last executing test programs: 46.894916755s ago: executing program 3 (id=44): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000040)="2e00000010008108040f80ecdb4cb92e0a480e000f000000e8bd6efb250314000e000100240248ff050005001200", 0x2e}], 0x1}, 0x40880) 46.871754581s ago: executing program 3 (id=45): syz_open_dev$tty20(0xc, 0x4, 0x1) socket$inet_udp(0x2, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = dup(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000900)='./config/usb_gadget/g1/functions/rndis.usb0\x00', 0x1ff) r4 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write$FUSE_IOCTL(r4, 0x0, 0x0) write$UHID_INPUT(r0, &(0x7f0000002b40)={0xe, {"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", 0x942}}, 0x1006) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r5) syz_mount_image$fuse(0x0, &(0x7f0000000200)='./proc\x00', 0x4, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000000c0)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/sys/net/ipv6/conf/all/forwarding\x00', 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) 46.01913089s ago: executing program 32 (id=51): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="54000000020601080000000000000000000700000c00078008000640000000000500010006000000050005000a00000005000400000000000900020073797a31000000000d000300686173683a6e6574"], 0x54}, 0x1, 0x0, 0x0, 0x48000}, 0x0) 46.01490504s ago: executing program 3 (id=53): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x142, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000080)={'syzkaller0\x00', 0x1}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./proc/net/rpc/auth.rpcsec.context/channel\x00', 0x1, 0x0) write(r2, &(0x7f00000003c0)="3030303030303030302030203020ba9542ea50a01665674db5503ca02dd0067cae5e35d91a03a40485727ba156928efcf7aa5b873dfa5bc972708c143c24a391", 0x40) openat$incfs(r2, &(0x7f0000000100)='.log\x00', 0xa8500, 0x41) syz_emit_ethernet(0x0, 0x0, 0x0) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_HWPT_ALLOC$TEST(r3, 0x3b8a, &(0x7f0000000080)={0x28, 0x1, 0x0, 0x0, 0x0, 0x0, 0xdead, 0x0, 0x0}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'syzkaller0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@ipv4_newaddr={0x20, 0x14, 0x601, 0x70bd2d, 0x0, {0x23, 0x0, 0x0, 0x0, r4}, [@IFA_LOCAL={0x8, 0x2, @multicast2}]}, 0x20}}, 0x0) write$tun(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="000000f50400000007"], 0x11) 45.91561041s ago: executing program 3 (id=54): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x0, 0xee01}}, './file0\x00'}) write$UHID_CREATE2(r1, &(0x7f00000004c0)={0xb, {'syz0\x00', 'syz0\x00', 'syz0\x00', 0xff, 0xd, 0x7, 0x3, 0x7dcb, 0x1, "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"}}, 0x217) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000008850000007600000095"], &(0x7f00000001c0)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe468}, 0x94) bind$inet(0xffffffffffffffff, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x19, &(0x7f0000000180)=0x1f5, 0x4) r3 = socket$inet6(0xa, 0x802, 0x88) bind$inet6(r3, &(0x7f0000000100)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) setsockopt$inet6_udp_int(r3, 0x11, 0xb, &(0x7f00000000c0)=0x17, 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) setsockopt$inet6_udp_encap(r3, 0x11, 0x64, &(0x7f0000000080)=0x3, 0x4) syz_emit_ethernet(0x83, &(0x7f0000000840)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030486dd601b8b97004d88c19e9ace5ffb2e9fc603dd282100000002ff02000000000000000000000000000104004e200023b0"], 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000340)=@newtaction={0x64, 0x30, 0xffffffffffffffff, 0x0, 0x0, {}, [{0x50, 0x1, [@m_bpf={0x4c, 0x1, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x1, 0x0, 0x10000000, 0x5, 0x8}}, @TCA_ACT_BPF_FD={0x8, 0x5, r2}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x40000c4) syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000001040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000002, &(0x7f0000001140)={[{@rodir}, {@numtail}, {@rodir}, {@uni_xlate}, {@shortname_lower}, {@iocharset={'iocharset', 0x3d, 'cp737'}}, {@iocharset={'iocharset', 0x3d, 'iso8859-14'}}, {@fat=@codepage={'codepage', 0x3d, '936'}}, {@iocharset={'iocharset', 0x3d, 'cp869'}}, {@shortname_winnt}, {@shortname_winnt}, {@rodir}, {@utf8no}, {@fat=@fmask={'fmask', 0x3d, 0x7ff}}, {@fat=@flush}, {@shortname_winnt}]}, 0x81, 0x2d5, &(0x7f0000000b80)="$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") ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x101, 0x1, 0x3}) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x183042, 0x25) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0xa25bb844b084a7a1}, 0x3004080) 45.841397243s ago: executing program 33 (id=55): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4000) sendmsg$NFT_BATCH(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000002400000000000000000a60000000060a090400000000000000000200fffe0900020073797a32000000000900010073797a300000000034000480300001800a0001006d617463680000002000028005000300000000000b000100736f636b65740000080002"], 0x88}, 0x1, 0x0, 0x0, 0x24044800}, 0x0) 45.629573296s ago: executing program 3 (id=61): r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x0) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) (async) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/rescan\x00', 0x1, 0x0) write(r1, &(0x7f00000002c0)="3519", 0x2) (async) write(r1, &(0x7f00000002c0)="3519", 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x9, 0x9, &(0x7f0000000680)=@framed={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, [@func={0x85, 0x0, 0x1, 0x0, 0x5}, @call={0x85, 0x0, 0x0, 0xba}, @generic={0x5f, 0x0, 0x8}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x49}, 0x94) ioctl$TIOCGSOFTCAR(r0, 0x560f, 0x0) r2 = msgget$private(0x0, 0x200) statx(r1, &(0x7f0000000100)='./sys/bus/pci/rescan\x00', 0x6000, 0x100, &(0x7f0000000a40)) (async) statx(r1, &(0x7f0000000100)='./sys/bus/pci/rescan\x00', 0x6000, 0x100, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0, 0x0}) read$FUSE(r1, &(0x7f0000000b40)={0x2020}, 0x2020) (async) read$FUSE(r1, &(0x7f0000000b40)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000002b80)={0x0, 0x0}, &(0x7f0000002bc0)=0xc) r6 = getgid() r7 = syz_clone(0x0, 0x0, 0x1d, 0x0, 0x0, 0x0) syz_open_procfs(r7, &(0x7f00000001c0)='environ\x00') msgctl$IPC_SET(r2, 0x1, &(0x7f0000002c00)={{0x3, r3, r4, r5, r6, 0x93, 0x3}, 0x0, 0x0, 0x0, 0x40, 0x8, 0x7fffffffffffffff, 0x5, 0xb, 0x6, 0x2, 0x0, r7}) (async) msgctl$IPC_SET(r2, 0x1, &(0x7f0000002c00)={{0x3, r3, r4, r5, r6, 0x93, 0x3}, 0x0, 0x0, 0x0, 0x40, 0x8, 0x7fffffffffffffff, 0x5, 0xb, 0x6, 0x2, 0x0, r7}) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x12, 0x4, &(0x7f0000000000)=ANY=[@ANYRES16=r0], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x90900f, &(0x7f0000000080)={[{@usrquota}, {@dioread_lock}, {@inode_readahead_blks}, {@data_ordered}]}, 0x81, 0x61a, &(0x7f0000000400)="$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") 45.495801819s ago: executing program 3 (id=62): syz_open_dev$tty20(0xc, 0x4, 0x1) socket$inet_udp(0x2, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = dup(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000900)='./config/usb_gadget/g1/functions/rndis.usb0\x00', 0x1ff) r4 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write$FUSE_IOCTL(r4, 0x0, 0x0) write$UHID_INPUT(r0, &(0x7f0000002b40)={0xe, {"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", 0x942}}, 0x1006) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r5) syz_mount_image$fuse(0x0, &(0x7f0000000200)='./proc\x00', 0x4, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000000c0)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/sys/net/ipv6/conf/all/forwarding\x00', 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) 42.959169738s ago: executing program 34 (id=78): r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000001380)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0000030004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec0012100001400d0c0c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d7d18db747c88f6e518f0a947ee2b49e33538afa8af9234751", 0x89}], 0x1}, 0x20004000) 42.343372605s ago: executing program 2 (id=80): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000b, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r3, &(0x7f0000000880)=[{{&(0x7f0000000000)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000200)="81", 0x1}], 0x1}}, {{&(0x7f0000000300)={0x2, 0x4e22, @private=0xa010102}, 0x10, &(0x7f00000015c0)=[{&(0x7f0000000680)='\x00', 0x1}], 0x1}}, {{&(0x7f00000001c0)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000740)=[{&(0x7f0000000340)}], 0x1}}], 0x3, 0x4000000) close(r3) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000003c000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a300000000008000540000000104c0000000c0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000200003801c00008018000180140001"], 0xd0}}, 0x0) 41.297426277s ago: executing program 2 (id=83): r0 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) read$FUSE(r0, &(0x7f0000000100)={0x2020}, 0x2020) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000042, 0x0, 0x1, 0x0, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x40002, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5202) syz_mount_image$vfat(&(0x7f0000001140), &(0x7f00000010c0)='./file1\x00', 0x2a10446, &(0x7f0000002140)={[{@fat=@tz_utc}, {@uni_xlateno}, {@utf8}, {@utf8no}, {@numtail}, {@shortname_win95}, {@iocharset={'iocharset', 0x3d, 'cp869'}}, {@shortname_win95}, {@uni_xlate}, {@shortname_mixed}, {@iocharset={'iocharset', 0x3d, 'cp855'}}, {@shortname_mixed}, {@iocharset={'iocharset', 0x3d, 'macromanian'}}]}, 0x7f, 0x2ca, &(0x7f0000000900)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat(0xffffffffffffff9c, 0x0, 0x103a42, 0x32) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) r6 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ifreq(r6, 0x8948, &(0x7f00000000c0)={'vlan1\x00', @ifru_data=0x0}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000000c0)={'gretap0\x00'}) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000003700)={&(0x7f0000000440)={0x44, 0x0, 0x1, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME={0x24, 0x33, @probe_request={{{0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1}, {0x1c00}, @broadcast, @device_a, @initial, {0x6, 0x1}}, @val={0x0, 0x6, @default_ap_ssid}, @void, @void, @void, @void}}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x44}}, 0x28008004) 40.378625715s ago: executing program 2 (id=84): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='freezer.self_freezing\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) preadv(r0, &(0x7f00000015c0)=[{0x0}], 0x1, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x0, 0x1a, 0x0, 0x0, 0x7}, 0x28) io_uring_register$IORING_REGISTER_IOWQ_AFF(r0, 0x11, &(0x7f0000000140)="e017dd9428e680ec35157a8da920558b781d01b5eb984e455de3e1eb3f31c4eb33e0e2b09e73ea7e502c31edb9bbc26835e648523bfa0c626ee28e4d131c25b90d", 0x41) 40.300024334s ago: executing program 2 (id=85): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000140)={[{}, {@oldalloc}, {@resuid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@block_validity}, {@jqfmt_vfsv1}]}, 0x3, 0x447, &(0x7f0000000380)="$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") syz_mount_image$fuse(0x0, &(0x7f0000000100)='./bus\x00', 0x20020, 0x0, 0x1, 0x0, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000080)='./file0\x00', &(0x7f0000000340), 0x0, 0x0, 0x1) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000000)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@index_on}]}) 40.244008323s ago: executing program 2 (id=86): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a00", @ANYRES32=r2, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64"], 0x3c}}, 0x40000) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000200)=0x14) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@newlink={0x44, 0x10, 0x403, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINK={0x8, 0x5, r7}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x44}, 0x1, 0x0, 0x0, 0x600}, 0x0) 39.765844656s ago: executing program 2 (id=89): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) 39.435598908s ago: executing program 35 (id=89): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) 37.381581388s ago: executing program 6 (id=101): r0 = syz_open_procfs(0x0, &(0x7f00000011c0)='net/protocols\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000540)='loginuid\x00') write$FUSE_IOCTL(r1, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x3, 0x3, 0x0, &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) setsockopt(0xffffffffffffffff, 0x84, 0x81, 0x0, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfc409000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) mbind(&(0x7f0000aa0000/0x1000)=nil, 0x1000, 0x8003, &(0x7f0000000000)=0x83, 0x8, 0x6) listen(r3, 0x10001) mremap(&(0x7f00009d1000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f00002a0000/0x4000)=nil) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a300000000040000000030a01020000000000000000010000000900030073797a300000000014000480080001400000000108000240378b5ec30900010073797a310000000050000000060a010400000000000000000100000008000b40000000000900010073797a300000000028000480240001800a0001007175657565000000140002800600034000010000060001400017000014000000110001000000000000000a0000000000"], 0xd8}}, 0x0) preadv(r0, 0x0, 0x0, 0x73, 0x0) 36.478585992s ago: executing program 6 (id=102): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000cc0)={0x1f, 0x2, 0x3}, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x42, &(0x7f00000002c0)=0x2) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={0x0, 0x0}, 0x28) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=@newsa={0x144, 0x10, 0x633, 0x70bd2c, 0x0, {{@in6=@private2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x9}, {@in=@multicast2, 0xfffffffd, 0x32}, @in6=@loopback, {0x0, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0xfffffffffffffffc}, {0x0, 0x0, 0x0, 0x7}, {}, 0x2, 0x0, 0x2, 0x4}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @mark={0xc, 0x15, {0x350759, 0xc}}]}, 0x144}}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r4 = syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) socket$unix(0x1, 0x1, 0x0) 35.343131729s ago: executing program 6 (id=108): shmget(0x1, 0x1000, 0x2, &(0x7f0000ffe000/0x1000)=nil) connect$unix(0xffffffffffffffff, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e) r0 = openat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x1ae01, 0xcb) readv(r0, &(0x7f00000000c0), 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(r0, 0xc0406619, &(0x7f0000000100)={@desc={0x1, 0x0, @auto="e3fa269a1e986d80"}}) tkill(0x0, 0x27) newfstatat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x6000) mkdirat(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0xc6) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000240), 0x246000, 0x0) recvmsg$inet_nvme(r1, &(0x7f0000000600)={&(0x7f0000000280)=@nfc_llcp, 0x80, &(0x7f0000000580)=[{&(0x7f0000000300)=""/248, 0xf8}, {&(0x7f0000000400)=""/42, 0x2a}, {&(0x7f0000000440)=""/63, 0x3f}, {&(0x7f0000000480)=""/225, 0xe1}], 0x4, &(0x7f00000005c0)=""/23, 0x17}, 0x1) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r0, 0x4048587b, &(0x7f0000000880)={{r0, &(0x7f0000000640)='/dev/vcs\x00', 0x195800, &(0x7f0000000680)={@align=0x3, {0x2, 0xff, 0x6, 0x4}}, 0x0, &(0x7f00000006c0)={@_ha_fsid}, &(0x7f0000000700)=0x101}, 0x1, &(0x7f0000000840)=[{0x1, 0x3, &(0x7f0000000740)='\x00', &(0x7f0000000780)="280e06e4f6ab11701ee7d6d5259667618e834b3b5910c4f73426f9d525a502a217570c3e329d008c509dbce73ec6ebbb59dac05f1565cf63cfc3c1e6c2b19cb2d26f03147b2eabc17fdfd2b5dc8d8b2d880a18828d1c50459fe9a970d491a4a156cd598807ee4bf6e7813f7c33c77d6724c3bddb8af499329dc3630ffa5b68e19f74305767f69c66c354c25ff8", 0x8d, 0x10}]}) shutdown(r2, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3000000, 0x10, r0, 0x17dfd000) close(r0) fcntl$setlease(r1, 0x400, 0x1) ioctl$sock_SIOCBRDELBR(r2, 0x89a1, &(0x7f0000000900)='dvmrp1\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r3, 0x8983, &(0x7f0000000980)={0x8, 'team_slave_0\x00', {'macsec0\x00'}, 0xd2e}) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f00000009c0)={0xfffffffffffffff3, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x8, "80b44ef9de2fc8"}) ioctl$BTRFS_IOC_INO_LOOKUP(r4, 0xd0009412, &(0x7f00000019c0)={r5, 0x8}) r6 = syz_clone(0xa00, &(0x7f00000029c0)="ccd5e423a455be244bacbba4208c2d5d30de1dc88cd219b07ecddfcd9de3ff30545070ba2255cda12efddd5414dd0e5bc99d259841d2fb443e725d", 0x3b, &(0x7f0000002a00), &(0x7f0000002a40), &(0x7f0000002a80)="80e2fd2357ebfb4c3bde8619e7a5a4bb7c2b36dc35da3cff1459cd9138e9012de162cda80fa445a8c2dcb0aa14bfa8d6de0a37dc2c072c6b61") getsockopt$inet_sctp6_SCTP_ECN_SUPPORTED(r0, 0x84, 0x82, &(0x7f0000002ac0)={0x0, 0x7}, &(0x7f0000002b00)=0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f0000002b40)={r7, 0x5, 0x4}, &(0x7f0000002b80)=0x8) setsockopt$inet_sctp6_SCTP_INTERLEAVING_SUPPORTED(r1, 0x84, 0x7d, &(0x7f0000002bc0)={r7, 0xc7c}, 0x8) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000000, 0x40010, r1, 0x8611d000) ioctl$BLKTRACESTART(r1, 0x1274, 0x0) write$uinput_user_dev(r2, &(0x7f0000002c00)={'syz0\x00', {0x4, 0x0, 0xf6eb, 0x70}, 0x53, [0x8000, 0x100, 0x10, 0x401, 0x2f6, 0x1, 0x5, 0x7, 0x1, 0x40, 0x6, 0x0, 0xffffd91f, 0xffffffff, 0x655b, 0x2, 0x77, 0x404, 0xd, 0x0, 0x7, 0x4, 0x8, 0x7, 0x7, 0xe, 0x7, 0x80, 0x4, 0x4, 0x7, 0x5, 0x997, 0x6, 0x10001, 0x7f, 0x3, 0xffffffff, 0x9, 0x4, 0x81, 0x5, 0xffffffff, 0x8, 0x800, 0x7, 0xd, 0x5, 0x3, 0x10, 0xc45, 0x8, 0x8, 0x0, 0x200, 0x8, 0x3b2, 0x3, 0x4, 0x6, 0x6, 0x6, 0x3, 0x160], [0x2, 0x0, 0xa, 0xfff, 0x3, 0xff, 0x3, 0xe, 0x0, 0x80000000, 0x8001, 0x200, 0xfffffc01, 0xb39, 0x9, 0xf, 0x7, 0x9, 0x10, 0x8, 0xa, 0x1, 0x3, 0x10000, 0x3f96, 0xa, 0x4, 0xc, 0x3, 0x100, 0xfff, 0x2, 0x2, 0x5ba6, 0x9, 0x8000, 0x5, 0x7, 0x3a, 0x80000001, 0xdbb, 0x1, 0x9a, 0x104f81b, 0x4, 0x4, 0x9, 0x800, 0x7, 0x1, 0xa, 0x3, 0x7, 0x3, 0x7, 0x2, 0x9, 0x4, 0x7, 0x8, 0x20, 0x5, 0x37f04, 0x3], [0x7, 0x200, 0x60a, 0xc8f, 0x7, 0xffffff4b, 0xfa, 0x40, 0xfffff000, 0x7fffffff, 0x7, 0x1, 0x7fff, 0x2, 0x80, 0x8, 0x6, 0x1, 0x9, 0x2, 0x5, 0x2, 0x1, 0xfffffffb, 0x0, 0xfffffff8, 0x7fff, 0x6, 0x5, 0x100, 0x8b, 0x4, 0xf625, 0xffff, 0x4, 0x1, 0xbe7, 0x6, 0x5, 0x0, 0x1f, 0x7, 0x0, 0x10, 0x6, 0x2, 0x9, 0x10001, 0x2, 0x71, 0x6, 0xfffffff9, 0x7ff, 0x3aa23da5, 0xd, 0x1400000, 0x169, 0xfffff928, 0x80, 0x3ff, 0xffffffff, 0xff, 0x342e8, 0x1], [0x7ff, 0xb4e, 0x3, 0x5, 0x3, 0x9, 0x2, 0xfffffffe, 0x5, 0x1, 0x3ff, 0x80, 0x10, 0x3, 0x1, 0xfffffe01, 0xf, 0x446, 0xfffffeff, 0x6, 0x80, 0x8, 0x8, 0x6, 0xa, 0xffff, 0x0, 0x9, 0x2, 0x7ff, 0x8, 0x223, 0x5, 0x1, 0xd, 0x4, 0x194, 0x0, 0x7, 0x8, 0x1, 0x8, 0xe6, 0xfffffffb, 0x8, 0x1000, 0x9, 0x6, 0x0, 0x8, 0x53a9, 0x3, 0xe, 0xc5, 0x101, 0x9, 0xd5dc, 0x8c0, 0x6, 0x8, 0x8, 0x7, 0x0, 0x2]}, 0x45c) ioctl$AUTOFS_DEV_IOCTL_VERSION(r2, 0xc0189371, &(0x7f0000003080)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) syz_open_procfs(r6, &(0x7f00000030c0)='uid_map\x00') 35.227051501s ago: executing program 6 (id=113): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000140)={[{}, {@oldalloc}, {@resuid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@block_validity}, {@jqfmt_vfsv1}]}, 0x3, 0x447, &(0x7f0000000380)="$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") syz_mount_image$fuse(0x0, &(0x7f0000000100)='./bus\x00', 0x20020, 0x0, 0x1, 0x0, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000080)='./file0\x00', &(0x7f0000000340), 0x0, 0x0, 0x1) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000000)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@index_on}]}) 33.883419924s ago: executing program 6 (id=115): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_setup(0x495, &(0x7f0000001380)={0x0, 0x104c55, 0x100}, &(0x7f0000000000)=0x0, &(0x7f0000000108)=0x0, &(0x7f0000001340)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000200)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x4, 0x11, r0, 0x0, 0x0, 0x0, 0x2001, 0x1, {0x1}}) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000300)=@IORING_OP_EPOLL_CTL=@del={0x1d, 0x0, 0x0, 0xffffffffffffffff, r0, 0x0, 0x2, 0x0, 0x1}) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x400, &(0x7f0000000180), 0x2, 0x790, &(0x7f0000006a80)="$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") mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) getpid() openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x1, 0x0) syz_emit_vhci(&(0x7f0000001080)=@HCI_EVENT_PKT={0x4, @inquiry_info={{0x2, 0xf}, {0x1, [{@any, 0x40, 0x2, 0x5, "5e69da", 0xf}]}}}, 0x12) 33.872837567s ago: executing program 6 (id=122): r0 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) read$FUSE(r0, &(0x7f0000000100)={0x2020}, 0x2020) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000042, 0x0, 0x1, 0x0, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x40002, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5202) syz_mount_image$vfat(&(0x7f0000001140), &(0x7f00000010c0)='./file1\x00', 0x2a10446, &(0x7f0000002140)={[{@fat=@tz_utc}, {@uni_xlateno}, {@utf8}, {@utf8no}, {@numtail}, {@shortname_win95}, {@iocharset={'iocharset', 0x3d, 'cp869'}}, {@shortname_win95}, {@uni_xlate}, {@shortname_mixed}, {@iocharset={'iocharset', 0x3d, 'cp855'}}, {@shortname_mixed}, {@iocharset={'iocharset', 0x3d, 'macromanian'}}]}, 0x7f, 0x2ca, &(0x7f0000000900)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = openat(0xffffffffffffff9c, 0x0, 0x103a42, 0x32) r6 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) r8 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ifreq(r8, 0x8948, &(0x7f00000000c0)={'vlan1\x00', @ifru_data=0x0}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000000c0)={'gretap0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000003700)={&(0x7f0000000440)={0x44, 0x0, 0x1, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME={0x24, 0x33, @probe_request={{{0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1}, {0x1c00}, @broadcast, @device_a, @initial, {0x6, 0x1}}, @val={0x0, 0x6, @default_ap_ssid}, @void, @void, @void, @void}}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x44}}, 0x28008004) sendmsg$NL80211_CMD_TDLS_MGMT(r5, &(0x7f0000002300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2009002}, 0xc, &(0x7f00000022c0)={&(0x7f0000002200)={0x8c, 0x0, 0x1, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7, 0x7d}}}}, [@NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x5}, @NL80211_ATTR_IE={0x4b, 0x2a, [@tim={0x5, 0x3f, {0xbe, 0x13, 0x0, "4fdbd5f8288c71ad2c62b50af7cdeb32920f6d35917bf9aeb3aa4b9e462e38d6db46734a643c46fd76298791b9a9067f52ea4e098295ee68a18e9afe"}}, @ext_channel_switch={0x3c, 0x4, {0x0, 0x9, 0x8c, 0xa9}}]}, @NL80211_ATTR_TDLS_INITIATOR={0x4}, @NL80211_ATTR_MAC={0xa}]}, 0x8c}, 0x1, 0x0, 0x0, 0x20000040}, 0x840) sendmsg$nl_route_sched(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r9, {0x0, 0x5}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x18, 0x2, [@TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x2}, @TCA_CAKE_BASE_RATE64={0xc, 0x2, 0xd}]}}]}, 0x48}}, 0x0) 33.848471987s ago: executing program 36 (id=122): r0 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) read$FUSE(r0, &(0x7f0000000100)={0x2020}, 0x2020) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000042, 0x0, 0x1, 0x0, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x40002, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5202) syz_mount_image$vfat(&(0x7f0000001140), &(0x7f00000010c0)='./file1\x00', 0x2a10446, &(0x7f0000002140)={[{@fat=@tz_utc}, {@uni_xlateno}, {@utf8}, {@utf8no}, {@numtail}, {@shortname_win95}, {@iocharset={'iocharset', 0x3d, 'cp869'}}, {@shortname_win95}, {@uni_xlate}, {@shortname_mixed}, {@iocharset={'iocharset', 0x3d, 'cp855'}}, {@shortname_mixed}, {@iocharset={'iocharset', 0x3d, 'macromanian'}}]}, 0x7f, 0x2ca, &(0x7f0000000900)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = openat(0xffffffffffffff9c, 0x0, 0x103a42, 0x32) r6 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) r8 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ifreq(r8, 0x8948, &(0x7f00000000c0)={'vlan1\x00', @ifru_data=0x0}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000000c0)={'gretap0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000003700)={&(0x7f0000000440)={0x44, 0x0, 0x1, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME={0x24, 0x33, @probe_request={{{0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1}, {0x1c00}, @broadcast, @device_a, @initial, {0x6, 0x1}}, @val={0x0, 0x6, @default_ap_ssid}, @void, @void, @void, @void}}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x44}}, 0x28008004) sendmsg$NL80211_CMD_TDLS_MGMT(r5, &(0x7f0000002300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2009002}, 0xc, &(0x7f00000022c0)={&(0x7f0000002200)={0x8c, 0x0, 0x1, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7, 0x7d}}}}, [@NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x5}, @NL80211_ATTR_IE={0x4b, 0x2a, [@tim={0x5, 0x3f, {0xbe, 0x13, 0x0, "4fdbd5f8288c71ad2c62b50af7cdeb32920f6d35917bf9aeb3aa4b9e462e38d6db46734a643c46fd76298791b9a9067f52ea4e098295ee68a18e9afe"}}, @ext_channel_switch={0x3c, 0x4, {0x0, 0x9, 0x8c, 0xa9}}]}, @NL80211_ATTR_TDLS_INITIATOR={0x4}, @NL80211_ATTR_MAC={0xa}]}, 0x8c}, 0x1, 0x0, 0x0, 0x20000040}, 0x840) sendmsg$nl_route_sched(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r9, {0x0, 0x5}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x18, 0x2, [@TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x2}, @TCA_CAKE_BASE_RATE64={0xc, 0x2, 0xd}]}}]}, 0x48}}, 0x0) 30.474130166s ago: executing program 37 (id=62): syz_open_dev$tty20(0xc, 0x4, 0x1) socket$inet_udp(0x2, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = dup(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000900)='./config/usb_gadget/g1/functions/rndis.usb0\x00', 0x1ff) r4 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write$FUSE_IOCTL(r4, 0x0, 0x0) write$UHID_INPUT(r0, &(0x7f0000002b40)={0xe, {"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", 0x942}}, 0x1006) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r5) syz_mount_image$fuse(0x0, &(0x7f0000000200)='./proc\x00', 0x4, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000000c0)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/sys/net/ipv6/conf/all/forwarding\x00', 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) 25.811303583s ago: executing program 9 (id=207): setns(0xc9, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x1) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_COPY(r0, 0xc028aa05, &(0x7f0000000180)={&(0x7f0000807000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x3, 0x2}) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYRES64=r0, @ANYRESHEX=r0, @ANYRES16=r0, @ANYRESHEX=r1], 0x1c}, 0x1, 0x0, 0x0, 0x48050}, 0x0) recvmmsg$unix(r1, &(0x7f0000002380)=[{{0x0, 0x3f, &(0x7f0000001340)=[{&(0x7f00000002c0)=""/4096, 0x1000}], 0x1}}], 0x4000000000003b9, 0x26022, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'geneve0\x00'}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = socket(0x40000000015, 0x5, 0x0) connect$inet(r5, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r5, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$key(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x10}}, 0x0) sendmsg$rds(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000880)=""/4077, 0xfed}], 0x1}, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000680)={'bridge0\x00'}) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4c0c0}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) syz_open_dev$vim2m(&(0x7f0000000200), 0x8000, 0x2) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="6c0000001000010027bd700403dcdf2500000000", @ANYRES32=r7, @ANYBLOB="30ce0600016803004c001280110001006272696467655f736c6176650000000034000580050009000000000005000600"], 0x6c}, 0x1, 0x0, 0x0, 0x400c080}, 0x8002) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xc1001, 0x104) r8 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r8, 0x8) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) rt_sigpending(0xffffffffffffffff, 0x0) 24.601028851s ago: executing program 9 (id=220): r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000006a80), 0x1, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000001c0)={0x2019}) 24.593317382s ago: executing program 9 (id=223): r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000006a80), 0x1, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000001c0)={0x2019}) (fail_nth: 2) 24.531430312s ago: executing program 9 (id=225): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000140)={[{}, {@oldalloc}, {@resuid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@block_validity}, {@jqfmt_vfsv1}]}, 0x3, 0x447, &(0x7f0000000380)="$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") syz_mount_image$fuse(0x0, &(0x7f0000000100)='./bus\x00', 0x20020, 0x0, 0x1, 0x0, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000080)='./file0\x00', &(0x7f0000000340), &(0x7f0000000380), 0x2, 0x1) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000000)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 24.453260766s ago: executing program 9 (id=228): syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd69010000001406fffe800000000000000000000039fe8000000000000000000000000000aa4e224e24000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="51c2"], 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000007880)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000040)="af0ac9", 0x3}], 0x1}}], 0x1, 0x4000000) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0xc4089434, &(0x7f0000000780)={0x0, 0x9, 0x0, [0x8, 0x1, 0x9, 0x4abf, 0x1], [0x80000000, 0xa, 0x0, 0x6, 0x800, 0x200, 0x4, 0x6, 0x3, 0x8000000000000000, 0x9, 0xf, 0x100000000, 0x8, 0xc, 0x4, 0x3, 0x0, 0x4, 0xffffffffffffff3b, 0x80, 0x3, 0x9, 0x4, 0xffff, 0x7, 0x7fffffffffffffff, 0x8, 0x0, 0x5, 0x4, 0x9, 0xd31, 0x7, 0xa964, 0x100, 0x80, 0x8000000000000001, 0x100000000, 0x2, 0xe, 0x3ff, 0x2, 0x985, 0x4, 0x5a, 0xe, 0x77c6, 0x10001, 0x4, 0x9, 0x1, 0x119c000000, 0x1b, 0x6fc, 0x7ff, 0x430a, 0xe, 0x9, 0x1000, 0xfff, 0x1, 0x100000000, 0x8, 0xfffffffffffffbff, 0x1e5, 0x8, 0x7, 0x0, 0x6, 0x3, 0xfffffffffffff1b9, 0x7ff, 0xf67c, 0x4, 0x7, 0xd, 0x3, 0x26, 0x67, 0x2b, 0x7, 0x8001, 0x6, 0x2, 0x5, 0xae, 0x3, 0xc4, 0x9, 0x7fffffff, 0x400, 0x400, 0x806, 0x1c00000, 0x7, 0x9, 0x81, 0x9, 0x2, 0x400000000000000, 0xf, 0x81, 0x7, 0x3, 0x8, 0x4, 0x4, 0xfffffffffffff62e, 0x5, 0xfffffffffffffffa, 0x2, 0x100000000, 0x100000000, 0xffff, 0x200, 0x6, 0x7f, 0x8001, 0xfffffffffffffffc, 0x8000]}) ioctl$BTRFS_IOC_DEV_REPLACE(0xffffffffffffffff, 0xca289435, &(0x7f0000000bc0)={0x1, 0x10000, @start={r2, 0x1, "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", "f1e251205a07fc7a8e0c0ba221296b3486de4364d0b4362fe7fde18160875d8773f03a783140f9d87edbdc0c07d63fab4f2368bccdbd78afa4ea8c3d5b84583941e54cf27a2e886cca68977e6cc2e01a0ab198de05404f990a1be00d2fdc51995ef433c4cf8ba24f8eb5ea8f86fd3c201b283fb8cf1683d66da1c6686900658ffa07f2701504c9885c11d7f05944419573d6660b25416ed317a1a1845b8df1165ac802302f1b21832f702ef4daa92b2af721f086225d0d019be0324d1729dd7a146ea6bdb03c4bb3609b1d8e5c8ea9766154a128d44925669c86f2f2bc1278b442230e82312b101a249bf61bc7692c55b800753abf7fd48607b3583115c3866b70a9b0047543d0e2747157747d922f561871e9991cf032fee0de335a10c2fb4c733d0897cbfda34fb8dc37acf6f0a5ff3a76741d79bea46fb8f4511e4e3fa1b8e772cf2affc422c252a8dcadaf448177eb0a46de72110de15cb359ae63b3795211fe72a10e58a0ddbe1715bd91a2d5532246c4580a71153f370b5e340a0e85dee32eccb1cf341db8aa373d831aa0fb13643f4e929bc36faa82928a26d8d91ea92c19015c3f66fc6d84261629593a4ac38c1d8422f1130780596bd78378a91819c3e7528e3b778914c456032d25e3da7c032339abf4128429ac2c5490358a240c88f58d798912b28878994a61e0d56e58733556cf6202d999f115157242ee68b1811b3e9e01906a0c9495394f220e81ce83e84a638a3ccb65ad03b7987874ad247313f6b576f7a3d21606f09e297770becb533c7159b48ca917f6862f85f26080ab99aab9ad77226f93d0a70112ee1baff867e951e2c77a0c32410b2b1c82c573593c2ba1e56f8c9bed67557ad7cee8003154634356448888da9f997644ef2a49445dbef599044a931b1317660a4abad5024cea9a6e48e3c2a33775990772da3df8b132c9c0233039131a10f6e9b8f3285ac5f8079c8eff068865344605abd3a9b7bfe254ae9463963543fa5d80b5ca344103a021a4bf4df7b58abe6d2e8b72d483f5944fafbd9ae03a841dadd4772098e3ee01b3bbf8e5ca2a191ea5efd2ebc921766586ea83860909200af01c6d195fd272a161fb0e9106ecc6e25078ff89953c2aa5fa9fd6f02b00cb92132721eb0f79143ccbfe9b5e405909f9acb0a12cb3e1d9d56e9c6acfb1450d124e98b248198121d4693982fe2a23eb01bcc599598b58a96c5e95b2aaee7d89b589bd4bd9dee443d64791186e6c7921c2653dd31b5c3d3aec2e41f9944064124c8f66eaef64c0b87b38b43e7302876d3266a5ab03a148d177ea5f900b366a80e424de89eac5473f8fa5dacd048cec6cc874aa620b0527cd6606603d6bbe1e9e22c6e8dbfef6ef7c18edc5c3d49ba29478056c0694ad620eb47055c278f82ff30dd80d299ed713d1872f131e681d73c4abf587f3204db2"}, [0x400, 0x5, 0x3, 0x1, 0x7, 0x8, 0xd, 0xffffffffffff8000, 0xe0b7, 0x2, 0x6, 0x2, 0x800, 0x8, 0x100, 0x8, 0x1, 0x4, 0x1, 0x4, 0x4, 0x0, 0x0, 0x800, 0x1, 0x0, 0x3, 0x4, 0x1, 0x3, 0x9, 0x9, 0x1, 0x0, 0x81, 0x6, 0x75, 0x8, 0x0, 0x2, 0x0, 0x3ff, 0xffffffff00000000, 0x3, 0xc9d5, 0x8, 0x1, 0x38000, 0x5, 0x3, 0x2, 0x9, 0x3, 0x8, 0x7ff, 0x81, 0x4, 0x2, 0x5, 0x2, 0x0, 0x400000, 0x9, 0x7]}) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) r3 = socket$nl_audit(0x10, 0x3, 0x9) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$team(&(0x7f0000000100), r4) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r7 = socket(0x2, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'team_slave_1\x00', 0x0}) ioctl$DRM_IOCTL_MODE_CURSOR2(r1, 0xc02464bb, &(0x7f0000000180)={0x2, 0x0, 0x7, 0x80000001, 0x8, 0x9, 0x62a4d973, 0x8, 0x4863}) sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)={0x60, r5, 0x1, 0x70bd30, 0x25dfdbff, {}, [{{0x8, 0x1, r6}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r8}}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x400}, 0x4040894) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x600}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000040)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e000a00100000000280", 0x2a}, {&(0x7f0000000400)="03000000", 0x4}], 0x2}, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x14, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff100004000", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd4992861ac00", "f4bd000000801900", [0x8, 0xffffffff9673e35d]}}) 24.037661239s ago: executing program 9 (id=242): r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000006a80), 0x1, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000001c0)={0x2019}) ppoll(&(0x7f0000000240)=[{r1, 0x4}], 0x1, &(0x7f00000003c0)={0x0, 0x989680}, 0x0, 0x0) 23.957851781s ago: executing program 38 (id=242): r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000006a80), 0x1, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000001c0)={0x2019}) ppoll(&(0x7f0000000240)=[{r1, 0x4}], 0x1, &(0x7f00000003c0)={0x0, 0x989680}, 0x0, 0x0) 10.28856958s ago: executing program 7 (id=390): r0 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) read$FUSE(r0, &(0x7f0000000100)={0x2020}, 0x2020) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000042, 0x0, 0x1, 0x0, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x40002, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5202) syz_mount_image$vfat(&(0x7f0000001140), &(0x7f00000010c0)='./file1\x00', 0x2a10446, &(0x7f0000002140)={[{@fat=@tz_utc}, {@uni_xlateno}, {@utf8}, {@utf8no}, {@numtail}, {@shortname_win95}, {@iocharset={'iocharset', 0x3d, 'cp869'}}, {@shortname_win95}, {@uni_xlate}, {@shortname_mixed}, {@iocharset={'iocharset', 0x3d, 'cp855'}}, {@shortname_mixed}, {@iocharset={'iocharset', 0x3d, 'macromanian'}}]}, 0x7f, 0x2ca, &(0x7f0000000900)="$eJzs3b+KY1UYAPDvZpKZZBWSwkoEL2hhNezuE0yQERZTiHILbXRwZ0Fyw8IEAv7B7Fb2gpWVL2DnA/gANr6BhaVg5xbileTm5t9k1kQys8vy+zX3yznnu/ecM4fMEMg3n7w26N9/OHzw+KvfotlMonYSJ/EkiU7UovIortK8sgcAeH49KYr4syj919jDlVf12nXOCwC4Plv//j+4sSkBANfsgw8/erfb652+n6bNiME3oyyJ8lr2dx/EZ5HHedyOdvwdUcyV8cv3eqfRTtPqw4BRK7KIwce/zF53/4iY5t+JdnTW86tPFNKpeHMwHmWTJ0+ujbiVRHSLpBxyN9rxSkTRiNlNyss793qnd9PL+ZEdxltvfD+b/z/ncRzt+PXTeBh53J/eYpH/9Z00fbv47q8vyxVkEcl4lB1Nxy0U/gICAAAAAAAAAAAAAAAAAAAAAGBvjtO5znL9nKoa4PHxen89a723yF/UBzqJaX2gWYWf8VJ9ndtpmlZlfEZZI8r6PvV4tR71Z7NqAAAAAAAAAAAAAAAAAAAAeL4MP/+if5bn5xcrwc/FJGg9dcx6UF9qqb7WX7ZEZ5f7TIL+jxHzlh9iy6xtgjiYTS1Plh5RBknVtcMNf7qi62iXibU2PTRqy3u43FXPo5z8t7tvwuu7LnD7oLOYanW6+mdJzHf+0Wx3V7OaGxZ4ludLp6U6hhfDZIcDWWzYuoMyuHU563BPm3D40v9Nb8WmrsmKG/PNXM1qrm1mY78/0/V3imSP7zoAAAAAAAAAAAAAAAAAAMAmiy/9xu+XOh8/kykBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwI1b/P//eRCd9Zb1YDxLnrbUnj746GK44bGdG14mAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAL7h/AwAA//9E3ktQ") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat(0xffffffffffffff9c, 0x0, 0x103a42, 0x32) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ifreq(r4, 0x8948, &(0x7f00000000c0)={'vlan1\x00', @ifru_data=0x0}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'gretap0\x00'}) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000003700)={&(0x7f0000000440)={0x44, 0x0, 0x1, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME={0x24, 0x33, @probe_request={{{0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1}, {0x1c00}, @broadcast, @device_a, @initial, {0x6, 0x1}}, @val={0x0, 0x6, @default_ap_ssid}, @void, @void, @void, @void}}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x44}}, 0x28008004) 10.165399272s ago: executing program 7 (id=393): pipe2(&(0x7f00000000c0)={0xffffffffffffffff}, 0x80) r1 = socket$rds(0x15, 0x5, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000140)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x4}]}) syz_emit_vhci(0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x2214803, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 6) 8.653651568s ago: executing program 7 (id=419): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000640)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x3}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001bc0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {0x1, 0xb}, {0xffff, 0xd}}, [@qdisc_kind_options=@q_bfifo={{0xa}, {0x8, 0x2, 0xfffffffb}}]}, 0x38}, 0x1, 0x0, 0x0, 0x200448a4}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r3, 0x3e}, 0x80, &(0x7f0000001b40)=[{&(0x7f0000000700)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb6ad67d196186e061f7092e2fe1ef9a0d699e9d080edab4bfdf0700600000000033b67507b05c35577587287c161a312d2351cf0f9c19d2f0d2b52ace0218941304c45c9b529492322ecf2cf8c68a126cb82558982cdcd02dba2f605704bcafe6da433b11d59d071d79e32748a1317a1d68c1be05f1f584dde4be8c1262a925fbabe0af8c00a5181f9c85b647ed0e5f", 0xb5}, {&(0x7f00000002c0)="8caed476f6bcc737902ee6863118a0f660978f27dfa8e77e65d30f0c994994af1fb65ee49983e655d3f7be317d2380b0ed8e916769d5f1b8dc7a927e6401a10223ad90d5dc45614dec7e4c2f19d2b70807aaef8fc9e45c7a65583d15a94480840f4e4fc9ee8e3b7f8fd1aaf800d9176af51346ea81ee48fdc01f072780ff849a4fe9197b8926a16412b4da7b627e43d71ec1b367bbd9454ab97566775449de0c9e1b429acb005171cfd0b37d5e807f54ece988ae6a50773488ded126b8fc9559f66619d6002a53923e4e93bf09354a28cdd2c6a0653731e3ff0fac", 0xdb}, {&(0x7f0000000440)="99dcbf373748a116444c10801b7c8f48ff3cc4222eaa9a8ecd976fe5c2b153b8012daa0155cbb1", 0x27}, {&(0x7f00000007c0)="5dc2db6fa9b830b5bedc2a54b2d4091ce8c28ef121944d189544096016abb738c8d7cbee8455797c78611bc5b5633e30c7ee1093b90e3208ecb225f6d0d29465fa81ca56e738ef1e7c0480a7b780ec614330e809a1523dbfda40a01ee577449b2adcf3ac4a416128f9b100695ec34ba5c785caca8eaf21639695869be83d5597e7d5c5d74690449c0b1589212d14268d86d6e9df6605662594a579a01f6247f8789ee2753104a9ff6c977436258777b047c00743caeee11953c7ee9f75783afc3e3e6951ad94872aef0797363080994c6e7ff1645c", 0xd5}, {&(0x7f0000000b00)="7bddac51b6b38bbab189b84ebc6063c560070782f2b8071de259d62d9ab16f8dbe75fb1c4566ea50322ed6140982205dd2e4ab0049fa54e29f7f24e07ce90f9ab021368fc7fe35abd535cd4a238a650dba0f6cd8c2571340e71d4d1d1448a671abeafde582bbbc7458772667b08492d548ea72048e78720a32cddf42058dda263f3f3466228169a4aff6f0655a9a7127e166e270ed31b91702545835336ef729202b0217f1807fb1c8b7bc3b0ef109a66bb52eef969e0a1034716dc20598eee5debaefe008d548ddee490f627221d5b0a92e4cb4b0ad1068dc259e5cc7a564f03ed6e00dad19705620164bc1171ecdc3053ef0b3dcd13b62c9060f6bca43a1e654f0a543f4dda756efdee8ae70a21ab9c81707894462fecd1cd9826a4e26bf261005ce8c4cbc46b63e46f06cb4369aace3555cd0e11dac7a95ce3aec9d2bb03583606b81ea29615949c513c9591c0971e1a999d4713d2f3954d5a264bf5ab0ec856b562ddf062202210171140bb4bd1eaca8283c4fd36951fb83672effe7b5126e9458f1f5f3d41a0f51966295c5f8b1a358a0bb47847892d3dfd8e0ff68030fc5e975bc25ad99827736e1f27053a2ad9f28dc981c68439de1c94f6acdb9e661db21b1e7596b87af22a4af5a37f3a54a1a3630770885eb620e1b6c613283beee82990001df7faf28fcef2a63b863f7f9827105af3aa6e0fa698cce7119af4baa9332f91f1434d5f712afe153a7db193fed726a896b3d7fd8d00d46a96d7694103ea6fcc61656c5a7f317856219db27643e30a2544393aa55154d381869a4a773a21567d7240bf6940dfd18d6d703923f97966d3f87eedb8067b89597fe9ba1854f8efa5088fdf8e1c20c235fc4221f11f48ced48e5e724045bf72e0bc67b417b93a7c46ea239249c80d29770b1204488f71a95a2ec49d673993331124ba55fa9d2dae768b97c2f4dc8a02afb6a6475be1e32c2381338ee819fc554f53a16c54d989c0d5e53d9dc9b15083100ef608e2e4b4d253f5fcb75b97c01e6b4e8121ae58a4f9c52f872299b59fe81c7fba3ab9f54650aee339996b27d54245dd1af8d18248588f630b957a8b226c8dd622256b75fc2228fbe1e440a687f71e6eb96c0f8f9dd52725fb31a6d22e06fb8cb42263d3e8a5bac7326bfa1cd92744c077ecb663b1e3e4f6eb3eaca6b610e50373667acb192c943a8606ebf9a1c69e21a79e9e6303dd9611c2f44cb5e4f67063918556a9c56173fb387cb14bb4577728683493017c31839052c9e634a4c64e241602725d1f078a58b4eb4ba6bbabf349b6155c7e8629c80cb4da22039adfc8b2f551741526cae59a6e9b583236b04e9561b51fa2a755fa13e353b0f8210d95faaf73471f6c0d85d32bd2ad81e7c3631e7a473fcc2a43e1b3333e6840a12637c7ae1c3bd3d2a0ae3d67105fc7b31de802fffb37088c922309ccc1b0ee85e4795b1745d2c40001da45e7357397201909696498431d810a97bfa45ce67af18daa9da91e0db2e29545bf84b1628898f41a13c8930a9d73f8c3a2b234fbb90f8f52cafff774ed740ce78f64eae53563ad227ff83e0fbdeabb1de777e58806f7b7010bd33b8d7599ac6449f9b0814d8a5f9d47ccd289310981c2d96782ebe2c40a8914dade88760ba175ccdaf82b4b18365cd87e8d4c93b38c79db182e2c2b7839196382ea1ec5e55a1236ea6ce0ad8cf44fb27d0da66cf4dbc37569eca789046cbc90c752c458717be4589633a9607b11ca0dbec73c819ba2e7a965759aaabb6ede7512b2c6a1758462b6409a77fb83c25af21d98a96972593c46005bece9ca52d49e4a5bed2a24a0136698a4dbad33c5481ab76c2f5c84d5f717e3b0f6d41a4017ff62477cf7efe50084770ff4a6995ccc3bcf4766b2acb7c4dce21e66f270a573d45e829850fe12dbfd3c2d5cd10b556c7dc3c179cd45f36fe314ef760791f17354a563a40bd013a70fdbc89c000e0625ba67e2cb2b4ab0d26f8ba092af5485ec417a30a661e6b459054551afc50a08caf0f191323a69e098610b879ed15bfd39c03ee94865c047c6ffd20427ddf2066ac0f2215d12a38b7be53b2722c5a3fd67e137d3a76bce78c70be21b385bd07b8514c55a54408a051c37127c784e36b945d01021145b89160bac94b11c5656aeb8949a6f315cdb3d812780729e12cb5c85405381add02467e39ad1588e139a18f836535a0e84702ec406ca49ad0cbad9cff79e0e8b8b6a1ab912ea8142ee978d5e92469213a73bd19833c2df4095dcd1246a57fb2b49635af52bed31e62a1068a873cf859b24f3212ca8ceed0be2c574a073b3968579df1049571898769620ab5ad7ece881250677c35b5cb2438d9db8a3dec87595adc090705710fe393ba36ea9a4e484de1a6aba671b4a411aaf445cd3caf8768ea647416ffd4be0bd028e8e7d31fe4ea73310ee2f3ed55a1b1f84f3123dfc7f96e6cf17d575a5bc64ad25314524b3b114a0fd81522e8ede0dfc6659806fe35dd05fe20fc1f73f3dc780748381b46d5cc4c7d7f2e113cac0dc848f70023b7ea93526a6fd746b9461101b071b0f024df9eea2abf7ed4d8788e1928046a9bf8927b2700064776a4a63ba281e74e77ebeca80172e41c41e88853bfe4d75f261550d43892bae87d8ce3adad46827d33202f1549d929f90f587da1ba07cf4f6f2cfacbfbfc51687b55daa9a4fa81d8f67efe2e31a5fc6282d080f6c90d648aabd2f69e0710a06fc4a6b4158dcea59f463162f384265857d527587f0a9d11742f8377cd5cc3d46b79338a7221604a0ca978c7243c4a9a73484dcb1f85f0401e32295924a8746c7edfb07616a1925baad8a20c79ae197a1775116386bb9330172cf656a22fb654696a7702ea30805215a820125984a308a60cd7ede1f137dbe43c0ada5b2951f9ef2c317e29ece9aea31045ccbcbd8a222d2af82b736c4186efc36d5e565ad2b72f3cf68bfd4c20e156b7f19ed683c751c9b89e6b2b1e0d15454f7afc316193d39fe58dfa4db929d060a9cd0965a1ec6acc6185b6c4d9620fd6826c3b0d18905763a625e15fdb5c9652b5a5cde312fee991d520efaa7552978051d667b7e4d3508e902be4aee042e34eae15f43012c42924acf19bbe725be0ec44c6e41789b9d5ab15a845ba20102898b128dc291d8ed69ef76804489e79aa5248e3e11ec12e4f2fe4d2d535828fa5ee9d01b16c740ff1a234aad4afef7d1c989760fc6756b721808885f5f741f27dcb6674433848db5cc51d0e88adde764d8ec43089fcbdf9ba087bcbe3bd0ada1eae0421f44e8c3733eddd82d32f223b1bd283d73f3b28ae077a8886be7645bf56d93aff7ea96533e7d9182ad66bc3b1b9e854eccfa3d4a4c4713cac7ae3336746318b244649afe1c2e5db919ac395b02af31793615bd010c3b085a897b7754a12fffb610a2638d70e2c3b1eb3fa87e0c6324b4720f4e318455f367c5c912c5ca10e6b3e7f692ac9ef9277197fa493b8a20a63feea2dc3ccada7b08f9f4805f5d8140d74db2df0b2b3e404934a00c1ef6098c5acf3d8266ef751f3d212a9431f52a0d1471113c4bd90d20065c89f43e71951c0939fb87c157fb548e9c0627d951c63cafa53808dae0ef6a7e104ff945267ac4edd42a0fc1c46d6f9a780aa0e2983f7078c54c647576c025647eb68ad4af851d85e459dc2f8b6139e539874c17de6f3748f51ed55a3c67d8bec0d7a0976d782cf91a1ae60ba9d51511b1407eb16c7610866455447dc4ad148298e6b1b0e4b833b667f709aa9d0ee1759bb87ac44543a39e44f1fe5f33eeea9b11c03f9fc39d66d5ab765f8ef074b22c71cff1b69367d24e91da4bc35e2fdfea1a77a9f41a2f0896870e0fcfd69d51f716638cd63184bd76c648c192e990f2c675478aa15cc5a804882f4be47155909e5f2265c5842153d928f06d61000cc72e37c87fbdba0a47738fef6e6154c21fee513a9e12635c767b5c4b17da6392ba7e3a833bd5d826129ae11dc3a625a249fec9b2410bdeb18d52a075f2ed2bb3e3efdf01f23b87cccdae9aa15f4978751d42b7c6df7533895528acabaadb49aeabe720388f2de167d5471f6a8a576234e0281e34e6d86413df713caea8abd80ba60dac8f37d39a58c929263034e01e5c59c2be798463abd50a430b40ca7ce97ad70ea89ddc2c817d712791f78cded6dc674682761c250d574d5eb041d99dfc91f75f832e0b1d4518b6af48cf24881a61faa7885dbe1e6722d15d0b220c2bee24467ba34fce9f85730de38c7359dddde1fb7c31ec9c3bd14c7bc8a6ebacbcc735178bddf7a07228b8d5c5d87731f1b703648ce74a9e49ce90ce2f6a128c0d5a8c33a7d89a761833098c651e2887e2b4deabb462cad2895718fd605dc018fed465eb7e9ec5d147155b1c4c9032ece2624af1150a6343f76594d13ecfc6fd3856a88b69dcac05411a4f929f14347cf2c6ae3d37ed4801e0f41e077a8f28356b46cca30068178a1d433901b39b3c607d1937962e185d61d0030ad18e658ab5aba033b0d879395e33e8b96aee9cd77055de23501085e4a5aa9bc8c676467751b946af9b382e230d89ad3a506779a64d736311b3a8aff1ef778365af1af48d4cf9352ef4939e4a0ea2d69ae9395404dc992acf99e2241e1403d3390152e57ad28dbcb87d0d3c618c6fd93822174f066a9d318951895bcfae43ea0af777a0244a802196ed8f04914ea868d727453d79e2629abc735a1b6570a7ace08042bddfcb6173b7a5110bfd6c2f4f0f2d858f99a48a4475044aa1049b65687924353cfd93ecef296928dd7a20fdf1ad18612e3e2851fa6686dca47abe789d90bafeea3c1ed095812c77cb292dea0716a8f88842ce6b1d80bb7cb2b91358ded09bb2398e299c30fd2765300a98f99cd0b96c3fc4d43e20cd8668af58be91cd4dd2078a37a2ba048a0a705915129702610fd5e0c0ceb3fe36d7a96d050b71ad7cab9d062242257f191f6037e7d579c05c8ec55b396d5b459ee1a31d22adaa77d0ede48a1e71b60401ce327ff04a95815450935a7259a96a240eff73589699c72696e2591894673f28e8e4a766ecf35c90aa4046c4ac54f21c4e65dcb2bfa5db4a2422773995c086e1282699d9f4f61abad41cc617ad99537f23e70da8394d7bbac7c4612c567bcf5c00d2325176c41e4e3f0cbc6eff4ae053b650737bc3ef9ebfdc8283aa4b82de3e1e6f671a92f1822a05d917622ec3bf41459f329da27503047706b89131a2c1090f5a4293f038b3eb1d2be516708bd7221221d873f1fe9e7e0f89232d0d2ad6ac375314a499d8d16fecf64c073a795831c1f7c85af606a519eb8efe263c157091373fb0e7225eaaaf3036c9669f6b5d054727bda9b7e884a1daf44000d51d9ef6676aec7b568653e2cf7acbfa645fd95422542725aad66e47ca970aac3b9058f55c2d2280e233c4278e0088a69c0788f2d188e696de7058fbbbaecd83bde173e6bfdcafdb658640c473783743d2c09010c34c34bdedd83f2c0dc997a8956a41c07c60589a0812859dd206cadbc9880520e56c91e09550cf15b5ef20f6ff10e1ddd2cae1b2242cc6c60519fc660ce63f518839c4d7b23fd2027cb3a8d2c3a27b6462418c9eccf1742099f6906d2b8627c543b05eddf968a1e", 0xf9a}], 0x5}, 0x0) 8.489938018s ago: executing program 7 (id=422): socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x804, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0xfe, 0x28b, &(0x7f00000008c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000200), &(0x7f0000000240)='./file0\x00', 0x1000000, &(0x7f0000000000)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@default_permissions}]}}, 0x1, 0x0, 0x0) read$FUSE(r1, &(0x7f0000000300)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000002340)={0x50, 0x0, r2, {0x7, 0x2b, 0x7, 0x800, 0x101, 0x2, 0x2, 0x3ff, 0x0, 0x0, 0x1}}, 0x50) syz_fuse_handle_req(r1, &(0x7f00000023c0)="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", 0x2000, &(0x7f0000007080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000004400)={0x78, 0x0, 0x6, {0x3ff, 0x100, 0x0, {0x4, 0x8000000000000001, 0xfffffffffffffc01, 0x2000000000000, 0x1cc2f0c3, 0x3ff, 0x4, 0x6, 0xbfb, 0x4000, 0x0, r3, r4, 0x0, 0x1}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) listxattr(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x10000000}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)=ANY=[@ANYBLOB="020200000d0000000000000000000000030006000000000002000000ac1414bb000000000000000002000100000000000000000000000000030005000000000002000000ac1414aa000000000000000001001500000000000100140000000000010016"], 0x68}, 0x1, 0x7}, 0x0) 7.587986192s ago: executing program 7 (id=429): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000003c0)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x78, &(0x7f0000019680)=ANY=[@ANYRES16=0x0, @ANYRESHEX], 0x1, 0x2cd, &(0x7f0000000080)="$eJzs3E9rI2UYAPBnmqRNFyQ5iIsiOOLFU9muePC2RbogFhSXIooHi5tF6VShhUJy2D8X/RKKJ6969Kp4UC8e/AIiSBW8uDcRcSTJJJumkyYWmsj297vMwzvP8z7zTt922gbm7Sf3dm/W4tb9+0dRrydRTeJa/BXRjKWoxEAzAICHx595Hn/keS3yPP/v1f+coQYAWLTi+d+z6GsBAOaj/PlfHQSDjwBe7R/uzPvyAIBz4O9/ALh4brzx5ssbW1ubr6VpPWLvo8NacWK1ON6K9yKLVlyJRvwdkQ/14+svbW1eSbt+bcb23p3D7cPtiO6x/6+DjUH9ejSiWVafbK6nfcfra3GpqP/pUrTiajTi0fL+V0frV6OoX45nnxnpvxaN+PGd+CCyuBkR+def9Sbo1t9eT9MXX9lKozpYfLd+pZd37F6M+K4Zfl8CAAAAAAAAAAAAAAAAAAAAAODMVtKh0vf3rK1NOt+v35j8fqD68fcDjb/fpxpPVBe7dgAAAAAAAAAAAAAAAAAAAPi/OGh3dneyrLV/WvD+959/E3F6Tvvoh7uvT5mn3dlNir7Tm5538MjTv3w8OedeMv3+JFNaVIo5hiP1mS7sq6fGRt6qjM1TBEuVeDCS3J1h7fXi7g9HqhFRmlwpnWd1mPzt0buPP3dw+fnxnBuPDXZWb2QYjLVYKWu6MiG5HyxP26u107bW742I0qp7Z9g/afeLMRz54mROMr8dPlj1yPdXefLlT67tfHn7599mnXkeP30AAAAAAAAAAAAAAAAAAIBRB+3O0myZH75QBMl5Xg8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALMJBu7O7k2Wt5Wh3Po0sa+33RvLGg1P7JcH1yadOBie7VhaxVAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALrB/AwAA//+2HHlV") 7.243245565s ago: executing program 7 (id=435): prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0xc4206000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=ANY=[@ANYBLOB="140000001000010000000000000000000000020a20000000000a03000000000000000000070000040900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021100011800c000100636f756e74657200180100000c0a010300000000000000000700fffe0900020073797a31000000000900010073797a3000000000ec000380e8000080d00001800c0002800800034000000002c00001000e80a01447354eade9fcdf54e99945b9a3f3c794c33b64481ae460b4f6a1f3f47fd758998e44e289e660caf11448beb9a1b0223267439fb295f7de371c718b20b37fb6f9b08ec9c3f8d9e1f88126c0c5187be18320bc17d5905212e23e70baafc77ed9ac47db01c34c9927fd4cb4bd9bb06c84fa5246e594ee48764c4f53dc42f0811a8b7bc8311bceacf982c449cb86b3ac46da849ef56d27cac1b59bf23320ff2d435e0a651ff2e842070000003d28a019f3d9b502c4cb050481dd140007"], 0x1ac}}, 0x0) 7.203485716s ago: executing program 39 (id=435): prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0xc4206000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x1ac}}, 0x0) 3.068076037s ago: executing program 4 (id=487): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) socket(0x11, 0xa, 0x3) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet6(0xa, 0x3, 0x5) sendmmsg(r0, &(0x7f0000001500)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @remote, 0x0, 0x3}, 0x80, 0x0, 0xf5}, 0x5b4}, {{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @loopback, 0xa, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000001580)=ANY=[@ANYBLOB="120000000000000029000000", @ANYRES64=r0], 0x108}}], 0x2, 0xc040) 3.052713332s ago: executing program 4 (id=489): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="01000000090000000500000004"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000040), 0x3d, r0}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000840)={r0, &(0x7f0000000580), &(0x7f0000000940)=""/208}, 0x20) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sec\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sec/ima/policy\x00', 0x1, 0x0) write(r1, 0x0, 0x0) openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, 0x0, 0x40) r3 = socket(0x2d, 0x2, 0x0) sendto(r3, 0x0, 0x42, 0x40040, &(0x7f0000000500)=@generic={0x2d, "00000000000000000800010000000600"}, 0x80) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) openat2$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = openat$rfkill(0xffffffffffffff9c, 0x0, 0x290004, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r4, 0x5201) mount$9p_virtio(0x0, &(0x7f0000004580)='./sec\x00', &(0x7f00000045c0), 0x20, &(0x7f0000004600)={'trans=virtio,', {[{@uname={'uname', 0x3d, '/dev/uinput\x00'}}, {@version_L}, {@afid={'afid', 0x3d, 0x4}}], [{@obj_role={'obj_role', 0x3d, '{@'}}]}}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000001340)={0x5, [], 0x5, "332ff45f1e0f6a"}) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r1, 0x84, 0x1a, &(0x7f0000003340)={0x2, 0x73, "bb7b3801a0660498d82c5d8de5a1990aa1f335f10e404b543bf10f3709ef52aacdc1dbd269a6ef3deb56245a29ff8ee308b08200c078625a43938d198a673cc540ceb93f368a6cec48f00426b9bf9b1e2c311ac547b8fc6bd1421268c21e113822c83c1fea05cd18f37d3f3f6ed4ded5f65371"}, &(0x7f00000033c0)=0x7b) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0506617, &(0x7f0000000480)={@id={0x2, 0x0, @a}, 0x40, 0x0, '\x00', @a}) setuid(0xee01) 3.029304161s ago: executing program 4 (id=491): r0 = fsopen(&(0x7f0000000100)='nfs\x00', 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff}, 0x80) r2 = socket$rds(0x15, 0x5, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000140)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x4}]}) syz_emit_vhci(0x0, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x2214803, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000600)='mountport\x00', &(0x7f0000000640)='12345\x00', 0x0) 1.642902558s ago: executing program 4 (id=522): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000007c0), 0x1, 0x73a, &(0x7f0000000800)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) truncate(&(0x7f0000000900)='./file1\x00', 0x3000000) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r3, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x67) r4 = syz_io_uring_setup(0x72e0, &(0x7f0000000000)={0x0, 0x999, 0x200, 0x1, 0x31e}, &(0x7f0000000140), &(0x7f0000000200), &(0x7f0000000240)) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='net/wireless\x00') preadv(r5, &(0x7f00000026c0)=[{&(0x7f0000000240)=""/4088, 0xff8}], 0x1, 0x15f, 0x0) syz_ublk_setup_io_uring(0x6f33, &(0x7f0000000280)={0x0, 0x4d91, 0x100, 0x3, 0x1ce, 0x0, r4}, &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380)) sendmsg$NFT_BATCH(r2, 0x0, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000003000000400001802c00040014000100020000007f00000100000000000000001400020002000000e000000200000000000000000d0001007564703a73797a3100000000"], 0x54}}, 0x0) 1.48667266s ago: executing program 4 (id=524): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) unshare(0x400) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x300, 0x0) pselect6(0x900, 0x0, 0x0, &(0x7f0000000240)={0x1f}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) syz_io_uring_setup(0x80047ae, &(0x7f0000000200)={0x0, 0x0, 0x81a0, 0xfffffffa, 0x800035c}, &(0x7f0000000080), &(0x7f0000ff4000), 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000005280)=[{{0x0, 0x0, 0x0}, 0x10009}], 0x1, 0x10000, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000400)={r4, r3, 0x15, 0x0, @void}, 0x10) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000000)='./file0\x00', 0x1000000, &(0x7f00000005c0)=ANY=[@ANYBLOB="6572726f72733d636f6e74696e75652c646973636172642c726f6469722c696f636861727365743d6d6163637972696c6e69632c636865636b3d7374726963742c756e695f786c6174653d312c756e695f786c6174653d302c696f636861727365743d6d6163726f6d616e00806e2c73686f72746e616d653d6d697865642c00d4"], 0x1, 0x253, &(0x7f0000000ec0)="$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") mknodat(0xffffffffffffff9c, &(0x7f0000000180)='./file5\x00', 0x61c0, 0x700) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x14, 0x4e, 0x1, 0x70bd2a, 0x0, {0xa}}, 0x14}}, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000080)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3}, 0x5f) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="6c00000002060108000000000000000001000000050005000a000000050001000700040005000400000000000900020073797a310000000016000300686173683a6e65742c706f72742c6e65740000001c00078008001340000000020800124000000b3108000840", @ANYRESHEX=r5, @ANYRES32], 0x6c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) fsconfig$FSCONFIG_CMD_RECONFIGURE(r3, 0x7, 0x0, 0x0, 0x0) sendmsg$IPSET_CMD_ADD(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x21081e, &(0x7f00000000c0)={[{@block_validity}, {@usrquota}, {@nobh}]}, 0x1, 0x526, &(0x7f00000027c0)="$eJzs3c9vG1kdAPCvnTi/mt1klz0Agt2wu1BQVedH2WjZAywnhNBKiJW4gNQNiRtFseModpYmVCI9c0WiEic4cOAP4Fxx4M4FwY1LOVQqEIEaEAejGY9TN7XTtEntbPz5SKP58cbzfS/pvFd/Hc8LYGDNRMReRIxExEcRMZUdz2VLvN9ckvMe7t9aPti/tZyLRuPDf+TS8uRYtL0mcSm75lhEfO9bET/KPRm3trO7vlQul7ay/dl6ZXO2trN7da2ytFpaLW0sLCzOL869e+2dhSdeu9dIPXNb36iMZFufv/fHva/8JKnWZHak1Y7xZ77q8ZpNLxzGSQxHxHfOOE6/DGXtGel3RXgu+Yh4NSLeTO//qRhKf5sAwEXWaExFY6p9HwC46PJpDiyXL2a5gMnI54vFZg7vtZjIl6u1+pUb1e2NlWaubDoK+Rtr5dJcliucjkIu2Z9PtyOms+v+tJkaOiy/FhGvRMTPR8fT/eJytbzSx//3AMAgu3Rk/P/3aHP8BwAuuLGI3/y++b6931UBAHpkrN8VAAB6zvgPAIPH+A8Ag6c5/p/1oy8AgPPsa/2uAADQc/L/ADBQvvvBB8nSOMief73y8c72evXjqyul2nqxsr1cXK5ubRZXq9XV9Jk9laddr1ytbn7/fmzfnP76Zq0+W9vZvV6pbm/Ur6fP9b5eKqRn7fWgZQBAN6+8cfcvuWREfm88XaJtLodCX2sGvGj5flcA6JuhflcA6BuzfcHgOsV7fOkBuCA6TNH7mLFOXxDywFD4RLv8mSP5///K/8OgaMv/+ytgGDDy/zC45P9hcDUauZPO+R8nPREAON/k+IEun/+/mq1/m3048MOVo2fcOdHlfbYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAhdSa/7eYzQU+Gfl8sRjxUkRMRyF3Y61cmouIlyPiz6OF0WR/vs91BgBOK38/l83/dXnq7cnHil6/dLg5EhE//uWHv7i5VK9v/SliJPfP0dbx+p3s+MIxYRovrgUAwPFa43S6bnsj/3D/1nJr6WV9HnyzOTtoEvdgfyQODuMPx3C6HotCREz8K5ftN+XachensXc7Ij7dqf25mExzIM2pS4/GT2K/1NP4+cfi59Oy5jr5WXzqDOoCg+Zu0v+83+n+y8dMuu58/4+lPdTpZf1fcqnlg7QPfBS/1f8Nden/Zh7tjh8b46t/+Ha30x7cjvjscEQr9kFb/9OKn+sS/+0TtvGvn3v9zW5ljV9FXI7O8dtjzdYrm7O1nd2ra5Wl1dJqaWNhYXF+ce7da+8szKY56tnuo8Hf37vycreypP0TXeKPPaX9Xzxh+3/9v49+8IVj4n/5rU7x8/HaMfGTMfFLJ4y/NPG7rvNvJ/FXurT/ab//KyeMf+9vu09MGw4A9E9tZ3d9qVwubdmwcf43kn+yLzbEzHO//Bu9+iGMROein73VvKePFDUazY3b8UyxuvUYZ5F1A86Dw5s+Iv7T78oAAAAAAAAAAAAAAAAd9eIbS/1uIwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABfX/wMAAP//B0flCg==") 1.236942992s ago: executing program 0 (id=531): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000240)=0x2, 0x4) setsockopt(r0, 0x84, 0x7d, &(0x7f0000000280)="0000000001000000", 0x8) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback, 0x8}, 0x1c) sendto$inet6(r0, &(0x7f0000000000)='X', 0x1, 0x20044040, &(0x7f000005ffe4)={0xa, 0x4e23, 0x3, @loopback}, 0x1c) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0}, &(0x7f0000000140)=0xc) ioctl$TUNSETOWNER(0xffffffffffffffff, 0x400454cc, r3) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {0x0, 0x0}}, './file0\x00'}) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000140)={0x2, 0x8, {0xffffffffffffffff}, {0xee00}, 0xfffffffffffffffb, 0xd4f}) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x1000}, 0x2c, {'user_id', 0x3d, r3}, 0x2c, {'group_id', 0x3d, r4}, 0x2c, {[{@max_read={'max_read', 0x3d, 0x81}}, {@default_permissions}, {@max_read={'max_read', 0x3d, 0x5}}], [{@uid_gt={'uid>', r5}}, {@dont_appraise}, {@smackfshat={'smackfshat', 0x3d, '-]!'}}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@dont_hash}, {@subj_user={'subj_user', 0x3d, '}/]'}}, {@smackfsdef={'smackfsdef', 0x3d, '-$'}}, {@dont_measure}, {@fsuuid={'fsuuid', 0x3d, {[0x61, 0x34, 0x66, 0x39, 0x6, 0x33, 0x31, 0x33], 0x2d, [0x31, 0x0, 0x62, 0x35], 0x2d, [0x5a, 0x66, 0x31, 0x66], 0x2d, [0x63, 0x30, 0x59, 0xbd], 0x2d, [0x35, 0xcd, 0x35, 0x39, 0x64, 0x65, 0x36, 0x32]}}}, {@audit}]}}) 1.128032318s ago: executing program 0 (id=533): r0 = socket$inet6(0xa, 0x3, 0x5) sendmmsg(r0, &(0x7f0000001500)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @remote, 0x0, 0x3}, 0x80, 0x0}, 0x5b4}, {{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @loopback, 0xa, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000001580)=ANY=[@ANYBLOB="1200000000000000", @ANYRES64=r0], 0x108}}], 0x2, 0xc040) 1.125281107s ago: executing program 5 (id=534): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x28040, 0x0) ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000000040)=0x8) r1 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000680)={'syztnl1\x00', 0x0, 0x0, 0x2, 0x5, 0xffffffd, 0x0, @mcast1, @private1, 0xb6, 0x7800, 0x100009, 0x45}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f00000002c0)={'syztnl1\x00', 0x0}) 1.116776614s ago: executing program 1 (id=535): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="01000000090000000500000004"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000040), 0x3d, r0}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000840)={r0, &(0x7f0000000580), &(0x7f0000000940)=""/208}, 0x20) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sec\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sec/ima/policy\x00', 0x1, 0x0) write(r1, 0x0, 0x0) openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, 0x0, 0x40) r3 = socket(0x2d, 0x2, 0x0) sendto(r3, 0x0, 0x42, 0x40040, &(0x7f0000000500)=@generic={0x2d, "00000000000000000800010000000600"}, 0x80) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) openat2$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = openat$rfkill(0xffffffffffffff9c, 0x0, 0x290004, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r4, 0x5201) mount$9p_virtio(&(0x7f0000004540), 0x0, &(0x7f00000045c0), 0x20, &(0x7f0000004600)={'trans=virtio,', {[{@uname={'uname', 0x3d, '/dev/uinput\x00'}}, {@version_L}, {@afid={'afid', 0x3d, 0x4}}], [{@obj_role={'obj_role', 0x3d, '{@'}}]}}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000001340)={0x5, [], 0x5, "332ff45f1e0f6a"}) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r1, 0x84, 0x1a, &(0x7f0000003340)={0x2, 0x73, "bb7b3801a0660498d82c5d8de5a1990aa1f335f10e404b543bf10f3709ef52aacdc1dbd269a6ef3deb56245a29ff8ee308b08200c078625a43938d198a673cc540ceb93f368a6cec48f00426b9bf9b1e2c311ac547b8fc6bd1421268c21e113822c83c1fea05cd18f37d3f3f6ed4ded5f65371"}, &(0x7f00000033c0)=0x7b) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0506617, &(0x7f0000000480)={@id={0x2, 0x0, @a}, 0x40, 0x0, '\x00', @a}) setuid(0xee01) 1.101019972s ago: executing program 0 (id=536): r0 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) read$FUSE(r0, &(0x7f0000000100)={0x2020}, 0x2020) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000042, 0x0, 0x1, 0x0, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x40002, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5202) syz_mount_image$vfat(&(0x7f0000001140), &(0x7f00000010c0)='./file1\x00', 0x2a10446, &(0x7f0000002140)={[{@fat=@tz_utc}, {@uni_xlateno}, {@utf8}, {@utf8no}, {@numtail}, {@shortname_win95}, {@iocharset={'iocharset', 0x3d, 'cp869'}}, {@shortname_win95}, {@uni_xlate}, {@shortname_mixed}, {@iocharset={'iocharset', 0x3d, 'cp855'}}, {@shortname_mixed}, {@iocharset={'iocharset', 0x3d, 'macromanian'}}]}, 0x7f, 0x2ca, &(0x7f0000000900)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat(0xffffffffffffff9c, 0x0, 0x103a42, 0x32) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ifreq(r3, 0x8948, &(0x7f00000000c0)={'vlan1\x00', @ifru_data=0x0}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'gretap0\x00'}) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000003700)={&(0x7f0000000440)={0x44, 0x0, 0x1, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME={0x24, 0x33, @probe_request={{{0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1}, {0x1c00}, @broadcast, @device_a, @initial, {0x6, 0x1}}, @val={0x0, 0x6, @default_ap_ssid}, @void, @void, @void, @void}}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x44}}, 0x28008004) 991.987039ms ago: executing program 8 (id=537): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = userfaultfd(0x801) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000003000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20000000}, 0x94) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x80}) ioctl$UFFDIO_CONTINUE(r1, 0xc028aa05, &(0x7f0000000140)={{&(0x7f0000032000/0x4000)=nil, 0x4000}, 0x1000000}) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a010400000000000000000200000e0900010073797a300000000040000000030a010400000000000000000200000a0900010073797a30000000000900030073797a3000000000140004800800014000000003080002400000000058000000060a010400000000000000000200000a0900010073797a30000000000900020073797a30000000002c0004802800018007000100727400001c000280080001400000000a08000240000000009b00024000000004140000001100010000"], 0xe0}}, 0x0) 966.883508ms ago: executing program 1 (id=538): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="4400000010000305000000000000020000000000", @ANYRES32=0x0, @ANYBLOB="0000000000400000140012800c0001006d6163766c616e00", @ANYRES32, @ANYBLOB="080004"], 0x44}, 0x1, 0x0, 0x0, 0x20000080}, 0x20000090) 939.666311ms ago: executing program 5 (id=539): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = syz_mount_image$fuse(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRES64=r0, @ANYRES8=r0, @ANYRESDEC=0x0, @ANYRES64=r0, @ANYRESDEC=0x0], 0x0, 0x0, 0x0) fcntl$setflags(r0, 0x2, 0x1) read$FUSE(r0, &(0x7f0000000100)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000002140)={0x50, 0x0, r2, {0x7, 0x27, 0x0, 0x14a4014, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x100, 0xfffffffe}}, 0x50) read$FUSE(r0, &(0x7f000000b040)={0x2020, 0x0, 0x0}, 0x2020) r4 = socket$nl_route(0x10, 0x3, 0x0) sendto(r4, &(0x7f00000002c0)="5c000000300005060000000000000000000000004800018044000180090001006761746500000000340002801800020000ffffffffffffffe4000000000000000000000018000580140001800800010000000000fc00030064000000", 0x5c, 0x0, 0x0, 0x0) write$FUSE_INTERRUPT(r0, &(0x7f0000002240)={0x10, 0xffffffffffffffda, r3}, 0x10) open_by_handle_at(r1, &(0x7f00000021c0)=ANY=[@ANYBLOB="1c0000"], 0xfeffffff) 872.523006ms ago: executing program 8 (id=540): r0 = socket(0x840000000002, 0x3, 0x100) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./debug\x00', 0x1ff) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r4, &(0x7f00000000c0)={0xa, 0x4e23, 0xa, @empty, 0x9}, 0x1c) sendmmsg$inet6(r4, &(0x7f0000000480)=[{{&(0x7f0000000040)={0xa, 0x4e23, 0xb, @local, 0xb}, 0x1c, &(0x7f0000000380)=[{&(0x7f0000000180)="f9", 0x1}], 0x1}}], 0x1, 0x8000) mount(0x0, &(0x7f0000000240)='./debug\x00', &(0x7f0000000280)='debugfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0) write(r5, &(0x7f0000000340)="0300000000000000", 0x8) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x54, 0x2, 0x6, 0x301, 0x0, 0x0, {0x0, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x0, 0x0, 0x200}]}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'list:set\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xef7ab6f359d7b58a}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x2}]}, 0x54}, 0x1, 0x0, 0x0, 0x44}, 0x4000080) nanosleep(&(0x7f0000000400)={0x0, 0x5f5e100}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000180)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB='\x00'/10, @ANYRES32=r3, @ANYBLOB="0c00238008001a0003000000"], 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x20008000) sendmmsg(r0, &(0x7f0000006900)=[{{&(0x7f0000000040)=@l2tp={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x38}, 0x4}, 0x80, 0x0, 0x0, &(0x7f0000001a80)=[{0x10, 0x1, 0x8}], 0x10}}], 0x1, 0x40000) 872.297262ms ago: executing program 1 (id=541): r0 = landlock_create_ruleset(&(0x7f0000000140)={0x4000}, 0x30, 0x0) landlock_restrict_self(r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) unshare(0x26020480) move_mount(r1, 0x0, 0xffffffffffffff9c, 0x0, 0x276) r2 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) sendmsg$TEAM_CMD_NOOP(r2, &(0x7f0000000000)={&(0x7f0000003300)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000003f00)={0x0}, 0x1, 0x0, 0x0, 0x20000004}, 0x40040000) 872.061058ms ago: executing program 5 (id=542): socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socket$netlink(0x10, 0x3, 0x0) (async) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c00020008000100", @ANYRES16=r1, @ANYRESHEX=r1], 0x3c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x428a4}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'batadv0\x00'}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}}, 0x8000) 871.095437ms ago: executing program 0 (id=543): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8131, 0xffffffffffffffff, 0x0) syz_mount_image$squashfs(&(0x7f0000000040), &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYRES32=0x0, @ANYRESOCT, @ANYRES64, @ANYRES64, @ANYRES64=0x0, @ANYRES8, @ANYRES32, @ANYRESOCT], 0x2, 0x1c4, &(0x7f0000000780)="$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") 795.408108ms ago: executing program 1 (id=544): r0 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x4, 0x20000}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x8008804}, 0x20000000) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350064756d6d79300000000000000000000008000a00", @ANYRES32=r1], 0x3c}}, 0x8000) sendmsg$inet(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000680)="5c00000013006bcd9e3fe3dceb48aa31206b8703110000001fa1ff0000000000040014020d000a00000000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d00d00000000000000bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) 753.96393ms ago: executing program 5 (id=545): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1, 0x4, 0x8, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000a40), 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000500)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$TUNSETFILTEREBPF(r1, 0x800454e1, &(0x7f0000000000)=r0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) write$cgroup_devices(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1e030600bc5cb60128876360864666702c1ffe80303733373039", @ANYRESDEC], 0xffdd) 752.935542ms ago: executing program 0 (id=546): ioctl$sock_SIOCADDDLCI(0xffffffffffffffff, 0x8980, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) r0 = syz_open_dev$vim2m(&(0x7f0000000680), 0xa, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./debug\x00', &(0x7f00000003c0)='proc\x00', 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0x1f, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005080000000000008200000018010000", @ANYRES32, @ANYBLOB="0000000000000000b7080000048004807b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a6000000850000005000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x35}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) openat(0xffffffffffffff9c, &(0x7f0000000180)='./debug/dynamic_debug/control\x00', 0x602, 0x184) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x11, r0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000280)={0xa, 0x4e22, 0x9, @loopback, 0x3e}, 0x1c) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000200)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x40, 0x700, 0x40, 0x1, {{0x5, 0x4, 0x0, 0x1, 0x14, 0x67, 0x0, 0x0, 0x29, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r4, 0x89f5, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f0000000140)={'sit0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @empty}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r4, 0x89f6, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f0000000140)={'ip_vti0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @empty}}}}) nanosleep(&(0x7f0000000300)={0x0, 0xbebc200}, 0x0) capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000000)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x40}) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x12, 0x2, 0x8, 0xd0eb, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x50) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xfffffffd, {0x0, 0x0, 0x0, r5, {0x0, 0xfff3}, {0xfff3, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4c840) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x64, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xb, 0x7}, {0x0, 0xfff3}, {0xd, 0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x34, 0x2, [@TCA_BASIC_EMATCHES={0x28, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_META={0x18, 0x1, 0x0, 0x0, {{0x7, 0x4, 0x4}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x5, 0xe, 0x1}, {0x5, 0xc0, 0x1}}}]}}]}]}, @TCA_BASIC_CLASSID={0x5, 0x1, {0xfff3}}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x5, 0x30, r3, 0x1d002000) connect$inet6(r2, &(0x7f0000000140)={0xa, 0x4e22, 0x56202329, @empty, 0x4000005}, 0x1c) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newsa={0x158, 0x10, 0x5, 0x1, 0x0, {{@in6=@loopback, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x80, 0x80, 0x0, 0x0, 0x80}, {@in6=@loopback, 0x1234, 0x33}, @in6=@loopback, {0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0x1}, {}, 0x0, 0x0, 0xa, 0x0, 0x0, 0x80}, [@algo_auth={0x48, 0x1, {{'hmac(sha1)\x00'}}}, @replay_esn_val={0x20, 0x17, {0x1, 0x0, 0x0, 0x2, 0x4000, 0x20, [0x0]}}]}, 0x158}}, 0x0) sendmsg$nl_xfrm(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=@newpolicy={0xfc, 0x13, 0x5, 0x1, 0x0, {{@in6=@loopback, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x80, 0x80}, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}, {}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@loopback, 0x1234, 0x33}, 0xa, @in6=@loopback}]}]}, 0xfc}}, 0x0) 699.151147ms ago: executing program 1 (id=547): syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) fsopen(0x0, 0x1) socket$packet(0x11, 0x3, 0x300) unshare(0x20400) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x1, 0x0, 0x800, 0x0, 0x100001, 0x3}, 0x0, &(0x7f0000000240)={0x1f, 0x2, 0xffff, 0x3, 0x40004, 0x80000000000000, 0x6a9}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) (fail_nth: 1) 643.219985ms ago: executing program 1 (id=548): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f00000000c0)={0x3, &(0x7f0000000000)=[{0x20, 0x0, 0xf5, 0xfffff010}, {0x28, 0x0, 0x0, 0xfbfff00c}, {0x6}]}, 0x10) sendmmsg$inet(r0, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000a80)="2a73ed35", 0x732a}], 0x1}}], 0x400000000000292, 0x0) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0xa00008, &(0x7f0000000000)={[{@grpquota}, {@errors_remount}]}, 0x3, 0x7b5, &(0x7f00000007c0)="$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") r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="38f38801c118cc7303", @ANYRES16=r3, @ANYBLOB="01006cbd7000000000001a0000000c00018008000100", @ANYRES32=0x0, @ANYBLOB], 0x20}, 0x1, 0x0, 0x0, 0x4000801}, 0x40) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r5 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x0, 0x4) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) listen(r7, 0xfff) accept$inet6(r7, 0x0, 0x0) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x7, 0x7fc00003}]}) syz_clone3(0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r8, 0xc0502100, &(0x7f0000000000)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r8, 0x40182103, &(0x7f0000000080)={r9, 0x1, r8, 0x4}) r10 = openat$cgroup_ro(r6, &(0x7f0000000200)='cgroup.controllers\x00', 0x5000000, 0x0) read$char_usb(r10, &(0x7f0000000080)=""/248, 0xf8) ioctl$VIDIOC_QBUF(r10, 0xc058560f, &(0x7f0000000180)=@userptr={0x10c5, 0xa, 0x4, 0x400, 0x1b6, {0x0, 0x2710}, {0x1, 0x2, 0xb, 0x4, 0x0, 0x5, "5807afd9"}, 0x2a, 0x2, {&(0x7f0000000040)}, 0x5}) r11 = fanotify_init(0xf00, 0x0) fanotify_mark(r11, 0x1, 0x5000003a, r4, 0x0) r12 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_CMAP(r12, 0x4b70, &(0x7f0000000200)) r13 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0xa880, 0x97) fanotify_mark(r11, 0x5, 0x4800003e, r13, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x800, 0x8) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) 642.765403ms ago: executing program 8 (id=549): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="01000000090000000500000004"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000040), 0x3d, r0}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000840)={r0, &(0x7f0000000580), &(0x7f0000000940)=""/208}, 0x20) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sec\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sec/ima/policy\x00', 0x1, 0x0) write(r1, 0x0, 0x0) openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, 0x0, 0x40) r3 = socket(0x2d, 0x2, 0x0) sendto(r3, 0x0, 0x42, 0x40040, &(0x7f0000000500)=@generic={0x2d, "00000000000000000800010000000600"}, 0x80) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) openat2$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = openat$rfkill(0xffffffffffffff9c, 0x0, 0x290004, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r4, 0x5201) mount$9p_virtio(&(0x7f0000004540), 0x0, &(0x7f00000045c0), 0x20, &(0x7f0000004600)={'trans=virtio,', {[{@uname={'uname', 0x3d, '/dev/uinput\x00'}}, {@version_L}, {@afid={'afid', 0x3d, 0x4}}], [{@obj_role={'obj_role', 0x3d, '{@'}}]}}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000001340)={0x5, [], 0x5, "332ff45f1e0f6a"}) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r1, 0x84, 0x1a, &(0x7f0000003340)={0x2, 0x73, "bb7b3801a0660498d82c5d8de5a1990aa1f335f10e404b543bf10f3709ef52aacdc1dbd269a6ef3deb56245a29ff8ee308b08200c078625a43938d198a673cc540ceb93f368a6cec48f00426b9bf9b1e2c311ac547b8fc6bd1421268c21e113822c83c1fea05cd18f37d3f3f6ed4ded5f65371"}, &(0x7f00000033c0)=0x7b) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0506617, &(0x7f0000000480)={@id={0x2, 0x0, @a}, 0x40, 0x0, '\x00', @a}) setuid(0xee01) 612.01205ms ago: executing program 8 (id=550): r0 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000002d40)="5c00000013006bcc9e3be35c6e17aa31076b876c1c00f0ff7ea60864160af3653c004f1ac00800040081000200457601c00364683b9dad7aa21240d69a6a818cf6c551ae60fc91bbb0ce8ff8ecbe9db43b0579674557ec966cb2450d", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4054) 90.247584ms ago: executing program 4 (id=551): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$sock(r0, &(0x7f0000000000)={0x0, 0x80000, &(0x7f0000000100)=[{&(0x7f0000000240)="2e00000013000500000000000000000003010000100002007664706173696d5f6e6574000a000400766470793000", 0x2e}], 0x1}, 0x0) 39.80486ms ago: executing program 8 (id=552): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="1900000004000000080000000800000000000000", @ANYRES32, @ANYBLOB="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", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x8, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4) sendmsg$unix(r1, &(0x7f00000006c0)={0x0, 0xfffffffffffffe96, 0x0, 0x0, 0x0, 0x0, 0x20000001}, 0x40000) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000080)={0xc, {"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", 0x1000}}, 0x1006) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000000c0)={'vlan1\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="8c00000010000d042bbd70000200000000000000", @ANYRES32=r7, @ANYBLOB="00020600a08601046c00128009000100766c616e000000005c00028058000380"], 0x8c}, 0x1, 0x0, 0x0, 0x4008000}, 0x40804) 39.050728ms ago: executing program 0 (id=553): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@ipv6_newrule={0x2c, 0x20, 0x2d2c6d60ea1da725, 0x70bd29, 0x25dfdbfd, {0xa, 0x0, 0x0, 0x4d, 0xff, 0x0, 0x0, 0x1, 0x10002}, [@FIB_RULE_POLICY=@FRA_PRIORITY={0x8}, @FIB_RULE_POLICY=@FRA_SUPPRESS_PREFIXLEN={0x8, 0xe, 0xe}]}, 0x2c}, 0x1, 0x88a8ffff, 0x0, 0x20008081}, 0x0) 38.741861ms ago: executing program 5 (id=554): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="6000000055000500010000000000000007000000", @ANYRES32=r1, @ANYBLOB="20000100", @ANYRES32=r2, @ANYBLOB="01000000ef01010100000000000ffe000000000008000000280002800500"], 0x60}}, 0x0) 304.784µs ago: executing program 5 (id=555): openat$uhid(0xffffffffffffff9c, &(0x7f0000000180), 0x802, 0x0) (async) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000080)=0x0) io_submit(r1, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r0, 0x0}]) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgrp2\x00', 0x1ff) mount$cgroup2(0x0, &(0x7f0000000000)='./cgrp2\x00', &(0x7f0000000100), 0x0, 0x0) (async) readahead(r0, 0x2, 0x100000000) (async) openat(0xffffffffffffff9c, &(0x7f0000000300)='./cgrp2/cgroup.subtree_control\x00', 0x1, 0x0) (async) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0xc0000, 0x0) (async, rerun: 64) write(0xffffffffffffffff, &(0x7f00000000c0)="0df41cfbc4e36d61", 0x8) (rerun: 64) 0s ago: executing program 8 (id=556): mkdirat(0xffffffffffffff9c, &(0x7f0000000b40)='./mnt\x00', 0x1af) mount(&(0x7f0000000100), &(0x7f0000000140)='./mnt\x00', &(0x7f0000000300)='ecryptfs\x00', 0x0, &(0x7f0000000340)='ecryptfs_sig=syz0,ecryptfs_cipher=aes,ecryptfs_key_bytes=16,ecryptfs_passthrough\x00') kernel console output (not intermixed with test programs): vice team0 [ 37.551681][ T4400] 8021q: adding VLAN 0 to HW filter on device eth12 [ 37.554685][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.554718][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.562226][ T1317] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.562250][ T1317] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.659856][ T5529] netlink: 8 bytes leftover after parsing attributes in process `syz.6.100'. [ 37.779675][ T4720] Bluetooth: hci2: command tx timeout [ 38.135498][ T5403] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.195197][ T4400] 8021q: adding VLAN 0 to HW filter on device eth13 [ 38.260337][ T4711] Bluetooth: hci5: Entering manufacturer mode failed (-110) [ 38.262498][ T5403] veth0_vlan: entered promiscuous mode [ 38.264466][ T5403] veth1_vlan: entered promiscuous mode [ 38.283793][ T5403] veth0_macvtap: entered promiscuous mode [ 38.294084][ T5403] veth1_macvtap: entered promiscuous mode [ 38.303398][ T5403] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.304344][ T5403] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.321683][ T1317] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.321964][ T1317] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.322039][ T1317] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.341347][ T12] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.356904][ T64] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 38.356918][ T64] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 38.379589][ T64] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 38.379603][ T64] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 38.419216][ T4720] Bluetooth: hci4: command tx timeout [ 38.446441][ T4400] 8021q: adding VLAN 0 to HW filter on device eth14 [ 38.487142][ T5578] loop8: detected capacity change from 0 to 2048 [ 38.513673][ T5578] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 38.666726][ T4400] 8021q: adding VLAN 0 to HW filter on device eth15 [ 39.162358][ T5611] FAULT_INJECTION: forcing a failure. [ 39.162358][ T5611] name failslab, interval 1, probability 0, space 0, times 0 [ 39.162383][ T5611] CPU: 0 UID: 0 PID: 5611 Comm: syz.5.104 Not tainted syzkaller #0 PREEMPT [ 39.162395][ T5611] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 39.162399][ T5611] Call trace: [ 39.162403][ T5611] show_stack+0x2c/0x3c (C) [ 39.162419][ T5611] __dump_stack+0x30/0x40 [ 39.162430][ T5611] dump_stack_lvl+0xd8/0x12c [ 39.162440][ T5611] dump_stack+0x1c/0x28 [ 39.162449][ T5611] should_fail_ex+0x418/0x58c [ 39.162460][ T5611] should_failslab+0xc4/0x120 [ 39.162471][ T5611] __kvmalloc_node_noprof+0x160/0x7fc [ 39.162480][ T5611] pfifo_fast_init+0xf4/0x2f4 [ 39.162489][ T5611] qdisc_create_dflt+0x120/0x460 [ 39.162498][ T5611] attach_one_default_qdisc+0xb0/0x194 [ 39.162507][ T5611] dev_activate+0x250/0xc4c [ 39.162516][ T5611] __dev_open+0x554/0x76c [ 39.162523][ T5611] __dev_change_flags+0x294/0x698 [ 39.162533][ T5611] netif_change_flags+0x80/0x15c [ 39.162542][ T5611] dev_change_flags+0x10c/0x204 [ 39.162549][ T5611] dev_ifsioc+0x350/0xc34 [ 39.162559][ T5611] dev_ioctl+0x444/0xc88 [ 39.162569][ T5611] sock_do_ioctl+0x198/0x254 [ 39.162578][ T5611] sock_ioctl+0x55c/0x7ec [ 39.162587][ T5611] __arm64_sys_ioctl+0x154/0x1cc [ 39.162598][ T5611] invoke_syscall+0x98/0x244 [ 39.162608][ T5611] el0_svc_common+0xec/0x23c [ 39.162617][ T5611] do_el0_svc+0x4c/0x5c [ 39.162626][ T5611] el0_svc+0x60/0x1d8 [ 39.162636][ T5611] el0t_64_sync_handler+0x44/0x104 [ 39.162645][ T5611] el0t_64_sync+0x198/0x19c [ 39.162854][ T5611] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 39.162879][ T5611] syzkaller0: entered promiscuous mode [ 39.162889][ T5611] syzkaller0: entered allmulticast mode [ 39.183339][ T5403] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.328064][ T5622] loop8: detected capacity change from 0 to 256 [ 39.383624][ T5623] openvswitch: netlink: Missing valid actions attribute. [ 39.383644][ T5623] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 39.700565][ T5629] batman_adv: batadv0: Adding interface: syz_tun [ 39.700583][ T5629] batman_adv: batadv0: The MTU of interface syz_tun is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 39.700598][ T5629] batman_adv: batadv0: Interface activated: syz_tun [ 39.705008][ T5629] FAULT_INJECTION: forcing a failure. [ 39.705008][ T5629] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 39.705035][ T5629] CPU: 1 UID: 0 PID: 5629 Comm: syz.7.107 Not tainted syzkaller #0 PREEMPT [ 39.705047][ T5629] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 39.705054][ T5629] Call trace: [ 39.705058][ T5629] show_stack+0x2c/0x3c (C) [ 39.705077][ T5629] __dump_stack+0x30/0x40 [ 39.705091][ T5629] dump_stack_lvl+0xd8/0x12c [ 39.705100][ T5629] dump_stack+0x1c/0x28 [ 39.705110][ T5629] should_fail_ex+0x418/0x58c [ 39.705121][ T5629] should_fail+0x14/0x24 [ 39.705130][ T5629] should_fail_usercopy+0x20/0x30 [ 39.705140][ T5629] _copy_from_iter+0x188/0x1064 [ 39.705148][ T5629] copy_page_from_iter+0x220/0x2e8 [ 39.705154][ T5629] tun_get_user+0x1784/0x36d0 [ 39.705164][ T5629] tun_chr_write_iter+0xfc/0x168 [ 39.705172][ T5629] vfs_write+0x51c/0xa0c [ 39.705183][ T5629] ksys_write+0x12c/0x228 [ 39.705192][ T5629] __arm64_sys_write+0x84/0x98 [ 39.705202][ T5629] invoke_syscall+0x98/0x244 [ 39.705212][ T5629] el0_svc_common+0xec/0x23c [ 39.705222][ T5629] do_el0_svc+0x4c/0x5c [ 39.705231][ T5629] el0_svc+0x60/0x1d8 [ 39.705241][ T5629] el0t_64_sync_handler+0x44/0x104 [ 39.705250][ T5629] el0t_64_sync+0x198/0x19c [ 39.766847][ T5635] ip6gre1: entered allmulticast mode [ 39.815118][ T5640] netlink: 8 bytes leftover after parsing attributes in process `syz.7.112'. [ 39.821980][ T5643] loop6: detected capacity change from 0 to 512 [ 39.827083][ T5643] EXT4-fs: Ignoring removed oldalloc option [ 39.834474][ T5643] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 39.835765][ T5640] nlmon0: Master is either lo or non-ether device [ 39.850279][ T5643] EXT4-fs (loop6): 1 truncate cleaned up [ 39.850758][ T5643] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 39.859694][ T4720] Bluetooth: hci2: command tx timeout [ 39.973318][ T5053] EXT4-fs error (device loop6): ext4_lookup:1787: inode #14: comm syz-executor: invalid fast symlink length 39 [ 39.973626][ T5053] EXT4-fs error (device loop6): ext4_lookup:1787: inode #14: comm syz-executor: invalid fast symlink length 39 [ 40.007279][ T5601] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.287061][ T5660] netlink: 'syz.5.120': attribute type 1 has an invalid length. [ 40.559860][ T4720] Bluetooth: hci4: command tx timeout [ 40.677348][ T1226] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.837961][ T5677] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 41.003834][ T1226] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.093968][ T1226] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.171691][ T1226] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.253947][ T4711] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 41.254703][ T4711] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 41.255136][ T4711] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 41.255461][ T4711] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 41.255665][ T4711] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 41.584867][ T1226] bridge_slave_1: left allmulticast mode [ 41.584888][ T1226] bridge_slave_1: left promiscuous mode [ 41.584971][ T1226] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.586925][ T1226] bridge_slave_0: left allmulticast mode [ 41.586936][ T1226] bridge_slave_0: left promiscuous mode [ 41.586997][ T1226] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.734724][ T5702] netlink: 12 bytes leftover after parsing attributes in process `syz.8.129'. [ 41.750539][ T1226] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 41.770513][ T1226] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 41.786266][ T5706] loop8: detected capacity change from 0 to 256 [ 41.790286][ T1226] bond0 (unregistering): Released all slaves [ 41.914194][ T5707] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.914493][ T5707] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.939430][ T4711] Bluetooth: hci2: command tx timeout [ 42.220852][ T5707] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 42.222709][ T5707] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 42.242686][ T5716] netlink: 20 bytes leftover after parsing attributes in process `syz.7.132'. [ 42.242705][ T5716] netlink: 8 bytes leftover after parsing attributes in process `syz.7.132'. [ 42.335883][ T5720] loop7: detected capacity change from 0 to 2048 [ 42.352099][ T5720] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 42.459935][ T1317] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.459969][ T1317] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.459985][ T1317] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.460000][ T1317] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.498842][ T5733] netlink: 292 bytes leftover after parsing attributes in process `syz.5.136'. [ 42.509438][ T5733] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(7) [ 42.509459][ T5733] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 42.510078][ T5733] vhci_hcd vhci_hcd.0: Device attached [ 42.512621][ T5735] vhci_hcd: unknown pdu 1 [ 42.513565][ T1237] vhci_hcd vhci_hcd.5: stop threads [ 42.513576][ T1237] vhci_hcd vhci_hcd.5: release socket [ 42.513597][ T1237] vhci_hcd vhci_hcd.5: disconnect device [ 42.710707][ T1226] hsr_slave_0: left promiscuous mode [ 42.711021][ T1226] hsr_slave_1: left promiscuous mode [ 42.711272][ T1226] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 42.711283][ T1226] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 42.712085][ T1226] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 42.712095][ T1226] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 42.723211][ T1226] veth1_macvtap: left promiscuous mode [ 42.723245][ T1226] veth0_macvtap: left promiscuous mode [ 42.723297][ T1226] veth1_vlan: left promiscuous mode [ 42.723333][ T1226] veth0_vlan: left promiscuous mode [ 42.851931][ T1226] team0 (unregistering): Port device team_slave_1 removed [ 42.856263][ T1226] team0 (unregistering): Port device team_slave_0 removed [ 42.880507][ T5222] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.924431][ T5758] xt_policy: neither incoming nor outgoing policy selected [ 42.952233][ T5750] macsec1: entered promiscuous mode [ 42.952254][ T5750] macsec1: entered allmulticast mode [ 42.961639][ T4400] 8021q: adding VLAN 0 to HW filter on device eth16 [ 42.992352][ T5761] 9p: Bad value for 'rfdno' [ 42.992492][ T5759] 9p: Bad value for 'rfdno' [ 42.992726][ T5759] skbuff: bad partial csum: csum=65535/2 headroom=178 headlen=65543 [ 43.052950][ T5686] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.053700][ T5686] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.053802][ T5686] bridge_slave_0: entered allmulticast mode [ 43.073874][ T5686] bridge_slave_0: entered promiscuous mode [ 43.075280][ T5686] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.075303][ T5686] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.075354][ T5686] bridge_slave_1: entered allmulticast mode [ 43.075736][ T5686] bridge_slave_1: entered promiscuous mode [ 43.093808][ T5773] loop8: detected capacity change from 0 to 128 [ 43.094436][ T5686] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 43.097472][ T5775] netlink: 12 bytes leftover after parsing attributes in process `syz.5.143'. [ 43.104923][ T5773] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 43.116287][ T5686] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 43.121300][ T5768] 9pnet: p9_errstr2errno: server reported unknown error 0x000000 [ 43.124718][ T5768] loop7: detected capacity change from 0 to 256 [ 43.138529][ T5768] FAT-fs (loop7): unable to read boot sector [ 43.149509][ T5773] EXT4-fs (loop8): re-mounted 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 43.198390][ T5403] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 43.202289][ T5686] team0: Port device team_slave_0 added [ 43.203032][ T5686] team0: Port device team_slave_1 added [ 43.246459][ T5792] loop5: detected capacity change from 0 to 512 [ 43.258750][ T5790] FAULT_INJECTION: forcing a failure. [ 43.258750][ T5790] name failslab, interval 1, probability 0, space 0, times 0 [ 43.258774][ T5790] CPU: 0 UID: 0 PID: 5790 Comm: syz.7.144 Not tainted syzkaller #0 PREEMPT [ 43.258787][ T5790] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 43.258793][ T5790] Call trace: [ 43.258796][ T5790] show_stack+0x2c/0x3c (C) [ 43.258814][ T5790] __dump_stack+0x30/0x40 [ 43.258827][ T5790] dump_stack_lvl+0xd8/0x12c [ 43.258839][ T5790] dump_stack+0x1c/0x28 [ 43.258850][ T5790] should_fail_ex+0x418/0x58c [ 43.258862][ T5790] should_failslab+0xc4/0x120 [ 43.258876][ T5790] __kmalloc_noprof+0x108/0x6c8 [ 43.258884][ T5790] fanotify_handle_event+0x1fd0/0x331c [ 43.258896][ T5790] fsnotify+0xeb0/0x16c0 [ 43.258905][ T5790] __fsnotify_parent+0x44c/0x530 [ 43.258914][ T5790] __fput+0x268/0x74c [ 43.258922][ T5790] fput_close_sync+0x10c/0x278 [ 43.258931][ T5790] __arm64_sys_close+0x80/0x110 [ 43.258943][ T5790] invoke_syscall+0x98/0x244 [ 43.258955][ T5790] el0_svc_common+0xec/0x23c [ 43.258966][ T5790] do_el0_svc+0x4c/0x5c [ 43.258977][ T5790] el0_svc+0x60/0x1d8 [ 43.258990][ T5790] el0t_64_sync_handler+0x44/0x104 [ 43.259012][ T5790] el0t_64_sync+0x198/0x19c [ 43.292133][ T5792] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.298626][ T5792] EXT4-fs error (device loop5): ext4_xattr_block_get:608: inode #15: comm syz.5.146: corrupted xattr block 33: invalid ea_ino [ 43.302179][ T4711] Bluetooth: hci3: command tx timeout [ 43.303781][ T5686] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 43.303792][ T5686] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 43.303804][ T5686] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 43.304305][ T5686] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 43.304313][ T5686] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 43.304327][ T5686] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 43.318644][ T5792] EXT4-fs error (device loop5): ext4_xattr_block_get:608: inode #15: comm syz.5.146: corrupted xattr block 33: invalid ea_ino [ 43.347094][ T5792] EXT4-fs error (device loop5): ext4_xattr_block_get:608: inode #15: comm syz.5.146: corrupted xattr block 33: invalid ea_ino [ 43.348659][ T5686] hsr_slave_0: entered promiscuous mode [ 43.348964][ T5686] hsr_slave_1: entered promiscuous mode [ 43.351971][ T5792] FAULT_INJECTION: forcing a failure. [ 43.351971][ T5792] name failslab, interval 1, probability 0, space 0, times 0 [ 43.351988][ T5792] CPU: 0 UID: 0 PID: 5792 Comm: syz.5.146 Not tainted syzkaller #0 PREEMPT [ 43.352000][ T5792] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 43.352015][ T5792] Call trace: [ 43.352018][ T5792] show_stack+0x2c/0x3c (C) [ 43.352040][ T5792] __dump_stack+0x30/0x40 [ 43.352053][ T5792] dump_stack_lvl+0xd8/0x12c [ 43.352063][ T5792] dump_stack+0x1c/0x28 [ 43.352072][ T5792] should_fail_ex+0x418/0x58c [ 43.352086][ T5792] should_failslab+0xc4/0x120 [ 43.352098][ T5792] kmem_cache_alloc_noprof+0x94/0x5d4 [ 43.352106][ T5792] do_getname+0x48/0x234 [ 43.352114][ T5792] __arm64_sys_unlinkat+0xa8/0x108 [ 43.352124][ T5792] invoke_syscall+0x98/0x244 [ 43.352134][ T5792] el0_svc_common+0xec/0x23c [ 43.352143][ T5792] do_el0_svc+0x4c/0x5c [ 43.352152][ T5792] el0_svc+0x60/0x1d8 [ 43.352163][ T5792] el0t_64_sync_handler+0x44/0x104 [ 43.352172][ T5792] el0t_64_sync+0x198/0x19c [ 43.354522][ T5793] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 43.370999][ T5038] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.386411][ T5686] debugfs: 'hsr0' already exists in 'hsr' [ 43.386428][ T5686] Cannot create hsr debugfs directory [ 43.447202][ T4400] 8021q: adding VLAN 0 to HW filter on device eth17 [ 43.461277][ T5803] loop5: detected capacity change from 0 to 2048 [ 43.482875][ T5803] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 43.533769][ T5686] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 43.543858][ T5686] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 43.544329][ T5686] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 43.547136][ T5686] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 43.547545][ T5686] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 43.548563][ T5686] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 43.548950][ T5686] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 43.563553][ T5686] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 43.575977][ T5686] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.576006][ T5686] bridge0: port 2(bridge_slave_1) entered forwarding state [ 43.576090][ T5686] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.576118][ T5686] bridge0: port 1(bridge_slave_0) entered forwarding state [ 43.604266][ T5686] 8021q: adding VLAN 0 to HW filter on device bond0 [ 43.608531][ T5686] 8021q: adding VLAN 0 to HW filter on device team0 [ 43.608884][ T1317] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.609713][ T1317] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.622678][ T1317] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.622708][ T1317] bridge0: port 1(bridge_slave_0) entered forwarding state [ 43.633033][ T1226] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.633065][ T1226] bridge0: port 2(bridge_slave_1) entered forwarding state [ 43.636916][ T5686] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 43.636931][ T5686] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 43.736237][ T4400] 8021q: adding VLAN 0 to HW filter on device eth18 [ 43.796462][ T5686] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 43.934418][ T5686] veth0_vlan: entered promiscuous mode [ 43.936324][ T5686] veth1_vlan: entered promiscuous mode [ 43.956433][ T5686] veth0_macvtap: entered promiscuous mode [ 43.961726][ T5686] veth1_macvtap: entered promiscuous mode [ 43.967356][ T5686] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 43.968511][ T5686] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 44.012502][ T1226] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.013802][ T1226] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.013828][ T1226] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.013851][ T1226] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.020434][ T5038] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.033480][ T4711] Bluetooth: hci2: command tx timeout [ 44.056226][ T5864] loop7: detected capacity change from 0 to 512 [ 44.057934][ T5864] EXT4-fs: quotafile must be on filesystem root [ 44.059658][ T4400] 8021q: adding VLAN 0 to HW filter on device eth19 [ 44.084916][ T14] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 44.084930][ T14] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 44.097156][ T64] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 44.097171][ T64] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 44.179604][ T5872] loop9: detected capacity change from 0 to 512 [ 44.203753][ T5872] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 44.220235][ T5872] EXT4-fs (loop9): 1 truncate cleaned up [ 44.220685][ T5872] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 44.265537][ T5864] loop7: detected capacity change from 0 to 512 [ 44.286585][ T5864] EXT4-fs (loop7): invalid journal inode [ 44.286640][ T5864] EXT4-fs (loop7): can't get journal size [ 44.295581][ T5864] EXT4-fs (loop7): 1 truncate cleaned up [ 44.296039][ T5864] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 44.298250][ T5864] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.449960][ T5686] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.534372][ T5901] loop5: detected capacity change from 0 to 256 [ 44.612276][ T5907] tipc: Started in network mode [ 44.612299][ T5907] tipc: Node identity ac14140f, cluster identity 4711 [ 44.612760][ T5907] tipc: Enabled bearer , priority 10 [ 44.619596][ T5897] EXT4-fs: Ignoring removed nobh option [ 44.619611][ T5897] EXT4-fs: Invalid want_extra_isize 5 [ 44.635060][ T5898] wireguard0: entered promiscuous mode [ 44.635076][ T5898] wireguard0: entered allmulticast mode [ 44.653261][ T5898] team0: Device wireguard0 is of different type [ 44.777637][ T5923] wireguard0: entered promiscuous mode [ 44.777654][ T5923] wireguard0: entered allmulticast mode [ 44.787292][ T5923] team0: Device wireguard0 is of different type [ 44.811211][ T4720] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 44.812971][ T4720] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 44.813713][ T4720] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 44.815223][ T4720] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 44.815626][ T4720] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 44.863857][ T5927] loop5: p1 < > [ 45.080400][ T64] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.137571][ T64] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.200793][ T64] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.277310][ T5925] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.277372][ T5925] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.277460][ T5925] bridge_slave_0: entered allmulticast mode [ 45.278156][ T5925] bridge_slave_0: entered promiscuous mode [ 45.279632][ T5925] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.279680][ T5925] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.279805][ T5925] bridge_slave_1: entered allmulticast mode [ 45.280207][ T5925] bridge_slave_1: entered promiscuous mode [ 45.292959][ T5925] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 45.294209][ T5955] [ 45.294217][ T5925] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 45.306795][ T5925] team0: Port device team_slave_0 added [ 45.395472][ T5959] FAULT_INJECTION: forcing a failure. [ 45.395472][ T5959] name failslab, interval 1, probability 0, space 0, times 0 [ 45.395514][ T5959] CPU: 1 UID: 0 PID: 5959 Comm: syz.9.164 Not tainted syzkaller #0 PREEMPT [ 45.395524][ T5959] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 45.395529][ T5959] Call trace: [ 45.395532][ T5959] show_stack+0x2c/0x3c (C) [ 45.395550][ T5959] __dump_stack+0x30/0x40 [ 45.395561][ T5959] dump_stack_lvl+0xd8/0x12c [ 45.395570][ T5959] dump_stack+0x1c/0x28 [ 45.395579][ T5959] should_fail_ex+0x418/0x58c [ 45.395590][ T5959] should_failslab+0xc4/0x120 [ 45.395601][ T5959] __kvmalloc_node_noprof+0x160/0x7fc [ 45.395609][ T5959] analyze_subprog+0x6f0/0x66c0 [ 45.395617][ T5959] bpf_compute_subprog_arg_access+0x24c/0xdb8 [ 45.395624][ T5959] bpf_compute_live_registers+0x6b8/0x129c [ 45.395631][ T5959] bpf_check+0x1dec/0x2428 [ 45.395642][ T5959] bpf_prog_load+0xf4c/0x1554 [ 45.395650][ T5959] __sys_bpf+0x7d4/0x82c [ 45.395657][ T5959] __arm64_sys_bpf+0xd0/0xec [ 45.395665][ T5959] invoke_syscall+0x98/0x244 [ 45.395675][ T5959] el0_svc_common+0xec/0x23c [ 45.395684][ T5959] do_el0_svc+0x4c/0x5c [ 45.395693][ T5959] el0_svc+0x60/0x1d8 [ 45.395703][ T5959] el0t_64_sync_handler+0x44/0x104 [ 45.395712][ T5959] el0t_64_sync+0x198/0x19c [ 45.399486][ T4711] Bluetooth: hci3: command tx timeout [ 45.539465][ T5925] team0: Port device team_slave_1 added [ 45.582448][ T5925] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 45.582466][ T5925] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 45.582483][ T5925] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 45.613761][ T5964] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 45.618446][ T5964] EXT4-fs warning (device loop5): ext4_update_dynamic_rev:1148: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 45.625272][ T5964] EXT4-fs error (device loop5): ext4_validate_block_bitmap:445: comm syz.5.166: bg 0: block 248: padding at end of block bitmap is not set [ 45.625302][ T5964] loop5: lost filesystem error report for type 5 error -117 [ 45.629043][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 45.629060][ C1] EXT4-fs (loop5): last error at time 45: ext4_validate_block_bitmap:445 [ 45.632676][ T5964] Quota error (device loop5): write_blk: dquota write failed [ 45.632719][ T5964] Quota error (device loop5): qtree_write_dquot: Error -28 occurred while creating quota [ 45.632744][ T5964] EXT4-fs error (device loop5): ext4_acquire_dquot:7069: comm syz.5.166: Failed to acquire dquot type 1 [ 45.632756][ T5964] loop5: lost filesystem error report for type 5 error -28 [ 45.638245][ T5964] EXT4-fs (loop5): 1 truncate cleaned up [ 45.638715][ T5964] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 45.660317][ T64] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.684472][ T5038] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 45.692360][ T5925] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 45.692371][ T5925] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 45.692389][ T5925] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 45.696988][ T4813] tipc: Node number set to 2886997007 [ 45.718224][ T5925] hsr_slave_0: entered promiscuous mode [ 45.718523][ T5925] hsr_slave_1: entered promiscuous mode [ 45.718704][ T5925] debugfs: 'hsr0' already exists in 'hsr' [ 45.718715][ T5925] Cannot create hsr debugfs directory [ 45.823942][ T64] bridge_slave_1: left allmulticast mode [ 45.823961][ T64] bridge_slave_1: left promiscuous mode [ 45.824072][ T64] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.825077][ T64] bridge_slave_0: left allmulticast mode [ 45.825092][ T64] bridge_slave_0: left promiscuous mode [ 45.825151][ T64] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.756677][ T64] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 46.768214][ T5997] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 46.781253][ T5997] EXT4-fs (loop8): 1 truncate cleaned up [ 46.781682][ T5997] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 46.833038][ T64] bond_slave_0: left promiscuous mode [ 46.836193][ T5403] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.863868][ T64] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 46.911149][ T4711] Bluetooth: hci5: command tx timeout [ 46.931309][ T64] bond_slave_1: left promiscuous mode [ 46.932071][ T64] bond0 (unregistering): Released all slaves [ 47.126690][ T6008] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 47.360663][ T6031] set_capacity_and_notify: 4 callbacks suppressed [ 47.360678][ T6031] loop9: detected capacity change from 0 to 512 [ 47.361868][ T64] hsr_slave_0: left promiscuous mode [ 47.371788][ T64] hsr_slave_1: left promiscuous mode [ 47.372632][ T64] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 47.372646][ T64] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 47.378092][ T64] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 47.378110][ T64] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 47.402971][ T64] veth1_macvtap: left promiscuous mode [ 47.403005][ T64] veth0_macvtap: left promiscuous mode [ 47.403059][ T64] veth1_vlan: left promiscuous mode [ 47.403097][ T64] veth0_vlan: left promiscuous mode [ 47.421985][ T6031] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.460039][ T4711] Bluetooth: hci3: command tx timeout [ 47.496782][ T6031] EXT4-fs error (device loop9): ext4_xattr_block_get:608: inode #15: comm syz.9.182: corrupted xattr block 33: invalid ea_ino [ 47.512426][ T6031] EXT4-fs error (device loop9): ext4_xattr_block_get:608: inode #15: comm syz.9.182: corrupted xattr block 33: invalid ea_ino [ 47.515836][ T6031] EXT4-fs error (device loop9): ext4_xattr_block_get:608: inode #15: comm syz.9.182: corrupted xattr block 33: invalid ea_ino [ 47.540002][ T6031] EXT4-fs error (device loop9): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 47.550680][ T6031] EXT4-fs error (device loop9): ext4_xattr_delete_inode:2933: inode #15: comm syz.9.182: corrupted xattr block 33: invalid ea_ino [ 47.550775][ T6031] loop9: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 47.563050][ T6031] EXT4-fs warning (device loop9): ext4_evict_inode:288: xattr delete (err -117) [ 47.667941][ T5686] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.777711][ T64] team0 (unregistering): Port device team_slave_1 removed [ 47.791888][ T64] team0 (unregistering): Port device team_slave_0 removed [ 47.864832][ T4400] 8021q: adding VLAN 0 to HW filter on device eth20 [ 47.947364][ T6061] loop9: detected capacity change from 0 to 2048 [ 47.953888][ T6057] FAULT_INJECTION: forcing a failure. [ 47.953888][ T6057] name failslab, interval 1, probability 0, space 0, times 0 [ 47.953908][ T6057] CPU: 0 UID: 0 PID: 6057 Comm: syz.8.189 Not tainted syzkaller #0 PREEMPT [ 47.953919][ T6057] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 47.953925][ T6057] Call trace: [ 47.953928][ T6057] show_stack+0x2c/0x3c (C) [ 47.953947][ T6057] __dump_stack+0x30/0x40 [ 47.953962][ T6057] dump_stack_lvl+0xd8/0x12c [ 47.953973][ T6057] dump_stack+0x1c/0x28 [ 47.953984][ T6057] should_fail_ex+0x418/0x58c [ 47.954008][ T6057] should_failslab+0xc4/0x120 [ 47.954021][ T6057] kmem_cache_alloc_noprof+0x94/0x5d4 [ 47.954030][ T6057] security_inode_alloc+0x40/0x304 [ 47.954040][ T6057] inode_init_always_gfp+0x704/0xb20 [ 47.954052][ T6057] alloc_inode+0x9c/0x198 [ 47.954062][ T6057] sock_alloc+0x4c/0x204 [ 47.954073][ T6057] __sock_create+0x108/0x670 [ 47.954082][ T6057] __sys_socket_create+0xc0/0x11c [ 47.954092][ T6057] __sys_socket+0x44/0xec [ 47.954102][ T6057] __arm64_sys_socket+0x84/0x9c [ 47.954111][ T6057] invoke_syscall+0x98/0x244 [ 47.954123][ T6057] el0_svc_common+0xec/0x23c [ 47.954135][ T6057] do_el0_svc+0x4c/0x5c [ 47.954146][ T6057] el0_svc+0x60/0x1d8 [ 47.954158][ T6057] el0t_64_sync_handler+0x44/0x104 [ 47.954169][ T6057] el0t_64_sync+0x198/0x19c [ 47.954212][ T6057] socket: no more sockets [ 47.961613][ T12] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 47.961654][ T12] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 47.961675][ T12] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 47.961689][ T12] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 48.006162][ T6061] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 48.024756][ T6069] EXT4-fs error (device loop9): ext4_validate_block_bitmap:445: comm syz.9.191: bg 0: block 345: padding at end of block bitmap is not set [ 48.087489][ T6082] Boot memory [70000000 78000000] offlining attempted [ 48.126687][ T6091] loop7: detected capacity change from 0 to 512 [ 48.134735][ T5925] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 48.143039][ T5925] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 48.148864][ T5925] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 48.155911][ T6091] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.155924][ T6092] loop5: detected capacity change from 0 to 512 [ 48.157734][ T5925] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 48.158104][ T5925] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 48.170755][ T5925] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 48.171308][ T6092] EXT4-fs error (device loop5): ext4_validate_block_bitmap:436: comm syz.5.192: bg 0: block 4: invalid block bitmap [ 48.171328][ T6092] loop5: lost filesystem error report for type 5 error -117 [ 48.174703][ T5925] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 48.182081][ T6092] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6680: Corrupt filesystem [ 48.182102][ T6092] loop5: lost filesystem error report for type 5 error -117 [ 48.183900][ T6092] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.192: invalid indirect mapped block 1 (level 1) [ 48.183921][ T6092] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 48.184534][ T6092] EXT4-fs (loop5): 1 truncate cleaned up [ 48.185036][ T6092] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 48.189235][ T5925] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 48.191480][ T6091] EXT4-fs error (device loop7): ext4_xattr_block_get:608: inode #15: comm syz.7.195: corrupted xattr block 33: invalid ea_ino [ 48.191827][ T6091] EXT4-fs error (device loop7): ext4_xattr_block_get:608: inode #15: comm syz.7.195: corrupted xattr block 33: invalid ea_ino [ 48.191986][ T6091] EXT4-fs error (device loop7): ext4_xattr_block_get:608: inode #15: comm syz.7.195: corrupted xattr block 33: invalid ea_ino [ 48.192649][ T6091] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 48.194279][ T6091] EXT4-fs error (device loop7): ext4_xattr_delete_inode:2933: inode #15: comm syz.7.195: corrupted xattr block 33: invalid ea_ino [ 48.194310][ T6091] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 48.195926][ T6091] EXT4-fs warning (device loop7): ext4_evict_inode:288: xattr delete (err -117) [ 48.228333][ T5222] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.265534][ T6105] loop7: detected capacity change from 0 to 512 [ 48.267167][ T6105] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 48.283330][ T6105] EXT4-fs (loop7): 1 truncate cleaned up [ 48.283808][ T6105] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.300135][ T5925] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.309979][ T5925] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.317610][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.317644][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.327189][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.327215][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.453214][ T5222] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.484354][ T6129] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 48.496303][ T5925] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.523805][ T5925] veth0_vlan: entered promiscuous mode [ 48.531992][ T5925] veth1_vlan: entered promiscuous mode [ 48.554791][ T5925] veth0_macvtap: entered promiscuous mode [ 48.561674][ T5925] veth1_macvtap: entered promiscuous mode [ 48.575603][ T5925] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.578937][ T5925] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.590054][ T4400] 8021q: adding VLAN 0 to HW filter on device eth22 [ 48.628650][ T54] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.628667][ T54] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.629349][ T54] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.629540][ T54] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.629620][ T54] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.629655][ T54] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.648663][ T1226] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.648681][ T1226] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.717506][ T6155] loop1: detected capacity change from 0 to 2048 [ 48.746706][ T6155] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 48.812083][ T5686] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.812389][ T6168] netlink: 4 bytes leftover after parsing attributes in process `syz.8.198'. [ 48.812406][ T6168] openvswitch: netlink: Key type 232 is out of range max 32 [ 48.855134][ T5038] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.894795][ T6179] loop5: detected capacity change from 0 to 128 [ 48.902006][ T6179] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a84ec018, mo2=0002] [ 48.902046][ T6179] System zones: 1-3, 19-19, 35-36 [ 48.902559][ T6179] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 48.908790][ T6179] EXT4-fs warning (device loop5): verify_group_input:137: Cannot add at group 49 (only 1 groups) [ 48.908810][ T6179] FAULT_INJECTION: forcing a failure. [ 48.908810][ T6179] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 48.908822][ T6179] CPU: 1 UID: 0 PID: 6179 Comm: syz.5.201 Not tainted syzkaller #0 PREEMPT [ 48.908831][ T6179] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 48.908835][ T6179] Call trace: [ 48.908838][ T6179] show_stack+0x2c/0x3c (C) [ 48.908856][ T6179] __dump_stack+0x30/0x40 [ 48.908869][ T6179] dump_stack_lvl+0xd8/0x12c [ 48.908879][ T6179] dump_stack+0x1c/0x28 [ 48.908888][ T6179] should_fail_ex+0x418/0x58c [ 48.908901][ T6179] should_fail+0x14/0x24 [ 48.908910][ T6179] should_fail_usercopy+0x20/0x30 [ 48.908920][ T6179] simple_read_from_buffer+0xc4/0x238 [ 48.908930][ T6179] proc_fail_nth_read+0x1a8/0x248 [ 48.908938][ T6179] vfs_read+0x230/0x8c8 [ 48.908949][ T6179] ksys_read+0x12c/0x228 [ 48.908959][ T6179] __arm64_sys_read+0x84/0x98 [ 48.908969][ T6179] invoke_syscall+0x98/0x244 [ 48.908978][ T6179] el0_svc_common+0xec/0x23c [ 48.908988][ T6179] do_el0_svc+0x4c/0x5c [ 48.909001][ T6179] el0_svc+0x60/0x1d8 [ 48.909012][ T6179] el0t_64_sync_handler+0x44/0x104 [ 48.909027][ T6179] el0t_64_sync+0x198/0x19c [ 48.966636][ T5038] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 48.979115][ T4711] Bluetooth: hci5: command tx timeout [ 49.073636][ T4400] 8021q: adding VLAN 0 to HW filter on device eth23 [ 49.096305][ T6203] bond0: Unable to set down delay as MII monitoring is disabled [ 49.517566][ T5925] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.539229][ T4711] Bluetooth: hci3: command tx timeout [ 49.717704][ T6236] netlink: 24 bytes leftover after parsing attributes in process `syz.1.210'. [ 49.860523][ T4400] 8021q: adding VLAN 0 to HW filter on device eth21 [ 50.161956][ T6265] capability: warning: `syz.8.215' uses deprecated v2 capabilities in a way that may be insecure [ 50.212523][ T6268] loop8: detected capacity change from 0 to 512 [ 50.229107][ T6268] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e040e01c, mo2=0002] [ 50.229163][ T6268] System zones: 1-12 [ 50.229702][ T6268] EXT4-fs error (device loop8): ext4_xattr_inode_iget:437: inode #12: comm syz.8.216: missing EA_INODE flag [ 50.229715][ T6268] loop8: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 50.231705][ T6268] EXT4-fs error (device loop8): ext4_xattr_inode_iget:442: comm syz.8.216: error while reading EA inode 12 err=-117 [ 50.231729][ T6268] loop8: lost filesystem error report for type 5 error -117 [ 50.231917][ T6268] EXT4-fs (loop8): 1 orphan inode deleted [ 50.232407][ T6268] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.293670][ T6253] ieee802154 phy0 wpan0: encryption failed: -90 [ 50.304495][ T6268] fscrypt (loop8, inode 15): Direct key flag not allowed with different contents and filenames modes [ 50.360947][ T5403] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.431941][ T6282] pimreg: tun_chr_ioctl cmd 1074025673 [ 50.442003][ T6284] loop8: detected capacity change from 0 to 2048 [ 50.477054][ T6284] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 50.504240][ T6297] FAULT_INJECTION: forcing a failure. [ 50.504240][ T6297] name failslab, interval 1, probability 0, space 0, times 0 [ 50.504261][ T6297] CPU: 0 UID: 0 PID: 6297 Comm: syz.9.223 Not tainted syzkaller #0 PREEMPT [ 50.504273][ T6297] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 50.504278][ T6297] Call trace: [ 50.504281][ T6297] show_stack+0x2c/0x3c (C) [ 50.504297][ T6297] __dump_stack+0x30/0x40 [ 50.504308][ T6297] dump_stack_lvl+0xd8/0x12c [ 50.504318][ T6297] dump_stack+0x1c/0x28 [ 50.504327][ T6297] should_fail_ex+0x418/0x58c [ 50.504338][ T6297] should_failslab+0xc4/0x120 [ 50.504349][ T6297] kmem_cache_alloc_noprof+0x94/0x5d4 [ 50.504356][ T6297] ep_insert+0x280/0x12d4 [ 50.504366][ T6297] do_epoll_ctl_file+0xa0c/0xbd4 [ 50.504375][ T6297] do_epoll_ctl+0xa0/0x140 [ 50.504384][ T6297] __arm64_sys_epoll_ctl+0x164/0x1b8 [ 50.504394][ T6297] invoke_syscall+0x98/0x244 [ 50.504404][ T6297] el0_svc_common+0xec/0x23c [ 50.504413][ T6297] do_el0_svc+0x4c/0x5c [ 50.504422][ T6297] el0_svc+0x60/0x1d8 [ 50.504433][ T6297] el0t_64_sync_handler+0x44/0x104 [ 50.504442][ T6297] el0t_64_sync+0x198/0x19c [ 50.541813][ T6304] loop9: detected capacity change from 0 to 512 [ 50.544567][ T6304] EXT4-fs: Ignoring removed oldalloc option [ 50.552798][ T6304] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 50.562146][ T6304] EXT4-fs (loop9): 1 truncate cleaned up [ 50.562597][ T6304] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 50.653801][ T5686] EXT4-fs error (device loop9): ext4_lookup:1787: inode #14: comm syz-executor: invalid fast symlink length 39 [ 50.654658][ T5686] EXT4-fs error (device loop9): ext4_lookup:1787: inode #14: comm syz-executor: invalid fast symlink length 39 [ 50.892619][ T6353] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a842c018, mo2=0002] [ 50.892652][ T6353] System zones: 1-3, 19-19, 35-36 [ 50.905308][ T6353] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 50.915452][ T6357] EXT4-fs: Ignoring removed oldalloc option [ 50.916785][ T6357] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 50.928368][ T6357] EXT4-fs (loop7): 1 truncate cleaned up [ 50.928802][ T6357] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 50.954699][ T6357] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 50.954716][ T6357] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 50.954726][ T6357] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 50.968867][ T6353] ieee802154 phy0 wpan0: encryption failed: -22 [ 50.986076][ T5686] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.991503][ T5222] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.031866][ T5403] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.059729][ T4711] Bluetooth: hci5: command tx timeout [ 51.084857][ T5925] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 51.088409][ T14] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.164089][ T6377] FAULT_INJECTION: forcing a failure. [ 51.164089][ T6377] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 51.164120][ T6377] CPU: 1 UID: 0 PID: 6377 Comm: syz.1.244 Not tainted syzkaller #0 PREEMPT [ 51.164131][ T6377] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 51.164136][ T6377] Call trace: [ 51.164139][ T6377] show_stack+0x2c/0x3c (C) [ 51.164157][ T6377] __dump_stack+0x30/0x40 [ 51.164170][ T6377] dump_stack_lvl+0xd8/0x12c [ 51.164179][ T6377] dump_stack+0x1c/0x28 [ 51.164188][ T6377] should_fail_ex+0x418/0x58c [ 51.164201][ T6377] should_fail+0x14/0x24 [ 51.164211][ T6377] should_fail_usercopy+0x20/0x30 [ 51.164220][ T6377] _inline_copy_from_user+0x3c/0x188 [ 51.164230][ T6377] do_sys_poll+0x1d8/0xc80 [ 51.164237][ T6377] __arm64_sys_ppoll+0x1f0/0x270 [ 51.164244][ T6377] invoke_syscall+0x98/0x244 [ 51.164257][ T6377] el0_svc_common+0xec/0x23c [ 51.164266][ T6377] do_el0_svc+0x4c/0x5c [ 51.164275][ T6377] el0_svc+0x60/0x1d8 [ 51.164285][ T6377] el0t_64_sync_handler+0x44/0x104 [ 51.164295][ T6377] el0t_64_sync+0x198/0x19c [ 51.204780][ T4720] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 51.206047][ T4720] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 51.207771][ T4720] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 51.208566][ T4720] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 51.208901][ T4720] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 51.219185][ T6372] FAULT_INJECTION: forcing a failure. [ 51.219185][ T6372] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 51.219211][ T6372] CPU: 1 UID: 0 PID: 6372 Comm: syz.8.241 Not tainted syzkaller #0 PREEMPT [ 51.219222][ T6372] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 51.219228][ T6372] Call trace: [ 51.219231][ T6372] show_stack+0x2c/0x3c (C) [ 51.219249][ T6372] __dump_stack+0x30/0x40 [ 51.219262][ T6372] dump_stack_lvl+0xd8/0x12c [ 51.219273][ T6372] dump_stack+0x1c/0x28 [ 51.219284][ T6372] should_fail_ex+0x418/0x58c [ 51.219297][ T6372] should_fail+0x14/0x24 [ 51.219308][ T6372] should_fail_usercopy+0x20/0x30 [ 51.219320][ T6372] arch_do_signal_or_restart+0x2e18/0x444c [ 51.219330][ T6372] exit_to_user_mode_loop+0x70/0x17c [ 51.219340][ T6372] el0_svc+0x12c/0x1d8 [ 51.219351][ T6372] el0t_64_sync_handler+0x44/0x104 [ 51.219360][ T6372] el0t_64_sync+0x198/0x19c [ 51.248183][ T14] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.287462][ T6372] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.416463][ T5403] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.416926][ T14] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.538520][ T14] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.867711][ T6432] EXT4-fs: Ignoring removed i_version option [ 51.872665][ T6432] EXT4-fs: Mount option(s) incompatible with ext3 [ 51.921565][ T6439] EXT4-fs: Ignoring removed oldalloc option [ 51.924611][ T6439] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 51.931092][ T6439] EXT4-fs (loop5): 1 truncate cleaned up [ 51.931619][ T6439] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 51.948499][ T6384] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.948581][ T6384] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.948653][ T6384] bridge_slave_0: entered allmulticast mode [ 51.949868][ T6384] bridge_slave_0: entered promiscuous mode [ 51.951756][ T6384] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.951808][ T6384] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.951904][ T6384] bridge_slave_1: entered allmulticast mode [ 51.952447][ T6384] bridge_slave_1: entered promiscuous mode [ 51.961776][ T6384] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 51.962776][ T6384] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 51.971308][ T6439] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 51.971322][ T6439] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 51.971331][ T6439] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 52.000470][ T5038] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.003745][ T6384] team0: Port device team_slave_0 added [ 52.008741][ T6384] team0: Port device team_slave_1 added [ 52.015806][ T14] bridge_slave_1: left allmulticast mode [ 52.015826][ T14] bridge_slave_1: left promiscuous mode [ 52.015924][ T14] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.026378][ T14] bridge_slave_0: left allmulticast mode [ 52.026399][ T14] bridge_slave_0: left promiscuous mode [ 52.026489][ T14] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.142069][ T6449] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 52.173717][ T6459] FAULT_INJECTION: forcing a failure. [ 52.173717][ T6459] name failslab, interval 1, probability 0, space 0, times 0 [ 52.173737][ T6459] CPU: 1 UID: 0 PID: 6459 Comm: syz.7.255 Not tainted syzkaller #0 PREEMPT [ 52.173747][ T6459] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 52.173751][ T6459] Call trace: [ 52.173754][ T6459] show_stack+0x2c/0x3c (C) [ 52.173770][ T6459] __dump_stack+0x30/0x40 [ 52.173781][ T6459] dump_stack_lvl+0xd8/0x12c [ 52.173791][ T6459] dump_stack+0x1c/0x28 [ 52.173800][ T6459] should_fail_ex+0x418/0x58c [ 52.173811][ T6459] should_failslab+0xc4/0x120 [ 52.173823][ T6459] kmem_cache_alloc_node_noprof+0x98/0x604 [ 52.173831][ T6459] __alloc_skb+0x1f0/0x610 [ 52.173841][ T6459] netlink_alloc_large_skb+0xd4/0x114 [ 52.173850][ T6459] netlink_sendmsg+0x4c4/0x948 [ 52.173859][ T6459] __sock_sendmsg+0xc8/0x17c [ 52.173867][ T6459] ____sys_sendmsg+0x3d0/0x6c8 [ 52.173876][ T6459] ___sys_sendmsg+0x198/0x224 [ 52.173884][ T6459] __sys_sendmsg+0x158/0x204 [ 52.173893][ T6459] __arm64_sys_sendmsg+0x88/0x9c [ 52.173902][ T6459] invoke_syscall+0x98/0x244 [ 52.173911][ T6459] el0_svc_common+0xec/0x23c [ 52.173921][ T6459] do_el0_svc+0x4c/0x5c [ 52.173930][ T6459] el0_svc+0x60/0x1d8 [ 52.173940][ T6459] el0t_64_sync_handler+0x44/0x104 [ 52.173949][ T6459] el0t_64_sync+0x198/0x19c [ 52.216187][ T14] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 52.242251][ T14] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 52.252522][ T14] bond0 (unregistering): Released all slaves [ 52.261131][ T6463] netlink: 'syz.1.254': attribute type 10 has an invalid length. [ 52.267462][ T6463] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.267652][ T6463] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.269996][ T6463] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.270039][ T6463] bridge0: port 2(bridge_slave_1) entered forwarding state [ 52.270136][ T6463] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.270168][ T6463] bridge0: port 1(bridge_slave_0) entered forwarding state [ 52.271541][ T6463] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 52.273757][ T6457] netlink: 4 bytes leftover after parsing attributes in process `syz.1.254'. [ 52.273801][ T6457] bridge_slave_1: left allmulticast mode [ 52.273814][ T6457] bridge_slave_1: left promiscuous mode [ 52.273892][ T6457] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.281419][ T6457] bridge_slave_0: left allmulticast mode [ 52.281436][ T6457] bridge_slave_0: left promiscuous mode [ 52.281522][ T6457] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.313779][ T6457] bond0: (slave bridge0): Releasing backup interface [ 52.354850][ T6384] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 52.354865][ T6384] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 52.354879][ T6384] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 52.356580][ T6384] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 52.356588][ T6384] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 52.356604][ T6384] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 52.410890][ T6384] hsr_slave_0: entered promiscuous mode [ 52.411264][ T6384] hsr_slave_1: entered promiscuous mode [ 52.411469][ T6384] debugfs: 'hsr0' already exists in 'hsr' [ 52.411480][ T6384] Cannot create hsr debugfs directory [ 52.487860][ T6485] batman_adv: batadv0: Adding interface: syzkaller0 [ 52.487874][ T6485] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 52.487891][ T6485] batman_adv: batadv0: Interface activated: syzkaller0 [ 52.556733][ T6484] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 52.567392][ T6484] batman_adv: batadv0: Removing interface: syzkaller0 [ 52.607510][ T14] hsr_slave_0: left promiscuous mode [ 52.607836][ T14] hsr_slave_1: left promiscuous mode [ 52.608107][ T14] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 52.608117][ T14] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 52.615471][ T14] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 52.615484][ T14] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 52.624175][ T14] veth1_macvtap: left promiscuous mode [ 52.624207][ T14] veth0_macvtap: left promiscuous mode [ 52.624256][ T14] veth1_vlan: left promiscuous mode [ 52.624299][ T14] veth0_vlan: left promiscuous mode [ 52.658530][ T6507] set_capacity_and_notify: 7 callbacks suppressed [ 52.658544][ T6507] loop8: detected capacity change from 0 to 512 [ 52.670314][ T6507] EXT4-fs: Ignoring removed oldalloc option [ 52.675925][ T6507] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 52.695782][ T6507] EXT4-fs (loop8): 1 truncate cleaned up [ 52.710081][ T6507] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 52.714583][ T5038] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.717473][ T6507] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 52.717485][ T6507] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 52.717496][ T6507] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 52.784760][ T5403] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.842388][ T6514] loop8: detected capacity change from 0 to 256 [ 52.900823][ T14] team0 (unregistering): Port device team_slave_1 removed [ 52.925428][ T14] team0 (unregistering): Port device team_slave_0 removed [ 52.970115][ T6517] FAULT_INJECTION: forcing a failure. [ 52.970115][ T6517] name failslab, interval 1, probability 0, space 0, times 0 [ 52.970149][ T6517] CPU: 1 UID: 0 PID: 6517 Comm: syz.5.264 Not tainted syzkaller #0 PREEMPT [ 52.970160][ T6517] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 52.970166][ T6517] Call trace: [ 52.970169][ T6517] show_stack+0x2c/0x3c (C) [ 52.970188][ T6517] __dump_stack+0x30/0x40 [ 52.970200][ T6517] dump_stack_lvl+0xd8/0x12c [ 52.970212][ T6517] dump_stack+0x1c/0x28 [ 52.970223][ T6517] should_fail_ex+0x418/0x58c [ 52.970236][ T6517] should_failslab+0xc4/0x120 [ 52.970250][ T6517] kmem_cache_alloc_noprof+0x94/0x5d4 [ 52.970258][ T6517] new_userfaultfd+0x8c/0x37c [ 52.970269][ T6517] __arm64_sys_userfaultfd+0x8c/0xac [ 52.970279][ T6517] invoke_syscall+0x98/0x244 [ 52.970291][ T6517] el0_svc_common+0x19c/0x23c [ 52.970303][ T6517] do_el0_svc+0x4c/0x5c [ 52.970314][ T6517] el0_svc+0x60/0x1d8 [ 52.970327][ T6517] el0t_64_sync_handler+0x44/0x104 [ 52.970338][ T6517] el0t_64_sync+0x198/0x19c [ 53.039555][ T6520] loop5: detected capacity change from 0 to 2048 [ 53.064669][ T6520] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 53.139881][ T4720] Bluetooth: hci5: command tx timeout [ 53.162756][ T5038] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.237974][ T6533] netlink: 12 bytes leftover after parsing attributes in process `syz.7.268'. [ 53.237997][ T6533] netlink: 12 bytes leftover after parsing attributes in process `syz.7.268'. [ 53.239847][ T6535] FAULT_INJECTION: forcing a failure. [ 53.239847][ T6535] name failslab, interval 1, probability 0, space 0, times 0 [ 53.239866][ T6535] CPU: 1 UID: 0 PID: 6535 Comm: syz.5.267 Not tainted syzkaller #0 PREEMPT [ 53.239879][ T6535] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 53.239885][ T6535] Call trace: [ 53.239888][ T6535] show_stack+0x2c/0x3c (C) [ 53.239906][ T6535] __dump_stack+0x30/0x40 [ 53.239919][ T6535] dump_stack_lvl+0xd8/0x12c [ 53.239929][ T6535] dump_stack+0x1c/0x28 [ 53.239938][ T6535] should_fail_ex+0x418/0x58c [ 53.239949][ T6535] should_failslab+0xc4/0x120 [ 53.239960][ T6535] kmem_cache_alloc_node_noprof+0x98/0x604 [ 53.239967][ T6535] __alloc_skb+0x1f0/0x610 [ 53.239977][ T6535] netlink_alloc_large_skb+0xd4/0x114 [ 53.239987][ T6535] netlink_sendmsg+0x4c4/0x948 [ 53.239995][ T6535] __sock_sendmsg+0xc8/0x17c [ 53.240004][ T6535] ____sys_sendmsg+0x3d0/0x6c8 [ 53.240013][ T6535] ___sys_sendmsg+0x198/0x224 [ 53.240028][ T6535] __sys_sendmsg+0x158/0x204 [ 53.240037][ T6535] __arm64_sys_sendmsg+0x88/0x9c [ 53.240047][ T6535] invoke_syscall+0x98/0x244 [ 53.240056][ T6535] el0_svc_common+0xec/0x23c [ 53.240066][ T6535] do_el0_svc+0x4c/0x5c [ 53.240075][ T6535] el0_svc+0x60/0x1d8 [ 53.240085][ T6535] el0t_64_sync_handler+0x44/0x104 [ 53.240094][ T6535] el0t_64_sync+0x198/0x19c [ 53.299373][ T4720] Bluetooth: hci0: command tx timeout [ 53.307992][ T6533] netlink: 8 bytes leftover after parsing attributes in process `syz.7.268'. [ 53.317186][ T6541] netlink: 48 bytes leftover after parsing attributes in process `syz.5.269'. [ 53.318262][ T6541] netlink: 48 bytes leftover after parsing attributes in process `syz.5.269'. [ 53.326952][ T6541] usb usb1: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 53.326977][ T6541] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 53.572097][ T6384] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 53.577347][ T6384] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 53.577945][ T6384] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 53.588076][ T6384] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 53.588484][ T6384] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 53.596235][ T6384] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 53.597945][ T6384] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 53.601133][ T6568] loop1: detected capacity change from 0 to 2048 [ 53.605965][ T6384] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 53.624517][ T6568] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 53.671437][ T6384] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.674642][ T6384] 8021q: adding VLAN 0 to HW filter on device team0 [ 53.683928][ T6384] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 53.683944][ T6384] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 53.709386][ T1289] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.709418][ T1289] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.712787][ T1289] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.712818][ T1289] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.751891][ T6590] netlink: 'syz.5.273': attribute type 5 has an invalid length. [ 53.767406][ T6589] loop8: detected capacity change from 0 to 512 [ 53.790731][ T6589] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 53.908021][ T5403] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.992747][ T6384] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 54.028264][ T6384] veth0_vlan: entered promiscuous mode [ 54.062781][ T6384] veth1_vlan: entered promiscuous mode [ 54.081820][ T6384] veth0_macvtap: entered promiscuous mode [ 54.087613][ T6384] veth1_macvtap: entered promiscuous mode [ 54.161899][ T6628] netlink: ct family unspecified [ 54.162595][ T6628] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 54.338862][ T6384] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 54.352466][ T6384] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 54.358524][ T5925] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.418855][ T1226] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 54.418873][ T1226] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 54.444103][ T1226] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 54.444120][ T1226] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 54.450293][ T5990] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.450326][ T5990] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.450343][ T5990] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.450357][ T5990] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.495951][ T6643] bond0: Unable to set down delay as MII monitoring is disabled [ 54.545772][ T6651] loop1: detected capacity change from 0 to 256 [ 54.758746][ T6669] ptrace attach of "ci-upstream-gce-arm64/syz-executor exec"[6384] was attempted by "ci-upstream-gce-arm64/syz-executor exec"[6669] [ 54.945830][ T6669] loop0: detected capacity change from 0 to 8192 [ 54.971706][ T6669] loop0: p1 < > p3 p4 < > [ 54.971727][ T6669] loop0: partition table partially beyond EOD, truncated [ 54.971836][ T6669] loop0: p1 start 51379968 is beyond EOD, truncated [ 54.971846][ T6669] loop0: p3 size 100663552 extends beyond EOD, truncated [ 55.097108][ T6682] X.509: Couldn't decode AuthKeyIdentifier [ 55.389400][ T4720] Bluetooth: hci0: command tx timeout [ 55.456629][ T6714] FAULT_INJECTION: forcing a failure. [ 55.456629][ T6714] name failslab, interval 1, probability 0, space 0, times 0 [ 55.456654][ T6714] CPU: 0 UID: 0 PID: 6714 Comm: syz.1.290 Not tainted syzkaller #0 PREEMPT [ 55.456668][ T6714] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 55.456674][ T6714] Call trace: [ 55.456677][ T6714] show_stack+0x2c/0x3c (C) [ 55.456697][ T6714] __dump_stack+0x30/0x40 [ 55.456710][ T6714] dump_stack_lvl+0xd8/0x12c [ 55.456721][ T6714] dump_stack+0x1c/0x28 [ 55.456732][ T6714] should_fail_ex+0x418/0x58c [ 55.456745][ T6714] should_failslab+0xc4/0x120 [ 55.456758][ T6714] __kmalloc_cache_noprof+0x94/0x5fc [ 55.456767][ T6714] nft_netdev_hook_alloc+0x1cc/0x380 [ 55.456778][ T6714] nf_tables_parse_netdev_hooks+0x12c/0x4c0 [ 55.456789][ T6714] nft_flowtable_parse_hook+0x394/0x7d8 [ 55.456800][ T6714] nf_tables_newflowtable+0xe14/0x134c [ 55.456809][ T6714] nfnetlink_rcv+0xc8c/0x16ec [ 55.456818][ T6714] netlink_unicast+0x600/0x7f8 [ 55.456829][ T6714] netlink_sendmsg+0x648/0x948 [ 55.456839][ T6714] __sock_sendmsg+0xc8/0x17c [ 55.456849][ T6714] ____sys_sendmsg+0x3d0/0x6c8 [ 55.456860][ T6714] ___sys_sendmsg+0x198/0x224 [ 55.456870][ T6714] __sys_sendmsg+0x158/0x204 [ 55.456881][ T6714] __arm64_sys_sendmsg+0x88/0x9c [ 55.456892][ T6714] invoke_syscall+0x98/0x244 [ 55.456904][ T6714] el0_svc_common+0xec/0x23c [ 55.456915][ T6714] do_el0_svc+0x4c/0x5c [ 55.456926][ T6714] el0_svc+0x60/0x1d8 [ 55.456938][ T6714] el0t_64_sync_handler+0x44/0x104 [ 55.456950][ T6714] el0t_64_sync+0x198/0x19c [ 55.522341][ T6721] bond0: Unable to set down delay as MII monitoring is disabled [ 55.556597][ T6727] loop7: detected capacity change from 0 to 512 [ 55.557352][ T6727] EXT4-fs: Ignoring removed oldalloc option [ 55.559191][ T6727] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 55.561803][ T6727] EXT4-fs (loop7): 1 truncate cleaned up [ 55.568898][ T6727] overlayfs: missing 'lowerdir' [ 55.606035][ T6733] loop7: detected capacity change from 0 to 256 [ 55.606550][ T6733] vfat: Unknown parameter '000000000000000000700x0000000000000003�ж+$”ÄÚÆ²þY´nSÇ)RGJÅ3eŸöÚtm–Ç ��ÄnÓ˜{9ã1M¨Å™Óf' [ 55.986086][ T6745] FAULT_INJECTION: forcing a failure. [ 55.986086][ T6745] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 55.986107][ T6745] CPU: 1 UID: 0 PID: 6745 Comm: syz.0.294 Not tainted syzkaller #0 PREEMPT [ 55.986119][ T6745] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 55.986124][ T6745] Call trace: [ 55.986128][ T6745] show_stack+0x2c/0x3c (C) [ 55.986146][ T6745] __dump_stack+0x30/0x40 [ 55.986157][ T6745] dump_stack_lvl+0xd8/0x12c [ 55.986167][ T6745] dump_stack+0x1c/0x28 [ 55.986176][ T6745] should_fail_ex+0x418/0x58c [ 55.986188][ T6745] should_fail+0x14/0x24 [ 55.986197][ T6745] should_fail_usercopy+0x20/0x30 [ 55.986207][ T6745] bpf_verifier_vlog+0x81c/0xbc0 [ 55.986219][ T6745] __btf_verifier_log+0xe8/0x13c [ 55.986226][ T6745] btf_parse_hdr+0x2a4/0x71c [ 55.986234][ T6745] btf_new_fd+0x288/0xa50 [ 55.986244][ T6745] bpf_btf_load+0x144/0x190 [ 55.986253][ T6745] __sys_bpf+0x7f0/0x82c [ 55.986260][ T6745] __arm64_sys_bpf+0xd0/0xec [ 55.986268][ T6745] invoke_syscall+0x98/0x244 [ 55.986278][ T6745] el0_svc_common+0xec/0x23c [ 55.986287][ T6745] do_el0_svc+0x4c/0x5c [ 55.986296][ T6745] el0_svc+0x60/0x1d8 [ 55.986306][ T6745] el0t_64_sync_handler+0x44/0x104 [ 55.986316][ T6745] el0t_64_sync+0x198/0x19c [ 56.566457][ T6785] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(4.838860800.0), cmd(9) [ 56.595639][ T6789] loop7: detected capacity change from 0 to 256 [ 56.699556][ T6797] netlink: 8 bytes leftover after parsing attributes in process `syz.8.301'. [ 56.768382][ T4400] 8021q: adding VLAN 0 to HW filter on device eth0 [ 56.941891][ T4385] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 56.948060][ T4385] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 57.023109][ T6826] fido_id[6826]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 57.055874][ T4400] 8021q: adding VLAN 0 to HW filter on device eth1 [ 57.100681][ T6836] FAULT_INJECTION: forcing a failure. [ 57.100681][ T6836] name failslab, interval 1, probability 0, space 0, times 0 [ 57.100706][ T6836] CPU: 0 UID: 0 PID: 6836 Comm: syz.5.305 Not tainted syzkaller #0 PREEMPT [ 57.100717][ T6836] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 57.100723][ T6836] Call trace: [ 57.100726][ T6836] show_stack+0x2c/0x3c (C) [ 57.100746][ T6836] __dump_stack+0x30/0x40 [ 57.100759][ T6836] dump_stack_lvl+0xd8/0x12c [ 57.100770][ T6836] dump_stack+0x1c/0x28 [ 57.100781][ T6836] should_fail_ex+0x418/0x58c [ 57.100794][ T6836] should_failslab+0xc4/0x120 [ 57.100808][ T6836] kmem_cache_alloc_noprof+0x94/0x5d4 [ 57.100816][ T6836] do_getname+0x48/0x234 [ 57.100825][ T6836] getname_flags+0x2c/0x3c [ 57.100833][ T6836] do_sys_openat2+0xd0/0x1e8 [ 57.100844][ T6836] do_sys_open+0xb0/0xe0 [ 57.100855][ T6836] __arm64_sys_openat+0xa8/0xc4 [ 57.100869][ T6836] invoke_syscall+0x98/0x244 [ 57.100881][ T6836] el0_svc_common+0xec/0x23c [ 57.100893][ T6836] do_el0_svc+0x4c/0x5c [ 57.100904][ T6836] el0_svc+0x60/0x1d8 [ 57.100916][ T6836] el0t_64_sync_handler+0x44/0x104 [ 57.100928][ T6836] el0t_64_sync+0x198/0x19c [ 57.257629][ T4400] 8021q: adding VLAN 0 to HW filter on device eth2 [ 57.343775][ T6855] nvme_rdma: malformed address passed: 1å#åº-&QöÙ;?²s>#ÕZÙÞ>U´ñ7×Û ÷h‘-Ø–ÏíÒY†ïFxŠH:4420 [ 57.411177][ T6865] FAULT_INJECTION: forcing a failure. [ 57.411177][ T6865] name failslab, interval 1, probability 0, space 0, times 0 [ 57.411199][ T6865] CPU: 0 UID: 0 PID: 6865 Comm: syz.0.309 Not tainted syzkaller #0 PREEMPT [ 57.411210][ T6865] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 57.411216][ T6865] Call trace: [ 57.411219][ T6865] show_stack+0x2c/0x3c (C) [ 57.411239][ T6865] __dump_stack+0x30/0x40 [ 57.411254][ T6865] dump_stack_lvl+0xd8/0x12c [ 57.411265][ T6865] dump_stack+0x1c/0x28 [ 57.411276][ T6865] should_fail_ex+0x418/0x58c [ 57.411291][ T6865] should_failslab+0xc4/0x120 [ 57.411307][ T6865] kmem_cache_alloc_lru_noprof+0x98/0x5d8 [ 57.411316][ T6865] proc_alloc_inode+0x2c/0xb8 [ 57.411331][ T6865] alloc_inode+0x68/0x198 [ 57.411343][ T6865] new_inode+0x20/0x50 [ 57.411353][ T6865] proc_pid_make_inode+0x30/0x148 [ 57.411361][ T6865] proc_ns_instantiate+0x58/0xe8 [ 57.411374][ T6865] proc_fill_cache+0x234/0x2f0 [ 57.411382][ T6865] proc_ns_dir_readdir+0x2ac/0x3c0 [ 57.411394][ T6865] iterate_dir+0x290/0x458 [ 57.411407][ T6865] __arm64_sys_getdents64+0x124/0x310 [ 57.411415][ T6865] invoke_syscall+0x98/0x244 [ 57.411428][ T6865] el0_svc_common+0xec/0x23c [ 57.411439][ T6865] do_el0_svc+0x4c/0x5c [ 57.411450][ T6865] el0_svc+0x60/0x1d8 [ 57.411462][ T6865] el0t_64_sync_handler+0x44/0x104 [ 57.411474][ T6865] el0t_64_sync+0x198/0x19c [ 57.460360][ T4720] Bluetooth: hci0: command tx timeout [ 57.651175][ T6871] openvswitch: netlink: Message has 4 unknown bytes. [ 57.651201][ T6871] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 57.660220][ T24] hid-generic 0005:04F3:4155.0002: unknown main item tag 0x0 [ 57.664165][ T24] hid-generic 0005:04F3:4155.0002: hidraw0: BLUETOOTH HID v0.09 Device [syz0] on aa:aa:aa:aa:aa:aa [ 57.716299][ T6879] FAULT_INJECTION: forcing a failure. [ 57.716299][ T6879] name failslab, interval 1, probability 0, space 0, times 0 [ 57.716320][ T6879] CPU: 0 UID: 0 PID: 6879 Comm: syz.8.312 Not tainted syzkaller #0 PREEMPT [ 57.716329][ T6879] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 57.716334][ T6879] Call trace: [ 57.716337][ T6879] show_stack+0x2c/0x3c (C) [ 57.716354][ T6879] __dump_stack+0x30/0x40 [ 57.716365][ T6879] dump_stack_lvl+0xd8/0x12c [ 57.716375][ T6879] dump_stack+0x1c/0x28 [ 57.716384][ T6879] should_fail_ex+0x418/0x58c [ 57.716396][ T6879] should_failslab+0xc4/0x120 [ 57.716408][ T6879] __kmalloc_noprof+0x108/0x6c8 [ 57.716416][ T6879] tomoyo_realpath_from_path+0xbc/0x4dc [ 57.716426][ T6879] tomoyo_path_number_perm+0x1f0/0x500 [ 57.716435][ T6879] tomoyo_file_ioctl+0x2c/0x3c [ 57.716444][ T6879] security_file_ioctl+0xdc/0x2b0 [ 57.716457][ T6879] __arm64_sys_ioctl+0xb0/0x1cc [ 57.716468][ T6879] invoke_syscall+0x98/0x244 [ 57.716478][ T6879] el0_svc_common+0xec/0x23c [ 57.716488][ T6879] do_el0_svc+0x4c/0x5c [ 57.716498][ T6879] el0_svc+0x60/0x1d8 [ 57.716509][ T6879] el0t_64_sync_handler+0x44/0x104 [ 57.716518][ T6879] el0t_64_sync+0x198/0x19c [ 57.716580][ T6879] ERROR: Out of memory at tomoyo_realpath_from_path. [ 57.770521][ T6889] loop8: detected capacity change from 0 to 512 [ 57.780834][ T5282] kernel read not supported for file /kmsg (pid: 5282 comm: kworker/0:7) [ 57.808141][ T6889] FAULT_INJECTION: forcing a failure. [ 57.808141][ T6889] name failslab, interval 1, probability 0, space 0, times 0 [ 57.808162][ T6889] CPU: 1 UID: 0 PID: 6889 Comm: syz.8.314 Not tainted syzkaller #0 PREEMPT [ 57.808174][ T6889] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 57.808179][ T6889] Call trace: [ 57.808182][ T6889] show_stack+0x2c/0x3c (C) [ 57.808199][ T6889] __dump_stack+0x30/0x40 [ 57.808210][ T6889] dump_stack_lvl+0xd8/0x12c [ 57.808220][ T6889] dump_stack+0x1c/0x28 [ 57.808229][ T6889] should_fail_ex+0x418/0x58c [ 57.808240][ T6889] should_failslab+0xc4/0x120 [ 57.808251][ T6889] kmem_cache_alloc_noprof+0x94/0x5d4 [ 57.808259][ T6889] do_getname+0x48/0x234 [ 57.808266][ T6889] __arm64_sys_unlinkat+0xa8/0x108 [ 57.808275][ T6889] invoke_syscall+0x98/0x244 [ 57.808285][ T6889] el0_svc_common+0xec/0x23c [ 57.808294][ T6889] do_el0_svc+0x4c/0x5c [ 57.808304][ T6889] el0_svc+0x60/0x1d8 [ 57.808314][ T6889] el0t_64_sync_handler+0x44/0x104 [ 57.808323][ T6889] el0t_64_sync+0x198/0x19c [ 57.860238][ T6898] loop7: detected capacity change from 0 to 2048 [ 57.942231][ T4400] 8021q: adding VLAN 0 to HW filter on device eth3 [ 58.135230][ T6938] sch_tbf: peakrate 7 is lower than or equals to rate 19 ! [ 58.145367][ T6938] syzkaller0: entered promiscuous mode [ 58.145383][ T6938] syzkaller0: entered allmulticast mode [ 58.261716][ T6950] loop5: detected capacity change from 0 to 1024 [ 58.265075][ T6950] EXT4-fs: Ignoring removed nomblk_io_submit option [ 58.267563][ T6950] EXT4-fs warning (device loop5): ext4_multi_mount_protect:287: Invalid MMP block in superblock [ 59.539228][ T4720] Bluetooth: hci0: command tx timeout [ 59.716953][ T7096] loop7: detected capacity change from 0 to 2048 [ 59.785372][ T7106] FAULT_INJECTION: forcing a failure. [ 59.785372][ T7106] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 59.785394][ T7106] CPU: 0 UID: 0 PID: 7106 Comm: syz.1.329 Not tainted syzkaller #0 PREEMPT [ 59.785404][ T7106] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 59.785409][ T7106] Call trace: [ 59.785412][ T7106] show_stack+0x2c/0x3c (C) [ 59.785431][ T7106] __dump_stack+0x30/0x40 [ 59.785444][ T7106] dump_stack_lvl+0xd8/0x12c [ 59.785453][ T7106] dump_stack+0x1c/0x28 [ 59.785463][ T7106] should_fail_ex+0x418/0x58c [ 59.785476][ T7106] should_fail+0x14/0x24 [ 59.785485][ T7106] should_fail_usercopy+0x20/0x30 [ 59.785495][ T7106] _inline_copy_from_user+0x3c/0x174 [ 59.785505][ T7106] __sys_bpf+0x1b4/0x82c [ 59.785513][ T7106] __arm64_sys_bpf+0xd0/0xec [ 59.785520][ T7106] invoke_syscall+0x98/0x244 [ 59.785531][ T7106] el0_svc_common+0xec/0x23c [ 59.785540][ T7106] do_el0_svc+0x4c/0x5c [ 59.785549][ T7106] el0_svc+0x60/0x1d8 [ 59.785559][ T7106] el0t_64_sync_handler+0x44/0x104 [ 59.785568][ T7106] el0t_64_sync+0x198/0x19c [ 59.820177][ T7111] xt_limit: Overflow, try lower: 167772/2147483648 [ 59.998549][ T7124] IPVS: set_ctl: invalid protocol: 26230 0.0.0.0:0 [ 59.999843][ T7124] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 60.737164][ T7136] loop8: detected capacity change from 0 to 2048 [ 60.768742][ T7138] loop0: detected capacity change from 0 to 512 [ 60.830249][ T7138] EXT4-fs: quotafile must be on filesystem root [ 61.283958][ T7159] netlink: 12 bytes leftover after parsing attributes in process `syz.7.342'. [ 61.587573][ T7168] loop0: detected capacity change from 0 to 256 [ 61.619510][ T7141] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 61.642073][ T7170] loop5: detected capacity change from 0 to 2048 [ 61.807371][ T7182] loop8: detected capacity change from 0 to 4096 [ 61.826862][ T7182] EXT4-fs error (device loop8): ext4_do_update_inode:5801: inode #15: comm syz.8.348: corrupted inode contents [ 61.827185][ T7182] EXT4-fs error (device loop8): ext4_dirty_inode:6736: inode #15: comm syz.8.348: mark_inode_dirty error [ 61.827594][ T7182] EXT4-fs error (device loop8): ext4_do_update_inode:5801: inode #15: comm syz.8.348: corrupted inode contents [ 61.827786][ T7182] EXT4-fs error (device loop8): __ext4_ext_dirty:207: inode #15: comm syz.8.348: mark_inode_dirty error [ 61.828416][ T7182] EXT4-fs error (device loop8): ext4_do_update_inode:5801: inode #15: comm syz.8.348: corrupted inode contents [ 61.828646][ T7182] EXT4-fs error (device loop8): __ext4_ext_dirty:207: inode #15: comm syz.8.348: mark_inode_dirty error [ 61.828816][ T7182] EXT4-fs error (device loop8): ext4_do_update_inode:5801: inode #15: comm syz.8.348: corrupted inode contents [ 61.837154][ T7182] EXT4-fs error (device loop8): ext4_truncate:4721: inode #15: comm syz.8.348: mark_inode_dirty error [ 61.838179][ T7182] EXT4-fs error (device loop8) in ext4_setattr:6247: Corrupt filesystem [ 61.844838][ T7182] EXT4-fs error (device loop8): ext4_do_update_inode:5801: inode #15: comm syz.8.348: corrupted inode contents [ 61.846680][ T7182] syzkaller1: entered promiscuous mode [ 61.846693][ T7182] syzkaller1: entered allmulticast mode [ 62.093394][ T7190] fuse: Unknown parameter 'Ed' [ 62.114290][ T7192] netlink: 'syz.1.351': attribute type 5 has an invalid length. [ 62.114314][ T7192] netlink: 24 bytes leftover after parsing attributes in process `syz.1.351'. [ 62.228342][ T7202] bond0: (slave bond_slave_0): Releasing backup interface [ 62.253388][ T7202] bond0: (slave bond_slave_1): Releasing backup interface [ 62.274733][ T7211] netlink: 'syz.1.357': attribute type 10 has an invalid length. [ 62.283930][ T7202] team0: Port device team_slave_0 removed [ 62.286565][ T7202] team0: Port device team_slave_1 removed [ 62.286883][ T7202] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 62.286895][ T7202] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 62.287897][ T7202] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 62.287908][ T7202] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 62.290684][ T7202] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 62.306073][ T7211] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 62.306945][ T7211] team0: Port device netdevsim1 added [ 62.341623][ T7214] fuse: Bad value for 'fd' [ 62.347347][ T30] audit: type=1326 audit(62.310:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7215 comm="syz.8.361" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff92d78828 code=0x7ffc0000 [ 62.347541][ T30] audit: type=1326 audit(62.310:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7215 comm="syz.8.361" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff92d78828 code=0x7ffc0000 [ 62.347722][ T30] audit: type=1326 audit(62.310:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7215 comm="syz.8.361" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=72 compat=0 ip=0xffff92d78828 code=0x7ffc0000 [ 62.347773][ T30] audit: type=1326 audit(62.310:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7215 comm="syz.8.361" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff92d78828 code=0x7ffc0000 [ 62.347825][ T30] audit: type=1326 audit(62.310:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7215 comm="syz.8.361" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff92d78828 code=0x7ffc0000 [ 62.347954][ T30] audit: type=1326 audit(62.310:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7215 comm="syz.8.361" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=64 compat=0 ip=0xffff92d5b6ec code=0x7ffc0000 [ 62.348069][ T7216] Illegal XDP return value 4294964480 on prog (id 26) dev syz_tun, expect packet loss! [ 62.348166][ T30] audit: type=1326 audit(62.310:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7215 comm="syz.8.361" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff92d78828 code=0x7ffc0000 [ 62.348227][ T30] audit: type=1326 audit(62.310:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7215 comm="syz.8.361" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff92d78828 code=0x7ffc0000 [ 62.348379][ T30] audit: type=1326 audit(62.310:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7215 comm="syz.8.361" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=222 compat=0 ip=0xffff92d78828 code=0x7ffc0000 [ 62.348824][ T30] audit: type=1326 audit(62.310:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7215 comm="syz.8.361" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff92d78828 code=0x7ffc0000 [ 62.357410][ T7216] loop8: detected capacity change from 0 to 256 [ 62.358107][ T7216] vfat: Unknown parameter '' [ 62.464851][ T7222] EXT4-fs (loop0): invalid journal inode [ 62.464891][ T7222] EXT4-fs (loop0): can't get journal size [ 62.474188][ T7224] netlink: 'syz.1.365': attribute type 1 has an invalid length. [ 62.474203][ T7224] netlink: 'syz.1.365': attribute type 4 has an invalid length. [ 62.474211][ T7224] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.365'. [ 62.481923][ T7222] EXT4-fs (loop0): 1 truncate cleaned up [ 62.497603][ T1289] nvmet: connect request for invalid subsystem testsubsy%! [ 62.498200][ T7226] nvme nvme1: Connect Invalid Data Parameter, subsysnqn "testsubsy%" [ 62.615893][ T7236] EXT4-fs error (device loop8): ext4_clear_blocks:876: inode #13: comm syz.8.369: attempt to clear invalid blocks 2 len 1 [ 62.615919][ T7236] loop8: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 62.617355][ T7236] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 216 vs 220 free clusters [ 62.617944][ T7236] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #13: comm syz.8.369: invalid indirect mapped block 1819239214 (level 0) [ 62.618044][ T7236] loop8: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 62.618195][ T7236] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #13: comm syz.8.369: invalid indirect mapped block 1819239214 (level 1) [ 62.618288][ T7236] loop8: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 62.618802][ T7236] EXT4-fs (loop8): 1 truncate cleaned up [ 63.065222][ T7249] netlink: 104 bytes leftover after parsing attributes in process `syz.1.371'. [ 63.105124][ T7255] nfs4: Bad value for 'smackfsroot' [ 63.574174][ T7264] FAULT_INJECTION: forcing a failure. [ 63.574174][ T7264] name failslab, interval 1, probability 0, space 0, times 0 [ 63.574199][ T7264] CPU: 1 UID: 0 PID: 7264 Comm: syz.7.377 Not tainted syzkaller #0 PREEMPT [ 63.574212][ T7264] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 63.574217][ T7264] Call trace: [ 63.574221][ T7264] show_stack+0x2c/0x3c (C) [ 63.574239][ T7264] __dump_stack+0x30/0x40 [ 63.574252][ T7264] dump_stack_lvl+0xd8/0x12c [ 63.574262][ T7264] dump_stack+0x1c/0x28 [ 63.574271][ T7264] should_fail_ex+0x418/0x58c [ 63.574284][ T7264] should_failslab+0xc4/0x120 [ 63.574298][ T7264] __kmalloc_cache_noprof+0x94/0x5fc [ 63.574306][ T7264] tcf_police_init+0x748/0x104c [ 63.574316][ T7264] tcf_action_init_1+0x398/0x594 [ 63.574325][ T7264] tcf_action_init+0x2c4/0x798 [ 63.574333][ T7264] tc_ctl_action+0x364/0x700 [ 63.574341][ T7264] rtnetlink_rcv_msg+0x630/0x9bc [ 63.574350][ T7264] netlink_rcv_skb+0x238/0x414 [ 63.574359][ T7264] rtnetlink_rcv+0x28/0x38 [ 63.574366][ T7264] netlink_unicast+0x600/0x7f8 [ 63.574375][ T7264] netlink_sendmsg+0x648/0x948 [ 63.574383][ T7264] __sock_sendmsg+0xc8/0x17c [ 63.574392][ T7264] ____sys_sendmsg+0x3d0/0x6c8 [ 63.574400][ T7264] ___sys_sendmsg+0x198/0x224 [ 63.574409][ T7264] __sys_sendmsg+0x158/0x204 [ 63.574418][ T7264] __arm64_sys_sendmsg+0x88/0x9c [ 63.574426][ T7264] invoke_syscall+0x98/0x244 [ 63.574436][ T7264] el0_svc_common+0xec/0x23c [ 63.574446][ T7264] do_el0_svc+0x4c/0x5c [ 63.574455][ T7264] el0_svc+0x60/0x1d8 [ 63.574465][ T7264] el0t_64_sync_handler+0x44/0x104 [ 63.574474][ T7264] el0t_64_sync+0x198/0x19c [ 64.066112][ T7276] set_capacity_and_notify: 3 callbacks suppressed [ 64.066126][ T7276] loop5: detected capacity change from 0 to 2048 [ 64.074750][ T7278] netlink: 92 bytes leftover after parsing attributes in process `syz.1.382'. [ 64.074781][ T7278] netlink: 8 bytes leftover after parsing attributes in process `syz.1.382'. [ 64.074791][ T7278] netlink: 24 bytes leftover after parsing attributes in process `syz.1.382'. [ 64.095976][ T7282] fuse: Bad value for 'fd' [ 64.301803][ T7287] FAULT_INJECTION: forcing a failure. [ 64.301803][ T7287] name failslab, interval 1, probability 0, space 0, times 0 [ 64.301825][ T7287] CPU: 1 UID: 0 PID: 7287 Comm: syz.0.385 Not tainted syzkaller #0 PREEMPT [ 64.301838][ T7287] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 64.301843][ T7287] Call trace: [ 64.301846][ T7287] show_stack+0x2c/0x3c (C) [ 64.301862][ T7287] __dump_stack+0x30/0x40 [ 64.301873][ T7287] dump_stack_lvl+0xd8/0x12c [ 64.301883][ T7287] dump_stack+0x1c/0x28 [ 64.301892][ T7287] should_fail_ex+0x418/0x58c [ 64.301903][ T7287] should_failslab+0xc4/0x120 [ 64.301914][ T7287] __kmalloc_cache_noprof+0x94/0x5fc [ 64.301922][ T7287] alloc_netdev_mqs+0x9dc/0xf34 [ 64.301934][ T7287] rtnl_create_link+0x2b0/0xb78 [ 64.301941][ T7287] rtnl_newlink_create+0x210/0x6b8 [ 64.301949][ T7287] rtnl_newlink+0xfe4/0x138c [ 64.301957][ T7287] rtnetlink_rcv_msg+0x66c/0x9bc [ 64.301965][ T7287] netlink_rcv_skb+0x238/0x414 [ 64.301974][ T7287] rtnetlink_rcv+0x28/0x38 [ 64.301981][ T7287] netlink_unicast+0x600/0x7f8 [ 64.301989][ T7287] netlink_sendmsg+0x648/0x948 [ 64.301998][ T7287] __sock_sendmsg+0xc8/0x17c [ 64.302006][ T7287] ____sys_sendmsg+0x3d0/0x6c8 [ 64.302022][ T7287] ___sys_sendmsg+0x198/0x224 [ 64.302031][ T7287] __sys_sendmsg+0x158/0x204 [ 64.302039][ T7287] __arm64_sys_sendmsg+0x88/0x9c [ 64.302048][ T7287] invoke_syscall+0x98/0x244 [ 64.302059][ T7287] el0_svc_common+0xec/0x23c [ 64.302068][ T7287] do_el0_svc+0x4c/0x5c [ 64.302077][ T7287] el0_svc+0x60/0x1d8 [ 64.302088][ T7287] el0t_64_sync_handler+0x44/0x104 [ 64.302097][ T7287] el0t_64_sync+0x198/0x19c [ 64.737336][ T1596] ieee802154 phy0 wpan0: encryption failed: -22 [ 64.737368][ T1596] ieee802154 phy1 wpan1: encryption failed: -22 [ 64.739581][ T10] cfg80211: failed to load regulatory.db [ 64.779517][ T7300] loop7: detected capacity change from 0 to 256 [ 64.893716][ T5038] EXT4-fs unmount: 19 callbacks suppressed [ 64.893734][ T5038] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.973003][ T7310] netlink: 36 bytes leftover after parsing attributes in process `syz.5.392'. [ 65.047222][ T7319] FAULT_INJECTION: forcing a failure. [ 65.047222][ T7319] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 65.047245][ T7319] CPU: 1 UID: 0 PID: 7319 Comm: syz.7.393 Not tainted syzkaller #0 PREEMPT [ 65.047257][ T7319] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 65.047262][ T7319] Call trace: [ 65.047265][ T7319] show_stack+0x2c/0x3c (C) [ 65.047283][ T7319] __dump_stack+0x30/0x40 [ 65.047297][ T7319] dump_stack_lvl+0xd8/0x12c [ 65.047306][ T7319] dump_stack+0x1c/0x28 [ 65.047315][ T7319] should_fail_ex+0x418/0x58c [ 65.047329][ T7319] should_fail+0x14/0x24 [ 65.047338][ T7319] should_fail_usercopy+0x20/0x30 [ 65.047348][ T7319] strncpy_from_user+0x48/0x388 [ 65.047355][ T7319] do_getname+0x84/0x234 [ 65.047364][ T7319] user_path_at+0x38/0x78 [ 65.047372][ T7319] do_mount+0xb0/0x148 [ 65.047381][ T7319] __arm64_sys_mount+0x33c/0x388 [ 65.047390][ T7319] invoke_syscall+0x98/0x244 [ 65.047400][ T7319] el0_svc_common+0xec/0x23c [ 65.047410][ T7319] do_el0_svc+0x4c/0x5c [ 65.047419][ T7319] el0_svc+0x60/0x1d8 [ 65.047429][ T7319] el0t_64_sync_handler+0x44/0x104 [ 65.047438][ T7319] el0t_64_sync+0x198/0x19c [ 65.330534][ T7331] loop0: detected capacity change from 0 to 2048 [ 65.509532][ T7331] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 65.620410][ T7336] loop5: detected capacity change from 0 to 256 [ 65.715674][ T7341] loop8: detected capacity change from 0 to 512 [ 65.733602][ T7341] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 65.745920][ T7345] loop5: detected capacity change from 0 to 2048 [ 65.766442][ T7341] gadgetfs: bound to dummy_udc driver [ 65.783527][ T7345] loop5: p1 < > p4 [ 65.783527][ T7345] p4: [ 65.784137][ T7345] loop5: p4 size 722688 extends beyond EOD, truncated [ 65.834605][ T5403] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.834913][ T7347] netlink: 24 bytes leftover after parsing attributes in process `syz.5.407'. [ 65.834927][ T7347] netlink: 60 bytes leftover after parsing attributes in process `syz.5.407'. [ 65.923325][ T7351] af_packet: tpacket_rcv: packet too big, clamped from 2595 to 4294967272. macoff=96 [ 65.935046][ T7357] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 65.943773][ T7359] loop5: detected capacity change from 0 to 2048 [ 66.000792][ T7359] loop5: p1 < > p4 [ 66.000792][ T7359] p4: [ 66.004313][ T7359] loop5: p4 size 722688 extends beyond EOD, truncated [ 66.277038][ T6384] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.307378][ T7366] loop5: detected capacity change from 0 to 4096 [ 66.314363][ T7370] syzkaller1: entered promiscuous mode [ 66.314379][ T7370] syzkaller1: entered allmulticast mode [ 66.338522][ T7366] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 66.345748][ T7375] netlink: 24 bytes leftover after parsing attributes in process `syz.0.417'. [ 66.416912][ T7379] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 66.451945][ T7382] syzkaller0: entered promiscuous mode [ 66.451962][ T7382] syzkaller0: entered allmulticast mode [ 66.502473][ T7388] loop8: detected capacity change from 0 to 256 [ 66.582846][ T7390] loop7: detected capacity change from 0 to 256 [ 67.385304][ T7408] x_tables: duplicate underflow at hook 3 [ 67.391975][ T7408] gtp0: entered allmulticast mode [ 67.404434][ T5038] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.461982][ T5222] FAT-fs (loop7): error, corrupted directory (invalid entries) [ 67.462024][ T5222] FAT-fs (loop7): Filesystem has been set read-only [ 67.462312][ T5222] FAT-fs (loop7): error, corrupted directory (invalid entries) [ 67.480978][ T7409] gtp0: entered allmulticast mode [ 67.573155][ T5222] batman_adv: batadv0: Interface deactivated: syz_tun [ 67.581584][ T5222] batman_adv: batadv0: Removing interface: syz_tun [ 67.585892][ T7420] __nla_validate_parse: 1 callbacks suppressed [ 67.585913][ T7420] netlink: 24 bytes leftover after parsing attributes in process `syz.8.431'. [ 67.613583][ T7423] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 67.762497][ T7433] FAT-fs (loop8): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1) [ 67.762567][ T7433] FAT-fs (loop8): bogus number of directory entries (1) [ 67.762575][ T7433] FAT-fs (loop8): Can't find a valid FAT filesystem [ 67.777675][ T7433] FAULT_INJECTION: forcing a failure. [ 67.777675][ T7433] name failslab, interval 1, probability 0, space 0, times 0 [ 67.777695][ T7433] CPU: 0 UID: 0 PID: 7433 Comm: syz.8.434 Not tainted syzkaller #0 PREEMPT [ 67.777708][ T7433] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 67.777713][ T7433] Call trace: [ 67.777717][ T7433] show_stack+0x2c/0x3c (C) [ 67.777735][ T7433] __dump_stack+0x30/0x40 [ 67.777748][ T7433] dump_stack_lvl+0xd8/0x12c [ 67.777757][ T7433] dump_stack+0x1c/0x28 [ 67.777767][ T7433] should_fail_ex+0x418/0x58c [ 67.777780][ T7433] should_failslab+0xc4/0x120 [ 67.777792][ T7433] kmem_cache_alloc_node_noprof+0x98/0x604 [ 67.777800][ T7433] __alloc_skb+0x1f0/0x610 [ 67.777811][ T7433] netlink_ack+0x11c/0x890 [ 67.777821][ T7433] netlink_rcv_skb+0x21c/0x414 [ 67.777830][ T7433] genl_rcv+0x38/0x50 [ 67.777839][ T7433] netlink_unicast+0x600/0x7f8 [ 67.777847][ T7433] netlink_sendmsg+0x648/0x948 [ 67.777856][ T7433] __sock_sendmsg+0xc8/0x17c [ 67.777865][ T7433] ____sys_sendmsg+0x3d0/0x6c8 [ 67.777874][ T7433] ___sys_sendmsg+0x198/0x224 [ 67.777882][ T7433] __sys_sendmsg+0x158/0x204 [ 67.777891][ T7433] __arm64_sys_sendmsg+0x88/0x9c [ 67.777900][ T7433] invoke_syscall+0x98/0x244 [ 67.777910][ T7433] el0_svc_common+0xec/0x23c [ 67.777919][ T7433] do_el0_svc+0x4c/0x5c [ 67.777928][ T7433] el0_svc+0x60/0x1d8 [ 67.777939][ T7433] el0t_64_sync_handler+0x44/0x104 [ 67.777948][ T7433] el0t_64_sync+0x198/0x19c [ 67.883160][ T5989] netdevsim netdevsim7 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 67.883187][ T5989] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.086024][ T5989] netdevsim netdevsim7 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 68.086053][ T5989] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.148334][ T4711] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 68.149455][ T4711] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 68.153209][ T4711] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 68.153564][ T4711] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 68.153757][ T4711] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 68.162443][ T7443] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 68.163012][ T7443] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 68.180403][ T5989] netdevsim netdevsim7 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 68.180429][ T5989] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.227258][ T5989] netdevsim netdevsim7 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 68.227288][ T5989] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.262018][ T7450] team0: Port device syz_tun added [ 68.378706][ T5989] bridge_slave_1: left allmulticast mode [ 68.378726][ T5989] bridge_slave_1: left promiscuous mode [ 68.378801][ T5989] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.383789][ T5989] bridge_slave_0: left allmulticast mode [ 68.383806][ T5989] bridge_slave_0: left promiscuous mode [ 68.383870][ T5989] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.384114][ T7465] Bluetooth: MGMT ver 1.23 [ 68.459295][ T6384] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.475603][ T5989] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 68.497232][ T7473] netlink: 24 bytes leftover after parsing attributes in process `syz.0.445'. [ 68.502825][ T5989] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 68.507164][ T7471] EXT4-fs error (device loop5): ext4_xattr_inode_iget:473: comm syz.5.443: EA inode 11 has unexpected i_nlink=0 ref_count=1 [ 68.507187][ T7471] loop5: lost filesystem error report for type 5 error -117 [ 68.509046][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 68.509060][ C0] EXT4-fs (loop5): initial error at time 68: ext4_xattr_inode_iget:473 [ 68.509076][ C0] EXT4-fs (loop5): last error at time 68: ext4_xattr_inode_iget:473 [ 68.510345][ T7471] EXT4-fs (loop5): Remounting filesystem read-only [ 68.510957][ T7471] EXT4-fs (loop5): 1 orphan inode deleted [ 68.511445][ T7471] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 68.521454][ T5989] bond0 (unregistering): Released all slaves [ 68.557805][ T5038] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.694150][ T7498] FAULT_INJECTION: forcing a failure. [ 68.694150][ T7498] name fail_futex, interval 1, probability 0, space 0, times 1 [ 68.694174][ T7498] CPU: 1 UID: 0 PID: 7498 Comm: syz.5.449 Not tainted syzkaller #0 PREEMPT [ 68.694186][ T7498] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 68.694193][ T7498] Call trace: [ 68.694196][ T7498] show_stack+0x2c/0x3c (C) [ 68.694216][ T7498] __dump_stack+0x30/0x40 [ 68.694228][ T7498] dump_stack_lvl+0xd8/0x12c [ 68.694240][ T7498] dump_stack+0x1c/0x28 [ 68.694251][ T7498] should_fail_ex+0x418/0x58c [ 68.694264][ T7498] should_fail+0x14/0x24 [ 68.694275][ T7498] get_futex_key+0x1ec/0x12b0 [ 68.694286][ T7498] futex_wake+0x10c/0x594 [ 68.694297][ T7498] do_futex+0x2c4/0x378 [ 68.694307][ T7498] __arm64_sys_futex+0x2e4/0x418 [ 68.694317][ T7498] invoke_syscall+0x98/0x244 [ 68.694329][ T7498] el0_svc_common+0xec/0x23c [ 68.694341][ T7498] do_el0_svc+0x4c/0x5c [ 68.694352][ T7498] el0_svc+0x60/0x1d8 [ 68.694364][ T7498] el0t_64_sync_handler+0x44/0x104 [ 68.694375][ T7498] el0t_64_sync+0x198/0x19c [ 68.695929][ T7441] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.697801][ T7441] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.697890][ T7441] bridge_slave_0: entered allmulticast mode [ 68.698397][ T7441] bridge_slave_0: entered promiscuous mode [ 68.701179][ T7441] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.701304][ T7441] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.701369][ T7441] bridge_slave_1: entered allmulticast mode [ 68.701785][ T7441] bridge_slave_1: entered promiscuous mode [ 68.718520][ T7441] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.747768][ T7441] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.776627][ T7441] team0: Port device team_slave_0 added [ 68.777567][ T7441] team0: Port device team_slave_1 added [ 68.790933][ T4400] 8021q: adding VLAN 0 to HW filter on device eth5 [ 68.800556][ T7441] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.800566][ T7441] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 68.800579][ T7441] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.840244][ T7441] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.840257][ T7441] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 68.840271][ T7441] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.871819][ T5989] hsr_slave_0: left promiscuous mode [ 68.872168][ T5989] hsr_slave_1: left promiscuous mode [ 68.872445][ T5989] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 68.872456][ T5989] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 68.872806][ T5989] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 68.872815][ T5989] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 68.877373][ T5989] veth1_macvtap: left promiscuous mode [ 68.877404][ T5989] veth0_macvtap: left promiscuous mode [ 68.877462][ T5989] veth1_vlan: left promiscuous mode [ 68.877497][ T5989] veth0_vlan: left promiscuous mode [ 68.993044][ T5989] team0 (unregistering): Port device team_slave_1 removed [ 68.996836][ T5989] team0 (unregistering): Port device team_slave_0 removed [ 69.063421][ T7441] hsr_slave_0: entered promiscuous mode [ 69.063807][ T7441] hsr_slave_1: entered promiscuous mode [ 69.063996][ T7441] debugfs: 'hsr0' already exists in 'hsr' [ 69.064006][ T7441] Cannot create hsr debugfs directory [ 69.160634][ T7520] set_capacity_and_notify: 4 callbacks suppressed [ 69.160651][ T7520] loop5: detected capacity change from 0 to 1024 [ 69.197057][ T7522] loop0: detected capacity change from 0 to 2048 [ 69.200310][ T7520] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 69.203193][ T7520] EXT4-fs error (device loop5): ext4_validate_block_bitmap:445: comm syz.5.454: bg 0: block 112: padding at end of block bitmap is not set [ 69.209687][ T7520] EXT4-fs error (device loop5): ext4_free_blocks:6719: comm syz.5.454: Freeing blocks not in datazone - block = 0, count = 16 [ 69.214056][ T7520] FAULT_INJECTION: forcing a failure. [ 69.214056][ T7520] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 69.214071][ T7520] CPU: 0 UID: 0 PID: 7520 Comm: syz.5.454 Not tainted syzkaller #0 PREEMPT [ 69.214081][ T7520] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 69.214086][ T7520] Call trace: [ 69.214089][ T7520] show_stack+0x2c/0x3c (C) [ 69.214106][ T7520] __dump_stack+0x30/0x40 [ 69.214119][ T7520] dump_stack_lvl+0xd8/0x12c [ 69.214129][ T7520] dump_stack+0x1c/0x28 [ 69.214138][ T7520] should_fail_ex+0x418/0x58c [ 69.214151][ T7520] should_fail+0x14/0x24 [ 69.214160][ T7520] should_fail_usercopy+0x20/0x30 [ 69.214170][ T7520] _inline_copy_from_user+0x3c/0x174 [ 69.214181][ T7520] io_submit_one+0xc4/0xee4 [ 69.214188][ T7520] __arm64_sys_io_submit+0x230/0x3b8 [ 69.214196][ T7520] invoke_syscall+0x98/0x244 [ 69.214206][ T7520] el0_svc_common+0xec/0x23c [ 69.214215][ T7520] do_el0_svc+0x4c/0x5c [ 69.214224][ T7520] el0_svc+0x60/0x1d8 [ 69.214234][ T7520] el0t_64_sync_handler+0x44/0x104 [ 69.214244][ T7520] el0t_64_sync+0x198/0x19c [ 69.247079][ T7522] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 69.292369][ T5038] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 69.355672][ T7522] fs-verity (loop0, inode 13): Error -28 writing Merkle tree block 1441 [ 69.355709][ T7522] fs-verity (loop0, inode 13): Error -28 building Merkle tree [ 69.412303][ T6384] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.413125][ T4400] 8021q: adding VLAN 0 to HW filter on device eth4 [ 69.552804][ T7566] loop5: detected capacity change from 0 to 512 [ 69.789538][ T7566] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 69.836021][ T5038] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.895100][ T7584] loop5: detected capacity change from 0 to 1024 [ 69.897471][ T7584] EXT4-fs: Ignoring removed orlov option [ 69.911083][ T7584] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 69.914577][ T7584] EXT4-fs error (device loop5): ext4_validate_block_bitmap:445: comm syz.5.461: bg 0: block 112: padding at end of block bitmap is not set [ 69.932232][ T4400] 8021q: adding VLAN 0 to HW filter on device eth6 [ 69.937276][ T5038] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 70.052875][ T7609] batman_adv: batadv0: Adding interface: ipvlan2 [ 70.052888][ T7609] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 70.053259][ T7609] batman_adv: batadv0: Interface activated: ipvlan2 [ 70.179393][ T4711] Bluetooth: hci3: command tx timeout [ 70.183707][ T7441] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 70.186820][ T7441] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 70.187232][ T7441] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 70.188238][ T7441] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 70.192658][ T7441] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 70.202168][ T7441] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 70.202526][ T7441] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 70.204174][ T7441] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 70.253887][ T7441] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.262673][ T7441] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.266458][ T1289] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.266487][ T1289] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.286707][ T1289] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.286744][ T1289] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.325558][ T7644] netlink: 212 bytes leftover after parsing attributes in process `syz.1.472'. [ 70.408023][ T4400] 8021q: adding VLAN 0 to HW filter on device eth7 [ 70.422803][ T7651] 9p: Bad value for 'rfdno' [ 70.436981][ T7651] netlink: 12 bytes leftover after parsing attributes in process `syz.1.472'. [ 70.499676][ T4711] Bluetooth: hci5: command 0x2016 tx timeout [ 70.522116][ T7441] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.615536][ T7441] veth0_vlan: entered promiscuous mode [ 70.618720][ T7441] veth1_vlan: entered promiscuous mode [ 70.637469][ T7441] veth0_macvtap: entered promiscuous mode [ 70.642366][ T7441] veth1_macvtap: entered promiscuous mode [ 70.652393][ T7441] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.657856][ T7441] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.691092][ T54] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.692118][ T64] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.692141][ T64] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.692160][ T64] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.706581][ T54] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.706594][ T54] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.719559][ T54] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.719575][ T54] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.783467][ T7690] loop8: detected capacity change from 0 to 256 [ 70.812525][ T7690] FAT-fs (loop8): IO charset  not found [ 70.957887][ T7726] sctp: [Deprecated]: syz.5.476 (pid 7726) Use of struct sctp_assoc_value in delayed_ack socket option. [ 70.957887][ T7726] Use struct sctp_sack_info instead [ 71.016372][ T7731] loop8: detected capacity change from 0 to 1024 [ 71.045409][ T7731] EXT4-fs (loop8): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 71.063039][ T7731] EXT4-fs error (device loop8): ext4_free_blocks:6719: comm syz.8.477: Freeing blocks not in datazone - block = 0, count = 16 [ 71.109927][ T7731] EXT4-fs error (device loop8): ext4_validate_block_bitmap:445: comm syz.8.477: bg 0: block 112: padding at end of block bitmap is not set [ 71.424052][ T7749] binder: 7748:7749 tried to acquire reference to desc 0, got 1 instead [ 71.424344][ T7749] binder: 7748:7749 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 71.424357][ T7749] binder: 7749 RLIMIT_NICE not set [ 71.424368][ T7749] binder: 7749 RLIMIT_NICE not set [ 71.440581][ T7763] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 71.898791][ T5403] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 71.928198][ T7783] FAULT_INJECTION: forcing a failure. [ 71.928198][ T7783] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 71.928220][ T7783] CPU: 1 UID: 0 PID: 7783 Comm: syz.4.485 Not tainted syzkaller #0 PREEMPT [ 71.928231][ T7783] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 71.928236][ T7783] Call trace: [ 71.928240][ T7783] show_stack+0x2c/0x3c (C) [ 71.928257][ T7783] __dump_stack+0x30/0x40 [ 71.928268][ T7783] dump_stack_lvl+0xd8/0x12c [ 71.928277][ T7783] dump_stack+0x1c/0x28 [ 71.928287][ T7783] should_fail_ex+0x418/0x58c [ 71.928298][ T7783] should_fail+0x14/0x24 [ 71.928307][ T7783] should_fail_usercopy+0x20/0x30 [ 71.928317][ T7783] _inline_copy_from_user+0x3c/0x174 [ 71.928329][ T7783] do_ipt_set_ctl+0x664/0xc38 [ 71.928338][ T7783] nf_setsockopt+0xa0/0xe4 [ 71.928346][ T7783] ip_setsockopt+0x118/0x128 [ 71.928356][ T7783] udp_setsockopt+0xa8/0xc0 [ 71.928366][ T7783] sock_common_setsockopt+0xb0/0xcc [ 71.928375][ T7783] do_sock_setsockopt+0x1f0/0x330 [ 71.928384][ T7783] __sys_setsockopt+0x104/0x170 [ 71.928393][ T7783] __arm64_sys_setsockopt+0xc8/0xe4 [ 71.928402][ T7783] invoke_syscall+0x98/0x244 [ 71.928412][ T7783] el0_svc_common+0xec/0x23c [ 71.928421][ T7783] do_el0_svc+0x4c/0x5c [ 71.928430][ T7783] el0_svc+0x60/0x1d8 [ 71.928440][ T7783] el0t_64_sync_handler+0x44/0x104 [ 71.928450][ T7783] el0t_64_sync+0x198/0x19c [ 72.005254][ T7785] ip_tables: iptables: counters copy to user failed while replacing table [ 72.035663][ T30] kauditd_printk_skb: 17 callbacks suppressed [ 72.035676][ T30] audit: type=1326 audit(72.000:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7798 comm="syz.4.491" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffa2578828 code=0x0 [ 72.065303][ T7795] ptrace attach of "ci-upstream-gce-arm64/syz-executor exec"[5925] was attempted by "ci-upstream-gce-arm64/syz-executor exec"[7795] [ 72.097259][ T5282] binder: release 7748:7749 transaction 6 out, still active [ 72.097280][ T5282] binder: undelivered TRANSACTION_COMPLETE [ 72.115591][ T5282] binder: release 7748:7749 transaction 6 in, still active [ 72.115618][ T5282] binder: send failed reply for transaction 6, target dead [ 72.253964][ T7828] netlink: 'syz.1.498': attribute type 1 has an invalid length. [ 72.304935][ T7828] 8021q: adding VLAN 0 to HW filter on device bond1 [ 72.322849][ T7828] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 72.325059][ T7828] netlink: 4 bytes leftover after parsing attributes in process `syz.1.498'. [ 72.326140][ T7834] netlink: 12 bytes leftover after parsing attributes in process `syz.5.500'. [ 72.327170][ T7828] bridge0: entered promiscuous mode [ 72.327493][ T7839] loop0: detected capacity change from 0 to 128 [ 72.327884][ T7839] vfat: Bad value for 'time_offset' [ 72.345846][ T7828] bond1: (slave bridge0): Enslaving as an active interface with an up link [ 72.356481][ T7839] FAULT_INJECTION: forcing a failure. [ 72.356481][ T7839] name failslab, interval 1, probability 0, space 0, times 0 [ 72.356500][ T7839] CPU: 1 UID: 0 PID: 7839 Comm: syz.0.502 Not tainted syzkaller #0 PREEMPT [ 72.356511][ T7839] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 72.356516][ T7839] Call trace: [ 72.356518][ T7839] show_stack+0x2c/0x3c (C) [ 72.356536][ T7839] __dump_stack+0x30/0x40 [ 72.356547][ T7839] dump_stack_lvl+0xd8/0x12c [ 72.356557][ T7839] dump_stack+0x1c/0x28 [ 72.356566][ T7839] should_fail_ex+0x418/0x58c [ 72.356579][ T7839] should_failslab+0xc4/0x120 [ 72.356590][ T7839] __kmalloc_noprof+0x108/0x6c8 [ 72.356598][ T7839] tomoyo_encode2+0x10c/0x330 [ 72.356607][ T7839] tomoyo_encode+0x34/0x50 [ 72.356616][ T7839] tomoyo_mount_permission+0x384/0x7e4 [ 72.356625][ T7839] tomoyo_sb_mount+0x48/0x60 [ 72.356634][ T7839] security_sb_mount+0xfc/0x308 [ 72.356642][ T7839] path_mount+0xb8/0xa88 [ 72.356651][ T7839] do_mount+0xe8/0x148 [ 72.356660][ T7839] __arm64_sys_mount+0x33c/0x388 [ 72.356669][ T7839] invoke_syscall+0x98/0x244 [ 72.356679][ T7839] el0_svc_common+0xec/0x23c [ 72.356688][ T7839] do_el0_svc+0x4c/0x5c [ 72.356697][ T7839] el0_svc+0x60/0x1d8 [ 72.356708][ T7839] el0t_64_sync_handler+0x44/0x104 [ 72.356717][ T7839] el0t_64_sync+0x198/0x19c [ 72.409778][ T7845] fuse: Bad value for 'fd' [ 72.411425][ T7845] loop8: detected capacity change from 0 to 256 [ 72.435556][ T7845] RDS: rds_bind could not find a transport for ::a:0:0, load rds_tcp or rds_rdma? [ 72.468460][ T7847] x_tables: duplicate underflow at hook 2 [ 72.517600][ T4711] Bluetooth: hci2: Invalid response length for 0x20a3 [ 72.521473][ T7858] loop8: detected capacity change from 0 to 128 [ 72.542885][ T7858] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 72.566031][ T7867] loop5: detected capacity change from 0 to 128 [ 72.568741][ T7867] ext4: Unknown parameter 'obj_role' [ 72.574346][ T7859] Bluetooth: MGMT ver 1.23 [ 72.578118][ T7867] ext4: Unknown parameter 'obj_role' [ 72.579249][ T4711] Bluetooth: hci5: command 0x2016 tx timeout [ 72.591710][ T7867] ext4: Unknown parameter 'obj_role' [ 72.595598][ T7867] ext4: Unknown parameter 'obj_role' [ 72.596745][ T7868] netlink: 56 bytes leftover after parsing attributes in process `syz.5.509'. [ 72.596936][ T7867] ext4: Unknown parameter 'obj_role' [ 72.598244][ T7867] ext4: Unknown parameter 'obj_role' [ 72.607961][ T7867] ext4: Unknown parameter 'obj_role' [ 72.620098][ T7867] ext4: Unknown parameter 'obj_role' [ 72.621535][ T7867] ext4: Unknown parameter 'obj_role' [ 72.624871][ T7867] ext4: Unknown parameter 'obj_role' [ 72.634592][ T7867] ext4: Unknown parameter 'obj_role' [ 72.663799][ T7867] ext4: Unknown parameter 'obj_role' [ 72.665263][ T7867] ext4: Unknown parameter 'obj_role' [ 72.684937][ T7867] ext4: Unknown parameter 'obj_role' [ 72.713131][ T7867] ext4: Unknown parameter 'obj_role' [ 72.728446][ T7867] ext4: Unknown parameter 'obj_role' [ 72.729951][ T7867] ext4: Unknown parameter 'obj_role' [ 72.731333][ T7867] ext4: Unknown parameter 'obj_role' [ 72.745179][ T4711] Bluetooth: hci5: unexpected cc 0x200b length: 2 > 1 [ 72.745206][ T4711] Bluetooth: hci5: unexpected event for opcode 0x200b [ 72.747151][ T7867] ext4: Unknown parameter 'obj_role' [ 72.774828][ T7867] ext4: Unknown parameter 'obj_role' [ 72.777749][ T7867] ext4: Unknown parameter 'obj_role' [ 72.785159][ T7867] ext4: Unknown parameter 'obj_role' [ 72.787906][ T7867] ext4: Unknown parameter 'obj_role' [ 72.805062][ T7867] ext4: Unknown parameter 'obj_role' [ 72.835234][ T7867] ext4: Unknown parameter 'obj_role' [ 72.844004][ T7867] ext4: Unknown parameter 'obj_role' [ 72.846641][ T7867] ext4: Unknown parameter 'obj_role' [ 72.888297][ T7867] ext4: Unknown parameter 'obj_role' [ 72.898588][ T7867] ext4: Unknown parameter 'obj_role' [ 72.939791][ T7867] ext4: Unknown parameter 'obj_role' [ 72.946922][ T7867] ext4: Unknown parameter 'obj_role' [ 73.212918][ T7913] EXT4-fs: Ignoring removed nobh option [ 73.212966][ T7913] EXT4-fs: Ignoring removed bh option [ 73.214711][ T7913] EXT4-fs (loop5): stripe (17) is not aligned with cluster size (16), stripe is disabled [ 73.217709][ T7919] netlink: 8 bytes leftover after parsing attributes in process `syz.0.516'. [ 73.225155][ T7913] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a802c028, mo2=0002] [ 73.225203][ T7913] System zones: 0-1, 3-12 [ 73.225741][ T7913] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 73.236550][ T7913] netlink: 5 bytes leftover after parsing attributes in process `syz.5.515'. [ 73.260297][ T7924] syzkaller0: entered promiscuous mode [ 73.260315][ T7924] syzkaller0: entered allmulticast mode [ 73.262580][ T7924] simple: /dev/video#_3 [ 73.262591][ T7924] simple: /dev/video#_6 [ 73.262596][ T7924] simple: /dev/video#_9 [ 73.262601][ T7924] simple: /dev/video#_12 [ 73.262605][ T7924] simple: /dev/video#_15 [ 73.262610][ T7924] simple: /dev/video#_18 [ 73.262614][ T7924] simple: /dev/video#_21 [ 73.262618][ T7924] simple: /dev/video#_24 [ 73.262622][ T7924] simple: /dev/video#_27 [ 73.262626][ T7924] simple: /dev/video#_30 [ 73.262631][ T7924] simple: /dev/video#_33 [ 73.262635][ T7924] simple: /dev/video#_36 [ 73.262639][ T7924] simple: /dev/video#_39 [ 73.262643][ T7924] simple: /dev/video#_42 [ 73.262647][ T7924] simple: /dev/video#_45 [ 73.262651][ T7924] simple: /dev/video#_48 [ 73.262655][ T7924] simple: /dev/video#_51 [ 73.262659][ T7924] simple: /dev/video#_54 [ 73.262664][ T7924] simple: /dev/video#_57 [ 73.262685][ T7924] simple: /dev/video#_60 [ 73.262689][ T7924] simple: /dev/video#_63 [ 73.262693][ T7924] simple: /dev/video#_66 [ 73.262698][ T7924] simple: /dev/video#_69 [ 73.262702][ T7924] simple: /dev/video#_72 [ 73.262706][ T7924] simple: /dev/video#_75 [ 73.262711][ T7924] simple: /dev/video#_78 [ 73.262715][ T7924] simple: /dev/video#_81 [ 73.262719][ T7924] simple: /dev/video#_84 [ 73.262723][ T7924] simple: /dev/video#_87 [ 73.262727][ T7924] simple: /dev/video#_90 [ 73.262731][ T7924] simple: /dev/video#_93 [ 73.262735][ T7924] simple: /dev/video#_96 [ 73.262741][ T7924] TC_ACT_REPEAT abuse ? [ 73.264268][ T5403] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 73.272277][ T4711] Bluetooth: hci1: unknown advertising packet type: 0xff [ 73.272293][ T4711] Bluetooth: hci1: unknown advertising packet type: 0x50 [ 73.292545][ T7927] netlink: 28 bytes leftover after parsing attributes in process `syz.1.518'. [ 73.418883][ T7943] netlink: 8 bytes leftover after parsing attributes in process `syz.0.521'. [ 73.428300][ T7943] netlink: 8 bytes leftover after parsing attributes in process `syz.0.521'. [ 73.428465][ T7943] netlink: 8 bytes leftover after parsing attributes in process `syz.0.521'. [ 73.430584][ T7943] netlink: 8 bytes leftover after parsing attributes in process `syz.0.521'. [ 73.430658][ T7943] netlink: 8 bytes leftover after parsing attributes in process `syz.0.521'. [ 73.472847][ T7944] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 73.521261][ T7944] warning: `syz.4.522' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 73.580378][ T7441] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.694024][ T7974] netlink: 'syz.8.527': attribute type 32 has an invalid length. [ 73.793041][ T7986] tipc: Started in network mode [ 73.793067][ T7986] tipc: Node identity 7f000001, cluster identity 4711 [ 73.794282][ T7986] tipc: Enabled bearer , priority 10 [ 73.796302][ T7966] Set syz1 is full, maxelem 2 reached [ 73.911668][ T5038] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.932358][ T7995] Cannot find add_set index 3 as target [ 73.932437][ T7995] Cannot find add_set index 3 as target [ 73.932490][ T7995] Cannot find add_set index 3 as target [ 73.932544][ T7995] Cannot find add_set index 3 as target [ 73.932596][ T7995] Cannot find add_set index 3 as target [ 73.932638][ T7995] Cannot find add_set index 3 as target [ 73.932680][ T7995] Cannot find add_set index 3 as target [ 73.932722][ T7995] Cannot find add_set index 3 as target [ 73.932776][ T7995] Cannot find add_set index 3 as target [ 73.932814][ T7995] Cannot find add_set index 3 as target [ 74.102480][ T8018] netlink: 8 bytes leftover after parsing attributes in process `syz.8.537'. [ 74.146007][ T8023] fuse: Bad value for 'fd' [ 74.215636][ T8033] netlink: 'syz.5.542': attribute type 1 has an invalid length. [ 74.236973][ T8033] 8021q: adding VLAN 0 to HW filter on device bond1 [ 74.239853][ T8039] set_capacity_and_notify: 36 callbacks suppressed [ 74.239864][ T8039] loop0: detected capacity change from 0 to 8 [ 74.250352][ T8039] squashfs: SQUASHFS error: Xattrs in filesystem, these will be ignored [ 74.250365][ T8039] unable to read xattr id index table [ 74.250586][ T8039] unable to read fragment index table [ 74.251602][ T4711] Bluetooth: hci0: Zero size dump init pkt [ 74.273504][ T8033] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.274360][ T8033] bond1: (slave batadv0): making interface the new active one [ 74.274964][ T8033] bond1: (slave batadv0): Enslaving as an active interface with an up link [ 74.303078][ T8041] bridge1: port 1(dummy0) entered blocking state [ 74.303163][ T8041] bridge1: port 1(dummy0) entered disabled state [ 74.303270][ T8041] dummy0: entered allmulticast mode [ 74.306668][ T8041] dummy0: entered promiscuous mode [ 74.314053][ T8041] netlink: 'syz.1.544': attribute type 10 has an invalid length. [ 74.317648][ T8041] dummy0: left allmulticast mode [ 74.317762][ T8041] bridge1: port 1(dummy0) entered disabled state [ 74.345003][ T8046] syzkaller0: entered promiscuous mode [ 74.345028][ T8046] syzkaller0: entered allmulticast mode [ 74.361116][ T8052] FAULT_INJECTION: forcing a failure. [ 74.361116][ T8052] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 74.361136][ T8052] CPU: 0 UID: 0 PID: 8052 Comm: syz.1.547 Tainted: G L syzkaller #0 PREEMPT [ 74.361148][ T8052] Tainted: [L]=SOFTLOCKUP [ 74.361151][ T8052] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 74.361156][ T8052] Call trace: [ 74.361159][ T8052] show_stack+0x2c/0x3c (C) [ 74.361177][ T8052] __dump_stack+0x30/0x40 [ 74.361190][ T8052] dump_stack_lvl+0xd8/0x12c [ 74.361200][ T8052] dump_stack+0x1c/0x28 [ 74.361209][ T8052] should_fail_ex+0x418/0x58c [ 74.361222][ T8052] should_fail+0x14/0x24 [ 74.361232][ T8052] should_fail_usercopy+0x20/0x30 [ 74.361242][ T8052] _inline_copy_from_user+0x3c/0x174 [ 74.361254][ T8052] get_timespec64+0x9c/0x188 [ 74.361262][ T8052] __arm64_sys_pselect6+0x248/0x39c [ 74.361271][ T8052] invoke_syscall+0x98/0x244 [ 74.361281][ T8052] el0_svc_common+0xec/0x23c [ 74.361290][ T8052] do_el0_svc+0x4c/0x5c [ 74.361300][ T8052] el0_svc+0x60/0x1d8 [ 74.361310][ T8052] el0t_64_sync_handler+0x44/0x104 [ 74.361319][ T8052] el0t_64_sync+0x198/0x19c [ 74.961608][ T1017] tipc: Node number set to 2130706433 [ 75.014399][ T8089] vlan1: entered allmulticast mode [ 75.014420][ T8089] veth0_vlan: entered allmulticast mode [ 75.067577][ T8104] ================================================================== [ 75.067591][ T8104] BUG: KASAN: slab-out-of-bounds in ecryptfs_verify_auth_tok_from_key+0x324/0x360 [ 75.067614][ T8104] Read of size 2 at addr ffff0000d68e7119 by task syz.8.556/8104 [ 75.067622][ T8104] [ 75.067629][ T8104] CPU: 0 UID: 0 PID: 8104 Comm: syz.8.556 Tainted: G L syzkaller #0 PREEMPT [ 75.067641][ T8104] Tainted: [L]=SOFTLOCKUP [ 75.067644][ T8104] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 75.067650][ T8104] Call trace: [ 75.067653][ T8104] show_stack+0x2c/0x3c (C) [ 75.067667][ T8104] __dump_stack+0x30/0x40 [ 75.067679][ T8104] dump_stack_lvl+0xd8/0x12c [ 75.067690][ T8104] print_address_description+0xb0/0x238 [ 75.067699][ T8104] print_report+0x68/0x84 [ 75.067706][ T8104] kasan_report+0x8c/0xc4 [ 75.067717][ T8104] __asan_report_load_n_noabort+0x1c/0x28 [ 75.067728][ T8104] ecryptfs_verify_auth_tok_from_key+0x324/0x360 [ 75.067738][ T8104] ecryptfs_keyring_auth_tok_for_sig+0xe8/0x1a0 [ 75.067749][ T8104] ecryptfs_get_tree+0x478/0x1044 [ 75.067757][ T8104] vfs_get_tree+0x90/0x28c [ 75.067767][ T8104] fc_mount+0x24/0xac [ 75.067777][ T8104] do_new_mount+0x2a4/0x538 [ 75.067787][ T8104] path_mount+0x5f0/0xa88 [ 75.067798][ T8104] do_mount+0xe8/0x148 [ 75.067808][ T8104] __arm64_sys_mount+0x33c/0x388 [ 75.067819][ T8104] invoke_syscall+0x98/0x244 [ 75.067831][ T8104] el0_svc_common+0xec/0x23c [ 75.067842][ T8104] do_el0_svc+0x4c/0x5c [ 75.067854][ T8104] el0_svc+0x60/0x1d8 [ 75.067866][ T8104] el0t_64_sync_handler+0x44/0x104 [ 75.067877][ T8104] el0t_64_sync+0x198/0x19c [ 75.067886][ T8104] [ 75.067888][ T8104] Allocated by task 7696: [ 75.067893][ T8104] kasan_save_track+0x40/0x78 [ 75.067900][ T8104] kasan_save_alloc_info+0x40/0x50 [ 75.067910][ T8104] __kasan_kmalloc+0x9c/0xb4 [ 75.067917][ T8104] __kmalloc_noprof+0x34c/0x6c8 [ 75.067923][ T8104] user_preparse+0x94/0x160 [ 75.067933][ T8104] __key_create_or_update+0x2a4/0x848 [ 75.067940][ T8104] key_create_or_update+0x60/0x7c [ 75.067947][ T8104] __arm64_sys_add_key+0x384/0x43c [ 75.067954][ T8104] invoke_syscall+0x98/0x244 [ 75.067964][ T8104] el0_svc_common+0xec/0x23c [ 75.067974][ T8104] do_el0_svc+0x4c/0x5c [ 75.067983][ T8104] el0_svc+0x60/0x1d8 [ 75.067999][ T8104] el0t_64_sync_handler+0x44/0x104 [ 75.068016][ T8104] el0t_64_sync+0x198/0x19c [ 75.068022][ T8104] [ 75.068024][ T8104] The buggy address belongs to the object at ffff0000d68e7100 [ 75.068024][ T8104] which belongs to the cache kmalloc-32 of size 32 [ 75.068031][ T8104] The buggy address is located 0 bytes to the right of [ 75.068031][ T8104] allocated 25-byte region [ffff0000d68e7100, ffff0000d68e7119) [ 75.068039][ T8104] [ 75.068041][ T8104] The buggy address belongs to the physical page: [ 75.068045][ T8104] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff0000d68e7740 pfn:0x1168e7 [ 75.068053][ T8104] flags: 0x5ffc00000000200(workingset|node=0|zone=2|lastcpupid=0x7ff) [ 75.068063][ T8104] page_type: f5(slab) [ 75.068071][ T8104] raw: 05ffc00000000200 ffff0000c0001780 fffffdffc3298590 fffffdffc319e7d0 [ 75.068078][ T8104] raw: ffff0000d68e7740 0000000000400017 00000000f5000000 0000000000000000 [ 75.068082][ T8104] page dumped because: kasan: bad access detected [ 75.068086][ T8104] [ 75.068087][ T8104] Memory state around the buggy address: [ 75.068092][ T8104] ffff0000d68e7000: fa fb fb fb fc fc fc fc fa fb fb fb fc fc fc fc [ 75.068097][ T8104] ffff0000d68e7080: fa fb fb fb fc fc fc fc fa fb fb fb fc fc fc fc [ 75.068102][ T8104] >ffff0000d68e7100: 00 00 00 01 fc fc fc fc 00 00 00 00 fc fc fc fc [ 75.068106][ T8104] ^ [ 75.068111][ T8104] ffff0000d68e7180: 00 00 00 00 fc fc fc fc 00 00 00 00 fc fc fc fc [ 75.068116][ T8104] ffff0000d68e7200: 00 00 00 fc fc fc fc fc fa fb fb fb fc fc fc fc [ 75.068120][ T8104] ================================================================== [ 75.068136][ T8104] Disabling lock debugging due to kernel taint [ 75.068140][ T8104] ecryptfs_verify_version: Minor version number mismatch. Expected [4]; got [0] [ 75.068147][ T8104] Data structure version mismatch. Userspace tools must match eCryptfs kernel module with major version [0] and minor version [4] [ 75.068154][ T8104] Could not find valid key in user session keyring for sig specified in mount option: [syz0] [ 75.068159][ T8104] One or more global auth toks could not properly register; rc = [-22] [ 75.068172][ T8104] Error validating options; rc = [-22]