000000640)="$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") r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_buf(r0, 0x29, 0x6, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000080)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x399446c, 0x0, 0x1, 0x0, &(0x7f0000000080)) chdir(&(0x7f0000000180)='./file0\x00') 1m13.012659275s ago: executing program 2 (id=705): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4001}) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000080)={'syzkaller0\x00', {0x2, 0x0, @rand_addr=0xac140001}}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) r2 = socket$inet_sctp(0x2, 0x1, 0x84) bind(r2, &(0x7f0000000000)=@in={0x2, 0x3210, @rand_addr=0xac140001}, 0x10) listen(r2, 0x5) write$tun(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="00000800010000000000140008004500003c000000004084ca2502020202ac14000104d2321000000000000000000100001c1122334400080000000500050028000580080008c1"], 0x4a) 1m12.876621272s ago: executing program 36 (id=705): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4001}) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000080)={'syzkaller0\x00', {0x2, 0x0, @rand_addr=0xac140001}}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) r2 = socket$inet_sctp(0x2, 0x1, 0x84) bind(r2, &(0x7f0000000000)=@in={0x2, 0x3210, @rand_addr=0xac140001}, 0x10) listen(r2, 0x5) write$tun(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="00000800010000000000140008004500003c000000004084ca2502020202ac14000104d2321000000000000000000100001c1122334400080000000500050028000580080008c1"], 0x4a) 45.621475661s ago: executing program 9 (id=882): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1100000004000000040000000800000000000000", @ANYRES32], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0x3100, 0x3100, &(0x7f0000000000), 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x50) unshare(0x22020600) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$ttys(0xc, 0x2, 0x0) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x2099, 0x3, 0x20000006, 0x7ffffff9}, 0x42) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r5, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4c840) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newtfilter={0x64, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xb, 0xfff3}, {0x0, 0xfff3}, {0xd, 0x10}}, [@filter_kind_options=@f_basic={{0xa}, {0x34, 0x2, [@TCA_BASIC_EMATCHES={0x30, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x24, 0x2, 0x0, 0x1, [@TCF_EM_META={0x20, 0x1, 0x0, 0x0, {{0xfff9, 0x4, 0x4}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x5, 0xe, 0x1}, {0x0, 0xc0, 0x2}}}, @TCA_EM_META_LVALUE={0x5, 0x2, [@TCF_META_TYPE_VAR="e1"]}]}}]}]}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) ioctl$TCSBRK(r2, 0x5409, 0x9) write(r3, &(0x7f0000000100)="1800000016005f021dfffffffffffff8070000002d000000", 0x18) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0xd) 45.058129212s ago: executing program 9 (id=888): syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRESHEX], 0x7) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000380)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = userfaultfd(0x80801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_encap(r4, 0x11, 0x64, &(0x7f0000000080)=0x4, 0x4) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r5 = userfaultfd(0x80801) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x224}) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) ioctl$UFFDIO_WRITEPROTECT(r5, 0xc018aa06, &(0x7f0000000140)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) r6 = syz_open_procfs$pagemap(0x0, &(0x7f0000000000)) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_SERVICE(r7, &(0x7f0000000600)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000500)={0xc0, r8, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x10000}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7fff}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x7}]}, @IPVS_CMD_ATTR_SERVICE={0x44, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast1}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3c}]}, @IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x87}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x3, 0xc}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x1d}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x28, 0x2}}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wrr\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}]}, 0xc0}, 0x1, 0x0, 0x0, 0xbb6fb4d32aadc6e0}, 0x40000) ioctl$UFFDIO_WRITEPROTECT(r5, 0xc018aa06, &(0x7f0000000040)={{&(0x7f00004e6000/0x2000)=nil, 0x2000}, 0x2}) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$PAGEMAP_SCAN(r6, 0xc0606610, &(0x7f0000000100)={0x60, 0x0, &(0x7f00001c9000/0x3000)=nil, &(0x7f0000f34000/0x3000)=nil, 0x3, 0x0, 0x0, 0x237, 0x18, 0x2a, 0xb0, 0x52}) 43.407842972s ago: executing program 9 (id=900): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x2000000015, 0x80005, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x15, 0x17, &(0x7f0000000100)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x85, 0x0, 0x0, 0x8}, {0x4, 0x1, 0xb, 0x9, 0x0, 0x8}}, {{0x6, 0x0, 0xb, 0xa}, {0xf}}, [@printk={@lu, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0x2, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {}, {0x15}}], {{0x7, 0x1, 0x3, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000080)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) accept4$inet(r1, 0x0, 0x0, 0x800) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfc, 0x2ffffffff}, 0xc) r6 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$RTC_AIE_ON(r6, 0x7001) r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r7) sendmsg$IEEE802154_ASSOCIATE_RESP(r7, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x420}, 0xc, &(0x7f0000000180)={&(0x7f00000002c0)={0x2c, r8, 0x200, 0x70bd2e, 0x25dfdbfd, {}, [@IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xfffe}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa1}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x40010) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000300)=0x8df, 0x4) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r6, 0x89f2, &(0x7f0000000400)={'ip6gre0\x00', &(0x7f0000000380)={'syztnl0\x00', 0x0, 0x2f, 0xfe, 0x5, 0xc5, 0x14, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x10, 0x80, 0x3, 0x999}}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r6, 0xc018937b, &(0x7f0000000440)={{0x1, 0x1, 0x18, r5, {0xee01, 0xffffffffffffffff}}, './file0\x00'}) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000480)={{{@in=@multicast2, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@empty}}, &(0x7f0000000580)=0xe8) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000002100)={&(0x7f00000005c0)=@ipv4_newrule={0x5c, 0x20, 0x1, 0x70bd2d, 0x25dfdbfb, {0x2, 0x0, 0x14, 0xe9, 0x8, 0x0, 0x0, 0x6, 0xb}, [@FRA_FLOW={0x8, 0xb, 0x6}, @FRA_GENERIC_POLICY=@FRA_UID_RANGE={0xc, 0x14, {r9, 0xee00}}, @FRA_GENERIC_POLICY=@FRA_IP_PROTO={0x5, 0x16, 0x3b}, @FRA_FLOW={0x8, 0xb, 0x2}, @FRA_GENERIC_POLICY=@FRA_FWMARK={0x8}, @FRA_DST={0x8, 0x1, @rand_addr=0x64010102}, @FRA_GENERIC_POLICY=@FRA_UID_RANGE={0xc, 0x14, {0xee01, r10}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000081}, 0x24008000) 42.42831605s ago: executing program 9 (id=903): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000001c0), 0x418d80, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143441, 0x98) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000000), 0x1, 0x4fb, &(0x7f0000000540)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x0, 0x0) ioctl$EXT4_IOC_GETFSUUID(r1, 0x8008662c, &(0x7f0000000040)) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000080)={0xc, 0x0, 0x0}) ioctl$IOMMU_VFIO_IOAS$SET(r0, 0x3b88, &(0x7f00000000c0)={0xc, r2}) ioctl$IOMMU_VFIO_IOAS$GET(r0, 0x3b88, &(0x7f0000000100)={0xc}) ioctl$IOMMU_VFIO_IOAS$CLEAR(r0, 0x3b88, &(0x7f0000000140)={0xc}) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r0, 0x3b82, &(0x7f0000000180)={0x20, r2, 0x0, 0x0, &(0x7f00000001c0)}) ioctl$IOMMU_VFIO_IOAS$SET(r0, 0x3b88, &(0x7f0000000200)={0xc, r2}) ioctl$IOMMU_VFIO_GET_API_VERSION(r0, 0x3b64) ioctl$IOMMU_VFIO_SET_IOMMU(r0, 0x3b66, 0x3) ioctl$IOMMU_VFIO_CHECK_EXTENSION(r0, 0x3b65, 0x9) ioctl$IOMMU_VFIO_IOMMU_GET_INFO(r0, 0x3b70, &(0x7f0000000240)={0x70, 0x0, 0x0, 0x0, {}, {{}, 0x0, 0x0, [{}]}}) ioctl$IOMMU_VFIO_IOMMU_MAP_DMA(r0, 0x3b71, &(0x7f0000000280)={0x20, 0x0, &(0x7f00000002c0)='LLLLLLLLLLLLLLLLLLLLLLLLLLLL', 0x1c, 0x1c}) ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(r0, 0x3b72, &(0x7f0000000300)={0x18, 0x0, 0x1c, 0x1c}) ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f0000000340)={0x18, r2}) syz_clone(0x4a00000, &(0x7f00000003c0)="268b036af3b2cdd9765da56bd0279d9c6cf6e9f21105fcfcae0af0d6705a0b4f930c21c9d18019e7e5db9171fdc45af496a7c5a430628dd36b53e708e68448dce7aec65a96914f5a1691a9c37abf4c7adfed4db5ad1982f6feacfc7d7843ddc66923ae8c3581845d7fc159e10197597ad8bd6389788257d41628c486f117369d6a6f3f041a91b67c55d987fe0de111228c87ab14a05ad015ec4a3d0dc05b80bdc3c70b647b48e2faff4af9d88a93c1", 0xaf, &(0x7f0000000480), &(0x7f00000004c0), &(0x7f00000005c0)="dc298aa3571bfe383a3dbd0d7c16ef94e36c60d9dccc77e23195075bda94136c0ddcfd2cb0a9bcfd7d0aebf25b6cda99a81ddb70ca329d942b028ed33ddd6446ebf9abf1a2cf71aa967574d8ed6936e88b1357ab3ecf376f6fc573292c22a203534f441b292ff43e9b5145effc639bc6265e450322d2bf5d9d8e8136bbf8bf414b1ba30a735af770e75e4876636ad134588cb3") ioctl$IOMMU_DESTROY$ioas(r0, 0x3b80, &(0x7f0000000380)={0x8, r2}) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_COPY(0xffffffffffffffff, 0x3b83, &(0x7f0000000040)={0x28, 0x7, r2, r3, 0x0, 0x1, 0x8000000000000001}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0xa0081, 0x0) ioctl$FBIOPUT_CON2FBMAP(r4, 0x4610, &(0x7f0000000080)={0x5}) mount$bind(0x0, &(0x7f0000000540)='./file0\x00', &(0x7f0000000580), 0x880, 0x0) 42.088777196s ago: executing program 9 (id=908): sched_setscheduler(0x0, 0x1, 0x0) request_key(&(0x7f0000000040)='id_legacy\x00', 0x0, &(0x7f00000000c0)='\x00', 0xfffffffffffffff9) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) bind$inet6(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect$inet(r0, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000f9ffffff00000000fdfffdff850000002700000018010000646c6c2500000000002020207b1af8ff00000000bfa1000000000c0007010000f8ffffffb702000008000000b703000000004000850000007000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8}, 0x94) 41.601903387s ago: executing program 9 (id=915): r0 = openat(0xffffffffffffff9c, 0x0, 0x141442, 0x40) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x808410, &(0x7f0000000080)=ANY=[@ANYBLOB="666c7573682c757466383d312c6e6f6e756d7461696c3d302c726f6469722c757466383d312c6e6f6e756d7461696c3d302c73686f72746e616d653d6c6f7765722c6e6f6e756d7461696c3d302c756e695f786c6174653d302c757466383d312c756e695f786c6174653d302c757466383d312c756e695f786c6174653d312c6e6f6e756d7461696c3d302c646f733178666c6f7070792c726f6469722c756e695f786c6174653d312c71756965742c00c8702cc583177e7c953d2b6c6e43b73645f2acb80cc28520c3cd61e54370886d9caa3a1ec165ec59309153922716cb0f95f435e2af"], 0x1, 0x2fc, &(0x7f0000000180)="$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") clock_gettime(0x0, 0x0) recvmmsg(r0, &(0x7f0000002500), 0x0, 0x2141, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000a80)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0xe, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x8}, [@generic={0x91, 0x1, 0x1, 0x8e}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) 41.361325853s ago: executing program 37 (id=915): r0 = openat(0xffffffffffffff9c, 0x0, 0x141442, 0x40) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x808410, &(0x7f0000000080)=ANY=[@ANYBLOB="666c7573682c757466383d312c6e6f6e756d7461696c3d302c726f6469722c757466383d312c6e6f6e756d7461696c3d302c73686f72746e616d653d6c6f7765722c6e6f6e756d7461696c3d302c756e695f786c6174653d302c757466383d312c756e695f786c6174653d302c757466383d312c756e695f786c6174653d312c6e6f6e756d7461696c3d302c646f733178666c6f7070792c726f6469722c756e695f786c6174653d312c71756965742c00c8702cc583177e7c953d2b6c6e43b73645f2acb80cc28520c3cd61e54370886d9caa3a1ec165ec59309153922716cb0f95f435e2af"], 0x1, 0x2fc, &(0x7f0000000180)="$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") clock_gettime(0x0, 0x0) recvmmsg(r0, &(0x7f0000002500), 0x0, 0x2141, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000a80)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0xe, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x8}, [@generic={0x91, 0x1, 0x1, 0x8e}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) 2.017519419s ago: executing program 3 (id=1324): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) close(r0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r1, 0x84, 0x80, &(0x7f0000000000)="1400000009000000", 0x8) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r0, 0x84, 0x5, &(0x7f00000003c0)={0x0, @in6={{0xa, 0x4e23, 0x1000000d, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xe91}}}, 0x84) 1.900686169s ago: executing program 3 (id=1327): r0 = socket$inet6_udp(0xa, 0x2, 0x0) mmap(&(0x7f0000001000/0xb000)=nil, 0xb000, 0x2, 0x12, r0, 0x852ac000) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000000)=0x86, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000180)={0xa, 0x4e1f, 0xfffffffe, @empty, 0x800}, 0x1c) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f00000001c0)=0xffff, 0x4) setsockopt$inet6_int(r0, 0x29, 0x8, &(0x7f0000000080)=0xb, 0x4) recvmmsg(r0, &(0x7f0000000140)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000fc0)=""/4110, 0x100e}, 0x7ffffffe}], 0x1, 0x40002000, 0x0) 1.748484395s ago: executing program 3 (id=1332): setns(0xc9, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x400261f3, &(0x7f0000000000)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) 1.695757018s ago: executing program 7 (id=1334): bind$bt_hci(0xffffffffffffffff, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write(0xffffffffffffffff, &(0x7f0000000000)="21000000470010aaaaaaaaaa97030000000000000000000000000000000300"/76, 0x4d) 1.632065713s ago: executing program 3 (id=1335): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6(0xa, 0x3, 0xff) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000100)=@filter={'filter\x00', 0xe, 0x4, 0x340, 0xffffffff, 0x0, 0xd0, 0x1a0, 0xffffffff, 0xffffffff, 0x0, 0xd0, 0x2a0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@ipv6={@empty, @empty}, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0) connect$inet6(r0, &(0x7f00000004c0)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) sendto$inet6(r0, &(0x7f0000000300), 0x16, 0x3b00, 0x0, 0xfffffffffffffdfd) 1.623255438s ago: executing program 0 (id=1337): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'hsr0\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000100)={r1, 0x2, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x39}}, 0x10) timer_settime(0x0, 0x1, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x43d, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, r1, {}, {0x0, 0xfff1}, {0x0, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0xc015}, 0x0) close(0x3) 1.499997271s ago: executing program 7 (id=1338): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)={0x48, 0xb, 0x6, 0x801, 0x0, 0x0, {0x6, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @private0}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x88}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x20008040}, 0x20009084) 1.499067875s ago: executing program 3 (id=1340): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x4) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b) write(r0, &(0x7f0000000000)='8', 0x1) bpf$PROG_LOAD(0x5, 0x0, 0xa0) unshare(0x6a040000) write(r0, &(0x7f0000000000)='9', 0x1) bpf$PROG_LOAD(0x5, 0x0, 0xa0) unshare(0x6a040000) write(r0, &(0x7f0000000000)='1', 0x1) bpf$PROG_LOAD(0x5, 0x0, 0xa0) unshare(0x6a040000) write(r0, &(0x7f0000000000)='11', 0x2) bpf$PROG_LOAD(0x5, 0x0, 0xa0) unshare(0x6a040000) write(r0, &(0x7f0000000000)='12', 0x2) bpf$PROG_LOAD(0x5, 0x0, 0xa0) write(r0, &(0x7f0000000000)='13', 0x2) bpf$PROG_LOAD(0x5, 0x0, 0xa0) unshare(0x6a040000) write(r0, &(0x7f0000000000)='14', 0x2) bpf$PROG_LOAD(0x5, 0x0, 0xa0) unshare(0x6a040000) write(r0, &(0x7f0000000000)='15', 0x2) bpf$PROG_LOAD(0x5, 0x0, 0xa0) unshare(0x6a040000) write(r0, &(0x7f0000000000)='16', 0x2) bpf$PROG_LOAD(0x5, 0x0, 0xa0) unshare(0x6a040000) write(r0, &(0x7f0000000000)='17', 0x2) bpf$PROG_LOAD(0x5, 0x0, 0xa0) write(r0, &(0x7f0000000000)='18', 0x2) bpf$PROG_LOAD(0x5, 0x0, 0xa0) unshare(0x6a040000) write(r0, &(0x7f0000000000)='19', 0x2) bpf$PROG_LOAD(0x5, 0x0, 0xa0) unshare(0x6a040000) 1.44020086s ago: executing program 6 (id=1341): capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7}) r0 = shmget(0x2, 0x2000, 0x200, &(0x7f0000ffd000/0x2000)=nil) shmctl$SHM_LOCK(r0, 0xb) 1.424715015s ago: executing program 7 (id=1342): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/block/md0/md/array_state\x00', 0x1, 0x0) write(r0, &(0x7f0000000540)='readonly', 0x8) 1.248035577s ago: executing program 7 (id=1344): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newtfilter={0x34, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x1}, {0xfff3, 0xffff}, {0x300, 0x3}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}}, 0x0) 1.068656852s ago: executing program 7 (id=1346): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) lsetxattr$trusted_overlay_upper(0x0, &(0x7f00000000c0), 0x0, 0xfe37, 0x0) ptrace(0x10, r0) ptrace$setregs(0xd, r0, 0x20000000002, &(0x7f0000000040)) ptrace$getregset(0x4204, r0, 0x201, &(0x7f0000000100)={0x0}) 1.015499674s ago: executing program 0 (id=1347): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="4a00ffff11003ee0b4fdddd685986a49e00588f1ba6f01"], 0x17) r1 = syz_init_net_socket$bt_hci(0x1f, 0x5, 0x8) bind(r1, &(0x7f0000000300)=@generic={0x1f, "0000000000000100"}, 0xa) listen(r1, 0x1) 968.450142ms ago: executing program 6 (id=1348): syz_mount_image$fuse(0x0, &(0x7f0000000200)='./proc\x00', 0x4, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000000c0)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/sys/net/ipv6/conf/all/forwarding\x00', 0x1, 0x0) write(r0, &(0x7f0000000180)='1', 0x1) sendmsg$nl_route(r0, 0x0, 0x4000000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./proc/sys/net/ipv6/conf/all/forwarding\x00', 0x1, 0x5b) write(r1, &(0x7f00000001c0)='0x0', 0x3) 855.321393ms ago: executing program 8 (id=1349): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./debug\x00', &(0x7f0000000040)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./debug/dynamic_debug/control\x00', 0x2, 0x0) write(r0, &(0x7f0000000100)='+p', 0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$sock(r1, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000a00)="54000000100001040000000000000000000000000000000000000000000000000f00030073797a6b616c6c6572300000240012000a00010076786c616e00000014000200080001007b000000080002007f000001", 0x54}], 0x1}, 0x0) r2 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'syzkaller0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000600)=@bridge_newneigh={0x28, 0x1d, 0xc01, 0x0, 0x0, {0x7, 0x0, 0x0, r3, 0x80, 0x32}, [@NDA_LLADDR={0xa, 0x2, @random}]}, 0x28}}, 0x0) 765.987462ms ago: executing program 0 (id=1350): r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f0000000000)=0x2, 0x4) bind$rds(r0, &(0x7f0000000080)={0x2, 0x4e22, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000000100)={&(0x7f00000000c0)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x5, 0x0}}, 0x10, &(0x7f0000001540)=[{&(0x7f0000000300)=""/98, 0x62}], 0x1, &(0x7f0000000180)=[@zcopy_cookie={0x18, 0x114, 0xc, 0x1}, @zcopy_cookie={0x18, 0x114, 0xc, 0x2}], 0x30}, 0x4000000) 676.663214ms ago: executing program 7 (id=1351): r0 = socket$inet_sctp(0x2, 0x5, 0x84) connect(r0, &(0x7f0000000400)=@in={0x2, 0x1122, @loopback}, 0x10) 599.971ms ago: executing program 0 (id=1352): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x9) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) setsockopt$inet_pktinfo(r1, 0x0, 0x8, 0x0, 0x0) 487.936759ms ago: executing program 8 (id=1353): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=@ipv6_deladdrlabel={0x38, 0x49, 0x1, 0x0, 0x0, {}, [@IFAL_ADDRESS={0x14, 0x1, @remote}, @IFAL_LABEL={0x8}]}, 0x38}}, 0x0) 462.023517ms ago: executing program 0 (id=1354): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) close(r0) socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f00000001c0), &(0x7f00000002c0)=0x8) 461.399457ms ago: executing program 6 (id=1355): mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/block/md0/md/dev-ram0/state\x00', 0x1, 0x0) write(r0, &(0x7f0000000480)='rxter', 0x5) 367.395128ms ago: executing program 8 (id=1356): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6(0xa, 0x3, 0xff) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000100)=@filter={'filter\x00', 0xe, 0x4, 0x340, 0xffffffff, 0x0, 0xd0, 0x1a0, 0xffffffff, 0xffffffff, 0x0, 0xd0, 0x2a0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@ipv6={@empty, @empty}, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0) connect$inet6(r0, &(0x7f00000004c0)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) sendto$inet6(r0, &(0x7f0000000300), 0x16, 0x3b00, 0x0, 0xfffffffffffffdfd) 284.580087ms ago: executing program 0 (id=1357): r0 = socket$inet6(0xa, 0x3, 0xff) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000100)=@filter={'filter\x00', 0xe, 0x4, 0x370, 0xffffffff, 0x0, 0xd0, 0x1a0, 0xffffffff, 0xffffffff, 0x0, 0xd0, 0x2a0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@ipv6={@empty, @empty}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x2, 0x1, 0x1234}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback, 0x7}, 0x1c) 284.44464ms ago: executing program 6 (id=1358): r0 = syz_open_dev$video4linux(&(0x7f0000000080), 0x4000000000000000, 0x20200) ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0585605, &(0x7f0000000000)={0x0, 0x0, {0x401, 0xfffffffc, 0x3001, 0x0, 0x1, 0xf30, 0x2, 0x1}}) 246.678847ms ago: executing program 8 (id=1359): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x54, 0x10, 0x1, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x2b28d, 0x11a21}, [@IFLA_IFNAME={0x14, 0x3, 'netdevsim0\x00'}, @IFLA_VFINFO_LIST={0x20, 0x16, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN_LIST={0x18, 0xc, 0x0, 0x1, [{0x14, 0x1, {0xfffff800, 0x861, 0x4, 0x8100}}]}]}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x8041}, 0x48880) 185.045735ms ago: executing program 6 (id=1360): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, 0x0, 0x0) write(r0, &(0x7f0000000000)="21000000470010aaaaaaaaaa97030000000000000000000000000000000300"/76, 0x4d) 108.033291ms ago: executing program 8 (id=1361): mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/block/md0/md/array_state\x00', 0x1, 0x0) write(r0, &(0x7f0000000540)='readonly', 0x8) 87.74329ms ago: executing program 6 (id=1362): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x8080, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0x605, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x1, 0x0, 0x1}}]}}]}, 0x44}}, 0x4084) sendmsg$nl_route_sched(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=@newqdisc={0x170, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x1000, 0x0, 0x64, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1}}, @TCA_GRED_STAB={0x104}]}}]}, 0x170}}, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000100)={'syzkaller0\x00', 0x1}) r4 = socket$inet(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000180)='syzkaller0\x00', 0xb) read(r1, &(0x7f0000000000)=""/41, 0x29) sendto$inet(r4, 0x0, 0x0, 0x0, &(0x7f0000000900)={0x2, 0x4e20, @loopback}, 0x10) 559.664µs ago: executing program 3 (id=1363): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) syz_open_dev$dri(&(0x7f00000000c0), 0x9, 0x4004c0) mount(0x0, &(0x7f0000000000)='./debug\x00', &(0x7f0000000040)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./debug/dynamic_debug/control\x00', 0x2, 0x0) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000480), r0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000600)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000580)={&(0x7f00000004c0)={0x2c, r1, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x6, 0xfc}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0x35}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0xca}]}, 0x2c}, 0x1, 0x0, 0x0, 0x48000}, 0x8c5) write(r0, &(0x7f0000000100)='+p', 0x2) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[], 0xb0}}, 0x0) sendmsg$NFT_MSG_GETOBJ(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)={0x34, 0x13, 0xa, 0x3, 0x0, 0x0, {0x5}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x6}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x34}}, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000080)={0x1f, 0xffff, 0x2}, 0x6) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f0000000200)=@usbdevfs_connect) syz_emit_vhci(&(0x7f00000005c0)=ANY=[@ANYBLOB="0417"], 0x9) 0s ago: executing program 8 (id=1373): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r3 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000100)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000200)={'wlan0\x00', 0x1}) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r4 = getpid() sched_setaffinity(r4, 0x0, 0x0) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x3c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x1}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x1}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x4}]}, 0x3c}}, 0x0) sendmsg$NL80211_CMD_DEL_INTERFACE(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) kernel console output (not intermixed with test programs): 107.079850][ T1176] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.079864][ T1176] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.093688][ T30] audit: type=1326 audit(107.080:257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6977 comm="syz.0.485" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=180 compat=0 ip=0xffff89d79368 code=0x7ffc0000 [ 107.093707][ T30] audit: type=1326 audit(107.080:258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6977 comm="syz.0.485" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff89d79368 code=0x7ffc0000 [ 107.093722][ T30] audit: type=1326 audit(107.080:259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6977 comm="syz.0.485" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff89d79368 code=0x7ffc0000 [ 107.097805][ T30] audit: type=1326 audit(107.080:260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6977 comm="syz.0.485" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=211 compat=0 ip=0xffff89d79368 code=0x7ffc0000 [ 107.097826][ T30] audit: type=1326 audit(107.080:261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6977 comm="syz.0.485" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff89d79368 code=0x7ffc0000 [ 107.097842][ T30] audit: type=1326 audit(107.080:262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6977 comm="syz.0.485" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff89d79368 code=0x7ffc0000 [ 107.098459][ T30] audit: type=1326 audit(107.080:263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6977 comm="syz.0.485" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=261 compat=0 ip=0xffff89d79368 code=0x7ffc0000 [ 107.098476][ T30] audit: type=1326 audit(107.080:264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6977 comm="syz.0.485" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff89d79368 code=0x7ffc0000 [ 107.403959][ T6301] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.403973][ T6301] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.452884][ T6313] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.452899][ T6313] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.529904][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 107.690490][ T4713] Bluetooth: hci1: command 0x0c1a tx timeout [ 107.725154][ T6313] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.725166][ T6313] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.751713][ T4717] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 107.800718][ T6981] netlink: 'syz.0.485': attribute type 4 has an invalid length. [ 107.959647][ T7000] loop6: detected capacity change from 0 to 256 [ 107.961499][ T7000] vfat: Unknown parameter 'uma' [ 107.967255][ T7002] loop2: detected capacity change from 0 to 128 [ 108.074591][ T7007] netlink: 28 bytes leftover after parsing attributes in process `syz.7.441'. [ 108.075610][ T7007] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.075918][ T7007] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.490202][ T4720] Bluetooth: hci2: command 0x0c1a tx timeout [ 108.490244][ T4720] Bluetooth: hci5: command 0x0c1a tx timeout [ 108.490266][ T4720] Bluetooth: hci3: command 0x0c1a tx timeout [ 108.928926][ T7011] binder: 7010:7011 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 108.960863][ T7012] binder: 7010:7012 Acquire 1 refcount change on invalid ref 0 ret -22 [ 108.962966][ T7019] binder: 7010:7019 got transaction to invalid handle, 1 [ 108.962983][ T7019] binder: 7010:7019 cannot find target node [ 108.963000][ T7019] binder: 7010:7019 transaction async to 0:0 failed 4/29201/-22, code 0 size 72-24 line 3252 [ 109.135418][ T10] binder: undelivered TRANSACTION_ERROR: 29201 [ 110.144515][ T7058] loop6: detected capacity change from 0 to 512 [ 111.090860][ T4713] Bluetooth: hci5: command 0x0c1a tx timeout [ 111.090894][ T4713] Bluetooth: hci2: command 0x0c1a tx timeout [ 111.126941][ T7058] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 111.137143][ T7058] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c01c, mo2=0082] [ 111.137194][ T7058] System zones: 1-12 [ 111.138672][ T7058] EXT4-fs (loop6): 1 truncate cleaned up [ 111.139124][ T7058] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 112.568767][ T7083] EXT4-fs warning (device loop6): ext4_expand_extra_isize_ea:2863: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 112.765881][ T30] kauditd_printk_skb: 17 callbacks suppressed [ 112.765895][ T30] audit: type=1326 audit(112.750:282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7085 comm="syz.7.511" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffae579368 code=0x7ffc0000 [ 112.765917][ T30] audit: type=1326 audit(112.750:283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7085 comm="syz.7.511" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffae579368 code=0x7ffc0000 [ 112.766102][ T30] audit: type=1326 audit(112.750:284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7085 comm="syz.7.511" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffae579368 code=0x7ffc0000 [ 112.766118][ T30] audit: type=1326 audit(112.750:285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7085 comm="syz.7.511" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffae579368 code=0x7ffc0000 [ 112.797883][ T30] audit: type=1326 audit(112.780:286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7085 comm="syz.7.511" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=167 compat=0 ip=0xffffae579368 code=0x7ffc0000 [ 112.797908][ T30] audit: type=1326 audit(112.780:287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7085 comm="syz.7.511" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffae579368 code=0x7ffc0000 [ 112.797924][ T30] audit: type=1326 audit(112.780:288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7085 comm="syz.7.511" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffae579368 code=0x7ffc0000 [ 112.798926][ T30] audit: type=1326 audit(112.780:289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7085 comm="syz.7.511" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffae579368 code=0x7ffc0000 [ 112.798948][ T30] audit: type=1326 audit(112.780:290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7085 comm="syz.7.511" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffae579368 code=0x7ffc0000 [ 112.799060][ T7089] nvme nvme0: using deprecated NVME_IOCTL_IO_CMD ioctl on the char device! [ 112.799124][ T30] audit: type=1326 audit(112.780:291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7085 comm="syz.7.511" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=29 compat=0 ip=0xffffae579368 code=0x7ffc0000 [ 113.131940][ T4720] Bluetooth: hci2: command 0x0c1a tx timeout [ 113.131970][ T4720] Bluetooth: hci5: command 0x0c1a tx timeout [ 113.138057][ T7105] loop8: detected capacity change from 0 to 128 [ 113.414747][ T7111] bond2: invalid ARP target 0.0.0.0 specified for addition [ 113.414766][ T7111] bond2: option arp_ip_target: invalid value (0) [ 113.419656][ T7111] bond2 (unregistering): Released all slaves [ 114.953737][ T6523] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.972900][ T7135] loop8: detected capacity change from 0 to 256 [ 115.085240][ T7141] FAULT_INJECTION: forcing a failure. [ 115.085240][ T7141] name failslab, interval 1, probability 0, space 0, times 0 [ 115.085262][ T7141] CPU: 0 UID: 0 PID: 7141 Comm: syz.6.529 Tainted: G L syzkaller #0 PREEMPT [ 115.085276][ T7141] Tainted: [L]=SOFTLOCKUP [ 115.085280][ T7141] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 115.085285][ T7141] Call trace: [ 115.085288][ T7141] show_stack+0x2c/0x3c (C) [ 115.085309][ T7141] __dump_stack+0x30/0x40 [ 115.085322][ T7141] dump_stack_lvl+0xd8/0x12c [ 115.085334][ T7141] dump_stack+0x1c/0x28 [ 115.085345][ T7141] should_fail_ex+0x41c/0x590 [ 115.085360][ T7141] should_failslab+0xc4/0x120 [ 115.085373][ T7141] kmem_cache_alloc_lru_noprof+0x98/0x5d8 [ 115.085382][ T7141] proc_alloc_inode+0x2c/0xb8 [ 115.085396][ T7141] alloc_inode+0x68/0x198 [ 115.085407][ T7141] new_inode+0x20/0x50 [ 115.085418][ T7141] proc_pid_make_inode+0x30/0x148 [ 115.085426][ T7141] proc_map_files_instantiate+0x64/0x154 [ 115.085436][ T7141] proc_fill_cache+0x234/0x2f0 [ 115.085445][ T7141] proc_map_files_readdir+0x664/0x880 [ 115.085455][ T7141] iterate_dir+0x290/0x458 [ 115.085462][ T7141] __arm64_sys_getdents64+0x124/0x310 [ 115.085470][ T7141] invoke_syscall+0x98/0x244 [ 115.085483][ T7141] el0_svc_common+0x19c/0x23c [ 115.085494][ T7141] do_el0_svc+0x4c/0x5c [ 115.085505][ T7141] el0_svc+0x64/0x260 [ 115.085517][ T7141] el0t_64_sync_handler+0x44/0x104 [ 115.085527][ T7141] el0t_64_sync+0x198/0x19c [ 115.183768][ T7151] loop7: detected capacity change from 0 to 256 [ 115.324880][ T7151] overlayfs: failed to resolve './cgroup': -2 [ 115.410583][ T7164] loop6: detected capacity change from 0 to 128 [ 115.412964][ T7159] loop8: detected capacity change from 0 to 8192 [ 115.890469][ T7185] overlayfs: failed to resolve './bus': -2 [ 115.966144][ T7181] tipc: Invalid UDP bearer configuration [ 115.966165][ T7181] tipc: Enabling of bearer rejected, failed to enable media [ 116.107200][ T7198] fuse: Bad value for 'fd' [ 116.133909][ T7203] loop2: detected capacity change from 0 to 512 [ 116.157809][ T7203] EXT4-fs error (device loop2): ext4_orphan_get:1403: inode #15: comm syz.2.545: iget: bad i_size value: 38620345925642 [ 116.157826][ T7203] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 116.158223][ T7203] EXT4-fs error (device loop2): ext4_orphan_get:1408: comm syz.2.545: couldn't read orphan inode 15 (err -117) [ 116.158243][ T7203] loop2: lost filesystem error report for type 5 error -117 [ 116.159732][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 116.159743][ C0] EXT4-fs (loop2): initial error at time 116: ext4_orphan_get:1403: inode 15 [ 116.159758][ C0] EXT4-fs (loop2): last error at time 116: ext4_orphan_get:1403: inode 15 [ 116.181312][ T7203] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 116.294661][ T7215] binder: 7212:7215 BC_ACQUIRE_DONE uffffffffffffffff no match [ 116.294685][ T7215] binder: 7212:7215 BC_FREE_BUFFER no match for buffer at offset 0 [ 116.294698][ T7215] binder: 7212:7215 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 116.294710][ T7215] binder: 7212:7215 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 116.294719][ T7215] binder: 7215 RLIMIT_NICE not set [ 116.416842][ T7221] use of bytesused == 0 is deprecated and will be removed in the future, [ 116.416852][ T7221] use the actual size instead. [ 116.969899][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 117.377396][ T7227] syz_tun: entered allmulticast mode [ 117.489090][ T7219] syz_tun: left allmulticast mode [ 117.533464][ T4717] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.837052][ T7243] loop8: detected capacity change from 0 to 2048 [ 117.864051][ T7243] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 117.885772][ T7243] overlayfs: failed to resolve './bus': -2 [ 117.889586][ T7243] EXT4-fs error (device loop8): ext4_lookup:1787: inode #14: comm syz.8.556: invalid fast symlink length 39 [ 117.938807][ T7246] fuse: Bad value for 'fd' [ 118.096919][ T6705] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.367270][ T7261] IPVS: set_ctl: invalid protocol: 43 0.0.0.0:20003 [ 118.376944][ T7261] loop8: detected capacity change from 0 to 128 [ 118.377378][ T7261] FAT-fs (loop8): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 118.386416][ T7261] FAT-fs (loop8): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 118.467188][ T7268] ip6t_rt: `--rt-type 0' required before `--rt-0-*' [ 118.494493][ T7268] SET target dimension over the limit! [ 118.523531][ T7279] SET target dimension over the limit! [ 118.624322][ T7290] netlink: 12 bytes leftover after parsing attributes in process `syz.0.565'. [ 118.625440][ T7290] netlink: 12 bytes leftover after parsing attributes in process `syz.0.565'. [ 118.627237][ T7290] netlink: 12 bytes leftover after parsing attributes in process `syz.0.565'. [ 118.627595][ T7290] netlink: 12 bytes leftover after parsing attributes in process `syz.0.565'. [ 118.628914][ T7290] netlink: 12 bytes leftover after parsing attributes in process `syz.0.565'. [ 118.629077][ T7290] netlink: 12 bytes leftover after parsing attributes in process `syz.0.565'. [ 118.647398][ T7290] netlink: 12 bytes leftover after parsing attributes in process `syz.0.565'. [ 118.648877][ T7290] netlink: 12 bytes leftover after parsing attributes in process `syz.0.565'. [ 118.659255][ T7290] netlink: 12 bytes leftover after parsing attributes in process `syz.0.565'. [ 118.662043][ T7290] netlink: 12 bytes leftover after parsing attributes in process `syz.0.565'. [ 118.856774][ T7302] netlink: 'syz.2.566': attribute type 10 has an invalid length. [ 118.867077][ T7302] team0: Device vxcan1 is of different type [ 119.102998][ T7316] overlayfs: failed to resolve './bus': -2 [ 119.127185][ T7313] loop2: detected capacity change from 0 to 512 [ 119.229417][ T7314] could not allocate digest TFM handle [ 119.289026][ T7323] netlink: 'syz.8.571': attribute type 1 has an invalid length. [ 119.326209][ T7323] bond1: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 119.337210][ T7323] bond1 (unregistering): Released all slaves [ 119.425007][ T7323] bridge1: entered promiscuous mode [ 119.499939][ T7335] Injecting memory failure for pfn 0x21910f at process virtual address 0x20ff9000 [ 119.502059][ T7335] Memory failure: 0x21910f: unhandlable page. [ 119.502069][ T7335] Memory failure: 0x21910f: recovery action for reserved kernel page: Ignored [ 119.931357][ T7359] loop8: detected capacity change from 0 to 512 [ 119.944651][ T7359] EXT4-fs: Ignoring removed nobh option [ 119.965025][ T7359] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 119.983526][ T7372] loop2: detected capacity change from 0 to 128 [ 120.078266][ T7359] EXT4-fs error (device loop8): ext4_find_dest_de:2052: inode #2: block 3: comm syz.8.581: bad entry in directory: inode out of bounds - offset=92, inode=117440528, rec_len=16, size=2048 fake=0 [ 120.295151][ T7378] netlink: 'syz.0.583': attribute type 2 has an invalid length. [ 121.567455][ T6705] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.635139][ T7398] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 121.635324][ T7398] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 121.852721][ T7406] veth1_macvtap: left promiscuous mode [ 122.268818][ T7438] Injecting memory failure for pfn 0x120dba at process virtual address 0x20000000 [ 122.277027][ T7437] loop8: detected capacity change from 0 to 2048 [ 122.289314][ T7438] Memory failure: 0x120dba: Sending SIGBUS to syz.7.594:7438 due to hardware memory corruption [ 122.289379][ T7438] Memory failure: 0x120dba: recovery action for dirty LRU page: Recovered [ 122.289402][ T7438] Injecting memory failure for pfn 0x21910f at process virtual address 0x20001000 [ 122.289485][ T7438] Memory failure: 0x21910f: Sending SIGBUS to syz.7.594:7438 due to hardware memory corruption [ 122.289505][ T7438] Memory failure: 0x21910f: recovery action for already poisoned page: Failed [ 122.312507][ T7437] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 122.324080][ T7437] overlayfs: failed to resolve './bus': -2 [ 122.332536][ T7437] EXT4-fs error (device loop8): ext4_lookup:1787: inode #14: comm syz.8.595: invalid fast symlink length 39 [ 122.804161][ T6705] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 123.854079][ T7479] bridge0: port 3(ip6gretap0) entered blocking state [ 123.854115][ T7479] bridge0: port 3(ip6gretap0) entered disabled state [ 123.854190][ T7479] ip6gretap0: entered allmulticast mode [ 123.854979][ T7479] ip6gretap0: entered promiscuous mode [ 123.855240][ T7479] bridge0: port 3(ip6gretap0) entered blocking state [ 123.855283][ T7479] bridge0: port 3(ip6gretap0) entered forwarding state [ 123.925256][ T7487] loop2: detected capacity change from 0 to 256 [ 124.294386][ T7501] loop2: detected capacity change from 0 to 256 [ 124.328305][ T7498] faux_driver vgem: [drm] Unknown color mode 7; guessing buffer size. [ 124.512998][ T7508] loop8: detected capacity change from 0 to 128 [ 124.866748][ T7521] input: syz0 as /devices/virtual/input/input6 [ 125.465647][ T7539] __nla_validate_parse: 11 callbacks suppressed [ 125.465730][ T7539] netlink: 36 bytes leftover after parsing attributes in process `syz.8.619'. [ 125.942930][ T1590] ieee802154 phy0 wpan0: encryption failed: -22 [ 125.942960][ T1590] ieee802154 phy1 wpan1: encryption failed: -22 [ 126.436159][ T7571] ptrace attach of "ci-upstream-gce-arm64/syz-executor exec"[6523] was attempted by ""[7571] [ 126.452168][ T7580] loop2: detected capacity change from 0 to 256 [ 126.864178][ T30] kauditd_printk_skb: 24 callbacks suppressed [ 126.864191][ T30] audit: type=1326 audit(126.850:316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7583 comm="syz.0.630" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff89d79368 code=0x0 [ 127.052350][ T7602] loop6: detected capacity change from 0 to 128 [ 127.579538][ T7620] usb usb8: usbfs: process 7620 (syz.2.637) did not claim interface 0 before use [ 129.804782][ T7638] team0: entered promiscuous mode [ 129.804800][ T7638] team_slave_0: entered promiscuous mode [ 129.804873][ T7638] team_slave_1: entered promiscuous mode [ 130.769585][ T7638] macvlan2: entered promiscuous mode [ 130.770157][ T7638] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 131.581596][ T4713] Bluetooth: hci2: Malformed LE Event: 0x0d [ 131.582020][ T4713] Bluetooth: hci2: Malformed LE Event: 0x0d [ 131.655163][ T7678] loop2: detected capacity change from 0 to 1024 [ 131.733566][ T7678] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 132.030339][ T7685] netlink: 24 bytes leftover after parsing attributes in process `syz.8.650'. [ 133.716590][ T7708] vivid-000: disconnect [ 134.700328][ T7683] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 135.458178][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 135.901611][ T7687] vivid-000: reconnect [ 136.012641][ T4717] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.104229][ T7720] netlink: 28 bytes leftover after parsing attributes in process `syz.0.657'. [ 136.294237][ T7738] FAULT_INJECTION: forcing a failure. [ 136.294237][ T7738] name fail_futex, interval 1, probability 0, space 0, times 0 [ 136.294260][ T7738] CPU: 0 UID: 0 PID: 7738 Comm: syz.0.663 Tainted: G L syzkaller #0 PREEMPT [ 136.294275][ T7738] Tainted: [L]=SOFTLOCKUP [ 136.294279][ T7738] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 136.294284][ T7738] Call trace: [ 136.294288][ T7738] show_stack+0x2c/0x3c (C) [ 136.294310][ T7738] __dump_stack+0x30/0x40 [ 136.294323][ T7738] dump_stack_lvl+0xd8/0x12c [ 136.294334][ T7738] dump_stack+0x1c/0x28 [ 136.294345][ T7738] should_fail_ex+0x41c/0x590 [ 136.294359][ T7738] should_fail+0x14/0x24 [ 136.294370][ T7738] get_futex_key+0x1ec/0x12b0 [ 136.294381][ T7738] futex_wake+0x10c/0x594 [ 136.294392][ T7738] do_futex+0x2c4/0x378 [ 136.294402][ T7738] __arm64_sys_futex+0x2e4/0x418 [ 136.294412][ T7738] invoke_syscall+0x98/0x244 [ 136.294424][ T7738] el0_svc_common+0xec/0x23c [ 136.294436][ T7738] do_el0_svc+0x4c/0x5c [ 136.294447][ T7738] el0_svc+0x64/0x260 [ 136.294458][ T7738] el0t_64_sync_handler+0x44/0x104 [ 136.294468][ T7738] el0t_64_sync+0x198/0x19c [ 136.407108][ T7747] lo: entered promiscuous mode [ 136.491801][ T7747] tunl0: entered promiscuous mode [ 136.502234][ T7747] gre0: entered promiscuous mode [ 136.513817][ T7747] gretap0: entered promiscuous mode [ 136.532119][ T7747] erspan0: entered promiscuous mode [ 136.533334][ T7747] ip_vti0: entered promiscuous mode [ 137.512955][ T7747] ip6_vti0: entered promiscuous mode [ 138.463666][ T7747] sit0: entered promiscuous mode [ 138.475288][ T7747] ip6tnl0: entered promiscuous mode [ 138.490772][ T7747] ip6gre0: entered promiscuous mode [ 139.474741][ T7747] syz_tun: entered promiscuous mode [ 139.487266][ T7747] ip6gretap0: entered promiscuous mode [ 139.496365][ T7747] bridge0: port 2(bridge_slave_1) entered disabled state [ 139.497042][ T7747] bridge0: port 1(bridge_slave_0) entered disabled state [ 139.504259][ T7747] bridge0: entered promiscuous mode [ 139.744965][ T7747] vcan0: entered promiscuous mode [ 139.761942][ T7747] bond0: entered promiscuous mode [ 139.761957][ T7747] bond_slave_0: entered promiscuous mode [ 139.762045][ T7747] bond_slave_1: entered promiscuous mode [ 139.955949][ T7747] dummy0: entered promiscuous mode [ 139.967707][ T30] audit: type=1326 audit(524428.127:317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7761 comm="syz.6.672" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa2d79368 code=0x7ffc0000 [ 139.968174][ T30] audit: type=1326 audit(524428.127:318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7761 comm="syz.6.672" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa2d79368 code=0x7ffc0000 [ 139.980082][ T7747] nlmon0: entered promiscuous mode [ 139.981065][ T7747] batadv0: entered promiscuous mode [ 139.985539][ T30] audit: type=1326 audit(524428.147:319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7761 comm="syz.6.672" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=167 compat=0 ip=0xffffa2d79368 code=0x7ffc0000 [ 139.985560][ T30] audit: type=1326 audit(524428.147:320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7761 comm="syz.6.672" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa2d79368 code=0x7ffc0000 [ 139.985581][ T30] audit: type=1326 audit(524428.147:321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7761 comm="syz.6.672" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa2d79368 code=0x7ffc0000 [ 140.006814][ T7747] vxcan0: entered promiscuous mode [ 140.010448][ T30] audit: type=1326 audit(524428.178:322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7761 comm="syz.6.672" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=277 compat=0 ip=0xffffa2d79368 code=0x7ffc0000 [ 140.011697][ T30] audit: type=1326 audit(524428.178:323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7761 comm="syz.6.672" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa2d79368 code=0x7ffc0000 [ 140.011918][ T7747] vxcan1: entered promiscuous mode [ 140.012382][ T30] audit: type=1326 audit(524428.178:324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7761 comm="syz.6.672" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa2d79368 code=0x7ffc0000 [ 140.015169][ T30] audit: type=1326 audit(524428.178:325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7761 comm="syz.6.672" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=56 compat=0 ip=0xffffa2d79368 code=0x7ffc0000 [ 140.015187][ T30] audit: type=1326 audit(524428.178:326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7761 comm="syz.6.672" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa2d79368 code=0x7ffc0000 [ 140.016071][ T7747] veth0: entered promiscuous mode [ 140.085624][ T7747] veth1: entered promiscuous mode [ 140.102838][ T7747] wg0: entered promiscuous mode [ 140.130335][ T7747] wg1: entered promiscuous mode [ 140.142817][ T7747] wg2: entered promiscuous mode [ 140.144143][ T7747] veth0_to_bridge: entered promiscuous mode [ 140.166862][ T7747] veth1_to_bridge: entered promiscuous mode [ 140.175321][ T7747] veth0_to_bond: entered promiscuous mode [ 140.187084][ T7747] veth1_to_bond: entered promiscuous mode [ 140.196801][ T7747] veth0_to_team: entered promiscuous mode [ 140.213959][ T7747] veth1_to_team: entered promiscuous mode [ 140.225007][ T7747] veth0_to_batadv: entered promiscuous mode [ 140.232155][ T7747] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 140.232197][ T7747] batadv_slave_0: entered promiscuous mode [ 140.245211][ T7747] veth1_to_batadv: entered promiscuous mode [ 140.258182][ T7747] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 140.258231][ T7747] batadv_slave_1: entered promiscuous mode [ 140.283247][ T7747] xfrm0: entered promiscuous mode [ 140.287225][ T7747] veth0_to_hsr: entered promiscuous mode [ 140.289199][ T7747] veth1_to_hsr: entered promiscuous mode [ 140.291409][ T7747] hsr0: entered promiscuous mode [ 140.304289][ T7747] veth1_virt_wifi: entered promiscuous mode [ 140.306839][ T7747] veth0_virt_wifi: entered promiscuous mode [ 140.317861][ T7747] virt_wifi0: entered promiscuous mode [ 140.393777][ T7747] vlan0: entered promiscuous mode [ 140.407354][ T7747] vlan1: entered promiscuous mode [ 140.423627][ T7747] macvlan0: entered promiscuous mode [ 140.427858][ T7747] macvlan1: entered promiscuous mode [ 140.599618][ T7747] ipvlan0: entered promiscuous mode [ 140.599702][ T7747] ipvlan1: entered promiscuous mode [ 140.599835][ T7747] veth1_macvtap: entered promiscuous mode [ 140.617300][ T7747] macvtap0: entered promiscuous mode [ 140.623294][ T7747] macsec0: entered promiscuous mode [ 140.625146][ T7747] geneve0: entered promiscuous mode [ 140.634843][ T7747] geneve1: entered promiscuous mode [ 140.646218][ T7789] loop2: detected capacity change from 0 to 674 [ 140.653124][ T7747] netdevsim netdevsim8 netdevsim0: entered promiscuous mode [ 140.674004][ T7747] netdevsim netdevsim8 netdevsim1: entered promiscuous mode [ 140.692721][ T7747] netdevsim netdevsim8 netdevsim2: entered promiscuous mode [ 140.704124][ T7747] netdevsim netdevsim8 netdevsim3: entered promiscuous mode [ 140.710794][ T7767] netlink: 72 bytes leftover after parsing attributes in process `syz.6.672'. [ 140.736343][ T7747] mac80211_hwsim hwsim16 wlan0: entered promiscuous mode [ 140.754962][ T7747] mac80211_hwsim hwsim18 wlan1: entered promiscuous mode [ 140.776492][ T7772] netlink: 'syz.0.673': attribute type 32 has an invalid length. [ 140.780810][ T7778] netlink: 'syz.0.673': attribute type 32 has an invalid length. [ 140.782973][ T6311] netdevsim netdevsim8 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.783000][ T6311] netdevsim netdevsim8 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.783019][ T6311] netdevsim netdevsim8 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.783033][ T6311] netdevsim netdevsim8 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.880279][ T7800] netlink: 'syz.0.680': attribute type 22 has an invalid length. [ 140.884354][ T7800] netlink: 'syz.0.680': attribute type 22 has an invalid length. [ 140.884370][ T7800] netlink: 44 bytes leftover after parsing attributes in process `syz.0.680'. [ 140.924719][ T7799] loop8: detected capacity change from 0 to 4096 [ 140.943660][ T7799] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 141.073828][ T7804] FAULT_INJECTION: forcing a failure. [ 141.073828][ T7804] name failslab, interval 1, probability 0, space 0, times 0 [ 141.073852][ T7804] CPU: 0 UID: 0 PID: 7804 Comm: syz.0.681 Tainted: G L syzkaller #0 PREEMPT [ 141.073865][ T7804] Tainted: [L]=SOFTLOCKUP [ 141.073868][ T7804] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 141.073874][ T7804] Call trace: [ 141.073877][ T7804] show_stack+0x2c/0x3c (C) [ 141.073897][ T7804] __dump_stack+0x30/0x40 [ 141.073909][ T7804] dump_stack_lvl+0xd8/0x12c [ 141.073921][ T7804] dump_stack+0x1c/0x28 [ 141.073932][ T7804] should_fail_ex+0x41c/0x590 [ 141.073945][ T7804] should_failslab+0xc4/0x120 [ 141.073958][ T7804] kmem_cache_alloc_noprof+0x94/0x5d4 [ 141.073966][ T7804] skb_clone+0x1ac/0x320 [ 141.073978][ T7804] __netlink_deliver_tap+0x364/0x6f4 [ 141.073990][ T7804] netlink_deliver_tap+0x1d8/0x1dc [ 141.074000][ T7804] __netlink_sendskb+0x78/0xd0 [ 141.074009][ T7804] netlink_sendskb+0x2c/0xdc [ 141.074018][ T7804] netlink_unicast+0x2c0/0x7f8 [ 141.074028][ T7804] netlink_ack+0x570/0x890 [ 141.074037][ T7804] netlink_rcv_skb+0x21c/0x414 [ 141.074047][ T7804] rtnetlink_rcv+0x28/0x38 [ 141.074056][ T7804] netlink_unicast+0x600/0x7f8 [ 141.074065][ T7804] netlink_sendmsg+0x648/0x948 [ 141.074075][ T7804] __sock_sendmsg+0xc8/0x17c [ 141.074084][ T7804] ____sys_sendmsg+0x3d0/0x6c8 [ 141.074094][ T7804] ___sys_sendmsg+0x198/0x224 [ 141.074104][ T7804] __sys_sendmsg+0x158/0x204 [ 141.074118][ T7804] __arm64_sys_sendmsg+0x88/0x9c [ 141.074129][ T7804] invoke_syscall+0x98/0x244 [ 141.074141][ T7804] el0_svc_common+0xec/0x23c [ 141.074152][ T7804] do_el0_svc+0x4c/0x5c [ 141.074164][ T7804] el0_svc+0x64/0x260 [ 141.074175][ T7804] el0t_64_sync_handler+0x44/0x104 [ 141.074186][ T7804] el0t_64_sync+0x198/0x19c [ 142.001589][ T6705] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.149005][ T7821] loop2: detected capacity change from 0 to 4096 [ 142.162102][ T7821] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 142.547397][ T7838] Console: switching to colour dummy device 80x25 [ 142.563824][ T7838] Console: switching to colour frame buffer device 128x48 [ 142.751101][ T7851] loop8: detected capacity change from 0 to 512 [ 143.757136][ T4717] EXT4-fs error (device loop2): ext4_readdir:280: inode #12: block 80: comm syz-executor: path /161/file1/file0: bad entry in directory: directory entry overrun - offset=12, inode=6, rec_len=4096, size=4096 fake=0 [ 143.772359][ T4717] EXT4-fs error (device loop2): ext4_empty_dir:3103: inode #12: block 80: comm syz-executor: bad entry in directory: directory entry overrun - offset=12, inode=6, rec_len=4096, size=4096 fake=0 [ 143.774839][ T4717] EXT4-fs warning (device loop2): ext4_empty_dir:3106: inode #12: comm syz-executor: directory missing '..' [ 143.774999][ T4717] EXT4-fs error (device loop2): ext4_readdir:280: inode #12: block 80: comm syz-executor: path /161/file1/file0: bad entry in directory: directory entry overrun - offset=12, inode=6, rec_len=4096, size=4096 fake=0 [ 143.778014][ T4717] EXT4-fs error (device loop2): ext4_empty_dir:3103: inode #12: block 80: comm syz-executor: bad entry in directory: directory entry overrun - offset=12, inode=6, rec_len=4096, size=4096 fake=0 [ 143.778211][ T4717] EXT4-fs warning (device loop2): ext4_empty_dir:3106: inode #12: comm syz-executor: directory missing '..' [ 143.778329][ T4717] EXT4-fs error (device loop2): ext4_readdir:280: inode #12: block 80: comm syz-executor: path /161/file1/file0: bad entry in directory: directory entry overrun - offset=12, inode=6, rec_len=4096, size=4096 fake=0 [ 143.798454][ T4717] EXT4-fs error (device loop2): ext4_empty_dir:3103: inode #12: block 80: comm syz-executor: bad entry in directory: directory entry overrun - offset=12, inode=6, rec_len=4096, size=4096 fake=0 [ 144.764914][ T4717] EXT4-fs warning (device loop2): ext4_empty_dir:3106: inode #12: comm syz-executor: directory missing '..' [ 144.765143][ T4717] EXT4-fs error (device loop2): ext4_readdir:280: inode #12: block 80: comm syz-executor: path /161/file1/file0: bad entry in directory: directory entry overrun - offset=12, inode=6, rec_len=4096, size=4096 fake=0 [ 144.781708][ T4717] EXT4-fs error (device loop2): ext4_empty_dir:3103: inode #12: block 80: comm syz-executor: bad entry in directory: directory entry overrun - offset=12, inode=6, rec_len=4096, size=4096 fake=0 [ 144.781905][ T4717] EXT4-fs warning (device loop2): ext4_empty_dir:3106: inode #12: comm syz-executor: directory missing '..' [ 144.782020][ T4717] EXT4-fs error (device loop2): ext4_readdir:280: inode #12: block 80: comm syz-executor: path /161/file1/file0: bad entry in directory: directory entry overrun - offset=12, inode=6, rec_len=4096, size=4096 fake=0 [ 144.782211][ T4717] EXT4-fs error (device loop2): ext4_empty_dir:3103: inode #12: block 80: comm syz-executor: bad entry in directory: directory entry overrun - offset=12, inode=6, rec_len=4096, size=4096 fake=0 [ 144.782334][ T4717] EXT4-fs warning (device loop2): ext4_empty_dir:3106: inode #12: comm syz-executor: directory missing '..' [ 144.782746][ T4717] EXT4-fs warning (device loop2): ext4_empty_dir:3106: inode #12: comm syz-executor: directory missing '..' [ 144.783144][ T4717] EXT4-fs warning (device loop2): ext4_empty_dir:3106: inode #12: comm syz-executor: directory missing '..' [ 145.154235][ T4717] EXT4-fs warning (device loop2): ext4_empty_dir:3106: inode #12: comm syz-executor: directory missing '..' [ 145.183011][ T4717] EXT4-fs warning (device loop2): ext4_empty_dir:3106: inode #12: comm syz-executor: directory missing '..' [ 145.190371][ T4717] EXT4-fs warning (device loop2): ext4_empty_dir:3106: inode #12: comm syz-executor: directory missing '..' [ 145.427451][ T6313] nvmet: connect request for invalid subsystem testsubsys! [ 145.440218][ T7863] nvme nvme1: Connect Invalid Data Parameter, subsysnqn "testsubsys" [ 145.687520][ T7872] netlink: 72 bytes leftover after parsing attributes in process `syz.8.701'. [ 145.688240][ T7872] netlink: 24 bytes leftover after parsing attributes in process `syz.8.701'. [ 145.935669][ T7869] nvme_fabrics: missing parameter 'transport=%s' [ 145.935682][ T7869] nvme_fabrics: missing parameter 'nqn=%s' [ 145.974245][ T7878] trusted_key: encrypted key: instantiation of keys using provided decrypted data is disabled since CONFIG_USER_DECRYPTED_DATA is set to false [ 145.996147][ T6498] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 146.041240][ T6316] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.098219][ T6316] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.185410][ T6316] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.233382][ T6316] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.457762][ T4720] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 146.467612][ T4720] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 146.468177][ T4720] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 146.468728][ T4720] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 146.475275][ T4720] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 146.493665][ T6316] bridge_slave_1: left allmulticast mode [ 146.493682][ T6316] bridge_slave_1: left promiscuous mode [ 146.493814][ T6316] bridge0: port 2(bridge_slave_1) entered disabled state [ 146.495289][ T6316] bridge_slave_0: left allmulticast mode [ 146.495304][ T6316] bridge_slave_0: left promiscuous mode [ 146.495370][ T6316] bridge0: port 1(bridge_slave_0) entered disabled state [ 146.655930][ T7907] netlink: 108 bytes leftover after parsing attributes in process `syz.7.709'. [ 146.694459][ T7915] netlink: 108 bytes leftover after parsing attributes in process `syz.7.709'. [ 146.897023][ T6316] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 146.918524][ T6316] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 146.922355][ T6316] bond0 (unregistering): Released all slaves [ 147.454491][ T6316] hsr_slave_0: left promiscuous mode [ 147.462640][ T6316] hsr_slave_1: left promiscuous mode [ 147.462976][ T6316] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 147.462986][ T6316] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 147.474909][ T6316] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 147.474925][ T6316] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 147.487223][ T7951] netlink: 20 bytes leftover after parsing attributes in process `syz.6.715'. [ 147.507366][ T7957] netlink: 4 bytes leftover after parsing attributes in process `syz.7.714'. [ 147.521667][ T6316] veth1_macvtap: left promiscuous mode [ 147.521697][ T6316] veth0_macvtap: left promiscuous mode [ 147.521806][ T6316] veth1_vlan: left promiscuous mode [ 147.521843][ T6316] veth0_vlan: left promiscuous mode [ 147.868799][ T7971] null_blk: nullb1: using native zone append [ 147.942525][ T7971] null_blk: disk nullb1 created [ 147.996541][ T6316] team0 (unregistering): Port device team_slave_1 removed [ 148.017252][ T6316] team0 (unregistering): Port device team_slave_0 removed [ 148.410599][ T7951] team0 (unregistering): Port device team_slave_0 removed [ 148.412091][ T7951] team0 (unregistering): Port device team_slave_1 removed [ 148.414798][ T4399] 8021q: adding VLAN 0 to HW filter on device eth13 [ 148.494298][ T4720] Bluetooth: hci3: command tx timeout [ 148.838209][ T7897] bridge0: port 1(bridge_slave_0) entered blocking state [ 148.838236][ T7897] bridge0: port 1(bridge_slave_0) entered disabled state [ 148.838292][ T7897] bridge_slave_0: entered allmulticast mode [ 148.846269][ T7897] bridge_slave_0: entered promiscuous mode [ 148.848698][ T7897] bridge0: port 2(bridge_slave_1) entered blocking state [ 148.850205][ T7897] bridge0: port 2(bridge_slave_1) entered disabled state [ 148.850277][ T7897] bridge_slave_1: entered allmulticast mode [ 148.850712][ T7897] bridge_slave_1: entered promiscuous mode [ 148.925414][ T7897] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 148.933460][ T7897] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 148.985936][ T7897] team0: Port device team_slave_0 added [ 148.995065][ T7897] team0: Port device team_slave_1 added [ 149.025435][ T7897] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 149.025444][ T7897] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 149.025457][ T7897] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 149.027030][ T7897] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 149.027042][ T7897] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 149.027053][ T7897] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 149.070875][ T6313] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.133796][ T6313] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.159957][ T7897] hsr_slave_0: entered promiscuous mode [ 149.161982][ T7897] hsr_slave_1: entered promiscuous mode [ 149.162681][ T7897] debugfs: 'hsr0' already exists in 'hsr' [ 149.162695][ T7897] Cannot create hsr debugfs directory [ 149.173881][ T4399] 8021q: adding VLAN 0 to HW filter on device eth12 [ 149.215256][ T6313] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.273716][ T6313] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.282664][ T8026] loop6: detected capacity change from 0 to 1024 [ 149.284188][ T8026] EXT4-fs: Ignoring removed orlov option [ 149.307790][ T8026] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 149.380885][ T6523] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 149.735039][ T8040] loop8: detected capacity change from 0 to 4096 [ 149.916990][ T8040] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 149.927473][ T8050] IPVS: set_ctl: invalid protocol: 137 10.1.1.0:20002 [ 150.343447][ T6313] bridge_slave_1: left allmulticast mode [ 150.343468][ T6313] bridge_slave_1: left promiscuous mode [ 150.343590][ T6313] bridge0: port 2(bridge_slave_1) entered disabled state [ 150.345724][ T6313] bridge_slave_0: left allmulticast mode [ 150.345739][ T6313] bridge_slave_0: left promiscuous mode [ 150.345812][ T6313] bridge0: port 1(bridge_slave_0) entered disabled state [ 150.574885][ T4720] Bluetooth: hci3: command tx timeout [ 150.707092][ T6705] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 150.985158][ T8078] FAULT_INJECTION: forcing a failure. [ 150.985158][ T8078] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 150.985180][ T8078] CPU: 0 UID: 0 PID: 8078 Comm: syz.8.739 Tainted: G L syzkaller #0 PREEMPT [ 150.985192][ T8078] Tainted: [L]=SOFTLOCKUP [ 150.985196][ T8078] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 150.985200][ T8078] Call trace: [ 150.985203][ T8078] show_stack+0x2c/0x3c (C) [ 150.985220][ T8078] __dump_stack+0x30/0x40 [ 150.985231][ T8078] dump_stack_lvl+0xd8/0x12c [ 150.985240][ T8078] dump_stack+0x1c/0x28 [ 150.985249][ T8078] should_fail_ex+0x41c/0x590 [ 150.985261][ T8078] should_fail+0x14/0x24 [ 150.985270][ T8078] should_fail_usercopy+0x20/0x30 [ 150.985280][ T8078] _inline_copy_from_user+0x38/0x164 [ 150.985289][ T8078] fbcon_set_con2fb_map_ioctl+0x88/0x204 [ 150.985297][ T8078] do_fb_ioctl+0x34c/0x7a4 [ 150.985308][ T8078] fb_ioctl+0x48/0x68 [ 150.985317][ T8078] __arm64_sys_ioctl+0x154/0x1cc [ 150.985328][ T8078] invoke_syscall+0x98/0x244 [ 150.985338][ T8078] el0_svc_common+0xec/0x23c [ 150.985347][ T8078] do_el0_svc+0x4c/0x5c [ 150.985356][ T8078] el0_svc+0x64/0x260 [ 150.985365][ T8078] el0t_64_sync_handler+0x44/0x104 [ 150.985374][ T8078] el0t_64_sync+0x198/0x19c [ 151.050523][ T6313] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 151.085497][ T6313] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 151.093629][ T6313] bond0 (unregistering): Released all slaves [ 151.101083][ T8082] loop6: detected capacity change from 0 to 512 [ 151.103476][ T8082] EXT4-fs: Ignoring removed oldalloc option [ 151.108447][ T8082] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 151.108472][ T8082] EXT4-fs (loop6): Test dummy encryption mode enabled [ 151.140081][ T8082] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 151.151128][ T4399] 8021q: adding VLAN 0 to HW filter on device eth14 [ 151.153193][ T7897] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 151.172143][ T7897] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 151.172458][ T7897] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 151.187625][ T7897] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 151.188199][ T6313] tipc: Disabling bearer [ 151.188345][ T6313] tipc: Left network mode [ 151.213530][ T7897] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 151.228813][ T7897] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 151.229122][ T7897] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 151.239903][ T7897] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 151.290105][ T8083] tipc: Failed to remove unknown binding: 66,0,0/0:4293558959/4293558960 [ 151.290832][ T8083] tipc: Failed to remove unknown binding: 66,0,0/0:4293558959/4293558960 [ 151.300790][ T8090] FAULT_INJECTION: forcing a failure. [ 151.300790][ T8090] name failslab, interval 1, probability 0, space 0, times 0 [ 151.300812][ T8090] CPU: 0 UID: 0 PID: 8090 Comm: syz.0.742 Tainted: G L syzkaller #0 PREEMPT [ 151.300826][ T8090] Tainted: [L]=SOFTLOCKUP [ 151.300829][ T8090] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 151.300835][ T8090] Call trace: [ 151.300838][ T8090] show_stack+0x2c/0x3c (C) [ 151.300857][ T8090] __dump_stack+0x30/0x40 [ 151.300869][ T8090] dump_stack_lvl+0xd8/0x12c [ 151.300880][ T8090] dump_stack+0x1c/0x28 [ 151.300891][ T8090] should_fail_ex+0x41c/0x590 [ 151.300904][ T8090] should_failslab+0xc4/0x120 [ 151.300917][ T8090] kmem_cache_alloc_noprof+0x94/0x5d4 [ 151.300926][ T8090] skb_clone+0x1ac/0x320 [ 151.300937][ T8090] __netlink_deliver_tap+0x364/0x6f4 [ 151.300949][ T8090] netlink_deliver_tap+0x1d8/0x1dc [ 151.300959][ T8090] __netlink_sendskb+0x78/0xd0 [ 151.300968][ T8090] netlink_sendskb+0x2c/0xdc [ 151.300977][ T8090] netlink_unicast+0x2c0/0x7f8 [ 151.300987][ T8090] netlink_ack+0x570/0x890 [ 151.300996][ T8090] netlink_rcv_skb+0x21c/0x414 [ 151.301006][ T8090] rtnetlink_rcv+0x28/0x38 [ 151.301015][ T8090] netlink_unicast+0x600/0x7f8 [ 151.301025][ T8090] netlink_sendmsg+0x648/0x948 [ 151.301035][ T8090] __sock_sendmsg+0xc8/0x17c [ 151.301044][ T8090] ____sys_sendmsg+0x3d0/0x6c8 [ 151.301054][ T8090] ___sys_sendmsg+0x198/0x224 [ 151.301064][ T8090] __sys_sendmsg+0x158/0x204 [ 151.301074][ T8090] __arm64_sys_sendmsg+0x88/0x9c [ 151.301085][ T8090] invoke_syscall+0x98/0x244 [ 151.301097][ T8090] el0_svc_common+0xec/0x23c [ 151.301108][ T8090] do_el0_svc+0x4c/0x5c [ 151.301119][ T8090] el0_svc+0x64/0x260 [ 151.301131][ T8090] el0t_64_sync_handler+0x44/0x104 [ 151.301142][ T8090] el0t_64_sync+0x198/0x19c [ 151.395413][ T6313] hsr_slave_0: left promiscuous mode [ 151.399069][ T6313] hsr_slave_1: left promiscuous mode [ 151.399380][ T6313] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 151.399392][ T6313] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 151.410129][ T6313] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 151.410145][ T6313] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 151.429622][ T6313] veth1_macvtap: left promiscuous mode [ 151.429685][ T6313] veth0_macvtap: left promiscuous mode [ 151.429735][ T6313] veth1_vlan: left promiscuous mode [ 151.429767][ T6313] veth0_vlan: left promiscuous mode [ 151.945982][ T6523] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 152.054351][ T6313] team0 (unregistering): Port device team_slave_1 removed [ 152.071100][ T6313] team0 (unregistering): Port device team_slave_0 removed [ 152.476892][ T8110] syz_tun: entered allmulticast mode [ 152.476997][ T8110] syz_tun: left allmulticast mode [ 152.479930][ T4399] 8021q: adding VLAN 0 to HW filter on device eth15 [ 152.515379][ T8135] netlink: 8 bytes leftover after parsing attributes in process `syz.0.749'. [ 152.552849][ T8135] netlink: 8 bytes leftover after parsing attributes in process `syz.0.749'. [ 152.553688][ T7897] 8021q: adding VLAN 0 to HW filter on device bond0 [ 152.595592][ T7897] 8021q: adding VLAN 0 to HW filter on device team0 [ 152.611234][ T4720] Bluetooth: hci3: command tx timeout [ 152.614863][ T6311] bridge0: port 1(bridge_slave_0) entered blocking state [ 152.614887][ T6311] bridge0: port 1(bridge_slave_0) entered forwarding state [ 152.629834][ T6311] bridge0: port 2(bridge_slave_1) entered blocking state [ 152.629857][ T6311] bridge0: port 2(bridge_slave_1) entered forwarding state [ 153.818126][ T8154] loop6: detected capacity change from 0 to 2048 [ 153.880197][ T8154] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 154.171428][ T8154] netlink: 4 bytes leftover after parsing attributes in process `syz.6.754'. [ 154.314344][ T6523] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 154.381974][ T8187] netlink: 'syz.0.759': attribute type 8 has an invalid length. [ 154.381990][ T8187] netlink: 4 bytes leftover after parsing attributes in process `syz.0.759'. [ 154.391483][ T8187] veth1_to_team: entered promiscuous mode [ 154.394725][ T8187] gretap0: entered promiscuous mode [ 154.407328][ T8187] veth1_to_team: left promiscuous mode [ 154.408321][ T8187] gretap0: left promiscuous mode [ 154.447880][ T4720] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 154.533301][ T7897] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 154.591415][ T4399] 8021q: adding VLAN 0 to HW filter on device eth16 [ 154.607549][ T8207] Injecting memory failure for pfn 0x133ae5 at process virtual address 0x20000000 [ 154.608908][ T8207] Memory failure: 0x133ae5: Sending SIGBUS to syz.0.761:8207 due to hardware memory corruption [ 154.608931][ T8207] Memory failure: 0x133ae5: Sending SIGBUS to syz.0.761:8204 due to hardware memory corruption [ 154.611679][ T8207] Memory failure: 0x133ae5: recovery action for dirty LRU page: Recovered [ 154.611708][ T8207] Injecting memory failure for pfn 0x21910f at process virtual address 0x20001000 [ 154.611866][ T8207] Memory failure: 0x21910f: Sending SIGBUS to syz.0.761:8207 due to hardware memory corruption [ 154.611880][ T8207] Memory failure: 0x21910f: recovery action for already poisoned page: Failed [ 154.697300][ T4720] Bluetooth: hci3: command tx timeout [ 154.816603][ T7897] veth0_vlan: entered promiscuous mode [ 154.818896][ T8213] 9p: Bad value for 'rfdno' [ 154.827961][ T7897] veth1_vlan: entered promiscuous mode [ 154.859488][ T7897] veth0_macvtap: entered promiscuous mode [ 154.866717][ T7897] veth1_macvtap: entered promiscuous mode [ 155.121439][ T7897] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 155.132953][ T7897] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 155.147733][ T6311] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.147875][ T6311] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.147936][ T6311] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.160417][ T6311] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.252479][ T6305] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 155.252494][ T6305] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 155.316093][ T1176] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 155.316107][ T1176] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 155.345597][ T8234] loop6: detected capacity change from 0 to 1024 [ 155.364979][ T8234] EXT4-fs (loop6): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 156.562948][ T8246] loop8: detected capacity change from 0 to 512 [ 156.563318][ T8246] EXT4-fs: Ignoring removed nobh option [ 156.748899][ T8247] netlink: 12 bytes leftover after parsing attributes in process `syz.9.706'. [ 156.777243][ T8247] FAULT_INJECTION: forcing a failure. [ 156.777243][ T8247] name failslab, interval 1, probability 0, space 0, times 0 [ 156.777262][ T8247] CPU: 0 UID: 0 PID: 8247 Comm: syz.9.706 Tainted: G L syzkaller #0 PREEMPT [ 156.777275][ T8247] Tainted: [L]=SOFTLOCKUP [ 156.777278][ T8247] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 156.777284][ T8247] Call trace: [ 156.777287][ T8247] show_stack+0x2c/0x3c (C) [ 156.777307][ T8247] __dump_stack+0x30/0x40 [ 156.777319][ T8247] dump_stack_lvl+0xd8/0x12c [ 156.777331][ T8247] dump_stack+0x1c/0x28 [ 156.777341][ T8247] should_fail_ex+0x41c/0x590 [ 156.777355][ T8247] should_failslab+0xc4/0x120 [ 156.777368][ T8247] kmem_cache_alloc_noprof+0x94/0x5d4 [ 156.777377][ T8247] fsnotify_add_mark_locked+0x320/0xd44 [ 156.777388][ T8247] fanotify_add_mark+0x640/0xf9c [ 156.777399][ T8247] do_fanotify_mark+0xc54/0xda8 [ 156.777410][ T8247] __arm64_sys_fanotify_mark+0xc8/0xe4 [ 156.777421][ T8247] invoke_syscall+0x98/0x244 [ 156.777433][ T8247] el0_svc_common+0xec/0x23c [ 156.777445][ T8247] do_el0_svc+0x4c/0x5c [ 156.777456][ T8247] el0_svc+0x64/0x260 [ 156.777467][ T8247] el0t_64_sync_handler+0x44/0x104 [ 156.777478][ T8247] el0t_64_sync+0x198/0x19c [ 156.815236][ T8246] EXT4-fs error (device loop8): ext4_do_update_inode:5801: inode #3: comm syz.8.769: corrupted inode contents [ 156.815256][ T8246] loop8: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 156.822173][ T8246] EXT4-fs (loop8): Remounting filesystem read-only [ 156.827262][ C0] EXT4-fs (loop8): error count since last fsck: 1 [ 156.827277][ C0] EXT4-fs (loop8): initial error at time 524445: ext4_do_update_inode:5801: inode 3 [ 156.827293][ C0] EXT4-fs (loop8): last error at time 524445: ext4_do_update_inode:5801: inode 3 [ 156.828480][ T8246] __quota_error: 96 callbacks suppressed [ 156.828490][ T8246] Quota error (device loop8): write_blk: dquota write failed [ 156.828529][ T8246] Quota error (device loop8): qtree_write_dquot: Error -30 occurred while creating quota [ 156.876661][ T8246] EXT4-fs (loop8): 1 truncate cleaned up [ 156.956512][ T6523] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 156.972092][ T8246] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 157.325946][ T4399] 8021q: adding VLAN 0 to HW filter on device eth17 [ 157.656092][ T6705] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 157.979504][ T4399] 8021q: adding VLAN 0 to HW filter on device eth18 [ 158.214166][ T4399] 8021q: adding VLAN 0 to HW filter on device eth19 [ 158.512799][ T8331] loop9: detected capacity change from 0 to 2048 [ 158.588879][ T8331] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 158.607797][ T8331] overlayfs: failed to resolve './bus': -2 [ 158.677755][ T8339] EXT4-fs error (device loop9): ext4_lookup:1787: inode #14: comm syz.9.778: invalid fast symlink length 39 [ 159.138981][ T7897] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 159.267140][ T8350] loop9: detected capacity change from 0 to 1024 [ 159.275911][ T8350] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 159.276105][ T8350] EXT4-fs (loop9): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 159.279583][ T8350] EXT4-fs (loop9): revision level too high, forcing read-only mode [ 159.279695][ T8350] EXT4-fs (loop9): orphan cleanup on readonly fs [ 159.526473][ T8350] EXT4-fs error (device loop9): ext4_map_blocks:832: inode #3: block 3: comm syz.9.783: lblock 3 mapped to illegal pblock 3 (length 1) [ 159.526499][ T8350] loop9: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 159.527324][ T8350] Quota error (device loop9): write_blk: dquota write failed [ 159.527349][ T8350] Quota error (device loop9): find_free_dqentry: Can't write quota data block 3 [ 159.527508][ T8350] Quota error (device loop9): qtree_write_dquot: Error -117 occurred while creating quota [ 159.527533][ T8350] EXT4-fs error (device loop9): ext4_acquire_dquot:7069: comm syz.9.783: Failed to acquire dquot type 0 [ 159.527545][ T8350] loop9: lost filesystem error report for type 5 error -117 [ 159.529691][ T8350] EXT4-fs error (device loop9): ext4_map_blocks:790: inode #3: block 3: comm syz.9.783: lblock 3 mapped to illegal pblock 3 (length 1) [ 159.529712][ T8350] loop9: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 159.530015][ C0] EXT4-fs (loop9): error count since last fsck: 3 [ 159.530029][ C0] EXT4-fs (loop9): initial error at time 524447: ext4_map_blocks:832: inode 3: block 3 [ 159.530049][ C0] EXT4-fs (loop9): last error at time 524447: ext4_map_blocks:790: inode 3: block 3 [ 159.543839][ T8350] Quota error (device loop9): qtree_write_dquot: Error -117 occurred while creating quota [ 159.543860][ T8350] EXT4-fs error (device loop9): ext4_acquire_dquot:7069: comm syz.9.783: Failed to acquire dquot type 0 [ 159.543873][ T8350] loop9: lost filesystem error report for type 5 error -117 [ 159.550921][ T8350] EXT4-fs error (device loop9): ext4_free_blocks:6719: comm syz.9.783: Freeing blocks not in datazone - block = 0, count = 4096 [ 159.550945][ T8350] loop9: lost filesystem error report for type 5 error -117 [ 159.560802][ T8350] EXT4-fs error (device loop9): ext4_map_blocks:790: inode #3: block 3: comm syz.9.783: lblock 3 mapped to illegal pblock 3 (length 1) [ 159.560824][ T8350] loop9: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 159.582472][ T8350] Quota error (device loop9): qtree_write_dquot: Error -117 occurred while creating quota [ 159.582500][ T8350] EXT4-fs error (device loop9): ext4_acquire_dquot:7069: comm syz.9.783: Failed to acquire dquot type 0 [ 159.582512][ T8350] loop9: lost filesystem error report for type 5 error -117 [ 159.583120][ T8350] EXT4-fs (loop9): 1 orphan inode deleted [ 159.597031][ T8350] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 160.212899][ T8362] loop6: detected capacity change from 0 to 2048 [ 160.241696][ T8362] loop6: p1 < > p4 [ 160.241696][ T8362] p4: [ 160.244487][ T8362] loop6: p4 size 722688 extends beyond EOD, truncated [ 160.258697][ T8362] loop6: p6 start 262464109 is beyond EOD, truncated [ 160.258711][ T8362] loop6: p7 size 2304 extends beyond EOD, truncated [ 160.339178][ T7897] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 160.341944][ T4341] loop6: p1 < > p4 [ 160.341944][ T4341] p4: [ 160.356771][ T4341] loop6: p4 size 722688 extends beyond EOD, truncated [ 160.370667][ T4341] loop6: p6 start 262464109 is beyond EOD, truncated [ 160.370682][ T4341] loop6: p7 size 2304 extends beyond EOD, truncated [ 160.480510][ T8381] loop9: detected capacity change from 0 to 2048 [ 160.509978][ T7823] udevd[7823]: inotify_add_watch(7, /dev/loop6p1, 10) failed: No such file or directory [ 160.512234][ T8381] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 160.515656][ T7762] udevd[7762]: inotify_add_watch(7, /dev/loop6p7, 10) failed: No such file or directory [ 160.525778][ T7906] udevd[7906]: inotify_add_watch(7, /dev/loop6p4, 10) failed: No such file or directory [ 160.538931][ T7899] udevd[7899]: inotify_add_watch(7, /dev/loop6p5, 10) failed: No such file or directory [ 160.562892][ T8381] EXT4-fs error (device loop9): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 160.691661][ T8409] pim6reg: entered allmulticast mode [ 160.716345][ T7899] udevd[7899]: inotify_add_watch(7, /dev/loop6p5, 10) failed: No such file or directory [ 160.747566][ T7823] udevd[7823]: inotify_add_watch(7, /dev/loop6p1, 10) failed: No such file or directory [ 160.749696][ T7762] udevd[7762]: inotify_add_watch(7, /dev/loop6p7, 10) failed: No such file or directory [ 160.764818][ T7906] udevd[7906]: inotify_add_watch(7, /dev/loop6p4, 10) failed: No such file or directory [ 160.799860][ T7897] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 160.903522][ T8426] loop6: detected capacity change from 0 to 2048 [ 160.924638][ T8426] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 160.937593][ T8426] overlayfs: failed to resolve './bus': -2 [ 160.940948][ T8426] EXT4-fs error (device loop6): ext4_lookup:1787: inode #14: comm syz.6.793: invalid fast symlink length 39 [ 160.956902][ T8432] fuse: Bad value for 'fd' [ 161.012801][ T8432] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(3) [ 161.053776][ T8431] A link change request failed with some changes committed already. Interface teql0 may have been left with an inconsistent configuration, please check. [ 161.057954][ T8440] loop8: detected capacity change from 0 to 128 [ 161.577000][ T6523] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.594870][ T8446] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4) [ 161.594885][ T8446] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 161.598129][ T8446] vhci_hcd vhci_hcd.0: Device attached [ 162.595629][ T8446] netlink: 20 bytes leftover after parsing attributes in process `syz.0.798'. [ 162.595658][ T8446] netlink: 20 bytes leftover after parsing attributes in process `syz.0.798'. [ 162.677646][ T8447] vhci_hcd: connection closed [ 162.679555][ T6312] vhci_hcd vhci_hcd.0: stop threads [ 162.679779][ T6312] vhci_hcd vhci_hcd.0: release socket [ 162.679807][ T6312] vhci_hcd vhci_hcd.0: disconnect device [ 162.725794][ T8459] x_tables: duplicate underflow at hook 1 [ 162.804363][ T8469] binder: 8468:8469 ioctl 400c620e 20000300 returned -22 [ 163.080344][ T8488] netlink: 32 bytes leftover after parsing attributes in process `syz.9.806'. [ 163.281820][ T8503] loop9: detected capacity change from 0 to 128 [ 163.287570][ T8501] loop6: detected capacity change from 0 to 256 [ 163.344731][ T8503] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 163.403780][ T7897] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 163.721194][ T8538] loop9: detected capacity change from 0 to 512 [ 163.731233][ T8538] EXT4-fs (loop9): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 163.731250][ T8538] EXT4-fs (loop9): group descriptors corrupted! [ 163.758773][ T8543] loop8: detected capacity change from 0 to 256 [ 163.811328][ T8543] syzkaller0: entered promiscuous mode [ 163.811343][ T8543] syzkaller0: entered allmulticast mode [ 163.951312][ T8546] syz_tun: entered allmulticast mode [ 164.146102][ T8546] mac80211_hwsim hwsim15 ..ãc¤±: renamed from wlan1 (while UP) [ 164.151911][ T8550] FAULT_INJECTION: forcing a failure. [ 164.151911][ T8550] name failslab, interval 1, probability 0, space 0, times 0 [ 164.151933][ T8550] CPU: 0 UID: 0 PID: 8550 Comm: syz.9.823 Tainted: G L syzkaller #0 PREEMPT [ 164.151947][ T8550] Tainted: [L]=SOFTLOCKUP [ 164.151951][ T8550] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 164.151957][ T8550] Call trace: [ 164.151959][ T8550] show_stack+0x2c/0x3c (C) [ 164.151978][ T8550] __dump_stack+0x30/0x40 [ 164.151990][ T8550] dump_stack_lvl+0xd8/0x12c [ 164.152002][ T8550] dump_stack+0x1c/0x28 [ 164.152013][ T8550] should_fail_ex+0x41c/0x590 [ 164.152027][ T8550] should_failslab+0xc4/0x120 [ 164.152040][ T8550] __kmalloc_cache_noprof+0x94/0x5fc [ 164.152049][ T8550] sctp_auth_shkey_create+0x84/0x188 [ 164.152062][ T8550] sctp_endpoint_new+0x388/0x860 [ 164.152075][ T8550] sctp_init_sock+0x684/0x11ec [ 164.152088][ T8550] inet_create+0x9a4/0xd48 [ 164.152098][ T8550] __sock_create+0x31c/0x670 [ 164.152109][ T8550] __sys_socket_create+0xc0/0x11c [ 164.152118][ T8550] __sys_socket+0x44/0xec [ 164.152128][ T8550] __arm64_sys_socket+0x84/0x9c [ 164.152137][ T8550] invoke_syscall+0x98/0x244 [ 164.152150][ T8550] el0_svc_common+0xec/0x23c [ 164.152162][ T8550] do_el0_svc+0x4c/0x5c [ 164.152173][ T8550] el0_svc+0x64/0x260 [ 164.152184][ T8550] el0t_64_sync_handler+0x44/0x104 [ 164.152195][ T8550] el0t_64_sync+0x198/0x19c [ 164.972928][ T8594] netlink: 64 bytes leftover after parsing attributes in process `syz.7.833'. [ 165.010414][ T8591] 8021q: adding VLAN 0 to HW filter on device bond1 [ 165.254660][ T8591] netlink: 8 bytes leftover after parsing attributes in process `syz.8.836'. [ 165.254695][ T8591] netlink: 4 bytes leftover after parsing attributes in process `syz.8.836'. [ 165.254768][ T8591] bond0: left promiscuous mode [ 165.272561][ T8592] loop6: detected capacity change from 0 to 512 [ 165.278883][ T8591] 8021q: adding VLAN 0 to HW filter on device bond0 [ 165.285511][ T8591] bond1: (slave bond0): making interface the new active one [ 165.375000][ T8591] bond1: (slave bond0): Enslaving as an active interface with an up link [ 165.418112][ T8606] bond1 (unregistering): (slave bond0): Releasing active interface [ 166.394647][ T8606] bond1 (unregistering): Released all slaves [ 168.673741][ T8619] loop8: detected capacity change from 0 to 1024 [ 168.681474][ T8620] netlink: 12 bytes leftover after parsing attributes in process `syz.9.842'. [ 168.695478][ T8619] EXT4-fs (loop8): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 168.708805][ T8628] netlink: 12 bytes leftover after parsing attributes in process `syz.9.842'. [ 169.117012][ T8642] netlink: 36 bytes leftover after parsing attributes in process `syz.0.843'. [ 169.394790][ T8657] netlink: 8 bytes leftover after parsing attributes in process `syz.9.845'. [ 169.539476][ T6705] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 169.685129][ T8669] netlink: 'syz.9.847': attribute type 10 has an invalid length. [ 169.685317][ T8669] bridge0: port 2(bridge_slave_1) entered disabled state [ 169.685615][ T8669] bridge0: port 1(bridge_slave_0) entered disabled state [ 169.708348][ T8669] bridge0: port 2(bridge_slave_1) entered blocking state [ 169.708400][ T8669] bridge0: port 2(bridge_slave_1) entered forwarding state [ 169.708505][ T8669] bridge0: port 1(bridge_slave_0) entered blocking state [ 169.708541][ T8669] bridge0: port 1(bridge_slave_0) entered forwarding state [ 169.709827][ T8669] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 169.765875][ T8669] netlink: 4 bytes leftover after parsing attributes in process `syz.9.847'. [ 169.765924][ T8669] bridge_slave_1: left allmulticast mode [ 169.765941][ T8669] bridge_slave_1: left promiscuous mode [ 169.766051][ T8669] bridge0: port 2(bridge_slave_1) entered disabled state [ 169.773405][ T8669] bridge_slave_0: left allmulticast mode [ 169.773423][ T8669] bridge_slave_0: left promiscuous mode [ 169.773542][ T8669] bridge0: port 1(bridge_slave_0) entered disabled state [ 169.845263][ T8669] bond0: (slave bridge0): Releasing backup interface [ 170.140737][ T8690] netlink: 328 bytes leftover after parsing attributes in process `syz.7.855'. [ 170.142268][ T8689] loop9: detected capacity change from 0 to 1024 [ 170.155474][ T8689] EXT4-fs (loop9): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 170.161686][ T8689] EXT4-fs error (device loop9): ext4_map_blocks:790: inode #3: block 2: comm syz.9.856: lblock 2 mapped to illegal pblock 2 (length 1) [ 170.161710][ T8689] loop9: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 170.161804][ T8689] EXT4-fs (loop9): Remounting filesystem read-only [ 170.161814][ T8689] Quota error (device loop9): qtree_write_dquot: dquota write failed [ 170.161841][ T8689] Quota error (device loop9): v2_write_file_info: Can't write info structure [ 170.161888][ T8689] EXT4-fs (loop9): 1 orphan inode deleted [ 170.162332][ T8689] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 170.283003][ T7897] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 170.478837][ T8698] FAULT_INJECTION: forcing a failure. [ 170.478837][ T8698] name failslab, interval 1, probability 0, space 0, times 0 [ 170.478862][ T8698] CPU: 0 UID: 0 PID: 8698 Comm: syz.0.857 Tainted: G L syzkaller #0 PREEMPT [ 170.478874][ T8698] Tainted: [L]=SOFTLOCKUP [ 170.478877][ T8698] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 170.478883][ T8698] Call trace: [ 170.478885][ T8698] show_stack+0x2c/0x3c (C) [ 170.478905][ T8698] __dump_stack+0x30/0x40 [ 170.478917][ T8698] dump_stack_lvl+0xd8/0x12c [ 170.478926][ T8698] dump_stack+0x1c/0x28 [ 170.478935][ T8698] should_fail_ex+0x41c/0x590 [ 170.478948][ T8698] should_failslab+0xc4/0x120 [ 170.478960][ T8698] __kmalloc_node_noprof+0x10c/0x6e4 [ 170.478967][ T8698] __vmalloc_node_range_noprof+0x43c/0xe9c [ 170.478976][ T8698] __vmalloc_node_noprof+0xec/0x14c [ 170.478984][ T8698] __vmalloc_noprof+0x64/0x8c [ 170.478992][ T8698] bpf_prog_alloc_no_stats+0x60/0x4e8 [ 170.479001][ T8698] bpf_prog_alloc+0x48/0x110 [ 170.479009][ T8698] bpf_prog_load+0x5e0/0x1554 [ 170.479017][ T8698] __sys_bpf+0x7d4/0x82c [ 170.479025][ T8698] __arm64_sys_bpf+0xd0/0xec [ 170.479032][ T8698] invoke_syscall+0x98/0x244 [ 170.479042][ T8698] el0_svc_common+0xec/0x23c [ 170.479052][ T8698] do_el0_svc+0x4c/0x5c [ 170.479061][ T8698] el0_svc+0x64/0x260 [ 170.479070][ T8698] el0t_64_sync_handler+0x44/0x104 [ 170.479079][ T8698] el0t_64_sync+0x198/0x19c [ 170.479159][ T8698] syz.0.857: vmalloc error: size 4096, failed to allocated page array size 8, mode:0x500dc2(GFP_HIGHUSER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0 [ 170.479224][ T8698] CPU: 0 UID: 0 PID: 8698 Comm: syz.0.857 Tainted: G L syzkaller #0 PREEMPT [ 170.479233][ T8698] Tainted: [L]=SOFTLOCKUP [ 170.479235][ T8698] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 170.479239][ T8698] Call trace: [ 170.479241][ T8698] show_stack+0x2c/0x3c (C) [ 170.479252][ T8698] __dump_stack+0x30/0x40 [ 170.479261][ T8698] dump_stack_lvl+0xd8/0x12c [ 170.479270][ T8698] dump_stack+0x1c/0x28 [ 170.479279][ T8698] warn_alloc+0x1c4/0x1d8 [ 170.479287][ T8698] __vmalloc_node_range_noprof+0x670/0xe9c [ 170.479296][ T8698] __vmalloc_node_noprof+0xec/0x14c [ 170.479304][ T8698] __vmalloc_noprof+0x64/0x8c [ 170.479312][ T8698] bpf_prog_alloc_no_stats+0x60/0x4e8 [ 170.479320][ T8698] bpf_prog_alloc+0x48/0x110 [ 170.479328][ T8698] bpf_prog_load+0x5e0/0x1554 [ 170.479337][ T8698] __sys_bpf+0x7d4/0x82c [ 170.479345][ T8698] __arm64_sys_bpf+0xd0/0xec [ 170.479352][ T8698] invoke_syscall+0x98/0x244 [ 170.479362][ T8698] el0_svc_common+0xec/0x23c [ 170.479372][ T8698] do_el0_svc+0x4c/0x5c [ 170.479381][ T8698] el0_svc+0x64/0x260 [ 170.479389][ T8698] el0t_64_sync_handler+0x44/0x104 [ 170.479398][ T8698] el0t_64_sync+0x198/0x19c [ 170.479406][ T8698] Mem-Info: [ 170.479411][ T8698] active_anon:126 inactive_anon:23128 isolated_anon:0 [ 170.479411][ T8698] active_file:3510 inactive_file:17934 isolated_file:0 [ 170.479411][ T8698] unevictable:768 dirty:219 writeback:0 [ 170.479411][ T8698] slab_reclaimable:9562 slab_unreclaimable:92471 [ 170.479411][ T8698] mapped:35140 shmem:17460 pagetables:1551 [ 170.479411][ T8698] sec_pagetables:0 bounce:0 [ 170.479411][ T8698] kernel_misc_reclaimable:0 [ 170.479411][ T8698] free:1454321 free_pcp:6562 free_cma:7616 [ 170.479431][ T8698] Node 0 active_anon:504kB inactive_anon:92512kB active_file:14040kB inactive_file:71736kB unevictable:3072kB isolated(anon):0kB isolated(file):0kB mapped:140560kB dirty:876kB writeback:0kB shmem:69840kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:10976kB pagetables:6204kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 170.479452][ T8698] Node 0 DMA free:3077888kB boost:0kB min:20360kB low:25448kB high:30536kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3145728kB managed:3080192kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:30464kB [ 170.479476][ T8698] lowmem_reserve[]: 0 0 3650 3650 3650 [ 170.479494][ T8698] Node 0 Normal free:2739396kB boost:0kB min:24692kB low:30864kB high:37036kB reserved_highatomic:0kB free_highatomic:0kB active_anon:504kB inactive_anon:92512kB active_file:14040kB inactive_file:71736kB unevictable:3072kB writepending:876kB zspages:0kB present:5242880kB managed:3738576kB mlocked:0kB bounce:0kB free_pcp:26248kB local_pcp:26248kB free_cma:0kB [ 170.479517][ T8698] lowmem_reserve[]: 0 0 0 0 0 [ 170.479533][ T8698] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 1*256kB (C) 1*512kB (C) 1*1024kB (C) 0*2048kB 751*4096kB (MC) = 3077888kB [ 170.479597][ T8698] Node 0 Normal: 105*4kB (UM) 112*8kB (UME) 42*16kB (UME) 188*32kB (UM) 184*64kB (UME) 81*128kB (UME) 69*256kB (UME) 23*512kB (UM) 13*1024kB (ME) 6*2048kB (UM) 648*4096kB (UM) = 2739396kB [ 170.479672][ T8698] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 170.479679][ T8698] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=32768kB [ 170.479686][ T8698] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 170.479692][ T8698] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=64kB [ 170.479698][ T8698] 38884 total pagecache pages [ 170.479702][ T8698] 0 pages in swap cache [ 170.479706][ T8698] Free swap = 124996kB [ 170.479709][ T8698] Total swap = 124996kB [ 170.479713][ T8698] 2097152 pages RAM [ 170.479716][ T8698] 0 pages HighMem/MovableOnly [ 170.479719][ T8698] 392460 pages reserved [ 170.479722][ T8698] 8192 pages cma reserved [ 170.479726][ T8698] 7 pages hwpoisoned [ 170.630611][ T8696] netlink: 8 bytes leftover after parsing attributes in process `syz.7.858'. [ 170.631548][ T8700] loop8: detected capacity change from 0 to 512 [ 170.640519][ T8700] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 170.653250][ T8700] EXT4-fs (loop8): 1 truncate cleaned up [ 170.659865][ T8700] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 170.666425][ T8700] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.162971][ T8713] loop9: detected capacity change from 0 to 512 [ 172.147598][ T8713] EXT4-fs error (device loop9): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 219 vs 220 free clusters [ 172.147872][ T8713] EXT4-fs (loop9): Remounting filesystem read-only [ 172.148153][ T8713] EXT4-fs (loop9): 1 truncate cleaned up [ 172.148638][ T8713] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 172.195285][ T8717] netlink: 8 bytes leftover after parsing attributes in process `syz.0.865'. [ 172.312559][ T8713] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 173.048690][ T8750] loop8: detected capacity change from 0 to 1024 [ 173.104635][ T8750] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 173.361537][ T6705] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 173.445625][ T8772] vxcan1: tx drop: invalid da for name 0x00000000000000c8 [ 173.491887][ T8776] netlink: 328 bytes leftover after parsing attributes in process `syz.8.881'. [ 174.948925][ T8826] netlink: 328 bytes leftover after parsing attributes in process `syz.6.894'. [ 175.321254][ T8842] loop6: detected capacity change from 0 to 1024 [ 175.340744][ T8842] EXT4-fs (loop6): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 175.663296][ T8848] EXT4-fs error (device loop6): ext4_validate_block_bitmap:445: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set [ 175.678821][ T8848] EXT4-fs (loop6): Remounting filesystem read-only [ 176.732714][ T8884] loop9: detected capacity change from 0 to 512 [ 176.752376][ T8884] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 176.832887][ T8892] netlink: 328 bytes leftover after parsing attributes in process `syz.0.905'. [ 176.942096][ T8899] FAULT_INJECTION: forcing a failure. [ 176.942096][ T8899] name fail_futex, interval 1, probability 0, space 0, times 0 [ 176.942120][ T8899] CPU: 0 UID: 0 PID: 8899 Comm: syz.0.907 Tainted: G L syzkaller #0 PREEMPT [ 176.942135][ T8899] Tainted: [L]=SOFTLOCKUP [ 176.942138][ T8899] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 176.942144][ T8899] Call trace: [ 176.942147][ T8899] show_stack+0x2c/0x3c (C) [ 176.942168][ T8899] __dump_stack+0x30/0x40 [ 176.942179][ T8899] dump_stack_lvl+0xd8/0x12c [ 176.942191][ T8899] dump_stack+0x1c/0x28 [ 176.942202][ T8899] should_fail_ex+0x41c/0x590 [ 176.942215][ T8899] should_fail+0x14/0x24 [ 176.942226][ T8899] get_futex_key+0x1ec/0x12b0 [ 176.942237][ T8899] futex_wake+0x10c/0x594 [ 176.942249][ T8899] do_futex+0x2c4/0x378 [ 176.942258][ T8899] __arm64_sys_futex+0x2e4/0x418 [ 176.942269][ T8899] invoke_syscall+0x98/0x244 [ 176.942281][ T8899] el0_svc_common+0xec/0x23c [ 176.942293][ T8899] do_el0_svc+0x4c/0x5c [ 176.942304][ T8899] el0_svc+0x64/0x260 [ 176.942315][ T8899] el0t_64_sync_handler+0x44/0x104 [ 176.942326][ T8899] el0t_64_sync+0x198/0x19c [ 177.049414][ T7897] EXT4-fs error (device loop9): ext4_empty_dir:3087: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 177.053190][ T7897] EXT4-fs error (device loop9): ext4_empty_dir:3087: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 177.055341][ T7897] EXT4-fs error (device loop9): ext4_empty_dir:3087: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 177.055801][ T7897] EXT4-fs error (device loop9): ext4_empty_dir:3087: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 177.058012][ T7897] EXT4-fs error (device loop9): ext4_empty_dir:3087: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 177.079380][ T7897] EXT4-fs error (device loop9): ext4_empty_dir:3087: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 177.083486][ T7897] EXT4-fs error (device loop9): ext4_empty_dir:3087: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 177.083997][ T7897] EXT4-fs error (device loop9): ext4_empty_dir:3087: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 177.085536][ T7897] EXT4-fs error (device loop9): ext4_empty_dir:3087: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 177.102910][ T7897] EXT4-fs error (device loop9): ext4_empty_dir:3087: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 177.254310][ T8910] netlink: 'syz.8.910': attribute type 2 has an invalid length. [ 177.254326][ T8910] netlink: 'syz.8.910': attribute type 1 has an invalid length. [ 177.254337][ T8910] netlink: 16 bytes leftover after parsing attributes in process `syz.8.910'. [ 177.254347][ T8910] netlink: 'syz.8.910': attribute type 2 has an invalid length. [ 177.254354][ T8910] netlink: 'syz.8.910': attribute type 1 has an invalid length. [ 177.254361][ T8910] netlink: 16 bytes leftover after parsing attributes in process `syz.8.910'. [ 177.254366][ T8910] iwpm_mapping_error_cb: Received msg seq = 0 err code = 5 client = 2 [ 177.381212][ T6523] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 177.443541][ T7897] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 177.592129][ T6312] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.675277][ T6312] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.704146][ T6312] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.763422][ T6312] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.783378][ T8939] loop6: detected capacity change from 0 to 128 [ 177.793408][ T8940] netlink: 48 bytes leftover after parsing attributes in process `syz.8.920'. [ 178.202488][ T4713] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 178.203641][ T4713] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 178.204276][ T4713] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 178.206343][ T4713] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 178.206638][ T4713] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 178.555364][ T8954] loop8: detected capacity change from 0 to 512 [ 178.567363][ T8954] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 178.573803][ T8954] EXT4-fs (loop8): 1 truncate cleaned up [ 178.583034][ T8954] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 178.680768][ T8954] EXT4-fs error (device loop8): __ext4_expand_extra_isize:6542: inode #12: comm syz.8.922: bad extra_isize 62 (inode size 256) [ 178.691649][ T8954] EXT4-fs (loop8): Remounting filesystem read-only [ 178.806975][ T6705] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 179.175697][ T8973] netlink: 'syz.0.927': attribute type 29 has an invalid length. [ 179.214239][ T6312] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 179.227555][ T6312] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 179.229095][ T8976] netlink: 'syz.6.926': attribute type 4 has an invalid length. [ 179.230456][ T6312] bond0 (unregistering): Released all slaves [ 179.259289][ T8977] netlink: 'syz.0.927': attribute type 29 has an invalid length. [ 179.333761][ T8984] netlink: 'syz.6.926': attribute type 4 has an invalid length. [ 179.473533][ T6312] hsr_slave_0: left promiscuous mode [ 179.482235][ T6312] hsr_slave_1: left promiscuous mode [ 179.482573][ T6312] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 179.482589][ T6312] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 179.483749][ T6312] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 179.483761][ T6312] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 179.562158][ T6312] veth1_macvtap: left promiscuous mode [ 179.562712][ T6312] veth0_macvtap: left promiscuous mode [ 179.562765][ T6312] veth1_vlan: left promiscuous mode [ 179.562800][ T6312] veth0_vlan: left promiscuous mode [ 180.057095][ T6312] team0 (unregistering): Port device team_slave_1 removed [ 180.093561][ T6312] team0 (unregistering): Port device team_slave_0 removed [ 180.253814][ T4713] Bluetooth: hci3: command tx timeout [ 181.161005][ T9031] FAULT_INJECTION: forcing a failure. [ 181.161005][ T9031] name failslab, interval 1, probability 0, space 0, times 0 [ 181.161027][ T9031] CPU: 0 UID: 0 PID: 9031 Comm: syz.8.938 Tainted: G L syzkaller #0 PREEMPT [ 181.161040][ T9031] Tainted: [L]=SOFTLOCKUP [ 181.161043][ T9031] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 181.161049][ T9031] Call trace: [ 181.161052][ T9031] show_stack+0x2c/0x3c (C) [ 181.161073][ T9031] __dump_stack+0x30/0x40 [ 181.161085][ T9031] dump_stack_lvl+0xd8/0x12c [ 181.161097][ T9031] dump_stack+0x1c/0x28 [ 181.161108][ T9031] should_fail_ex+0x41c/0x590 [ 181.161121][ T9031] should_failslab+0xc4/0x120 [ 181.161134][ T9031] __kmalloc_noprof+0x108/0x6c8 [ 181.161143][ T9031] security_sk_alloc+0x60/0x35c [ 181.161155][ T9031] sk_prot_alloc+0xe0/0x1e8 [ 181.161164][ T9031] sk_alloc+0x44/0x3ac [ 181.161171][ T9031] mctp_pf_create+0xcc/0x2f8 [ 181.161184][ T9031] __sock_create+0x31c/0x670 [ 181.161194][ T9031] __sys_socket_create+0xc0/0x11c [ 181.161203][ T9031] __sys_socket+0x44/0xec [ 181.161212][ T9031] __arm64_sys_socket+0x84/0x9c [ 181.161222][ T9031] invoke_syscall+0x98/0x244 [ 181.161234][ T9031] el0_svc_common+0xec/0x23c [ 181.161246][ T9031] do_el0_svc+0x4c/0x5c [ 181.161257][ T9031] el0_svc+0x64/0x260 [ 181.161267][ T9031] el0t_64_sync_handler+0x44/0x104 [ 181.161277][ T9031] el0t_64_sync+0x198/0x19c [ 182.152956][ T9031] loop8: detected capacity change from 0 to 128 [ 182.157258][ T9031] EXT4-fs (loop8): Test dummy encryption mode enabled [ 182.157275][ T9031] EXT4-fs (loop8): couldn't mount as ext2 due to feature incompatibilities [ 183.131616][ T4713] Bluetooth: hci3: command tx timeout [ 183.177373][ T4399] 8021q: adding VLAN 0 to HW filter on device eth20 [ 183.871055][ T4713] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 183.920435][ T8947] bridge0: port 1(bridge_slave_0) entered blocking state [ 183.920466][ T8947] bridge0: port 1(bridge_slave_0) entered disabled state [ 183.920518][ T8947] bridge_slave_0: entered allmulticast mode [ 183.921006][ T8947] bridge_slave_0: entered promiscuous mode [ 183.930836][ T8947] bridge0: port 2(bridge_slave_1) entered blocking state [ 183.930865][ T8947] bridge0: port 2(bridge_slave_1) entered disabled state [ 183.930915][ T8947] bridge_slave_1: entered allmulticast mode [ 183.931497][ T8947] bridge_slave_1: entered promiscuous mode [ 183.964016][ T8947] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 183.964906][ T8947] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 184.060974][ T8947] team0: Port device team_slave_0 added [ 184.061692][ T8947] team0: Port device team_slave_1 added [ 184.077816][ T8947] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 184.077827][ T8947] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 184.077844][ T8947] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 184.095442][ T8947] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 184.095451][ T8947] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 184.095465][ T8947] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 184.352307][ T8947] hsr_slave_0: entered promiscuous mode [ 184.353109][ T8947] hsr_slave_1: entered promiscuous mode [ 184.355072][ T8947] debugfs: 'hsr0' already exists in 'hsr' [ 184.355089][ T8947] Cannot create hsr debugfs directory [ 184.514401][ T4399] 8021q: adding VLAN 0 to HW filter on device eth22 [ 184.971472][ T9106] netlink: 12 bytes leftover after parsing attributes in process `syz.6.949'. [ 185.311390][ T4713] Bluetooth: hci3: command tx timeout [ 185.334920][ T9113] loop8: detected capacity change from 0 to 1024 [ 185.353175][ T9113] EXT4-fs (loop8): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 185.382355][ T8947] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 185.489826][ T8947] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 185.665763][ T8947] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 185.675484][ T8947] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 185.683313][ T8947] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 185.700187][ T8947] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 185.702333][ T8947] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 185.718443][ T8947] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 185.831969][ T9138] loop6: detected capacity change from 0 to 512 [ 185.854491][ T9138] EXT4-fs error (device loop6): ext4_quota_enable:7260: inode #4: comm syz.6.954: casefold flag without casefold feature [ 185.854512][ T9138] loop6: lost file I/O error report for ino 4 type 5 pos 0x0 len 0x0 error -117 [ 185.854595][ T9138] EXT4-fs (loop6): Remounting filesystem read-only [ 185.854633][ T9138] EXT4-fs warning (device loop6): ext4_enable_quotas:7304: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 185.854992][ T9138] EXT4-fs (loop6): mount failed [ 185.856173][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 185.856184][ C0] EXT4-fs (loop6): initial error at time 524474: ext4_quota_enable:7260: inode 4 [ 185.856199][ C0] EXT4-fs (loop6): last error at time 524474: ext4_quota_enable:7260: inode 4 [ 185.909990][ T8947] 8021q: adding VLAN 0 to HW filter on device bond0 [ 185.971369][ T8947] 8021q: adding VLAN 0 to HW filter on device team0 [ 185.985309][ T6705] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 186.003378][ T40] bridge0: port 1(bridge_slave_0) entered blocking state [ 186.003412][ T40] bridge0: port 1(bridge_slave_0) entered forwarding state [ 186.004554][ T40] bridge0: port 2(bridge_slave_1) entered blocking state [ 186.004573][ T40] bridge0: port 2(bridge_slave_1) entered forwarding state [ 186.047663][ T4399] 8021q: adding VLAN 0 to HW filter on device eth21 [ 186.530755][ T9151] IPVS: set_ctl: invalid protocol: 4 0.0.0.0:20001 [ 186.546120][ T9151] netlink: 36 bytes leftover after parsing attributes in process `syz.0.958'. [ 186.714478][ T9174] netlink: 12 bytes leftover after parsing attributes in process `syz.0.961'. [ 187.049331][ T1590] ieee802154 phy0 wpan0: encryption failed: -22 [ 187.049362][ T1590] ieee802154 phy1 wpan1: encryption failed: -22 [ 187.091399][ T9184] 9p: Unknown access argument t [ 187.091399][ T9184] ³: -22 [ 187.107620][ T8947] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 187.182460][ T8947] veth0_vlan: entered promiscuous mode [ 187.195868][ T8947] veth1_vlan: entered promiscuous mode [ 187.239392][ T8947] veth0_macvtap: entered promiscuous mode [ 187.249241][ T8947] veth1_macvtap: entered promiscuous mode [ 187.278259][ T8947] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 187.292379][ T8947] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 187.325768][ T40] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.325883][ T40] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.325912][ T40] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.325926][ T40] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.365721][ T4713] Bluetooth: hci3: command tx timeout [ 187.425853][ T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 187.425867][ T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 187.528158][ T6302] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 187.528173][ T6302] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 187.533369][ T4399] 8021q: adding VLAN 0 to HW filter on device eth23 [ 189.370269][ T9293] loop8: detected capacity change from 0 to 512 [ 189.382027][ T9293] EXT4-fs warning (device loop8): ext4_multi_mount_protect:287: Invalid MMP block in superblock [ 189.456967][ T9297] fuse: Bad value for 'fd' [ 189.807626][ T9319] loop8: detected capacity change from 0 to 256 [ 189.810959][ T9319] vfat: Unknown parameter 'iochB¤8è|.ÑW‰Eóarset' [ 189.837734][ T9319] random: crng reseeded on system resumption [ 189.989518][ T9319] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(8) [ 189.989537][ T9319] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 189.989583][ T9319] vhci_hcd vhci_hcd.0: Device attached [ 189.999312][ T9328] vhci_hcd: connection closed [ 189.999487][ T6312] vhci_hcd vhci_hcd.8: stop threads [ 189.999502][ T6312] vhci_hcd vhci_hcd.8: release socket [ 189.999515][ T6312] vhci_hcd vhci_hcd.8: disconnect device [ 191.601661][ T4720] Bluetooth: hci1: command 0x0c1a tx timeout [ 191.755090][ T9453] loop3: detected capacity change from 0 to 2048 [ 191.776689][ T9453] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 191.794310][ T9453] overlayfs: failed to resolve './bus': -2 [ 191.798132][ T9453] EXT4-fs error (device loop3): ext4_lookup:1787: inode #14: comm syz.3.995: invalid fast symlink length 39 [ 191.875799][ T8947] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 192.094924][ T9272] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 192.210233][ T9464] loop3: detected capacity change from 0 to 32768 [ 192.250240][ T9480] overlayfs: missing 'lowerdir' [ 192.266256][ T9464] loop3: p1 p3 < p5 p6 > [ 192.388788][ T9486] netlink: 'syz.0.1001': attribute type 32 has an invalid length. [ 192.388809][ T9486] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1001'. [ 192.415870][ T9486] bond2: option coupled_control: invalid value (115) [ 192.429570][ T9486] bond2 (unregistering): Released all slaves [ 192.489246][ T9480] loop8: detected capacity change from 0 to 8192 [ 192.506052][ T9480] loop8: p1 < > p3 p4 < > [ 192.525286][ T9480] loop8: p3 start 986112 is beyond EOD, truncated [ 193.207564][ T7892] udevd[7892]: inotify_add_watch(7, /dev/loop3p6, 10) failed: No such file or directory [ 193.222834][ T7899] udevd[7899]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 193.229152][ T7762] udevd[7762]: inotify_add_watch(7, /dev/loop3p5, 10) failed: No such file or directory [ 193.248568][ T7906] udevd[7906]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 193.351011][ T9521] loop3: detected capacity change from 0 to 128 [ 193.377531][ T9521] macvtap1: entered promiscuous mode [ 193.377547][ T9521] dummy0: entered promiscuous mode [ 193.377706][ T9521] macvtap1: entered allmulticast mode [ 193.377717][ T9521] dummy0: entered allmulticast mode [ 193.384896][ T9521] dummy0: left allmulticast mode [ 193.399210][ T7906] udevd[7906]: inotify_add_watch(7, /dev/loop8p4, 10) failed: No such file or directory [ 193.403347][ T7823] udevd[7823]: inotify_add_watch(7, /dev/loop8p1, 10) failed: No such file or directory [ 193.407141][ T8607] dummy0: left promiscuous mode [ 193.409459][ T9518] loop8: detected capacity change from 0 to 512 [ 193.699027][ T4720] Bluetooth: hci1: command 0x0c1a tx timeout [ 193.915039][ T9534] loop8: detected capacity change from 0 to 128 [ 195.245407][ T9572] input: syz1 as /devices/virtual/input/input7 [ 195.395759][ T9576] syzkaller0: entered promiscuous mode [ 195.395775][ T9576] syzkaller0: entered allmulticast mode [ 195.421217][ T9578] loop8: detected capacity change from 0 to 256 [ 195.434408][ T9578] FAT-fs (loop8): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 195.475066][ T9578] FAT-fs (loop8): error, corrupted file size (i_pos 196, 16779264) [ 195.475086][ T9578] FAT-fs (loop8): Filesystem has been set read-only [ 195.632291][ T9579] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1028'. [ 195.759116][ T4720] Bluetooth: hci1: command 0x0c1a tx timeout [ 195.808094][ T9579] FAT-fs (loop8): error, corrupted file size (i_pos 196, 16779008) [ 195.808124][ T9579] FAT-fs (loop8): error, corrupted file size (i_pos 196, 16779008) [ 195.808151][ T9579] FAT-fs (loop8): error, corrupted file size (i_pos 196, 16779008) [ 195.808166][ T9579] FAT-fs (loop8): error, corrupted file size (i_pos 196, 16779008) [ 195.909742][ T9587] loop3: detected capacity change from 0 to 128 [ 197.205716][ T9596] loop8: detected capacity change from 0 to 128 [ 198.249255][ T9625] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1042'. [ 198.253825][ T9625] gtp0: entered allmulticast mode [ 201.631959][ T9648] loop3: detected capacity change from 0 to 256 [ 201.643219][ T9649] loop8: detected capacity change from 0 to 2048 [ 201.743135][ T9649] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 202.074518][ T6705] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 202.375197][ T9679] loop3: detected capacity change from 0 to 256 [ 202.411685][ T9679] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 202.451108][ T9679] FAT-fs (loop3): error, allocated dir entry found after end-of-directory marker (i_pos 1) [ 202.451128][ T9679] FAT-fs (loop3): Filesystem has been set read-only [ 202.589253][ T9685] erspan0: entered promiscuous mode [ 203.043138][ T9709] ip6gre1: entered allmulticast mode [ 203.303274][ T9724] Invalid ELF header type: 2 != 1 [ 203.718100][ T9752] FAULT_INJECTION: forcing a failure. [ 203.718100][ T9752] name failslab, interval 1, probability 0, space 0, times 0 [ 203.718128][ T9752] CPU: 0 UID: 0 PID: 9752 Comm: syz.3.1079 Tainted: G L syzkaller #0 PREEMPT [ 203.718145][ T9752] Tainted: [L]=SOFTLOCKUP [ 203.718149][ T9752] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 203.718155][ T9752] Call trace: [ 203.718158][ T9752] show_stack+0x2c/0x3c (C) [ 203.718177][ T9752] __dump_stack+0x30/0x40 [ 203.718189][ T9752] dump_stack_lvl+0xd8/0x12c [ 203.718200][ T9752] dump_stack+0x1c/0x28 [ 203.718211][ T9752] should_fail_ex+0x41c/0x590 [ 203.718225][ T9752] should_failslab+0xc4/0x120 [ 203.718239][ T9752] __kmalloc_noprof+0x108/0x6c8 [ 203.718248][ T9752] __memcg_list_lru_alloc+0x1c4/0x4e8 [ 203.718258][ T9752] memcg_list_lru_alloc+0xc4/0xf8 [ 203.718266][ T9752] __memcg_slab_post_alloc_hook+0x28c/0x8c0 [ 203.718279][ T9752] kmem_cache_alloc_lru_noprof+0x32c/0x5d8 [ 203.718288][ T9752] __d_alloc+0x50/0x690 [ 203.718297][ T9752] d_alloc+0x54/0x17c [ 203.718306][ T9752] d_alloc_name+0x98/0xe0 [ 203.718314][ T9752] devpts_pty_new+0x260/0x51c [ 203.718325][ T9752] ptmx_open+0x1d4/0x2d8 [ 203.718335][ T9752] chrdev_open+0x398/0x3e8 [ 203.718345][ T9752] do_dentry_open+0x5c4/0xfc0 [ 203.718357][ T9752] vfs_open+0x44/0x2dc [ 203.718368][ T9752] path_openat+0x1084/0x18f4 [ 203.718378][ T9752] do_file_open+0x1c8/0x2e8 [ 203.718388][ T9752] do_sys_openat2+0x114/0x1e8 [ 203.718399][ T9752] do_sys_open+0xb0/0xe0 [ 203.718410][ T9752] __arm64_sys_openat+0xa8/0xc4 [ 203.718422][ T9752] invoke_syscall+0x98/0x244 [ 203.718434][ T9752] el0_svc_common+0xec/0x23c [ 203.718445][ T9752] do_el0_svc+0x4c/0x5c [ 203.718456][ T9752] el0_svc+0x64/0x260 [ 203.718467][ T9752] el0t_64_sync_handler+0x44/0x104 [ 203.718478][ T9752] el0t_64_sync+0x198/0x19c [ 203.798738][ T30] audit: type=1326 audit(524492.271:423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9749 comm="syz.6.1078" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=9 arch=c00000b7 syscall=98 compat=0 ip=0xffffa2d79368 code=0x0 [ 204.201796][ T9781] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1086'. [ 204.201905][ T9781] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1086'. [ 205.094162][ T9841] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1107'. [ 205.453130][ T6312] IPVS: starting estimator thread 0... [ 205.546210][ T9872] IPVS: using max 59 ests per chain, 141600 per kthread [ 205.548029][ T9866] FAULT_INJECTION: forcing a failure. [ 205.548029][ T9866] name fail_futex, interval 1, probability 0, space 0, times 0 [ 205.548051][ T9866] CPU: 0 UID: 0 PID: 9866 Comm: syz.8.1115 Tainted: G L syzkaller #0 PREEMPT [ 205.548065][ T9866] Tainted: [L]=SOFTLOCKUP [ 205.548068][ T9866] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 205.548074][ T9866] Call trace: [ 205.548077][ T9866] show_stack+0x2c/0x3c (C) [ 205.548099][ T9866] __dump_stack+0x30/0x40 [ 205.548111][ T9866] dump_stack_lvl+0xd8/0x12c [ 205.548123][ T9866] dump_stack+0x1c/0x28 [ 205.548134][ T9866] should_fail_ex+0x41c/0x590 [ 205.548147][ T9866] should_fail+0x14/0x24 [ 205.548159][ T9866] get_futex_key+0x1ec/0x12b0 [ 205.548170][ T9866] futex_wait_setup+0x58/0x674 [ 205.548181][ T9866] __futex_wait+0x108/0x25c [ 205.548192][ T9866] futex_wait+0x108/0x2c0 [ 205.548203][ T9866] do_futex+0x320/0x378 [ 205.548214][ T9866] __arm64_sys_futex+0x2e4/0x418 [ 205.548224][ T9866] invoke_syscall+0x98/0x244 [ 205.548237][ T9866] el0_svc_common+0xec/0x23c [ 205.548248][ T9866] do_el0_svc+0x4c/0x5c [ 205.548259][ T9866] el0_svc+0x64/0x260 [ 205.548270][ T9866] el0t_64_sync_handler+0x44/0x104 [ 205.548281][ T9866] el0t_64_sync+0x198/0x19c [ 205.671484][ T9882] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 205.671677][ T9882] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 206.455880][ T9920] binder: 9917:9920 ioctl c018620b 0 returned -14 [ 206.858779][ T9938] Bluetooth: ISO socket layer initialized [ 207.343298][ T9965] 8021q: adding VLAN 0 to HW filter on device bond1 [ 208.100518][T10012] Bluetooth: MGMT ver 1.23 [ 208.427636][T10032] mac80211_hwsim hwsim16 wlan0: left promiscuous mode [ 209.186175][T10069] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 209.187293][T10069] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 209.258451][T10078] bridge0: port 3(syz_tun) entered blocking state [ 209.258493][T10078] bridge0: port 3(syz_tun) entered disabled state [ 209.262443][T10078] syz_tun: entered promiscuous mode [ 209.262721][T10078] bridge0: port 3(syz_tun) entered blocking state [ 209.262754][T10078] bridge0: port 3(syz_tun) entered forwarding state [ 209.403053][T10084] netlink: 'syz.7.1180': attribute type 63 has an invalid length. [ 209.784957][T10106] oom_control is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 209.860404][T10108] random: crng reseeded on system resumption [ 209.911060][T10113] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 209.911313][T10113] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 210.228570][ T4713] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 210.244076][T10135] file system registered [ 210.297239][ T4708] ffs_data_put(): freeing [ 210.569921][T10143] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 210.607624][T10144] 8021q: adding VLAN 0 to HW filter on device bond2 [ 210.889338][T10153] bridge0: port 3(syz_tun) entered blocking state [ 210.889365][T10153] bridge0: port 3(syz_tun) entered disabled state [ 210.889481][T10153] syz_tun: entered allmulticast mode [ 210.892405][T10153] syz_tun: entered promiscuous mode [ 210.975709][T10158] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 211.017994][T10158] md: could not open device unknown-block(1,0). [ 211.635109][T10189] syz.6.1226: vmalloc error: size 8192, failed to allocate pages, mode:0x404dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_RETRY_MAYFAIL), nodemask=(null),cpuset=/,mems_allowed=0 [ 211.635153][T10189] CPU: 0 UID: 0 PID: 10189 Comm: syz.6.1226 Tainted: G L syzkaller #0 PREEMPT [ 211.635166][T10189] Tainted: [L]=SOFTLOCKUP [ 211.635170][T10189] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 211.635183][T10189] Call trace: [ 211.635186][T10189] show_stack+0x2c/0x3c (C) [ 211.635203][T10189] __dump_stack+0x30/0x40 [ 211.635215][T10189] dump_stack_lvl+0xd8/0x12c [ 211.635227][T10189] dump_stack+0x1c/0x28 [ 211.635238][T10189] warn_alloc+0x1c4/0x1d8 [ 211.635247][T10189] __vmalloc_node_range_noprof+0xc28/0xe9c [ 211.635257][T10189] __kvmalloc_node_noprof+0x49c/0x7fc [ 211.635267][T10189] alloc_netdev_mqs+0xac/0xf34 [ 211.635280][T10189] alloc_etherdev_mqs+0x48/0x5c [ 211.635289][T10189] gether_setup_name_default+0x30/0x444 [ 211.635303][T10189] rndis_alloc_inst+0x12c/0x320 [ 211.635313][T10189] try_get_usb_function_instance+0xe4/0x164 [ 211.635326][T10189] usb_get_function_instance+0x24/0xb0 [ 211.635339][T10189] function_make+0x110/0x300 [ 211.635347][T10189] configfs_mkdir+0x374/0x7d4 [ 211.635356][T10189] vfs_mkdir+0x2e4/0x46c [ 211.635367][T10189] filename_mkdirat+0x228/0x3f4 [ 211.635378][T10189] __arm64_sys_mkdirat+0x9c/0xc0 [ 211.635389][T10189] invoke_syscall+0x98/0x244 [ 211.635401][T10189] el0_svc_common+0xec/0x23c [ 211.635413][T10189] do_el0_svc+0x4c/0x5c [ 211.635424][T10189] el0_svc+0x64/0x260 [ 211.635436][T10189] el0t_64_sync_handler+0x44/0x104 [ 211.635446][T10189] el0t_64_sync+0x198/0x19c [ 211.635457][T10189] Mem-Info: [ 211.635461][T10189] active_anon:150 inactive_anon:17579 isolated_anon:0 [ 211.635461][T10189] active_file:3614 inactive_file:17836 isolated_file:0 [ 211.635461][T10189] unevictable:768 dirty:305 writeback:0 [ 211.635461][T10189] slab_reclaimable:9817 slab_unreclaimable:93223 [ 211.635461][T10189] mapped:29502 shmem:11722 pagetables:1558 [ 211.635461][T10189] sec_pagetables:0 bounce:0 [ 211.635461][T10189] kernel_misc_reclaimable:0 [ 211.635461][T10189] free:1322107 free_pcp:9581 free_cma:7616 [ 211.635483][T10189] Node 0 active_anon:600kB inactive_anon:70316kB active_file:14456kB inactive_file:71344kB unevictable:3072kB isolated(anon):0kB isolated(file):0kB mapped:118008kB dirty:1220kB writeback:0kB shmem:46888kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:10976kB pagetables:6232kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 211.635505][T10189] Node 0 DMA free:3077888kB boost:0kB min:20360kB low:25448kB high:30536kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3145728kB managed:3080192kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:30464kB [ 211.635530][T10189] lowmem_reserve[]: 0 0 3650 3650 3650 [ 211.635549][T10189] Node 0 Normal free:2210540kB boost:0kB min:24692kB low:30864kB high:37036kB reserved_highatomic:0kB free_highatomic:0kB active_anon:600kB inactive_anon:70316kB active_file:14456kB inactive_file:71344kB unevictable:3072kB writepending:1220kB zspages:0kB present:5242880kB managed:3738576kB mlocked:0kB bounce:0kB free_pcp:38324kB local_pcp:38324kB free_cma:0kB [ 211.635578][T10189] lowmem_reserve[]: 0 0 0 0 0 [ 211.635600][T10189] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 1*256kB (C) 1*512kB (C) 1*1024kB (C) 0*2048kB 751*4096kB (MC) = 3077888kB [ 211.635666][T10189] Node 0 Normal: 1039*4kB (ME) 650*8kB (UM) 448*16kB (UM) 143*32kB (ME) 96*64kB (UME) 45*128kB (UM) 56*256kB (UME) 23*512kB (UME) 13*1024kB (UM) 4*2048kB (U) 520*4096kB (UM) = 2210540kB [ 211.635749][T10189] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 211.635756][T10189] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=32768kB [ 211.635763][T10189] Node 0 hugepages_total=259 hugepages_free=259 hugepages_surp=0 hugepages_size=2048kB [ 211.635770][T10189] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=64kB [ 211.635777][T10189] 33165 total pagecache pages [ 211.635781][T10189] 0 pages in swap cache [ 211.635785][T10189] Free swap = 124996kB [ 211.635789][T10189] Total swap = 124996kB [ 211.635792][T10189] 2097152 pages RAM [ 211.635796][T10189] 0 pages HighMem/MovableOnly [ 211.635799][T10189] 392460 pages reserved [ 211.635803][T10189] 8192 pages cma reserved [ 211.635807][T10189] 7 pages hwpoisoned [ 211.832753][ C0] net_ratelimit: 1536 callbacks suppressed [ 211.921585][T10201] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1232'. [ 211.945706][T10203] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 211.974035][T10203] md: could not open device unknown-block(1,0). [ 212.366604][T10227] can0: slcan on ttyS3. [ 212.444853][T10227] can0 (unregistered): slcan off ttyS3. [ 212.470119][T10238] bridge0: port 3(syz_tun) entered blocking state [ 212.470148][T10238] bridge0: port 3(syz_tun) entered disabled state [ 212.470272][T10238] syz_tun: entered allmulticast mode [ 212.471057][T10238] syz_tun: left allmulticast mode [ 212.545099][T10245] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 212.552171][T10241] netlink: 'syz.6.1252': attribute type 11 has an invalid length. [ 212.575057][T10245] md: could not open device unknown-block(1,0). [ 212.983207][T10267] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 213.044538][T10267] md: could not open device unknown-block(1,0). [ 213.157817][T10261] bridge0: port 3(syz_tun) entered disabled state [ 213.171805][T10261] bridge0: port 2(bridge_slave_1) entered disabled state [ 213.171969][T10261] bridge0: port 1(bridge_slave_0) entered disabled state [ 213.384659][T10261] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 213.400550][T10261] batman_adv: batadv0: Interface deactivated: batadv_slave_1 ** 104 printk messages dropped ** [ 214.152962][ T6302] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.152991][ T6302] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.153014][ T6302] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.153031][ T6302] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.967287][T10326] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1278'. [ 215.204140][ T6523] ffs_data_put(): freeing [ 215.286989][T10338] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 215.607467][T10349] pim6reg: entered allmulticast mode [ 215.913954][T10343] pim6reg: left allmulticast mode [ 215.956737][ T8947] ffs_data_put(): freeing [ 216.026826][T10369] FAULT_INJECTION: forcing a failure. [ 216.026826][T10369] name failslab, interval 1, probability 0, space 0, times 0 [ 216.026846][T10369] CPU: 0 UID: 0 PID: 10369 Comm: syz.0.1296 Tainted: G L syzkaller #0 PREEMPT [ 216.026860][T10369] Tainted: [L]=SOFTLOCKUP [ 216.026863][T10369] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 216.026877][T10369] Call trace: [ 216.026880][T10369] show_stack+0x2c/0x3c (C) [ 216.026901][T10369] __dump_stack+0x30/0x40 [ 216.026915][T10369] dump_stack_lvl+0xd8/0x12c [ 216.026927][T10369] dump_stack+0x1c/0x28 [ 216.026939][T10369] should_fail_ex+0x41c/0x590 [ 216.026953][T10369] should_failslab+0xc4/0x120 [ 216.026967][T10369] kmem_cache_alloc_noprof+0x94/0x5d4 [ 216.026976][T10369] do_getname_kernel+0x60/0x1f4 [ 216.026985][T10369] kern_path+0x30/0x70 [ 216.026994][T10369] lookup_bdev+0xc0/0x264 [ 216.027003][T10369] __arm64_sys_quotactl+0x280/0xa18 [ 216.027015][T10369] invoke_syscall+0x98/0x244 [ 216.027028][T10369] el0_svc_common+0xec/0x23c [ 216.027040][T10369] do_el0_svc+0x4c/0x5c [ 216.027051][T10369] el0_svc+0x64/0x260 [ 216.027063][T10369] el0t_64_sync_handler+0x44/0x104 [ 216.027074][T10369] el0t_64_sync+0x198/0x19c [ 216.801339][T10415] sctp: [Deprecated]: syz.0.1317 (pid 10415) Use of struct sctp_assoc_value in delayed_ack socket option. [ 216.801339][T10415] Use struct sctp_sack_info instead [ 216.905354][T10419] net_ratelimit: 536 callbacks suppressed [ 217.469051][T10446] loop6: detected capacity change from 0 to 512 [ 217.500129][T10446] EXT4-fs error (device loop6): __ext4_iget:5592: inode #11: block 1: comm syz.6.1333: invalid block [ 217.500148][T10446] loop6: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 217.500306][T10446] EXT4-fs error (device loop6): ext4_orphan_get:1408: comm syz.6.1333: couldn't read orphan inode 11 (err -117) [ 217.500320][T10446] loop6: lost filesystem error report for type 5 error -117 [ 217.500912][T10446] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 217.532911][T10450] hsr0: entered allmulticast mode [ 217.532926][T10450] hsr_slave_0: entered allmulticast mode [ 217.532940][T10450] hsr_slave_1: entered allmulticast mode [ 217.562810][T10450] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1337'. [ 217.601225][T10450] hsr_slave_0: left promiscuous mode [ 217.659106][T10450] hsr_slave_1: left promiscuous mode [ 217.678529][T10463] FAULT_INJECTION: forcing a failure. [ 217.678529][T10463] name failslab, interval 1, probability 0, space 0, times 0 [ 217.678550][T10463] CPU: 0 UID: 0 PID: 10463 Comm: syz.3.1340 Tainted: G L syzkaller #0 PREEMPT [ 217.678564][T10463] Tainted: [L]=SOFTLOCKUP [ 217.678568][T10463] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 217.678586][T10463] Call trace: [ 217.678589][T10463] show_stack+0x2c/0x3c (C) [ 217.678612][T10463] __dump_stack+0x30/0x40 [ 217.678625][T10463] dump_stack_lvl+0xd8/0x12c [ 217.678639][T10463] dump_stack+0x1c/0x28 [ 217.678651][T10463] should_fail_ex+0x41c/0x590 [ 217.678665][T10463] should_failslab+0xc4/0x120 [ 217.678679][T10463] __kmalloc_cache_noprof+0x94/0x5fc [ 217.678688][T10463] alloc_fs_context+0x7c/0xba4 [ 217.678698][T10463] fs_context_for_mount+0x34/0x44 [ 217.678707][T10463] mq_init_ns+0xdc/0x638 [ 217.678720][T10463] copy_ipcs+0x3c8/0x63c [ 217.678732][T10463] create_new_namespaces+0x1a8/0x50c [ 217.678744][T10463] unshare_nsproxy_namespaces+0x120/0x170 [ 217.678755][T10463] ksys_unshare+0x438/0x6cc [ 217.678764][T10463] __arm64_sys_unshare+0x40/0x54 [ 217.678774][T10463] invoke_syscall+0x98/0x244 [ 217.678786][T10463] el0_svc_common+0xec/0x23c [ 217.678798][T10463] do_el0_svc+0x4c/0x5c [ 217.678809][T10463] el0_svc+0x64/0x260 [ 217.678821][T10463] el0t_64_sync_handler+0x44/0x104 [ 217.678832][T10463] el0t_64_sync+0x198/0x19c [ 217.707220][T10463] FAULT_INJECTION: forcing a failure. [ 217.707220][T10463] name failslab, interval 1, probability 0, space 0, times 0 [ 217.707241][T10463] CPU: 0 UID: 0 PID: 10463 Comm: syz.3.1340 Tainted: G L syzkaller #0 PREEMPT [ 217.707255][T10463] Tainted: [L]=SOFTLOCKUP [ 217.707258][T10463] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 217.707274][T10463] Call trace: [ 217.707277][T10463] show_stack+0x2c/0x3c (C) [ 217.707295][T10463] __dump_stack+0x30/0x40 [ 217.707307][T10463] dump_stack_lvl+0xd8/0x12c [ 217.707319][T10463] dump_stack+0x1c/0x28 [ 217.707330][T10463] should_fail_ex+0x41c/0x590 [ 217.707343][T10463] should_failslab+0xc4/0x120 [ 217.707355][T10463] __kmalloc_cache_noprof+0x94/0x5fc [ 217.707364][T10463] mqueue_init_fs_context+0x64/0x4dc [ 217.707377][T10463] alloc_fs_context+0x7d8/0xba4 [ 217.707386][T10463] fs_context_for_mount+0x34/0x44 [ 217.707395][T10463] mq_init_ns+0xdc/0x638 [ 217.707406][T10463] copy_ipcs+0x3c8/0x63c [ 217.707419][T10463] create_new_namespaces+0x1a8/0x50c [ 217.707429][T10463] unshare_nsproxy_namespaces+0x120/0x170 [ 217.707440][T10463] ksys_unshare+0x438/0x6cc [ 217.707449][T10463] __arm64_sys_unshare+0x40/0x54 [ 217.707458][T10463] invoke_syscall+0x98/0x244 [ 217.707470][T10463] el0_svc_common+0xec/0x23c [ 217.707482][T10463] do_el0_svc+0x4c/0x5c [ 217.707493][T10463] el0_svc+0x64/0x260 [ 217.707503][T10463] el0t_64_sync_handler+0x44/0x104 [ 217.707514][T10463] el0t_64_sync+0x198/0x19c [ 217.709747][T10463] FAULT_INJECTION: forcing a failure. [ 217.709747][T10463] name fail_futex, interval 1, probability 0, space 0, times 0 [ 217.709770][T10463] CPU: 0 UID: 0 PID: 10463 Comm: syz.3.1340 Tainted: G L syzkaller #0 PREEMPT [ 217.709783][T10463] Tainted: [L]=SOFTLOCKUP [ 217.709786][T10463] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 217.709799][T10463] Call trace: [ 217.709801][T10463] show_stack+0x2c/0x3c (C) [ 217.709814][T10463] __dump_stack+0x30/0x40 [ 217.709826][T10463] dump_stack_lvl+0xd8/0x12c [ 217.709837][T10463] dump_stack+0x1c/0x28 [ 217.709849][T10463] should_fail_ex+0x41c/0x590 [ 217.709861][T10463] should_fail+0x14/0x24 [ 217.709872][T10463] get_futex_key+0x1ec/0x12b0 [ 217.709883][T10463] futex_wake+0x10c/0x594 [ 217.709894][T10463] do_futex+0x2c4/0x378 [ 217.709905][T10463] __arm64_sys_futex+0x2e4/0x418 [ 217.709915][T10463] invoke_syscall+0x98/0x244 [ 217.709927][T10463] el0_svc_common+0xec/0x23c [ 217.709939][T10463] do_el0_svc+0x4c/0x5c [ 217.709950][T10463] el0_svc+0x64/0x260 [ 217.709960][T10463] el0t_64_sync_handler+0x44/0x104 [ 217.709971][T10463] el0t_64_sync+0x198/0x19c [ 217.773891][ T6523] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 217.872174][T10463] FAULT_INJECTION: forcing a failure. [ 217.872174][T10463] name failslab, interval 1, probability 0, space 0, times 0 [ 217.872187][T10463] CPU: 0 UID: 0 PID: 10463 Comm: syz.3.1340 Tainted: G L syzkaller #0 PREEMPT [ 217.872199][T10463] Tainted: [L]=SOFTLOCKUP [ 217.872202][T10463] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 217.872214][T10463] Call trace: [ 217.872217][T10463] show_stack+0x2c/0x3c (C) [ 217.872231][T10463] __dump_stack+0x30/0x40 [ 217.872243][T10463] dump_stack_lvl+0xd8/0x12c [ 217.872255][T10463] dump_stack+0x1c/0x28 [ 217.872266][T10463] should_fail_ex+0x41c/0x590 [ 217.872280][T10463] should_failslab+0xc4/0x120 [ 217.872293][T10463] __kmalloc_node_track_caller_noprof+0x108/0x6e0 [ 217.872303][T10463] kmemdup_noprof+0x44/0x8c [ 217.872312][T10463] devinet_init_net+0xb8/0x56c [ 217.872321][T10463] ops_init+0x2cc/0x528 [ 217.872331][T10463] setup_net+0x118/0x2fc [ 217.872340][T10463] copy_net_ns+0x454/0x698 [ 217.872350][T10463] create_new_namespaces+0x304/0x50c [ 217.872361][T10463] unshare_nsproxy_namespaces+0x120/0x170 [ 217.872372][T10463] ksys_unshare+0x438/0x6cc [ 217.872381][T10463] __arm64_sys_unshare+0x40/0x54 [ 217.872391][T10463] invoke_syscall+0x98/0x244 [ 217.872403][T10463] el0_svc_common+0xec/0x23c [ 217.872415][T10463] do_el0_svc+0x4c/0x5c [ 217.872427][T10463] el0_svc+0x64/0x260 [ 217.872438][T10463] el0t_64_sync_handler+0x44/0x104 [ 217.872449][T10463] el0t_64_sync+0x198/0x19c [ 217.959266][T10463] FAULT_INJECTION: forcing a failure. [ 217.959266][T10463] name failslab, interval 1, probability 0, space 0, times 0 [ 217.959288][T10463] CPU: 0 UID: 0 PID: 10463 Comm: syz.3.1340 Tainted: G L syzkaller #0 PREEMPT [ 217.959302][T10463] Tainted: [L]=SOFTLOCKUP [ 217.959305][T10463] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 217.959319][T10463] Call trace: [ 217.959322][T10463] show_stack+0x2c/0x3c (C) [ 217.959341][T10463] __dump_stack+0x30/0x40 [ 217.959354][T10463] dump_stack_lvl+0xd8/0x12c [ 217.959366][T10463] dump_stack+0x1c/0x28 [ 217.959377][T10463] should_fail_ex+0x41c/0x590 [ 217.959390][T10463] should_failslab+0xc4/0x120 [ 217.959403][T10463] __kmalloc_noprof+0x108/0x6c8 [ 217.959412][T10463] __list_lru_init+0xa4/0x3e8 [ 217.959421][T10463] sget_fc+0xc60/0x14e8 [ 217.959430][T10463] vfs_get_super+0x40/0x148 [ 217.959440][T10463] get_tree_nodev+0x2c/0x3c [ 217.959449][T10463] mqueue_get_tree+0xac/0xe8 [ 217.959462][T10463] vfs_get_tree+0x90/0x28c [ 217.959472][T10463] fc_mount+0x24/0xac [ 217.959482][T10463] fc_mount_longterm+0x20/0x74 [ 217.959493][T10463] mq_init_ns+0x3c8/0x638 [ 217.959504][T10463] copy_ipcs+0x3c8/0x63c [ 217.959516][T10463] create_new_namespaces+0x1a8/0x50c [ 217.959527][T10463] unshare_nsproxy_namespaces+0x120/0x170 [ 217.959538][T10463] ksys_unshare+0x438/0x6cc [ 217.959547][T10463] __arm64_sys_unshare+0x40/0x54 [ 217.959556][T10463] invoke_syscall+0x98/0x244 [ 217.959568][T10463] el0_svc_common+0xec/0x23c [ 217.959591][T10463] do_el0_svc+0x4c/0x5c [ 217.959605][T10463] el0_svc+0x64/0x260 [ 217.959616][T10463] el0t_64_sync_handler+0x44/0x104 [ 217.959627][T10463] el0t_64_sync+0x198/0x19c [ 218.015511][T10463] FAULT_INJECTION: forcing a failure. [ 218.015511][T10463] name failslab, interval 1, probability 0, space 0, times 0 [ 218.015529][T10463] CPU: 0 UID: 0 PID: 10463 Comm: syz.3.1340 Tainted: G L syzkaller #0 PREEMPT [ 218.015541][T10463] Tainted: [L]=SOFTLOCKUP [ 218.015545][T10463] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 218.015558][T10463] Call trace: [ 218.015561][T10463] show_stack+0x2c/0x3c (C) [ 218.015582][T10463] __dump_stack+0x30/0x40 [ 218.015594][T10463] dump_stack_lvl+0xd8/0x12c [ 218.015606][T10463] dump_stack+0x1c/0x28 [ 218.015618][T10463] should_fail_ex+0x41c/0x590 [ 218.015631][T10463] should_failslab+0xc4/0x120 [ 218.015644][T10463] __kmalloc_noprof+0x108/0x6c8 [ 218.015653][T10463] __list_lru_init+0xa4/0x3e8 [ 218.015662][T10463] sget_fc+0xc94/0x14e8 [ 218.015672][T10463] vfs_get_super+0x40/0x148 [ 218.015681][T10463] get_tree_nodev+0x2c/0x3c [ 218.015691][T10463] mqueue_get_tree+0xac/0xe8 [ 218.015703][T10463] vfs_get_tree+0x90/0x28c [ 218.015713][T10463] fc_mount+0x24/0xac [ 218.015723][T10463] fc_mount_longterm+0x20/0x74 [ 218.015733][T10463] mq_init_ns+0x3c8/0x638 [ 218.015745][T10463] copy_ipcs+0x3c8/0x63c [ 218.015757][T10463] create_new_namespaces+0x1a8/0x50c [ 218.015768][T10463] unshare_nsproxy_namespaces+0x120/0x170 [ 218.015779][T10463] ksys_unshare+0x438/0x6cc [ 218.015788][T10463] __arm64_sys_unshare+0x40/0x54 [ 218.015797][T10463] invoke_syscall+0x98/0x244 [ 218.015809][T10463] el0_svc_common+0xec/0x23c [ 218.015821][T10463] do_el0_svc+0x4c/0x5c [ 218.015832][T10463] el0_svc+0x64/0x260 [ 218.015843][T10463] el0t_64_sync_handler+0x44/0x104 [ 218.015854][T10463] el0t_64_sync+0x198/0x19c [ 218.071111][T10463] FAULT_INJECTION: forcing a failure. [ 218.071111][T10463] name failslab, interval 1, probability 0, space 0, times 0 [ 218.071132][T10463] CPU: 0 UID: 0 PID: 10463 Comm: syz.3.1340 Tainted: G L syzkaller #0 PREEMPT [ 218.071146][T10463] Tainted: [L]=SOFTLOCKUP [ 218.071150][T10463] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 218.071163][T10463] Call trace: [ 218.071166][T10463] show_stack+0x2c/0x3c (C) [ 218.071187][T10463] __dump_stack+0x30/0x40 [ 218.071199][T10463] dump_stack_lvl+0xd8/0x12c [ 218.071211][T10463] dump_stack+0x1c/0x28 [ 218.071222][T10463] should_fail_ex+0x41c/0x590 [ 218.071236][T10463] should_failslab+0xc4/0x120 [ 218.071249][T10463] __kmalloc_cache_noprof+0x94/0x5fc [ 218.071258][T10463] super_dev_alloc+0x5c/0x10c [ 218.071269][T10463] sget_fc+0xcb4/0x14e8 [ 218.071278][T10463] vfs_get_super+0x40/0x148 [ 218.071288][T10463] get_tree_nodev+0x2c/0x3c [ 218.071298][T10463] mqueue_get_tree+0xac/0xe8 [ 218.071311][T10463] vfs_get_tree+0x90/0x28c [ 218.071321][T10463] fc_mount+0x24/0xac [ 218.071331][T10463] fc_mount_longterm+0x20/0x74 [ 218.071342][T10463] mq_init_ns+0x3c8/0x638 [ 218.071354][T10463] copy_ipcs+0x3c8/0x63c [ 218.071366][T10463] create_new_namespaces+0x1a8/0x50c [ 218.071377][T10463] unshare_nsproxy_namespaces+0x120/0x170 [ 218.071388][T10463] ksys_unshare+0x438/0x6cc [ 218.071397][T10463] __arm64_sys_unshare+0x40/0x54 [ 218.071407][T10463] invoke_syscall+0x98/0x244 [ 218.071419][T10463] el0_svc_common+0xec/0x23c [ 218.071431][T10463] do_el0_svc+0x4c/0x5c [ 218.071442][T10463] el0_svc+0x64/0x260 [ 218.071454][T10463] el0t_64_sync_handler+0x44/0x104 [ 218.071465][T10463] el0t_64_sync+0x198/0x19c [ 218.127936][T10463] FAULT_INJECTION: forcing a failure. [ 218.127936][T10463] name failslab, interval 1, probability 0, space 0, times 0 [ 218.127954][T10463] CPU: 0 UID: 0 PID: 10463 Comm: syz.3.1340 Tainted: G L syzkaller #0 PREEMPT [ 218.127968][T10463] Tainted: [L]=SOFTLOCKUP [ 218.127971][T10463] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 218.127984][T10463] Call trace: [ 218.127986][T10463] show_stack+0x2c/0x3c (C) [ 218.128001][T10463] __dump_stack+0x30/0x40 [ 218.128013][T10463] dump_stack_lvl+0xd8/0x12c [ 218.128025][T10463] dump_stack+0x1c/0x28 [ 218.128036][T10463] should_fail_ex+0x41c/0x590 [ 218.128048][T10463] should_failslab+0xc4/0x120 [ 218.128060][T10463] kmem_cache_alloc_lru_noprof+0x98/0x5d8 [ 218.128069][T10463] mqueue_alloc_inode+0x2c/0x48 [ 218.128082][T10463] alloc_inode+0x68/0x198 [ 218.128093][T10463] new_inode+0x20/0x50 [ 218.128103][T10463] mqueue_get_inode+0x40/0x93c [ 218.128115][T10463] mqueue_fill_super+0x110/0x1a8 [ 218.128128][T10463] vfs_get_super+0xb8/0x148 [ 218.128138][T10463] get_tree_nodev+0x2c/0x3c [ 218.128147][T10463] mqueue_get_tree+0xac/0xe8 [ 218.128159][T10463] vfs_get_tree+0x90/0x28c [ 218.128169][T10463] fc_mount+0x24/0xac [ 218.128179][T10463] fc_mount_longterm+0x20/0x74 [ 218.128189][T10463] mq_init_ns+0x3c8/0x638 [ 218.128200][T10463] copy_ipcs+0x3c8/0x63c [ 218.128212][T10463] create_new_namespaces+0x1a8/0x50c [ 218.128223][T10463] unshare_nsproxy_namespaces+0x120/0x170 [ 218.128233][T10463] ksys_unshare+0x438/0x6cc [ 218.128242][T10463] __arm64_sys_unshare+0x40/0x54 [ 218.128252][T10463] invoke_syscall+0x98/0x244 [ 218.128263][T10463] el0_svc_common+0xec/0x23c [ 218.128275][T10463] do_el0_svc+0x4c/0x5c [ 218.128286][T10463] el0_svc+0x64/0x260 [ 218.128296][T10463] el0t_64_sync_handler+0x44/0x104 [ 218.128307][T10463] el0t_64_sync+0x198/0x19c [ 218.313535][T10463] FAULT_INJECTION: forcing a failure. [ 218.313535][T10463] name failslab, interval 1, probability 0, space 0, times 0 [ 218.313557][T10463] CPU: 0 UID: 0 PID: 10463 Comm: syz.3.1340 Tainted: G L syzkaller #0 PREEMPT [ 218.313569][T10463] Tainted: [L]=SOFTLOCKUP [ 218.313572][T10463] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 218.313589][T10463] Call trace: [ 218.313592][T10463] show_stack+0x2c/0x3c (C) [ 218.313613][T10463] __dump_stack+0x30/0x40 [ 218.313623][T10463] dump_stack_lvl+0xd8/0x12c [ 218.313634][T10463] dump_stack+0x1c/0x28 [ 218.313643][T10463] should_fail_ex+0x41c/0x590 [ 218.313655][T10463] should_failslab+0xc4/0x120 [ 218.313666][T10463] kmem_cache_alloc_noprof+0x94/0x5d4 [ 218.313674][T10463] __proc_create+0x348/0x788 [ 218.313684][T10463] proc_create_reg+0x88/0x110 [ 218.313693][T10463] proc_create_net_data+0xa8/0x1bc [ 218.313701][T10463] ac6_proc_init+0x5c/0x78 [ 218.313709][T10463] inet6_net_init+0x434/0x650 [ 218.313717][T10463] ops_init+0x2cc/0x528 [ 218.313726][T10463] setup_net+0x118/0x2fc [ 218.313735][T10463] copy_net_ns+0x454/0x698 [ 218.313743][T10463] create_new_namespaces+0x304/0x50c [ 218.313752][T10463] unshare_nsproxy_namespaces+0x120/0x170 [ 218.313761][T10463] ksys_unshare+0x438/0x6cc [ 218.313769][T10463] __arm64_sys_unshare+0x40/0x54 [ 218.313777][T10463] invoke_syscall+0x98/0x244 [ 218.313787][T10463] el0_svc_common+0xec/0x23c [ 218.313797][T10463] do_el0_svc+0x4c/0x5c [ 218.313806][T10463] el0_svc+0x64/0x260 [ 218.313816][T10463] el0t_64_sync_handler+0x44/0x104 [ 218.313825][T10463] el0t_64_sync+0x198/0x19c [ 218.914348][T10510] netdevsim netdevsim8 netdevsim0: entered allmulticast mode [ 218.914526][T10510] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 219.190866][T10520] ------------[ cut here ]------------ [ 219.190873][T10520] WARNING: net/mac80211/tx.c:6509 at ieee80211_tx_skb_tid+0x3a4/0x44c, CPU#0: syz.8.1373/10520 [ 219.194036][T10520] Modules linked in: [ 219.194751][T10520] CPU: 0 UID: 0 PID: 10520 Comm: syz.8.1373 Tainted: G L syzkaller #0 PREEMPT [ 219.196652][T10520] Tainted: [L]=SOFTLOCKUP [ 219.197415][T10520] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 219.199266][T10520] pstate: 83400005 (Nzcv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 219.200692][T10520] pc : ieee80211_tx_skb_tid+0x3a4/0x44c [ 219.201717][T10520] lr : ieee80211_tx_skb_tid+0x3a4/0x44c [ 219.202747][T10520] sp : ffff800094226990 [ 219.203513][T10520] x29: ffff800094226990 x28: 0000000000000006 x27: ffff0000f6cfca2c [ 219.204983][T10520] x26: 0000000000000000 x25: dfff800000000000 x24: 0000000000000001 [ 219.206425][T10520] x23: 0000000000000000 x22: ffff0000f6c4cec0 x21: 0000000000000007 [ 219.207903][T10520] x20: 00000000ffffffff x19: ffff0000d7c5aa00 x18: 00000000ffffffff [ 219.209331][T10520] x17: 0000000000000003 x16: ffff800088b97000 x15: ffff800084c59180 [ 219.210825][T10520] x14: 000000000092c54a x13: 0000000000000009 x12: 0000000000000009 [ 219.212230][T10520] x11: 00000000460f5f9a x10: 0000000000080000 x9 : 000000000001665e [ 219.213663][T10520] x8 : ffff8000a1bf2000 x7 : ffff8000863021d0 x6 : 0000000000000000 [ 219.215079][T10520] x5 : 0000000000000000 x4 : 0000000000000000 x3 : ffff800086302388 [ 219.216606][T10520] x2 : 0000000000000001 x1 : ffff0000ced09d80 x0 : 0000000000000001 [ 219.218100][T10520] Call trace: [ 219.218659][T10520] ieee80211_tx_skb_tid+0x3a4/0x44c (P) [ 219.219677][T10520] mesh_plink_frame_tx+0x5ec/0xa70 [ 219.220626][T10520] mesh_plink_deactivate+0x128/0x284 [ 219.221565][T10520] mesh_sta_cleanup+0x44/0x80 [ 219.222395][T10520] cleanup_single_sta+0x354/0x4d4 [ 219.223292][T10520] __sta_info_destroy_part2+0x304/0x3d8 [ 219.224285][T10520] __sta_info_flush+0x4c0/0x5f0 [ 219.225163][T10520] ieee80211_do_stop+0x350/0x1bf0 [ 219.226064][T10520] ieee80211_stop+0x1ac/0x1fc [ 219.226913][T10520] __dev_close_many+0x2f4/0x648 [ 219.227783][T10520] netif_close_many+0x1d8/0x51c [ 219.228668][T10520] netif_close+0x150/0x208 [ 219.229483][T10520] dev_close+0xf8/0x1dc [ 219.230196][T10520] nl80211_del_interface+0xcc/0x130 [ 219.231102][T10520] genl_family_rcv_msg_doit+0x1e4/0x2d4 [ 219.232095][T10520] genl_rcv_msg+0x43c/0x620 [ 219.232901][T10520] netlink_rcv_skb+0x238/0x414 [ 219.233754][T10520] genl_rcv+0x38/0x50 [ 219.234466][T10520] netlink_unicast+0x600/0x7f8 [ 219.235309][T10520] netlink_sendmsg+0x648/0x948 [ 219.236140][T10520] __sock_sendmsg+0xc8/0x17c [ 219.236918][T10520] ____sys_sendmsg+0x3d0/0x6c8 [ 219.237782][T10520] ___sys_sendmsg+0x198/0x224 [ 219.238650][T10520] __sys_sendmsg+0x158/0x204 [ 219.239508][T10520] __arm64_sys_sendmsg+0x88/0x9c [ 219.240386][T10520] invoke_syscall+0x98/0x244 [ 219.241214][T10520] el0_svc_common+0xec/0x23c [ 219.242059][T10520] do_el0_svc+0x4c/0x5c [ 219.242778][T10520] el0_svc+0x64/0x260 [ 219.243470][T10520] el0t_64_sync_handler+0x44/0x104 [ 219.244378][T10520] el0t_64_sync+0x198/0x19c [ 219.245170][T10520] irq event stamp: 6121 [ 219.245890][T10520] hardirqs last enabled at (6120): [] _raw_spin_unlock_irqrestore+0x38/0x98 [ 219.247666][T10520] hardirqs last disabled at (6121): [] el1_brk64+0x20/0x54 [ 219.249195][T10520] softirqs last enabled at (6110): [] ieee80211_txq_purge+0x264/0x340 [ 219.250984][T10520] softirqs last disabled at (6112): [] mesh_plink_deactivate+0x70/0x284 [ 219.252753][T10520] ---[ end trace 0000000000000000 ]--- [ 219.298880][T10520] ------------[ cut here ]------------ [ 219.298889][T10520] WARNING: net/mac80211/iface.c:538 at ieee80211_do_stop+0x17bc/0x1bf0, CPU#0: syz.8.1373/10520 [ 219.301756][T10520] Modules linked in: [ 219.302432][T10520] CPU: 0 UID: 0 PID: 10520 Comm: syz.8.1373 Tainted: G W L syzkaller #0 PREEMPT [ 219.304366][T10520] Tainted: [W]=WARN, [L]=SOFTLOCKUP [ 219.305301][T10520] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 219.307138][T10520] pstate: 83400005 (Nzcv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 219.308624][T10520] pc : ieee80211_do_stop+0x17bc/0x1bf0 [ 219.309678][T10520] lr : ieee80211_do_stop+0x17bc/0x1bf0 [ 219.310685][T10520] sp : ffff800094226d40 [ 219.311472][T10520] x29: ffff800094226f30 x28: ffff800094226e00 x27: ffff0000eff80f60 [ 219.312972][T10520] x26: dfff800000000000 x25: 1fffe0001ed89d8e x24: ffff0000f6c4cec0 [ 219.314471][T10520] x23: ffff800094226e20 x22: ffff0000f6c4ec70 x21: 0000000000000001 [ 219.315924][T10520] x20: dfff800000000000 x19: ffff0000f6c4d930 x18: 1fffe00035bac428 [ 219.317396][T10520] x17: 0000000000000003 x16: ffff800088b97000 x15: ffff800084c59180 [ 219.318892][T10520] x14: 000000000092c81b x13: 0000000000000009 x12: 0000000000000009 [ 219.320320][T10520] x11: 0000000055e389e4 x10: 0000000000080000 x9 : 00000000000417f8 [ 219.321785][T10520] x8 : ffff8000a1bf2000 x7 : ffff8000862191c4 x6 : 0000000000000000 [ 219.323217][T10520] x5 : 0000000000000000 x4 : 0000000000000000 x3 : ffff80008627324c [ 219.324666][T10520] x2 : 0000000000000001 x1 : ffff0000ced09d80 x0 : 0000000000000001 [ 219.326151][T10520] Call trace: [ 219.326726][T10520] ieee80211_do_stop+0x17bc/0x1bf0 (P) [ 219.327744][T10520] ieee80211_stop+0x1ac/0x1fc [ 219.328621][T10520] __dev_close_many+0x2f4/0x648 [ 219.329507][T10520] netif_close_many+0x1d8/0x51c [ 219.330361][T10520] netif_close+0x150/0x208 [ 219.331108][T10520] dev_close+0xf8/0x1dc [ 219.331827][T10520] nl80211_del_interface+0xcc/0x130 [ 219.332744][T10520] genl_family_rcv_msg_doit+0x1e4/0x2d4 [ 219.333714][T10520] genl_rcv_msg+0x43c/0x620 [ 219.334511][T10520] netlink_rcv_skb+0x238/0x414 [ 219.335342][T10520] genl_rcv+0x38/0x50 [ 219.336058][T10520] netlink_unicast+0x600/0x7f8 [ 219.336893][T10520] netlink_sendmsg+0x648/0x948 [ 219.337741][T10520] __sock_sendmsg+0xc8/0x17c [ 219.338516][T10520] ____sys_sendmsg+0x3d0/0x6c8 [ 219.339384][T10520] ___sys_sendmsg+0x198/0x224 [ 219.340219][T10520] __sys_sendmsg+0x158/0x204 [ 219.341022][T10520] __arm64_sys_sendmsg+0x88/0x9c [ 219.341866][T10520] invoke_syscall+0x98/0x244 [ 219.342679][T10520] el0_svc_common+0xec/0x23c [ 219.343485][T10520] do_el0_svc+0x4c/0x5c [ 219.344223][T10520] el0_svc+0x64/0x260 [ 219.344910][T10520] el0t_64_sync_handler+0x44/0x104 [ 219.345794][T10520] el0t_64_sync+0x198/0x19c [ 219.346570][T10520] irq event stamp: 6460 [ 219.347271][T10520] hardirqs last enabled at (6459): [] kasan_quarantine_put+0xb4/0x1c4 [ 219.348997][T10520] hardirqs last disabled at (6460): [] el1_brk64+0x20/0x54 [ 219.350507][T10520] softirqs last enabled at (6418): [] mesh_path_flush_by_nexthop+0x108/0x124 [ 219.352368][T10520] softirqs last disabled at (6416): [] mesh_path_flush_by_nexthop+0x54/0x124 [ 219.354275][T10520] ---[ end trace 0000000000000000 ]--- [ 222.071243][ C0] net_ratelimit: 269 callbacks suppressed [ 227.430883][ C0] net_ratelimit: 29 callbacks suppressed