last executing test programs: 2m13.886145835s ago: executing program 0 (id=1): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r0, 0x18000000000002a0, 0x1c, 0x0, &(0x7f00000012c0)="b9354b27b553aeee40000b0000a4df2a9080f3c9aa55548f47b480f3", 0x0, 0x603, 0x60000009, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) ioctl$I2C_FUNCS(0xffffffffffffffff, 0x705, &(0x7f0000000000)=0x7) 2m13.62577994s ago: executing program 0 (id=9): r0 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000bc0)=@filter={'filter\x00', 0x42, 0x4, 0xaf8, 0xffffffff, 0x0, 0x990, 0x990, 0xffffffff, 0xffffffff, 0xa60, 0xa60, 0xa60, 0xffffffff, 0x5, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'netpci0\x00', 'nr0\x00', {0xff}}, 0x74000002, 0x70, 0x98, 0x1ba, {0x46010000, 0x2c000000000000}}, @REJECT={0x28}}, {{@ip={@private=0xa010101, @multicast2, 0xff, 0x0, 'netpci0\x00', 'team_slave_1\x00'}, 0x287, 0x898, 0x8f8, 0x0, {}, [@common=@unspec=@u32={{0x7e0}, {[{[{0x5, 0x3}, {0x6}, {0x7, 0x3}, {0x5, 0x1}, {0x1ff}, {0xb6de}, {0x8001, 0x3}, {0x40}, {0xe, 0x2}, {0xfffffffe, 0x3}], [{0xa, 0x4}, {0x8fb, 0x3ae6}, {0x2, 0x3}, {0x8001, 0x10}, {0xfffffff7, 0x1}, {0xfffffffa, 0x39}, {0x3, 0x7}, {0x400, 0x9}, {0x9, 0x3}, {0x5, 0xf}, {0x5, 0xfffff000}], 0x1, 0x4}, {[{0x3, 0x3}, {0x4000000}, {0x4, 0x1}, {0xbab, 0x1}, {0x5}, {0x4d9c, 0x2}, {0x1, 0x3}, {0xe75d, 0x1}, {0x7fffffff, 0x2}, {0x4b8}, {0x7}], [{0x10}, {0x10000, 0x1}, {0x8}, {0x1, 0xffffff00}, {0xe, 0x1}, {0xe00, 0x8}, {0xd, 0x1}, {0xf, 0x5}, {0xee25, 0xc}, {0x4, 0x81cc}, {0x7e, 0x100}], 0x0, 0x3}, {[{0x401}, {0x1f, 0x1}, {0x9, 0x2}, {0xa, 0x3}, {0x2e07}, {0x8}, {0xec21, 0x1}, {0x0, 0x3}, {0x0, 0x1}, {0x10000}, {0x5, 0x1}], [{0x5, 0x8}, {0xfffffffa, 0x7ff}, {0xfffffffb, 0x3}, {0x1937, 0x7}, {0x0, 0x4}, {0x3, 0xa}, {0x1, 0x7}, {0x9, 0x6}, {0x0, 0x91b}, {0x3, 0x6}, {0x8, 0xb2}], 0x5, 0x6}, {[{0x40, 0x1}, {0x400, 0x3}, {0x9e, 0x2}, {0x2, 0x1}, {0x7, 0x3}, {0xff}, {0x2, 0x1}, {0x2}, {0x91, 0x1}, {0xeb1}, {0x81, 0x2}], [{0x4, 0x8}, {0x1ff, 0x6}, {0x1, 0x8001}, {0x4}, {0xd, 0xfff}, {0x2, 0x800}, {0x1, 0xe3}, {0x3, 0xb}, {0x18000000, 0x7fffffff}, {0x3}, {0x8, 0x3ff}], 0x8, 0x2}, {[{0xc85b, 0x1}, {0x1ff, 0x1}, {0xfffffff7}, {0x6, 0x6}, {0x3, 0x2}, {0x47e, 0x2}, {0x7, 0x1}, {0x1, 0x2}, {0x7}, {0x8, 0x2}, {0x8, 0x2}], [{0xc, 0x1}, {0xffff, 0x4}, {0x2, 0xd2}, {0x4, 0x8}, {0xb, 0x80}, {0x2, 0x1}, {0x4d}, {0x3, 0xffffffff}, {0x3, 0x7}, {0x32, 0x7}, {0xd, 0x5}], 0x3, 0x8}, {[{0x7fffffff}, {0x6}, {}, {0xfffeffff}, {0x5, 0x3}, {0x0, 0x3}, {0x0, 0x1}, {0x2, 0x1}, {0x4, 0x3}, {0x3, 0x1}, {0x4, 0x1}], [{0x3, 0x6}, {0xe763, 0x9}, {0x3, 0xfffffffd}, {0x9, 0x81}, {0x5, 0x60000000}, {0x80, 0x89f}, {0x8, 0xf}, {0xfffffc00, 0xa0}, {0x5, 0x400000}, {0x78, 0x8}, {0xffffff4c, 0x9}], 0x0, 0x7}, {[{0x7, 0x2}, {0x800, 0x2}, {0x0, 0x2}, {0x2, 0x3}, {0x0, 0x3}, {0x99a, 0x2}, {0x3, 0x3}, {0x2, 0x1}, {0x6, 0x1}, {0x967, 0x2}, {0x7ff, 0x1}], [{0x1, 0x5}, {0xfffffffe, 0x9}, {0x6, 0xfffffff7}, {0x6, 0xf52c}, {0x0, 0xfffff51e}, {0x2, 0x7ade}, {0xfffffe00, 0x4}, {0x7, 0x9}, {0x8, 0x1000}, {0x100, 0xfffffffa}, {0xe, 0x3e06}], 0x0, 0x5}, {[{0x1, 0x2}, {0x100}, {0xfffffffe}, {0x8}, {0xb74, 0x3}, {0x7fff, 0x1}, {0xcc8}, {0xebb, 0x2}, {0x20e0}, {0x7, 0x1}, {0x6, 0x3}], [{0x1e5f, 0xc08f2407}, {0x502, 0x6}, {0x200, 0x10001}, {0x3, 0x8}, {0x7ff}, {0x7, 0x3}, {0xfffffffc, 0x2}, {0x9, 0x6}, {0x4, 0x1}, {0x6, 0x7}, {0x5, 0xd9}], 0x4, 0x9}, {[{0x0, 0x3}, {0x8ee, 0x3}, {0x2}, {0x3}, {0x9, 0x3}, {0x80}, {0x4, 0x2}, {0xffff92a1, 0x1}, {0xfff}, {0x4, 0x3}, {0x1, 0x3}], [{0x5, 0x80000000}, {0x8, 0x8}, {0x1000, 0xd057}, {0x0, 0xf}, {0x2, 0xd933c84}, {0x2, 0x7}, {0x81}, {0x100, 0x8}, {0x58d, 0x2}, {0x5d5f, 0x2}, {0x7174, 0x1}], 0x0, 0x8}, {[{0x3, 0x2}, {0x1, 0x2}, {0x7ff, 0x1}, {0x5, 0x2}, {0x8, 0x3}, {0x1da1, 0x2}, {0x0, 0x2}, {0x5b3, 0x3}, {}, {0x1, 0x3}, {0x7fffffff}], [{0x4, 0x88b}, {0x1, 0x5}, {0xc, 0xfffffffe}, {0xe, 0x5}, {0x9, 0x9}, {0x5, 0x5}, {0x8}, {0x3}, {0x4, 0xe8}, {0x1f, 0x1}, {0xfff, 0x8}], 0x3, 0x5}, {[{0x9, 0x2}, {0x7f}, {0x80, 0x1}, {0x5, 0x3}, {0x7, 0x2}, {0x7, 0x2}, {0x4f079710, 0x1}, {0x7fffffff, 0x3}, {0xf0b, 0x3}, {0x3}, {0xcd, 0x3}], [{0x2, 0x4}, {0x8, 0xe0}, {0xffffffff, 0x7}, {0x7, 0x1}, {0x7, 0x8}, {0xffffffff, 0xb}, {0x40, 0x2}, {0x9, 0x4}, {0x9, 0x9815}, {0x4, 0x2}, {0xe0, 0x1}], 0x6, 0x6}], 0x3}}, @common=@unspec=@limit={{0x48}, {0xfffffffa, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x1278]}, {0xffff, [0x5]}}}}, {{@ip={@dev, @remote, 0x0, 0xff000000, 'veth1_to_team\x00', 'veth1_to_batadv\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x22, [0x0, 0x3, 0x1, 0x2, 0x0, 0x5], 0x3, 0x4}, {0xffffffffffffffff, [0x7, 0x4, 0x4, 0x5], 0x6, 0x1}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0xb58) r1 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000500)='./bus\x00', 0x0, &(0x7f0000000540), 0x3, 0x490, &(0x7f0000000580)="$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") bpf$MAP_CREATE(0x1900000000000000, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000000000200000000000", @ANYRES32, @ANYBLOB="0000000000000000000000000100000000000000b7a3a4902b6dc062072266774aed1d9c462f5cc173e8aec78e0a76fd8bb3fd009709d0cecb75cdea910ae03e09ab4065c13e2c8ee41783b6e9b7b47deac56cace43d2ab5ff8759f06c4c4e", @ANYRES32], 0x48) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x13, 0xffffffffffffffff, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000170900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}}, 0x2000c450) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./dev/mapper/control\x00', 0x2, 0x0) ioctl(r3, 0xc138fd03, &(0x7f0000000000)="0400000000000000000000003801000000000000000000000000000000000000000000000000000000000000000000006d") ioctl(r3, 0xc138fd05, &(0x7f0000000000)="0400000000000000000000006e0100003801") getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r3, 0x84, 0x8, &(0x7f00000001c0), &(0x7f0000000240)=0x4) openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='.\x00', 0x0, 0xa0) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000600)={0x23e6, 0xfffffffd, 0xf, 0x2, 0x26}) syz_mount_image$fuse(0x0, &(0x7f0000000040)='./bus\x00', 0x1060, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}]}) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e21, @multicast2}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x8040}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010601000000000000000000000064000000738a457a000000000c00030076786c616e300000240012800c00010076786c616e00000014000280050019000100000005001e0001"], 0x50}}, 0x40) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0xffffffffffffff55, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="2c000000780001040200000000000000070000006400000014000180080003006400000008000200c8"], 0x2c}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendto(r4, &(0x7f0000000180)='%', 0x300000, 0x840, 0x0, 0x60) 2m13.123563216s ago: executing program 0 (id=11): syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$RTC_PIE_ON(r0, 0x7005) syz_mount_image$ext4(&(0x7f0000000340)='ext4\x00', &(0x7f0000000980)='./file0\x00', 0x8000, &(0x7f00000006c0)={[{@resuid}, {@nobh}]}, 0x1, 0x519, &(0x7f00000009c0)="$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") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.events\x00', 0x275a, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x40d40, 0x45) fallocate(r2, 0x0, 0x3, 0x8ffff) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r2, 0xd5755000) r3 = syz_open_dev$video(&(0x7f0000000000), 0x0, 0x80003) ioctl$VIDIOC_G_SELECTION(r3, 0xc040565e, &(0x7f00000003c0)={0x9, 0x1, 0x0, {0x2, 0x7, 0x7ff}}) symlinkat(&(0x7f0000000000)='./file1\x00', r2, &(0x7f00000000c0)='./file1\x00') r4 = socket$inet6_tcp(0xa, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./trace/events/kvm/kvm_entry/enable\x00', 0x282, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000200)=ANY=[@ANYBLOB="0180c200000eaaaaaaaaaabb080045000038fffc000000019078ac1eaa040090780300000045000000fffc0000002f0000ac1414bbe0000002000088be35825b000000000000"], 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=@newtaction={0x180, 0x30, 0xb, 0x0, 0x0, {}, [{0x16c, 0x1, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0x80006}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}, @m_tunnel_key={0x120, 0xd, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x4, 0x200, 0x6, 0x8, 0x2}, 0x2}}]}, {0xd2, 0x6, "171b5603be29c2c48ba5d8fbff34f6a7992ec8b35ec12578012b257a7d166b9caaeb4a0377c345bdf69a23ff468c4ed75292c052368de390fe307df97bf60bcd23be29333a8c5ac23bcd5385931ceb2711e0ac81ac3f83c1faf2292037e01075a71d6bcb074da91fee075ff9ba6bc71cab8b6e39f363befdfb0d326763d9146973edf47816a0c3ea8be42c6c12b205a87c142fe44e615ec8a5e97d832cebc08492349d108fb00d6c679854a961c7c2f16ab2ecd6163d3fd3b1552c0f097dba8146debfd5091f98b9d7b0e18a72fe"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x180}}, 0x0) bind$inet6(r4, &(0x7f0000000500)={0xa, 0x4e20, 0xbb6, @loopback, 0x5}, 0x28) connect$inet6(r4, &(0x7f0000000480)={0xa, 0x4e20, 0x9, @loopback, 0x106}, 0x1c) r6 = fcntl$dupfd(r4, 0x406, r4) setsockopt$inet6_buf(r4, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) write$binfmt_elf64(r6, &(0x7f00000004c0)=ANY=[], 0xfffffdcf) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000800)={r1, 0x0, 0x6d, 0xa3, &(0x7f0000000180)="ee6f9bb9414b58ab0d0391ea99aeaccbe8fa429e65dcdbfa790ce10dc1d1456d2cbdb0ee87420c02d58f69fb4afa02710459e09698a61e1ffb0cd83385c3f16b78aacddaeb69b3c7249a65bbbf7d0035628fdec1c119725fbd16c6c385da796bae446c179d141e6a778cb3a808", &(0x7f0000000280)=""/163, 0xaffe, 0x0, 0x87, 0x1c, &(0x7f0000000700)="4bab74479410032f14176a728583e1dc2dd6d9ddb099231192f16e3aa2d376455d56d8bfea2a6b6488a3ecd7a60f38d58460e3664f2a52cb6f39b2df832ec35ecd5affe740ced82e3632a0320dad795168195a1880ca070ca26546fd4dda7ee91e905af783aebb4f8a61bc0775cb7efdc4a715f6b1260da510feff6590901ee4d9d8dca37e7139", &(0x7f00000007c0)="bda125a3929e6ed9a1ad9bdb5e80dc6c078c04f171d50195e88fd734", 0x2, 0x0, 0xc00000}, 0x50) 2m12.071485287s ago: executing program 0 (id=29): syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000380)={[{@init_itable}, {@data_err_ignore}, {@init_itable_val={'init_itable', 0x3d, 0x7}}, {@quota}, {@journal_path={'journal_path', 0x3d, './file0'}}]}, 0x4, 0x500, &(0x7f0000000b00)="$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") r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x5, 0x2, 0x4}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b000000000000bf5f7ff95a6d5f00000000000000080000de50225394167e674a5b54d1eb926604dd9191ae037943ab7ad8a2f2a99d210dc296f59c7500a9db810e63feca9ffa2bc2d81e1a766a041b2354056dde7ddaef4cfc8e7a301244791314ec53c367001a9061fa3990f8b55798be21016e8187b8163ff8195261af3d49777ac9d8ae7299b92b0e03752627bd3623d2de2da5af86f2d761101c7566be67e37a352d5f098806a0b38b565debdd9db7ca5840e15e03232a3ed6b65bb4133ba2eb00ebde44021a14b18c2915", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002240)={0x14, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000000000000850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4) sendmsg$unix(r3, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = getpid() r6 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000240), 0x60040, 0x0) ioctl$FBIOGETCMAP(r6, 0x4604, &(0x7f0000000100)={0x0, 0x1, &(0x7f0000000000)=[0x0], 0xfffffffffffffffe, 0x0, 0x0}) sched_setscheduler(r5, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000b, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat(0xffffffffffffff9c, 0x0, 0x250942, 0x50) recvmsg(0xffffffffffffffff, 0x0, 0x0) r9 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/custom0\x00', 0x800, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r9, 0xc018620c, &(0x7f00000000c0)={0x3}) setns(0xc9, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}]}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x0) 2m9.850531118s ago: executing program 0 (id=53): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x20, 0x1411, 0x1, 0xfc, 0x20000, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}]}, 0x20}}, 0x0) 2m9.786136829s ago: executing program 32 (id=53): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x20, 0x1411, 0x1, 0xfc, 0x20000, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}]}, 0x20}}, 0x0) 1m56.390880283s ago: executing program 4 (id=259): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002180)='blkio.bfq.io_merged\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r1, 0x0) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC(r2, 0x0, 0xcc, &(0x7f0000000140)={@multicast2, @multicast1, 0x0, "aaa517d60f2811d48c8a2cc60c4380bc23b510d442ff13482864280a9c0f4eb5"}, 0x3c) r3 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), r0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x2e}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) sendmsg$SMC_PNETID_ADD(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r3, @ANYRESDEC=0x0], 0x30}, 0x1, 0x0, 0x0, 0x20000081}, 0x80) (async) sendmsg$SMC_PNETID_ADD(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r3, @ANYRESDEC=0x0], 0x30}, 0x1, 0x0, 0x0, 0x20000081}, 0x80) 1m56.232860999s ago: executing program 4 (id=261): ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'dummy0\x00', @remote}) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r0) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r2, &(0x7f0000004440)={&(0x7f0000000ec0)=@nameseq={0x1e, 0x1, 0x0, {0xffffffffffffffff, 0x20, 0x2000}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x4040000) (fail_nth: 3) 1m56.193194647s ago: executing program 4 (id=263): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x24000044) request_key(0x0, &(0x7f0000001ffb)={'syz', 0x1}, &(0x7f0000001fee)='\x81\x89c\xa7Gd\xff:De\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x595f, 0x400, 0x0, 0x3c9}, &(0x7f0000000100), &(0x7f0000000000), &(0x7f0000000080)) 1m56.114200961s ago: executing program 4 (id=265): r0 = socket(0x200000000000011, 0x2, 0xd) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) r2 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000200)="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", 0x559, r2) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000000a0)='./proc\x00', &(0x7f00000000e0)='proc\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/sys/net/mptcp/pm_type\x00', 0x1, 0x0) write(r3, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1c, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x37, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r4}, &(0x7f0000000840), &(0x7f0000000880)=r5}, 0x20) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f00000007c0)='./proc/sys/net/mptcp/pm_type\x00', &(0x7f0000000800), 0x4, &(0x7f0000000900)={[{@lowerdir={'lowerdir', 0x3d, './file0/../file0'}}], [{@smackfshat={'smackfshat', 0x3d, '})[):&/'}}, {@hash}]}) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='ramfs\x00', 0x10, 0x0) chroot(&(0x7f0000000580)='./file0/../file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000008c0)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f0000000600)='./file0\x00', &(0x7f0000000300)='./file0/../file0\x00') r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x9, 0x4, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8}, [@generic={0x91, 0x1, 0x1, 0x1f}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock=0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xeffffffd}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000240)={r5, r1, 0x25, 0x2, @val=@netfilter={0x0, 0x3, 0x2018}}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) r7 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r7, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r7, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r7, 0xc02064b9, &(0x7f0000000dc0)={&(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000200), 0x4, r8}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r7, 0xc03864bc, &(0x7f0000000500)={0x0, 0x1, &(0x7f0000000180)=[r10], &(0x7f00000000c0)=[0x2], &(0x7f0000000f40)=[r9], &(0x7f0000000040), 0x0, 0x2000}) ioctl$NILFS_IOCTL_SET_SUINFO(r6, 0x40186e8d, &(0x7f0000000440)={&(0x7f0000000340)=[{0x1, 0x1, 0x0, {0x7fffffff, 0xffffff7f, 0x1}}, {0x3, 0x0, 0x0, {0x0, 0x4, 0x2}}, {0x80000001, 0x2, 0x0, {0x1c0, 0x1}}, {0x1, 0x0, 0x0, {0x3, 0x9}}, {0x5, 0x1, 0x0, {0x7, 0x10001, 0x1}}, {0x5, 0x1, 0x0, {0x2, 0x428, 0x1}}, {0x7, 0x0, 0x0, {0x4ee5, 0x9, 0x2}}], 0x7, 0x20, 0x4}) syz_emit_ethernet(0x16, &(0x7f00000000c0)=ANY=[], 0x0) 1m55.961048624s ago: executing program 4 (id=269): openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x62c40, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r0, 0x11c, 0x4, 0x0, &(0x7f00000000c0)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x2800, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r1, 0x400455c8, 0x7) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000180)='system.posix_acl_access\x00', &(0x7f0000000240)={{}, {}, [], {0x4, 0x6}, [], {0x10, 0x3}, {0x20, 0x4}}, 0x24, 0x3) umount2(&(0x7f00000002c0)='./file0\x00', 0xb) 1m55.532340194s ago: executing program 4 (id=272): r0 = socket$netlink(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={{0x14, 0x10, 0x1, 0xffffffff, 0x0, {0x2}}, [@NFT_MSG_NEWRULE={0x98, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x6c, 0x4, 0x0, 0x1, [{0x68, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x58, 0x2, 0x0, 0x1, [@NFTA_MATCH_NAME={0xe, 0x1, 'hashlimit\x00'}, @NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_MATCH_INFO={0x3c, 0x3, "6c6f00000000000000000000000000002000000010270000050000001000000010000000e8030000e8030000202000"/56}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0xc0}}, 0x0) 1m55.528257333s ago: executing program 33 (id=272): r0 = socket$netlink(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={{0x14, 0x10, 0x1, 0xffffffff, 0x0, {0x2}}, [@NFT_MSG_NEWRULE={0x98, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x6c, 0x4, 0x0, 0x1, [{0x68, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x58, 0x2, 0x0, 0x1, [@NFTA_MATCH_NAME={0xe, 0x1, 'hashlimit\x00'}, @NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_MATCH_INFO={0x3c, 0x3, "6c6f00000000000000000000000000002000000010270000050000001000000010000000e8030000e8030000202000"/56}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0xc0}}, 0x0) 1m49.9184119s ago: executing program 6 (id=322): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000005c0)=ANY=[@ANYBLOB="30000000111401002cdb700104000000080001000000000008004b001300000008"], 0x30}}, 0x240440c4) 1m49.879054927s ago: executing program 6 (id=324): prlimit64(0x0, 0xe, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_pie={{0x8}, {0xc, 0x2, [@TCA_PIE_TUPDATE={0x8, 0x3, 0x4}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r4, &(0x7f00000002c0)="05031c00d3fc142efd004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) 1m49.69673959s ago: executing program 6 (id=327): r0 = socket$kcm(0x29, 0x2, 0x0) fcntl$notify(r0, 0x402, 0x1b) 1m49.695966926s ago: executing program 6 (id=328): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000", @ANYRESOCT, @ANYRESOCT, @ANYRESDEC, @ANYRESHEX, @ANYRESDEC], 0xff, 0x2c3, &(0x7f0000000180)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x42, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x103040, 0x10) fcntl$setlease(r2, 0x400, 0x0) syz_open_dev$dvb_dvr(&(0x7f0000000240), 0x0, 0x13f) pselect6(0x40, &(0x7f0000000000)={0xe, 0x5, 0xfffffffffffffff7, 0x1, 0x8, 0x0, 0xfffffffffffffffd, 0x10000}, 0x0, 0x0, &(0x7f0000000100), 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) r3 = openat$cgroup_type(r0, &(0x7f0000000100), 0x2, 0x0) write$cgroup_type(r3, &(0x7f0000000280), 0x9) r4 = openat$cgroup_procs(r1, &(0x7f0000000500)='cgroup.procs\x00', 0x2, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) connect$bt_l2cap(r5, &(0x7f0000000040)={0x1f, 0x0, @none, 0x4, 0x2}, 0xe) setsockopt$MRT_DEL_VIF(0xffffffffffffffff, 0x0, 0xcb, &(0x7f00000000c0)={0x0, 0x8, 0x59, 0x2, @vifc_lcl_ifindex, @rand_addr=0x64010100}, 0x10) write$cgroup_pid(r4, &(0x7f0000000c40), 0x12) syz_clone(0x1022000, 0x0, 0xfffffffffffffc76, 0x0, 0x0, 0x0) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r7 = socket$l2tp(0x2, 0x2, 0x73) r8 = accept$inet(r7, &(0x7f0000000080)={0x2, 0x0, @multicast1}, &(0x7f0000000140)=0x10) r9 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x8, &(0x7f0000001340)=ANY=[@ANYBLOB="beaa00000000000079ba08000000000018120000", @ANYRES32=r9, @ANYBLOB="0000000000000000bf03000000000000850000006b000000b70000000000000095"], &(0x7f0000000480)='syzkaller\x00', 0x3, 0x0, 0x0, 0x41000}, 0x94) setsockopt$IPT_SO_SET_ADD_COUNTERS(r8, 0x0, 0x41, &(0x7f0000000180)=ANY=[@ANYBLOB="72617700000000000000000000000000000000ebff00000000000000000000000400000800"/104], 0x68) r10 = openat$cgroup_ro(r6, &(0x7f0000000040)='cgroup.kill\x00', 0x275a, 0x0) write$cgroup_int(r10, &(0x7f0000000200)=0x1, 0x12) 1m49.525387319s ago: executing program 6 (id=333): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, 0x0) 1m47.49838639s ago: executing program 6 (id=362): r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffdfffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x81, 0xfffffffb, 0xb}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x28000000}, 0x20040084) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=@newqdisc={0x434, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r4, {0x10}, {0x0, 0xfffd}, {0xa, 0xa}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x200000, 0x1, 0x2, 0x9, 0x3, 0x5, 0x5, 0xb762, 0x4, 0x100007, 0x8, 0x10, 0x2, 0x2, 0x8001, 0x1007fc, 0xffff8000, 0x6, 0x403, 0x9, 0x8, 0xfffffff8, 0xd6, 0x4, 0xfffb, 0x40000007, 0x0, 0xfffff4f0, 0x9, 0x1, 0xfffffffc, 0x4, 0x1, 0x6f2151b1, 0x9, 0xc, 0x20001000, 0x4, 0xfffffffe, 0x7, 0x4, 0x99, 0x9, 0x5, 0x6, 0x7, 0xfffffff7, 0x1, 0x2, 0x9, 0x9, 0x1000044, 0x8, 0x8, 0x39e1, 0x4, 0x7ff, 0x8, 0x7, 0x7fbffffe, 0x400, 0x8, 0xfffffa72, 0xcd, 0x4, 0x80000000, 0xc, 0x6, 0x65, 0x91, 0x659, 0x9, 0xf, 0x9, 0xc28, 0x9, 0x7, 0x3, 0x401, 0x3, 0x2, 0xfffffffa, 0x1, 0x10001, 0x3, 0x1, 0x4, 0x7, 0x8, 0x7, 0x1, 0x1, 0x1, 0x5, 0x3c, 0x7, 0x12, 0x8000, 0x1, 0x4dc, 0x80, 0xffffff80, 0x7fffffff, 0xff, 0x9, 0xa7, 0xf, 0x1, 0x0, 0x3, 0x1001, 0x4, 0x401, 0x7, 0x80000000, 0xffff, 0x6, 0x5, 0x4f, 0xffffffff, 0x80000000, 0x1966f9ad, 0x200, 0x20200, 0xed5, 0xfffffc00, 0x6, 0x4, 0x8, 0x485e, 0xa85, 0x80000040, 0x2, 0x7, 0x7, 0x102, 0x2d5421e8, 0x7, 0x10000, 0x2, 0x6, 0x1, 0x40000f04, 0x0, 0x2, 0x5, 0xfffffc00, 0x5, 0x8d, 0x4, 0x401, 0x4, 0x9, 0x50200523, 0xfffffffb, 0x1, 0x0, 0x3, 0x8, 0x5, 0x8, 0x3, 0x0, 0x800, 0x2, 0x8, 0x7ff, 0x1, 0x9, 0x6, 0x4, 0x400001, 0xd, 0x1ff, 0xfffff068, 0x3, 0x429, 0x7fff, 0x0, 0x200, 0x10000005, 0x7, 0x2, 0x8, 0x42ba, 0x4, 0x800009, 0x3, 0x8, 0x8, 0x53, 0x6, 0x4, 0x400, 0x8000, 0x0, 0x2c310b1a, 0x9, 0x0, 0x3, 0xcd34, 0x9, 0x81, 0xdf3, 0x2, 0x7, 0x8, 0x40fff, 0x1ff, 0x8000, 0x3, 0x8, 0x80, 0x6, 0x9a6, 0xe4cb, 0x402, 0x9, 0x1ff, 0x5, 0x9b4, 0x4, 0x6, 0x0, 0x9, 0x0, 0x9, 0x0, 0x4, 0x10, 0x901, 0x5, 0x2, 0x7d, 0x7420, 0x6, 0x6, 0xc, 0x1000, 0x9, 0x9, 0xe6, 0xab, 0x400, 0x7fffffff, 0xed, 0x7ff, 0xd83, 0x68, 0x80000001, 0x6, 0x9fd, 0x10000006, 0x200, 0x4, 0x2]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0x40098}, 0x0) 1m47.406722053s ago: executing program 34 (id=362): r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffdfffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x81, 0xfffffffb, 0xb}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x28000000}, 0x20040084) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=@newqdisc={0x434, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r4, {0x10}, {0x0, 0xfffd}, {0xa, 0xa}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x200000, 0x1, 0x2, 0x9, 0x3, 0x5, 0x5, 0xb762, 0x4, 0x100007, 0x8, 0x10, 0x2, 0x2, 0x8001, 0x1007fc, 0xffff8000, 0x6, 0x403, 0x9, 0x8, 0xfffffff8, 0xd6, 0x4, 0xfffb, 0x40000007, 0x0, 0xfffff4f0, 0x9, 0x1, 0xfffffffc, 0x4, 0x1, 0x6f2151b1, 0x9, 0xc, 0x20001000, 0x4, 0xfffffffe, 0x7, 0x4, 0x99, 0x9, 0x5, 0x6, 0x7, 0xfffffff7, 0x1, 0x2, 0x9, 0x9, 0x1000044, 0x8, 0x8, 0x39e1, 0x4, 0x7ff, 0x8, 0x7, 0x7fbffffe, 0x400, 0x8, 0xfffffa72, 0xcd, 0x4, 0x80000000, 0xc, 0x6, 0x65, 0x91, 0x659, 0x9, 0xf, 0x9, 0xc28, 0x9, 0x7, 0x3, 0x401, 0x3, 0x2, 0xfffffffa, 0x1, 0x10001, 0x3, 0x1, 0x4, 0x7, 0x8, 0x7, 0x1, 0x1, 0x1, 0x5, 0x3c, 0x7, 0x12, 0x8000, 0x1, 0x4dc, 0x80, 0xffffff80, 0x7fffffff, 0xff, 0x9, 0xa7, 0xf, 0x1, 0x0, 0x3, 0x1001, 0x4, 0x401, 0x7, 0x80000000, 0xffff, 0x6, 0x5, 0x4f, 0xffffffff, 0x80000000, 0x1966f9ad, 0x200, 0x20200, 0xed5, 0xfffffc00, 0x6, 0x4, 0x8, 0x485e, 0xa85, 0x80000040, 0x2, 0x7, 0x7, 0x102, 0x2d5421e8, 0x7, 0x10000, 0x2, 0x6, 0x1, 0x40000f04, 0x0, 0x2, 0x5, 0xfffffc00, 0x5, 0x8d, 0x4, 0x401, 0x4, 0x9, 0x50200523, 0xfffffffb, 0x1, 0x0, 0x3, 0x8, 0x5, 0x8, 0x3, 0x0, 0x800, 0x2, 0x8, 0x7ff, 0x1, 0x9, 0x6, 0x4, 0x400001, 0xd, 0x1ff, 0xfffff068, 0x3, 0x429, 0x7fff, 0x0, 0x200, 0x10000005, 0x7, 0x2, 0x8, 0x42ba, 0x4, 0x800009, 0x3, 0x8, 0x8, 0x53, 0x6, 0x4, 0x400, 0x8000, 0x0, 0x2c310b1a, 0x9, 0x0, 0x3, 0xcd34, 0x9, 0x81, 0xdf3, 0x2, 0x7, 0x8, 0x40fff, 0x1ff, 0x8000, 0x3, 0x8, 0x80, 0x6, 0x9a6, 0xe4cb, 0x402, 0x9, 0x1ff, 0x5, 0x9b4, 0x4, 0x6, 0x0, 0x9, 0x0, 0x9, 0x0, 0x4, 0x10, 0x901, 0x5, 0x2, 0x7d, 0x7420, 0x6, 0x6, 0xc, 0x1000, 0x9, 0x9, 0xe6, 0xab, 0x400, 0x7fffffff, 0xed, 0x7ff, 0xd83, 0x68, 0x80000001, 0x6, 0x9fd, 0x10000006, 0x200, 0x4, 0x2]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0x40098}, 0x0) 1m19.144149339s ago: executing program 7 (id=723): syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x595f, 0x400, 0x0, 0x3c9}, &(0x7f0000000100), &(0x7f0000000000), &(0x7f0000000080)) 1m19.125502186s ago: executing program 7 (id=724): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000007c0)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x4, 0x35dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x5, 0x1, 0x5, 0xd, 0xd9, 0x10}, {0x0, 0x2, 0x5, 0x3, 0x1}, 0x2, 0x5, 0x8d0}}, @TCA_TBF_BURST={0x8, 0x6, 0x10001}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70b928, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0x0, 0xb}, {0xffff, 0x3}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xfffffffb, 0x7, 0x6, 0x7, 0x7fff, 0x7fff, 0x3, 0xaa64, 0x3}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x240048e4}, 0x20004810) r4 = socket$kcm(0x11, 0x3, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$mtd(&(0x7f0000000100), 0x48a99fbe, 0x10b241) ioctl$MEMREADOOB(r5, 0xc0104d04, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) syz_emit_vhci(&(0x7f0000000340)=ANY=[@ANYBLOB="02c90012000e00020002"], 0x17) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r7, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200e61114120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0f000000040000000400000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1e, 0x11, &(0x7f0000000400)=ANY=[@ANYBLOB="bf16000000000000620afcff00000000bfa200000000000007020000fcffffff1851000000000000000000000000000085000000010000001500070000000000bf07000000000000bf61000000000000bf72000000000000b703000000000000850000007c000000bf710000000000008500000056000000b70000000100000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_lookup=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=[r8], 0x0, 0x0}, 0x94) 1m18.455023581s ago: executing program 7 (id=735): syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x595f, 0x400, 0x0, 0x3c9}, &(0x7f0000000100), &(0x7f0000000000), &(0x7f0000000080)) 1m18.437519518s ago: executing program 7 (id=736): r0 = socket(0x200000000000011, 0x2, 0xd) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) r2 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000200)="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", 0x559, r2) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000000a0)='./proc\x00', &(0x7f00000000e0)='proc\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/sys/net/mptcp/pm_type\x00', 0x1, 0x0) write(r3, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1c, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x37, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r4}, &(0x7f0000000840), &(0x7f0000000880)=r5}, 0x20) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f00000007c0)='./proc/sys/net/mptcp/pm_type\x00', &(0x7f0000000800), 0x4, &(0x7f0000000900)={[{@lowerdir={'lowerdir', 0x3d, './file0/../file0'}}], [{@smackfshat={'smackfshat', 0x3d, '})[):&/'}}, {@hash}]}) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='ramfs\x00', 0x10, 0x0) chroot(&(0x7f0000000580)='./file0/../file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000008c0)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f0000000600)='./file0\x00', &(0x7f0000000300)='./file0/../file0\x00') r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x9, 0x4, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8}, [@generic={0x91, 0x1, 0x1, 0x1f}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock=0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xeffffffd}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000240)={r5, r1, 0x25, 0x2, @val=@netfilter={0x0, 0x3, 0x2018}}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) r7 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r7, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r7, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r7, 0xc02064b9, &(0x7f0000000dc0)={&(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000200), 0x4, r8}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r7, 0xc03864bc, &(0x7f0000000500)={0x0, 0x1, &(0x7f0000000180)=[r10], &(0x7f00000000c0)=[0x2], &(0x7f0000000f40)=[r9], &(0x7f0000000040), 0x0, 0x2000}) ioctl$NILFS_IOCTL_SET_SUINFO(r6, 0x40186e8d, &(0x7f0000000440)={&(0x7f0000000340)=[{0x1, 0x1, 0x0, {0x7fffffff, 0xffffff7f, 0x1}}, {0x3, 0x0, 0x0, {0x0, 0x4, 0x2}}, {0x80000001, 0x2, 0x0, {0x1c0, 0x1}}, {0x1, 0x0, 0x0, {0x3, 0x9}}, {0x5, 0x1, 0x0, {0x7, 0x10001, 0x1}}, {0x5, 0x1, 0x0, {0x2, 0x428, 0x1}}, {0x7, 0x0, 0x0, {0x4ee5, 0x9, 0x2}}], 0x7, 0x20, 0x4}) syz_emit_ethernet(0x16, &(0x7f00000000c0)=ANY=[], 0x0) 1m18.336380441s ago: executing program 7 (id=739): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x3, &(0x7f0000000140)=@framed, &(0x7f00000013c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="042c1180c800ffffffffffff02"], 0x14) r1 = socket$inet6(0xa, 0x805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000080)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4620, @private=0xa010101}]}, &(0x7f00000002c0)=0x10) getsockopt$bt_hci(r1, 0x84, 0x1f, &(0x7f0000000080)=""/4060, &(0x7f00000010c0)=0xfdc) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newlink={0x2c, 0x10, 0x1, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, 0x40814, 0x203}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r0}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x4000000) 1m17.612427424s ago: executing program 7 (id=743): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'bridge0\x00', 0x0}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r2, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r2, &(0x7f0000000a40)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000100)="1c58dc", 0x3}], 0x1}}], 0x1, 0x4000800) sendmmsg(r2, &(0x7f0000001f40)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f00000002c0)="cf", 0xffa6}], 0x1, &(0x7f00000006c0)=ANY=[], 0x7}}], 0x1, 0x4044044) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="600000001000ffff26bd7000eedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="350c040000000000240012800b0001006d6163736563000014000280060002404e200000050006000100000008000500", @ANYRES32=r1, @ANYBLOB="0a000100ffffffffffff000008000a00", @ANYRES32=r1], 0x60}, 0x1, 0x0, 0x0, 0x28001}, 0x80) 1m17.590032338s ago: executing program 35 (id=743): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'bridge0\x00', 0x0}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r2, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r2, &(0x7f0000000a40)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000100)="1c58dc", 0x3}], 0x1}}], 0x1, 0x4000800) sendmmsg(r2, &(0x7f0000001f40)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f00000002c0)="cf", 0xffa6}], 0x1, &(0x7f00000006c0)=ANY=[], 0x7}}], 0x1, 0x4044044) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="600000001000ffff26bd7000eedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="350c040000000000240012800b0001006d6163736563000014000280060002404e200000050006000100000008000500", @ANYRES32=r1, @ANYBLOB="0a000100ffffffffffff000008000a00", @ANYRES32=r1], 0x60}, 0x1, 0x0, 0x0, 0x28001}, 0x80) 32.141759541s ago: executing program 3 (id=1326): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = socket$tipc(0x1e, 0x2, 0x0) connect(r1, &(0x7f0000000180)=@ieee802154, 0x80) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x103b02, 0x0) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000040)={0xf, 0x9f, 0x6, 0x1, 0xaa, "d40cf9000000000000000800"}) write(r3, &(0x7f0000000080)="c29a210bc720ca488cfad2bb7ba4bcb037336991887da20990e698334e74b7c924859c74787902b6e889c16870d2d523f0451f8c19961d3627b1a206571d3f099095ce2680518d1b143d11cf4abfcdb282f7c795ab30adf3ce26db82d93654be0b76e4bef0b889be7856a4597801e4f12ef4d63eaee4b068803cdf9eb71e43dd3c04a8d5b25ea63318b274aec4ba484828c8d1f6b67c47c0ba77902e00a171d783df3048544570229a741f1492be8ac891713037e02794860afe9a1e3819707031a98d3a89b767da5c17e81a411d4eec4ca627d65f472e5f1510bd604f3b3ffed7fe40b0ee0d", 0xe6) ioctl$sock_bt_hci(r2, 0x800448d3, &(0x7f0000000200)) 32.14122821s ago: executing program 3 (id=1327): r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, 0x0, &(0x7f0000000200)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=ANY=[@ANYBLOB="480000001000bfff00"/20, @ANYRES32, @ANYBLOB="01980000000000002800128008000100677265001c00028008000600ac14140c050013000100000005000a0000000000"], 0x48}}, 0x0) openat$smackfs_ptrace(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 32.125552223s ago: executing program 3 (id=1328): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000003c0)={0x44, 0x2, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x2}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x60002}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x44}}, 0x0) 32.109509758s ago: executing program 3 (id=1329): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000002240)='./file0\x00', 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="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", @ANYRESOCT], 0x1, 0x2c2, &(0x7f00000006c0)="$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") keyctl$restrict_keyring(0xa, 0x0, 0x0, &(0x7f0000000000)='id:cb2e') pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r0, 0x8982, &(0x7f00000000c0)={0x8, 'team_slave_0\x00', {'dvmrp1\x00'}, 0x8}) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f0000000100)='./proc\x00', 0x0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./proc/sys/kernel/sem\x00', 0x1, 0x0) write(r1, 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f00000003c0)={0x2, 0x15, @loopback}, 0x10) listen(r2, 0x5) socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r3, &(0x7f0000000300)={0x2, 0x15, @loopback}, 0x10) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0xe, 0x4, 0x260, 0xffffffff, 0x0, 0x130, 0x1c8, 0xffffffff, 0xffffffff, 0x98, 0x130, 0x1c8, 0xffffffff, 0x4, 0x0, {[{{@ip={@empty, @empty, 0x0, 0x0, '\x00', '\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0xf, 0x7, 0x5b4}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2c0) syz_emit_ethernet(0x5a, &(0x7f00000002c0)=ANY=[@ANYBLOB="0180c2000001ffffffffffff08004540004c00000000c0069078ac1e0101ac1414aa10002000", @ANYRES32=0x1, @ANYRES32=0x0, @ANYBLOB="e010004090780000fe06e2d4c3d9140a000000020000e7b0131248be668c87c7e265e3d9ee8e98e372bd0802"], 0x0) write(r3, &(0x7f0000000400)='PASV\r\n', 0x6) r5 = accept4(r2, 0x0, 0x0, 0x0) write(r5, &(0x7f0000000500)='227 Entering Passive Mode (127,0,0,1,19,136)', 0x2c) r6 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r6, &(0x7f0000000700)={0x2, 0x1388, @loopback}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x125) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000380)='sysfs\x00', 0x808000, 0x0) r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x89901) move_mount(r7, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0xffff}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8, 0x2, 0xea}]}}}]}, 0x3c}}, 0x0) add_key$keyring(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffff8) 32.027830392s ago: executing program 3 (id=1330): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000a55000/0x1000)=nil, 0x1000}, 0x4}) write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000000dc0)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/block/nullb0/queue/scheduler\x00', 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mount(0x0, &(0x7f0000000380)='./proc/thread-self/fail-nth\x00', &(0x7f0000000500)='btrfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r4, &(0x7f0000000000)='3', 0x4e) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000002000000000000000000000d00000000000e7f709e286e6876121600"], 0x0, 0x26}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1d000000040000000200f5ffffff000001020000", @ANYRES32, @ANYRES16=r3, @ANYRES32=0x0, @ANYRESOCT=r0, @ANYBLOB="010000000200635cb34564f833d67a1ac3f8d8ae058965186f21a5aedcc479eb2774ea1f000000000000000000000000000000000000f1ff00"], 0x48) write(r3, &(0x7f00000001c0)='kyber', 0x5) r5 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newqdisc={0x78, 0x24, 0xd0f, 0x70bd2a, 0x2000, {0x60, 0x0, 0x0, r7, {0x0, 0x8}, {0xffff, 0xffff}, {0xd, 0xc}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x0, 0x401, 0x7, 0x1, 0x2190632a}, 0x9, 0x0, 0xea, 0x3, 0xfffffff9, 0x1f, 0xa, 0x13, 0x2, 0x9, {0x4, 0xc1, 0xb03, 0x8, 0x4, 0x2}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x80d1}, 0x3000001c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x40010, r0, 0x1000) r8 = syz_open_dev$hidraw(&(0x7f00000004c0), 0x9, 0xbb42) ioctl$HIDIOCGFEATURE(r8, 0x4004480d, &(0x7f0000000080)={0x3, "8faa7ab68aefc96940add94dd986d4f32634f14a10c1df59d27a3e745fb11661b2c297044eb0864509a8cbc7c48a18ef12f2fb379d0c1959605e2a52b1586bde"}) openat$fuse(0xffffffffffffff9c, &(0x7f0000008300), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x10020, &(0x7f0000002100)=ANY=[@ANYBLOB='fd=', @ANYRES32=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRES16=r2, @ANYRES64=r1, @ANYRESDEC=0x0]) open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) setuid(0xee00) 31.464723634s ago: executing program 3 (id=1334): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="48000000100005"], 0x48}}, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) unshare(0x24060400) r3 = dup(r2) syz_ublk_setup_queues(r3, r1, 0x0, 0x0, 0x1, 0x0, 0x0) recvfrom(r0, 0x0, 0x0, 0x2, &(0x7f00000102c0)=@vsock={0x28, 0x0, 0x2710}, 0x80) 31.446418392s ago: executing program 36 (id=1334): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="48000000100005"], 0x48}}, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) unshare(0x24060400) r3 = dup(r2) syz_ublk_setup_queues(r3, r1, 0x0, 0x0, 0x1, 0x0, 0x0) recvfrom(r0, 0x0, 0x0, 0x2, &(0x7f00000102c0)=@vsock={0x28, 0x0, 0x2710}, 0x80) 11.375658917s ago: executing program 1 (id=1589): syz_emit_ethernet(0x0, 0x0, 0x0) 11.361634344s ago: executing program 1 (id=1590): r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) unshare(0x22020600) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, &(0x7f0000000180)={0x0, 0x1, 0x100000, 0x3, 0x122, 0x0, r6}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x8, 0x2000, 0x10000004, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7c, 0x2000, 0x1, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x4000, 0x3, 0x1f0, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x40, 0x8280, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x51, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) 11.31319535s ago: executing program 1 (id=1591): r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=ANY=[@ANYBLOB="480000001000bfff00"/20, @ANYRES32=r1, @ANYBLOB="01980000000000002800128008000100677265001c00028008000600ac14140c05001300"], 0x48}}, 0x0) openat$smackfs_ptrace(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 11.312589049s ago: executing program 1 (id=1592): socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) r1 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000180)={0x4, 0x20, 0x8f, 0x2, 0x0, 0x0, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0xb}, 0xe) r2 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000019140)=ANY=[], 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r2, &(0x7f0000000380), 0x0}, 0x20) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=ANY=[@ANYBLOB="480000001000bfff00"/20, @ANYRES32, @ANYBLOB="01980000000000002800128008000100677265001c00028008000600ac14140c050013000100000005000a0000000000"], 0x48}}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 11.26281606s ago: executing program 1 (id=1594): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, 0x0) 11.17982944s ago: executing program 1 (id=1596): socket$inet6_sctp(0xa, 0x5, 0x84) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu/syz1\x00', 0x1ff) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x10) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_freezer_state(r0, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r1, &(0x7f0000000040)='FROZEN\x00', 0x7) r2 = syz_clone(0xc2100, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = openat$cgroup_procs(r0, &(0x7f00000002c0)='tasks\x00', 0x2, 0x0) r4 = getpgid(r2) write$cgroup_pid(r3, &(0x7f0000000100)=r4, 0x51) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file2\x00', 0x99, &(0x7f00000000c0), 0x2, 0x4fd, &(0x7f0000000d80)="$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") write$cgroup_freezer_state(r1, &(0x7f0000000080)='THAWED\x00', 0x7) 4.316288446s ago: executing program 9 (id=1672): sendmsg(0xffffffffffffffff, 0x0, 0x48800) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000340)={'gre0\x00'}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r3) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_MPATH(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)={0x28, r8, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x28}}, 0x0) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(r5, &(0x7f0000001340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001300)={&(0x7f0000000640)={0xc70, r6, 0x71b, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_NAN_FUNC={0x6c, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_TTL={0x8, 0xa, 0x6}, @NL80211_NAN_FUNC_PUBLISH_BCAST={0x4}, @NL80211_NAN_FUNC_FOLLOW_UP_REQ_ID={0x5, 0x7, 0x4}, @NL80211_NAN_FUNC_SERVICE_INFO={0x31, 0xb, "1c25a5a6071fe5d97e536ecac812679ff4a4435f88397d1bf5c1576aad36d043225b6ed537a8f89235462f94be"}, @NL80211_NAN_FUNC_FOLLOW_UP_DEST={0xa}, @NL80211_NAN_FUNC_FOLLOW_UP_REQ_ID={0x5, 0x7, 0x5}, @NL80211_NAN_FUNC_SUBSCRIBE_ACTIVE={0x4}, @NL80211_NAN_FUNC_PUBLISH_TYPE={0x5, 0x3, 0xa}]}, @NL80211_ATTR_NAN_FUNC={0x2c, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_SERVICE_INFO={0x27, 0xb, "7fe81de6949eb4f191687253f49b9b3e2ba1faa0ddadd0e35599391977bb06d98a0201"}]}, @NL80211_ATTR_NAN_FUNC={0x14, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_FOLLOW_UP_REQ_ID={0x5, 0x7, 0x5}, @NL80211_NAN_FUNC_PUBLISH_TYPE={0x5, 0x3, 0x5}]}, @NL80211_ATTR_NAN_FUNC={0x4}, @NL80211_ATTR_NAN_FUNC={0x10, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_CLOSE_RANGE={0x4}, @NL80211_NAN_FUNC_INSTANCE_ID={0x5, 0xf, 0x9}]}, @NL80211_ATTR_NAN_FUNC={0x7bc, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_INSTANCE_ID={0x5, 0xf, 0xb}, @NL80211_NAN_FUNC_TX_MATCH_FILTER={0x64c, 0xe, 0x0, 0x1, [{0x8f, 0x0, "533f22886458bcbd88fea54acfeffb7971a725f479f7fbdbc4655a689df553f699b3c64126d6744637968c0e58ca1f4cdb2a148d84035dcf5689f13b1f933d459966bba39f8bb337cc2b27d50a7df12a82415de5b3086f978edb631a34d7d563383519e9fff31eecf125fb95ddc114ea334e6bc5614e94dcefd696474cd98f712b8a2a487cfd519072748d"}, {0xd8, 0x0, "ff001c7e1e9777c4f016fd78d11c784dae512c3e32e1dfe03ff0a90cd76cb91a6b40dc593d611b3a8302520a4e417747eb0a85f128802bb4e424a9efec50ef821ec527582d469ec3ef281d5bef0862d5cc3a4b044d17502a20dfb6a016da7ec0fa6d00063a546c018cae34ae64efc66cfdd1d83d4eecd9672ed75cb4946426bea199e50db58bfadebb56b21d70c574aa16f3d16ab8284bcc1df92bd1309d8fd1c1db0498232f1789f573d105740e3f6b410f0529c6702195a45cfa138fb838285935364b00647c4c66412c0b17ef3b80f15fe7ff"}, {0xcb, 0x0, "5f04af0499c455432f5620991dfd7717e4b28b1f8a7cc4dfcac70e11b473c0a91f679f35f5d0e4b7a3280d2f15b9987583958c340beb2d011c25c12425b65d9e6e6a6c429a2fe0eca2f66f9eba1b5dfb34b1017685a28a5e8e9c4a2f750a13ccb948829f0d315033660a187f625ac8bfee3e91b800c8fc8c6537591c9258c67b96d3d31595d6d639604ebce7c6f273aa09fd9c35b48e705163df53fad5efab2d2ea8d58b12bfaac1970af2b409f3b3f131d9eabacd6ee1992832ae6ee44ff37d70ab78d6479f70"}, {0xf0, 0x0, "a6a0dc13ddee2f72a39727d196321027b9396f81cb1df5f0120776ac20c7efe8b3faf89ef572670476438b687bbd9aa4bc21054b0b8bfbfa1269ad27175360f7ef89ba0d21c7a2a458905e090a717df70e63350ea3f20a553ed757eff4584c126e83ca499b5a8633723b6a4a7347c798e24d86c39d589f0925366d6e5e01d8ca94bc443801899f4317fd6816058bf563bca70d82f7c98ec38b70d5d8c954fd99c351f9ea6300955b2f7e5cda5eaf8615d1f2cd3d4c9987d7dfd4c8fca8e456f0945648dd780fa4ef8ee28527669f809ec7a631645315d509efcffab02dbd1db5160f73ad8038f617035aabb5"}, {0xe3, 0x0, "bed7d79b21c63ba9508da7c18060f40ca83f1b9acb9a80391d6baa52a915af3dd0c1bbca7d0409f0639194d29d6c6493bbc61db57a82e4b77f0447855e15dcc11b28d0faa907cb2a35e4244d8972269e9add5cfe29fcc16fbd80a1f9810c8943bba7b338f3f73f332a51390ea394ac0f9759a9e0a8661995aa1866f41d1ebd3304282744afea3e6c9a949f80be482c152fb3c7f0a86f8e45a628cd555df687c03c84a33cb08e39086d40976d2625126134bef13582e8193f504fa09fd865b20d84fa185103358a2c133600026bde9cce696850d2d8ce92c20cd6e4226a097b"}, {0x4b, 0x0, "e4513e1f6fcf271ed63d3ab924a26615558c5aab792d894d78ec92bf2adc2cf602d80448538d12bf5f0896cea87dc6162dd9c603a6dcf2df1b9df34dd323d6ee6ee030570f56cc"}, {0xa6, 0x0, "b07bcab966b3b99860b4f474259842543fe9f4c58b0694a462409c5278121ecf740c5aa9e563d53a0ccf0d57fbf7577592174d0776ff4360dfc52568916eb22a1fcf84a268659ad75bfce86c1eca4ee67e1925c6d69979200c57392de406d2b72ca21d9aabb36082f802105c1b63044d1b7bbf52eba382f8f3ce3f20b654e5117a49a56adf54e7c966764b08ea1e3476964361e340d827f0963f44f8ecead436d7ce"}, {0xab, 0x0, "c6965da947ca04c0e9542c05a971e2f4c9307a34e6fb349d38ec2af641e728683b8785d4b31339f9e1c7a69a30a41818ca8152f7dd4a11afe4b914402c8b5d0782a52eebc14574d9889be5ca609d04b89bcca385d7350c324a96b09ce5935d6f12dc37bd6b79ad5882d314cfe08e70a2889311e2b192dbae52c7ec692dbca209ee5017882585ebf2dda74ca87b6f200d26c7b3908db8f00400b5adb218a2f73960cb8a17ce7d40"}, {0x9d, 0x0, "01a67256fe68f0ce86d9835e0aac9bcf9f48bb50f82553dc9742c1c7ede0fc9dc7a177dd95671d4f99cf41029f2a777ae94fac123f7894c7c12d3f97a0b82d8299621f88111b9f84ef9d972dcccf3f240a49596dd109fd346117a91ed85efe12455d17a3425a35de688ff619f09d1b1dae1800289bf1fdd092dc82f4dabd9067a6cf2030d57c1ff3fbd8259b2ea0b8dc1c19bd57691a22f2cf"}]}, @NL80211_NAN_FUNC_PUBLISH_BCAST={0x4}, @NL80211_NAN_FUNC_PUBLISH_TYPE={0x5, 0x3, 0x9}, @NL80211_NAN_FUNC_TX_MATCH_FILTER={0x140, 0xe, 0x0, 0x1, [{0x32, 0x0, "30c6c571b0c5efe0b0b4243f4df88037d17ddfe1045593a8b3677c243a2a246de91b1bb51c5e5a9e249ad92ff3e3"}, {0x61, 0x0, "7c62d6e72d1bb99a5b6e63d5543624b402ba92ac2aab3dd7248c9c20f9d34e48b79883275f59e25cfeb69400b55f0ab7b35d64f41e1cd79df3a0615aa5dd5fb339c1a554aa61913cfa3aa6822b77b1e96474754b9126b794b7787ff0e9"}, {0xa1, 0x0, "fc582fe069b76f3ccfeafffdf6e40e030ca2b9ec7dace5f406faa3c37a7928422a1968e9604a7a7c98bef9bd999b446b91facb9444356b5d6e08519bf81b69311e86e7c1936e2363fa46fbb7e9964cc828dd1a0d9c3272019b1cf540aeeda85e1adeb91633f60275453f7b09dc207863edfb5b60ca976ff795298623f9f740a597c0247ee9a04e358fdfa9a00d0564b6b768cda2952e22be6ace3c86b4"}]}, @NL80211_NAN_FUNC_INSTANCE_ID={0x5, 0xf, 0x7}, @NL80211_NAN_FUNC_RX_MATCH_FILTER={0x4}, @NL80211_NAN_FUNC_SERVICE_INFO={0xb, 0xb, "a4557f26ce01d9"}]}, @NL80211_ATTR_NAN_FUNC={0x3d8, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_TX_MATCH_FILTER={0x94, 0xe, 0x0, 0x1, [{0x8b, 0x0, "c0722f7e69e52a7f7403fdd5b7dbb671cd97227057e89ec9950ff7cfcd6e9e8a5dcd1efcafcbb0cac1e62b409c3f3989a2b516a2389d789df5012d3c95276d416a9022e722f3d87d1c6c7a99db635592093e765d55fb5fd4dc89e52618f72947b4934fb5f4bb9fcd05da6dda2fd6404717433a35d65301b89405603ccd336face546bdb564da71"}, {0x4}]}, @NL80211_NAN_FUNC_RX_MATCH_FILTER={0x228, 0xd, 0x0, 0x1, [{0xcc, 0x0, "0536d0b7c57447d96b71960ce5756212b7ebddc03287d7ee91f514bba2561e4b375557cb7df2755068b38ca5ae29afbeebf4103873421958a630b5dc5fffd9768a2458b2908e68d135e7ffdb838c93efcebf607c3ca68b82e82754b481855328fd36bdbec3fd9f4a954137c9fc31a0d342a11c7872786c8035218041a900fc48c72fd508acb03c33fff09bf1040c8c729dba27f0ae1b6aa69e926dc9d3dfe70c4712a1a81447fa369aa7ed77094cc7eda0332fa12bd97a6c4bf9de8b8af5366aaa700143cbd37b37"}, {0xf7, 0x0, "d6670dafbd39d1a801fdb6eacaa90f392c15a7f561735a84cf6b6cd07aed9a6eb2e7c0b8752de09687f361ebe72cd62f50c257df0fac8a222c2f36d2886c91fb5b5b67d709437371b2f2f4be607890afa9f0dc3bfa15f6281be822690d8dd3b460f0ba90a2e751971136aabcc52295f74922ca281c13961f35d6877c092bfbd716e970c2524c35cc9d2b9a4337821bd0c43a81982dda3e3553d982845e6c932f8b6174a16024b81a23c837ba8cd76050202b9713e738dd9cf0620cce6bb15fea490e01ad7ee63ed54e466b56be5a6a2e8bc029e14ab4d05dfc25be940eb2dc93e1237898af36bd051ceb4fb6c175ee51171db7"}, {0x5e, 0x0, "88cf4df40b6c0d0af3db61ea1f74fe1882ae31a82fa3497a4bbe06d644cd30a076709c404898c70ce8f8c572b6489e9a210ea4f6732f033da74f605ead775a1c2baf61a355784ebe52439bd5fc7b2623fd8f84c9dbc7e2ee5157"}]}, @NL80211_NAN_FUNC_FOLLOW_UP_REQ_ID={0x5, 0x7, 0xda}, @NL80211_NAN_FUNC_SERVICE_ID={0xa, 0x2, "58f228698051"}, @NL80211_NAN_FUNC_TTL={0x8, 0xa, 0x8}, @NL80211_NAN_FUNC_PUBLISH_TYPE={0x5, 0x3, 0x4}, @NL80211_NAN_FUNC_TTL={0x8, 0xa, 0x2ee0f496}, @NL80211_NAN_FUNC_PUBLISH_BCAST={0x4}, @NL80211_NAN_FUNC_CLOSE_RANGE={0x4}, @NL80211_NAN_FUNC_TX_MATCH_FILTER={0xe4, 0xe, 0x0, 0x1, [{0x6c, 0x0, "9033d6f26d75ed0cc60d416b7799190fea4ed799c9f82ca1ab907431ea47328589ffde178c2320ab1fb548083d8447105fc4bf9826053077cc3e1f7c525599def6c27a8fe941c6f077e97e0de6e9c23462e70a20af556efabba4668191ed8a7220f1ea5f5860a136"}, {0x73, 0x0, "754d150e063ca290bf2720af55b6ae224421a85506be5cc0fe357b4c0a1c0e2eae116ba6f4f440d7145f5ce69457a94ce3eb39500494f0938d4fa2349698fa5b81e00344f5bcee0cd73f46fa9e35f190efe5bbb9565f067875853b2a963f94e5e5822df45b4b5af11d9b59533cc5c3"}]}]}]}, 0xc70}, 0x1, 0x0, 0x0, 0x20000884}, 0x40000) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r10) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r11 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r11, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r12, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000140)='\r', 0x1}], 0x1, 0x0, 0x0, 0x86dd}, 0x4) 4.0087276s ago: executing program 9 (id=1674): prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = add_key$user(&(0x7f0000000200), &(0x7f0000000300)={'syz', 0x2}, &(0x7f00000002c0)="f5", 0x30, 0xfffffffffffffffe) fcntl$setstatus(r1, 0x4, 0x2400) syz_open_dev$loop(&(0x7f0000000180), 0x75d, 0x2480) r4 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r3, r4, r3}, &(0x7f00000000c0)=""/83, 0x53, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000240)={0x3, &(0x7f00000000c0)=[{0x48, 0x37, 0x80, 0x49af}, {0x28, 0x1, 0xf7, 0xfffff024}, {0x6, 0x6, 0x2, 0x57c}]}, 0x10) write$binfmt_aout(r5, &(0x7f0000000000)=ANY=[], 0xa052) 3.182206626s ago: executing program 9 (id=1684): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)='3', 0x4e) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x402) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x9, 0x5, 0x20ffd}) 2.41692665s ago: executing program 9 (id=1685): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000002a0000000100000000000001040000002000000105000000010000040400000013000000010000000000000017000000020000040800000021000000010000000000000025000000020000002000000000696e74006270665f7370696e5f6c6f636b0076616c006d61705f76616c756500636e74006c"], 0x0, 0x8e}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0200000004000000080000000100000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001451cced3f65a52000000000", @ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB="0100000003"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, 0x0) r2 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) bind(r3, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) syz_emit_vhci(&(0x7f0000000540)=ANY=[@ANYBLOB="043e1f0a"], 0x22) syz_emit_vhci(&(0x7f0000000840)=ANY=[@ANYBLOB="0405"], 0x7) 1.999446533s ago: executing program 5 (id=1696): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)='3', 0x4e) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x402) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x9, 0x5, 0x20ffd}) 1.987826211s ago: executing program 5 (id=1698): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_ublk_setup_queues(0xffffffffffffffff, 0x0, &(0x7f0000000440)={0x0, 0x17fd, 0x1000, 0x1, 0x143}, &(0x7f00000004c0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xeb15, 0x6480, 0x0, 0x1fe}, 0xffffffffffffffff}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe1bb, 0x80, 0x0, 0x34e}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x69f4, 0x2000, 0x3, 0x235}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xbefb, 0x1, 0x1, 0xb7}}], 0x4, &(0x7f0000002100)={0x2e, 0xc, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {0xa9}, 0x0, 0x0, '\x00', {0x1, 0x9f1, 0x0, &(0x7f0000001100)=@buf_512="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"}}, &(0x7f0000002180)) io_uring_enter(r3, 0x468b, 0x402b, 0xe2, &(0x7f00000021c0)={[0x10]}, 0x8) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f00000001c0)) mlock2(&(0x7f0000627000/0x3000)=nil, 0x3000, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) listns(&(0x7f00000010c0)={0x20, 0x0, 0x7}, &(0x7f0000000040)=[0x0], 0xf4240, 0x0) mlock(&(0x7f0000626000/0x5000)=nil, 0x5000) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r4, 0x84, 0xc, &(0x7f0000000280)=@assoc_value, &(0x7f0000000880)=0x8) r5 = socket(0x2, 0x80805, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000800)=ANY=[@ANYBLOB="4801000069776c190000000000000000fe881e00"/30, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac1414aa0000000000000000000000000000000033000000ff01000000000000000000000000000100000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000023500000a00000000000000000000000c001c00", @ANYRES32=0x0, @ANYBLOB="060000004c0014007368613100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a0000"], 0x148}, 0x1, 0x0, 0x0, 0x40000010}, 0x0) sendmmsg$inet(r5, &(0x7f0000000c00)=[{{&(0x7f0000000140)={0x2, 0x0, @rand_addr=0x64010100}, 0x10, 0x0}}], 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x1d, 0x16, &(0x7f0000000140)=ANY=[@ANYRES32=r0], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x50}, 0x94) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002140)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000002280)="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", 0x1bf}, {&(0x7f0000000dc0)="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", 0x1cb}, {&(0x7f00000005c0)="05437c98b91b1455046f57b5fc913814bde2bbeac2104eaea9c9d01a7838d859007067c10aa7352abbdf98e9bf033a4784a11e84639d3b9164d9c5d729f3dd40", 0x40}, {&(0x7f0000002200)="f610e61ac81cc3edc86f0500194d27a5a443f10dfd1ecda0fd0ed9a444b7fb76afe3a0002f0a5eafcd35", 0x2a}], 0x4, 0x0, 0x0, 0x900}}], 0x1, 0x0) r6 = socket(0x10, 0x803, 0x0) sendto(r6, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r6, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000000)=""/102, 0x365}, {&(0x7f0000000280)=""/76, 0x14c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/92, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x188}, {&(0x7f00000007c0)=""/154, 0x2c}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) syz_open_dev$video(&(0x7f0000000000), 0x0, 0x0) 1.874346137s ago: executing program 9 (id=1699): socket$nl_route(0x10, 0x3, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) fstatfs(r0, 0xfffffffffffffffe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r4 = socket$kcm(0x23, 0x2, 0x0) sendmsg$sock(r4, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) r5 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) r6 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2}}) socket(0x10, 0x803, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f00000003c0)={0x1, @sliced={0x5, [0xa46, 0x7e, 0x4, 0x23, 0xd, 0x401, 0x9, 0xcf, 0x8000, 0x3, 0xfffb, 0x101, 0x9, 0x9, 0xfffa, 0xfffa, 0xc85c, 0x4, 0x101, 0x7, 0x8, 0xa, 0x8, 0x80, 0x2, 0x7, 0x81, 0x94b, 0x17, 0x7, 0x7, 0x2, 0xffff, 0x8, 0x5, 0x2, 0x3, 0x7ff, 0x7, 0x5, 0x0, 0x1, 0x200, 0x98, 0x2, 0x4, 0x8, 0x7], 0xe}}) setsockopt$sock_int(r4, 0x1, 0x6, &(0x7f00000000c0)=0xd, 0x4) r7 = socket$kcm(0x2, 0xa, 0x2) r8 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r8, 0x84, 0x6b, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}], 0x10) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r8, 0x84, 0x1e, &(0x7f0000000040)=0x5, 0x4) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r8, 0x84, 0x1e, &(0x7f0000000000)=0x2, 0x4) ioctl$SIOCSIFHWADDR(r7, 0x8914, 0x0) write$tun(r0, 0x0, 0x0) 1.119575402s ago: executing program 5 (id=1701): r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_IMPORTANCE(r1, 0x10f, 0x7f, &(0x7f0000000240), 0x4) r2 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000340)='.\x00', &(0x7f0000000400), 0x6, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}}) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x3, 0x1, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext2\x00', &(0x7f0000000280)='./file0\x00', 0x800, &(0x7f0000000340)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x8000000}}, {@noauto_da_alloc}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x4}}, {@test_dummy_encryption}, {@auto_da_alloc}, {@noblock_validity}, {@minixdf}, {@auto_da_alloc}]}, 0x1, 0xba6, &(0x7f00000017c0)="$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") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) bind$netlink(r0, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffdfffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x81, 0xfffffffb, 0xb}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x28000000}, 0x20040084) 1.118144239s ago: executing program 8 (id=1702): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000003880)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c00000010000108fdffffff0000000000000000", @ANYBLOB="000000002000000008001b000000000014001a80100002800c000180080001"], 0x3c}}, 0x0) 1.093847194s ago: executing program 8 (id=1704): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x10008, &(0x7f0000000080)={[{@nombcache}, {@nogrpid}]}, 0xff, 0x49e, &(0x7f0000000f40)="$eJzs3M9vFFUcAPDvbH/Qyo9WRBQEraCR+KOlBZWDBzSaeNDERA94rG1BZKGG1gRIo8UYPBoS78ajiX+BNy9GPRgTr5p4NCREe6F4qpmdGbpsd0u3tF3pfj7Jdt+bH/ved+a93TcznQmgbQ2kf5KIbRHxe0T0ZdnbFxjI3ubnZsZuzs2MJbGw8PbfSWW5G3MzY8WixXpb88yhUkTpsySOJ0vLnbp46cxouTxxPs8PTZ/9cGjq4qXnTp8dPTVxauLcyLFjR48Mv/jCyPNrEmca1429H0/u2/P6u1ffHDtx9b2fvk2rtXt/Nr86jju6WSegOgbSrfbPQkXtvCebqPu9YHtVOulsYUVoSkdEpLurq9L/+6IjFndeX7z2aUsrB6yr9LdpS+PZswvAJpZEq2sAtEbxQ58e/xavDRp6/C9cfzmiO0/Pz82Mzd+KvzNK+fSudSx/ICJOzP77VfqKZs9DAACsQmVs82y98V8pdlfes2sdO/JrKP0RcX9E7IyIByJiV0Q8GFFZ9qGIeDhbeaFvheUP1OSXjn9K1+rWeY2k47+XqsZ+81Xx52/9HXlueyX+ruTk6fLE4XybHIquLWl+eJkyvn/1ty8azase/6WvtPxiLJhX4FpnzQm68dHp0bXaCNcvR+ztrBd/cutKQNoC9kTE3uY+ekeROP30N/saLXTn+JexBteZFr6OeCrb/7NRE38hWf765FBPlCcODxWtYqmff73yVqPy7yr+NXD9wCNZYnH/1yxR1dDK5YnzU82XceWPzxse06y2/Xcn71T65C/vZ9MujE5Pnx+O6E7eqOSLY7rK9JHFdS+MTvem+WL5tP0fOli//+/M10n3f7qV0ka8PyIejYjH8ro/HhEHIuLgMvH/+MoTHywTfxJJtG7/X44Yr/v9d6v99yfV1+tXkeg488N3ja6Yr2z/H43ZyndtpvL9dwcrreBdbj4AAAC4J5QiYlskpcEsPbAtSqXBwex/+HfFfaXy5NT0MycnPzo3nt0j0B9dpeJMV1/V+dDhZDb/xCw/kp8rLuYfyc8bf9nRW8kPjk2Wx1scO7S7rbf3/yj6f+qvjlbXDlh37teC9lXb/0stqgew8Vby++9YADan2/t/T/qnt1V1ATaW439oX/X6/yc1eeN/2JyW9v8/6zyyDtiMjP+hfen/0L70f2hLzdzOH8cbzeqJiGYeC1DcLLD6pwr0rPgO/3ZJFE+8WM+yeuPSme58SpRaFGlHk41tUyTSHrOxhS4+QwUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOBe9l8AAAD//3ow3kU=") mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = socket$kcm(0x2, 0x1000000000000005, 0x0) sendmsg$inet(r2, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x0, @rand_addr=0xa9fe0000}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000080)='r', 0x1}], 0x1, &(0x7f0000007880)=[@ip_tos_u8={{0x11, 0x34000, 0x11}}, @ip_retopts={{0x10, 0x84}}], 0x28}, 0x0) setsockopt$sock_int(r1, 0x1, 0x1, &(0x7f0000000480)=0x7, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x7727e000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x2000)=nil, 0x2000, &(0x7f0000000000)) ioctl$F2FS_IOC_SEC_TRIM_FILE(r4, 0x4018f514, &(0x7f00000000c0)={0x0, 0x5, 0x2}) prctl$PR_SET_VMA(0x53564d41, 0x700, &(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000400)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) prctl$PR_SET_MM(0x23, 0x4, &(0x7f0000ffd000/0x2000)=nil) ioctl$vim2m_VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, &(0x7f0000000040)={0xf0f080, 0x1}) r6 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="380000000314010000000000000000000900020073797a32000000000800410072786500140033006970766c616e300000000000000000003592074013f72538dc0a298e295de5b0db5568240cb3b812482d7aa19cb96bd25237575936af408e65885427448466e38821b87197888fb66f194ff6f9e7a184ed4904572f75b020891d3922428ffb0d9b7b932b4eda596bd941814e28af5009323469f25e3948c620145245978723a79929d8168e6d29d60800a645421056cbc7250149b8ffa26b813f452d5d9237fddd"], 0x38}, 0x1, 0x0, 0x0, 0x80c9}, 0x20000000) sched_setparam(r0, &(0x7f0000000300)=0x1) 897.793652ms ago: executing program 5 (id=1705): r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=ANY=[@ANYRES32=r1, @ANYBLOB="01980000000000002800128008000100677265001c00028008000600ac14140c05"], 0x48}}, 0x0) openat$smackfs_ptrace(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 873.190406ms ago: executing program 2 (id=1706): socket$l2tp(0x2, 0x2, 0x73) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./dev/mapper/control\x00', 0x2, 0x0) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f00000001c0), &(0x7f0000000240)=0x4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x8040}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="2c0000007800010402000000000000000700000064000000140001800800030064000000080002"], 0x2c}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) 850.555532ms ago: executing program 2 (id=1707): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000006200)=[{{&(0x7f0000000440)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000002d80)=[{&(0x7f00000029c0)="0f0845f9d4fdd226677416be95157885ec5784c717039bc5a80eb4c78621920c994f17e029e2644ecd9a350f064c9e28dd733e3417f609d1c9a73c82e1f6b930fa8a4a27baeebfe47324fe84d190185016fb915ebc10a7978e1031ade9552f6c63aa50bc4e274e74144e601a4b542dd8ebc8905970ed9e859d3fcb76e13a63f8a837e75a0ac1d59d67b9a145a15a6956505d0ad63f09563911be033ccf2b535f567cce8f4dd7b899cdb581efc2b4aac82e393d894b2aa22affc71dc7", 0xbc}, {&(0x7f0000002a80)="112f40132577c5d68c62683c1f0dc731e32788efb58174c902c9ceeb92b6a17d686377bbce7a6c25c7d66941682e6fb78cb75fd88a23f5abda7c059b88855691402a228a4db5ddbc1570825d36e3ad173ede1b541e4b79b32bf9a5cf5a54b42ff2c4b8de748871a2763dfa02510e3a620506e0177e0bbbdb", 0x78}, {&(0x7f0000002b00)="543f861e24b032e0c51dd306aab688889b353dd6", 0x14}, {&(0x7f0000002b40)="023d2fb3fd4c0eae7981e2b102be7cd2bb47991fcf1164a745324159343e861309bc520b3e44054b4df292484a33ac5392cc6e19c5ffd380ec3b9be22fc56b56378eaac920be2b58360ee3122cfb98f4439cedd916e3b3fb3b3b34cc3a94e2384633a9d474fe15972bee2b4533a79a2ad3fbe5fe13843a281f2f6a2b3f2c7e8d38747d4c90b1e52dcb0982fb44541c3ed0fc496e2cca729b1466de962c708ea1a1f9df3728884f99899cb76b3d619cafed45100bfc6c598204c3e0413120bf2eca8161ea5cf16d40b14b70f641b48c43f248023bb3d568ab21d6b48fdb067ac674481c42", 0xe4}, {&(0x7f0000002c40)="effe675be00bf4d64c13d5bcbc1a9c5301327e318803a2d0ce081cd070c50af2", 0x20}, {&(0x7f0000002c80)="abd99292cbd029fc122d8624b383c43717f72a87aad457", 0x17}, {&(0x7f0000002cc0)="bb95b9735b0db962eb41d7d52beae534708d119f805cf9dee672101f92c7e3642296c87bbc6e1d929b5fbff5a15e48988805325056bbe0742b7c119385a258fe81ad72c42de8248afca6f78d880281d122e91263f745397f730c9262ba2c6cd39c992279f39510a58f37d5b675937e3f212d199ecf11abdc649ba47a49a63b52c566db309f513609ea8cc70b703046b7efc156041a795e6b16068fd6", 0x9c}], 0x7, &(0x7f00000053c0)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [r1, r1, r0, r0]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [r0, r0, r0, r1]}}], 0xe0, 0x40000}}], 0x1, 0x0) (async, rerun: 64) ioctl$sock_inet_SIOCGIFBRDADDR(r1, 0x8919, &(0x7f00000002c0)={'ip6_vti0\x00', {0x2, 0x0, @empty}}) (async, rerun: 64) r2 = syz_mount_image$vfat(&(0x7f0000000bc0), &(0x7f0000000080)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200010, &(0x7f0000000680)=ANY=[@ANYRES64=0x0], 0x1, 0x269, &(0x7f0000001000)="$eJzs2r9rJGUYB/Bn48ltcuQ24i/uQHzRQm2GS2qLOySCGFDUCKcgN2cmumbcDZklsCImlbb+CdZiaSfIddqk8S9QsEuT8gpxZLObuAnRxOL2Qvx8iuRh3vnuvvO+y/DssLsvf/3p2mqVrea9mGo0YupmbMf9RszFVBzYjpdeuP3zM2/ffu/1W0tLzdHRhZTS1Wd/fP/z756717vy7vdXf7gcO3Mf7O4t/L7z1M613T/f+bhdpXaVOt1eytPdbreX3y2LtNKu1rKU3iyLvCpSu1MVG0fGV8vu+no/5Z2V2Zn1jaKqUt7pp7Win3rd1Nvop/yjvN1JWZal2ZngdD/948jyt/frOvbqR+9EXdfT38SVezH7a/wWjcdS4/GbjSfvNJ7eblzbq+vW8ej0g541k3Di/rfOsP9cCKOb+uJbKTUjyq82lzeXh/8Ho824tRrtKKOIGzEdf8TgYzIyrF99bWnxRto3F1+WW6P81ubyI/uvf5ifj1bMnZyfH+bTQf5yRAz+zoznF6IVT5ycXziWH75/M158fiyfRSt++TC6UcZKDLKxNVqCxS/mU3rljaVj+ev75wEAXDRZOjTo3wZN25H+LcuOjI/1R8P8WH/YOqU/PNZfXYrrlx7utRNR9T9by8uy2Bh8wdsvDo/8X4vp8WU5S3HwKOTBTWzqyJ6dl4VS/Ofi4DnKeZnPvxQRn0z+dsSE/b3pp57anMiEAAAAAAAAAAAAOJNJ/JzwYV8jAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwvv0VAAD//x4ev60=") (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000002580)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00'}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000002780)={'ip6tnl0\x00', &(0x7f0000002700)={'ip6_vti0\x00', 0x0, 0x29, 0xf5, 0x1, 0x9, 0x9, @private2, @mcast1, 0x20, 0x8000, 0x8714, 0x7}}) fstat(r2, &(0x7f00000027c0)={0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_route(r5, &(0x7f0000002980)={&(0x7f00000026c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000002940)={&(0x7f0000002840)=ANY=[@ANYBLOB="e00000001900200027bd7000fedbdf2502203a03ff00fe0600290000080007006401010208000300", @ANYRES32=r6, @ANYBLOB="08000100e0000002080010000080000008000700e000000108001e00001000007a000880f51a1f5480ab8b3fbb340c4ac4eb389b731ed7a34578f28c4197d728b98865a1f498fab98c81b403ea066daaf6f838c3ede6ee8a58258ddb77bf2515e607a380a1c04d2646331b8f5729d1c111a3f8eb96adedf5e0609687bc0dffde1e355239fa801ffacdc4bc21c7485fc57a56c07ad0f0bc22c583000006001d004e21000008001900", @ANYRES32=r7, @ANYBLOB="06001d004e210000"], 0xe0}, 0x1, 0x0, 0x0, 0x800}, 0x8050) (async) sendmsg$TIPC_NL_BEARER_SET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRESOCT=r2, @ANYRES32=r4], 0x34}}, 0x4c840) r8 = fsopen(&(0x7f0000000280)='rootfs\x00', 0x1) r9 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x10) (async) close(0x4) pipe2(&(0x7f0000001040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) (async) pipe2(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) tee(r12, r11, 0xfffffffffffffc01, 0x0) (async) close_range(r10, r13, 0x0) (async) memfd_create(&(0x7f0000000100)='\x00\xc2\xea\x97\xbb\x1c\xdfjw\x97\x05\xa3\xa2\'\xdd\xe4q\xbf\t\x8c\xe0\x19`\x8e\x00\x00\x00\x00\x00\x00\x00\x00\x00\b \xff\x13\x96\xe3?\xdfH\x8c\xe4V\xe2\xfe\v8\x04\xa5\xf6y_w\xd8\xcf\x90k\x05\x82\xd4,\x94\fI\xdag15\xc2\xb3u|K\x111\xd4\f8\xeb\x18\xad\xbb!1\x85\x96P\x1b\xa1\x9a\x81\xf8\xb1\xecB)\xe5\xaa7\xfe\xdd,_\x95\x00\x00\x00j^\xae\x01\x80\x1a\xb4\x17\xafP\x85I\xd5\xa0I\xb0\xaf\xb5\x8b\\\x05\xd7g\xcbV\x8e\xd0\xac\x87I7\xbd\xc6\x9bI\x92\xb2\x8f.\xb3\x1fs\xe7-\xdd+\r\xb4\x117\xa7ei\'\xbf\x16\xd1P\xf2\x84\x89K\x16\xd0\x06\x86\v\x9bG|\xa3\x03\x89\xc9~9\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xea\x00\x00\x00\x00\x00\x00', 0x6) fsconfig$FSCONFIG_SET_FD(r8, 0x5, &(0x7f00000000c0)='workdir', 0x0, r9) pipe2$watch_queue(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) (async) r16 = add_key(&(0x7f0000000000)='id_legacy\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000400)="f81918e8", 0x4, 0xfffffffffffffffe) keyctl$KEYCTL_WATCH_KEY(0x20, r16, r15, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, r16, r14, 0x68) (async) r17 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r17, 0x6, 0x0, 0x0, 0x0) (async, rerun: 32) r18 = fsmount(r17, 0x0, 0x4) (rerun: 32) r19 = openat$cgroup_int(r18, &(0x7f0000000580)='cgroup.max.depth\x00', 0x2, 0x0) write$cgroup_subtree(r19, &(0x7f0000000040)=ANY=[@ANYBLOB='-', @ANYRESHEX=r18], 0x27) (async) read$FUSE(0xffffffffffffffff, &(0x7f0000000540)={0x2020}, 0x2020) 775.184118ms ago: executing program 5 (id=1708): setuid(0xee01) r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @loopback}, 0x5}, 0x1c) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) r2 = fcntl$dupfd(r1, 0x0, r1) r3 = getpid() fcntl$setownex(r2, 0xf, &(0x7f0000000100)={0x0, r3}) sendmsg$NL80211_CMD_GET_KEY(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)={0x1c, 0x0, 0x200, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x20000090}, 0x41) 676.821143ms ago: executing program 2 (id=1709): r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x41, 0x0) write$nbd(r0, 0x0, 0x0) 643.468839ms ago: executing program 2 (id=1710): r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x41, 0x0) write$nbd(r0, 0x0, 0x0) 629.74164ms ago: executing program 2 (id=1711): r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000000)={0x0, 0x2e, "d5cf610e4fff2906a5a0252abf8fc29b1145446b9c92e129692005789744b5e477894db0a459bad5150e8dc79ad0"}, &(0x7f0000000040)=0x36) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000080)={0xfffb, 0x81, 0x0, 0x9, 0x48e, 0x3, 0x153e, 0x9, r1}, 0x20) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000000c0)=[@in6={0xa, 0x4e22, 0x5, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4}, @in={0x2, 0x4e22, @empty}, @in6={0xa, 0x4e20, 0x4, @local, 0x7}], 0x48) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000140)={r1, @in={{0x2, 0x4e23, @multicast2}}, 0x9, 0x3}, 0x90) sendmsg$inet_sctp(r0, &(0x7f0000000340)={&(0x7f0000000200)=@in6={0xa, 0x4e21, 0x3, @mcast1, 0x1}, 0x1c, &(0x7f0000000240), 0x0, &(0x7f0000000280)=[@sndrcv={0x30, 0x84, 0x1, {0x2f2e, 0xc9, 0x1, 0x7fff, 0xffff, 0x7, 0x8, 0x9, r1}}, @sndinfo={0x20, 0x84, 0x2, {0x6, 0x8005, 0x2, 0x4, r1}}, @authinfo={0x18}, @dstaddrv4={0x18, 0x84, 0x7, @remote}, @dstaddrv4={0x18, 0x84, 0x7, @local}, @init={0x18, 0x84, 0x0, {0x3, 0xfff, 0xee35, 0x8}}], 0xb0, 0x800}, 0x4c0c0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000380)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) getsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f00000003c0), &(0x7f0000000400)=0x4) getsockopt$inet_buf(r2, 0x0, 0x30, &(0x7f0000000440)=""/4096, &(0x7f0000001440)=0x1000) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f0000001480)={r1, 0x7}, &(0x7f00000014c0)=0x8) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000001500)={r3, 0x101}, &(0x7f0000001540)=0x8) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000001580), r4) socket$nl_sock_diag(0x10, 0x3, 0x4) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r2, &(0x7f00000015c0)={0x4, 0x8}, 0x10) r5 = syz_open_dev$rtc(&(0x7f0000001600), 0xffffffffffffa526, 0x8000) r6 = dup3(r5, r0, 0x0) r7 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000001640), 0x8042, 0x0) ioctl$TCFLSH(r7, 0x540b, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f00000017c0)={&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000001680)=""/212, 0xd4, 0x1, &(0x7f0000001780)=""/34, 0x22}, &(0x7f0000001800)=0x40) sendmsg$NL802154_CMD_SET_PAN_ID(r4, &(0x7f0000001900)={&(0x7f0000001840)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000018c0)={&(0x7f0000001880)={0x20, 0x0, 0x223, 0x70bd29, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000011}, 0x4800) r8 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000001980), r4) sendmsg$NLBL_CIPSOV4_C_REMOVE(r4, &(0x7f0000001b80)={&(0x7f0000001940)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001b40)={&(0x7f00000019c0)={0x144, r8, 0x8, 0x70bd2b, 0x25dfdbfc, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_MLSCATLST={0x118, 0xc, 0x0, 0x1, [{0x4c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7a36ed18}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x59be}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x63288529}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x851c}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xcfa6}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xba84}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x35c5}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x43c08a9b}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xcd50}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xec5f}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xdb67}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe445}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7b53fd3d}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc6cc}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x162458b7}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8b1e}]}, {0x3c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x55b229f2}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x282c748}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8e3f}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9dcb}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc5b6}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1ceed744}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7b3c}]}, {0x4}, {0x3c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3bca}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2cef}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x306}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6453}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x569e92b8}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x24ba73e5}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1ae99d3}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9e4e}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x7}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}]}, 0x144}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r2, 0x1) r9 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r9, 0x84, 0x22, &(0x7f0000001bc0)={0x5, 0x200, 0x4, 0x4, r1}, 0x10) r10 = geteuid() fstat(r2, &(0x7f0000001f40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r12 = gettid() sendmsg$unix(r6, &(0x7f0000002140)={&(0x7f0000001c00)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000001f00)=[{&(0x7f0000001c80)="8b102295d4b3f6013a243f120ca70979498af0cb1338a92ddec3f5e95fef1f3bf195b344b0f069a760837c43a66b3a2bf44cc9e74d2f3399b2899be4959d58359ebad3352807463e11c3b1469171250a8560821540677f45800bd8cea122cdd8c0ad796a0ae2aab89d6ee60c3493dbcdc211d74893acb3556e2faede805186780189e7537f7054877d3236fb41", 0x8d}, {&(0x7f0000001d40)="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", 0xfe}, {&(0x7f0000001e40)="db6c75ed0c19045ef0f9bc0b1f52ad1eeb72cab35ae15a6dc6bcf1a45d08541fd97bc0bc17ffea0c21d9d9911b989fc35939c977dac6959fa5fafcf126b8a693e34f6fcbf8977557f9bfb2377b1501ca06737afe7f28f4ccb5ef372785a15787d9fe0c0d5ce8fbfac95f52f925cc2eda4fd4028e560516f0d7c7554f0acc3308fbe9874a8f12403610eddcec15a5eca7ac08773185", 0x95}], 0x3, &(0x7f0000002100)=[@cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, r10, r11}}}, @cred={{0x1c, 0x1, 0x2, {r12}}}], 0x40, 0x40800}, 0x600040d9) 564.562049ms ago: executing program 2 (id=1712): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_ublk_setup_queues(0xffffffffffffffff, 0x0, &(0x7f0000000440)={0x0, 0x17fd, 0x1000, 0x1, 0x143}, &(0x7f00000004c0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xeb15, 0x6480, 0x0, 0x1fe}, 0xffffffffffffffff}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe1bb, 0x80, 0x0, 0x34e}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x69f4, 0x2000, 0x3, 0x235}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xbefb, 0x1, 0x1, 0xb7}}], 0x4, &(0x7f0000002100)={0x2e, 0xc, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {0xa9}, 0x0, 0x0, '\x00', {0x1, 0x9f1, 0x0, &(0x7f0000001100)=@buf_512="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"}}, &(0x7f0000002180)) io_uring_enter(r3, 0x468b, 0x402b, 0xe2, &(0x7f00000021c0)={[0x10]}, 0x8) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f00000001c0)) mlock2(&(0x7f0000627000/0x3000)=nil, 0x3000, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) listns(&(0x7f00000010c0)={0x20, 0x0, 0x7}, &(0x7f0000000040)=[0x0], 0xf4240, 0x0) mlock(&(0x7f0000626000/0x5000)=nil, 0x5000) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r4, 0x84, 0xc, &(0x7f0000000280)=@assoc_value, &(0x7f0000000880)=0x8) r5 = socket(0x2, 0x80805, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000800)=ANY=[@ANYBLOB="4801000069776c190000000000000000fe881e00"/30, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac1414aa0000000000000000000000000000000033000000ff01000000000000000000000000000100000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000023500000a00000000000000000000000c001c00", @ANYRES32=0x0, @ANYBLOB="060000004c0014007368613100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a0000"], 0x148}, 0x1, 0x0, 0x0, 0x40000010}, 0x0) sendmmsg$inet(r5, &(0x7f0000000c00)=[{{&(0x7f0000000140)={0x2, 0x0, @rand_addr=0x64010100}, 0x10, 0x0}}], 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x1d, 0x16, &(0x7f0000000140)=ANY=[@ANYRES32=r0], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x50}, 0x94) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002140)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000002280)="21ae1baf930b4569b9ddef9797ffd935c7d80e6466b3e4e62dd4603583f5d4b61fbc65b6ac744d7319535e75bf552062e4cfde1ba7ce29263322e18ea9740aa89f69c47a63133708cda00d2b1f4e799bd41e3f76258180fa91a42aaa8b1ebc4e0ea8fb12f2c71e6e5bc57a8e91f254005514721d93c13c5606ae1fea7f31f558d562bd5a8dfb0b9fed873efa221fccffa84fcd374c92e6cbb03e6a9de890ce323f000000abcc6c01326d588495b7c1a7db31ec4129e6336f26bb9e0b7552af3cd2d5dda1632799bbc98425c433384d8a8e4071ff39a36dfde5f05af35a4ddd340cfecd7ec935f4ce7d3e851583ba1cf53a90a7f7bce5703de57ce93ddef7849b30a01de0637e6d5e507b801d32e582e0c2d564539ebfc84c098a23e765552767b122885fb1629e9c180be47da7931bd125b80de1594b75e5371a81c2c32d0c4a028a5aab0c56a2edf2e0483b87f5ab299dc046076203dea10ccbfc631d5bf4a87ce67004519f248f086346ce6a8a9d181789a59f81d9b7f6781daac3e229914b8b8998c15c3b6302a519331cb05995bc60b7cb872dd3b5b43331c77c5d72e21f7bd2b1a915ff3204e3f20d3a20b22d6a58155b5a4ebf6d1d1cd90c656ecada", 0x1bf}, {&(0x7f0000000dc0)="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", 0x1cb}, {&(0x7f00000005c0)="05437c98b91b1455046f57b5fc913814bde2bbeac2104eaea9c9d01a7838d859007067c10aa7352abbdf98e9bf033a4784a11e84639d3b9164d9c5d729f3dd40", 0x40}, {&(0x7f0000002200)="f610e61ac81cc3edc86f0500194d27a5a443f10dfd1ecda0fd0ed9a444b7fb76afe3a0002f0a5eafcd35", 0x2a}], 0x4, 0x0, 0x0, 0x900}}], 0x1, 0x0) r6 = socket(0x10, 0x803, 0x0) sendto(r6, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r6, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000000)=""/102, 0x365}, {&(0x7f0000000280)=""/76, 0x14c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/92, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x188}, {&(0x7f00000007c0)=""/154, 0x2c}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) syz_open_dev$video(&(0x7f0000000000), 0x0, 0x0) 544.30749ms ago: executing program 9 (id=1713): r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) mmap$IORING_OFF_CQ_RING(0x0, 0x7, 0x2000004, 0x13, r0, 0x8000000) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x488c9) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setresuid(0xee00, 0x0, 0x0) setpriority(0x2, 0x0, 0xffffffffffffffcd) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x2a1, 0x21, &(0x7f0000000240)={0x0, 0x6, 0xd, 0x360}, 0x8, 0x7, 0x7f, 0x0, 0x9, 0x101, 0x0}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x40010, r0, 0x3000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x8) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000100)={&(0x7f0000510000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000000/0x3000)=nil, &(0x7f0000117000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f000083f000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000c4a000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0}, 0x68) munmap$binder(0x0, 0xffffffff) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) 511.749447ms ago: executing program 5 (id=1714): r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000600)={0x1, 0x1}, 0x2) write$USERIO_CMD_REGISTER(r0, &(0x7f00000000c0), 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000a00)=ANY=[@ANYBLOB="14000000160001030000000000f6ffff0a"], 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000000)={0x2, 0x3}, 0x2) 208.760929ms ago: executing program 8 (id=1715): socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) r1 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000180)={0x4, 0x20, 0x8f, 0x2, 0x0, 0x0, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0xb}, 0xe) bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000019140)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=ANY=[@ANYBLOB="480000001000bfff00"/20, @ANYRES32, @ANYBLOB="01980000000000002800128008000100677265001c00028008000600ac14140c050013000100000005000a0000000000"], 0x48}}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 162.691964ms ago: executing program 8 (id=1716): unshare(0x22020400) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$nl_route(0x10, 0x3, 0x0) unshare(0x10800) r3 = socket$unix(0x1, 0x3, 0x0) r4 = socket(0x28, 0x5, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r4, 0x89f8, &(0x7f0000000c80)={'tunl0\x00', &(0x7f0000000c00)={'gretap0\x00', 0x0, 0x8000, 0x7800, 0x5, 0x8, {{0x5, 0x4, 0x0, 0x3, 0x14, 0x65, 0x0, 0x3, 0x2f, 0x0, @local, @remote}}}}) getsockopt$IP_VS_SO_GET_TIMEOUT(r2, 0x0, 0x486, &(0x7f0000000040), &(0x7f0000000140)=0xc) syz_ublk_setup_io_uring(0x73c1, &(0x7f0000000080)={0x0, 0xcd3b, 0x2, 0x20002, 0x297}, &(0x7f0000000040), &(0x7f0000000140), &(0x7f0000000180)=0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x29) write(r6, &(0x7f0000000000)='7', 0x1) munmap$IORING_OFF_SQES(r5, 0xc5059c) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'veth0_to_batadv\x00', 0x0}) r8 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) ioctl$sock_inet_SIOCSIFFLAGS(r8, 0x8914, &(0x7f0000000200)={'syzkaller1\x00', 0x800}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@newtfilter={0x80, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0xb, 0xfff7}, {0xfff1, 0xffff}, {0x300}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4c, 0x2, [@TCA_MATCHALL_ACT={0x48, 0x2, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x0, 0x0, 0x3}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x80}}, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000020c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x10, &(0x7f0000000200)={[{@numtail}, {@shortname_win95}, {@shortname_win95}, {@fat=@codepage={'codepage', 0x3d, '737'}}, {@utf8}, {@fat=@uid}, {@rodir}, {@utf8no}, {@fat=@check_normal}, {}, {@uni_xlate}, {@shortname_winnt}, {@shortname_win95}, {@iocharset={'iocharset', 0x3d, 'iso8859-2'}}, {@fat=@nfs}, {@shortname_lower}]}, 0x7, 0x2a6, &(0x7f0000000740)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) write$tun(r1, &(0x7f0000001340)={@val={0x8, 0x800}, @val={0x6, 0x0, 0x6, 0x0, 0xc}, @ipv4=@generic={{0x7, 0x4, 0x2, 0x2, 0x1c, 0x66, 0x0, 0xb, 0x67, 0x0, @rand_addr=0x64010102, @broadcast, {[@rr={0x7, 0x7, 0x27, [@local]}]}}, "2197e3ba0fa8a2e71bd9fe1a399b5110420b70460c0dad392d66248a43540df968e7fcaab34569c0e36170578c0d3c546a98b26295e2592f360905866eb4720fed03a977a3df4224895629fd6ccec64f13a999f18f518e3ee28798381975e862f1db9dccdb2f1c1fb60f5ffc7a339d40a8bd1f24cede8a32f186f142e194d4fb48224759faf813ea80e6a853e79b4fe27fe3e1aec5897b314a7f0d515b07b1835986b4885e9826d902c40f16cd77c58b6433ab039955ce9db11f36f459e7114ace6c9989eecea80a81fd39f339356c7c3391af83da2486503a7973f6db4806cf3e5ca94cf7e1f79fd00decd76100c18251a59d1474caabf4d3ca6a9a9885df710e68c5b0dc11832dbb5eecb5c88c2f8f02bdbd88569ad4a740359cbca8c378118220d73bdd1e661c3a74f77aa931b11cd38119b0f084bb96e84803fca6566c33ee1e4e34ab0253fbf24f9f5974af5e1fc2a43a4ec9dd9928a8f38a128ea27c429300ae5a6bd7740471f973d8224b2b07879f4fbe7dcbed776a72ebdc713bcf1d7aa45b01c32a1003e6670d58510bd79ba2fde5cb2b82cef2cc315648f4e9d96d848ba327949b8926253cbdef6888a8982108b6ac7a1108533dd3fe125002e2e286362d1055082a9d73ec5ac3080f2a501ff27250b62c8965f371cf92b32d6422d79f66261eb08a2f8fe50049e102c69ce703d116d0834208cc957d0f1376457a90245816d7642412897fdd2f982fdfbc3af65aa0446b00c767b79aec40e460887ea02188e3a0960eea39b144859467b881978378c9fd593259e0f63148179fe2c2f6d40987b63a6e384e63027f03d8039d707522942d5dc88fd842524d006290b6a65e9cc86cc5b401a60ec4aedfb3bf4d0447bb681810a16b9684b72c2f4593ef834a0203e78cd1d9dbc978e9ae8f3ab62c07f1e41d59470decee7b0cc41ac49e4b7589ab6da65849f62ec217bb39ed161e7d337822d96badbd74d66451ea9a74bed591dc9631bf639dcf7846ee428a9fa55bfceedf3b1c23642f3b58dd0a7273664c6c49c9160a4b9cc5b72d0210e305b94e2cb09ae1d4af9d365b5093851f229c8c30aef75d45ccdbab4b86d801a9ad3b27f26ba601d531c0743717aa7aae29d37f496fec7682c5a1abd321ad61941a2d23fcac6af1d1875e308c8d8c64a5152be47b59c09d293f46b857310a99f1885f0a49d432aa0d39a3e8fc885e75e66b63215133175a19267c8d0adf7d8f644e742ed5369d1405e99e63b78727f135e0243f24d9ce354a1562102ee8de4c191508343b86bf7e7519ddd770ce55e17e590561b2f437194c97ad46622a6ae3dd68d9993e6744954f4cd308bd6594fdccedc578e80aed274a65219697229059723ac37d535cca0e9c314e7941b4160bbd2ffba71f26ffe3228431bc81463078ad70583277ef18bce23ca2e5b9a00670956ea8e0e2c739c006106c8c9ee3f92ba728d8490742b74a9a18cbedfc4e69bb87e0da4c7dfb964374c28c837d4641fb99a19b233675f8526af395335e0185cf3934805442ac379980b687a7128e53284ba9e741b5fe9bc969bfbd55cbce76842915e076e2adf844338d16d3802c681bafdcc60465bd34dfc2d1c069ceee40060e0570fc1275ccabfe3f9be3e84ceedf72cd649c082232008e2b0c94594588c00e0fe911bbf1c12eb6c37ce05674a7597feecf27f5e051ffa824d9ff93638dfa9a84c77562aa2cf897f55a97b79c18544ad03480e1011b8f93e0ead9c2c6672448f585c5803ae99be777fbc662ef4450c1e936ed8b3c8047f00e72adc84561f417f8e5e1dde4967005d96a64fc75d9f486b3ebdb5904a0a56ec48542f0efce939f66fd69259e7376ad37e84434ea90f35b2d3bd63b5c36b267d8f2c7dc5a50b46e00ed086dff8b039e07b84c60611269d4f282ad04dc8e0b481eece2f8a614734be73617f0ad5be195446b09dca4cf1f32653dd3e188aece76f3014deb2ba61744835c0f735234b6a4637c948a7b4fd4203b286ca87d669e325d70277075b094f59eb1dff6c9c05c40d5e464c563df79486e1a32e6ed9bcf675aac7968b4e98dc4e210215b0d3b6a2525b2e3df11f3f1490eb39cabffbe32e23659121fde8e4e346e0f595aaf3666a5f6f118c1a1128039502ac04c40b85eb4c54e6c95b8d1c2aac74ae9e1c355ccde9d54d5d833293f5df09224482179e5bcd8e227c99172a6e14c2cd4e6462ceb0a905a1d64804840ce62e350c6efac10a7fcb029f84af64e2256d45afd3b3f59379895740e0cd2fd24c63264f785bb6e3f40ec72ed67d1a7d87dd264743d9c951cb5aa8bc6f1d1bc9b23303d5aa7f8f6f961326757456057000cb2bacf78cc229002777e932c2640b8dfa793846ca49fa93996db95104a8808a1906b19df17e754b90582b6c49efb3ddce067dd9292291cfd2bb0323ce8098f29e4fce0de31cf5c7e2e2da5d0d0996a8be776de8fecfd3ce68e80d21f1701f6b90ac51278abbd727d19415e0ebe001b990b177b8db0c592b18a4b5e4a6221902362e5b20e6e6f2131a5a5e03c1150b179ef40c933c2fef1b79de738652ec4c32565f5cf751a11db177099c4e2e5bd7616cd0dd501d5bfccf5691de3cca590365328648baf8a9487a3c212193c9bb837594460967e823067a9465eba7001eaf609a810488ef5c147aaa5e9e8c75b585ac3582b6915e20b5aa2f79b7a94857122988c56dbce1ea52de1a56652e839bb853be3ee16052b33fb83ca54d8e4e19440a5e81492107043a66286f63ca87a1f7b8a4e9547a7f46005419cfd28cb37e9e374f4d0143973286e87070754025c1a6fccfdc6858eaca8c35ecb19584ce7141cc79a5bc813469161b87a19fc21f3373d1f25b3427916dd1be2a589b70ea3b39fcc7801e13beaf19b76164faf3dc4ab8faa5648d24eddd6caceaa0d5ac9cad633c19a4a4d059ee823a49b7cf82c5777d376c111f58ea8fd473429907852301a2c856f27bd0c687ab5be0e2bbef64ddee1601375a4440e3f59d60f57caebfe457f82432523ec4a61cdbb7f1e91e4b05fda892df131c274b19929d26f7a5a6d3ca487983f729601ed9bb4bf5c1cc3d453d406e9534688dec6a2dd0b9db149365c125a95e129565e62cc91f7d960abe1055b730ae0994e7eb08392d5745d0e4f529c4defc3d3e43d0815b0cc63effa88d20c13b14e780c2f6c89a1ee5e4db45a5c272186cc3e51b13dab3add5f467e8ca0f4c45a1fc76db2f0cbf794102946aafcd8cd8a3e935a606b9721645c4d550ae0907f345593736506efc626498c974753d474a73626041d3a54f8fb50de2a6335611a3779da3a02daceb2256d9b102d4d30dd3cd389a04b1a7a6076879f36534bb3379debb46ed1fa2c40096c752017dd024345c58313b43070ff7bef94dc3cafbe6ec20d59e5ea3c196ba3b783bfa87384407efc664cd350c80ac397516018e35371956e414755cde304d2a228c1540ba6fd6a7402d11c666964f024da4c016eb556ba2c5fab86c60c12efb1496295d80f0383526e8e0fc55a287bbd3cb966a916f57958d8b6ef97aa0c4b47f7746bab6b99698c1c96b25c4e2e084147866fe0970b109dd26984adc0758eb6442712cc46dcd8ed3038b0595252eed1b8a46525862662d1e67eba66ac341f8d27853eed54854f488f079bd48df6ce7a4be8b1b61fd23a2dc4d3ade0992011539cc63f80fcfc75008c20cb639348cb218f8f476a6d56917f4ca07e67fc20ea2e9642eaf2182b397e279f5f6c70438fb8aa39cba788588c181461ea7efe1a0dd5b95eb26f7158b91012f7ce0ee1b4e79ce4da377bea4551738a0f491a84f19b3be9827b4469c299527aa9c20b8bf12f919976a0356bba720fb91010763c79bcbb10d89280f0f97cdd19aa0d54828b308195fac170613cf4b515e340a9ef2c97f618a9f50b30ae34ebeed9a38b4c6969680accc740b154ecb014fb5d543a59ccb98a7de2823a2dec39f331cb503eb74fef61262c6d4050bc723caee834eb28c64ce007f6027375e936b62387cf1778970e88b0574a0106d4c855be7425767c551b2fa644d9d8a59f787e7610581b768057d229673344571c3d6e3f10975b2859f568398b1f38f89524d9ad0c1588617c3883a1227b714c81cdf28da54f33968c1c50f28da01c308eb31d319b3e77f96bec001c9300000000000000009cc0062283ac112868592619db14d629c47bfb793a723dcd2f7b07ae4ec14ca3ef4b955ea5b2b153a279b080f6236d418075b86850974c8850efb306d5c304e726bf2643b4403e6d46b0e0395b02e93308b4b2c3e957308d497dc51c753344a7878f1f0c91295fd76e3d1cc9ef813161c6b92b7ea6068ceb97d8f45a4ce57af7d7632d699951f7fe3c71c3a32b014c74425c67e5030546b10cf7edcec2eca5ba31dc62c08f83f35bc2e36b93f15f071bc2537ebe9ca19f86dce4e84272e10323d0ceaa2cc47fe4f6ad101d454c761f9863e94af91199ce5f12469bca7ba39314b84aa7efa4bdc18f7700c19511d48d6132450111d70401a8ac73565d5386ca12345e884d08b23f9c901000a95eb4167865e58c28b112f47c96beeaa6657c923e25e56529107c5c30e65bb485d5ed21b91332db4e09df7e59dcfa05c994570deb3f9b838e22ae4abbf9a9a8c319cc9112c8dba7c2278f78b9578b0254c46a4c04b8fa4fedad6bd275f70b1618971ef6503379bfb0a508c9944328af2c820091a89e3f75e68e7f980ddc9154d273f7f2ce7a6294aefe93136860786679b80e41f6636ff45efeacfb52e2ba2bd9bd9c9030079a46caca5c4b340c17d01ba8ecbc5c561b2038481a8321c009d12136a3ad5461881d998eeaac5236fdcd8f81fb5e53848bb096d9198fd0d38830d1809f2a632b31e2b67754140c907ed58aead048b2d8af9a1c407e48db815212cfdcca97222dabdfe01f311a73e1e82c3e189ec5add48d3f8190eb9e14b58e540f7f1388a7c687629eadb19fd8a133dc8177629270ecaabff79efb6c1f750d89b9e6c5f34c6238066f8e3e425e46a27b3c0d2e9e2ed3cffe2a6f39b8e0137ea5de689b94107fb4748a5feb3902f0feba64dae4c2e69bc8d86463575c6b0ef4a8a64fef41121e57a8c67eda07e9fc8f98299677de198ea0a649ef3c00591940b2c27ba1414aaa1633deb52e3a44cfa8d7a00d014317c026a7d7f42a34b97128e1bf9cda4d8315819ac73ed5061bf9b5631d07b09b85b78ff1b6eb86e9e8c4faa0f991cd6fa0b0eb71b39c20ca9bc7c156f3bd255a5b408df172396bafd7f0fb11c6eaf1eb0a06576d37bee00424bf699584b1dfed68f0d8d8a35f0427c783fe2d79b4373628971e87501a5e4bb05b5058d0b2132741f26e76065b6f4017d963c8ee5605c4c5b6eebb96fca0a41893cb6add3fb0d728abeb860f22cedbd36e464bdaf124a7041460f7af3d64b54e9ffd240b5afad9baf6e5dd8406bc1b205da5848f51fc9dd5197716e144e1b0386614bd3cfd5ddb80ada1e5ca74c8960093a553b1f6288aa7f53663cdd867f658e51b95772dc7a6fa45fa03e14988a33250e6c16fbf0351769080d64ddfbdbf77e1215563bf2e82ecc38a682846d7e2e2ac4e87d715f97f15e84c3df04affee49612a735907d3c4d310a54a6f609873ad56f29a138f4d"}}, 0xfce) 30.121202ms ago: executing program 8 (id=1717): socket$l2tp(0x2, 0x2, 0x73) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./dev/mapper/control\x00', 0x2, 0x0) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f00000001c0), &(0x7f0000000240)=0x4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x8040}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="2c0000007800010402000000000000000700000064000000140001800800030064000000080002"], 0x2c}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) 0s ago: executing program 8 (id=1718): getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) write$binfmt_aout(0xffffffffffffffff, 0x0, 0xa052) r0 = socket(0x200000000000011, 0x2, 0xd) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000001580)={@loopback, @dev={0xac, 0x14, 0x14, 0x10}, r1}, 0xc) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) close_range(r3, r3, 0x2) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e22, @local}, 0x10) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f00000005c0)='syz_tun\x00', 0x10) sendto$inet(r4, 0x0, 0x0, 0x24000840, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) syz_emit_ethernet(0x36, &(0x7f00000000c0)={@local, @random="3747e76de379", @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2}}}}}}, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1f00000000000000000000000010"], 0x48) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000480), 0x84, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r5}}) bind$packet(r0, &(0x7f0000000080)={0x11, 0x800, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140)={0x201, 0x8000}, 0x4) syz_emit_ethernet(0x86, &(0x7f00000006c0)=ANY=[@ANYBLOB="0180c200000e0180c2000003080045000078000000020011000000000000000000000000fffc00649078020000000200000002000000e5410e86db87a41f716be8e1fa0fe2fb143899778cc5c15c1337404bb397c0fc0c17d7b032591c2a7eb609eb8d2d9d1528cbbe8b3bc8849d1e6124e7e59132830080200000002000d300000000000400"], 0x0) syz_emit_ethernet(0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="e904a20100000103000000000800450000240000e0001011907800000000000000004e210000001090786204000000000000"], 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x18, 0x140b, 0x101, 0x70bd2c, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x4) setns(0xc9, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000180)='./file0\x00', 0x2000000, &(0x7f0000000040)=ANY=[@ANYRES8=0x0], 0x0, 0x309, &(0x7f0000000400)="$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") openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) r6 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r6, &(0x7f0000001040)={0x27, 0x0, 0xfffffffe, 0x4, 0x0, 0x1, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000000200000000001900", 0x1c}, 0x60) sendto(r6, 0x0, 0x0, 0x4000, &(0x7f0000000700)=@ax25={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x5}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}, 0x80) kernel console output (not intermixed with test programs): 2] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 109.426797][ T8616] i2c i2c-0: DVB: adapter 0 frontend 0 frequency 0 out of range (51000..2150000) [ 109.538407][ T8622] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1037'. [ 109.587490][ T2089] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 109.589343][ T2089] hid-generic 0000:0000:0000.0010: hidraw0: HID v0.00 Device [syz1] on syz0 [ 109.612783][ T10] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 109.614614][ T10] hid-generic 0000:0000:0000.0011: hidraw1: HID v0.00 Device [syz1] on syz0 [ 109.615931][ T4723] Bluetooth: hci4: command 0x2016 tx timeout [ 109.640045][ T8629] fido_id[8629]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 109.714676][ T8633] FAULT_INJECTION: forcing a failure. [ 109.714676][ T8633] name failslab, interval 1, probability 0, space 0, times 0 [ 109.714692][ T8633] CPU: 1 UID: 0 PID: 8633 Comm: syz.5.1051 Not tainted syzkaller #0 PREEMPT [ 109.714703][ T8633] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 109.714717][ T8633] Call trace: [ 109.714720][ T8633] show_stack+0x2c/0x3c (C) [ 109.714741][ T8633] __dump_stack+0x30/0x40 [ 109.714755][ T8633] dump_stack_lvl+0xd8/0x12c [ 109.714766][ T8633] dump_stack+0x1c/0x28 [ 109.714777][ T8633] should_fail_ex+0x418/0x58c [ 109.714792][ T8633] should_failslab+0xc4/0x120 [ 109.714810][ T8633] kmem_cache_alloc_noprof+0x94/0x5d4 [ 109.714826][ T8633] do_getname+0x48/0x234 [ 109.714835][ T8633] getname_flags+0x2c/0x3c [ 109.714843][ T8633] do_sys_openat2+0xd0/0x1e8 [ 109.714855][ T8633] do_sys_open+0xb0/0xe0 [ 109.714866][ T8633] __arm64_sys_openat+0xa8/0xc4 [ 109.714877][ T8633] invoke_syscall+0x98/0x244 [ 109.714889][ T8633] el0_svc_common+0xec/0x23c [ 109.714901][ T8633] do_el0_svc+0x4c/0x5c [ 109.714912][ T8633] el0_svc+0x60/0x1d8 [ 109.714924][ T8633] el0t_64_sync_handler+0x44/0x104 [ 109.714934][ T8633] el0t_64_sync+0x198/0x19c [ 109.899140][ T8639] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 109.899238][ T8639] vhci_hcd vhci_hcd.2: invalid port number 96 [ 109.899260][ T8639] vhci_hcd vhci_hcd.2: default hub control req: 0006 v000d i0060 l0 [ 110.228559][ T8652] fuse: Bad value for 'fd' [ 110.576570][ T5800] net_ratelimit: 251 callbacks suppressed [ 110.763456][ T8664] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 110.763554][ T8664] vhci_hcd vhci_hcd.2: invalid port number 96 [ 110.763575][ T8664] vhci_hcd vhci_hcd.2: default hub control req: 0006 v000d i0060 l0 [ 110.946188][ T2089] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 110.948243][ T2089] hid-generic 0000:0000:0000.0012: hidraw0: HID v0.00 Device [syz1] on syz0 [ 111.100126][ T10] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 111.101233][ T10] hid-generic 0000:0000:0000.0013: hidraw0: HID v0.00 Device [syz1] on syz0 [ 111.124635][ T8686] fido_id[8686]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 112.030646][ T8700] block2mtd: error: cannot open device /dev/zram0 [ 112.031631][ T8700] netlink: 'syz.3.1063': attribute type 1 has an invalid length. [ 112.031641][ T8700] netlink: 'syz.3.1063': attribute type 2 has an invalid length. [ 112.397819][ T8709] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 112.397924][ T8709] vhci_hcd vhci_hcd.2: invalid port number 96 [ 112.397945][ T8709] vhci_hcd vhci_hcd.2: default hub control req: 0006 v000d i0060 l0 [ 112.412853][ T8606] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 112.428886][ T4707] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.714805][ T24] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 112.722179][ T24] hid-generic 0000:0000:0000.0014: hidraw0: HID v0.00 Device [syz1] on syz0 [ 112.733486][ T8717] syzkaller0: entered promiscuous mode [ 112.733499][ T8717] syzkaller0: entered allmulticast mode [ 112.838036][ T8728] Injecting memory failure for pfn 0x2193cf at process virtual address 0x20ffd000 [ 112.838074][ T8728] Memory failure: 0x2193cf: Sending SIGBUS to syz.8.1072:8728 due to hardware memory corruption [ 112.838095][ T8728] Memory failure: 0x2193cf: recovery action for already poisoned page: Failed [ 112.841285][ T30] kauditd_printk_skb: 91 callbacks suppressed [ 112.841294][ T30] audit: type=1326 audit(112.810:1697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8727 comm="syz.8.1072" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9a979368 code=0x7ffc0000 [ 112.841378][ T30] audit: type=1326 audit(112.810:1698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8727 comm="syz.8.1072" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9a979368 code=0x7ffc0000 [ 112.841560][ T30] audit: type=1326 audit(112.810:1699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8727 comm="syz.8.1072" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9a979368 code=0x7ffc0000 [ 112.841631][ T30] audit: type=1326 audit(112.810:1700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8727 comm="syz.8.1072" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=56 compat=0 ip=0xffff9a979368 code=0x7ffc0000 [ 112.841794][ T30] audit: type=1326 audit(112.810:1701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8727 comm="syz.8.1072" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9a979368 code=0x7ffc0000 [ 112.841861][ T30] audit: type=1326 audit(112.810:1702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8727 comm="syz.8.1072" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9a979368 code=0x7ffc0000 [ 112.841926][ T30] audit: type=1326 audit(112.810:1703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8727 comm="syz.8.1072" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9a979368 code=0x7ffc0000 [ 112.842141][ T30] audit: type=1326 audit(112.810:1704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8727 comm="syz.8.1072" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=29 compat=0 ip=0xffff9a979368 code=0x7ffc0000 [ 112.842277][ T30] audit: type=1326 audit(112.810:1705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8727 comm="syz.8.1072" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9a979368 code=0x7ffc0000 [ 112.842409][ T30] audit: type=1326 audit(112.810:1706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8727 comm="syz.8.1072" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9a979368 code=0x7ffc0000 [ 113.041420][ T8733] xt_limit: Overflow, try lower: 4294967290/0 [ 113.044482][ T8733] loop8: detected capacity change from 0 to 512 [ 113.083830][ T8733] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 113.105336][ T8738] block2mtd: error: cannot open device /dev/zram0 [ 113.106990][ T8738] netlink: 'syz.3.1075': attribute type 1 has an invalid length. [ 113.107006][ T8738] netlink: 'syz.3.1075': attribute type 2 has an invalid length. [ 113.134512][ T8733] device-mapper: ioctl: Unable to change name on mapped device m to one that already exists: ÿÿ [ 113.270909][ T7630] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.402826][ T869] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 113.403897][ T869] hid-generic 0000:0000:0000.0015: hidraw0: HID v0.00 Device [syz1] on syz0 [ 113.488701][ T8767] syzkaller0: entered promiscuous mode [ 113.488714][ T8767] syzkaller0: entered allmulticast mode [ 113.673681][ T8773] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 113.673778][ T8773] vhci_hcd vhci_hcd.2: invalid port number 96 [ 113.673799][ T8773] vhci_hcd vhci_hcd.2: default hub control req: 0006 v000d i0060 l0 [ 114.363922][ T4716] Bluetooth: hci4: unexpected event for opcode 0x0c7a [ 114.594813][ T8790] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 114.594923][ T8790] vhci_hcd vhci_hcd.2: invalid port number 96 [ 114.594945][ T8790] vhci_hcd vhci_hcd.2: default hub control req: 0006 v000d i0060 l0 [ 114.942462][ T8803] FAULT_INJECTION: forcing a failure. [ 114.942462][ T8803] name failslab, interval 1, probability 0, space 0, times 0 [ 114.942478][ T8803] CPU: 0 UID: 0 PID: 8803 Comm: syz.2.1091 Not tainted syzkaller #0 PREEMPT [ 114.942490][ T8803] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 114.942504][ T8803] Call trace: [ 114.942507][ T8803] show_stack+0x2c/0x3c (C) [ 114.942528][ T8803] __dump_stack+0x30/0x40 [ 114.942541][ T8803] dump_stack_lvl+0xd8/0x12c [ 114.942552][ T8803] dump_stack+0x1c/0x28 [ 114.942563][ T8803] should_fail_ex+0x418/0x58c [ 114.942576][ T8803] should_failslab+0xc4/0x120 [ 114.942590][ T8803] kmem_cache_alloc_lru_noprof+0x98/0x5d8 [ 114.942607][ T8803] sock_alloc_inode+0x30/0x180 [ 114.942620][ T8803] alloc_inode+0x68/0x198 [ 114.942631][ T8803] sock_alloc+0x4c/0x204 [ 114.942640][ T8803] __sock_create+0x108/0x670 [ 114.942649][ T8803] __sys_socket_create+0xc0/0x11c [ 114.942658][ T8803] __sys_socket+0x44/0xec [ 114.942667][ T8803] __arm64_sys_socket+0x84/0x9c [ 114.942677][ T8803] invoke_syscall+0x98/0x244 [ 114.942689][ T8803] el0_svc_common+0xec/0x23c [ 114.942701][ T8803] do_el0_svc+0x4c/0x5c [ 114.942712][ T8803] el0_svc+0x60/0x1d8 [ 114.942723][ T8803] el0t_64_sync_handler+0x44/0x104 [ 114.942734][ T8803] el0t_64_sync+0x198/0x19c [ 115.056004][ T4723] Bluetooth: hci1: command 0x2016 tx timeout [ 115.282712][ T8810] syzkaller0: entered promiscuous mode [ 115.282723][ T8810] syzkaller0: entered allmulticast mode [ 115.369070][ T24] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 115.370213][ T24] hid-generic 0000:0000:0000.0016: hidraw0: HID v0.00 Device [syz1] on syz0 [ 115.695866][ T54] net_ratelimit: 167 callbacks suppressed [ 115.896559][ T4716] Bluetooth: hci4: unexpected event for opcode 0x0c7a [ 116.331050][ T8829] syzkaller0: entered promiscuous mode [ 116.331060][ T8829] syzkaller0: entered allmulticast mode [ 116.396695][ T8760] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 116.459561][ T24] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 116.460199][ T24] hid-generic 0000:0000:0000.0017: hidraw0: HID v0.00 Device [syz1] on syz0 [ 116.538656][ T8841] Injecting memory failure for pfn 0x2193cf at process virtual address 0x20ffd000 [ 116.538693][ T8841] Memory failure: 0x2193cf: Sending SIGBUS to syz.3.1109:8841 due to hardware memory corruption [ 116.538716][ T8841] Memory failure: 0x2193cf: recovery action for already poisoned page: Failed [ 116.747370][ T8847] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 116.747399][ T8847] vhci_hcd vhci_hcd.2: invalid port number 96 [ 116.747412][ T8847] vhci_hcd vhci_hcd.2: default hub control req: 0006 v000d i0060 l0 [ 116.774965][ T8846] fido_id[8846]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 116.844937][ T8857] loop3: detected capacity change from 0 to 4096 [ 116.849349][ T8857] EXT4-fs (loop3): Test dummy encryption mode enabled [ 116.854385][ T8857] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 116.889453][ T8861] syzkaller0: entered promiscuous mode [ 116.889463][ T8861] syzkaller0: entered allmulticast mode [ 116.961787][ T4706] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.993836][ T8865] loop5: detected capacity change from 0 to 4096 [ 116.999377][ T8865] EXT4-fs (loop5): Test dummy encryption mode enabled [ 117.009076][ T8865] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 117.038124][ T8868] block2mtd: error: cannot open device /dev/zram0 [ 117.043460][ T8868] netlink: 'syz.3.1116': attribute type 1 has an invalid length. [ 117.043472][ T8868] netlink: 'syz.3.1116': attribute type 2 has an invalid length. [ 117.077577][ T5079] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.229887][ T8871] loop5: detected capacity change from 0 to 4096 [ 117.237723][ T8871] EXT4-fs (loop5): Test dummy encryption mode enabled [ 117.241731][ T8871] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 117.415530][ T8887] i2c i2c-0: DVB: adapter 0 frontend 0 frequency 0 out of range (51000..2150000) [ 117.858091][ T8894] xt_limit: Overflow, try lower: 4294967290/0 [ 117.860686][ T8894] loop2: detected capacity change from 0 to 512 [ 117.883356][ T8894] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 117.899327][ T8894] device-mapper: ioctl: Unable to change name on mapped device m to one that already exists: ÿÿ [ 117.940687][ T4710] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.973270][ T8900] Injecting memory failure for pfn 0x2193cf at process virtual address 0x20ffd000 [ 117.973306][ T8900] Memory failure: 0x2193cf: Sending SIGBUS to syz.1.1124:8900 due to hardware memory corruption [ 117.973326][ T8900] Memory failure: 0x2193cf: recovery action for already poisoned page: Failed [ 117.977094][ T4817] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 117.979436][ T4817] hid-generic 0000:0000:0000.0018: hidraw0: HID v0.00 Device [syz1] on syz0 [ 117.987669][ T30] kauditd_printk_skb: 59 callbacks suppressed [ 117.987681][ T30] audit: type=1326 audit(117.960:1766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8898 comm="syz.1.1124" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbb779368 code=0x7ffc0000 [ 117.987731][ T30] audit: type=1326 audit(117.960:1767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8898 comm="syz.1.1124" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbb779368 code=0x7ffc0000 [ 117.988714][ T30] audit: type=1326 audit(117.960:1768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8898 comm="syz.1.1124" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbb779368 code=0x7ffc0000 [ 117.988763][ T30] audit: type=1326 audit(117.960:1769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8898 comm="syz.1.1124" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbb779368 code=0x7ffc0000 [ 117.989428][ T30] audit: type=1326 audit(117.960:1770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8898 comm="syz.1.1124" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=56 compat=0 ip=0xffffbb779368 code=0x7ffc0000 [ 117.991275][ T30] audit: type=1326 audit(117.960:1771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8898 comm="syz.1.1124" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbb779368 code=0x7ffc0000 [ 117.991304][ T30] audit: type=1326 audit(117.960:1772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8898 comm="syz.1.1124" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbb779368 code=0x7ffc0000 [ 117.991324][ T30] audit: type=1326 audit(117.960:1773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8898 comm="syz.1.1124" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbb779368 code=0x7ffc0000 [ 117.991341][ T30] audit: type=1326 audit(117.960:1774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8898 comm="syz.1.1124" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=29 compat=0 ip=0xffffbb779368 code=0x7ffc0000 [ 117.991360][ T30] audit: type=1326 audit(117.960:1775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8898 comm="syz.1.1124" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbb779368 code=0x7ffc0000 [ 118.065005][ T8906] syzkaller0: entered promiscuous mode [ 118.065018][ T8906] syzkaller0: entered allmulticast mode [ 118.102163][ T8908] block2mtd: error: cannot open device /dev/zram0 [ 118.103239][ T8908] netlink: 'syz.2.1129': attribute type 1 has an invalid length. [ 118.103249][ T8908] netlink: 'syz.2.1129': attribute type 2 has an invalid length. [ 118.391466][ T8919] fuse: Bad value for 'fd' [ 118.609101][ T8918] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1133'. [ 118.688480][ T8924] xt_limit: Overflow, try lower: 4294967290/0 [ 118.690825][ T8924] loop1: detected capacity change from 0 to 512 [ 118.709894][ T8924] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 118.714668][ T8924] device-mapper: ioctl: Unable to change name on mapped device m to one that already exists: ÿÿ [ 118.760737][ T4707] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.098693][ T8931] loop2: detected capacity change from 0 to 128 [ 119.104946][ T8931] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 119.106791][ T8931] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 119.152473][ T4384] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 119.153052][ T4384] hid-generic 0000:0000:0000.0019: hidraw0: HID v0.00 Device [syz1] on syz0 [ 119.240853][ T8936] Injecting memory failure for pfn 0x2193cf at process virtual address 0x20ffd000 [ 119.240891][ T8936] Memory failure: 0x2193cf: Sending SIGBUS to syz.2.1139:8936 due to hardware memory corruption [ 119.240913][ T8936] Memory failure: 0x2193cf: recovery action for already poisoned page: Failed [ 119.322569][ T8940] syzkaller0: entered promiscuous mode [ 119.322582][ T8940] syzkaller0: entered allmulticast mode [ 119.572693][ T8948] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 119.572790][ T8948] vhci_hcd vhci_hcd.2: invalid port number 96 [ 119.572811][ T8948] vhci_hcd vhci_hcd.2: default hub control req: 0006 v000d i0060 l0 [ 120.018141][ T8954] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 120.018239][ T8954] vhci_hcd vhci_hcd.2: invalid port number 96 [ 120.018259][ T8954] vhci_hcd vhci_hcd.2: default hub control req: 0006 v000d i0060 l0 [ 120.182369][ T8873] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 120.202595][ T5079] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.282067][ T8962] xt_limit: Overflow, try lower: 4294967290/0 [ 120.285666][ T8962] loop1: detected capacity change from 0 to 512 [ 120.321074][ T8967] Injecting memory failure for pfn 0x2193cf at process virtual address 0x20ffd000 [ 120.321115][ T8967] Memory failure: 0x2193cf: Sending SIGBUS to syz.5.1151:8967 due to hardware memory corruption [ 120.321136][ T8967] Memory failure: 0x2193cf: recovery action for already poisoned page: Failed [ 120.326146][ T8962] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 120.349377][ T8962] device-mapper: ioctl: Unable to change name on mapped device m to one that already exists: ÿÿ [ 120.424771][ T8972] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 120.424870][ T8972] vhci_hcd vhci_hcd.2: invalid port number 96 [ 120.424891][ T8972] vhci_hcd vhci_hcd.2: default hub control req: 0006 v000d i0060 l0 [ 120.568901][ T4707] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.618849][ T8978] syzkaller0: entered promiscuous mode [ 120.618859][ T8978] syzkaller0: entered allmulticast mode [ 120.716768][ T8989] net_ratelimit: 171 callbacks suppressed [ 120.716781][ T8989] ip_tables: iptables: counters copy to user failed while replacing table [ 120.738601][ T8989] loop1: detected capacity change from 0 to 4096 [ 120.740853][ T8989] EXT4-fs (loop1): Test dummy encryption mode enabled [ 120.787998][ T8989] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 120.790429][ T8996] i2c i2c-0: DVB: adapter 0 frontend 0 frequency 0 out of range (51000..2150000) [ 120.889505][ T8998] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 120.889603][ T8998] vhci_hcd vhci_hcd.2: invalid port number 96 [ 120.889625][ T8998] vhci_hcd vhci_hcd.2: default hub control req: 0006 v000d i0060 l0 [ 121.111270][ T9004] Injecting memory failure for pfn 0x2193cf at process virtual address 0x20ffd000 [ 121.111306][ T9004] Memory failure: 0x2193cf: Sending SIGBUS to syz.8.1162:9004 due to hardware memory corruption [ 121.111325][ T9004] Memory failure: 0x2193cf: recovery action for already poisoned page: Failed [ 121.624435][ T9023] xt_limit: Overflow, try lower: 4294967290/0 [ 121.626672][ T9023] loop5: detected capacity change from 0 to 512 [ 121.695600][ T9024] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 121.695697][ T9024] vhci_hcd vhci_hcd.2: invalid port number 96 [ 121.695719][ T9024] vhci_hcd vhci_hcd.2: default hub control req: 0006 v000d i0060 l0 [ 121.814300][ T9023] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 121.828948][ T9023] device-mapper: ioctl: Unable to change name on mapped device m to one that already exists: ÿÿ [ 121.872266][ T5079] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 122.066577][ T9033] fuse: Bad value for 'fd' [ 122.638912][ T9035] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 122.639712][ T9035] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 122.679594][ T9035] loop8: detected capacity change from 0 to 1024 [ 122.698154][ T9035] EXT4-fs (loop8): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 122.712353][ T9035] EXT4-fs error (device loop8): ext4_map_blocks:832: inode #15: comm syz.8.1172: lblock 0 mapped to illegal pblock 0 (length 6) [ 122.712725][ T9035] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 6 with error 117 [ 122.712739][ T9035] EXT4-fs (loop8): This should not happen!! Data will be lost [ 122.712739][ T9035] [ 122.777604][ T9039] xt_limit: Overflow, try lower: 4294967290/0 [ 122.779883][ T9039] loop3: detected capacity change from 0 to 512 [ 122.838826][ T9039] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 122.861122][ T9039] device-mapper: ioctl: Unable to change name on mapped device m to one that already exists: ÿÿ [ 122.963057][ T9046] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 122.963153][ T9046] vhci_hcd vhci_hcd.2: invalid port number 96 [ 122.963175][ T9046] vhci_hcd vhci_hcd.2: default hub control req: 0006 v000d i0060 l0 [ 123.062997][ T4706] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 123.154761][ T9048] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1175'. [ 123.241070][ T5796] EXT4-fs error (device loop8): ext4_validate_block_bitmap:445: comm kworker/u8:11: bg 0: block 112: padding at end of block bitmap is not set [ 123.241837][ T5796] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 32 with max blocks 32 with error 28 [ 123.241854][ T5796] EXT4-fs (loop8): This should not happen!! Data will be lost [ 123.241854][ T5796] [ 123.241862][ T5796] EXT4-fs (loop8): Total free blocks count 0 [ 123.241869][ T5796] EXT4-fs (loop8): Free/Dirty block details [ 123.241876][ T5796] EXT4-fs (loop8): free_blocks=0 [ 123.241885][ T5796] EXT4-fs (loop8): dirty_blocks=32 [ 123.241891][ T5796] EXT4-fs (loop8): Block reservation details [ 123.374728][ T9064] block2mtd: error: cannot open device /dev/zram0 [ 123.379161][ T9064] netlink: 'syz.8.1182': attribute type 1 has an invalid length. [ 123.379173][ T9064] netlink: 'syz.8.1182': attribute type 2 has an invalid length. [ 123.680549][ T9071] fuse: Bad value for 'fd' [ 123.856122][ T8986] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 123.878742][ T4707] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 123.929615][ T9077] Injecting memory failure for pfn 0x2193cf at process virtual address 0x20ffd000 [ 123.929664][ T9077] Memory failure: 0x2193cf: Sending SIGBUS to syz.1.1186:9077 due to hardware memory corruption [ 123.929689][ T9077] Memory failure: 0x2193cf: recovery action for already poisoned page: Failed [ 123.940311][ T30] kauditd_printk_skb: 125 callbacks suppressed [ 123.940319][ T30] audit: type=1326 audit(123.910:1901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9076 comm="syz.1.1186" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbb779368 code=0x7ffc0000 [ 123.940696][ T30] audit: type=1326 audit(123.910:1902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9076 comm="syz.1.1186" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbb779368 code=0x7ffc0000 [ 123.940923][ T30] audit: type=1326 audit(123.910:1903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9076 comm="syz.1.1186" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbb779368 code=0x7ffc0000 [ 123.941004][ T30] audit: type=1326 audit(123.910:1904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9076 comm="syz.1.1186" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=56 compat=0 ip=0xffffbb779368 code=0x7ffc0000 [ 123.941228][ T30] audit: type=1326 audit(123.910:1905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9076 comm="syz.1.1186" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbb779368 code=0x7ffc0000 [ 123.941737][ T30] audit: type=1326 audit(123.910:1906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9076 comm="syz.1.1186" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbb779368 code=0x7ffc0000 [ 123.941843][ T30] audit: type=1326 audit(123.910:1907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9076 comm="syz.1.1186" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbb779368 code=0x7ffc0000 [ 123.941952][ T30] audit: type=1326 audit(123.910:1908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9076 comm="syz.1.1186" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbb779368 code=0x7ffc0000 [ 123.942027][ T30] audit: type=1326 audit(123.910:1909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9076 comm="syz.1.1186" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=29 compat=0 ip=0xffffbb779368 code=0x7ffc0000 [ 123.942096][ T30] audit: type=1326 audit(123.910:1910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9076 comm="syz.1.1186" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbb779368 code=0x7ffc0000 [ 124.047811][ T9075] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1187'. [ 124.049881][ T9086] netlink: 'syz.1.1191': attribute type 1 has an invalid length. [ 124.068553][ T9086] 8021q: adding VLAN 0 to HW filter on device bond1 [ 124.102451][ T9086] bond1: (slave syz_tun): Enslaving as a backup interface with an up link [ 124.240320][ T9081] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 124.240982][ T9081] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 124.253880][ T9101] loop1: detected capacity change from 0 to 4096 [ 124.259552][ T9101] EXT4-fs (loop1): Test dummy encryption mode enabled [ 124.289303][ T9101] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 124.309436][ T9105] loop5: detected capacity change from 0 to 1024 [ 124.328756][ T9105] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 124.389494][ T9108] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 124.389592][ T9108] vhci_hcd vhci_hcd.2: invalid port number 96 [ 124.389613][ T9108] vhci_hcd vhci_hcd.2: default hub control req: 0006 v000d i0060 l0 [ 124.572399][ T4707] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 124.581811][ T9081] EXT4-fs error (device loop5): ext4_map_blocks:832: inode #15: comm syz.5.1189: lblock 0 mapped to illegal pblock 0 (length 6) [ 124.582161][ T9081] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 6 with error 117 [ 124.582175][ T9081] EXT4-fs (loop5): This should not happen!! Data will be lost [ 124.582175][ T9081] [ 124.630236][ T9116] Injecting memory failure for pfn 0x2193cf at process virtual address 0x20ffd000 [ 124.630278][ T9116] Memory failure: 0x2193cf: Sending SIGBUS to syz.8.1201:9116 due to hardware memory corruption [ 124.630301][ T9116] Memory failure: 0x2193cf: recovery action for already poisoned page: Failed [ 124.957420][ T9126] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1205'. [ 124.992966][ T9123] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1204'. [ 125.150956][ T9139] loop1: detected capacity change from 0 to 4096 [ 125.153530][ T9139] EXT4-fs (loop1): Test dummy encryption mode enabled [ 125.160462][ T9139] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 125.192265][ T5807] EXT4-fs error (device loop5): ext4_validate_block_bitmap:445: comm kworker/u8:20: bg 0: block 112: padding at end of block bitmap is not set [ 125.192692][ T5807] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 32 with max blocks 32 with error 28 [ 125.192706][ T5807] EXT4-fs (loop5): This should not happen!! Data will be lost [ 125.192706][ T5807] [ 125.192714][ T5807] EXT4-fs (loop5): Total free blocks count 0 [ 125.192721][ T5807] EXT4-fs (loop5): Free/Dirty block details [ 125.192728][ T5807] EXT4-fs (loop5): free_blocks=0 [ 125.192736][ T5807] EXT4-fs (loop5): dirty_blocks=32 [ 125.192741][ T5807] EXT4-fs (loop5): Block reservation details [ 125.269162][ T9144] fuse: Bad value for 'fd' [ 125.509462][ T4707] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 125.626951][ T9162] loop8: detected capacity change from 0 to 128 [ 125.779509][ T9164] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1220'. [ 125.935795][ C1] net_ratelimit: 178 callbacks suppressed [ 126.091856][ T1594] ieee802154 phy0 wpan0: encryption failed: -22 [ 126.091901][ T1594] ieee802154 phy1 wpan1: encryption failed: -22 [ 126.229730][ T9187] loop2: detected capacity change from 0 to 4096 [ 126.233812][ T9187] EXT4-fs (loop2): Test dummy encryption mode enabled [ 126.237451][ T9187] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 126.258468][ T4723] Bluetooth: hci2: command 0x2016 tx timeout [ 126.351111][ T4710] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 126.428192][ T9197] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 126.428213][ T9197] vhci_hcd vhci_hcd.2: invalid port number 96 [ 126.428222][ T9197] vhci_hcd vhci_hcd.2: default hub control req: 0006 v000d i0060 l0 [ 126.751594][ T9215] FAULT_INJECTION: forcing a failure. [ 126.751594][ T9215] name failslab, interval 1, probability 0, space 0, times 0 [ 126.751610][ T9215] CPU: 1 UID: 0 PID: 9215 Comm: syz.8.1238 Not tainted syzkaller #0 PREEMPT [ 126.751621][ T9215] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 126.751636][ T9215] Call trace: [ 126.751639][ T9215] show_stack+0x2c/0x3c (C) [ 126.751660][ T9215] __dump_stack+0x30/0x40 [ 126.751675][ T9215] dump_stack_lvl+0xd8/0x12c [ 126.751686][ T9215] dump_stack+0x1c/0x28 [ 126.751698][ T9215] should_fail_ex+0x418/0x58c [ 126.751713][ T9215] should_failslab+0xc4/0x120 [ 126.751727][ T9215] kmem_cache_alloc_node_noprof+0x98/0x604 [ 126.751742][ T9215] __alloc_skb+0x1f0/0x610 [ 126.751753][ T9215] rtmsg_ifinfo_build_skb+0x94/0x25c [ 126.751767][ T9215] rtmsg_ifinfo_event+0xb0/0x114 [ 126.751780][ T9215] rtmsg_ifinfo+0x60/0x7c [ 126.751792][ T9215] netif_state_change+0x244/0x360 [ 126.751805][ T9215] do_setlink+0x928/0x31e8 [ 126.751814][ T9215] rtnl_newlink+0xe90/0x138c [ 126.751823][ T9215] rtnetlink_rcv_msg+0x66c/0x9bc [ 126.751831][ T9215] netlink_rcv_skb+0x238/0x414 [ 126.751842][ T9215] rtnetlink_rcv+0x28/0x38 [ 126.751850][ T9215] netlink_unicast+0x600/0x7f8 [ 126.751860][ T9215] netlink_sendmsg+0x648/0x948 [ 126.751870][ T9215] __sock_sendmsg+0xc8/0x17c [ 126.751880][ T9215] ____sys_sendmsg+0x3d0/0x6c8 [ 126.751890][ T9215] ___sys_sendmsg+0x198/0x224 [ 126.751901][ T9215] __sys_sendmsg+0x158/0x204 [ 126.751911][ T9215] __arm64_sys_sendmsg+0x88/0x9c [ 126.751921][ T9215] invoke_syscall+0x98/0x244 [ 126.751934][ T9215] el0_svc_common+0xec/0x23c [ 126.751946][ T9215] do_el0_svc+0x4c/0x5c [ 126.751958][ T9215] el0_svc+0x60/0x1d8 [ 126.751970][ T9215] el0t_64_sync_handler+0x44/0x104 [ 126.751980][ T9215] el0t_64_sync+0x198/0x19c [ 126.885598][ T9223] loop2: detected capacity change from 0 to 4096 [ 126.892946][ T9223] EXT4-fs (loop2): Test dummy encryption mode enabled [ 126.953546][ T9212] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1236'. [ 126.960973][ T9223] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 127.083709][ T9239] Injecting memory failure for pfn 0x2193cf at process virtual address 0x20ffd000 [ 127.083750][ T9239] Memory failure: 0x2193cf: Sending SIGBUS to syz.1.1246:9239 due to hardware memory corruption [ 127.083769][ T9239] Memory failure: 0x2193cf: recovery action for already poisoned page: Failed [ 127.104717][ T4710] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.112783][ T9237] syzkaller0: entered promiscuous mode [ 127.112830][ T9237] syzkaller0: entered allmulticast mode [ 127.696102][ T4722] Bluetooth: hci1: command 0x2016 tx timeout [ 127.992132][ T2089] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 127.993737][ T2089] hid-generic 0000:0000:0000.001A: hidraw0: HID v0.00 Device [syz1] on syz0 [ 128.290011][ T9270] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1256'. [ 128.400949][ T9285] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 128.401031][ T9285] vhci_hcd vhci_hcd.2: invalid port number 96 [ 128.401053][ T9285] vhci_hcd vhci_hcd.2: default hub control req: 0006 v000d i0060 l0 [ 128.751262][ T9300] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 128.751563][ T9300] vhci_hcd vhci_hcd.2: invalid port number 96 [ 128.751587][ T9300] vhci_hcd vhci_hcd.2: default hub control req: 0006 v000d i0060 l0 [ 129.438081][ T9318] xt_limit: Overflow, try lower: 4294967290/0 [ 129.440733][ T9318] loop3: detected capacity change from 0 to 512 [ 129.469701][ T9318] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 129.496810][ T9318] device-mapper: ioctl: Unable to change name on mapped device m to one that already exists: ÿÿ [ 129.764421][ T4706] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.811223][ T9331] syzkaller0: entered promiscuous mode [ 129.811416][ T9331] syzkaller0: entered allmulticast mode [ 129.813207][ T9331] loop3: detected capacity change from 0 to 128 [ 129.821390][ T9331] EXT4-fs (loop3): Test dummy encryption mode enabled [ 129.853563][ T9331] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 129.959142][ T9334] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 129.959244][ T9334] vhci_hcd vhci_hcd.2: invalid port number 96 [ 129.959265][ T9334] vhci_hcd vhci_hcd.2: default hub control req: 0006 v000d i0060 l0 [ 130.059151][ T4706] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 130.169495][ T9336] netlink: 40 bytes leftover after parsing attributes in process `syz.8.1276'. [ 130.271655][ T9346] fuse: Bad value for 'fd' [ 130.326834][ T9347] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 130.326957][ T9347] vhci_hcd vhci_hcd.2: invalid port number 96 [ 130.326985][ T9347] vhci_hcd vhci_hcd.2: default hub control req: 0006 v000d i0060 l0 [ 130.459907][ T9349] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1281'. [ 130.482040][ T9352] Injecting memory failure for pfn 0x2193cf at process virtual address 0x20ffd000 [ 130.482083][ T9352] Memory failure: 0x2193cf: Sending SIGBUS to syz.8.1282:9352 due to hardware memory corruption [ 130.482106][ T9352] Memory failure: 0x2193cf: recovery action for already poisoned page: Failed [ 130.491488][ T30] kauditd_printk_skb: 88 callbacks suppressed [ 130.491500][ T30] audit: type=1326 audit(130.460:1999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9350 comm="syz.8.1282" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9a979368 code=0x7ffc0000 [ 130.492042][ T30] audit: type=1326 audit(130.460:2000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9350 comm="syz.8.1282" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9a979368 code=0x7ffc0000 [ 130.492917][ T30] audit: type=1326 audit(130.460:2001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9350 comm="syz.8.1282" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9a979368 code=0x7ffc0000 [ 130.493041][ T30] audit: type=1326 audit(130.460:2002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9350 comm="syz.8.1282" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9a979368 code=0x7ffc0000 [ 130.493734][ T30] audit: type=1326 audit(130.460:2003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9350 comm="syz.8.1282" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=56 compat=0 ip=0xffff9a979368 code=0x7ffc0000 [ 130.493882][ T30] audit: type=1326 audit(130.460:2004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9350 comm="syz.8.1282" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9a979368 code=0x7ffc0000 [ 130.494208][ T30] audit: type=1326 audit(130.460:2005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9350 comm="syz.8.1282" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9a979368 code=0x7ffc0000 [ 130.494774][ T30] audit: type=1326 audit(130.460:2006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9350 comm="syz.8.1282" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=29 compat=0 ip=0xffff9a979368 code=0x7ffc0000 [ 130.494872][ T30] audit: type=1326 audit(130.460:2007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9350 comm="syz.8.1282" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9a979368 code=0x7ffc0000 [ 130.494945][ T30] audit: type=1326 audit(130.460:2008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9350 comm="syz.8.1282" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9a979368 code=0x7ffc0000 [ 130.564746][ T9359] xt_limit: Overflow, try lower: 4294967290/0 [ 130.569678][ T9359] loop8: detected capacity change from 0 to 512 [ 130.590559][ T9359] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 130.605595][ T9359] device-mapper: ioctl: Unable to change name on mapped device m to one that already exists: ÿÿ [ 130.668696][ T7630] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.724020][ T9372] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 130.724310][ T9372] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 130.760678][ T9372] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 130.762048][ T9372] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 130.762779][ T9372] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 130.763859][ T9372] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 130.765219][ T9372] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 130.765568][ T9372] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 130.906117][ T4716] Bluetooth: hci1: command 0x2016 tx timeout [ 131.054132][ T9378] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1292'. [ 131.239940][ T9388] loop2: detected capacity change from 0 to 512 [ 131.243669][ T9388] EXT4-fs (loop2): couldn't mount as ext3 due to feature incompatibilities [ 131.247545][ T9388] netlink: 'syz.2.1295': attribute type 1 has an invalid length. [ 131.311938][ T9391] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 131.312045][ T9391] vhci_hcd vhci_hcd.2: invalid port number 96 [ 131.312066][ T9391] vhci_hcd vhci_hcd.2: default hub control req: 0006 v000d i0060 l0 [ 131.443931][ T9393] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 131.444038][ T9393] vhci_hcd vhci_hcd.2: invalid port number 96 [ 131.444060][ T9393] vhci_hcd vhci_hcd.2: default hub control req: 0006 v000d i0060 l0 [ 131.455761][ C1] net_ratelimit: 288 callbacks suppressed [ 131.584042][ T9395] Injecting memory failure for pfn 0x2193cf at process virtual address 0x20ffd000 [ 131.584080][ T9395] Memory failure: 0x2193cf: Sending SIGBUS to syz.2.1297:9395 due to hardware memory corruption [ 131.584098][ T9395] Memory failure: 0x2193cf: recovery action for already poisoned page: Failed [ 131.807895][ T9409] fuse: Bad value for 'fd' [ 132.068245][ T9417] Injecting memory failure for pfn 0x2193cf at process virtual address 0x20ffd000 [ 132.068282][ T9417] Memory failure: 0x2193cf: Sending SIGBUS to syz.3.1305:9417 due to hardware memory corruption [ 132.068302][ T9417] Memory failure: 0x2193cf: recovery action for already poisoned page: Failed [ 132.180814][ T9413] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1303'. [ 132.535614][ T9440] Injecting memory failure for pfn 0x2193cf at process virtual address 0x20ffd000 [ 132.535651][ T9440] Memory failure: 0x2193cf: Sending SIGBUS to syz.3.1312:9440 due to hardware memory corruption [ 132.535669][ T9440] Memory failure: 0x2193cf: recovery action for already poisoned page: Failed [ 132.543797][ T9442] xt_limit: Overflow, try lower: 4294967290/0 [ 132.548531][ T9442] loop2: detected capacity change from 0 to 512 [ 132.569213][ T9442] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 132.576142][ T4716] Bluetooth: hci2: command 0x2016 tx timeout [ 132.640795][ T9450] device-mapper: ioctl: Unable to change name on mapped device m to one that already exists: ÿÿ [ 132.718526][ T4710] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.850272][ T9458] loop8: detected capacity change from 0 to 4096 [ 132.860820][ T9458] EXT4-fs (loop8): warning: maximal mount count reached, running e2fsck is recommended [ 132.871897][ T9458] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 132.920649][ T7630] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.062282][ T9467] netlink: 40 bytes leftover after parsing attributes in process `syz.8.1320'. [ 133.297169][ T9472] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 133.297446][ T9472] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 133.327404][ T9472] loop1: detected capacity change from 0 to 1024 [ 133.347857][ T9472] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 133.472721][ T9485] ip6gretap1: entered allmulticast mode [ 133.577705][ T9493] loop3: detected capacity change from 0 to 256 [ 133.578272][ T9493] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 133.578826][ T9493] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 133.648047][ T4706] FAT-fs (loop3): error, corrupted directory (invalid entries) [ 133.648060][ T4706] FAT-fs (loop3): Filesystem has been set read-only [ 133.649546][ T4706] FAT-fs (loop3): error, corrupted directory (invalid entries) [ 134.041069][ T4707] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 134.072867][ T2089] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 134.073388][ T2089] hid-generic 0000:0000:0000.001B: hidraw0: HID v0.00 Device [syz1] on syz0 [ 134.125435][ T9503] 9p: Bad value for 'rfdno' [ 134.137977][ T9503] loop1: detected capacity change from 0 to 4096 [ 134.144458][ T9503] EXT4-fs: Mount option(s) incompatible with ext2 [ 134.175807][ T4722] Bluetooth: hci4: command 0x2016 tx timeout [ 134.298328][ T4722] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 134.299537][ T4722] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 134.300057][ T4722] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 134.300702][ T4722] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 134.301213][ T4722] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 134.608440][ T9507] bridge0: port 1(bridge_slave_0) entered blocking state [ 134.608496][ T9507] bridge0: port 1(bridge_slave_0) entered disabled state [ 134.608573][ T9507] bridge_slave_0: entered allmulticast mode [ 134.609158][ T9507] bridge_slave_0: entered promiscuous mode [ 134.610313][ T9507] bridge0: port 2(bridge_slave_1) entered blocking state [ 134.610362][ T9507] bridge0: port 2(bridge_slave_1) entered disabled state [ 134.610430][ T9507] bridge_slave_1: entered allmulticast mode [ 134.610922][ T9507] bridge_slave_1: entered promiscuous mode [ 134.629842][ T9507] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 134.631203][ T9507] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 134.649126][ T9507] team0: Port device team_slave_0 added [ 134.651681][ T9507] team0: Port device team_slave_1 added [ 134.672178][ T9507] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 134.672185][ T9507] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 134.672201][ T9507] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 134.672918][ T9507] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 134.672924][ T9507] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 134.672935][ T9507] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 134.700267][ T9507] hsr_slave_0: entered promiscuous mode [ 134.700730][ T9507] hsr_slave_1: entered promiscuous mode [ 134.700975][ T9507] debugfs: 'hsr0' already exists in 'hsr' [ 134.700984][ T9507] Cannot create hsr debugfs directory [ 134.791125][ T9532] veth0_to_bridge: entered promiscuous mode [ 134.792279][ T9532] macsec1: entered allmulticast mode [ 134.792294][ T9532] veth0_to_bridge: entered allmulticast mode [ 134.793548][ T9532] veth0_to_bridge: left allmulticast mode [ 134.793559][ T9532] veth0_to_bridge: left promiscuous mode [ 135.378650][ T9433] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 135.717579][ T9507] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 136.282658][ T9507] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 136.283045][ T9507] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 136.345803][ T4722] Bluetooth: hci0: command tx timeout [ 136.665754][ C0] net_ratelimit: 180 callbacks suppressed [ 136.746741][ T9507] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 136.753972][ T9507] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 136.782190][ T9507] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 136.782947][ T9507] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 136.810854][ T9559] Injecting memory failure for pfn 0x2193cf at process virtual address 0x20ffd000 [ 136.810890][ T9559] Memory failure: 0x2193cf: Sending SIGBUS to syz.1.1347:9559 due to hardware memory corruption [ 136.810909][ T9559] Memory failure: 0x2193cf: recovery action for already poisoned page: Failed [ 136.868429][ T9507] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 136.871381][ T30] kauditd_printk_skb: 119 callbacks suppressed [ 136.871390][ T30] audit: type=1326 audit(136.840:2128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9558 comm="syz.1.1347" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbb779368 code=0x7ffc0000 [ 136.871414][ T30] audit: type=1326 audit(136.840:2129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9558 comm="syz.1.1347" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbb779368 code=0x7ffc0000 [ 136.871431][ T30] audit: type=1326 audit(136.840:2130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9558 comm="syz.1.1347" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbb779368 code=0x7ffc0000 [ 136.871450][ T30] audit: type=1326 audit(136.840:2131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9558 comm="syz.1.1347" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbb779368 code=0x7ffc0000 [ 136.871465][ T30] audit: type=1326 audit(136.840:2132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9558 comm="syz.1.1347" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=56 compat=0 ip=0xffffbb779368 code=0x7ffc0000 [ 136.871480][ T30] audit: type=1326 audit(136.840:2133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9558 comm="syz.1.1347" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbb779368 code=0x7ffc0000 [ 136.871497][ T30] audit: type=1326 audit(136.840:2134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9558 comm="syz.1.1347" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbb779368 code=0x7ffc0000 [ 136.871511][ T30] audit: type=1326 audit(136.840:2135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9558 comm="syz.1.1347" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbb779368 code=0x7ffc0000 [ 136.871527][ T30] audit: type=1326 audit(136.840:2136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9558 comm="syz.1.1347" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbb779368 code=0x7ffc0000 [ 136.871586][ T30] audit: type=1326 audit(136.840:2137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9558 comm="syz.1.1347" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=29 compat=0 ip=0xffffbb779368 code=0x7ffc0000 [ 137.059549][ T4722] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 137.060069][ T4722] Bluetooth: hci2: Injecting HCI hardware error event [ 137.073182][ T4722] Bluetooth: hci2: hardware error 0x00 [ 137.225350][ T9507] 8021q: adding VLAN 0 to HW filter on device bond0 [ 137.234342][ T9507] 8021q: adding VLAN 0 to HW filter on device team0 [ 137.239296][ T5799] bridge0: port 1(bridge_slave_0) entered blocking state [ 137.239318][ T5799] bridge0: port 1(bridge_slave_0) entered forwarding state [ 137.247888][ T5807] bridge0: port 2(bridge_slave_1) entered blocking state [ 137.247916][ T5807] bridge0: port 2(bridge_slave_1) entered forwarding state [ 137.262073][ T9507] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 137.262085][ T9507] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 137.455093][ T9507] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 137.560907][ T9601] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1350'. [ 137.713423][ T9604] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1355'. [ 137.732938][ T9507] veth0_vlan: entered promiscuous mode [ 137.742878][ T9507] veth1_vlan: entered promiscuous mode [ 137.775153][ T9507] veth0_macvtap: entered promiscuous mode [ 137.786872][ T9507] veth1_macvtap: entered promiscuous mode [ 137.793017][ T9507] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 137.800819][ T9507] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 137.813158][ T9608] 9p: Bad value for 'rfdno' [ 137.828437][ T5807] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.848062][ T54] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.848089][ T54] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.848105][ T54] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.853151][ T9608] loop5: detected capacity change from 0 to 4096 [ 137.871718][ T9608] EXT4-fs: Mount option(s) incompatible with ext2 [ 137.891967][ T54] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 137.891977][ T54] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 137.966874][ T54] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 137.966883][ T54] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 137.986359][ T9612] Injecting memory failure for pfn 0x2193cf at process virtual address 0x20ffd000 [ 137.986398][ T9612] Memory failure: 0x2193cf: Sending SIGBUS to syz.8.1359:9612 due to hardware memory corruption [ 137.986417][ T9612] Memory failure: 0x2193cf: recovery action for already poisoned page: Failed [ 138.123872][ T9616] FAULT_INJECTION: forcing a failure. [ 138.123872][ T9616] name failslab, interval 1, probability 0, space 0, times 0 [ 138.123891][ T9616] CPU: 0 UID: 0 PID: 9616 Comm: syz.9.1335 Not tainted syzkaller #0 PREEMPT [ 138.123902][ T9616] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 138.123916][ T9616] Call trace: [ 138.123919][ T9616] show_stack+0x2c/0x3c (C) [ 138.123938][ T9616] __dump_stack+0x30/0x40 [ 138.123950][ T9616] dump_stack_lvl+0xd8/0x12c [ 138.123961][ T9616] dump_stack+0x1c/0x28 [ 138.123972][ T9616] should_fail_ex+0x418/0x58c [ 138.123998][ T9616] should_failslab+0xc4/0x120 [ 138.124011][ T9616] __kmalloc_noprof+0x108/0x6c8 [ 138.124025][ T9616] __memcg_list_lru_alloc+0x1c4/0x4e8 [ 138.124033][ T9616] memcg_list_lru_alloc+0xc4/0xf8 [ 138.124042][ T9616] __memcg_slab_post_alloc_hook+0x22c/0x824 [ 138.124054][ T9616] kmem_cache_alloc_lru_noprof+0x32c/0x5d8 [ 138.124067][ T9616] alloc_inode+0x84/0x198 [ 138.124077][ T9616] alloc_anon_inode+0x28/0x31c [ 138.124089][ T9616] anon_inode_make_secure_inode+0x84/0x18c [ 138.124102][ T9616] __anon_inode_getfile+0xa8/0x1c8 [ 138.124114][ T9616] anon_inode_create_getfile+0x4c/0x64 [ 138.124126][ T9616] io_uring_create+0x4b4/0x830 [ 138.124136][ T9616] __arm64_sys_io_uring_setup+0x284/0x290 [ 138.124146][ T9616] invoke_syscall+0x98/0x244 [ 138.124158][ T9616] el0_svc_common+0xec/0x23c [ 138.124169][ T9616] do_el0_svc+0x4c/0x5c [ 138.124181][ T9616] el0_svc+0x60/0x1d8 [ 138.124192][ T9616] el0t_64_sync_handler+0x44/0x104 [ 138.124202][ T9616] el0t_64_sync+0x198/0x19c [ 138.251726][ T9623] FAULT_INJECTION: forcing a failure. [ 138.251726][ T9623] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 138.251922][ T9623] CPU: 1 UID: 0 PID: 9623 Comm: syz.8.1360 Not tainted syzkaller #0 PREEMPT [ 138.251934][ T9623] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 138.251947][ T9623] Call trace: [ 138.251950][ T9623] show_stack+0x2c/0x3c (C) [ 138.251970][ T9623] __dump_stack+0x30/0x40 [ 138.251980][ T9623] dump_stack_lvl+0xd8/0x12c [ 138.251990][ T9623] dump_stack+0x1c/0x28 [ 138.252008][ T9623] should_fail_ex+0x418/0x58c [ 138.252020][ T9623] should_fail+0x14/0x24 [ 138.252032][ T9623] should_fail_usercopy+0x20/0x30 [ 138.252044][ T9623] _copy_from_iter+0x188/0x1064 [ 138.252056][ T9623] kernfs_fop_write_iter+0x17c/0x3b8 [ 138.252066][ T9623] vfs_write+0x51c/0xa0c [ 138.252077][ T9623] ksys_write+0x12c/0x228 [ 138.252086][ T9623] __arm64_sys_write+0x84/0x98 [ 138.252096][ T9623] invoke_syscall+0x98/0x244 [ 138.252107][ T9623] el0_svc_common+0xec/0x23c [ 138.252116][ T9623] do_el0_svc+0x4c/0x5c [ 138.252125][ T9623] el0_svc+0x60/0x1d8 [ 138.252135][ T9623] el0t_64_sync_handler+0x44/0x104 [ 138.252144][ T9623] el0t_64_sync+0x198/0x19c [ 138.286785][ T9623] loop8: detected capacity change from 0 to 1024 [ 138.415943][ T4723] Bluetooth: hci0: command tx timeout [ 138.432131][ T9631] xt_limit: Overflow, try lower: 4294967290/0 [ 138.442819][ T9631] loop2: detected capacity change from 0 to 512 [ 138.463474][ T9630] syzkaller0: entered promiscuous mode [ 138.463496][ T9630] syzkaller0: entered allmulticast mode [ 138.526572][ T9632] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 138.526683][ T9632] vhci_hcd vhci_hcd.2: invalid port number 96 [ 138.526704][ T9632] vhci_hcd vhci_hcd.2: default hub control req: 0006 v000d i0060 l0 [ 138.655559][ T9634] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 138.655672][ T9634] vhci_hcd vhci_hcd.2: invalid port number 96 [ 138.655697][ T9634] vhci_hcd vhci_hcd.2: default hub control req: 0006 v000d i0060 l0 [ 138.794732][ T9631] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 138.822739][ T9631] device-mapper: ioctl: Unable to change name on mapped device m to one that already exists: ÿÿ [ 139.376220][ T4722] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 139.804316][ T4710] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.844670][ T9657] xt_connbytes: Forcing CT accounting to be enabled [ 139.855693][ T9659] Injecting memory failure for pfn 0x2193cf at process virtual address 0x20ffd000 [ 139.858014][ T9659] Memory failure: 0x2193cf: Sending SIGBUS to syz.2.1370:9659 due to hardware memory corruption [ 139.858043][ T9659] Memory failure: 0x2193cf: recovery action for already poisoned page: Failed [ 139.869610][ T9657] overlayfs: conflicting options: userxattr,metacopy=on [ 140.052023][ T9674] xt_limit: Overflow, try lower: 4294967290/0 [ 140.054314][ T9674] loop8: detected capacity change from 0 to 512 [ 140.131174][ T9675] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 140.131276][ T9675] vhci_hcd vhci_hcd.2: invalid port number 96 [ 140.131297][ T9675] vhci_hcd vhci_hcd.2: default hub control req: 0006 v000d i0060 l0 [ 140.249091][ T9674] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 140.255336][ T9674] device-mapper: ioctl: Unable to change name on mapped device m to one that already exists: ÿÿ [ 140.290240][ T7630] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.363691][ T9682] syzkaller0: entered promiscuous mode [ 140.363709][ T9682] syzkaller0: entered allmulticast mode [ 140.844209][ T9710] xt_limit: Overflow, try lower: 4294967290/0 [ 140.847609][ T9710] loop5: detected capacity change from 0 to 512 [ 140.880702][ T9710] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 140.893303][ T9710] device-mapper: ioctl: Unable to change name on mapped device m to one that already exists: ÿÿ [ 141.186802][ T5079] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.213466][ T9717] loop8: detected capacity change from 0 to 4096 [ 141.218300][ T9717] EXT4-fs (loop8): Test dummy encryption mode enabled [ 141.230274][ T9717] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 141.284990][ T7630] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.293399][ T9721] FAULT_INJECTION: forcing a failure. [ 141.293399][ T9721] name failslab, interval 1, probability 0, space 0, times 0 [ 141.293418][ T9721] CPU: 0 UID: 0 PID: 9721 Comm: syz.5.1393 Not tainted syzkaller #0 PREEMPT [ 141.293429][ T9721] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 141.293443][ T9721] Call trace: [ 141.293446][ T9721] show_stack+0x2c/0x3c (C) [ 141.293463][ T9721] __dump_stack+0x30/0x40 [ 141.293474][ T9721] dump_stack_lvl+0xd8/0x12c [ 141.293484][ T9721] dump_stack+0x1c/0x28 [ 141.293493][ T9721] should_fail_ex+0x418/0x58c [ 141.293505][ T9721] should_failslab+0xc4/0x120 [ 141.293516][ T9721] kmem_cache_alloc_noprof+0x94/0x5d4 [ 141.293527][ T9721] security_file_alloc+0x3c/0x300 [ 141.293536][ T9721] init_file+0x90/0x28c [ 141.293543][ T9721] alloc_empty_file+0x80/0x1cc [ 141.293551][ T9721] path_openat+0x78/0x18f0 [ 141.293559][ T9721] do_file_open+0x1c8/0x2e8 [ 141.293567][ T9721] do_sys_openat2+0x114/0x1e8 [ 141.293576][ T9721] do_sys_open+0xb0/0xe0 [ 141.293585][ T9721] __arm64_sys_openat+0xa8/0xc4 [ 141.293594][ T9721] invoke_syscall+0x98/0x244 [ 141.293604][ T9721] el0_svc_common+0xec/0x23c [ 141.293614][ T9721] do_el0_svc+0x4c/0x5c [ 141.293623][ T9721] el0_svc+0x60/0x1d8 [ 141.293637][ T9721] el0t_64_sync_handler+0x44/0x104 [ 141.293646][ T9721] el0t_64_sync+0x198/0x19c [ 141.370235][ T8015] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 141.371682][ T8015] hid-generic 0000:0000:0000.001C: hidraw0: HID v0.00 Device [syz1] on syz0 [ 141.377054][ T4716] Bluetooth: hci3: command 0x2016 tx timeout [ 141.377093][ T4716] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 141.377118][ T4716] Bluetooth: hci4: Injecting HCI hardware error event [ 141.378084][ T4716] Bluetooth: hci4: hardware error 0x00 [ 141.398518][ T9726] fido_id[9726]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 141.584825][ T10] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 141.586768][ T10] hid-generic 0000:0000:0000.001D: hidraw0: HID v0.00 Device [syz1] on syz0 [ 141.606923][ T9737] fido_id[9737]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 141.703239][ T9743] tipc: Enabling of bearer rejected, failed to enable media [ 141.703813][ T4723] Bluetooth: hci1: unexpected event for opcode 0x20a3 [ 141.776908][ T9750] syzkaller0: entered promiscuous mode [ 141.776927][ T9750] syzkaller0: entered allmulticast mode [ 141.785865][ C0] net_ratelimit: 470 callbacks suppressed [ 142.321849][ T9759] Injecting memory failure for pfn 0x2193cf at process virtual address 0x20ffd000 [ 142.321884][ T9759] Memory failure: 0x2193cf: Sending SIGBUS to syz.8.1406:9759 due to hardware memory corruption [ 142.321904][ T9759] Memory failure: 0x2193cf: recovery action for already poisoned page: Failed [ 142.385714][ T30] kauditd_printk_skb: 89 callbacks suppressed [ 142.385931][ T30] audit: type=1326 audit(142.350:2227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9758 comm="syz.8.1406" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9a979368 code=0x7ffc0000 [ 142.385958][ T30] audit: type=1326 audit(142.350:2228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9758 comm="syz.8.1406" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9a979368 code=0x7ffc0000 [ 142.385981][ T30] audit: type=1326 audit(142.350:2229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9758 comm="syz.8.1406" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9a979368 code=0x7ffc0000 [ 142.386007][ T30] audit: type=1326 audit(142.350:2230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9758 comm="syz.8.1406" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=56 compat=0 ip=0xffff9a979368 code=0x7ffc0000 [ 142.386028][ T30] audit: type=1326 audit(142.350:2231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9758 comm="syz.8.1406" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9a979368 code=0x7ffc0000 [ 142.386046][ T30] audit: type=1326 audit(142.350:2232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9758 comm="syz.8.1406" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9a979368 code=0x7ffc0000 [ 142.386065][ T30] audit: type=1326 audit(142.350:2233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9758 comm="syz.8.1406" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9a979368 code=0x7ffc0000 [ 142.386083][ T30] audit: type=1326 audit(142.350:2234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9758 comm="syz.8.1406" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9a979368 code=0x7ffc0000 [ 142.386098][ T30] audit: type=1326 audit(142.350:2235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9758 comm="syz.8.1406" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=29 compat=0 ip=0xffff9a979368 code=0x7ffc0000 [ 142.386113][ T30] audit: type=1326 audit(142.350:2236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9758 comm="syz.8.1406" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9a979368 code=0x7ffc0000 [ 142.697937][ T9773] fuse: Bad value for 'fd' [ 142.763572][ T9772] sit0: entered promiscuous mode [ 142.767513][ T9772] netlink: 'syz.9.1409': attribute type 1 has an invalid length. [ 142.767525][ T9772] netlink: 1 bytes leftover after parsing attributes in process `syz.9.1409'. [ 142.864893][ T9787] loop9: detected capacity change from 0 to 2048 [ 142.873493][ T4723] Bluetooth: hci3: unexpected event for opcode 0x0c26 [ 142.906939][ T9787] loop9: unable to read partition table [ 142.907016][ T9787] loop9: partition table beyond EOD, truncated [ 142.907037][ T9787] loop_reread_partitions: partition scan of loop9 () failed (rc=-5) [ 142.984122][ T9796] netlink: 16 bytes leftover after parsing attributes in process `syz.9.1420'. [ 143.092685][ T9799] syzkaller0: entered promiscuous mode [ 143.092694][ T9799] syzkaller0: entered allmulticast mode [ 143.095349][ T9799] tipc: Started in network mode [ 143.095361][ T9799] tipc: Node identity 6a9b8b410c79, cluster identity 4711 [ 143.101240][ T9799] tipc: Enabled bearer , priority 0 [ 143.331556][ T9807] fuse: Bad value for 'fd' [ 143.349662][ T9809] Injecting memory failure for pfn 0x2193cf at process virtual address 0x20ffd000 [ 143.349700][ T9809] Memory failure: 0x2193cf: Sending SIGBUS to syz.1.1424:9809 due to hardware memory corruption [ 143.349719][ T9809] Memory failure: 0x2193cf: recovery action for already poisoned page: Failed [ 143.375952][ T4723] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 143.376670][ T4723] Bluetooth: hci0: Injecting HCI hardware error event [ 143.378217][ T4722] Bluetooth: hci0: hardware error 0x00 [ 143.402419][ T9811] syzkaller0: entered promiscuous mode [ 143.402438][ T9811] syzkaller0: entered allmulticast mode [ 143.512094][ T9822] block2mtd: error: cannot open device /dev/zram0 [ 143.537668][ T4716] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 144.018057][ T9795] tipc: Resetting bearer [ 144.039227][ T9795] tipc: Disabling bearer [ 144.051045][ T9834] tipc: Enabling of bearer rejected, failed to enable media [ 144.093090][ T9841] fuse: Bad value for 'fd' [ 144.182960][ T4716] Bluetooth: hci0: unexpected event for opcode 0x0c26 [ 144.219131][ T9854] FAULT_INJECTION: forcing a failure. [ 144.219131][ T9854] name failslab, interval 1, probability 0, space 0, times 0 [ 144.219147][ T9854] CPU: 0 UID: 0 PID: 9854 Comm: syz.8.1439 Not tainted syzkaller #0 PREEMPT [ 144.219159][ T9854] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 144.219174][ T9854] Call trace: [ 144.219177][ T9854] show_stack+0x2c/0x3c (C) [ 144.219199][ T9854] __dump_stack+0x30/0x40 [ 144.219212][ T9854] dump_stack_lvl+0xd8/0x12c [ 144.219225][ T9854] dump_stack+0x1c/0x28 [ 144.219237][ T9854] should_fail_ex+0x418/0x58c [ 144.219250][ T9854] should_failslab+0xc4/0x120 [ 144.219264][ T9854] __kmalloc_cache_noprof+0x94/0x5fc [ 144.219274][ T9854] x509_cert_parse+0x154/0x65c [ 144.219287][ T9854] x509_key_preparse+0x74/0x630 [ 144.219298][ T9854] asymmetric_key_preparse+0xcc/0x1c0 [ 144.219309][ T9854] __key_create_or_update+0x2a4/0x848 [ 144.219323][ T9854] key_create_or_update+0x60/0x7c [ 144.219337][ T9854] __arm64_sys_add_key+0x384/0x43c [ 144.219347][ T9854] invoke_syscall+0x98/0x244 [ 144.219360][ T9854] el0_svc_common+0xec/0x23c [ 144.219372][ T9854] do_el0_svc+0x4c/0x5c [ 144.219385][ T9854] el0_svc+0x60/0x1d8 [ 144.219397][ T9854] el0t_64_sync_handler+0x44/0x104 [ 144.219408][ T9854] el0t_64_sync+0x198/0x19c [ 144.847199][ T9873] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 144.872162][ T9875] fuse: Bad value for 'fd' [ 144.906993][ T9877] block2mtd: error: cannot open device /dev/zram0 [ 145.158658][ T9888] Injecting memory failure for pfn 0x2193cf at process virtual address 0x20ffd000 [ 145.158695][ T9888] Memory failure: 0x2193cf: Sending SIGBUS to syz.9.1452:9888 due to hardware memory corruption [ 145.158715][ T9888] Memory failure: 0x2193cf: recovery action for already poisoned page: Failed [ 145.311523][ T9903] fuse: Bad value for 'fd' [ 145.358931][ T9906] loop9: detected capacity change from 0 to 256 [ 145.505229][ T9909] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 145.505376][ T9909] vhci_hcd vhci_hcd.2: invalid port number 96 [ 145.505401][ T9909] vhci_hcd vhci_hcd.2: default hub control req: 0006 v000d i0060 l0 [ 145.540249][ T4722] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 145.738647][ T9938] netlink: 28 bytes leftover after parsing attributes in process `syz.8.1466'. [ 145.840188][ T9953] 9p: Bad value for 'rfdno' [ 145.885329][ T9953] loop8: detected capacity change from 0 to 4096 [ 145.901849][ T9953] EXT4-fs: Mount option(s) incompatible with ext2 [ 146.013205][ T9969] loop1: detected capacity change from 0 to 1024 [ 146.063203][ T9969] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 146.108146][ T9986] netlink: 28 bytes leftover after parsing attributes in process `syz.8.1479'. [ 146.185509][ T4707] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 146.285110][ T4722] Bluetooth: hci1: command 0x2016 tx timeout [ 146.290139][ T9999] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 146.290216][ T9999] vhci_hcd vhci_hcd.2: invalid port number 96 [ 146.290237][ T9999] vhci_hcd vhci_hcd.2: default hub control req: 0006 v000d i0060 l0 [ 146.333245][ T9998] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1484'. [ 146.333266][ T9998] lo: entered allmulticast mode [ 146.374613][T10004] loop1: detected capacity change from 0 to 128 [ 146.420379][T10004] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 146.502740][ T299] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 146.502765][ T299] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.521884][T10007] 9p: Bad value for 'rfdno' [ 146.548480][T10007] loop8: detected capacity change from 0 to 4096 [ 146.556273][T10007] EXT4-fs: Mount option(s) incompatible with ext2 [ 146.638237][ T299] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 146.638256][ T299] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.731433][ T299] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 146.731456][ T299] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.803294][T10013] netlink: 28 bytes leftover after parsing attributes in process `syz.8.1487'. [ 146.815231][ T299] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 146.815252][ T299] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.815829][ C1] net_ratelimit: 289 callbacks suppressed [ 147.001605][T10021] loop8: detected capacity change from 0 to 4096 [ 147.002003][T10021] EXT4-fs: Ignoring removed orlov option [ 147.002049][T10021] ext4: Unknown parameter 'fsname' [ 147.095451][ T299] bridge_slave_1: left allmulticast mode [ 147.095466][ T299] bridge_slave_1: left promiscuous mode [ 147.098719][ T299] bridge0: port 2(bridge_slave_1) entered disabled state [ 147.105021][ T299] bridge_slave_0: left allmulticast mode [ 147.105034][ T299] bridge_slave_0: left promiscuous mode [ 147.105099][ T299] bridge0: port 1(bridge_slave_0) entered disabled state [ 147.424765][T10042] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 147.424861][T10042] vhci_hcd vhci_hcd.2: invalid port number 96 [ 147.424881][T10042] vhci_hcd vhci_hcd.2: default hub control req: 0006 v000d i0060 l0 [ 147.508180][T10023] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 147.513169][T10023] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 147.546817][ T299] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 147.560548][T10023] loop2: detected capacity change from 0 to 1024 [ 147.578542][ T299] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 147.579884][T10023] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 147.617093][ T299] bond0 (unregistering): Released all slaves [ 147.693910][T10055] tipc: Enabling of bearer rejected, failed to enable media [ 147.694147][ T4723] Bluetooth: hci1: unexpected event for opcode 0x20a3 [ 147.872943][ T4397] 8021q: adding VLAN 0 to HW filter on device eth12 [ 147.901470][T10078] FAULT_INJECTION: forcing a failure. [ 147.901470][T10078] name failslab, interval 1, probability 0, space 0, times 0 [ 147.901487][T10078] CPU: 1 UID: 0 PID: 10078 Comm: syz.9.1502 Not tainted syzkaller #0 PREEMPT [ 147.901499][T10078] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 147.901512][T10078] Call trace: [ 147.901515][T10078] show_stack+0x2c/0x3c (C) [ 147.901535][T10078] __dump_stack+0x30/0x40 [ 147.901547][T10078] dump_stack_lvl+0xd8/0x12c [ 147.901559][T10078] dump_stack+0x1c/0x28 [ 147.901570][T10078] should_fail_ex+0x418/0x58c [ 147.901583][T10078] should_failslab+0xc4/0x120 [ 147.901596][T10078] kmem_cache_alloc_lru_noprof+0x98/0x5d8 [ 147.901610][T10078] shmem_alloc_inode+0x2c/0x48 [ 147.901623][T10078] alloc_inode+0x68/0x198 [ 147.901634][T10078] new_inode+0x20/0x50 [ 147.901644][T10078] shmem_get_inode+0xac/0x788 [ 147.901656][T10078] __shmem_file_setup+0x168/0x284 [ 147.901667][T10078] shmem_file_setup+0x40/0x54 [ 147.901678][T10078] drm_gem_object_init+0x94/0xe4 [ 147.901691][T10078] __drm_gem_shmem_init+0xc8/0x214 [ 147.901701][T10078] __drm_gem_shmem_create+0xec/0x140 [ 147.901715][T10078] drm_gem_shmem_create_with_handle+0x38/0x118 [ 147.901726][T10078] drm_gem_shmem_dumb_create+0x8c/0xa8 [ 147.901736][T10078] drm_mode_create_dumb+0x1d4/0x230 [ 147.901746][T10078] drm_mode_create_dumb_ioctl+0x34/0x7c [ 147.901756][T10078] drm_ioctl_kernel+0x250/0x31c [ 147.901764][T10078] drm_ioctl+0x694/0xac8 [ 147.901772][T10078] __arm64_sys_ioctl+0x154/0x1cc [ 147.901784][T10078] invoke_syscall+0x98/0x244 [ 147.901797][T10078] el0_svc_common+0xec/0x23c [ 147.901809][T10078] do_el0_svc+0x4c/0x5c [ 147.901820][T10078] el0_svc+0x60/0x1d8 [ 147.901831][T10078] el0t_64_sync_handler+0x44/0x104 [ 147.901842][T10078] el0t_64_sync+0x198/0x19c [ 147.908995][T10081] FAULT_INJECTION: forcing a failure. [ 147.908995][T10081] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 147.909017][T10081] CPU: 0 UID: 0 PID: 10081 Comm: syz.8.1503 Not tainted syzkaller #0 PREEMPT [ 147.909029][T10081] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 147.909043][T10081] Call trace: [ 147.909046][T10081] show_stack+0x2c/0x3c (C) [ 147.909067][T10081] __dump_stack+0x30/0x40 [ 147.909080][T10081] dump_stack_lvl+0xd8/0x12c [ 147.909092][T10081] dump_stack+0x1c/0x28 [ 147.909103][T10081] should_fail_ex+0x418/0x58c [ 147.909117][T10081] should_fail+0x14/0x24 [ 147.909128][T10081] should_fail_usercopy+0x20/0x30 [ 147.909140][T10081] strncpy_from_user+0x48/0x388 [ 147.909150][T10081] do_getname+0x84/0x234 [ 147.909159][T10081] __arm64_sys_unlinkat+0xa8/0x108 [ 147.909169][T10081] invoke_syscall+0x98/0x244 [ 147.909181][T10081] el0_svc_common+0xec/0x23c [ 147.909193][T10081] do_el0_svc+0x4c/0x5c [ 147.909205][T10081] el0_svc+0x60/0x1d8 [ 147.909215][T10081] el0t_64_sync_handler+0x44/0x104 [ 147.909226][T10081] el0t_64_sync+0x198/0x19c [ 147.942909][T10083] netlink: 'syz.8.1504': attribute type 1 has an invalid length. [ 147.952544][T10083] 8021q: adding VLAN 0 to HW filter on device bond1 [ 147.962187][T10083] bond1: (slave dummy0): making interface the new active one [ 147.963128][T10083] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 147.985024][ T299] hsr_slave_0: left promiscuous mode [ 147.985469][ T299] hsr_slave_1: left promiscuous mode [ 147.990804][ T299] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 147.990815][ T299] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 147.991385][ T299] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 147.991394][ T299] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 148.012940][ T299] veth1_macvtap: left promiscuous mode [ 148.012968][ T299] veth0_macvtap: left promiscuous mode [ 148.013030][ T299] veth1_vlan: left promiscuous mode [ 148.013159][ T299] veth0_vlan: left promiscuous mode [ 148.114435][T10098] Injecting memory failure for pfn 0x2193cf at process virtual address 0x20ffd000 [ 148.114471][T10098] Memory failure: 0x2193cf: Sending SIGBUS to syz.5.1507:10098 due to hardware memory corruption [ 148.114490][T10098] Memory failure: 0x2193cf: recovery action for already poisoned page: Failed [ 148.151631][ T4710] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 148.209327][ T30] kauditd_printk_skb: 296 callbacks suppressed [ 148.209336][ T30] audit: type=1326 audit(148.180:2533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10097 comm="syz.5.1507" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffad179368 code=0x7ffc0000 [ 148.209354][ T30] audit: type=1326 audit(148.180:2534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10097 comm="syz.5.1507" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffad179368 code=0x7ffc0000 [ 148.218453][ T9] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 148.219556][ T30] audit: type=1326 audit(148.190:2535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10097 comm="syz.5.1507" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffad179368 code=0x7ffc0000 [ 148.219576][ T30] audit: type=1326 audit(148.190:2536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10097 comm="syz.5.1507" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffad179368 code=0x7ffc0000 [ 148.219709][ T9] hid-generic 0000:0000:0000.001E: hidraw0: HID v0.00 Device [syz1] on syz0 [ 148.229017][ T30] audit: type=1326 audit(148.200:2537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10097 comm="syz.5.1507" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=56 compat=0 ip=0xffffad179368 code=0x7ffc0000 [ 148.229044][ T30] audit: type=1326 audit(148.200:2538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10097 comm="syz.5.1507" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffad179368 code=0x7ffc0000 [ 148.229061][ T30] audit: type=1326 audit(148.200:2539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10097 comm="syz.5.1507" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffad179368 code=0x7ffc0000 [ 148.230557][ T30] audit: type=1326 audit(148.200:2540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10097 comm="syz.5.1507" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffad179368 code=0x7ffc0000 [ 148.230579][ T30] audit: type=1326 audit(148.200:2541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10097 comm="syz.5.1507" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffad179368 code=0x7ffc0000 [ 148.231971][ T30] audit: type=1326 audit(148.200:2542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10097 comm="syz.5.1507" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=29 compat=0 ip=0xffffad179368 code=0x7ffc0000 [ 148.373155][T10125] loop2: detected capacity change from 0 to 2048 [ 148.382883][ T299] team0 (unregistering): Port device team_slave_1 removed [ 148.424222][T10125] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 148.425661][ T299] team0 (unregistering): Port device team_slave_0 removed [ 148.449521][T10125] EXT4-fs error (device loop2): ext4_validate_block_bitmap:445: comm syz.2.1512: bg 0: block 312: padding at end of block bitmap is not set [ 148.470989][T10125] fs-verity (loop2, inode 13): ext4_end_enable_verity() failed with err -28 [ 148.584680][ T4710] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 148.609849][ T4397] 8021q: adding VLAN 0 to HW filter on device eth13 [ 148.649842][T10141] FAULT_INJECTION: forcing a failure. [ 148.649842][T10141] name failslab, interval 1, probability 0, space 0, times 0 [ 148.649854][T10141] CPU: 1 UID: 0 PID: 10141 Comm: syz.1.1516 Not tainted syzkaller #0 PREEMPT [ 148.649863][T10141] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 148.649875][T10141] Call trace: [ 148.649878][T10141] show_stack+0x2c/0x3c (C) [ 148.649897][T10141] __dump_stack+0x30/0x40 [ 148.649908][T10141] dump_stack_lvl+0xd8/0x12c [ 148.649918][T10141] dump_stack+0x1c/0x28 [ 148.649927][T10141] should_fail_ex+0x418/0x58c [ 148.649938][T10141] should_failslab+0xc4/0x120 [ 148.649949][T10141] kmem_cache_alloc_noprof+0x94/0x5d4 [ 148.649960][T10141] security_file_alloc+0x3c/0x300 [ 148.649969][T10141] init_file+0x90/0x28c [ 148.649976][T10141] alloc_empty_file+0x80/0x1cc [ 148.649984][T10141] path_openat+0x78/0x18f0 [ 148.650002][T10141] do_file_open+0x1c8/0x2e8 [ 148.650010][T10141] do_sys_openat2+0x114/0x1e8 [ 148.650020][T10141] do_sys_open+0xb0/0xe0 [ 148.650029][T10141] __arm64_sys_openat+0xa8/0xc4 [ 148.650039][T10141] invoke_syscall+0x98/0x244 [ 148.650049][T10141] el0_svc_common+0xec/0x23c [ 148.650059][T10141] do_el0_svc+0x4c/0x5c [ 148.650068][T10141] el0_svc+0x60/0x1d8 [ 148.650078][T10141] el0t_64_sync_handler+0x44/0x104 [ 148.650087][T10141] el0t_64_sync+0x198/0x19c [ 148.722621][T10144] fuse: Bad value for 'fd' [ 148.921961][T10163] xt_limit: Overflow, try lower: 4294967290/0 [ 148.931149][T10163] loop2: detected capacity change from 0 to 512 [ 148.940931][T10159] tipc: Enabling of bearer rejected, failed to enable media [ 148.942477][ T4723] Bluetooth: hci1: unexpected event for opcode 0x20a3 [ 149.024032][T10172] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 149.024131][T10172] vhci_hcd vhci_hcd.2: invalid port number 96 [ 149.024154][T10172] vhci_hcd vhci_hcd.2: default hub control req: 0006 v000d i0060 l0 [ 149.158996][T10163] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 149.212105][ T4397] 8021q: adding VLAN 0 to HW filter on device eth14 [ 149.250266][ T4710] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 149.254543][T10184] loop9: detected capacity change from 0 to 128 [ 149.309437][T10189] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1525'. [ 149.436066][ T4397] 8021q: adding VLAN 0 to HW filter on device eth15 [ 149.727916][T10212] pimreg0: tun_chr_ioctl cmd 1074025675 [ 149.727935][T10212] pimreg0: persist disabled [ 149.788684][T10220] loop9: detected capacity change from 0 to 1024 [ 149.791268][T10220] EXT4-fs: Ignoring removed oldalloc option [ 149.791278][T10220] EXT4-fs: Ignoring removed orlov option [ 149.811344][T10220] EXT4-fs (loop9): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 149.818955][T10220] EXT4-fs error (device loop9): ext4_map_blocks:832: inode #15: comm syz.9.1533: lblock 0 mapped to illegal pblock 0 (length 6) [ 149.820385][T10220] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 6 with error 117 [ 149.820403][T10220] EXT4-fs (loop9): This should not happen!! Data will be lost [ 149.820403][T10220] [ 149.821055][T10220] EXT4-fs error (device loop9): ext4_map_blocks:832: inode #15: comm syz.9.1533: lblock 0 mapped to illegal pblock 0 (length 6) [ 149.821261][T10220] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 6 with error 117 [ 149.821273][T10220] EXT4-fs (loop9): This should not happen!! Data will be lost [ 149.821273][T10220] [ 149.832957][ T299] EXT4-fs error (device loop9): ext4_validate_block_bitmap:445: comm kworker/u8:7: bg 0: block 112: padding at end of block bitmap is not set [ 149.833347][ T299] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 32 with max blocks 32 with error 28 [ 149.833361][ T299] EXT4-fs (loop9): This should not happen!! Data will be lost [ 149.833361][ T299] [ 149.833369][ T299] EXT4-fs (loop9): Total free blocks count 0 [ 149.833376][ T299] EXT4-fs (loop9): Free/Dirty block details [ 149.833383][ T299] EXT4-fs (loop9): free_blocks=0 [ 149.849836][ T299] IPVS: starting estimator thread 0... [ 149.875572][ T2089] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 149.877595][ T2089] hid-generic 0000:0000:0000.001F: hidraw0: HID v0.00 Device [syz1] on syz0 [ 149.957754][T10231] IPVS: using max 60 ests per chain, 144000 per kthread [ 150.263540][T10253] FAULT_INJECTION: forcing a failure. [ 150.263540][T10253] name failslab, interval 1, probability 0, space 0, times 0 [ 150.263558][T10253] CPU: 1 UID: 0 PID: 10253 Comm: syz.8.1544 Not tainted syzkaller #0 PREEMPT [ 150.263568][T10253] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 150.263581][T10253] Call trace: [ 150.263584][T10253] show_stack+0x2c/0x3c (C) [ 150.263603][T10253] __dump_stack+0x30/0x40 [ 150.263614][T10253] dump_stack_lvl+0xd8/0x12c [ 150.263623][T10253] dump_stack+0x1c/0x28 [ 150.263633][T10253] should_fail_ex+0x418/0x58c [ 150.263644][T10253] should_failslab+0xc4/0x120 [ 150.263654][T10253] kmem_cache_alloc_node_noprof+0x98/0x604 [ 150.263666][T10253] __alloc_skb+0x1f0/0x610 [ 150.263675][T10253] netlink_alloc_large_skb+0xd4/0x114 [ 150.263684][T10253] netlink_sendmsg+0x4c4/0x948 [ 150.263693][T10253] __sock_sendmsg+0xc8/0x17c [ 150.263701][T10253] ____sys_sendmsg+0x3d0/0x6c8 [ 150.263709][T10253] ___sys_sendmsg+0x198/0x224 [ 150.263718][T10253] __sys_sendmsg+0x158/0x204 [ 150.263726][T10253] __arm64_sys_sendmsg+0x88/0x9c [ 150.263735][T10253] invoke_syscall+0x98/0x244 [ 150.263745][T10253] el0_svc_common+0xec/0x23c [ 150.263755][T10253] do_el0_svc+0x4c/0x5c [ 150.263764][T10253] el0_svc+0x60/0x1d8 [ 150.263779][T10253] el0t_64_sync_handler+0x44/0x104 [ 150.263788][T10253] el0t_64_sync+0x198/0x19c [ 150.304807][T10257] loop2: detected capacity change from 0 to 1024 [ 150.316417][T10259] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1547'. [ 150.317393][T10257] EXT4-fs: Ignoring removed nomblk_io_submit option [ 150.343128][T10257] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e042c028, mo2=0102] [ 150.343183][T10257] System zones: 0-1, 3-12 [ 150.343731][T10257] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 150.359349][T10257] FAULT_INJECTION: forcing a failure. [ 150.359349][T10257] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 150.359375][T10257] CPU: 0 UID: 0 PID: 10257 Comm: syz.2.1546 Not tainted syzkaller #0 PREEMPT [ 150.359386][T10257] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 150.359399][T10257] Call trace: [ 150.359402][T10257] show_stack+0x2c/0x3c (C) [ 150.359422][T10257] __dump_stack+0x30/0x40 [ 150.359432][T10257] dump_stack_lvl+0xd8/0x12c [ 150.359442][T10257] dump_stack+0x1c/0x28 [ 150.359451][T10257] should_fail_ex+0x418/0x58c [ 150.359462][T10257] should_fail_alloc_page+0xec/0x10c [ 150.359473][T10257] prepare_alloc_pages+0x194/0x484 [ 150.359485][T10257] __alloc_frozen_pages_noprof+0x180/0x578 [ 150.359495][T10257] alloc_pages_mpol+0x1fc/0x3d0 [ 150.359503][T10257] alloc_frozen_pages_noprof+0xc4/0x10c [ 150.359511][T10257] alloc_pages_noprof+0x30/0x148 [ 150.359519][T10257] folio_alloc_noprof+0x2c/0x148 [ 150.359527][T10257] filemap_alloc_folio_noprof+0x108/0x424 [ 150.359537][T10257] __filemap_get_folio_mpol+0x444/0x1054 [ 150.359547][T10257] ext4_load_tail_bh+0x94/0x608 [ 150.359558][T10257] ext4_block_zero_range+0xd8/0x7b0 [ 150.359566][T10257] ext4_zero_partial_blocks+0x260/0x45c [ 150.359575][T10257] ext4_zero_range+0x358/0xbd4 [ 150.359585][T10257] ext4_fallocate+0x320/0x3cc [ 150.359593][T10257] vfs_fallocate+0x514/0x650 [ 150.359603][T10257] ksys_fallocate+0x58/0xa4 [ 150.359612][T10257] __arm64_sys_fallocate+0xa8/0xc4 [ 150.359621][T10257] invoke_syscall+0x98/0x244 [ 150.359631][T10257] el0_svc_common+0xec/0x23c [ 150.359641][T10257] do_el0_svc+0x4c/0x5c [ 150.359650][T10257] el0_svc+0x60/0x1d8 [ 150.359660][T10257] el0t_64_sync_handler+0x44/0x104 [ 150.359669][T10257] el0t_64_sync+0x198/0x19c [ 150.378189][ T4710] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 150.422351][ T9] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 150.423627][ T9] hid-generic 0000:0000:0000.0020: hidraw0: HID v0.00 Device [syz1] on syz0 [ 150.448545][T10268] fido_id[10268]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/0000:0000:0000.0020/report_descriptor': No such device [ 150.478491][T10272] xt_limit: Overflow, try lower: 4294967290/0 [ 150.484466][T10272] loop1: detected capacity change from 0 to 512 [ 150.502575][T10272] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 150.535364][ T4707] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 151.146564][T10294] block2mtd: error: cannot open device /dev/zram0 [ 151.147779][T10294] netlink: 'syz.2.1556': attribute type 1 has an invalid length. [ 151.147790][T10294] netlink: 'syz.2.1556': attribute type 2 has an invalid length. [ 151.274594][T10300] 0ªî{X¹¦: left promiscuous mode [ 151.299513][T10307] netlink: 9 bytes leftover after parsing attributes in process `syz.2.1559'. [ 151.300905][T10307] 0ªî{X¹¦: entered promiscuous mode [ 151.429779][T10314] Injecting memory failure for pfn 0x2193cf at process virtual address 0x20ffd000 [ 151.429816][T10314] Memory failure: 0x2193cf: Sending SIGBUS to syz.2.1562:10314 due to hardware memory corruption [ 151.429834][T10314] Memory failure: 0x2193cf: recovery action for already poisoned page: Failed [ 151.554823][T10320] syzkaller0: entered promiscuous mode [ 151.554832][T10320] syzkaller0: entered allmulticast mode [ 151.604633][T10325] FAULT_INJECTION: forcing a failure. [ 151.604633][T10325] name failslab, interval 1, probability 0, space 0, times 0 [ 151.604647][T10325] CPU: 0 UID: 0 PID: 10325 Comm: syz.1.1566 Not tainted syzkaller #0 PREEMPT [ 151.604658][T10325] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 151.604672][T10325] Call trace: [ 151.604675][T10325] show_stack+0x2c/0x3c (C) [ 151.604696][T10325] __dump_stack+0x30/0x40 [ 151.604709][T10325] dump_stack_lvl+0xd8/0x12c [ 151.604720][T10325] dump_stack+0x1c/0x28 [ 151.604732][T10325] should_fail_ex+0x418/0x58c [ 151.604745][T10325] should_failslab+0xc4/0x120 [ 151.604757][T10325] kmem_cache_alloc_lru_noprof+0x98/0x5d8 [ 151.604771][T10325] shmem_alloc_inode+0x2c/0x48 [ 151.604784][T10325] alloc_inode+0x68/0x198 [ 151.604795][T10325] new_inode+0x20/0x50 [ 151.604805][T10325] shmem_get_inode+0xac/0x788 [ 151.604817][T10325] __shmem_file_setup+0x168/0x284 [ 151.604831][T10325] shmem_file_setup+0x40/0x54 [ 151.604842][T10325] drm_gem_object_init+0x94/0xe4 [ 151.604855][T10325] __drm_gem_shmem_init+0xc8/0x214 [ 151.604865][T10325] __drm_gem_shmem_create+0xec/0x140 [ 151.604875][T10325] drm_gem_shmem_create_with_handle+0x38/0x118 [ 151.604886][T10325] drm_gem_shmem_dumb_create+0x8c/0xa8 [ 151.604897][T10325] drm_mode_create_dumb+0x1d4/0x230 [ 151.604906][T10325] drm_mode_create_dumb_ioctl+0x34/0x7c [ 151.604915][T10325] drm_ioctl_kernel+0x250/0x31c [ 151.604923][T10325] drm_ioctl+0x694/0xac8 [ 151.604931][T10325] __arm64_sys_ioctl+0x154/0x1cc [ 151.604943][T10325] invoke_syscall+0x98/0x244 [ 151.604956][T10325] el0_svc_common+0xec/0x23c [ 151.604968][T10325] do_el0_svc+0x4c/0x5c [ 151.604984][T10325] el0_svc+0x60/0x1d8 [ 151.604996][T10325] el0t_64_sync_handler+0x44/0x104 [ 151.605007][T10325] el0t_64_sync+0x198/0x19c [ 151.881722][T10330] block2mtd: error: cannot open device /dev/zram0 [ 151.892267][T10330] net_ratelimit: 175 callbacks suppressed [ 151.962813][T10336] FAULT_INJECTION: forcing a failure. [ 151.962813][T10336] name failslab, interval 1, probability 0, space 0, times 0 [ 151.962830][T10336] CPU: 0 UID: 0 PID: 10336 Comm: syz.8.1570 Not tainted syzkaller #0 PREEMPT [ 151.962840][T10336] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 151.962854][T10336] Call trace: [ 151.962857][T10336] show_stack+0x2c/0x3c (C) [ 151.962876][T10336] __dump_stack+0x30/0x40 [ 151.962888][T10336] dump_stack_lvl+0xd8/0x12c [ 151.962900][T10336] dump_stack+0x1c/0x28 [ 151.962911][T10336] should_fail_ex+0x418/0x58c [ 151.962924][T10336] should_failslab+0xc4/0x120 [ 151.962937][T10336] __kmalloc_cache_node_noprof+0x98/0x618 [ 151.962946][T10336] __get_vm_area_node+0x188/0x32c [ 151.962956][T10336] __vmalloc_node_range_noprof+0x2a0/0xe9c [ 151.962966][T10336] __vmalloc_node_noprof+0xec/0x14c [ 151.962975][T10336] __vmalloc_noprof+0x64/0x8c [ 151.962992][T10336] bpf_prog_calc_tag+0x68/0x314 [ 151.963002][T10336] check_and_resolve_insns+0xb4/0x1bb4 [ 151.963015][T10336] bpf_check+0x19f0/0x243c [ 151.963026][T10336] bpf_prog_load+0xf4c/0x1554 [ 151.963036][T10336] __sys_bpf+0x7d4/0x82c [ 151.963045][T10336] __arm64_sys_bpf+0xd0/0xec [ 151.963053][T10336] invoke_syscall+0x98/0x244 [ 151.963066][T10336] el0_svc_common+0xec/0x23c [ 151.963078][T10336] do_el0_svc+0x4c/0x5c [ 151.963089][T10336] el0_svc+0x60/0x1d8 [ 151.963101][T10336] el0t_64_sync_handler+0x44/0x104 [ 151.963111][T10336] el0t_64_sync+0x198/0x19c [ 151.963196][T10336] syz.8.1570: vmalloc error: size 88, align 0x1, vm_struct allocation failed, mode:0x400cc0(GFP_KERNEL_ACCOUNT), nodemask=(null),cpuset=syz8,mems_allowed=0 [ 151.963260][T10336] CPU: 0 UID: 0 PID: 10336 Comm: syz.8.1570 Not tainted syzkaller #0 PREEMPT [ 151.963269][T10336] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 151.963286][T10336] Call trace: [ 151.963288][T10336] show_stack+0x2c/0x3c (C) [ 151.963302][T10336] __dump_stack+0x30/0x40 [ 151.963314][T10336] dump_stack_lvl+0xd8/0x12c [ 151.963326][T10336] dump_stack+0x1c/0x28 [ 151.963337][T10336] warn_alloc+0x1c4/0x1d8 [ 151.963350][T10336] __vmalloc_node_range_noprof+0x2c4/0xe9c [ 151.963360][T10336] __vmalloc_node_noprof+0xec/0x14c [ 151.963370][T10336] __vmalloc_noprof+0x64/0x8c [ 151.963379][T10336] bpf_prog_calc_tag+0x68/0x314 [ 151.963388][T10336] check_and_resolve_insns+0xb4/0x1bb4 [ 151.963401][T10336] bpf_check+0x19f0/0x243c [ 151.963413][T10336] bpf_prog_load+0xf4c/0x1554 [ 151.963422][T10336] __sys_bpf+0x7d4/0x82c [ 151.963431][T10336] __arm64_sys_bpf+0xd0/0xec [ 151.963440][T10336] invoke_syscall+0x98/0x244 [ 151.963452][T10336] el0_svc_common+0xec/0x23c [ 151.963464][T10336] do_el0_svc+0x4c/0x5c [ 151.963475][T10336] el0_svc+0x60/0x1d8 [ 151.963486][T10336] el0t_64_sync_handler+0x44/0x104 [ 151.963496][T10336] el0t_64_sync+0x198/0x19c [ 151.963584][T10336] Mem-Info: [ 151.963593][T10336] active_anon:12 inactive_anon:12226 isolated_anon:0 [ 151.963593][T10336] active_file:2971 inactive_file:2362 isolated_file:0 [ 151.963593][T10336] unevictable:768 dirty:554 writeback:0 [ 151.963593][T10336] slab_reclaimable:9861 slab_unreclaimable:95629 [ 151.963593][T10336] mapped:36871 shmem:6682 pagetables:1424 [ 151.963593][T10336] sec_pagetables:0 bounce:0 [ 151.963593][T10336] kernel_misc_reclaimable:0 [ 151.963593][T10336] free:1467042 free_pcp:18250 free_cma:7616 [ 151.963620][T10336] Node 0 active_anon:48kB inactive_anon:48904kB active_file:11884kB inactive_file:9448kB unevictable:3072kB isolated(anon):0kB isolated(file):0kB mapped:147484kB dirty:2216kB writeback:0kB shmem:26728kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:10716kB pagetables:5696kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 151.963644][T10336] Node 0 DMA free:3077888kB boost:0kB min:20356kB low:25444kB high:30532kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3145728kB managed:3080192kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:30464kB [ 151.963669][T10336] lowmem_reserve[]: 0 0 3652 3652 3652 [ 151.963688][T10336] Node 0 Normal free:2790280kB boost:0kB min:24696kB low:30868kB high:37040kB reserved_highatomic:0kB free_highatomic:0kB active_anon:48kB inactive_anon:48904kB active_file:11884kB inactive_file:9448kB unevictable:3072kB writepending:2216kB zspages:0kB present:5242880kB managed:3740016kB mlocked:0kB bounce:0kB free_pcp:73000kB local_pcp:40784kB free_cma:0kB [ 151.963714][T10336] lowmem_reserve[]: 0 0 0 0 0 [ 151.963732][T10336] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 1*256kB (C) 1*512kB (C) 1*1024kB (C) 0*2048kB 751*4096kB (MC) = 3077888kB [ 151.963793][T10336] Node 0 Normal: 31*4kB (U) 39*8kB (U) 185*16kB (UME) 252*32kB (UM) 259*64kB (UM) 242*128kB (UME) 147*256kB (UM) 77*512kB (UM) 38*1024kB (UM) 27*2048kB (UME) 625*4096kB (UM) = 2790276kB [ 151.963874][T10336] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 151.963881][T10336] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=32768kB [ 151.963888][T10336] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 151.963895][T10336] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=64kB [ 151.963902][T10336] 12009 total pagecache pages [ 151.963906][T10336] 0 pages in swap cache [ 151.963910][T10336] Free swap = 124996kB [ 151.963914][T10336] Total swap = 124996kB [ 151.963918][T10336] 2097152 pages RAM [ 151.963921][T10336] 0 pages HighMem/MovableOnly [ 151.963925][T10336] 392100 pages reserved [ 151.963928][T10336] 8192 pages cma reserved [ 151.963932][T10336] 2 pages hwpoisoned [ 152.153947][T10342] netlink: 20 bytes leftover after parsing attributes in process `syz.8.1572'. [ 152.153968][T10342] lo: entered allmulticast mode [ 152.205186][T10346] Injecting memory failure for pfn 0x2193cf at process virtual address 0x20ffd000 [ 152.205223][T10346] Memory failure: 0x2193cf: Sending SIGBUS to syz.8.1573:10346 due to hardware memory corruption [ 152.205242][T10346] Memory failure: 0x2193cf: recovery action for already poisoned page: Failed [ 152.358537][T10347] loop9: detected capacity change from 0 to 2048 [ 153.171621][ T4722] Bluetooth: hci3: Opcode 0x206a failed: -110 [ 153.171652][ T4722] Bluetooth: hci3: command 0x2016 tx timeout [ 153.205042][T10347] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 153.298121][T10347] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 153.298386][T10347] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 153.441902][T10358] loop8: detected capacity change from 0 to 512 [ 153.442714][T10356] xt_limit: Overflow, try lower: 4294967290/0 [ 153.447184][T10356] loop1: detected capacity change from 0 to 512 [ 153.455456][T10358] EXT4-fs: Ignoring removed mblk_io_submit option [ 153.457636][T10358] EXT4-fs (loop8): Test dummy encryption mode enabled [ 153.457654][T10358] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 153.469069][T10358] EXT4-fs error (device loop8): ext4_orphan_get:1429: comm syz.8.1576: bad orphan inode 131083 [ 153.469090][T10358] loop8: lost filesystem error report for type 5 error -117 [ 153.470130][T10356] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 153.470928][T10358] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 153.497805][T10358] overlayfs: failed to resolve './bus': -2 [ 153.549396][ T4707] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 153.558091][ T7630] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 153.616274][ T4723] Bluetooth: hci1: command 0x2016 tx timeout [ 153.683299][T10369] loop8: detected capacity change from 0 to 256 [ 153.992015][T10373] block2mtd: error: cannot open device /dev/zram0 [ 154.176978][T10388] Injecting memory failure for pfn 0x2193cf at process virtual address 0x20ffd000 [ 154.177075][T10388] Memory failure: 0x2193cf: Sending SIGBUS to syz.1.1587:10388 due to hardware memory corruption [ 154.177098][T10388] Memory failure: 0x2193cf: recovery action for already poisoned page: Failed [ 154.216576][ T30] kauditd_printk_skb: 256 callbacks suppressed [ 154.216584][ T30] audit: type=1326 audit(154.190:2799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10387 comm="syz.1.1587" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbb779368 code=0x7ffc0000 [ 154.216665][ T30] audit: type=1326 audit(154.190:2800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10387 comm="syz.1.1587" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbb779368 code=0x7ffc0000 [ 154.219167][ T30] audit: type=1326 audit(154.190:2801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10387 comm="syz.1.1587" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbb779368 code=0x7ffc0000 [ 154.219256][ T30] audit: type=1326 audit(154.190:2802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10387 comm="syz.1.1587" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbb779368 code=0x7ffc0000 [ 154.220753][ T30] audit: type=1326 audit(154.190:2803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10387 comm="syz.1.1587" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=56 compat=0 ip=0xffffbb779368 code=0x7ffc0000 [ 154.220935][ T30] audit: type=1326 audit(154.190:2804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10387 comm="syz.1.1587" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbb779368 code=0x7ffc0000 [ 154.221020][ T30] audit: type=1326 audit(154.190:2805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10387 comm="syz.1.1587" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbb779368 code=0x7ffc0000 [ 154.221194][ T30] audit: type=1326 audit(154.190:2806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10387 comm="syz.1.1587" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbb779368 code=0x7ffc0000 [ 154.221274][ T30] audit: type=1326 audit(154.190:2807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10387 comm="syz.1.1587" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbb779368 code=0x7ffc0000 [ 154.221350][ T30] audit: type=1326 audit(154.190:2808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10387 comm="syz.1.1587" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=29 compat=0 ip=0xffffbb779368 code=0x7ffc0000 [ 154.319569][T10392] loop5: detected capacity change from 0 to 4096 [ 154.322460][T10392] EXT4-fs (loop5): Test dummy encryption mode enabled [ 154.329603][T10392] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 154.395057][ T5079] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 154.513054][T10412] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 154.970845][T10417] block2mtd: error: cannot open device /dev/zram0 [ 155.006232][T10422] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1599'. [ 155.109987][ T9507] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 155.159996][T10430] loop9: detected capacity change from 0 to 4096 [ 155.163244][T10430] EXT4-fs (loop9): Test dummy encryption mode enabled [ 155.170297][T10430] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 155.236324][ T9507] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 155.250167][T10428] netlink: 'syz.2.1602': attribute type 12 has an invalid length. [ 155.250188][T10428] netlink: 'syz.2.1602': attribute type 29 has an invalid length. [ 155.250198][T10428] netlink: 148 bytes leftover after parsing attributes in process `syz.2.1602'. [ 155.555062][ C0] vcan0: j1939_tp_rxtimer: 0x0000000055d18908: rx timeout, send abort [ 155.596825][T10444] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 155.596958][T10444] vhci_hcd vhci_hcd.2: invalid port number 96 [ 155.596981][T10444] vhci_hcd vhci_hcd.2: default hub control req: 0006 v000d i0060 l0 [ 156.055142][ C0] vcan0: j1939_tp_rxtimer: 0x00000000ac1ff525: rx timeout, send abort [ 156.057553][ C0] vcan0: j1939_tp_rxtimer: 0x0000000055d18908: abort rx timeout. Force session deactivation [ 156.076495][T10452] xt_limit: Overflow, try lower: 4294967290/0 [ 156.078894][T10452] loop5: detected capacity change from 0 to 512 [ 156.100827][T10452] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 156.172328][ T5079] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 156.213640][T10463] netlink: 'syz.8.1613': attribute type 1 has an invalid length. [ 156.234570][T10463] 8021q: adding VLAN 0 to HW filter on device bond2 [ 156.244271][T10463] bond1: (slave dummy0): Releasing active interface [ 156.269705][T10463] bond2: (slave dummy0): making interface the new active one [ 156.270372][T10463] bond2: (slave dummy0): Enslaving as an active interface with an up link [ 156.281491][T10473] loop5: detected capacity change from 0 to 4096 [ 156.289714][T10473] EXT4-fs (loop5): Test dummy encryption mode enabled [ 156.301811][T10473] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 156.350873][ T5079] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 156.400221][T10481] loop5: detected capacity change from 0 to 8192 [ 156.442746][T10481] syz.5.1618: attempt to access beyond end of device [ 156.442746][T10481] loop5: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 156.442792][T10481] Buffer I/O error on dev loop5, logical block 57847, async page read [ 156.443953][T10481] syz.5.1618: attempt to access beyond end of device [ 156.443953][T10481] loop5: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 156.443971][T10481] Buffer I/O error on dev loop5, logical block 57847, async page read [ 156.444004][T10481] syz.5.1618: attempt to access beyond end of device [ 156.444004][T10481] loop5: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 156.444018][T10481] Buffer I/O error on dev loop5, logical block 57847, async page read [ 156.444040][T10481] syz.5.1618: attempt to access beyond end of device [ 156.444040][T10481] loop5: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 156.444053][T10481] Buffer I/O error on dev loop5, logical block 57847, async page read [ 156.444071][T10481] syz.5.1618: attempt to access beyond end of device [ 156.444071][T10481] loop5: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 156.444082][T10481] Buffer I/O error on dev loop5, logical block 57847, async page read [ 156.444100][T10481] syz.5.1618: attempt to access beyond end of device [ 156.444100][T10481] loop5: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 156.444110][T10481] Buffer I/O error on dev loop5, logical block 57847, async page read [ 156.444128][T10481] syz.5.1618: attempt to access beyond end of device [ 156.444128][T10481] loop5: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 156.444138][T10481] Buffer I/O error on dev loop5, logical block 57847, async page read [ 156.444155][T10481] syz.5.1618: attempt to access beyond end of device [ 156.444155][T10481] loop5: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 156.444165][T10481] Buffer I/O error on dev loop5, logical block 57847, async page read [ 156.444181][T10481] syz.5.1618: attempt to access beyond end of device [ 156.444181][T10481] loop5: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 156.444192][T10481] Buffer I/O error on dev loop5, logical block 57847, async page read [ 156.444208][T10481] syz.5.1618: attempt to access beyond end of device [ 156.444208][T10481] loop5: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 156.444218][T10481] Buffer I/O error on dev loop5, logical block 57847, async page read [ 156.555190][ C0] vcan0: j1939_tp_rxtimer: 0x00000000ac1ff525: abort rx timeout. Force session deactivation [ 157.146232][T10492] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 157.146252][T10492] vhci_hcd vhci_hcd.2: invalid port number 96 [ 157.146262][T10492] vhci_hcd vhci_hcd.2: default hub control req: 0006 v000d i0060 l0 [ 157.215749][ C0] net_ratelimit: 438 callbacks suppressed [ 157.280782][T10494] xt_limit: Overflow, try lower: 4294967290/0 [ 157.282880][T10494] loop2: detected capacity change from 0 to 512 [ 157.306836][T10494] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 157.367209][ T4710] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 157.836711][T10512] loop9: detected capacity change from 0 to 4096 [ 157.842443][T10512] EXT4-fs (loop9): Test dummy encryption mode enabled [ 157.844869][T10512] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 157.889005][ T9507] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 157.914751][T10510] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 157.915103][T10510] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 157.939059][T10510] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 157.947501][T10516] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 157.947515][T10516] EXT4-fs (loop9): couldn't mount as ext3 due to feature incompatibilities [ 158.165584][T10521] vfat: Unknown parameter 'ÿÿÿÿÿÿÿÿÿÿÿÿ00000000000000000000004' [ 158.738579][ T4716] Bluetooth: hci3: command 0x2016 tx timeout [ 158.890782][ T5079] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 158.982156][T10535] xt_limit: Overflow, try lower: 4294967290/0 [ 158.984379][T10535] set_capacity_and_notify: 3 callbacks suppressed [ 158.984386][T10535] loop8: detected capacity change from 0 to 512 [ 159.043475][T10535] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 159.089939][ T7630] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 159.245516][T10550] loop8: detected capacity change from 0 to 4096 [ 159.250656][T10550] EXT4-fs (loop8): Test dummy encryption mode enabled [ 159.253783][T10550] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 159.382908][T10557] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 159.383001][T10557] vhci_hcd vhci_hcd.2: invalid port number 96 [ 159.383024][T10557] vhci_hcd vhci_hcd.2: default hub control req: 0006 v000d i0060 l0 [ 159.468192][ T7630] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 159.475840][T10561] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1643'. [ 159.524078][T10567] 9p: Bad value for 'rfdno' [ 159.537601][T10567] loop8: detected capacity change from 0 to 4096 [ 159.543479][T10567] EXT4-fs: Mount option(s) incompatible with ext2 [ 159.878854][T10571] loop8: detected capacity change from 0 to 1024 [ 159.894772][T10571] __quota_error: 22 callbacks suppressed [ 159.894786][T10571] Quota error (device loop8): do_check_range: Getting block 64 out of range 1-5 [ 159.894808][T10571] Quota error (device loop8): qtree_read_dquot: Can't read quota structure for id 0 [ 159.894821][T10571] EXT4-fs error (device loop8): ext4_acquire_dquot:7069: comm syz.8.1647: Failed to acquire dquot type 0 [ 159.894834][T10571] loop8: lost filesystem error report for type 5 error -117 [ 159.895371][T10571] EXT4-fs error (device loop8): mb_free_blocks:2049: group 0, inode 13: block 160:freeing already freed block (bit 10); block bitmap corrupt. [ 159.896021][ C1] EXT4-fs (loop8): error count since last fsck: 1 [ 159.896034][ C1] EXT4-fs (loop8): initial error at time 159: ext4_acquire_dquot:7069 [ 159.896048][ C1] EXT4-fs (loop8): last error at time 159: ext4_acquire_dquot:7069 [ 159.918784][T10571] EXT4-fs (loop8): 1 truncate cleaned up [ 159.919284][T10571] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 159.924681][T10571] Quota error (device loop8): do_check_range: Getting block 64 out of range 1-5 [ 159.924729][T10571] Quota error (device loop8): qtree_read_dquot: Can't read quota structure for id 0 [ 159.924739][T10571] EXT4-fs error (device loop8): ext4_acquire_dquot:7069: comm syz.8.1647: Failed to acquire dquot type 0 [ 159.951392][ T7630] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 159.990864][T10575] misc userio: The device must be registered before sending interrupts [ 160.043726][T10583] loop2: detected capacity change from 0 to 128 [ 160.063187][T10583] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 160.064534][T10585] comedi: No check for data length of config insn id 6 is implemented [ 160.064542][T10585] comedi: Add a check to check_insn_config_length in drivers/comedi/comedi_fops.c [ 160.064549][T10585] comedi: Assuming n=15 is correct [ 160.072969][T10583] syz.2.1652 (pid 10583) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 160.074238][T10588] loop5: detected capacity change from 0 to 512 [ 160.082584][T10588] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 160.099622][T10588] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 160.107689][ T4710] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 160.119818][T10593] loop8: detected capacity change from 0 to 4096 [ 160.154252][T10595] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1656'. [ 160.186266][T10593] EXT4-fs (loop8): Test dummy encryption mode enabled [ 160.191647][T10593] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 160.288855][ T7630] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 160.685077][ T5079] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 160.823072][T10616] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 160.823096][T10616] vhci_hcd vhci_hcd.2: invalid port number 96 [ 160.823109][T10616] vhci_hcd vhci_hcd.2: default hub control req: 0006 v000d i0060 l0 [ 161.053765][T10637] overlayfs: failed to resolve './file0/file1': -2 [ 161.238281][T10654] loop9: detected capacity change from 0 to 7 [ 161.253794][T10654] Dev loop9: unable to read RDB block 7 [ 161.253817][T10654] loop9: unable to read partition table [ 161.253885][T10654] loop9: partition table beyond EOD, truncated [ 161.253905][T10654] loop_reread_partitions: partition scan of loop9 (úù) failed (rc=-5) [ 161.258553][ C0] invalid error, dev loop9, sector 0 op 0x1:(WRITE) flags 0x800800 phys_seg 1 prio class 2 [ 161.259471][ C0] invalid error, dev loop9, sector 0 op 0x1:(WRITE) flags 0x800800 phys_seg 1 prio class 2 [ 161.295376][T10661] xt_limit: Overflow, try lower: 4294967290/0 [ 161.297743][T10661] loop8: detected capacity change from 0 to 512 [ 161.340085][T10661] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 161.371270][ T7630] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.402686][T10671] tipc: Started in network mode [ 161.402708][T10671] tipc: Node identity aaaaaaaaaaaa, cluster identity 4711 [ 161.402929][T10671] tipc: Enabled bearer , priority 0 [ 162.126356][T10709] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 162.126381][T10709] vhci_hcd vhci_hcd.2: invalid port number 96 [ 162.126392][T10709] vhci_hcd vhci_hcd.2: default hub control req: 0006 v000d i0060 l0 [ 162.194968][T10719] loop2: detected capacity change from 0 to 4096 [ 162.199554][T10719] EXT4-fs (loop2): Test dummy encryption mode enabled [ 162.204068][T10719] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 162.255754][ C0] net_ratelimit: 150 callbacks suppressed [ 162.397162][T10730] EXT4-fs (loop8): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869) [ 162.397227][T10730] EXT4-fs (loop8): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 162.397737][T10730] EXT4-fs error (device loop8): ext4_get_journal_inode:5927: inode #32: comm syz.8.1683: iget: special inode unallocated [ 162.397751][T10730] loop8: lost file I/O error report for ino 32 type 5 pos 0x0 len 0x0 error -117 [ 162.398161][T10730] EXT4-fs (loop8): Remounting filesystem read-only [ 162.398208][T10730] EXT4-fs (loop8): no journal found [ 162.398215][T10730] EXT4-fs (loop8): can't get journal size [ 162.398852][T10730] EXT4-fs (loop8): filesystem is read-only [ 162.402108][T10730] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 162.424285][ T8015] tipc: Node number set to 43690 [ 162.584564][T10735] EXT4-fs (loop8): shut down requested (2) [ 163.450431][ T7630] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.471538][ T4710] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.530056][T10752] Injecting memory failure for pfn 0x2193cf at process virtual address 0x20ffd000 [ 163.530097][T10752] Memory failure: 0x2193cf: Sending SIGBUS to syz.2.1692:10752 due to hardware memory corruption [ 163.530118][T10752] Memory failure: 0x2193cf: recovery action for already poisoned page: Failed [ 163.548814][ T30] audit: type=1326 audit(163.520:2831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10751 comm="syz.2.1692" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb5d79368 code=0x7ffc0000 [ 163.548900][ T30] audit: type=1326 audit(163.520:2832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10751 comm="syz.2.1692" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb5d79368 code=0x7ffc0000 [ 163.550100][ T30] audit: type=1326 audit(163.520:2833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10751 comm="syz.2.1692" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb5d79368 code=0x7ffc0000 [ 163.550153][ T30] audit: type=1326 audit(163.520:2834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10751 comm="syz.2.1692" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb5d79368 code=0x7ffc0000 [ 163.550523][ T30] audit: type=1326 audit(163.520:2835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10751 comm="syz.2.1692" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=56 compat=0 ip=0xffffb5d79368 code=0x7ffc0000 [ 163.550675][ T30] audit: type=1326 audit(163.520:2836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10751 comm="syz.2.1692" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb5d79368 code=0x7ffc0000 [ 163.578866][T10746] Bluetooth: MGMT ver 1.23 [ 163.620267][T10755] xt_limit: Overflow, try lower: 4294967290/0 [ 163.650154][T10757] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 163.793876][T10771] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 163.793897][T10771] vhci_hcd vhci_hcd.2: invalid port number 96 [ 163.793907][T10771] vhci_hcd vhci_hcd.2: default hub control req: 0006 v000d i0060 l0 [ 164.464911][ T4710] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.570425][T10785] netlink: 28 bytes leftover after parsing attributes in process `syz.8.1702'. [ 164.589467][T10787] 9p: Bad value for 'rfdno' [ 164.602104][T10793] set_capacity_and_notify: 3 callbacks suppressed [ 164.602112][T10793] loop8: detected capacity change from 0 to 512 [ 164.613113][T10793] EXT4-fs error (device loop8): ext4_iget_extra_inode:5210: inode #15: comm syz.8.1704: corrupted in-inode xattr: invalid ea_ino [ 164.613139][T10793] loop8: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 164.613279][T10793] EXT4-fs error (device loop8): ext4_orphan_get:1408: comm syz.8.1704: couldn't read orphan inode 15 (err -117) [ 164.613294][T10793] loop8: lost filesystem error report for type 5 error -117 [ 164.613820][T10793] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 164.619207][T10787] loop5: detected capacity change from 0 to 4096 [ 164.628846][T10787] EXT4-fs: Mount option(s) incompatible with ext2 [ 164.816585][T10800] infiniband syz2: set down [ 164.816600][T10800] infiniband syz2: added ipvlan0 [ 164.839926][T10800] RDS/IB: syz2: added [ 164.840040][T10800] smc: adding ib device syz2 with port count 1 [ 164.840073][T10800] smc: ib device syz2 port 1 has no pnetid [ 164.872502][T10818] loop2: detected capacity change from 0 to 128 [ 165.362030][T10844] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 165.362053][T10844] vhci_hcd vhci_hcd.2: invalid port number 96 [ 165.362066][T10844] vhci_hcd vhci_hcd.2: default hub control req: 0006 v000d i0060 l0 [ 165.472234][ T7630] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.531781][T10857] FAULT_INJECTION: forcing a failure. [ 165.531781][T10857] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 165.531799][T10857] CPU: 0 UID: 0 PID: 10857 Comm: syz.8.1716 Not tainted syzkaller #0 PREEMPT [ 165.531811][T10857] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 165.531827][T10857] Call trace: [ 165.531830][T10857] show_stack+0x2c/0x3c (C) [ 165.531849][T10857] __dump_stack+0x30/0x40 [ 165.531861][T10857] dump_stack_lvl+0xd8/0x12c [ 165.531872][T10857] dump_stack+0x1c/0x28 [ 165.531883][T10857] should_fail_ex+0x418/0x58c [ 165.531896][T10857] should_fail+0x14/0x24 [ 165.531911][T10857] should_fail_usercopy+0x20/0x30 [ 165.531923][T10857] _inline_copy_from_user+0x3c/0x174 [ 165.531934][T10857] get_user_ifreq+0x6c/0x16c [ 165.531944][T10857] sock_do_ioctl+0x148/0x254 [ 165.531955][T10857] sock_ioctl+0x55c/0x7ec [ 165.531965][T10857] __arm64_sys_ioctl+0x154/0x1cc [ 165.531985][T10857] invoke_syscall+0x98/0x244 [ 165.531998][T10857] el0_svc_common+0xec/0x23c [ 165.532010][T10857] do_el0_svc+0x4c/0x5c [ 165.532021][T10857] el0_svc+0x60/0x1d8 [ 165.532032][T10857] el0t_64_sync_handler+0x44/0x104 [ 165.532042][T10857] el0t_64_sync+0x198/0x19c [ 165.534429][T10857] loop8: detected capacity change from 0 to 256 [ 165.678182][ T4803] kernel write not supported for file bpf-map (pid: 4803 comm: kworker/0:6) [ 165.692096][T10861] loop8: detected capacity change from 0 to 256 [ 165.693498][T10861] FAT-fs (loop8): bogus sectors per cluster 223 [ 165.693508][T10861] FAT-fs (loop8): Can't find a valid FAT filesystem [ 165.699137][T10861] ================================================================== [ 165.699145][T10861] BUG: KASAN: slab-out-of-bounds in string_nocheck+0xd8/0x140 [ 165.699160][T10861] Read of size 1 at addr ffff0000ef98029c by task syz.8.1718/10861 [ 165.699167][T10861] [ 165.699172][T10861] CPU: 1 UID: 0 PID: 10861 Comm: syz.8.1718 Not tainted syzkaller #0 PREEMPT [ 165.699182][T10861] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 165.699195][T10861] Call trace: [ 165.699197][T10861] show_stack+0x2c/0x3c (C) [ 165.699213][T10861] __dump_stack+0x30/0x40 [ 165.699225][T10861] dump_stack_lvl+0xd8/0x12c [ 165.699236][T10861] print_address_description+0xb0/0x238 [ 165.699245][T10861] print_report+0x68/0x84 [ 165.699253][T10861] kasan_report+0x8c/0xc4 [ 165.699262][T10861] __asan_report_load1_noabort+0x20/0x2c [ 165.699273][T10861] string_nocheck+0xd8/0x140 [ 165.699281][T10861] string+0x8c/0xc8 [ 165.699296][T10861] vsnprintf+0x880/0xd10 [ 165.699309][T10861] pointer+0x5e8/0x6b4 [ 165.699321][T10861] vsnprintf+0x618/0xd10 [ 165.699333][T10861] vprintk_store+0x344/0xb94 [ 165.699345][T10861] vprintk_emit+0x1bc/0x514 [ 165.699356][T10861] vprintk_default+0x54/0x80 [ 165.699367][T10861] vprintk+0x9c/0x13c [ 165.699378][T10861] _printk+0xe0/0x130 [ 165.699390][T10861] __dynamic_pr_debug+0x148/0x1e4 [ 165.699404][T10861] nfc_llcp_get_sdp_ssap+0x350/0x3fc [ 165.699414][T10861] llcp_sock_bind+0x2e0/0x58c [ 165.699423][T10861] __sys_bind+0x1c4/0x268 [ 165.699434][T10861] __arm64_sys_bind+0x84/0x9c [ 165.699444][T10861] invoke_syscall+0x98/0x244 [ 165.699456][T10861] el0_svc_common+0xec/0x23c [ 165.699467][T10861] do_el0_svc+0x4c/0x5c [ 165.699479][T10861] el0_svc+0x60/0x1d8 [ 165.699489][T10861] el0t_64_sync_handler+0x44/0x104 [ 165.699499][T10861] el0t_64_sync+0x198/0x19c [ 165.699508][T10861] [ 165.699510][T10861] Allocated by task 10861: [ 165.699514][T10861] kasan_save_track+0x40/0x78 [ 165.699521][T10861] kasan_save_alloc_info+0x40/0x50 [ 165.699530][T10861] __kasan_kmalloc+0x9c/0xb4 [ 165.699537][T10861] __kmalloc_node_track_caller_noprof+0x440/0x6e0 [ 165.699545][T10861] kmemdup_noprof+0x44/0x8c [ 165.699552][T10861] llcp_sock_bind+0x2b0/0x58c [ 165.699561][T10861] __sys_bind+0x1c4/0x268 [ 165.699568][T10861] __arm64_sys_bind+0x84/0x9c [ 165.699575][T10861] invoke_syscall+0x98/0x244 [ 165.699585][T10861] el0_svc_common+0xec/0x23c [ 165.699595][T10861] do_el0_svc+0x4c/0x5c [ 165.699605][T10861] el0_svc+0x60/0x1d8 [ 165.699613][T10861] el0t_64_sync_handler+0x44/0x104 [ 165.699622][T10861] el0t_64_sync+0x198/0x19c [ 165.699628][T10861] [ 165.699630][T10861] The buggy address belongs to the object at ffff0000ef980280 [ 165.699630][T10861] which belongs to the cache kmalloc-32 of size 32 [ 165.699637][T10861] The buggy address is located 0 bytes to the right of [ 165.699637][T10861] allocated 28-byte region [ffff0000ef980280, ffff0000ef98029c) [ 165.699645][T10861] [ 165.699648][T10861] The buggy address belongs to the physical page: [ 165.699652][T10861] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x12f980 [ 165.699660][T10861] flags: 0x5ffc00000000000(node=0|zone=2|lastcpupid=0x7ff) [ 165.699668][T10861] page_type: f5(slab) [ 165.699676][T10861] raw: 05ffc00000000000 ffff0000c0001780 dead000000000100 dead000000000122 [ 165.699683][T10861] raw: 0000000000000000 0000000000400040 00000000f5000000 0000000000000000 [ 165.699688][T10861] page dumped because: kasan: bad access detected [ 165.699691][T10861] [ 165.699693][T10861] Memory state around the buggy address: [ 165.699697][T10861] ffff0000ef980180: 00 00 00 fc fc fc fc fc 00 00 00 00 fc fc fc fc [ 165.699703][T10861] ffff0000ef980200: 00 00 00 fc fc fc fc fc 00 00 00 00 fc fc fc fc [ 165.699708][T10861] >ffff0000ef980280: 00 00 00 04 fc fc fc fc fa fb fb fb fc fc fc fc [ 165.699713][T10861] ^ [ 165.699717][T10861] ffff0000ef980300: 00 00 00 00 fc fc fc fc 00 00 00 00 fc fc fc fc [ 165.699723][T10861] ffff0000ef980380: 00 00 00 00 fc fc fc fc 00 00 00 00 fc fc fc fc [ 165.699727][T10861] ================================================================== [ 165.699730][T10861] Disabling lock debugging due to kernel taint [ 166.185888][ T4384] atkbd serio1: keyboard reset failed on [ 167.535789][ T91] net_ratelimit: 104 callbacks suppressed [ 172.655795][ C1] net_ratelimit: 250 callbacks suppressed