last executing test programs: 9.173041591s ago: executing program 0 (id=122): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1b6) ftruncate(r0, 0x200000) pwrite64(r0, &(0x7f0000000100)="0000010042", 0x5, 0x1be) pwrite64(r0, &(0x7f0000000100)="55aa", 0x2, 0x1fe) pwrite64(r0, &(0x7f0000000100)='PRIVHEAD', 0x8, 0xc00) pwrite64(r0, &(0x7f0000000100)="0002000b", 0x4, 0xc0c) pwrite64(r0, &(0x7f0000000100)='12345678-1234-1234-1234-123456789612', 0x24, 0xc30) pwrite64(r0, &(0x7f0000000100)="00000000000007ff", 0x8, 0xd23) pwrite64(r0, &(0x7f0000000100)='\x00\x00\x00\x00\x00\x00\b\x00', 0x8, 0xd2b) pwrite64(r0, &(0x7f0000000100)='PRIVHEAD', 0x8, 0x1e8000) pwrite64(r0, &(0x7f0000000100)='12345678-', 0x9, 0x1e8030) pwrite64(r0, &(0x7f0000000100)="00000000000007ff", 0x8, 0x1e8123) pwrite64(r0, &(0x7f0000000100)='\x00\x00\x00\x00\x00\x00\b', 0x7, 0x1e812b) pwrite64(r0, &(0x7f0000000100)='PRIVHEAD', 0x8, 0x1ffe00) pwrite64(r0, &(0x7f0000000100)='\x00\x00\x00\x00\x00\x00\b\x00', 0x8, 0x1fff2b) pwrite64(r0, &(0x7f0000000100)='TOCBLOCK', 0x8, 0x100200) pwrite64(r0, &(0x7f0000000100)='log', 0x3, 0x100246) r1 = syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x2) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}) 8.500258084s ago: executing program 0 (id=131): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f0000000440)='YY', 0x2, 0x0, &(0x7f0000000380)={0xa, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}}, 0x1c) setsockopt$inet6_MCAST_LEAVE_GROUP(r0, 0x29, 0x2d, &(0x7f0000000140)={0x7, {{0xa, 0x4e23, 0x5, @loopback, 0x9}}}, 0x88) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x3, 0xb, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000000000000000ffffff180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8fffff7b702000008000000b70300000001008085000000c200000095"], &(0x7f0000000000)='syzkaller\x00', 0x9, 0xfdd, &(0x7f0000001e00)=""/4061}, 0x94) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000100)={0x66, 0xfe, 0x4, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x9}, 0xe) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000000)=0x6, 0x4) shutdown(r0, 0x1) recvmmsg(r0, &(0x7f0000005000)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/19, 0x13}, 0x3}], 0x4000169, 0x60, 0x0) recvfrom(r0, 0x0, 0x0, 0x121, 0x0, 0x0) 7.976670002s ago: executing program 3 (id=132): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xd, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020642500000000002020207b0bf8ff00000000bda100000000000057010000f8ffffffb702000008000000b70300000000000085000000bb00000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) openat$ptmx(0xffffffffffffff9c, 0x0, 0x480000, 0x0) r0 = socket(0x2d, 0x2, 0x0) bind$xdp(r0, &(0x7f0000000080)={0x2d, 0x0, 0x0, 0xc}, 0x10) bind$xdp(r0, &(0x7f00000005c0)={0x2d, 0x0, 0x0, 0xc}, 0x10) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000002c0)={0x26, 'hash\x00', 0x0, 0x0, 'xcbc(twofish-generic)\x00'}, 0x58) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x84}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) setresuid(0xee00, 0x0, 0xee01) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7be", 0x20) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) dup3(r6, r5, 0x0) 5.566138247s ago: executing program 1 (id=136): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@setlink={0x3c, 0x13, 0x1, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'syz_tun\x00'}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) syz_emit_ethernet(0x32, &(0x7f0000000700)={@multicast, @local, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x1, 0x2, 0x0, @rand_addr=0x64010100, @multicast1}, {0x22, 0x0, 0x0, @multicast2, "0000000104000001"}}}}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0x4}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @fwd={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_FWD_SREG_DEV={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xb8}}, 0x0) 5.47150023s ago: executing program 3 (id=137): syz_open_dev$mtd(0x0, 0x46, 0x1) r0 = socket$kcm(0x29, 0x2, 0x0) sendmsg$inet(r0, 0x0, 0x24044890) sendmsg(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000380)="240000002e00074c8bfffd946fa2830022200afffffffffffff000e50c1be3a20400007e280000005e00ff03c81f8374b4", 0x31}], 0x1}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r1 = syz_open_dev$vivid(&(0x7f0000000080), 0x1, 0x2) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_INTERVAL(r1, 0xc040564b, &(0x7f0000000100)={0x401, 0x0, 0x303d, 0xffffffff, 0x3, {0x6, 0x8}, 0x1}) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfc409000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000040)) 5.263539883s ago: executing program 0 (id=138): socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001780)={&(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x0, 0x30, 0x0, 0x0, 0x4}, 0x28) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000008d40)=@broute={'broute\x00', 0x20, 0x1e01, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20008c80], 0x0, 0x0, &(0x7f0000008c80)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff000d000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff00000000"]}, 0x108) sendmsg$NFT_BATCH(r0, &(0x7f00000003c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x7d00800}, 0xc, &(0x7f0000000380)={&(0x7f0000000600)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_DELSET={0xc8, 0xb, 0xa, 0x0, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFTA_SET_DESC={0x8c, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x765}, @NFTA_SET_DESC_CONCAT={0x18, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}]}]}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x76}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0xa93a}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_DESC_CONCAT={0x40, 0x2, 0x0, 0x1, [{0x4}, {0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4dd}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xe}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xc55b}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}]}]}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x85}, @NFTA_SET_GC_INTERVAL={0x8}, @NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x5}, @NFTA_SET_POLICY={0x8}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELFLOWTABLE={0x14, 0x18, 0xa, 0x201, 0x0, 0x0, {0x3, 0x0, 0x1}}, @NFT_MSG_DELRULE={0x2c, 0x8, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x5}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x5}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x130}, 0x1, 0x0, 0x0, 0x40000}, 0x4080) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2) 4.451264166s ago: executing program 1 (id=141): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="b0010000", @ANYRES16=r3, @ANYBLOB="010022bd7000fcdbdf473b00000008000300", @ANYRES32=r4, @ANYBLOB="93013300b02c0e00080211000001080211000000505050505050"], 0x1b0}, 0x1, 0x0, 0x0, 0x4018010}, 0x804) write(r0, &(0x7f0000000000)="4c00000011000e14001100020000140002000000200000", 0x17) r5 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x0, 0xee00}}, './file0\x00'}) quotactl_fd$Q_GETFMT(r5, 0xffffffff80000402, r6, &(0x7f00000000c0)) 4.340741487s ago: executing program 4 (id=142): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x8102, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) r4 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000c40)=@newtfilter={0x87c, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0xfff2}, {0x0, 0xffff}, {0x300, 0xffff}}, [@filter_kind_options=@f_basic={{0xa}, {0x84c, 0x2, [@TCA_BASIC_POLICE={0x848, 0x4, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x3, 0x2, 0x6, 0x5, 0x8, 0x80000001, 0x8, 0xc9d, 0x4, 0x7, 0x2, 0xffffffff, 0x7, 0x7, 0x3, 0x7, 0x5a, 0x5, 0x3ff, 0x1e9d, 0x0, 0xc0000000, 0x8, 0xfffffdf6, 0xb4, 0x0, 0xffff7fff, 0x9, 0x1, 0x800, 0x9, 0x4, 0x100, 0x2, 0x7, 0x4c3b, 0x8001, 0xb5, 0x3, 0x4, 0x6495, 0x9, 0x7, 0xffffff83, 0x53fe, 0x4, 0xb, 0x2, 0x1, 0x7c, 0x1, 0x0, 0x15, 0x4af, 0x7, 0x4, 0x1, 0x8, 0x6, 0x4, 0x51, 0x6, 0x8, 0x2d280000, 0x81, 0x1, 0x6, 0x5, 0x5, 0x1, 0x6, 0x1, 0xe5df, 0x5, 0x2, 0x9, 0x1, 0x9, 0x10000, 0x40, 0x6, 0x81, 0x1, 0x2, 0x7ff, 0xd380, 0x9, 0x5, 0x2, 0x6, 0x3ff, 0x2d68, 0x7, 0x40, 0x766, 0x401, 0xffff, 0x81, 0x2, 0xfc7, 0x3, 0x8, 0x9, 0x4000, 0xff, 0x6, 0x9, 0x8, 0x2, 0x6, 0x0, 0x0, 0x80000000, 0xfff, 0xd2, 0x8, 0x80000000, 0x96ee, 0x9, 0x10, 0x4, 0x7f, 0x8000007, 0x80000000, 0xe4b, 0x5, 0x8000, 0x286a, 0x9, 0x2f, 0x9, 0xa, 0xada, 0xb, 0x9, 0xaa2, 0x78, 0x1000, 0x9, 0x4, 0x3d2c, 0x8, 0x200, 0x4, 0x8, 0x3, 0xa, 0x200, 0x9, 0x1, 0x8, 0x8, 0x8, 0x168d, 0x1, 0x80000001, 0x6, 0x9, 0x8, 0x8, 0x51fa, 0x40, 0x401, 0x4, 0x56415caf, 0x7, 0x3, 0x4, 0x2, 0x5, 0x8, 0x4, 0x6, 0x4, 0x3, 0x401, 0x4, 0x3, 0x1, 0x5, 0x2, 0x401, 0x7, 0x0, 0x8000, 0x800, 0x1, 0x18000000, 0x9, 0x6, 0x90a, 0x3, 0x9, 0x2, 0x18000000, 0xfff, 0xa45, 0x0, 0x401, 0x8, 0x4, 0x3, 0x8001, 0x1, 0x7, 0x8, 0x7, 0x9, 0x1, 0x9, 0x7e, 0x60, 0xd69, 0x1, 0x3, 0xf0a, 0xffffff00, 0x4, 0x3d, 0xf, 0x40, 0x1c00000, 0x80, 0x1000, 0x5, 0x94, 0x10, 0x7, 0x1, 0x60, 0x80000001, 0x6, 0xfff, 0x7, 0xfffffc00, 0x680, 0xa, 0x5, 0x2, 0x1, 0xfffffff6, 0x2, 0x6, 0x7, 0xdd47, 0x4, 0x9, 0x7, 0x9, 0x8, 0x80, 0x0, 0x5, 0x1000, 0x9, 0x3]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x101, 0x6, 0x3, 0xffffff01, 0x80000001, {0x9, 0x0, 0x8, 0xe, 0xe, 0xfffffff8}, {0x3, 0x2, 0xffff, 0x6, 0x0, 0x8}, 0x2, 0xf, 0x5}}, @TCA_POLICE_RATE={0x404, 0x2, [0x6, 0xa0, 0x6, 0x9, 0x9, 0x4, 0xd, 0x8, 0x6, 0x2, 0x8, 0x2, 0x8, 0xc266, 0x8, 0x5ad, 0x6, 0xfff, 0x2, 0x4, 0x0, 0x5, 0x2, 0x400, 0x7fffffff, 0x1, 0xffffff66, 0x6, 0x6, 0x9, 0x8, 0xf, 0x7ff, 0x7, 0xcbc9, 0x6, 0xee4a, 0xf, 0x40, 0x0, 0x7fffffff, 0x1, 0x0, 0x8, 0xc, 0x4, 0x9, 0x538b0045, 0x3c1, 0x9, 0x3, 0x8, 0x4, 0x2, 0x100, 0x5, 0x7ff, 0x92, 0x9, 0x0, 0xd, 0x2, 0x3, 0x2, 0x1, 0x9, 0xaf, 0x1, 0x2, 0x8, 0x7fffffff, 0x8, 0xb066, 0x1, 0x2, 0x2, 0x0, 0xfffffff8, 0x9, 0x8, 0x9, 0x3, 0x200, 0x7, 0x2, 0x8, 0x5, 0x6, 0xffffffa0, 0x5, 0x7, 0x9, 0x80000000, 0x2, 0xfffffffd, 0x2, 0x80000001, 0x8, 0xe79, 0x3, 0x1, 0x600000, 0x7, 0x71, 0x101, 0x5, 0x4, 0x7, 0x28, 0x1, 0x2, 0x9, 0x4, 0x81, 0x3ff, 0x4, 0x0, 0x7, 0x8, 0x10000, 0x200, 0x530, 0x1, 0x6cd2, 0x7f, 0x356d, 0x2, 0x3ff, 0x4, 0x100, 0x3, 0x7, 0x6, 0x3, 0x1, 0x95f, 0x6, 0x4, 0x7, 0x8000, 0x8, 0xffffffff, 0x9, 0x1, 0x7, 0xdfcd, 0x75b3, 0x8000, 0xbd7, 0x7, 0x34a, 0x44, 0x80000001, 0x8, 0x5, 0x787, 0x101, 0xf7fffffc, 0x4, 0xfffffffa, 0x725f, 0x3, 0x2, 0x6, 0x4, 0x8, 0x6, 0x3, 0x55, 0x7, 0x7, 0x1000, 0x7fff, 0x7, 0x8, 0x3, 0x10000, 0x8, 0x8, 0x0, 0x2fee, 0x9, 0xfffffffd, 0x8, 0x1, 0x180000, 0x2, 0x4, 0x80, 0x101, 0x8, 0x1, 0x4465, 0x7, 0x3, 0x5, 0x2, 0x1, 0x1, 0x5e2e, 0x8, 0xd7ad, 0x4, 0x7091, 0x15da, 0x1, 0xb, 0xcd, 0xeab, 0x1, 0x8, 0x3, 0x951d, 0x80000001, 0x2, 0x9, 0x1, 0x2, 0x0, 0x8001, 0x8, 0x4b9f, 0x10, 0x9, 0x3, 0x80000000, 0x0, 0x8, 0xfffffffe, 0xfffffffc, 0x63, 0x9, 0x9, 0x0, 0x4, 0x8ee5, 0xc, 0x8, 0x3c6, 0xfffffffd, 0x7, 0xe, 0x80ea, 0x4, 0xfffffc0c, 0x7, 0x101, 0x4, 0x9, 0x3, 0x1c00000, 0x100, 0x8000, 0x7fffffff, 0x8, 0x4000000]}]}]}}]}, 0x87c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) write$tun(r1, &(0x7f0000000500)=ANY=[], 0x20) 4.006720693s ago: executing program 1 (id=144): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0x7, 0x0, 0x1, 0xfffffffd, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3}, 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001140)={r0, &(0x7f0000000080)="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", &(0x7f0000001080)=""/165, 0x4}, 0x20) bpf$OBJ_GET_PROG(0x7, &(0x7f00000011c0)=@generic={&(0x7f0000001180)='./file0\x00', 0x0, 0x10}, 0x18) (async) r1 = bpf$OBJ_GET_PROG(0x7, &(0x7f00000011c0)=@generic={&(0x7f0000001180)='./file0\x00', 0x0, 0x10}, 0x18) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001540)={r1, 0x0, 0xd1, 0x94, &(0x7f0000001200)="a23a4c4f459153acfaf1a68066d036010154ee00f05c7f665afb4dd69130d78c38df4c5f17240720d970d30279e6d704864064c4bb7a8b87a95909c1adb0ac913c71023dbc5e267e9c5287ea5e2d81df7d8b90c809b191413ad033c3465e50e2c0d5e1da7484e2d046051412b474b5cbae09afe83db4d528a55e908404d0c164deb03fca53b7fc1c6a748a8ec053424848c7873c93d91e30ccdeb87c932768e32b999fcd02e5a8afff7f994ce2fcd4e48933385d3c1a4c8eacfa59bd170a73c124b7060f9f40a791cde0da92b58efb6f52", &(0x7f0000001300)=""/148, 0x20000000, 0x0, 0xfd, 0x42, &(0x7f00000013c0)="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", &(0x7f00000014c0)="5cacca62c6815a5d382bbdbf6400af7330d6dc92b242dc73d6ad7e2f6667803a73a04a0e5375f59febce653f81c0860c301bd9ad2fc3c38c42779a294484ada74f8f", 0x5, 0x0, 0x8001}, 0x50) openat$fuse(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) (async) openat$fuse(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000001600)={{0x1, 0x1, 0x18, r0, {0xa395}}, './file0\x00'}) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000001640)={@in6={{0xa, 0x4e20, 0xc, @mcast2, 0x7fff}}, 0x0, 0x0, 0x15, 0x0, "098bd453c9804df62f2fadd958627d77013cd9e313d918d77625c0278dbe71e6ed85338ce8fa8af0d1907769145f966b64714901b27bb16dc8aef2b29417e9d69d1db1b2f907e6a0a930b0aa4c544791"}, 0xd8) socket$key(0xf, 0x3, 0x2) (async) r3 = socket$key(0xf, 0x3, 0x2) mmap(&(0x7f0000ff1000/0xf000)=nil, 0xf000, 0x3, 0x12, r3, 0x3c44b000) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_encap(r4, 0x11, 0x64, &(0x7f0000001740)=0x5, 0x4) setxattr$security_ima(&(0x7f0000001780)='./file0\x00', &(0x7f00000017c0), &(0x7f0000001800)=@v1={0x2, "2a7d46b1b10feb797a60983ed7917ff23f90b33e"}, 0x15, 0x2) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000002c00)={r2, 0xe0, &(0x7f0000002b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000002940)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, &(0x7f0000002980)=[0x0, 0x0, 0x0], &(0x7f00000029c0)=[0x0, 0x0, 0x0, 0x0], 0x0, 0xbc, &(0x7f0000002a00)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000002a40), &(0x7f0000002a80), 0x8, 0x2e, 0x8, 0x8, &(0x7f0000002ac0)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000002d40)={0x18, 0x13, &(0x7f0000001840)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x53, 0x0, 0x0, 0x0, 0xfffffff8}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0x1}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x4}, @jmp={0x5, 0x1, 0x2, 0x1, 0x9, 0x0, 0x8}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001900)='GPL\x00', 0x7, 0x1000, &(0x7f0000001940)=""/4096, 0x40f00, 0x20, '\x00', r5, @fallback=0x3a, 0xffffffffffffffff, 0x8, &(0x7f0000002c40)={0x7, 0x5}, 0x8, 0x10, &(0x7f0000002c80)={0x5, 0xf, 0x1, 0x7f}, 0x10, 0x0, r2, 0x3, &(0x7f0000002cc0)=[r0, r0, r2, r2, r0, r0, r2, r2, r0, r2], &(0x7f0000002d00)=[{0x0, 0x1, 0x9, 0xa}, {0x1, 0x5, 0xd, 0xb}, {0x3, 0x2, 0x7, 0xb}], 0x10, 0x7f}, 0x94) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000002e00)={{0x1, 0x1, 0x18, r3, {0x4}}, './file0\x00'}) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000002e40)=[@in={0x2, 0x4e22, @broadcast}, @in6={0xa, 0x4e20, 0x4, @loopback, 0x1}, @in6={0xa, 0x4e22, 0x0, @mcast2, 0x4}, @in={0x2, 0x4e22, @remote}, @in={0x2, 0x4e22, @multicast2}, @in6={0xa, 0x4e22, 0x5, @private1, 0x1ff}], 0x84) (async) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000002e40)=[@in={0x2, 0x4e22, @broadcast}, @in6={0xa, 0x4e20, 0x4, @loopback, 0x1}, @in6={0xa, 0x4e22, 0x0, @mcast2, 0x4}, @in={0x2, 0x4e22, @remote}, @in={0x2, 0x4e22, @multicast2}, @in6={0xa, 0x4e22, 0x5, @private1, 0x1ff}], 0x84) fdatasync(r3) (async) fdatasync(r3) signalfd4(r2, &(0x7f0000002f00)={[0x800]}, 0x8, 0x0) (async) r7 = signalfd4(r2, &(0x7f0000002f00)={[0x800]}, 0x8, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000002fc0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000002f80), 0x111, 0x4}}, 0x20) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000002fc0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000002f80)={0xffffffffffffffff}, 0x111, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_DESTROY_ID(r7, &(0x7f0000003000)={0x1, 0x10, 0xfa00, {&(0x7f0000002f40), r8}}, 0x18) (async) write$RDMA_USER_CM_CMD_DESTROY_ID(r7, &(0x7f0000003000)={0x1, 0x10, 0xfa00, {&(0x7f0000002f40), r8}}, 0x18) openat$vnet(0xffffffffffffff9c, &(0x7f0000003040), 0x2, 0x0) setxattr$security_smack_transmute(&(0x7f0000003080)='./file0\x00', &(0x7f00000030c0), &(0x7f0000003100), 0x4, 0x2) (async) setxattr$security_smack_transmute(&(0x7f0000003080)='./file0\x00', &(0x7f00000030c0), &(0x7f0000003100), 0x4, 0x2) getresgid(&(0x7f0000003140), &(0x7f0000003180), &(0x7f00000031c0)) setsockopt$bt_BT_SNDMTU(r2, 0x112, 0xc, &(0x7f0000003200)=0xb, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000003240)=@bloom_filter={0x1e, 0x6, 0xffffffff, 0x9, 0x10a00, 0x1, 0xd3, '\x00', 0x0, r6, 0x4, 0x0, 0x2, 0x0, @void, @value, @value=r2}, 0x50) (async) bpf$MAP_CREATE(0x0, &(0x7f0000003240)=@bloom_filter={0x1e, 0x6, 0xffffffff, 0x9, 0x10a00, 0x1, 0xd3, '\x00', 0x0, r6, 0x4, 0x0, 0x2, 0x0, @void, @value, @value=r2}, 0x50) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r6, 0x10, &(0x7f00000035c0)={0x8, 0x0, &(0x7f0000003540)=[{&(0x7f00000032c0)}, {&(0x7f0000003300)=""/114, 0x72}, {&(0x7f0000003380)=""/254, 0xfe}, {&(0x7f0000003480)=""/172, 0xac}], &(0x7f0000003580)=[0x7ff, 0x84, 0x6, 0x80000001, 0x0], 0x4}, 0x20) syz_ublk_setup_queues(r2, 0x0, &(0x7f0000003600)={0x0, 0x56a8, 0x200, 0x3, 0x368, 0x0, r7}, &(0x7f0000003680)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4db, 0x401, 0x1, 0x80, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x178e, 0x1000, 0x3, 0x6f, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6e4b, 0x4000, 0x3, 0x3e7, 0x0, r6}, 0xffffffffffffffff}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x29f4, 0x200, 0x2, 0x3a, 0x0, r6}}], 0x4, &(0x7f0000004900)={0x2e, 0x9, 0x0, r6, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x480}, 0x0, 0x0, '\x00', {0x3, 0x116, 0x0, &(0x7f0000003900)=@buf_max_buf="95b8f756fec836ac1a7402b0ff712afde44bdda08787179130b46adca788baece7396eadfdb470d2ca45105e743694eaada7d31d6c241455ea4e793b25024c555d9a013559936b02e54988604c19a0bc2a5348506d2fa9547e528867c39ff82566a61c5779b4b3ce9e28009eabd102cc63c898769a2e140e192525de26020f14cca5dab77915b9595025a4eef12c83458f0658e97b246833a5876546dae2169659134cee54f4ff36fa1eaeb387b5d8a279a3a9f6b9dc38c171be773b35050ff4b8ef6ffc93a0ba8977ba4345abd4efc0e98640f12732a16d911a8e408071c008e12ec2a4faa9833856e4dd77b24d5c48af58ccb4a1ee6084fd493c3460b63627618127a5b8c8df12a58e5c2bd9e54ccbfe2e6045c0f4dae89203d2fd9eaeb22a06182d1e2a62e4792d046823be80d4fdba9a3dae3487d849421906bbacb8e688ba5dbf24fed5005fb133f43b8941dde11f2c6ea2c68cb8338a1566687065c57ddbc769c258b693cd7b00481a5abc2248e97587cd962f2d887b04ae1a5bab17b6457acfe866640e2b5f07113e06939af043ebc6f657bd3ddd1a3edeb2e2752bb330a7e23cc18978434b9ccae102ac9d5445c01f3649cbfaf967fcd006447206d949b1739f30dcfe46f344e41d4290f01989f48f9f61c6a59cc9723ab0d878d2cc15aa1ea804d34688458b8badb0e294cce9af9d94ab7a5c6ce1d893a7658275663664bdea3ea7998101cc48a19c9bef3df4b0a3411217d43138f7d7afc60bdadf3ffb2c1657257a19721142b571fb686700f9797cef1040300b32ea218113e7817f833be02a981108cd1d9c921449eca178042ed67dbab81651207d241c863d729917826d6afc39d2a78cc565d99b62aac8b967f0497048c382e5dcefa214a90a81572384820701f7ce8c622250f095c45d19983b0c7bbaf87ad842364152e8f88b44212089c2bf2326a39e2bcc8232560679f7506b6bddf696d3038e80fad103fa611799eafd9a9821689a7cd7473f69a2e1280ecd45ea176c19230a1f52a4bcbe63ab08b51b20f5c26d612cdc5cbd62d36d9499cc6c06eb10aad1668fc779eee0359df289abb1578a8f8c1b5d3d24ee09df5a77c776690a4078077da7ab8fa82c63ac36e2cda14beb7b3d8383b5ccc46680ec5449f8930c340151c22732034a96c39e732573499714e8aa9d6fdd5c96d94c38dccf8a1c0e510951fc484b714d23a0a9e69f5dcc5ea4ad4b560969513ba1fa5d436145e5cbd5798963148cc568c2f5d791532dea75c7eb099a70771163a5bf06570c5b504411d4480fdb37784f221c3d96100cda6b2c6e13cc781e330824f9e6e7ac42f549388d0b0f9192ff0e1d6f3b5007fe3859f6deee5e4aa243bb79822faec91886159dcf82f627eefe84e471ca8f72db71491f7e58299eb943e7a8855a02c5f2f83a33a12043a2070fee09b6a9552245b05287da8bd3122c1cbeae006be7bd84a419535a96d08e63176da07c7e8b53c5bd5d4e24954a0e97c5199cbb020efd876a6bbe262b16fb5682e16f8428f0278f81d897c0ae02a5bcfeedfa34574aee82df2a6fa88f0f1fe44492fa97377684680b1ddb9aaaee98388865fec7e2bcfe738e04567c5c1262e3499136cd11b569db5e57dd182ffb5f7df3c6623b71c7a2945df5a8b20c8bae57f890e7e0a030ef1d631d61ad675c59c7d8f15351f3bb51c9232b8ba9923052b591cd1fa76651e4e5159dd6fdf3e5aaf33cc8c7856084c14fc2bb3fd3ce9072f4adc4139c06b2b6ca0f54a2fff2d3e7bcb35b9d7cadd70a2dd4eb2262b4997b86b1ce2cc9a5e4c585151fded1ccedc5d55e1667010715c0003b47268b680bcee430161fc69956e4571cc582eed66d18cdcdba4fc88b4cd03ddd2976712fb59cb253837c48c3b8291d7c2cd81f530772b9b8564e031ef55d2e7b918369263eca1eaadf229726e1f5a0d969bafbc4ed4c44d34d72540efeeced724b96e318519a28e1b4c8abfec4899fbf7a7f94ffe0c82ea8af1123225baefce892592edb572d63c78a8901af973beb2b72dd524f7b690aedd2dd1fbc6fba0c2cb527b3aab0a8ca15fc91fd3893181d27c7d9d7009b99a3f032c77debc896c9b1eb16606107716f5cffbe9f17b3b1abc589a6486e3e088357528419f3120d060f2128ea0fcd0a5f0cd678db13bde4e4980059352e2cb7ae8ed6c713b15226bbcf4eace9e05d80c5e37b85a2520e14f959322514e9b3ae119fa9984f75626e6a6dba9505e4fe5c1651b12c1a58fe284287fca7ce9bcd6ee09afc08d74b88aa2158b0cdf962f60f81a7c20cf858403a0d80026c0e3d396be6dc59df8e7fe46599ba2dc450cc525064b173caf0df61c3a94ac1702c2d26e95f417e70cbb9fb4cf30a7da0abaafb364a101834391349ea30d47f53083180132c50c1bee14b9e191a159a1a6d616f60ad9de769149540d7c62a0750d2a142e9313013c373b93606a7227e4436e9627fe2342700d93254a4f5218e03465bc0846436bf3b3067b9470fa06d3cb3d31d9500143f322449e330712470ce90476995e35060276c966487071024aaec6680e2497cae7e2e6495383b58a54b9fce8b51bc8dab00e526135dd6b49806f4a55ca75cd6b2459f012c2d7ebf10b988d8cbba0f71ef2dd9f1622bfc2ea95e5c67165320aec6c5aebb100ec04036819ae728cb6d970ec4130d19417655a78ed41a0c1e9cfdfc2078e4633b825f3c1b9bbee41f1d1e013c553cb09fa0d2c132a0e1cad93de2bec63383e219c920e39cf4b21cb5eea15f1c522e717766c257e97947fb9ebe0b7259e5c3403ff384d096de5aaeb333fb0f3c7812812e4a12c1ea68243c6acae6f9bfc13843d6c521a2124416b1912892454a2234e0518c877bbdde9d88234cefbfc0eac7a2a472817ebf8b2e3c2782d2f25eef9304ef5d274b247940f034abe0e25d5fffaf82afcee9fbaa870024d27b442b69f7fb5fe9276f05ada740faaebb4b4b1799d8be23605ae17532ade0ffae5acc39b20f323d9fe8fbc956e32bc6e6eaca4197d546c3fd88df8d891fc5e2f676da7600e1cbdd0eed2062f867eeaee91db1162222129aa87abb7787c91dbe45964b96db53cea93cf54100991afa71ce4b1c945464f2279d7a8fce6d50aa7339eb9512bc2e037179edddfeeac29e5cb1ae577492697ff8682e6626b3b2e27b18ea01d8c928daf92049216230ab1365a6c5ff1bdad62b790b83ee188f0d9bab4956c578bd8437e142c24dbc3f4cfca140c67f5e6b1f10260bda83ee5eb0b5730eada10c89e0bdba0d9cec21fb8feac56a3c06f4306bcb1964771dc6bb292164bfa35617960556a52d121fe50d07e358f97c1d5dbe9bf081782ab5606d2ba5306ef77bb2d1e0e85f909c0db492c8aef43ee17f161ce38057ad6e784332ecc77c270d5761a51edd57e8a774460e6b68419075a53f0b381d23825a8defed4a247c5aea03d72a80f9c633af6f60d32f25f4718b364dc209d18db9f67d1acc542a6c60fc240df67f6121d1fcd6f7e4c171583afe995022caef44a8fa88c527b530366b76c2658dd4dfd49ff7028132d24ee0773963e63c05aa3a353ce5df4750c93167e31b3ccc7a76fe3a3e23d0e2684a7e69108a495ad64d57c5deb600d9f43b9d015c18aecfe385d37df554caeafd6fc0e66793644cc8d4418ba37b47d0afc2e5d4a6b418765eb6dddb4fdf410226f4075d7e658e5a6ccb77473f5735969f2f759e439e523e0f2778fc360852e9917894f02fe1435475526ade50283cf1ba4b81e69dd0131b0c40a7a2d2e7b8336697a85f846c561028ceab40e452fb46323ee485bbde9c3a6b2244928807342fe8f8e0c8a5019cb0e9a359211424a10eb32ed44f3dc5e95cf5467175b5bfd3fef71b10572b3dbbe33d435ea9b1896017aaa368cf15749a31eea8fe31c85d802c156419541c8ce488a06f884f5a6e8a4b50909476c3cf3f390aaee72f773d7efa42c1987d83776fa1bfa11478c90c90208ddb836afe2246775e48c645a2dda1c37751ed4b58d1ab174edbee01e41b087dcd7887abe8405c8c27c1f48bac06acf2e31569abd4c28eeea1d7c261c9686e4f9dd23e5e23f62313914e0e3995fc968293406f3b1ea20a714f3533537f2567039e058642913b6b2411305f06ca7123cbdb7fb5bded92007ee626a51fc098a3e255cb564cb59b035c66cdfbbe60c95f02298b3760a3199d372bec9a6f48e97560d41967d74457d37d984834f62ec9b76abca86db5ce53e2ccdd4cf4dfeef8f2bfc674421eae8ce3dac0942b051df797cb80eb33dd745480d24f112b59beb74aca5091bf0357f4b6648166a237bebb42b97144011fac1092480b9768ddad9109d325ae2194a1916eef02e073104fc1f15191e51682034f441167a2f0c1cd680456f3adbc630dbe5f7ff7227ae504664edaccadf0c00fce7c623761f731708c4dfcbb157c4cc7118e09659f110084994bd7991b3c4ee86c50fa61e813ecf096d58bbd3042cc54cd71eef722b328a84a0f64725febedd5f68833f853bb03821141d38ec0545c7206085f35c401f5fe029acad75d29d4b144f66f28dd153b159660fe329e2a7bfff558ac5fa3e8d0789ad206d8690996b887ac48cf0227841e6bbb71b53d8f0b86e16eee0c85efc6c7a62b59576ed3c78b059c0ca86cd50f58193dca096471efbb108febf494a4b361f2e732c331596405f4a49f08da87b75b60c9f6e845943ee4956d888f7c0d1d9d819001ee36064dd25d74ac326189249aafd89bf4f9b52bf69e8032b965d4b81e4d941abb0c01d9f0f146ffee7f71d5548eb29e6b6023b3904f0786101e906e6eee8690be539200c437b24daa7918db0d14bad8b21d853b702ee4af42282db6ca91594cddaa7c9a9dffe5c0c9e5249844b1c7ddddf90bd42e3282aff5edde68092e0324e8f76c281e01f5a936f725cb5d6d51379c15bb4ccbd55887bd3617aa37ac18f33fa1da491d0966a7e292f768f6e09d710c5eab9bd124abbe792f08f1f6423796f16bfa7d9d87605415b2a4b05e6a898124adba89628e6102daa42b35d9b71c665641c514085848bad88f03ed9cd652bc4c2a089ebcd8713ce83cd0b68012ca859f56fb6292c7624ad5835bfb15904056763154b4d9b63735415e67a61b327b588728d6297f7770d044e5bf92706918e5ac7a1059cda756c86691b63090974823e36d80d0c42397121e79fc3d0078c2ac3edfe834913326b52d1e8a679cff664cbec99f898ab5404b5132eafb1ecfe84cfa9a0d8959fc7fdce344cb28ff928c948acdba1aa2aa94ba10ed1e4ef4572bbf3a65443339ac0a5a4948f8a964a844eb53d863a3b81ccfb970d12307410c38d624816e2e168ff75eca96bb9fb2064510d1f84c81915957a41134328b023815c55745c86d83a5e6951917a7a3b3f83460de4d826ccd59fe89e0efdf40cc39b64e0580bdc40a6005a75ec0607c876fdd2b2556c0c1256821403e0fc1ef223b8480c32f61824300b56fd0c44922a241e998c549f8dfb975c3e0a1166ebfc059fc85bcf817923a0f636564e9982085589cdb1606df154d71475ea2ed4812905a8d316977ab656631ab278e2c979abe9179b1e2452cbb9106df5816b7422416759a5b4573f595270be8fab125ea0948b3eaa359fc73fe7ba0fc6e5b55191fb7b131f7f4ae814b69a931a5d9a15b8d3d7be7e913cc65086aecfab5d4612306be1e81f708d913d4d29ccb11e29e87ed989a591580a11c0b2efb4fc143ee2eff507ae3220adccc7ab314094d91f09c3cb9065cfdbdc36ee66e"}}, &(0x7f0000004980)) epoll_ctl$EPOLL_CTL_MOD(r7, 0x3, r9, &(0x7f00000049c0)={0xfb4dda3ed16aa153}) ioctl$HIDIOCGDEVINFO(r2, 0x801c4803, &(0x7f0000004a00)=""/206) sendmsg$L2TP_CMD_SESSION_GET(r7, &(0x7f0000004c40)={&(0x7f0000004b00)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000004c00)={&(0x7f0000004b40)={0x94, 0x0, 0x100, 0x70bd2c, 0x25dfdbfc, {}, [@L2TP_ATTR_IP_DADDR={0x8, 0x19, @loopback}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'wlan0\x00'}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'geneve0\x00'}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @loopback}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x7}, @L2TP_ATTR_L2SPEC_LEN={0x5}]}, 0x94}}, 0x8000) 3.826211439s ago: executing program 2 (id=145): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ed) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) socket(0x2, 0x2, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/class/net/bond0/bonding/arp_ip_target\x00', 0x1, 0x0) write(r0, &(0x7f0000000400)='+192.168.1.1', 0xc) (fail_nth: 3) 3.695749876s ago: executing program 3 (id=146): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="600000001800010400000000000000000a400000fe0200010000000014000500fe80000000000000000000000000000208000400", @ANYRES32=0x2, @ANYBLOB="0600150008000000200016801c000100000201010000"], 0x60}}, 0x0) (fail_nth: 1) 3.598826387s ago: executing program 2 (id=147): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xd, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020642500000000002020207b0bf8ff00000000bda100000000000057010000f8ffffffb702000008000000b70300000000000085000000bb00000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) openat$ptmx(0xffffffffffffff9c, 0x0, 0x480000, 0x0) r0 = socket(0x2d, 0x2, 0x0) bind$xdp(r0, &(0x7f0000000080)={0x2d, 0x0, 0x0, 0xc}, 0x10) bind$xdp(r0, &(0x7f00000005c0)={0x2d, 0x0, 0x0, 0xc}, 0x10) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000002c0)={0x26, 'hash\x00', 0x0, 0x0, 'xcbc(twofish-generic)\x00'}, 0x58) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x84}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) setresuid(0xee00, 0x0, 0xee01) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7be", 0x20) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) dup3(r6, r5, 0x0) 3.598464741s ago: executing program 1 (id=148): r0 = socket$kcm(0x2b, 0x1, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9}, 0x94) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000300)={0xffffffffffffffff, &(0x7f00000001c0)="bbdf81b405f0ad461eee83b3e1c540661355e14a24d04a", 0x0}, 0x20) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x1, 0x8000}, 0x4) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'ip6gretap0\x00', 0x0}) sendto$packet(r2, &(0x7f0000000180)="0b032200e0ff25000200475400f6a13bb10000a8880008004803", 0x10000, 0x0, &(0x7f0000000140)={0x11, 0x0, r3}, 0x14) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r4, 0x84, 0xc, 0x0, 0x0) listen(r0, 0x3) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x3, 0xc, &(0x7f0000000780)=ANY=[@ANYBLOB="18020000090000000000000001000000850000004f000000180100002020752500000000002020207b1af8ff00000000bfa1000000000000070100000d3c78725970dcd6b5e7562bb703000003000000850000009b0000009500000000000000"], &(0x7f0000000040)='GPL\x00'}, 0x94) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/firmware/fdt', 0x0, 0x82) fsetxattr$security_capability(r6, &(0x7f0000000000), 0x0, 0x0, 0x1) fgetxattr(r6, &(0x7f0000000000)=ANY=[], 0x0, 0x8) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r5, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbd8abc89b6f59ec", 0x0, 0x1ffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) r7 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r0, &(0x7f0000000280)) close(r0) r8 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$DCCPDIAG_GETSOCK(r8, &(0x7f0000000600)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000005c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="bd7000fbdbdf25104309f34e214e220400000000002f0001040000050000000500000008000000f6000000020000003a9deb65ed8d6dac591ceecbe953745ba142ed46aa969c8c44d129cbe5be57903dab93c3a71a", @ANYRES32=r3, @ANYBLOB="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"], 0x224}, 0x1, 0x0, 0x0, 0x40000}, 0xc800) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000000)=0x0) ioctl$DRM_IOCTL_GET_STATS(0xffffffffffffffff, 0x80f86406, &(0x7f0000000380)=""/141) pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0x80000) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) splice(r10, 0x0, r11, 0x0, 0x50, 0x8) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000740)={@map=r11, 0xb, 0x1, 0x7, &(0x7f0000000640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x0, &(0x7f0000000680)=[0x0], &(0x7f00000006c0)=[0x0, 0x0], &(0x7f0000000700)=[0x0, 0x0, 0x0]}, 0x40) timer_create(0x7, &(0x7f00000000c0)={0x0, 0x819, 0x2, @tid=r9}, &(0x7f0000000080)) 3.575425411s ago: executing program 4 (id=149): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x4, 0xea, 0x440, 0x0, 0x10, 0x0, 0x4}, 0x9c) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000140)=0x3dbc, 0x4) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0xfffffffd, @loopback, 0x3}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) recvmmsg(r0, &(0x7f00000032c0)=[{{0x0, 0x0, 0x0}, 0x8}], 0x1, 0x0, 0x0) 3.553881159s ago: executing program 0 (id=150): capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000040)={0x200000, 0x200000, 0x0, 0x3}) symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) r0 = syz_io_uring_setup(0x1060, &(0x7f00000003c0)={0x0, 0x50b6, 0x2, 0x3, 0x167}, &(0x7f0000000500), &(0x7f0000000040), &(0x7f0000000000)) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x64) io_uring_register$IORING_REGISTER_CLONE_BUFFERS(r0, 0x1e, &(0x7f0000000080)={0xffffffffffffffff, 0x1, 0xb, 0x3ff, 0x6}, 0x1) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@userxattr}]}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000100)=""/143, 0x8f}], 0x1) 3.275929536s ago: executing program 3 (id=151): r0 = semget(0x3, 0x4, 0x39c) semctl$SEM_INFO(r0, 0x2, 0x13, &(0x7f0000000040)=""/112) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000c40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=[@rights={{0x14, 0x1, 0x1, [r2]}}], 0x18, 0x4}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [r2]}}], 0x18, 0x24000090}}], 0x2, 0x4000) recvmmsg(r2, &(0x7f0000000040)=[{{0x0, 0x0, 0x0}, 0x2}], 0x1, 0x0, 0x0) semop(r0, &(0x7f00000000c0)=[{0x1, 0x8001, 0x1000}, {0x0, 0x7fff, 0x1000}, {0x0, 0x5, 0x800}], 0x3) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000540), 0x1, 0x490, &(0x7f0000000580)="$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") lsetxattr$security_ima(&(0x7f0000000300)='./file0\x00', &(0x7f0000000080), &(0x7f00000000c0)=@sha1={0x1, "ca46bb42f431c3e0a36fd25058505cb8e13b6aee"}, 0xfd3f, 0x0) lsetxattr$security_ima(&(0x7f0000000300)='./file0\x00', &(0x7f0000000080), &(0x7f0000000000)=@sha1={0x1, "ca46bb42f431c3e0a36fd25058505cb8e13b6aee"}, 0x9ab7, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.idle_time\x00', 0x275a, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000380)={r4, r4}, 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x11, &(0x7f0000000540)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000b7080000000000007b8af8ff00000000b7080000060000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @sched_cls=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r5, 0x0, 0xcc0, 0x0, &(0x7f0000000040)="f4b84de4115d64244a0e839e86dd", 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x89a0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x200000, &(0x7f0000000140)={[{@stripe={'stripe', 0x3d, 0x4}}, {}, {@sysvgroups}, {@norecovery}, {@dioread_nolock}, {@oldalloc}, {@oldalloc}, {@sysvgroups}, {@norecovery}]}, 0x3, 0x566, &(0x7f00000015c0)="$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") r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x109141, 0xd6) pwrite64(r6, &(0x7f0000001300)="cffc", 0x2, 0x7ff) write$binfmt_misc(r3, &(0x7f0000000040), 0xe09) semop(r0, &(0x7f0000000000)=[{0x3, 0xbbdd, 0x1000}], 0x1) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000280)=[0x6, 0x7fff]) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x61}, @call={0x85, 0x0, 0x0, 0x7d}]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x46) openat(r3, &(0x7f0000000100)='./file0\x00', 0x22a080, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x0, 0xe, 0x0, &(0x7f0000000d80)="e0274239ed0d85df6845992fc970", 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$nl_generic(0x10, 0x3, 0x10) 3.164660575s ago: executing program 4 (id=152): getpid() r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x0, 0x3}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x4, 0x2}, 0x10) capget(&(0x7f0000000040)={0x20071026, r0}, &(0x7f00000000c0)={0x9, 0x7, 0x8000, 0xa9c, 0x13, 0x101}) syz_open_procfs(r0, &(0x7f0000000000)='net/ip_mr_vif\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r2) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000e40)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c000000", @ANYRESOCT=0x0, @ANYBLOB="210f00000000feb9ec99720565dbdf252000000008000300", @ANYRES32=r3], 0x1c}, 0x1, 0x0, 0x0, 0x404c0d8}, 0x200000000000000) 2.503890459s ago: executing program 0 (id=153): mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0xe) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x34) openat$smackfs_load(0xffffffffffffff9c, &(0x7f0000000000)='/sys/fs/smackfs/load-self\x00', 0x2, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@index_on}]}) linkat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000380)='./file0/file0\x00', 0x400) chdir(&(0x7f00000003c0)='./bus\x00') unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) 2.431939832s ago: executing program 4 (id=154): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000064000000030a01030000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140003006e657464657673696d30000000000000080000000000000014000000110001"], 0xac}, 0x1, 0x0, 0x0, 0x4008855}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a44000000030a03000000000000000000050000000900010073797a30000000000900030073797a300000000018000480140003007465616d5f736c6176655f31000000001400000011000100"], 0x6c}, 0x1, 0x0, 0x0, 0x20040845}, 0x802) sendmsg$NFT_BATCH(r0, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="14000000100001f500000000000000000100000a14000000020a497f75241d4e1deb00000500000614000000110001"], 0x3c}, 0x1, 0x0, 0x0, 0x2004c040}, 0xc050) (fail_nth: 3) 2.293866653s ago: executing program 1 (id=155): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000100)={'syzkaller0\x00', 0x1}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd0a, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0x0, 0x4}, {0xffff, 0xffff}, {0xfff2, 0xfff1}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000c00)=@newtfilter={0x4c, 0x2c, 0xd3f, 0x4070bd24, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x5, 0xffe0}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x9, 0xffffffff}]}}, @TCA_BPF_FLAGS={0x8, 0x8, 0x1}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8848}, 0x24000804) sendmsg$kcm(r6, &(0x7f00000000c0)={&(0x7f0000000500)=@xdp={0x2c, 0x7, r7, 0x3e}, 0x80, &(0x7f0000000640)=[{&(0x7f0000000180)='\'', 0x1}], 0x1}, 0x20004014) 2.015477583s ago: executing program 4 (id=156): syz_open_dev$mtd(0x0, 0x46, 0x1) r0 = socket$kcm(0x29, 0x2, 0x0) sendmsg$inet(r0, 0x0, 0x24044890) sendmsg(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000380)="240000002e00074c8bfffd946fa2830022200afffffffffffff000e50c1be3a20400007e280000005e00ff03c81f8374b4", 0x31}], 0x1}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r1 = syz_open_dev$vivid(&(0x7f0000000080), 0x1, 0x2) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_INTERVAL(r1, 0xc040564b, &(0x7f0000000100)={0x401, 0x0, 0x303d, 0xffffffff, 0x3, {0x6, 0x8}, 0x1}) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfc409000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000040)) 1.931915316s ago: executing program 0 (id=157): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) io_setup(0x2278, &(0x7f0000000180)=0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x9, 0x1, 0x56d, 0x2}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000240), 0xfffffffb, r4}, 0x38) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200), &(0x7f0000000040), 0x1000, r4}, 0x38) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=@newsa={0xfc, 0x10, 0x5, 0x0, 0x0, {{@in6=@loopback, @in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x80, 0x80}, {@in6=@loopback, 0x1234, 0x32}, @in6=@loopback, {0x0, 0x0, 0x0, 0x0, 0x800000000000}, {}, {}, 0x0, 0x1, 0xa, 0x1}, [@offload={0xc, 0x1c, {0x0, 0x1}}]}, 0xfc}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000500)={r6, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x4, 0x600, 0x1}}, 0x20) r7 = socket$inet6(0xa, 0x2, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={r4, 0x58, &(0x7f00000000c0)}, 0x10) syz_mount_image$vfat(&(0x7f0000001140), &(0x7f0000001040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xa18c56, &(0x7f00000002c0)=ANY=[@ANYBLOB="747a3d5554432c726f6469722c636f6465706167653d3836392c73686f72746e616d653d6d697865642c73686f72746e616d653d6c6f7765722c6e6f6e756d7461696c3d302c757466383d302c756e695f786c6174653d312c73686f72746e616d653d77696e39352c7368aa2831712bbbc16f72746e616d653d6d697865642c696f636861727365743d6d6163677265656b2c726f6469722c6e6f6e756d74"], 0x7f, 0x2b1, &(0x7f00000015c0)="$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") r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0) write$binfmt_aout(r8, &(0x7f0000000440)=ANY=[], 0xff2e) ioctl$TCSETS(r8, 0x40045431, &(0x7f0000000140)={0x0, 0x8000, 0x0, 0x100, 0x8b, "0000000000efbc0df065ffff00"}) r9 = syz_open_pts(r8, 0x0) r10 = dup3(r9, r8, 0x0) ioctl$sock_inet6_udp_SIOCINQ(r10, 0x541b, 0x0) r11 = userfaultfd(0x1) ioctl$UFFDIO_API(r11, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_COPY(r11, 0xc028aa05, &(0x7f0000000180)={&(0x7f0000ffd000/0x1000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x1000, 0x9d54be0b43b51e7d, 0x2}) sendto$inet6(r7, 0x0, 0x0, 0x0, &(0x7f0000000500)={0xa, 0x1234, 0x0, @loopback}, 0x1c) setsockopt$sock_timeval(r2, 0x1, 0x14, &(0x7f0000000000)={0x0, 0xea60}, 0x10) io_submit(r1, 0x2, &(0x7f0000000a40)=[&(0x7f00000001c0)={0x0, 0x4, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x5, 0x8, r0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x2}]) 1.931667843s ago: executing program 3 (id=158): setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, 0x0, 0x0) (async) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a010100"], 0x57) (async) socket$netlink(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="18000000270001031dbd7002fadbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x40000d0}, 0x0) recvmmsg(r0, &(0x7f0000004680)=[{{0x0, 0x0, 0x0}, 0x2bb3}, {{0x0, 0x0, 0x0}, 0x4f56}, {{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000bc0)=""/109, 0x6d}, {&(0x7f0000000c40)=""/132, 0x84}, {&(0x7f0000000d00)=""/208, 0xd0}, {&(0x7f00000016c0)=""/4096, 0x1000}, {&(0x7f0000000040)=""/188, 0xbc}, {&(0x7f0000000200)=""/185, 0xb9}, {&(0x7f00000002c0)=""/187, 0xbb}, {&(0x7f0000000480)=""/193, 0xc1}, {&(0x7f0000000580)=""/16, 0x10}, {&(0x7f00000005c0)=""/206, 0xce}, {&(0x7f00000006c0)=""/12, 0xc}, {&(0x7f0000000780)=""/239, 0xef}, {&(0x7f0000000980)=""/180, 0xb4}], 0xd}}], 0x3, 0x40002000, 0x0) (async) sendmsg$key(0xffffffffffffffff, 0x0, 0x10) (async) socket$netlink(0x10, 0x3, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000004140)={'team0\x00', 0x0}) (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00', 0x0}) (async) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCADDRT(r4, 0x890b, &(0x7f0000000800)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @loopback, @private1={0xfc, 0x1, '\x00', 0x1}, 0x0, 0x51c, 0xc, 0x100, 0x9, 0x180107, r3}) (async) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00'}) r6 = socket$nl_route(0x10, 0x3, 0x0) (async) r7 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000000140)={'batadv_slave_1\x00'}) (async) sendmsg$nl_route_sched(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xffff}, {0xe, 0xfff3}, {0x0, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x48080}, 0x0) 1.744265021s ago: executing program 2 (id=159): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) io_setup(0x2278, &(0x7f0000000180)=0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_timeval(r2, 0x1, 0x14, &(0x7f0000000000)={0x0, 0xea60}, 0x10) io_submit(r1, 0x2, &(0x7f0000000a40)=[&(0x7f00000001c0)={0x0, 0x4, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x5, 0x8, r0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x2}]) (fail_nth: 1) 840.698807ms ago: executing program 2 (id=160): socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001780)={&(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x0, 0x30, 0x0, 0x0, 0x4}, 0x28) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000008d40)=@broute={'broute\x00', 0x20, 0x1e01, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20008c80], 0x0, 0x0, &(0x7f0000008c80)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff000d000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff00000000"]}, 0x108) sendmsg$NFT_BATCH(r0, &(0x7f00000003c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x7d00800}, 0xc, &(0x7f0000000380)={&(0x7f0000000600)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_DELSET={0xc8, 0xb, 0xa, 0x0, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFTA_SET_DESC={0x8c, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x765}, @NFTA_SET_DESC_CONCAT={0x18, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}]}]}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x76}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0xa93a}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_DESC_CONCAT={0x40, 0x2, 0x0, 0x1, [{0x4}, {0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4dd}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xe}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xc55b}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}]}]}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x85}, @NFTA_SET_GC_INTERVAL={0x8}, @NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x5}, @NFTA_SET_POLICY={0x8}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELFLOWTABLE={0x14, 0x18, 0xa, 0x201, 0x0, 0x0, {0x3, 0x0, 0x1}}, @NFT_MSG_DELRULE={0x2c, 0x8, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x5}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x5}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x130}, 0x1, 0x0, 0x0, 0x40000}, 0x4080) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) sendfile(r3, r3, 0x0, 0x2) 435.963376ms ago: executing program 3 (id=161): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), r0) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000040)={0x3c, r1, 0x607, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x4}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x3c}}, 0x20048840) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x4, 0x7ffc0001}]}) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x4, 0x6b35e9d94325c671, 0xffffffffffffffff, 0x0) syz_open_dev$dri(&(0x7f0000000200), 0x9, 0x4840) r2 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r2, &(0x7f0000000200)=@name={0x1e, 0x2, 0x0, {{0x42, 0x3}, 0x4}}, 0x10) socket$tipc(0x1e, 0x5, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000010)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000020)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000030)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000050)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000060)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000070)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000090)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000a0)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000b0)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000d0)) r3 = socket$nl_sock_diag(0x10, 0x3, 0x4) write(r3, &(0x7f0000000200)="580000001400010300000000000000001e000000ffffffff00"/88, 0x58) r4 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r4, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) syz_init_net_socket$x25(0x9, 0x5, 0x0) 424.477805ms ago: executing program 2 (id=162): r0 = socket(0x400000000010, 0x3, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_GETKMSGREDIRECT(r1, 0x4bfb, &(0x7f0000000000)) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0xdd008d5803396e68}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000840)=@newtfilter={0x7c, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0xb, 0xd}, {0x0, 0x3}, {0x7, 0xffe0}}, [@filter_kind_options=@f_basic={{0xa}, {0x44, 0x2, [@TCA_BASIC_POLICE={0x40, 0x4, [@TCA_POLICE_TBF={0x3c, 0x1, {0x2, 0x6, 0x1, 0x7, 0x7fff, {0x6, 0x2, 0x6, 0xb92, 0x81, 0x9}, {0x9, 0x1, 0x9, 0x100, 0x6}, 0x10000, 0x11e4, 0x3}}]}]}}, @TCA_CHAIN={0x8, 0xb, 0x3}]}, 0x7c}, 0x1, 0x0, 0x0, 0x20041090}, 0x20004080) ioctl$sock_bt_hci(r0, 0x400448e2, &(0x7f0000000000)="2dd406cffaf43e810ec822aa4089d34927a12ab2ba9435cf3ab2723272910d86a47c86dab4ebcca34db94ffec28159e48e91e72e3354f16e78ed") r3 = io_uring_setup(0x6b89, &(0x7f0000000040)={0x0, 0x81cb, 0x800, 0x0, 0x204}) io_uring_enter(r3, 0x6b5a, 0xc256, 0x6, &(0x7f0000000140)={[0x4]}, 0x8) 238.376641ms ago: executing program 4 (id=163): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000e40)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="210f00000000fedbdf252000000008000300", @ANYRES32=r2], 0x1c}, 0x1, 0x0, 0x0, 0x48010}, 0x200000000000000) (fail_nth: 3) 101.167189ms ago: executing program 1 (id=164): bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x1, 0x100a, 0x8, 0x8, 0x40, 0xffffffffffffffff, 0xfffffffe}, 0x50) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) timerfd_create(0x2, 0x1000) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffc}, [@call={0x85, 0x0, 0x0, 0x36}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pipe2(&(0x7f0000000200), 0x0) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="38000000031401002abd7000fedbdf250900020073017a31000000000800410072786500140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x0, 0x0) mount(&(0x7f0000000200)=@filename='sysfs\x00', &(0x7f0000000300)='./sys\x00', &(0x7f0000000400)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/class/rnbd-client/ctl/map_device\x00', 0x1, 0x0) write(r1, &(0x7f0000000600)='sessname=s1 device_path=/dev/ram0 path=ip:127.0.0.1\x00', 0x34) r2 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x595f, 0x10000, 0x0, 0x51}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r3, r4, r5, &(0x7f00000017c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x2007, @fd_index=0x5, 0xc, &(0x7f0000001740)=[{&(0x7f0000002080)=""/4096, 0x1000}], 0x1, 0x4, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r2, 0x7c65, 0xa334, 0x1, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) 0s ago: executing program 2 (id=165): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000980)=ANY=[@ANYBLOB="1400000042000b06"], 0x14}}, 0x0) recvmmsg(r2, &(0x7f00000009c0)=[{{0x0, 0x0, &(0x7f0000000640)=[{0x0}, {0x0}], 0x2}, 0xf7d}], 0x1, 0x10002, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.54' (ED25519) to the list of known hosts. [ 28.648820][ T4698] cgroup: Unknown subsys name 'net' [ 28.778813][ T4698] cgroup: Unknown subsys name 'cpuset' [ 28.781030][ T4698] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 28.970243][ T4698] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SS [ 29.713802][ T4712] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 29.715694][ T4712] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 29.717478][ T4712] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 29.719178][ T4712] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 29.720881][ T4712] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 29.775539][ T4723] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 29.787170][ T4726] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 29.787843][ T4726] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 29.789604][ T4726] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 29.789713][ T4726] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 29.789825][ T4726] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 29.790052][ T4726] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 29.790691][ T4726] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 29.790771][ T4726] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 29.791190][ T4726] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 29.791421][ T4726] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 29.791867][ T4711] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 29.792233][ T4711] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 29.792458][ T4711] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 29.796349][ T4711] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 29.797137][ T50] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 29.799395][ T4726] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 29.811369][ T4729] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 29.811488][ T4726] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 29.812642][ T4726] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 30.054333][ T4709] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.054834][ T4709] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.054915][ T4709] bridge_slave_0: entered allmulticast mode [ 30.055413][ T4709] bridge_slave_0: entered promiscuous mode [ 30.056571][ T4709] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.056593][ T4709] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.056641][ T4709] bridge_slave_1: entered allmulticast mode [ 30.057042][ T4709] bridge_slave_1: entered promiscuous mode [ 30.091313][ T4709] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.092242][ T4709] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.100419][ T4709] team0: Port device team_slave_0 added [ 30.112655][ T4709] team0: Port device team_slave_1 added [ 30.130434][ T4709] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.131874][ T4709] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.136825][ T4709] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.149695][ T4709] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.149721][ T4709] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.149738][ T4709] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.177984][ T4709] hsr_slave_0: entered promiscuous mode [ 30.178385][ T4709] hsr_slave_1: entered promiscuous mode [ 30.183645][ T4722] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.185280][ T4722] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.186742][ T4722] bridge_slave_0: entered allmulticast mode [ 30.187854][ T4722] bridge_slave_0: entered promiscuous mode [ 30.189097][ T4722] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.189120][ T4722] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.189169][ T4722] bridge_slave_1: entered allmulticast mode [ 30.189580][ T4722] bridge_slave_1: entered promiscuous mode [ 30.218919][ T4722] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.221920][ T4722] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.257510][ T4722] team0: Port device team_slave_0 added [ 30.258325][ T4722] team0: Port device team_slave_1 added [ 30.274188][ T4722] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.274212][ T4722] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.274228][ T4722] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.293489][ T4722] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.294973][ T4722] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.300074][ T4722] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.308263][ T4720] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.309694][ T4720] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.311364][ T4720] bridge_slave_0: entered allmulticast mode [ 30.313060][ T4720] bridge_slave_0: entered promiscuous mode [ 30.325770][ T4720] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.327239][ T4720] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.328961][ T4720] bridge_slave_1: entered allmulticast mode [ 30.330780][ T4720] bridge_slave_1: entered promiscuous mode [ 30.343588][ T4720] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.355514][ T4720] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.364495][ T4716] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.364788][ T4716] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.364912][ T4716] bridge_slave_0: entered allmulticast mode [ 30.365368][ T4716] bridge_slave_0: entered promiscuous mode [ 30.366241][ T4716] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.366262][ T4716] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.366319][ T4716] bridge_slave_1: entered allmulticast mode [ 30.366732][ T4716] bridge_slave_1: entered promiscuous mode [ 30.368747][ T4722] hsr_slave_0: entered promiscuous mode [ 30.369047][ T4722] hsr_slave_1: entered promiscuous mode [ 30.369263][ T4722] debugfs: 'hsr0' already exists in 'hsr' [ 30.369305][ T4722] Cannot create hsr debugfs directory [ 30.375827][ T4716] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.376728][ T4716] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.390089][ T4717] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.391624][ T4717] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.393133][ T4717] bridge_slave_0: entered allmulticast mode [ 30.394840][ T4717] bridge_slave_0: entered promiscuous mode [ 30.397288][ T4720] team0: Port device team_slave_0 added [ 30.398231][ T4720] team0: Port device team_slave_1 added [ 30.402121][ T4716] team0: Port device team_slave_0 added [ 30.404140][ T4716] team0: Port device team_slave_1 added [ 30.409004][ T4717] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.409077][ T4717] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.409153][ T4717] bridge_slave_1: entered allmulticast mode [ 30.409610][ T4717] bridge_slave_1: entered promiscuous mode [ 30.416217][ T4720] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.416250][ T4720] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.416264][ T4720] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.430997][ T4720] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.431026][ T4720] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.431049][ T4720] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.438989][ T4716] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.439000][ T4716] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.439013][ T4716] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.439866][ T4716] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.439875][ T4716] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.439889][ T4716] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.442950][ T4717] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.444357][ T4717] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.466440][ T4717] team0: Port device team_slave_0 added [ 30.467819][ T4709] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 30.470091][ T4709] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 30.473574][ T4709] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 30.476138][ T4709] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 30.479854][ T4717] team0: Port device team_slave_1 added [ 30.484810][ T4720] hsr_slave_0: entered promiscuous mode [ 30.486438][ T4720] hsr_slave_1: entered promiscuous mode [ 30.487971][ T4720] debugfs: 'hsr0' already exists in 'hsr' [ 30.488004][ T4720] Cannot create hsr debugfs directory [ 30.488705][ T4709] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 30.490020][ T4709] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 30.490316][ T4709] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 30.492439][ T4709] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 30.507922][ T4716] hsr_slave_0: entered promiscuous mode [ 30.509137][ T4716] hsr_slave_1: entered promiscuous mode [ 30.509683][ T4716] debugfs: 'hsr0' already exists in 'hsr' [ 30.509694][ T4716] Cannot create hsr debugfs directory [ 30.513305][ T4717] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.513317][ T4717] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.513335][ T4717] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.513991][ T4717] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.513999][ T4717] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.514014][ T4717] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.553167][ T4709] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.553224][ T4709] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.553379][ T4709] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.553411][ T4709] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.556178][ T4717] hsr_slave_0: entered promiscuous mode [ 30.556514][ T4717] hsr_slave_1: entered promiscuous mode [ 30.556725][ T4717] debugfs: 'hsr0' already exists in 'hsr' [ 30.556736][ T4717] Cannot create hsr debugfs directory [ 30.652660][ T4722] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 30.655380][ T4722] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 30.657066][ T4722] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 30.660234][ T4722] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 30.662039][ T4722] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 30.664334][ T4722] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 30.671825][ T4722] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 30.674535][ T4722] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 30.689553][ T4722] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.689597][ T4722] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.689688][ T4722] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.689720][ T4722] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.703864][ T4716] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 30.706448][ T4716] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 30.710359][ T4716] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 30.712745][ T4716] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 30.714465][ T4716] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 30.716736][ T4716] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 30.724924][ T4716] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 30.728693][ T4716] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 30.745694][ T4709] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.750737][ T4720] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 30.753647][ T4720] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 30.755324][ T4720] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 30.758573][ T4720] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 30.759030][ T4720] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 30.760739][ T4720] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 30.765738][ T4720] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 30.768836][ T4720] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 30.772908][ T4716] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.772956][ T4716] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.773040][ T4716] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.773068][ T4716] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.775754][ T1276] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.776987][ T1276] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.781952][ T1276] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.783618][ T1276] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.786247][ T1276] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.788183][ T1276] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.793890][ T4722] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.803380][ T4709] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.814876][ T39] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.814931][ T39] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.821125][ T39] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.821179][ T39] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.835371][ T4722] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.846704][ T4717] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 30.850020][ T4717] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 30.852247][ T4717] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 30.854789][ T4717] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 30.855784][ T1276] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.855814][ T1276] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.856226][ T4717] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 30.860824][ T4717] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 30.863833][ T4717] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 30.866258][ T4717] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 30.876473][ T4716] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.893810][ T4720] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.898553][ T1276] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.898602][ T1276] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.909636][ T4716] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.920859][ T1276] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.920905][ T1276] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.924055][ T1276] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.924094][ T1276] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.944362][ T4716] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 30.946328][ T4716] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 30.956793][ T4720] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.966026][ T39] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.966072][ T39] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.966676][ T39] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.966705][ T39] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.013750][ T4720] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 31.049263][ T4717] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.052306][ T4717] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.063342][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.063407][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.064277][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.064299][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.095753][ T4709] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.120553][ T4709] veth0_vlan: entered promiscuous mode [ 31.144767][ T4709] veth1_vlan: entered promiscuous mode [ 31.161655][ T4709] veth0_macvtap: entered promiscuous mode [ 31.164779][ T4709] veth1_macvtap: entered promiscuous mode [ 31.181902][ T4709] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.185111][ T4709] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.189900][ T331] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.190165][ T331] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.190280][ T331] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.190349][ T331] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.203653][ T4722] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.237245][ T4722] veth0_vlan: entered promiscuous mode [ 31.253217][ T4722] veth1_vlan: entered promiscuous mode [ 31.266337][ T4720] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.276395][ T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.276431][ T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.291244][ T4720] veth0_vlan: entered promiscuous mode [ 31.293450][ T4716] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.302411][ T4720] veth1_vlan: entered promiscuous mode [ 31.313558][ T4720] veth0_macvtap: entered promiscuous mode [ 31.326535][ T4720] veth1_macvtap: entered promiscuous mode [ 31.333368][ T4722] veth0_macvtap: entered promiscuous mode [ 31.335598][ T4722] veth1_macvtap: entered promiscuous mode [ 31.345941][ T1276] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.345986][ T1276] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.350040][ T4722] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.360730][ T4716] veth0_vlan: entered promiscuous mode [ 31.362831][ T4716] veth1_vlan: entered promiscuous mode [ 31.364823][ T4722] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.366428][ T1276] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.366716][ T1276] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.366741][ T1276] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.369380][ T4720] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.375880][ T4720] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.398291][ T1276] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.415987][ T4717] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.418687][ T4709] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 31.427888][ T15] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.451734][ T15] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.451779][ T15] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.453962][ T4716] veth0_macvtap: entered promiscuous mode [ 31.455154][ T4716] veth1_macvtap: entered promiscuous mode [ 31.472014][ T15] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.472054][ T15] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.478376][ T4716] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.481178][ T4716] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.524153][ T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.524188][ T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.530082][ T331] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.531563][ T331] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.531645][ T331] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.560243][ T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.560278][ T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.583842][ T4897] loop0: detected capacity change from 0 to 512 [ 31.586470][ T4897] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 31.613856][ T4897] EXT4-fs (loop0): failed to open journal device unknown-block(0,0) -ENXIO [ 31.628742][ T4902] netlink: 40 bytes leftover after parsing attributes in process `syz.1.7'. [ 31.631707][ T4902] netlink: 32 bytes leftover after parsing attributes in process `syz.1.7'. [ 31.635039][ T4897] geneve1: entered promiscuous mode [ 31.651506][ T4902] usb usb1: usbfs: process 4902 (syz.1.7) did not claim interface 0 before use [ 31.652776][ T1276] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.652787][ T1276] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.660216][ T15] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.662436][ T1276] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.662631][ T1276] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.662767][ T1276] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.678067][ T4904] binder: 4903:4904 tried to acquire reference to desc 0, got 1 instead [ 31.701272][ T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.701306][ T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.715327][ T4717] veth0_vlan: entered promiscuous mode [ 31.715749][ T4906] FAULT_INJECTION: forcing a failure. [ 31.715749][ T4906] name failslab, interval 1, probability 0, space 0, times 1 [ 31.715765][ T4906] CPU: 1 UID: 0 PID: 4906 Comm: syz.1.9 Not tainted syzkaller #0 PREEMPT [ 31.715777][ T4906] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 31.715784][ T4906] Call trace: [ 31.715788][ T4906] show_stack+0x2c/0x3c (C) [ 31.715809][ T4906] __dump_stack+0x30/0x40 [ 31.715824][ T4906] dump_stack_lvl+0xd8/0x12c [ 31.715835][ T4906] dump_stack+0x1c/0x28 [ 31.715845][ T4906] should_fail_ex+0x41c/0x590 [ 31.715853][ T4906] should_failslab+0xc4/0x120 [ 31.715864][ T4906] __kmalloc_noprof+0x108/0x6b8 [ 31.715876][ T4906] bcm_rx_setup+0x4ac/0x1620 [ 31.715888][ T4906] bcm_sendmsg+0x280/0x5c8 [ 31.715895][ T4906] __sock_sendmsg+0xc8/0x17c [ 31.715906][ T4906] ____sys_sendmsg+0x3d0/0x6c8 [ 31.715915][ T4906] ___sys_sendmsg+0x198/0x224 [ 31.715925][ T4906] __sys_sendmsg+0x158/0x204 [ 31.715934][ T4906] __arm64_sys_sendmsg+0x88/0x9c [ 31.715943][ T4906] invoke_syscall+0x98/0x244 [ 31.715954][ T4906] el0_svc_common+0xec/0x23c [ 31.715964][ T4906] do_el0_svc+0x4c/0x5c [ 31.715973][ T4906] el0_svc+0x64/0x260 [ 31.715983][ T4906] el0t_64_sync_handler+0x44/0x104 [ 31.715991][ T4906] el0t_64_sync+0x198/0x19c [ 31.724541][ T4717] veth1_vlan: entered promiscuous mode [ 31.734088][ T4717] veth0_macvtap: entered promiscuous mode [ 31.735469][ T4717] veth1_macvtap: entered promiscuous mode [ 31.746290][ T4717] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.750767][ T4717] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.759557][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.759727][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.759788][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.759836][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.764153][ T4904] FAULT_INJECTION: forcing a failure. [ 31.764153][ T4904] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 31.764170][ T4904] CPU: 1 UID: 0 PID: 4904 Comm: syz.2.3 Not tainted syzkaller #0 PREEMPT [ 31.764181][ T4904] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 31.764186][ T4904] Call trace: [ 31.764189][ T4904] show_stack+0x2c/0x3c (C) [ 31.764210][ T4904] __dump_stack+0x30/0x40 [ 31.764221][ T4904] dump_stack_lvl+0xd8/0x12c [ 31.764231][ T4904] dump_stack+0x1c/0x28 [ 31.764241][ T4904] should_fail_ex+0x41c/0x590 [ 31.764249][ T4904] should_fail+0x14/0x24 [ 31.764255][ T4904] should_fail_usercopy+0x20/0x30 [ 31.764263][ T4904] _inline_copy_from_user+0x3c/0x174 [ 31.764273][ T4904] binder_ioctl_write_read+0x12c/0x97fc [ 31.764281][ T4904] binder_ioctl+0x438/0x1c38 [ 31.764290][ T4904] __arm64_sys_ioctl+0x154/0x1cc [ 31.764302][ T4904] invoke_syscall+0x98/0x244 [ 31.764312][ T4904] el0_svc_common+0xec/0x23c [ 31.764322][ T4904] do_el0_svc+0x4c/0x5c [ 31.764331][ T4904] el0_svc+0x64/0x260 [ 31.764341][ T4904] el0t_64_sync_handler+0x44/0x104 [ 31.764349][ T4904] el0t_64_sync+0x198/0x19c [ 31.764366][ T4904] binder: 4903:4904 ioctl c0306201 20004a40 returned -14 [ 31.767984][ T4730] Bluetooth: hci0: command tx timeout [ 31.792753][ T4795] binder: send failed reply for transaction 5 to 4903:4904 [ 31.830349][ T4825] binder: undelivered TRANSACTION_COMPLETE [ 31.830394][ T4825] binder: undelivered TRANSACTION_ERROR: 29189 [ 31.841118][ T4915] FAULT_INJECTION: forcing a failure. [ 31.841118][ T4915] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 31.841164][ T4915] CPU: 1 UID: 0 PID: 4915 Comm: syz.1.11 Not tainted syzkaller #0 PREEMPT [ 31.841176][ T4915] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 31.841183][ T4915] Call trace: [ 31.841187][ T4915] show_stack+0x2c/0x3c (C) [ 31.841209][ T4915] __dump_stack+0x30/0x40 [ 31.841221][ T4915] dump_stack_lvl+0xd8/0x12c [ 31.841231][ T4915] dump_stack+0x1c/0x28 [ 31.841241][ T4915] should_fail_ex+0x41c/0x590 [ 31.841249][ T4915] should_fail+0x14/0x24 [ 31.841255][ T4915] should_fail_usercopy+0x20/0x30 [ 31.841263][ T4915] simple_read_from_buffer+0xc4/0x238 [ 31.841273][ T4915] proc_fail_nth_read+0x1a8/0x248 [ 31.841283][ T4915] vfs_read+0x230/0x8c8 [ 31.841290][ T4915] ksys_read+0x12c/0x228 [ 31.841297][ T4915] __arm64_sys_read+0x84/0x98 [ 31.841304][ T4915] invoke_syscall+0x98/0x244 [ 31.841314][ T4915] el0_svc_common+0xec/0x23c [ 31.841324][ T4915] do_el0_svc+0x4c/0x5c [ 31.841333][ T4915] el0_svc+0x64/0x260 [ 31.841343][ T4915] el0t_64_sync_handler+0x44/0x104 [ 31.841357][ T4915] el0t_64_sync+0x198/0x19c [ 31.847558][ T4730] Bluetooth: hci3: command tx timeout [ 31.847711][ T4730] Bluetooth: hci2: command tx timeout [ 31.847776][ T4730] Bluetooth: hci1: command tx timeout [ 31.847836][ T4730] Bluetooth: hci4: command tx timeout [ 31.907183][ T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.907226][ T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.921465][ T4919] binder: 4918:4919 tried to acquire reference to desc 0, got 1 instead [ 31.922923][ T4919] FAULT_INJECTION: forcing a failure. [ 31.922923][ T4919] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 31.922940][ T4919] CPU: 1 UID: 0 PID: 4919 Comm: syz.1.13 Not tainted syzkaller #0 PREEMPT [ 31.922951][ T4919] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 31.922957][ T4919] Call trace: [ 31.922960][ T4919] show_stack+0x2c/0x3c (C) [ 31.922981][ T4919] __dump_stack+0x30/0x40 [ 31.922996][ T4919] dump_stack_lvl+0xd8/0x12c [ 31.923006][ T4919] dump_stack+0x1c/0x28 [ 31.923015][ T4919] should_fail_ex+0x41c/0x590 [ 31.923024][ T4919] should_fail+0x14/0x24 [ 31.923030][ T4919] should_fail_usercopy+0x20/0x30 [ 31.923038][ T4919] _inline_copy_from_user+0x3c/0x174 [ 31.923049][ T4919] binder_ioctl_write_read+0x12c/0x97fc [ 31.923057][ T4919] binder_ioctl+0x438/0x1c38 [ 31.923067][ T4919] __arm64_sys_ioctl+0x154/0x1cc [ 31.923079][ T4919] invoke_syscall+0x98/0x244 [ 31.923090][ T4919] el0_svc_common+0xec/0x23c [ 31.923099][ T4919] do_el0_svc+0x4c/0x5c [ 31.923109][ T4919] el0_svc+0x64/0x260 [ 31.923119][ T4919] el0t_64_sync_handler+0x44/0x104 [ 31.923127][ T4919] el0t_64_sync+0x198/0x19c [ 31.923137][ T4919] binder: 4918:4919 ioctl c0306201 200001c0 returned -14 [ 31.973419][ T331] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.973459][ T331] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.986182][ T4924] loop0: detected capacity change from 0 to 256 [ 32.040703][ T4931] IPVS: set_ctl: invalid protocol: 58 127.0.0.1:5376 [ 32.042512][ T4931] IPVS: rr: TCP 127.0.0.1:5376 - no destination available [ 32.044110][ T9] IPVS: starting estimator thread 0... [ 32.046996][ T4930] FAULT_INJECTION: forcing a failure. [ 32.046996][ T4930] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 32.050239][ T4930] CPU: 0 UID: 0 PID: 4930 Comm: syz.3.16 Not tainted syzkaller #0 PREEMPT [ 32.050268][ T4930] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 32.050278][ T4930] Call trace: [ 32.050284][ T4930] show_stack+0x2c/0x3c (C) [ 32.050307][ T4930] __dump_stack+0x30/0x40 [ 32.050319][ T4930] dump_stack_lvl+0xd8/0x12c [ 32.050329][ T4930] dump_stack+0x1c/0x28 [ 32.050345][ T4930] should_fail_ex+0x41c/0x590 [ 32.050354][ T4930] should_fail+0x14/0x24 [ 32.050361][ T4930] should_fail_usercopy+0x20/0x30 [ 32.050369][ T4930] _inline_copy_from_user+0x3c/0x174 [ 32.050383][ T4930] cec_ioctl+0x8c4/0x2c60 [ 32.050392][ T4930] __arm64_sys_ioctl+0x154/0x1cc [ 32.050405][ T4930] invoke_syscall+0x98/0x244 [ 32.050415][ T4930] el0_svc_common+0xec/0x23c [ 32.050425][ T4930] do_el0_svc+0x4c/0x5c [ 32.050434][ T4930] el0_svc+0x64/0x260 [ 32.050444][ T4930] el0t_64_sync_handler+0x44/0x104 [ 32.050453][ T4930] el0t_64_sync+0x198/0x19c [ 32.075389][ T4924] Zero length message leads to an empty skb [ 32.137995][ T4932] IPVS: using max 60 ests per chain, 144000 per kthread [ 32.166943][ T4944] loop0: detected capacity change from 0 to 2048 [ 32.170189][ T4944] ext4: Unknown parameter 'nouser_xattr' [ 32.261354][ T4953] FAULT_INJECTION: forcing a failure. [ 32.261354][ T4953] name failslab, interval 1, probability 0, space 0, times 0 [ 32.266468][ T4953] CPU: 0 UID: 0 PID: 4953 Comm: syz.3.23 Not tainted syzkaller #0 PREEMPT [ 32.266492][ T4953] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 32.266498][ T4953] Call trace: [ 32.266502][ T4953] show_stack+0x2c/0x3c (C) [ 32.266527][ T4953] __dump_stack+0x30/0x40 [ 32.266547][ T4953] dump_stack_lvl+0xd8/0x12c [ 32.266559][ T4953] dump_stack+0x1c/0x28 [ 32.266570][ T4953] should_fail_ex+0x41c/0x590 [ 32.266580][ T4953] should_failslab+0xc4/0x120 [ 32.266589][ T4953] kmem_cache_alloc_node_noprof+0x98/0x5f8 [ 32.266599][ T4953] __alloc_skb+0x1f0/0x610 [ 32.266610][ T4953] alloc_skb_with_frags+0xb8/0x690 [ 32.266618][ T4953] sock_alloc_send_pskb+0x740/0x850 [ 32.266626][ T4953] tun_get_user+0x6dc/0x364c [ 32.266634][ T4953] tun_chr_write_iter+0xfc/0x168 [ 32.266644][ T4953] vfs_write+0x51c/0xa0c [ 32.266652][ T4953] ksys_write+0x12c/0x228 [ 32.266658][ T4953] __arm64_sys_write+0x84/0x98 [ 32.266666][ T4953] invoke_syscall+0x98/0x244 [ 32.266676][ T4953] el0_svc_common+0xec/0x23c [ 32.266685][ T4953] do_el0_svc+0x4c/0x5c [ 32.266695][ T4953] el0_svc+0x64/0x260 [ 32.266704][ T4953] el0t_64_sync_handler+0x44/0x104 [ 32.266713][ T4953] el0t_64_sync+0x198/0x19c [ 32.285039][ T4955] loop4: detected capacity change from 0 to 4096 [ 32.297071][ T4955] EXT4-fs (loop4): Test dummy encryption mode enabled [ 32.300970][ T4955] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0103] [ 32.301075][ T4955] System zones: 0-5 [ 32.304596][ T4955] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 32.318450][ T4955] fscrypt: AES-256-CBC-CTS using implementation "cts-cbc-aes-ce" [ 32.388581][ T4955] EXT4-fs error (device loop4): __ext4_remount:6844: comm syz.4.24: Abort forced by user [ 32.389636][ T4955] EXT4-fs (loop4): Remounting filesystem read-only [ 32.389649][ T4955] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 32.426667][ T4717] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.447235][ T4960] loop4: detected capacity change from 0 to 512 [ 32.462775][ T4960] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 32.465156][ T4960] EXT4-fs error (device loop4): ext4_xattr_block_get:597: inode #15: comm syz.4.25: corrupted xattr block 33: invalid header [ 32.466214][ T4960] EXT4-fs error (device loop4): ext4_xattr_block_get:597: inode #15: comm syz.4.25: corrupted xattr block 33: invalid header [ 32.466388][ T4960] EXT4-fs error (device loop4): ext4_xattr_block_get:597: inode #15: comm syz.4.25: corrupted xattr block 33: invalid header [ 32.486784][ T4960] EXT4-fs error (device loop4): ext4_xattr_block_get:597: inode #15: comm syz.4.25: corrupted xattr block 33: invalid header [ 32.508342][ T15] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 32.509192][ T15] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 8 with error 28 [ 32.509207][ T15] EXT4-fs (loop4): This should not happen!! Data will be lost [ 32.509207][ T15] [ 32.509329][ T15] EXT4-fs (loop4): Total free blocks count 0 [ 32.509340][ T15] EXT4-fs (loop4): Free/Dirty block details [ 32.509360][ T15] EXT4-fs (loop4): free_blocks=65280 [ 32.509375][ T15] EXT4-fs (loop4): dirty_blocks=8 [ 32.509383][ T15] EXT4-fs (loop4): Block reservation details [ 32.509390][ T15] EXT4-fs (loop4): i_reserved_data_blocks=8 [ 32.510854][ T4717] EXT4-fs warning (device loop4): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 32.511778][ T4717] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.534173][ T4964] netlink: 348 bytes leftover after parsing attributes in process `syz.4.26'. [ 32.534416][ T4964] netlink: 24 bytes leftover after parsing attributes in process `syz.4.26'. [ 32.660881][ T4966] loop4: detected capacity change from 0 to 4096 [ 32.670138][ T4966] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 32.675470][ T4966] EXT4-fs (loop4): shut down requested (2) [ 32.686333][ T4717] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.729490][ T4971] FAULT_INJECTION: forcing a failure. [ 32.729490][ T4971] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 32.731829][ T4971] CPU: 0 UID: 0 PID: 4971 Comm: syz.4.29 Not tainted syzkaller #0 PREEMPT [ 32.731851][ T4971] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 32.731861][ T4971] Call trace: [ 32.731865][ T4971] show_stack+0x2c/0x3c (C) [ 32.731885][ T4971] __dump_stack+0x30/0x40 [ 32.731896][ T4971] dump_stack_lvl+0xd8/0x12c [ 32.731906][ T4971] dump_stack+0x1c/0x28 [ 32.731916][ T4971] should_fail_ex+0x41c/0x590 [ 32.731924][ T4971] should_fail+0x14/0x24 [ 32.731931][ T4971] should_fail_usercopy+0x20/0x30 [ 32.731938][ T4971] do_sock_getsockopt+0x4bc/0x720 [ 32.731949][ T4971] __sys_getsockopt+0xfc/0x168 [ 32.731958][ T4971] __arm64_sys_getsockopt+0xc8/0xe4 [ 32.731967][ T4971] invoke_syscall+0x98/0x244 [ 32.731977][ T4971] el0_svc_common+0xec/0x23c [ 32.731987][ T4971] do_el0_svc+0x4c/0x5c [ 32.731997][ T4971] el0_svc+0x64/0x260 [ 32.732006][ T4971] el0t_64_sync_handler+0x44/0x104 [ 32.732015][ T4971] el0t_64_sync+0x198/0x19c [ 32.760082][ T4973] loop4: detected capacity change from 0 to 256 [ 32.761922][ T4973] vfat: Deprecated parameter 'posix' [ 32.762867][ T4973] FAT-fs: "posix" option is obsolete, not supported now [ 32.888207][ T4974] process 'syz.4.30' launched './file2' with NULL argv: empty string added [ 32.902513][ T4976] FAULT_INJECTION: forcing a failure. [ 32.902513][ T4976] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 32.902548][ T4976] CPU: 1 UID: 0 PID: 4976 Comm: syz.1.31 Not tainted syzkaller #0 PREEMPT [ 32.902559][ T4976] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 32.902566][ T4976] Call trace: [ 32.902570][ T4976] show_stack+0x2c/0x3c (C) [ 32.902591][ T4976] __dump_stack+0x30/0x40 [ 32.902604][ T4976] dump_stack_lvl+0xd8/0x12c [ 32.902614][ T4976] dump_stack+0x1c/0x28 [ 32.902624][ T4976] should_fail_ex+0x41c/0x590 [ 32.902632][ T4976] should_fail+0x14/0x24 [ 32.902639][ T4976] should_fail_usercopy+0x20/0x30 [ 32.902646][ T4976] _inline_copy_from_user+0x3c/0x174 [ 32.902658][ T4976] get_user_ifreq+0x6c/0x16c [ 32.902670][ T4976] sock_do_ioctl+0x148/0x254 [ 32.902683][ T4976] sock_ioctl+0x55c/0x7ec [ 32.902693][ T4976] __arm64_sys_ioctl+0x154/0x1cc [ 32.902705][ T4976] invoke_syscall+0x98/0x244 [ 32.902716][ T4976] el0_svc_common+0xec/0x23c [ 32.902725][ T4976] do_el0_svc+0x4c/0x5c [ 32.902735][ T4976] el0_svc+0x64/0x260 [ 32.902744][ T4976] el0t_64_sync_handler+0x44/0x104 [ 32.902753][ T4976] el0t_64_sync+0x198/0x19c [ 33.327284][ T4991] loop0: detected capacity change from 0 to 128 [ 33.334681][ T4991] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 33.342969][ T4991] syz.0.36 (pid 4991) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 33.360784][ T4722] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 33.560281][ T5002] loop0: detected capacity change from 0 to 256 [ 33.560611][ T5002] ======================================================= [ 33.560611][ T5002] WARNING: The mand mount option has been deprecated and [ 33.560611][ T5002] and is ignored by this kernel. Remove the mand [ 33.560611][ T5002] option from the mount to silence this warning. [ 33.560611][ T5002] ======================================================= [ 33.560715][ T5002] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 33.689662][ T5015] netlink: 4 bytes leftover after parsing attributes in process `syz.0.43'. [ 33.865951][ T5031] loop2: detected capacity change from 0 to 128 [ 33.883292][ T5031] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 33.889640][ T4729] Bluetooth: hci0: command tx timeout [ 33.928111][ T4729] Bluetooth: hci4: command tx timeout [ 33.928155][ T4729] Bluetooth: hci1: command tx timeout [ 33.928186][ T4729] Bluetooth: hci2: command tx timeout [ 33.928207][ T4729] Bluetooth: hci3: command tx timeout [ 33.934750][ T5040] FAULT_INJECTION: forcing a failure. [ 33.934750][ T5040] name failslab, interval 1, probability 0, space 0, times 0 [ 33.934788][ T5040] CPU: 1 UID: 0 PID: 5040 Comm: syz.1.48 Not tainted syzkaller #0 PREEMPT [ 33.934801][ T5040] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 33.934807][ T5040] Call trace: [ 33.934811][ T5040] show_stack+0x2c/0x3c (C) [ 33.934831][ T5040] __dump_stack+0x30/0x40 [ 33.934845][ T5040] dump_stack_lvl+0xd8/0x12c [ 33.934855][ T5040] dump_stack+0x1c/0x28 [ 33.934865][ T5040] should_fail_ex+0x41c/0x590 [ 33.934873][ T5040] should_failslab+0xc4/0x120 [ 33.934882][ T5040] __kmalloc_noprof+0x108/0x6b8 [ 33.934894][ T5040] kstrdup_quotable+0xd4/0x1b0 [ 33.934902][ T5040] kstrdup_quotable_cmdline+0x1cc/0x210 [ 33.934909][ T5040] __report_access+0x58/0x324 [ 33.934919][ T5040] task_work_run+0x1cc/0x25c [ 33.934930][ T5040] exit_to_user_mode_loop+0x10c/0x17c [ 33.934939][ T5040] el0_svc+0x18c/0x260 [ 33.934948][ T5040] el0t_64_sync_handler+0x44/0x104 [ 33.934956][ T5040] el0t_64_sync+0x198/0x19c [ 33.935032][ T5040] ptrace attach of "(null)"[5041] was attempted by "ci-upstream-gce-arm64/syz-executor exec"[5040] [ 33.980670][ T4720] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 34.017838][ T5046] syzkaller0: entered promiscuous mode [ 34.017871][ T5046] syzkaller0: entered allmulticast mode [ 34.046711][ T5039] netlink: 16 bytes leftover after parsing attributes in process `syz.4.50'. [ 34.113598][ T5055] netlink: 36 bytes leftover after parsing attributes in process `syz.4.55'. [ 34.136976][ T5057] syz.0.57 uses obsolete (PF_INET,SOCK_PACKET) [ 34.181960][ T5063] input: syz0 as /devices/virtual/input/input2 [ 34.189552][ T5062] EXT4-fs error (device loop3): ext4_iget_extra_inode:5180: inode #15: comm syz.3.59: corrupted in-inode xattr: bad e_name length [ 34.189657][ T5062] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 34.202106][ T5062] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.59: couldn't read orphan inode 15 (err -117) [ 34.202202][ T5062] loop3: lost filesystem error report for type 5 error -117 [ 34.206797][ T5062] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 34.290815][ T5062] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.59: bg 0: block 465: padding at end of block bitmap is not set [ 34.294277][ T5062] EXT4-fs (loop3): Delayed block allocation failed for inode 13 at logical offset 2 with max blocks 10 with error 28 [ 34.294789][ T5062] EXT4-fs (loop3): This should not happen!! Data will be lost [ 34.294789][ T5062] [ 34.294801][ T5062] EXT4-fs (loop3): Total free blocks count 0 [ 34.294810][ T5062] EXT4-fs (loop3): Free/Dirty block details [ 34.294821][ T5062] EXT4-fs (loop3): free_blocks=0 [ 34.294831][ T5062] EXT4-fs (loop3): dirty_blocks=10 [ 34.294838][ T5062] EXT4-fs (loop3): Block reservation details [ 34.294845][ T5062] EXT4-fs (loop3): i_reserved_data_blocks=10 [ 34.305061][ T4716] EXT4-fs warning (device loop3): ext4_evict_inode:195: inode #13: comm syz-executor: data will be lost [ 34.305786][ T4716] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.417654][ T5076] syzkaller0: entered promiscuous mode [ 34.417687][ T5076] syzkaller0: entered allmulticast mode [ 34.499434][ T5081] FAULT_INJECTION: forcing a failure. [ 34.499434][ T5081] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 34.499477][ T5081] CPU: 1 UID: 0 PID: 5081 Comm: syz.3.62 Not tainted syzkaller #0 PREEMPT [ 34.499493][ T5081] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 34.499501][ T5081] Call trace: [ 34.499505][ T5081] show_stack+0x2c/0x3c (C) [ 34.499526][ T5081] __dump_stack+0x30/0x40 [ 34.499538][ T5081] dump_stack_lvl+0xd8/0x12c [ 34.499548][ T5081] dump_stack+0x1c/0x28 [ 34.499557][ T5081] should_fail_ex+0x41c/0x590 [ 34.499566][ T5081] should_fail+0x14/0x24 [ 34.499572][ T5081] should_fail_usercopy+0x20/0x30 [ 34.499579][ T5081] _copy_from_iter+0x188/0x1064 [ 34.499588][ T5081] netlink_sendmsg+0x570/0x948 [ 34.499599][ T5081] __sock_sendmsg+0xc8/0x17c [ 34.499609][ T5081] sock_write_iter+0x220/0x310 [ 34.499618][ T5081] vfs_write+0x51c/0xa0c [ 34.499626][ T5081] ksys_write+0x12c/0x228 [ 34.499633][ T5081] __arm64_sys_write+0x84/0x98 [ 34.499640][ T5081] invoke_syscall+0x98/0x244 [ 34.499650][ T5081] el0_svc_common+0xec/0x23c [ 34.499660][ T5081] do_el0_svc+0x4c/0x5c [ 34.499669][ T5081] el0_svc+0x64/0x260 [ 34.499678][ T5081] el0t_64_sync_handler+0x44/0x104 [ 34.499687][ T5081] el0t_64_sync+0x198/0x19c [ 34.609585][ T5080] loop0: p1 p9 p11 [ 34.658222][ T4730] Bluetooth: hci4: hardware error 0x00 [ 34.866244][ T4729] Bluetooth: hci4: unexpected event for opcode 0x1003 [ 35.093811][ T5093] EXT4-fs: Ignoring removed i_version option [ 35.093849][ T5093] EXT4-fs: Ignoring removed nobh option [ 35.094712][ T5093] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 35.094721][ T5093] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 35.101712][ T5093] EXT4-fs (loop4): 1 truncate cleaned up [ 35.103783][ T5093] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 35.164267][ T4717] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.341213][ T5116] netlink: 'syz.0.76': attribute type 9 has an invalid length. [ 35.341257][ T5116] netlink: 232 bytes leftover after parsing attributes in process `syz.0.76'. [ 35.520599][ T5132] EXT4-fs error (device loop1): ext4_iget_extra_inode:5180: inode #15: comm syz.1.80: corrupted in-inode xattr: invalid ea_ino [ 35.520639][ T5132] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 35.523669][ T5132] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.80: couldn't read orphan inode 15 (err -117) [ 35.523690][ T5132] loop1: lost filesystem error report for type 5 error -117 [ 35.528241][ C1] EXT4-fs (loop1): error count since last fsck: 2 [ 35.528253][ C1] EXT4-fs (loop1): initial error at time 36: ext4_iget_extra_inode:5180: inode 15 [ 35.528273][ C1] EXT4-fs (loop1): last error at time 36: ext4_orphan_get:1404 [ 35.536274][ T5132] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 35.574074][ T5132] evm: overlay not supported [ 35.621203][ T5132] overlayfs: orphan index entry (index/00fb1d00010000000000000000000000000000000013000000925588f6, ftype=4000, nlink=2) [ 35.715045][ T4709] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.927979][ T4729] Bluetooth: hci0: command tx timeout [ 36.008140][ T4729] Bluetooth: hci3: command tx timeout [ 36.009748][ T4729] Bluetooth: hci2: command tx timeout [ 36.009789][ T4729] Bluetooth: hci1: command tx timeout [ 36.031161][ T5174] null_blk: nullb1: using native zone append [ 36.095790][ T5174] null_blk: disk nullb1 created [ 36.383790][ T5204] FAULT_INJECTION: forcing a failure. [ 36.383790][ T5204] name failslab, interval 1, probability 0, space 0, times 0 [ 36.386306][ T5204] CPU: 1 UID: 0 PID: 5204 Comm: syz.4.92 Not tainted syzkaller #0 PREEMPT [ 36.386327][ T5204] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 36.386337][ T5204] Call trace: [ 36.386342][ T5204] show_stack+0x2c/0x3c (C) [ 36.386369][ T5204] __dump_stack+0x30/0x40 [ 36.386383][ T5204] dump_stack_lvl+0xd8/0x12c [ 36.386396][ T5204] dump_stack+0x1c/0x28 [ 36.386406][ T5204] should_fail_ex+0x41c/0x590 [ 36.386414][ T5204] should_failslab+0xc4/0x120 [ 36.386423][ T5204] kmem_cache_alloc_node_noprof+0x98/0x5f8 [ 36.386432][ T5204] __alloc_skb+0x1f0/0x610 [ 36.386442][ T5204] inet_netconf_notify_devconf+0x50/0x118 [ 36.386451][ T5204] __devinet_sysctl_unregister+0xa8/0xc0 [ 36.386459][ T5204] devinet_sysctl_unregister+0x94/0xf0 [ 36.386466][ T5204] inetdev_event+0x568/0x1180 [ 36.386474][ T5204] notifier_call_chain+0x1a4/0x624 [ 36.386484][ T5204] raw_notifier_call_chain+0x3c/0x50 [ 36.386493][ T5204] call_netdevice_notifiers_info+0xb8/0x120 [ 36.386502][ T5204] unregister_netdevice_many_notify+0xf24/0x1760 [ 36.386509][ T5204] unregister_netdevice_queue+0x274/0x30c [ 36.386520][ T5204] __tun_detach+0x814/0xec8 [ 36.386528][ T5204] tun_chr_close+0x118/0x1f4 [ 36.386535][ T5204] __fput+0x338/0x74c [ 36.386543][ T5204] fput_close_sync+0x10c/0x278 [ 36.386551][ T5204] __arm64_sys_close+0x80/0x110 [ 36.386561][ T5204] invoke_syscall+0x98/0x244 [ 36.386571][ T5204] el0_svc_common+0xec/0x23c [ 36.386581][ T5204] do_el0_svc+0x4c/0x5c [ 36.386590][ T5204] el0_svc+0x64/0x260 [ 36.386600][ T5204] el0t_64_sync_handler+0x44/0x104 [ 36.386608][ T5204] el0t_64_sync+0x198/0x19c [ 36.428571][ T5205] FAULT_INJECTION: forcing a failure. [ 36.428571][ T5205] name failslab, interval 1, probability 0, space 0, times 0 [ 36.428609][ T5205] CPU: 0 UID: 0 PID: 5205 Comm: syz.0.89 Not tainted syzkaller #0 PREEMPT [ 36.428622][ T5205] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 36.428628][ T5205] Call trace: [ 36.428632][ T5205] show_stack+0x2c/0x3c (C) [ 36.428655][ T5205] __dump_stack+0x30/0x40 [ 36.428667][ T5205] dump_stack_lvl+0xd8/0x12c [ 36.428677][ T5205] dump_stack+0x1c/0x28 [ 36.428687][ T5205] should_fail_ex+0x41c/0x590 [ 36.428695][ T5205] should_failslab+0xc4/0x120 [ 36.428704][ T5205] kmem_cache_alloc_noprof+0x94/0x5d8 [ 36.428712][ T5205] alloc_empty_file+0x6c/0x1cc [ 36.428721][ T5205] path_openat+0x7c/0x2a60 [ 36.428729][ T5205] do_file_open+0x1c8/0x2e8 [ 36.428738][ T5205] do_sys_openat2+0x114/0x1e8 [ 36.428748][ T5205] do_sys_open+0xb0/0xe0 [ 36.428757][ T5205] __arm64_sys_openat+0xa8/0xc4 [ 36.428767][ T5205] invoke_syscall+0x98/0x244 [ 36.428777][ T5205] el0_svc_common+0xec/0x23c [ 36.428787][ T5205] do_el0_svc+0x4c/0x5c [ 36.428796][ T5205] el0_svc+0x64/0x260 [ 36.428806][ T5205] el0t_64_sync_handler+0x44/0x104 [ 36.428814][ T5205] el0t_64_sync+0x198/0x19c [ 36.584069][ T5223] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 36.595072][ T5226] set_capacity_and_notify: 6 callbacks suppressed [ 36.596452][ T5226] loop3: detected capacity change from 0 to 128 [ 36.674533][ C1] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1 [ 36.695160][ T30] audit: type=1326 audit(37.672:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5231 comm="syz.3.101" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff89979228 code=0x7fc00000 [ 36.889043][ T4730] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 36.943511][ T5241] netlink: 'syz.4.103': attribute type 1 has an invalid length. [ 37.012684][ T5241] 8021q: adding VLAN 0 to HW filter on device bond1 [ 37.117888][ T5249] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 37.117943][ T5249] IPv6: NLM_F_CREATE should be set when creating new route [ 37.132964][ T5241] veth3: entered allmulticast mode [ 37.167175][ T5246] bond1: entered promiscuous mode [ 37.171870][ T5246] bond1: entered allmulticast mode [ 37.175928][ T5241] loop4: detected capacity change from 0 to 512 [ 37.206951][ T5241] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 37.227300][ T5241] EXT4-fs error (device loop4): ext4_orphan_get:1425: comm syz.4.103: bad orphan inode 131083 [ 37.227935][ T5241] loop4: lost filesystem error report for type 5 error -117 [ 37.242225][ T5241] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 37.461397][ T30] audit: type=1326 audit(37.449:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5231 comm="syz.3.101" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=29 compat=0 ip=0xffff89979228 code=0x7fc00000 [ 37.461498][ T30] audit: type=1326 audit(37.449:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5231 comm="syz.3.101" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff89979228 code=0x7fc00000 [ 37.461567][ T30] audit: type=1326 audit(37.449:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5231 comm="syz.3.101" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff89979228 code=0x7fc00000 [ 37.461619][ T30] audit: type=1326 audit(37.449:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5231 comm="syz.3.101" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff89979228 code=0x7fc00000 [ 37.461669][ T30] audit: type=1326 audit(37.459:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5231 comm="syz.3.101" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff89979228 code=0x7fc00000 [ 37.461719][ T30] audit: type=1326 audit(37.459:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5231 comm="syz.3.101" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff89979228 code=0x7fc00000 [ 37.461771][ T30] audit: type=1326 audit(37.459:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5231 comm="syz.3.101" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff89979228 code=0x7fc00000 [ 37.461820][ T30] audit: type=1326 audit(37.459:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5231 comm="syz.3.101" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff89979228 code=0x7fc00000 [ 37.461869][ T30] audit: type=1326 audit(37.459:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5231 comm="syz.3.101" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff89979228 code=0x7fc00000 [ 37.508903][ T5249] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.509488][ T5249] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.658789][ T5259] netlink: 8 bytes leftover after parsing attributes in process `syz.0.107'. [ 37.890615][ T5270] loop3: detected capacity change from 0 to 512 [ 37.917187][ T5270] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 37.941400][ T5270] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.109: bg 0: block 255: padding at end of block bitmap is not set [ 37.941464][ T5270] loop3: lost filesystem error report for type 5 error -117 [ 37.947408][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 37.947465][ C1] EXT4-fs (loop3): initial error at time 37: ext4_validate_block_bitmap:441 [ 37.947531][ C1] EXT4-fs (loop3): last error at time 37: ext4_validate_block_bitmap:441 [ 37.957064][ T5270] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 37.957124][ T5270] loop3: lost filesystem error report for type 5 error -117 [ 37.972193][ T5270] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.109: invalid indirect mapped block 1 (level 1) [ 37.972269][ T5270] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 37.984299][ T5270] EXT4-fs (loop3): 1 truncate cleaned up [ 37.991078][ T5269] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1 [ 38.004735][ T5270] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 38.009487][ T4730] Bluetooth: hci0: command tx timeout [ 38.041624][ T5249] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 38.061519][ T5249] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 38.088101][ T4730] Bluetooth: hci1: command tx timeout [ 38.088180][ T4730] Bluetooth: hci2: command tx timeout [ 38.088240][ T4730] Bluetooth: hci3: command tx timeout [ 38.550165][ T5273] bond0: option arp_interval: invalid value () [ 38.552107][ T5273] bond0: option arp_interval: allowed values 0 - 2147483647 [ 38.562593][ T5241] macvlan2: entered promiscuous mode [ 38.563774][ T5241] macvlan2: entered allmulticast mode [ 38.567214][ T5241] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 38.657568][ T39] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 38.657646][ T39] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 38.657708][ T39] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 38.657751][ T39] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 38.729146][ T5280] fuse: Unknown parameter 'lroup_id' [ 38.793303][ T4716] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.896447][ T4717] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.984556][ T5286] FAULT_INJECTION: forcing a failure. [ 38.984556][ T5286] name failslab, interval 1, probability 0, space 0, times 0 [ 38.987790][ T5286] CPU: 1 UID: 0 PID: 5286 Comm: syz.3.115 Not tainted syzkaller #0 PREEMPT [ 38.987810][ T5286] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 38.987819][ T5286] Call trace: [ 38.987824][ T5286] show_stack+0x2c/0x3c (C) [ 38.987852][ T5286] __dump_stack+0x30/0x40 [ 38.987868][ T5286] dump_stack_lvl+0xd8/0x12c [ 38.987882][ T5286] dump_stack+0x1c/0x28 [ 38.987896][ T5286] should_fail_ex+0x41c/0x590 [ 38.987908][ T5286] should_failslab+0xc4/0x120 [ 38.987921][ T5286] __kmalloc_node_track_caller_noprof+0x108/0x6d4 [ 38.987934][ T5286] kstrndup+0x84/0x154 [ 38.987948][ T5286] bonding_sysfs_store_option+0x68/0x104 [ 38.987963][ T5286] dev_attr_store+0x6c/0x90 [ 38.987977][ T5286] sysfs_kf_write+0xe0/0x108 [ 38.987991][ T5286] kernfs_fop_write_iter+0x260/0x3b8 [ 38.988004][ T5286] vfs_write+0x51c/0xa0c [ 38.988016][ T5286] ksys_write+0x12c/0x228 [ 38.988027][ T5286] __arm64_sys_write+0x84/0x98 [ 38.988038][ T5286] invoke_syscall+0x98/0x244 [ 38.988052][ T5286] el0_svc_common+0x19c/0x23c [ 38.988066][ T5286] do_el0_svc+0x4c/0x5c [ 38.988079][ T5286] el0_svc+0x64/0x260 [ 38.988093][ T5286] el0t_64_sync_handler+0x44/0x104 [ 38.988105][ T5286] el0t_64_sync+0x198/0x19c [ 39.249314][ T5298] FAULT_INJECTION: forcing a failure. [ 39.249314][ T5298] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 39.249381][ T5298] CPU: 0 UID: 0 PID: 5298 Comm: syz.3.120 Not tainted syzkaller #0 PREEMPT [ 39.249399][ T5298] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 39.249407][ T5298] Call trace: [ 39.249412][ T5298] show_stack+0x2c/0x3c (C) [ 39.249432][ T5298] __dump_stack+0x30/0x40 [ 39.249447][ T5298] dump_stack_lvl+0xd8/0x12c [ 39.249461][ T5298] dump_stack+0x1c/0x28 [ 39.249474][ T5298] should_fail_ex+0x41c/0x590 [ 39.249487][ T5298] should_fail+0x14/0x24 [ 39.249497][ T5298] should_fail_usercopy+0x20/0x30 [ 39.249508][ T5298] _inline_copy_from_user+0x3c/0x174 [ 39.249521][ T5298] ___bpf_copy_key+0xc8/0x134 [ 39.249533][ T5298] map_update_elem+0x39c/0x788 [ 39.249544][ T5298] __sys_bpf+0x4f8/0x82c [ 39.249555][ T5298] __arm64_sys_bpf+0xd0/0xec [ 39.249567][ T5298] invoke_syscall+0x98/0x244 [ 39.249581][ T5298] el0_svc_common+0x19c/0x23c [ 39.249594][ T5298] do_el0_svc+0x4c/0x5c [ 39.249608][ T5298] el0_svc+0x64/0x260 [ 39.249621][ T5298] el0t_64_sync_handler+0x44/0x104 [ 39.249634][ T5298] el0t_64_sync+0x198/0x19c [ 39.417605][ T5304] loop0: detected capacity change from 0 to 4096 [ 39.484671][ T5304] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 39.487505][ T5304] ldm_parse_privhead(): Expected PRIVHEAD version 2.11 or 2.12, got 0.0. Aborting. [ 39.487562][ T5304] ldm_validate_privheads(): Cannot find PRIVHEAD 2. [ 39.487641][ T5304] loop0: [ 41.117473][ T5325] FAULT_INJECTION: forcing a failure. [ 41.117473][ T5325] name failslab, interval 1, probability 0, space 0, times 0 [ 41.117617][ T5325] CPU: 1 UID: 0 PID: 5325 Comm: syz.2.128 Not tainted syzkaller #0 PREEMPT [ 41.117633][ T5325] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 41.117640][ T5325] Call trace: [ 41.117645][ T5325] show_stack+0x2c/0x3c (C) [ 41.117669][ T5325] __dump_stack+0x30/0x40 [ 41.117684][ T5325] dump_stack_lvl+0xd8/0x12c [ 41.117699][ T5325] dump_stack+0x1c/0x28 [ 41.117712][ T5325] should_fail_ex+0x41c/0x590 [ 41.117725][ T5325] should_failslab+0xc4/0x120 [ 41.117737][ T5325] __kmalloc_cache_noprof+0x94/0x5ec [ 41.117751][ T5325] __arm64_sys_mount+0x188/0x388 [ 41.117765][ T5325] invoke_syscall+0x98/0x244 [ 41.117779][ T5325] el0_svc_common+0x19c/0x23c [ 41.117793][ T5325] do_el0_svc+0x4c/0x5c [ 41.117807][ T5325] el0_svc+0x64/0x260 [ 41.117820][ T5325] el0t_64_sync_handler+0x44/0x104 [ 41.117833][ T5325] el0t_64_sync+0x198/0x19c [ 41.974126][ T5337] binder: 5328:5337 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 43.096085][ T5341] netlink: 24 bytes leftover after parsing attributes in process `syz.2.135'. [ 43.113654][ T5344] bridge0: port 3(syz_tun) entered blocking state [ 43.113803][ T5344] bridge0: port 3(syz_tun) entered disabled state [ 43.114071][ T5344] syz_tun: entered allmulticast mode [ 43.116428][ T5344] syz_tun: entered promiscuous mode [ 43.361072][ T5353] FAULT_INJECTION: forcing a failure. [ 43.361072][ T5353] name failslab, interval 1, probability 0, space 0, times 0 [ 43.365719][ T5353] CPU: 0 UID: 0 PID: 5353 Comm: syz.4.140 Not tainted syzkaller #0 PREEMPT [ 43.365740][ T5353] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 43.365749][ T5353] Call trace: [ 43.365755][ T5353] show_stack+0x2c/0x3c (C) [ 43.365786][ T5353] __dump_stack+0x30/0x40 [ 43.365807][ T5353] dump_stack_lvl+0xd8/0x12c [ 43.365822][ T5353] dump_stack+0x1c/0x28 [ 43.365836][ T5353] should_fail_ex+0x41c/0x590 [ 43.365848][ T5353] should_failslab+0xc4/0x120 [ 43.365861][ T5353] kmem_cache_alloc_node_noprof+0x98/0x5f8 [ 43.365874][ T5353] __alloc_skb+0x1f0/0x610 [ 43.365889][ T5353] netlink_alloc_large_skb+0xd4/0x114 [ 43.365902][ T5353] netlink_sendmsg+0x4c4/0x948 [ 43.365917][ T5353] __sock_sendmsg+0xc8/0x17c [ 43.365930][ T5353] ____sys_sendmsg+0x3d0/0x6c8 [ 43.365943][ T5353] ___sys_sendmsg+0x198/0x224 [ 43.365956][ T5353] __sys_sendmsg+0x158/0x204 [ 43.365969][ T5353] __arm64_sys_sendmsg+0x88/0x9c [ 43.365983][ T5353] invoke_syscall+0x98/0x244 [ 43.365997][ T5353] el0_svc_common+0x19c/0x23c [ 43.366011][ T5353] do_el0_svc+0x4c/0x5c [ 43.366024][ T5353] el0_svc+0x64/0x260 [ 43.366038][ T5353] el0t_64_sync_handler+0x44/0x104 [ 43.366050][ T5353] el0t_64_sync+0x198/0x19c [ 44.216984][ T5360] Bluetooth: MGMT ver 1.23 [ 44.218870][ T5360] Bluetooth: hci0: unsupported parameter 5134 [ 44.220068][ T5360] Bluetooth: hci0: unsupported parameter 8192 [ 44.221400][ T5360] Bluetooth: hci0: unsupported parameter 5134 [ 44.222840][ T5360] Bluetooth: hci0: unsupported parameter 8192 [ 44.693745][ T5369] FAULT_INJECTION: forcing a failure. [ 44.693745][ T5369] name failslab, interval 1, probability 0, space 0, times 0 [ 44.693822][ T5369] CPU: 1 UID: 0 PID: 5369 Comm: syz.2.145 Not tainted syzkaller #0 PREEMPT [ 44.693837][ T5369] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 44.693845][ T5369] Call trace: [ 44.693850][ T5369] show_stack+0x2c/0x3c (C) [ 44.693872][ T5369] __dump_stack+0x30/0x40 [ 44.693887][ T5369] dump_stack_lvl+0xd8/0x12c [ 44.693900][ T5369] dump_stack+0x1c/0x28 [ 44.693914][ T5369] should_fail_ex+0x41c/0x590 [ 44.693926][ T5369] should_failslab+0xc4/0x120 [ 44.693939][ T5369] __kmalloc_node_track_caller_noprof+0x108/0x6d4 [ 44.693952][ T5369] kstrndup+0x84/0x154 [ 44.693965][ T5369] bonding_sysfs_store_option+0x68/0x104 [ 44.693980][ T5369] dev_attr_store+0x6c/0x90 [ 44.693993][ T5369] sysfs_kf_write+0xe0/0x108 [ 44.694007][ T5369] kernfs_fop_write_iter+0x260/0x3b8 [ 44.694021][ T5369] vfs_write+0x51c/0xa0c [ 44.694032][ T5369] ksys_write+0x12c/0x228 [ 44.694043][ T5369] __arm64_sys_write+0x84/0x98 [ 44.694054][ T5369] invoke_syscall+0x98/0x244 [ 44.694068][ T5369] el0_svc_common+0x19c/0x23c [ 44.694082][ T5369] do_el0_svc+0x4c/0x5c [ 44.694095][ T5369] el0_svc+0x64/0x260 [ 44.694109][ T5369] el0t_64_sync_handler+0x44/0x104 [ 44.694121][ T5369] el0t_64_sync+0x198/0x19c [ 44.907171][ T5373] FAULT_INJECTION: forcing a failure. [ 44.907171][ T5373] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 44.910435][ T5373] CPU: 0 UID: 0 PID: 5373 Comm: syz.3.146 Not tainted syzkaller #0 PREEMPT [ 44.910454][ T5373] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 44.910462][ T5373] Call trace: [ 44.910468][ T5373] show_stack+0x2c/0x3c (C) [ 44.910500][ T5373] __dump_stack+0x30/0x40 [ 44.910519][ T5373] dump_stack_lvl+0xd8/0x12c [ 44.910534][ T5373] dump_stack+0x1c/0x28 [ 44.910548][ T5373] should_fail_ex+0x41c/0x590 [ 44.910561][ T5373] should_fail+0x14/0x24 [ 44.910572][ T5373] should_fail_usercopy+0x20/0x30 [ 44.910583][ T5373] _inline_copy_from_user+0x3c/0x174 [ 44.910599][ T5373] copy_msghdr_from_user+0xb8/0x194 [ 44.910613][ T5373] ___sys_sendmsg+0x14c/0x224 [ 44.910626][ T5373] __sys_sendmsg+0x158/0x204 [ 44.910639][ T5373] __arm64_sys_sendmsg+0x88/0x9c [ 44.910653][ T5373] invoke_syscall+0x98/0x244 [ 44.910667][ T5373] el0_svc_common+0x19c/0x23c [ 44.910681][ T5373] do_el0_svc+0x4c/0x5c [ 44.910694][ T5373] el0_svc+0x64/0x260 [ 44.910708][ T5373] el0t_64_sync_handler+0x44/0x104 [ 44.910720][ T5373] el0t_64_sync+0x198/0x19c [ 44.960835][ T5379] Injecting memory failure for pfn 0x135329 at process virtual address 0x20000000 [ 45.233248][ T5379] Memory failure: 0x135329: Sending SIGBUS to syz.0.150:5379 due to hardware memory corruption [ 45.235866][ T5379] Memory failure: 0x135329: recovery action for dirty LRU page: Recovered [ 45.240137][ T5379] Injecting memory failure for pfn 0x219270 at process virtual address 0x20001000 [ 45.259111][ T5379] Memory failure: 0x219270: unhandlable page. [ 45.259163][ T5379] Memory failure: 0x219270: recovery action for get hwpoison page: Ignored [ 45.273667][ T5387] capability: warning: `syz.4.152' uses deprecated v2 capabilities in a way that may be insecure [ 45.349743][ T5389] binder: 5375:5389 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 45.757532][ T5388] loop3: detected capacity change from 0 to 512 [ 45.821444][ T5388] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.144772][ T5395] FAULT_INJECTION: forcing a failure. [ 46.144772][ T5395] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 46.155200][ T5395] CPU: 0 UID: 0 PID: 5395 Comm: syz.4.154 Not tainted syzkaller #0 PREEMPT [ 46.155228][ T5395] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 46.155237][ T5395] Call trace: [ 46.155242][ T5395] show_stack+0x2c/0x3c (C) [ 46.155272][ T5395] __dump_stack+0x30/0x40 [ 46.155290][ T5395] dump_stack_lvl+0xd8/0x12c [ 46.155304][ T5395] dump_stack+0x1c/0x28 [ 46.155318][ T5395] should_fail_ex+0x41c/0x590 [ 46.155331][ T5395] should_fail+0x14/0x24 [ 46.155346][ T5395] should_fail_usercopy+0x20/0x30 [ 46.155358][ T5395] _copy_from_iter+0x188/0x1064 [ 46.155371][ T5395] netlink_sendmsg+0x570/0x948 [ 46.155386][ T5395] __sock_sendmsg+0xc8/0x17c [ 46.155400][ T5395] ____sys_sendmsg+0x3d0/0x6c8 [ 46.155413][ T5395] ___sys_sendmsg+0x198/0x224 [ 46.155427][ T5395] __sys_sendmsg+0x158/0x204 [ 46.155440][ T5395] __arm64_sys_sendmsg+0x88/0x9c [ 46.155454][ T5395] invoke_syscall+0x98/0x244 [ 46.155468][ T5395] el0_svc_common+0x19c/0x23c [ 46.155482][ T5395] do_el0_svc+0x4c/0x5c [ 46.155495][ T5395] el0_svc+0x64/0x260 [ 46.155509][ T5395] el0t_64_sync_handler+0x44/0x104 [ 46.155521][ T5395] el0t_64_sync+0x198/0x19c [ 46.685988][ T4716] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.826518][ T5409] FAULT_INJECTION: forcing a failure. [ 46.826518][ T5409] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 46.832503][ T5409] CPU: 1 UID: 0 PID: 5409 Comm: syz.2.159 Not tainted syzkaller #0 PREEMPT [ 46.832532][ T5409] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 46.832545][ T5409] Call trace: [ 46.832551][ T5409] show_stack+0x2c/0x3c (C) [ 46.832574][ T5409] __dump_stack+0x30/0x40 [ 46.832589][ T5409] dump_stack_lvl+0xd8/0x12c [ 46.832604][ T5409] dump_stack+0x1c/0x28 [ 46.832617][ T5409] should_fail_ex+0x41c/0x590 [ 46.832630][ T5409] should_fail_alloc_page+0xec/0x10c [ 46.832642][ T5409] prepare_alloc_pages+0x194/0x4a4 [ 46.832655][ T5409] __alloc_frozen_pages_noprof+0x134/0x320 [ 46.832668][ T5409] alloc_pages_mpol+0x1ec/0x3c0 [ 46.832681][ T5409] alloc_frozen_pages_noprof+0xc4/0x10c [ 46.832694][ T5409] alloc_pages_noprof+0x30/0x148 [ 46.832707][ T5409] do_pte_missing+0xebc/0x2a24 [ 46.832719][ T5409] handle_mm_fault+0x14f8/0x2514 [ 46.832731][ T5409] do_page_fault+0x4b0/0xb88 [ 46.832744][ T5409] do_translation_fault+0xc4/0x114 [ 46.832758][ T5409] do_mem_abort+0x70/0x194 [ 46.832772][ T5409] el1_abort+0x50/0x74 [ 46.832785][ T5409] el1h_64_sync_handler+0xdc/0x130 [ 46.832797][ T5409] el1h_64_sync+0x6c/0x70 [ 46.832809][ T5409] lookup_ioctx+0xf4/0x840 (P) [ 46.832822][ T5409] __arm64_sys_io_submit+0x108/0x3b8 [ 46.832833][ T5409] invoke_syscall+0x98/0x244 [ 46.832847][ T5409] el0_svc_common+0x19c/0x23c [ 46.832861][ T5409] do_el0_svc+0x4c/0x5c [ 46.832875][ T5409] el0_svc+0x64/0x260 [ 46.832887][ T5409] el0t_64_sync_handler+0x44/0x104 [ 46.832899][ T5409] el0t_64_sync+0x198/0x19c [ 47.569903][ T5413] loop0: detected capacity change from 0 to 256 [ 47.593764][ T5413] vfat: Unknown parameter 'shª(1q+»Áortname' [ 48.191925][ T30] kauditd_printk_skb: 12 callbacks suppressed [ 48.191989][ T30] audit: type=1326 audit(48.189:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5425 comm="syz.3.161" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff89979228 code=0x7ffc0000 [ 48.192047][ T30] audit: type=1326 audit(48.189:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5425 comm="syz.3.161" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff89979228 code=0x7ffc0000 [ 48.192099][ T30] audit: type=1326 audit(48.189:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5425 comm="syz.3.161" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff89979228 code=0x7ffc0000 [ 48.192149][ T30] audit: type=1326 audit(48.189:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5425 comm="syz.3.161" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=222 compat=0 ip=0xffff89979228 code=0x7ffc0000 [ 48.225361][ T30] audit: type=1326 audit(48.219:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5425 comm="syz.3.161" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff89979228 code=0x7ffc0000 [ 48.233171][ T30] audit: type=1326 audit(48.219:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5425 comm="syz.3.161" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff89979228 code=0x7ffc0000 [ 48.233251][ T30] audit: type=1326 audit(48.219:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5425 comm="syz.3.161" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff89979228 code=0x7ffc0000 [ 48.243945][ T30] audit: type=1326 audit(48.239:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5425 comm="syz.3.161" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff89979228 code=0x7ffc0000 [ 48.244023][ T30] audit: type=1326 audit(48.239:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5425 comm="syz.3.161" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff89979228 code=0x7ffc0000 [ 48.244075][ T30] audit: type=1326 audit(48.239:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5425 comm="syz.3.161" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff89979228 code=0x7ffc0000 [ 48.348474][ T5432] lo speed is unknown, defaulting to 1000 [ 48.353051][ T5432] lo speed is unknown, defaulting to 1000 [ 48.356103][ T5432] lo speed is unknown, defaulting to 1000 [ 48.468879][ T5435] rnbd_client L610: Mapping device /dev/ram0 on session s1, (access_mode: rw, nr_poll_queues: 0) [ 48.479888][ T5435] rtrs_client L2098: : Failed to resolve address, err: -ENODEV [ 48.480167][ T5435] rtrs_client L2641: : init_conns() failed: err=-ENODEV path=@ip:127.0.0.1 [:0] [ 48.480204][ T5435] ================================================================== [ 48.480213][ T5435] BUG: KASAN: null-ptr-deref in trace_event_raw_event_rtrs_clt_conn_class+0x220/0x480 [ 48.480236][ T5435] Read of size 255 at addr 0000000000000000 by task syz.1.164/5435 [ 48.480244][ T5435] [ 48.480251][ T5435] CPU: 0 UID: 0 PID: 5435 Comm: syz.1.164 Not tainted syzkaller #0 PREEMPT [ 48.480262][ T5435] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 48.480270][ T5435] Call trace: [ 48.480275][ T5435] show_stack+0x2c/0x3c (C) [ 48.480296][ T5435] __dump_stack+0x30/0x40 [ 48.480314][ T5435] dump_stack_lvl+0xd8/0x12c [ 48.480330][ T5435] print_report+0x58/0x84 [ 48.480351][ T5435] kasan_report+0x8c/0xc4 [ 48.480373][ T5435] kasan_check_range+0x17c/0x1ac [ 48.480388][ T5435] __asan_memcpy+0x3c/0x84 [ 48.480404][ T5435] trace_event_raw_event_rtrs_clt_conn_class+0x220/0x480 [ 48.480418][ T5435] __traceiter_rtrs_clt_close_conns+0x74/0xc8 [ 48.480431][ T5435] rtrs_clt_close_conns+0x2f0/0x40c [ 48.480447][ T5435] rtrs_clt_open+0xa6c/0xd54 [ 48.480463][ T5435] rnbd_clt_map_device+0xcb8/0x1f64 [ 48.480480][ T5435] rnbd_clt_map_device_store+0x900/0xad8 [ 48.480497][ T5435] dev_attr_store+0x6c/0x90 [ 48.480512][ T5435] sysfs_kf_write+0xe0/0x108 [ 48.480528][ T5435] kernfs_fop_write_iter+0x260/0x3b8 [ 48.480543][ T5435] vfs_write+0x51c/0xa0c [ 48.480556][ T5435] ksys_write+0x12c/0x228 [ 48.480568][ T5435] __arm64_sys_write+0x84/0x98 [ 48.480580][ T5435] invoke_syscall+0x98/0x244 [ 48.480596][ T5435] el0_svc_common+0x19c/0x23c [ 48.480612][ T5435] do_el0_svc+0x4c/0x5c [ 48.480628][ T5435] el0_svc+0x64/0x260 [ 48.480643][ T5435] el0t_64_sync_handler+0x44/0x104 [ 48.480657][ T5435] el0t_64_sync+0x198/0x19c [ 48.480671][ T5435] ================================================================== [ 48.480690][ T5435] Disabling lock debugging due to kernel taint [ 48.987186][ T5432] infiniband sz1: set down [ 48.987247][ T9] lo speed is unknown, defaulting to 1000 [ 48.990439][ T5432] infiniband sz1: added lo [ 49.066542][ T5432] RDS/IB: sz1: added [ 49.070403][ T5432] smc: adding ib device sz1 with port count 1 [ 49.072363][ T5432] smc: ib device sz1 port 1 has no pnetid [ 49.073226][ T5432] lo speed is unknown, defaulting to 1000 [ 49.073892][ T9] lo speed is unknown, defaulting to 1000 [ 49.356858][ T5432] lo speed is unknown, defaulting to 1000 [ 49.478335][ T5432] lo speed is unknown, defaulting to 1000 [ 49.594635][ T5432] lo speed is unknown, defaulting to 1000 [ 49.715310][ T5432] lo speed is unknown, defaulting to 1000