last executing test programs: 4m27.958470751s ago: executing program 32 (id=806): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000080), 0x0) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f00000001c0)) 4m3.5818123s ago: executing program 33 (id=880): r0 = syz_open_dev$video(0x0, 0x8, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, 0x0, 0x0) fstatfs(r0, &(0x7f0000000140)=""/160) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) prctl$PR_SET_NAME(0xf, 0x0) r4 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) io_setup(0x6, &(0x7f0000000680)=0x0) io_submit(r5, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x180a, 0x0, 0x3, 0x8, 0x0, r4, 0x0}]) syz_genetlink_get_family_id$netlbl_calipso(0x0, 0xffffffffffffffff) r6 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_TRY_FMT(r6, 0xc0d05640, &(0x7f00000002c0)={0x9, @meta={0x4b31434d, 0x478fd8d0, 0x98da, 0xbc08, 0x5c99631d}}) 3m13.700091655s ago: executing program 34 (id=1167): setns(0xc9, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r0 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(0xffffffffffffffff, &(0x7f0000000240)={@val={0x0, 0xf6}, @val={0x0, 0x0, 0x4, 0xfffd, 0x14}, @ipv4=@generic={{0x5, 0x4, 0x1, 0x22, 0x14, 0x66, 0x0, 0x60, 0x6c, 0x0, @empty, @broadcast}}}, 0x22) 3m4.676092651s ago: executing program 5 (id=1208): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4c840) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/class/vtconsole/vtcon1/bind\x00', 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap(&(0x7f00009c5000/0x4000)=nil, 0x4000, 0x3, 0x28012, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x2, 0x0) write$FUSE_INTERRUPT(r0, &(0x7f0000002bc0)={0x10, 0xffffffffffffffda}, 0x10) write(r0, &(0x7f0000000280)='1', 0x1) 3m4.228055076s ago: executing program 35 (id=1209): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./mnt\x00', 0x1ff) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) mount(&(0x7f0000000080)=@filename='127.0.0.1:file0\x00', &(0x7f00000000c0)='./mnt\x00', &(0x7f0000000100)='nfs4\x00', 0x0, &(0x7f0000000140)='addr=127.0.0.1,port=2049,clientaddr=127.0.0.1,minorversion=1\x00') 3m3.804289396s ago: executing program 5 (id=1217): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x1}) r2 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller1\x00', 0x0}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000200)={'syzkaller1\x00', 0x1}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x24, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@newtfilter={0x88, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0xb, 0x7}, {0xfff1, 0xffff}, {0x300}}, [@filter_kind_options=@f_matchall={{0xd}, {0x54, 0x2, [@TCA_MATCHALL_ACT={0x50, 0x2, [@m_ct={0x4c, 0x1, 0x0, 0x0, {{0x7}, {0x24, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x0, 0x0, 0x3}}, @TCA_CT_ACTION={0x6, 0x3, 0x19}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}}]}, 0x88}}, 0x0) write(r1, &(0x7f0000000140)="000008004500001c123400004011e5c8ac141401ac14140204d204d200080000", 0x20) 3m3.675301448s ago: executing program 5 (id=1218): renameat2(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0xffffffffffffff9c, 0x0, 0x2) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002100)='numa_maps\x00') read$FUSE(r3, &(0x7f0000004180)={0x2020}, 0x2020) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) ioctl$USBDEVFS_RESETEP(0xffffffffffffffff, 0x80045503, 0xfffffffffffffffe) 3m3.195956438s ago: executing program 36 (id=1219): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r1 = memfd_create(&(0x7f0000000080)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea\x7f\x8cZ7`_4t\xcda\x9b\x11\x11\x0e\xa1\xcf\x00'/51, 0x2) ftruncate(r1, 0x1000004) fcntl$addseals(r1, 0x409, 0x7) ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000000)={r1, 0x0, 0x0, 0x1000000}) 3m2.793964695s ago: executing program 5 (id=1224): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='mnt\x00', 0x4, &(0x7f0000000080), 0x0, 0x236, &(0x7f0000000300)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='mnt/encrypted_dir\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000680)='mnt/encrypted_dir\x00', 0x800, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f00000005c0)=@v2={0x2, @adiantum, 0x0, '\x00', @auto="fc06d4cd1131a6f26983e371d4f64c42"}) chdir(&(0x7f00000002c0)='mnt/encrypted_dir\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xa62d6000) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x84008000, 0x0, 0x0, 0x0, 0x0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./bus\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) 3m2.670277915s ago: executing program 5 (id=1225): openat$adsp1(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newtaction={0x14, 0x30, 0x871a15abc695fb3d}, 0x14}}, 0x0) 3m2.201254504s ago: executing program 5 (id=1226): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4c840) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/class/vtconsole/vtcon1/bind\x00', 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap(&(0x7f00009c5000/0x4000)=nil, 0x4000, 0x3, 0x28012, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x2, 0x0) write$FUSE_INTERRUPT(r0, &(0x7f0000002bc0)={0x10, 0xffffffffffffffda}, 0x10) write(r0, &(0x7f0000000280)='1', 0x1) 3m2.032688642s ago: executing program 37 (id=1226): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4c840) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/class/vtconsole/vtcon1/bind\x00', 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap(&(0x7f00009c5000/0x4000)=nil, 0x4000, 0x3, 0x28012, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x2, 0x0) write$FUSE_INTERRUPT(r0, &(0x7f0000002bc0)={0x10, 0xffffffffffffffda}, 0x10) write(r0, &(0x7f0000000280)='1', 0x1) 3m1.952136475s ago: executing program 7 (id=1229): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x1}) r2 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller1\x00', 0x0}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000200)={'syzkaller1\x00', 0x1}) sendmsg$nl_route_sched(r0, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@newtfilter={0x90, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0xb, 0x7}, {0xfff1, 0xffff}, {0x300}}, [@filter_kind_options=@f_matchall={{0xd}, {0x5c, 0x2, [@TCA_MATCHALL_ACT={0x58, 0x2, [@m_ct={0x54, 0x1, 0x0, 0x0, {{0x7}, {0x2c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x0, 0x0, 0x3}}, @TCA_CT_ACTION={0x6, 0x3, 0x19}, @TCA_CT_MARK={0x8, 0x5, 0x4}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}}]}, 0x90}}, 0x0) write(r1, &(0x7f0000000140)="000008004500001c123400004011e5c8ac141401ac14140204d204d2", 0x1c) 3m1.62671744s ago: executing program 7 (id=1231): mkdirat(0xffffffffffffff9c, 0x0, 0x1ed) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/class/fcloop/ctl/add_target_port\x00', 0x1, 0x0) write(r0, &(0x7f0000000400)='wwnn=0x3333333333333333,wwpn=0x4444444444444444', 0x2f) 3m1.359856084s ago: executing program 7 (id=1232): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002100)='numa_maps\x00') read$FUSE(r3, &(0x7f0000004180)={0x2020}, 0x2020) 3m0.393417866s ago: executing program 7 (id=1234): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='mnt\x00', 0x4, &(0x7f0000000080), 0x0, 0x236, &(0x7f0000000300)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='mnt/encrypted_dir\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000680)='mnt/encrypted_dir\x00', 0x800, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f00000005c0)=@v2={0x2, @adiantum, 0x0, '\x00', @auto="fc06d4cd1131a6f26983e371d4f64c42"}) chdir(&(0x7f00000002c0)='mnt/encrypted_dir\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x84008000, 0x0, 0x0, 0x0, 0x0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./bus\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) 3m0.340333395s ago: executing program 7 (id=1235): openat$adsp1(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)='3', 0x4e) socket$inet_sctp(0x2, 0x1, 0x84) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newtaction={0x14, 0x30, 0x871a15abc695fb3d}, 0x14}}, 0x0) 2m59.785177417s ago: executing program 7 (id=1236): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) prctl$PR_SET_NAME(0xf, 0x0) syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) io_setup(0x6, &(0x7f0000000680)=0x0) io_submit(r3, 0x0, 0x0) syz_genetlink_get_family_id$netlbl_calipso(0x0, 0xffffffffffffffff) r4 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_TRY_FMT(r4, 0xc0d05640, &(0x7f00000002c0)={0x9, @meta={0x4b31434d, 0x478fd8d0, 0x98da, 0xbc08, 0x5c99631d}}) syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f00000006c0)=@IORING_OP_MSG_RING={0x28, 0x16, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x8, 0x2, 0x1}) add_key$keyring(&(0x7f0000000680), 0x0, 0x0, 0x0, 0xffffffffffffffff) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x2e, 0x8, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@new_dev={0x1, 0xad0, 0x0, 0x0, 0x1000, 0xffffffff, 0xffffffffffffffff, 0x0, 0x8}}}, 0x0) remap_file_pages(&(0x7f000063f000/0x13000)=nil, 0x13000, 0x4, 0x9, 0x20000) 2m59.7704085s ago: executing program 38 (id=1236): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) prctl$PR_SET_NAME(0xf, 0x0) syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) io_setup(0x6, &(0x7f0000000680)=0x0) io_submit(r3, 0x0, 0x0) syz_genetlink_get_family_id$netlbl_calipso(0x0, 0xffffffffffffffff) r4 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_TRY_FMT(r4, 0xc0d05640, &(0x7f00000002c0)={0x9, @meta={0x4b31434d, 0x478fd8d0, 0x98da, 0xbc08, 0x5c99631d}}) syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f00000006c0)=@IORING_OP_MSG_RING={0x28, 0x16, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x8, 0x2, 0x1}) add_key$keyring(&(0x7f0000000680), 0x0, 0x0, 0x0, 0xffffffffffffffff) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x2e, 0x8, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@new_dev={0x1, 0xad0, 0x0, 0x0, 0x1000, 0xffffffff, 0xffffffffffffffff, 0x0, 0x8}}}, 0x0) remap_file_pages(&(0x7f000063f000/0x13000)=nil, 0x13000, 0x4, 0x9, 0x20000) 2m59.579372972s ago: executing program 0 (id=1239): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ed) mount(0x0, 0x0, &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/class/fcloop/ctl/add_target_port\x00', 0x1, 0x0) write(r0, &(0x7f0000000400)='wwnn=0x3333333333333333,wwpn=0x4444444444444444', 0x2f) 2m59.537863889s ago: executing program 0 (id=1240): prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='net/if_inet6\x00') pread64(r3, &(0x7f0000000040)=""/30, 0x1e, 0x800000000040042) 2m58.666629254s ago: executing program 0 (id=1241): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002100)='numa_maps\x00') read$FUSE(r3, &(0x7f0000004180)={0x2020}, 0x2020) 2m57.79004392s ago: executing program 0 (id=1242): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='mnt\x00', 0x4, &(0x7f0000000080), 0x0, 0x236, &(0x7f0000000300)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='mnt/encrypted_dir\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000680)='mnt/encrypted_dir\x00', 0x800, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f00000005c0)=@v2={0x2, @adiantum, 0x0, '\x00', @auto="fc06d4cd1131a6f26983e371d4f64c42"}) chdir(&(0x7f00000002c0)='mnt/encrypted_dir\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x84008000, 0x0, 0x0, 0x0, 0x0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./bus\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) 2m57.723178541s ago: executing program 0 (id=1243): syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000007c0), 0x1, 0x73a, &(0x7f0000000800)="$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") syz_mount_image$fuse(0x0, &(0x7f0000000040)='./bus\x00', 0x870499, 0x0, 0xf, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) syz_clone3(&(0x7f0000001080)={0x400, 0x0, &(0x7f0000000680), &(0x7f0000000780), {0xe}, &(0x7f0000000f40)=""/44, 0x2c, &(0x7f0000000f80)=""/150, 0x0}, 0x58) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x804008, &(0x7f0000000240)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}]}) 2m57.19156252s ago: executing program 0 (id=1244): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x5) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) keyctl$set_reqkey_keyring(0xe, 0x2) request_key(&(0x7f0000000240)='user\x00', &(0x7f0000000380)={'syz', 0x0}, &(0x7f00000003c0)='q\xa9', 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) capget(&(0x7f0000000000)={0x19980330, r1}, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) syz_io_uring_setup(0x38, &(0x7f0000000580)={0x0, 0xbbda, 0x13f00, 0xffffffff}, 0x0, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) ptrace(0x10, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c00000020000103d56e616c0000000002000004000000011f0000"], 0x1c}, 0x1, 0x0, 0x0, 0x4004001}, 0x44004) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000200)={'ip_vti0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="200000006800e97802000000000000000a0000000000000008000500", @ANYRES32=r6], 0x20}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 2m57.19133793s ago: executing program 39 (id=1244): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x5) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) keyctl$set_reqkey_keyring(0xe, 0x2) request_key(&(0x7f0000000240)='user\x00', &(0x7f0000000380)={'syz', 0x0}, &(0x7f00000003c0)='q\xa9', 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) capget(&(0x7f0000000000)={0x19980330, r1}, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) syz_io_uring_setup(0x38, &(0x7f0000000580)={0x0, 0xbbda, 0x13f00, 0xffffffff}, 0x0, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) ptrace(0x10, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c00000020000103d56e616c0000000002000004000000011f0000"], 0x1c}, 0x1, 0x0, 0x0, 0x4004001}, 0x44004) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000200)={'ip_vti0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="200000006800e97802000000000000000a0000000000000008000500", @ANYRES32=r6], 0x20}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 2m46.953310069s ago: executing program 8 (id=1246): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ed) mount(0x0, 0x0, &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/class/fcloop/ctl/add_target_port\x00', 0x1, 0x0) write(r0, &(0x7f0000000400)='wwnn=0x3333333333333333,wwpn=0x4444444444444444', 0x2f) 2m46.953067759s ago: executing program 8 (id=1247): renameat2(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0xffffffffffffff9c, 0x0, 0x2) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002100)='numa_maps\x00') read$FUSE(r4, &(0x7f0000004180)={0x2020}, 0x2020) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) ioctl$USBDEVFS_RESETEP(0xffffffffffffffff, 0x80045503, 0xfffffffffffffffe) 2m46.090130583s ago: executing program 8 (id=1248): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002100)='numa_maps\x00') read$FUSE(r3, &(0x7f0000004180)={0x2020}, 0x2020) 2m44.257944669s ago: executing program 8 (id=1249): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='mnt\x00', 0x4, &(0x7f0000000080), 0x0, 0x236, &(0x7f0000000300)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='mnt/encrypted_dir\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000680)='mnt/encrypted_dir\x00', 0x800, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f00000005c0)=@v2={0x2, @adiantum, 0x0, '\x00', @auto="fc06d4cd1131a6f26983e371d4f64c42"}) chdir(&(0x7f00000002c0)='mnt/encrypted_dir\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x84008000, 0x0, 0x0, 0x0, 0x0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./bus\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) 2m44.170259923s ago: executing program 8 (id=1252): socket$inet_icmp_raw(0x2, 0x3, 0x1) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x280440e, &(0x7f0000000440)={[{@data_err_ignore}, {@test_dummy_encryption_v1}, {@inlinecrypt}, {@errors_remount}, {@noinit_itable}, {@auto_da_alloc}, {@minixdf}, {@usrquota}, {@errors_remount}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x8}}, {@nodioread_nolock}, {@mb_optimize_scan}]}, 0x1, 0xbdb, &(0x7f0000001000)="$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") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000042, 0x0, 0x1, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000340)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000100)={[{@test_dummy_encryption}, {@nogrpid}]}, 0xfd, 0x4ba, &(0x7f00000027c0)="$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") prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0x20, 0x4e20, 0x0, @empty}}, 0x0, 0x1, 0x3bf8580d, 0x0, 0xb3550aa4ba878396, 0x2}, 0x9c) readv(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000102c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) syz_open_procfs(0x0, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 2m43.121159268s ago: executing program 8 (id=1256): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x13, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="180000000800"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000000c0)="800034ca269b", 0x6, 0x24004084, &(0x7f0000000040)={0xa, 0x4e26, 0x0, @mcast1}, 0x1c) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x3c}}, 0x40c4) syz_pidfd_open(0x0, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000100)={@local, @broadcast, @void, {@ipv4={0x800, @generic={{0x7, 0x4, 0x3, 0xc, 0x1c, 0x65, 0x0, 0x8, 0x2f, 0x0, @local, @private=0xa010100, {[@ssrr={0x89, 0x3, 0x9c}, @ssrr={0x89, 0x3, 0x75}]}}}}}}, 0x0) umount2(0x0, 0x2) close_range(r0, 0xffffffffffffffff, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f00000019c0)=@raw={'raw\x00', 0x9, 0x3, 0x1e8, 0x0, 0xffffffff, 0xffffffff, 0xb8, 0xffffffff, 0xb8, 0xffffffff, 0xffffffff, 0x150, 0xffffffff, 0x3, 0x0, {[{{@ip={@loopback, @loopback, 0x0, 0x0, '\x00', '\x00', {}, {}, 0x6}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0xb8, 0x0, 'pptp\x00'}}}, {{@ip={@empty, @empty}, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xffffffff}}}}, 0x248) 2m43.078422576s ago: executing program 40 (id=1256): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x13, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="180000000800"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000000c0)="800034ca269b", 0x6, 0x24004084, &(0x7f0000000040)={0xa, 0x4e26, 0x0, @mcast1}, 0x1c) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x3c}}, 0x40c4) syz_pidfd_open(0x0, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000100)={@local, @broadcast, @void, {@ipv4={0x800, @generic={{0x7, 0x4, 0x3, 0xc, 0x1c, 0x65, 0x0, 0x8, 0x2f, 0x0, @local, @private=0xa010100, {[@ssrr={0x89, 0x3, 0x9c}, @ssrr={0x89, 0x3, 0x75}]}}}}}}, 0x0) umount2(0x0, 0x2) close_range(r0, 0xffffffffffffffff, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f00000019c0)=@raw={'raw\x00', 0x9, 0x3, 0x1e8, 0x0, 0xffffffff, 0xffffffff, 0xb8, 0xffffffff, 0xb8, 0xffffffff, 0xffffffff, 0x150, 0xffffffff, 0x3, 0x0, {[{{@ip={@loopback, @loopback, 0x0, 0x0, '\x00', '\x00', {}, {}, 0x6}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0xb8, 0x0, 'pptp\x00'}}}, {{@ip={@empty, @empty}, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xffffffff}}}}, 0x248) 2m12.070492601s ago: executing program 4 (id=1330): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ed) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/class/fcloop/ctl/add_target_port\x00', 0x1, 0x0) write(r0, 0x0, 0x0) 2m11.949916551s ago: executing program 4 (id=1334): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x2, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000240)={0x73622a85, 0x0, 0x8000000000002}) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r5 = dup3(r4, r3, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r6, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000000c0)={0x8, 0x0, &(0x7f00000005c0)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x1058, 0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2040}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x54, 0x0, &(0x7f0000000e00)=[@acquire, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0xfc, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) 2m9.831974535s ago: executing program 4 (id=1337): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x5) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) keyctl$set_reqkey_keyring(0xe, 0x2) request_key(&(0x7f0000000240)='user\x00', &(0x7f0000000380)={'syz', 0x0}, &(0x7f00000003c0)='q\xa9', 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) capget(&(0x7f0000000000)={0x19980330, r1}, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) syz_io_uring_setup(0x38, &(0x7f0000000580)={0x0, 0xbbda, 0x13f00, 0xffffffff}, 0x0, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) ptrace(0x10, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c00000020000103d56e616c0000000002000004000000011f0000"], 0x1c}, 0x1, 0x0, 0x0, 0x4004001}, 0x44004) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000200)={'ip_vti0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="200000006800e97802000000000000000a0000000000000008000500", @ANYRES32=r6], 0x20}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 2m6.988243439s ago: executing program 4 (id=1343): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='mnt\x00', 0x4, &(0x7f0000000080), 0x0, 0x236, &(0x7f0000000300)="$eJzs3TFoM2UcBvDnLomf/b4gVRdBUEFEtFDqJrjURaEgpYgIKlREXJRWqC1urZOLg84qnVyKuFkdpUtxUQSnqh3qImhxsDjoELlcK9VGFFNz8t3vB5fcJe97//e4e95kOS5Aa00nmU/SSTKTpJekON/grnqZPt3cntpfTgaDx38shu3q7dpZv2tJtpI8mGSvLPJiN9nYffro54NH731jvXfPe7tPTU30IE8dHx0+dvLu4usfLjyw8fmX3y8WmU//D8d1+YoRn3WL5Jb/otj/RNFtegT8E0uvfvBVlftbk9w9zH8vZeqT9+baDXu93P/OX/V964cvbp/kWIHLNxj0qt/ArQHQOmWSfopyNkm9Xpazs/V/+K87V8uXVtdemXlhdX3l+aZnKuCy9JPDRz6+8tG1P+X/u06df+D6VeX/iaWdb6r1k07TowEmqcr/zLOb90X+oXXkH9pL/qG95B/aS/6hveQf2kv+ob3kH9pL/qG95B/a63z+AYB2GVxp+g5koClNzz8AAAAAAAAAAAAAAAAAAMBF21P7y2fLpGp++nZy/HCS7qj6neHziJMbh69XfyqqZr8r6m5jeebOMXcwpvcbvvv6pm+brf/ZHc3W31xJtl5LMtftXrz+itPr79+7+W++7z03ZoExPfRks/V/3Wm2/sJB8kk1/8yNmn/K3DZ8Hz3/9KvzN2b9l38ZcwcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABMzG8BAAD//8n0bSk=") mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='mnt/encrypted_dir\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000680)='mnt/encrypted_dir\x00', 0x800, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f00000005c0)=@v2={0x2, @adiantum, 0x0, '\x00', @auto="fc06d4cd1131a6f26983e371d4f64c42"}) chdir(&(0x7f00000002c0)='mnt/encrypted_dir\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xa62d6000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x84008000, 0x0, 0x0, 0x0, 0x0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./bus\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) 2m5.866491977s ago: executing program 4 (id=1346): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x5) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) keyctl$set_reqkey_keyring(0xe, 0x2) request_key(&(0x7f0000000240)='user\x00', &(0x7f0000000380)={'syz', 0x0}, &(0x7f00000003c0)='q\xa9', 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) capget(&(0x7f0000000000)={0x19980330, r1}, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) syz_io_uring_setup(0x38, &(0x7f0000000580)={0x0, 0xbbda, 0x13f00, 0xffffffff}, 0x0, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) ptrace(0x10, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c00000020000103d56e616c0000000002000004000000011f0000"], 0x1c}, 0x1, 0x0, 0x0, 0x4004001}, 0x44004) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000200)={'ip_vti0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="200000006800e97802000000000000000a0000000000000008000500", @ANYRES32=r6], 0x20}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 2m2.90730179s ago: executing program 4 (id=1358): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ed) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/class/fcloop/ctl/add_target_port\x00', 0x1, 0x0) write(r0, &(0x7f0000000400), 0x0) 2m2.750304576s ago: executing program 41 (id=1358): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ed) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/class/fcloop/ctl/add_target_port\x00', 0x1, 0x0) write(r0, &(0x7f0000000400), 0x0) 3.607043099s ago: executing program 6 (id=1892): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) ioctl(r1, 0x400452c8, &(0x7f0000000000)) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000200)='devtmpfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000300)='./dev/rfcomm0\x00', 0x802, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 3.470403323s ago: executing program 6 (id=1894): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={0x0, 0x38}}, 0x0) r0 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x3, 0x1, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000140)='./file0\x00', 0x200008, &(0x7f0000000200)=ANY=[@ANYRES8=r0, @ANYRESHEX=r0, @ANYRESOCT, @ANYRESOCT=0x0], 0x1, 0x392, &(0x7f0000001000)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x11, 0x4, 0x4, 0x7, 0x808, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x20}, 0x50) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) bind$netlink(r2, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3c00000010000d0429bd70000000000000010000", @ANYRES32=r3, @ANYBLOB="9b060000000000001c00128009000100626f6e64000000000c0002800500010004"], 0x3c}, 0x1, 0x0, 0x0, 0x40040}, 0x4000000) r4 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800c0001006d6163766c616e000400028008000500", @ANYRES32=r5, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r8], 0x44}}, 0x0) r9 = socket$kcm(0x10, 0x2, 0x0) socket(0x1, 0x803, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="5400000010000104", @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800e0001006970366772657461700000001800028014000700ff01000000000000000000000000000108000a", @ANYRES32], 0x54}}, 0x0) sendmsg$kcm(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)="2e00000011008b88040f80ee59acbc04130800480f0000005e2900421803001825800000000000000280000c0012", 0x2e}], 0x1}, 0x0) 3.248856534s ago: executing program 6 (id=1897): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x1}) r2 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller1\x00', 0x0}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000200)={'syzkaller1\x00', 0x1}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@newtfilter={0x80, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0xb, 0x7}, {0xfff1, 0xffff}, {0x300}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4c, 0x2, [@TCA_MATCHALL_ACT={0x48, 0x2, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x0, 0x0, 0x3}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}}]}, 0x80}}, 0x0) write(r1, &(0x7f0000000140)="000008004500001c123400004011", 0xe) 3.167298988s ago: executing program 3 (id=1898): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) gettid() timer_settime(0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x81}, 0x1c) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x87) connect$inet6(r1, &(0x7f0000000500)={0xa, 0xfffd, 0xffffffff, @local, 0x6}, 0x1c) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='freezer.parent_freezing\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000440), 0x1000a) sendfile(r1, r2, &(0x7f0000000080)=0x11, 0x7fff) 2.995575699s ago: executing program 3 (id=1900): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002b00)={0xbc, r1, 0x5, 0x70bd26, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x57, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @val, @void, @void, @void, @void, @void, @void, @void, @val={0x2d, 0x1a, {0x1, 0x1, 0x7, 0x0, {0xa600000000000000, 0x2, 0x0, 0x3fe, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x9, 0x3}}, @val={0x72, 0x6}, @val={0x71, 0x7, {0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x7f, 0x11}}, @void}}, @NL80211_ATTR_BEACON_TAIL={0x36, 0xf, [@mesh_config={0x71, 0x7, {0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x1, 0x2, 0x0, 0x48}}, @mesh_config={0x71, 0x7, {0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x4}}, @ssid={0x0, 0x6, @default_ap_ssid}, @link_id={0x65, 0x12, {@from_mac, @device_b, @broadcast}}, @supported_rates={0x1, 0x2, [{0x12, 0x1}, {0xc, 0x1}]}]}], @chandef_params, @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0xbc}}, 0x20000014) 2.856663275s ago: executing program 6 (id=1902): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='mnt\x00', 0x4, &(0x7f0000000080), 0x0, 0x236, &(0x7f0000000300)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='mnt/encrypted_dir\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000680)='mnt/encrypted_dir\x00', 0x800, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f00000005c0)=@v2={0x2, @adiantum, 0x0, '\x00', @auto="fc06d4cd1131a6f26983e371d4f64c42"}) chdir(&(0x7f00000002c0)='mnt/encrypted_dir\x00') prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xa62d6000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x84008000, 0x0, 0x0, 0x0, 0x0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./bus\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) 2.839567858s ago: executing program 3 (id=1903): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={0x0, 0x38}}, 0x0) r0 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x3, 0x1, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000140)='./file0\x00', 0x200008, &(0x7f0000000200)=ANY=[@ANYRES8=r0, @ANYRESHEX=r0, @ANYRESOCT, @ANYRESOCT=0x0], 0x1, 0x392, &(0x7f0000001000)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x11, 0x4, 0x4, 0x7, 0x808, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x20}, 0x50) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) bind$netlink(r2, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3c00000010000d0429bd70000000000000010000", @ANYRES32=r3, @ANYBLOB="9b060000000000001c00128009000100626f6e64000000000c0002800500010004"], 0x3c}, 0x1, 0x0, 0x0, 0x40040}, 0x4000000) r4 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800c0001006d6163766c616e000400028008000500", @ANYRES32=r5, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r8], 0x44}}, 0x0) r9 = socket$kcm(0x10, 0x2, 0x0) socket(0x1, 0x803, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="540000001000010400", @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800e0001006970366772657461700000001800028014000700ff01000000000000000000000000000108000a", @ANYRES32], 0x54}}, 0x0) sendmsg$kcm(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)="2e00000011008b88040f80ee59acbc04130800480f0000005e2900421803001825800000000000000280000c0012", 0x2e}], 0x1}, 0x0) 2.449648338s ago: executing program 3 (id=1906): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SWAP(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x50, 0x6, 0x6, 0x101, 0x0, 0x0, {0x7, 0x0, 0x1}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz2\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz1\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x4004853}, 0x40804) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x28000, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0xa8011, 0xffffffffffffffff, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xb4, &(0x7f0000000140)=""/180, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100039}, 0x94) sched_setscheduler(0x0, 0x1, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c0000000306010200000100000000000000040205000100bc"], 0x1c}}, 0x0) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r0, &(0x7f0000000200)={&(0x7f0000000140), 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, 0x7, 0x1, 0x204, 0x0, 0x0, {0x0, 0x0, 0x4}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x4000) 2.331382789s ago: executing program 9 (id=1909): syz_emit_vhci(&(0x7f00000003c0)=ANY=[@ANYBLOB="04080402c8000932132754431d0f862316648b620c252446f571c08ed83da32c0753a5864a8bcf6db8b07956d16131969ab46d1e38a3a36c1fd7c144dfb3049df2626d8bd49cd74d4609c393b6ca228d36decf490be023dfe6a91ec654a6141bdb46cd1fa2255f9e532445da02827af36f84563fa8dbca925bbe5d333fb9894d29cf12c16fe487681947bb17"], 0x7) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file4\x00', 0x1c0) mknodat(0xffffffffffffff9c, &(0x7f0000000200)='./file1/file4/file5\x00', 0x81c0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file4/file6\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file1/file4/file7\x00', 0x1c0) r0 = landlock_create_ruleset(&(0x7f00000002c0)={0x2001}, 0x30, 0x0) r1 = openat$dir(0xffffffffffffff9c, 0x0, 0x200000, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') r3 = epoll_create1(0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, 0x0, 0x0, 0x4000, 0x0) r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000180), 0x40e02, 0x0) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448ca, 0x0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000100)={0x1f, 0x0, 0x1}, 0x6) write$rfkill(r4, &(0x7f0000000300)={0x0, 0x2, 0x3, 0x1, 0x1}, 0x8) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000040)={0x6000000d}) r5 = getpid() r6 = syz_pidfd_open(r5, 0x0) setns(r6, 0x24020000) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=ANY=[@ANYBLOB="78cbfff0377b103dcd0e8c82629d38cb7eb8f67c038b17599161f3b797a8c0b32926e63198fa184e3a3c0ec4ace2b1eac29da981940954cb1c55b728c3cd884ea2c42deacdb08640c6b9aa9626d5faa638a7205ff2b527452d888ac222dc446f812a014f0ff61b7ecb42a6fcdade85f1d65063a0974d354d5dd9694131716867232284d05b62ba59e5", @ANYRES32=r8, @ANYBLOB], 0x20}}, 0x0) umount2(0x0, 0x2) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000340)={0x2000, r1}, 0x0) landlock_restrict_self(r0, 0x0) 2.155619131s ago: executing program 1 (id=1910): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) gettid() timer_settime(0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x81}, 0x1c) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000fbe000)={0x0, &(0x7f0000005300)}, 0x10) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x87) connect$inet6(r1, &(0x7f0000000500)={0xa, 0xfffd, 0xffffffff, @local, 0x6}, 0x1c) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='freezer.parent_freezing\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000440), 0x1000a) sendfile(r1, r2, &(0x7f0000000080)=0x11, 0x7fff) 2.010697477s ago: executing program 1 (id=1911): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SWAP(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x50, 0x6, 0x6, 0x101, 0x0, 0x0, {0x7, 0x0, 0x1}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz2\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz1\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x4004853}, 0x40804) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x28000, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0xa8011, 0xffffffffffffffff, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xb4, &(0x7f0000000140)=""/180, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100039}, 0x94) sched_setscheduler(0x0, 0x1, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c0000000306010200000100000000000000040205000100bc"], 0x1c}}, 0x0) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r0, &(0x7f0000000200)={&(0x7f0000000140), 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, 0x7, 0x1, 0x204, 0x0, 0x0, {0x0, 0x0, 0x4}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x4000) 1.947391828s ago: executing program 6 (id=1912): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SWAP(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x50, 0x6, 0x6, 0x101, 0x0, 0x0, {0x7, 0x0, 0x1}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz2\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz1\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x4004853}, 0x40804) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x28000, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0xa8011, 0xffffffffffffffff, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xb4, &(0x7f0000000140)=""/180, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100039}, 0x94) sched_setscheduler(0x0, 0x1, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c0000000306010200000100000000000000040205000100bc"], 0x1c}}, 0x0) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r0, &(0x7f0000000200)={&(0x7f0000000140), 0xc, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0x4000) 1.677670477s ago: executing program 9 (id=1913): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x1}) r2 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller1\x00', 0x0}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000200)={'syzkaller1\x00', 0x1}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@newtfilter={0x80, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0xb, 0x7}, {0xfff1, 0xffff}, {0x300}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4c, 0x2, [@TCA_MATCHALL_ACT={0x48, 0x2, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x0, 0x0, 0x3}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}}]}, 0x80}}, 0x0) write(r1, &(0x7f0000000140)="000008004500001c123400004011e5c8ac141401ac", 0x15) 1.465874426s ago: executing program 9 (id=1914): sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)=ANY=[@ANYBLOB="5c000000090601080000000000000000070000000900020073797a31000000000500010007000000340007801800018014000240fe8000000000000000000000000000bb060004400e1f00cd050007008800000006"], 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r2, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000cc0)=ANY=[@ANYBLOB="000086dd0203"], 0xfdef) 1.227892258s ago: executing program 9 (id=1915): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)={0x2c, 0xb, 0x6, 0x801, 0x0, 0x0, {0x2, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x48}, 0x4800) 1.152654982s ago: executing program 9 (id=1916): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002b00)={0x8c, r1, 0x5, 0x70bd26, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x57, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @val, @void, @void, @void, @void, @void, @void, @void, @val={0x2d, 0x1a, {0x1, 0x1, 0x7, 0x0, {0xa600000000000000, 0x2, 0x0, 0x3fe, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x9, 0x3}}, @val={0x72, 0x6}, @val={0x71, 0x7, {0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x7f, 0x11}}, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x8c}}, 0x20000014) 997.98929ms ago: executing program 9 (id=1917): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f00000010c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(r0, 0x0, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) fchdir(0xffffffffffffffff) r5 = add_key(&(0x7f0000000000)='asymmetric\x00', 0x0, &(0x7f0000001980)="308201d43082017ba00302010202142eea648d7f17e62e9e5869c887c68e1bd0f86fcf300a06082a8648ce3d040302303a3138303606035504030c2f436572746966696361746520766572696669636174696f6e2045434453412073656c662d74657374696e67206b65793020170d3234303431333232313632365a180f32313234303332303232313632365a303a3138303606035504030c2f436572746966696361746520766572696669636174696f6e2045434453412073656c662d74657374696e67206b65793059301306072a8648ce3d020106082a8648ce3d0301070342000407e56b51affc19412c88926b775771039ee2fe6e6a714ec7299f90e177189fc2e70a82d08ae181a9717c5a73fb25b95b1e248c739ff838f848b4ad1619c022c6a35d305b301d0603551d71041604142900bcea1deb7bc8479a84a23d758efdfdd2b2d3301f0603551d230418301680142900bcea1deb7bc8479a84a23d758efdfdd2b2d7300c0603551d130101ff04023000300b0603551d0f040403020780300a06082a8648ce3d040302034700304402201ad7ac07c89738f489437ec7666ea5007c121db409760c996b8c265ae9c12a3d40da20b7dce720f2705cb4022073b7c77a5adb670a964219cf4f674f356aee2925f2", 0x1d8, 0xfffffffffffffffe) keyctl$search(0xa, 0x0, &(0x7f0000001180)='cifs.idmap\x00', &(0x7f00000011c0)={'syz', 0x3}, r5) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu\x00', 0x275a, 0x0) syz_read_part_table(0x105f, &(0x7f0000000000)="$eJzsz7FtwkAYBeB3duLYktNkglTZKJkgPSPgPWio2YCKAdiEJYx8ICQWAIrvK+493enu9Ien6pJ8N/mfM+7HZePtejCvsylJpi75Ku3twvRRo1+WIaehpMmq9jvH/pJD+17yV+t2ebXN4Scp9efP/O4eMiQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAvLhzAAAA///2qAvy") 973.428834ms ago: executing program 2 (id=1918): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={0x0, 0x38}}, 0x0) r0 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x3, 0x1, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000140)='./file0\x00', 0x200008, &(0x7f0000000200)=ANY=[@ANYRES8=r0, @ANYRESHEX=r0, @ANYRESOCT, @ANYRESOCT=0x0], 0x1, 0x392, &(0x7f0000001000)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x11, 0x4, 0x4, 0x7, 0x808, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x20}, 0x50) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) bind$netlink(r2, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3c00000010000d0429bd70000000000000010000", @ANYRES32=r3, @ANYBLOB="9b060000000000001c00128009000100626f6e64000000000c0002800500010004"], 0x3c}, 0x1, 0x0, 0x0, 0x40040}, 0x4000000) r4 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800c0001006d6163766c616e000400028008000500", @ANYRES32=r5, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r8], 0x44}}, 0x0) r9 = socket$kcm(0x10, 0x2, 0x0) socket(0x1, 0x803, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="540000001000010400", @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800e0001006970366772657461700000001800028014000700ff01000000000000000000000000000108000a", @ANYRES32], 0x54}}, 0x0) sendmsg$kcm(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)="2e00000011008b88040f80ee59acbc04130800480f0000005e2900421803001825800000000000000280000c0012", 0x2e}], 0x1}, 0x0) 795.467616ms ago: executing program 3 (id=1919): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002b00)={0xbc, r1, 0x5, 0x70bd26, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x57, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @val, @void, @void, @void, @void, @void, @void, @void, @val={0x2d, 0x1a, {0x1, 0x1, 0x7, 0x0, {0xa600000000000000, 0x2, 0x0, 0x3fe, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x9, 0x3}}, @val={0x72, 0x6}, @val={0x71, 0x7, {0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x7f, 0x11}}, @void}}, @NL80211_ATTR_BEACON_TAIL={0x36, 0xf, [@mesh_config={0x71, 0x7, {0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x1, 0x2, 0x0, 0x48}}, @mesh_config={0x71, 0x7, {0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x4}}, @ssid={0x0, 0x6, @default_ap_ssid}, @link_id={0x65, 0x12, {@from_mac, @device_b, @broadcast}}, @supported_rates={0x1, 0x2, [{0x12, 0x1}, {0xc, 0x1}]}]}], @chandef_params, @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0xbc}}, 0x20000014) 722.31868ms ago: executing program 3 (id=1920): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SWAP(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x50, 0x6, 0x6, 0x101, 0x0, 0x0, {0x7, 0x0, 0x1}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz2\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz1\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x4004853}, 0x40804) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x28000, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0xa8011, 0xffffffffffffffff, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xb4, &(0x7f0000000140)=""/180, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100039}, 0x94) sched_setscheduler(0x0, 0x1, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c0000000306010200000100000000000000040205000100bc"], 0x1c}}, 0x0) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r0, &(0x7f0000000200)={&(0x7f0000000140), 0xc, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0x4000) 706.489852ms ago: executing program 2 (id=1921): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) gettid() timer_settime(0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x81}, 0x1c) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000fbe000)={0x0, 0x0}, 0x10) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x87) connect$inet6(r1, &(0x7f0000000500)={0xa, 0xfffd, 0xffffffff, @local, 0x6}, 0x1c) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='freezer.parent_freezing\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000440), 0x1000a) sendfile(r1, r2, &(0x7f0000000080)=0x11, 0x7fff) 511.013078ms ago: executing program 2 (id=1922): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002b00)={0x8c, r1, 0x5, 0x70bd26, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x57, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @val, @void, @void, @void, @void, @void, @void, @void, @val={0x2d, 0x1a, {0x1, 0x1, 0x7, 0x0, {0xa600000000000000, 0x2, 0x0, 0x3fe, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x9, 0x3}}, @val={0x72, 0x6}, @val={0x71, 0x7, {0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x7f, 0x11}}, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x8c}}, 0x20000014) 398.908798ms ago: executing program 2 (id=1923): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002b00)={0x90, r1, 0x5, 0x70bd26, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x57, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @val, @void, @void, @void, @void, @void, @void, @void, @val={0x2d, 0x1a, {0x1, 0x1, 0x7, 0x0, {0xa600000000000000, 0x2, 0x0, 0x3fe, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x9, 0x3}}, @val={0x72, 0x6}, @val={0x71, 0x7, {0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x7f, 0x11}}, @void}}, @NL80211_ATTR_BEACON_TAIL={0x4}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x90}}, 0x20000014) 300.260896ms ago: executing program 2 (id=1924): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x1}) r2 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller1\x00', 0x0}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000200)={'syzkaller1\x00', 0x1}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@newtfilter={0x80, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0xb, 0x7}, {0xfff1, 0xffff}, {0x300}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4c, 0x2, [@TCA_MATCHALL_ACT={0x48, 0x2, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x0, 0x0, 0x3}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}}]}, 0x80}}, 0x0) write(r1, &(0x7f0000000140)="000008004500001c123400004011e5c8ac141401ac", 0x15) 280.06048ms ago: executing program 1 (id=1926): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) syz_emit_ethernet(0x6a, &(0x7f0000000040)={@link_local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x11, 0x0, @private, @multicast1}, {0x4e25, 0x17c1, 0x48, 0x0, @wg=@cookie={0x3, 0x2, "62b9d705aa3b572cab9e4565145b574ad6d3761751672ccc", "db8ca1cbebfda570f2cfeada7bbd8bd6f8864257d91a249bc2dfb32bfb8b524b"}}}}}}, 0x0) 175.264329ms ago: executing program 1 (id=1927): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)={0x2c, 0xb, 0x6, 0x801, 0x0, 0x0, {0x2, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x48}, 0x4800) 82.565125ms ago: executing program 1 (id=1928): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfc, 0x2ffffffff}, 0xc) sendmsg$nl_route_sched(r0, &(0x7f0000001100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000880)=@newtfilter={0x44, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x1, 0x2}, {0xfff1, 0xffff}, {0x3, 0x1}}, [@filter_kind_options=@f_route={{0xa}, {0x14, 0x2, [@TCA_ROUTE4_TO={0x8, 0x2, 0x1}, @TCA_ROUTE4_FROM={0x8, 0x3, 0x2}]}}]}, 0x44}}, 0x0) 59.33924ms ago: executing program 2 (id=1929): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f00000010c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(r0, 0x0, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r4 = fsopen(0x0, 0x1) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) fchdir(0xffffffffffffffff) r5 = add_key(&(0x7f0000000000)='asymmetric\x00', 0x0, &(0x7f0000001980)="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", 0x1d8, 0xfffffffffffffffe) keyctl$search(0xa, 0x0, &(0x7f0000001180)='cifs.idmap\x00', &(0x7f00000011c0)={'syz', 0x3}, r5) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu\x00', 0x275a, 0x0) syz_read_part_table(0x105f, &(0x7f0000000000)="$eJzsz7FtwkAYBeB3duLYktNkglTZKJkgPSPgPWio2YCKAdiEJYx8ICQWAIrvK+493enu9Ien6pJ8N/mfM+7HZePtejCvsylJpi75Ku3twvRRo1+WIaehpMmq9jvH/pJD+17yV+t2ebXN4Scp9efP/O4eMiQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAvLhzAAAA///2qAvy") 43.144293ms ago: executing program 6 (id=1930): r0 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'ipvlan0\x00', 0x0}) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc, 0x1], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffbffff, {0x0, 0x0, 0x0, r1, {0x0, 0xd}, {0xffff, 0xffff}, {0xc, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x14, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x8, 0x2, 0x0, 0x1, [{0x4}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x7}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40005}, 0x8010) 0s ago: executing program 1 (id=1931): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) r3 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) sendmsg$nl_route_sched(r1, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000300)=@newtfilter={0x84, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x1}, {0x0, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x54, 0x2, [@TCA_BASIC_ACT={0x50, 0x3, [@m_ct={0x4c, 0x1, 0x0, 0x0, {{0x7}, {0x24, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x0, 0x0, 0x2}}, @TCA_CT_ACTION={0x6, 0x3, 0x1}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x84}}, 0x0) write$tun(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="000008004500002012340000401154970a0000010a0000023039d431000c"], 0x24) write$tun(r0, &(0x7f0000000500)=ANY=[@ANYBLOB="000008004500002012340000401154970a0000010a0000023039d431000c"], 0x24) kernel console output (not intermixed with test programs): evice hsr_slave_1 left promiscuous mode [ 304.517198][ T7354] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 304.518842][ T7354] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 304.520868][ T7354] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 304.522408][ T7354] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 304.525924][ T7354] device bridge_slave_1 left promiscuous mode [ 304.531317][ T7354] bridge0: port 2(bridge_slave_1) entered disabled state [ 304.568641][ T7354] device bridge_slave_0 left promiscuous mode [ 304.569964][ T7354] bridge0: port 1(bridge_slave_0) entered disabled state [ 304.611941][ T7354] device hsr_slave_0 left promiscuous mode [ 304.648893][ T7354] device hsr_slave_1 left promiscuous mode [ 304.730757][ T7354] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 304.732365][ T7354] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 304.735497][ T7354] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 304.738217][ T7354] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 304.740709][ T7354] device bridge_slave_1 left promiscuous mode [ 304.743643][ T7354] bridge0: port 2(bridge_slave_1) entered disabled state [ 304.789179][ T7354] device bridge_slave_0 left promiscuous mode [ 304.790465][ T7354] bridge0: port 1(bridge_slave_0) entered disabled state [ 304.949428][ T7354] device veth1_macvtap left promiscuous mode [ 304.950631][ T7354] device veth0_macvtap left promiscuous mode [ 304.951729][ T7354] device veth1_vlan left promiscuous mode [ 304.952790][ T7354] device veth0_vlan left promiscuous mode [ 305.017378][ T7354] device veth1_macvtap left promiscuous mode [ 305.018531][ T7354] device veth0_macvtap left promiscuous mode [ 305.021097][ T7354] device veth1_vlan left promiscuous mode [ 305.022123][ T7354] device veth0_vlan left promiscuous mode [ 305.134394][ T7354] device veth1_macvtap left promiscuous mode [ 305.135521][ T7354] device veth0_macvtap left promiscuous mode [ 305.136565][ T7354] device veth1_vlan left promiscuous mode [ 305.137731][ T7354] device veth0_vlan left promiscuous mode [ 305.263997][ T9364] ip_tables: iptables: counters copy to user failed while replacing table [ 306.401957][ T9373] binder: 9372:9373 ioctl 4018620d 0 returned -22 [ 306.408311][ T9373] binder: 9372:9373 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 306.411797][ T9373] binder: 9372:9373 tried to acquire reference to desc 0, got 1 instead [ 306.414291][ T9373] binder: 9372:9373 got transaction to invalid handle, 1 [ 306.415522][ T9373] binder: 9373:9372 cannot find target node [ 306.416675][ T9373] binder: 9372:9373 transaction call to 0:0 failed 287/29201/-22, size 252-0 line 3062 [ 306.427134][ T7172] binder: release 9372:9373 transaction 285 out, still active [ 306.428486][ T7172] binder: undelivered TRANSACTION_COMPLETE [ 306.446444][ T9375] loop9: detected capacity change from 0 to 256 [ 306.453807][ T9375] FAT-fs (loop9): Unrecognized mount option "1844674407370955161500000000000000000000" or missing value [ 306.548259][ T7354] bond1 (unregistering): Released all slaves [ 308.429252][ T7354] team0 (unregistering): Port device team_slave_1 removed [ 308.568426][ T7354] team0 (unregistering): Port device team_slave_0 removed [ 310.237794][ T2065] ieee802154 phy0 wpan0: encryption failed: -22 [ 310.239051][ T2065] ieee802154 phy1 wpan1: encryption failed: -22 [ 311.538956][ T7354] team0 (unregistering): Port device team_slave_1 removed [ 311.657886][ T7354] team0 (unregistering): Port device team_slave_0 removed [ 311.777674][ T7354] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 311.947534][ T7354] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 313.088154][ T7354] bond0 (unregistering): Released all slaves [ 314.879124][ T7354] team0 (unregistering): Port device team_slave_1 removed [ 315.049519][ T7354] team0 (unregistering): Port device team_slave_0 removed [ 316.783163][ T1620] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 316.784899][ T1620] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 316.788823][ T9059] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 316.790333][ T9059] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 316.791845][ T9059] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 316.793260][ T9059] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 316.859526][ T9375] netdevsim netdevsim9: Direct firmware load for TÕÔ)­`)YFæ¾nA­½@T<Ÿ3»Ú‚$¢ó×rçcnH³<¿pƒrèñ¹“>ÅwC¾" žð-ùËòöè€Ó8/ failed with error -2 [ 316.862066][ T9375] netdevsim netdevsim9: Falling back to sysfs fallback for: TÕÔ)­`)YFæ¾nA­½@T<Ÿ3»Ú‚$¢ó×rçcnH³<¿pƒrèñ¹“>ÅwC¾" žð-ùËòöè€Ó8/ [ 316.893698][ T9380] loop3: detected capacity change from 0 to 128 [ 316.940415][ T4391] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 316.941843][ T4391] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 316.945448][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 316.952062][ T4391] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 316.953630][ T4391] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 316.954881][ T9382] loop4: detected capacity change from 0 to 4096 [ 316.955207][ T9382] EXT4-fs: inline encryption not supported [ 316.956166][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 316.973626][ T9380] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 316.991999][ T9386] loop1: detected capacity change from 0 to 4096 [ 316.993800][ T9386] EXT4-fs: inline encryption not supported [ 317.050960][ T9386] EXT4-fs (loop1): Test dummy encryption mode enabled [ 317.055119][ T9382] EXT4-fs (loop4): Test dummy encryption mode enabled [ 317.060013][ T9386] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 317.075274][ T9382] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 317.752057][ T8953] EXT4-fs (loop4): unmounting filesystem. [ 317.791045][ T8989] EXT4-fs (loop3): unmounting filesystem. [ 317.855921][ T8918] EXT4-fs (loop1): unmounting filesystem. [ 317.903178][ T9410] binder: 9407:9410 ioctl 4018620d 0 returned -22 [ 317.904854][ T9410] binder: 9407:9410 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 318.105193][ T9415] ip_tables: iptables: counters copy to user failed while replacing table [ 318.981094][ T9410] binder: 9407:9410 tried to acquire reference to desc 0, got 1 instead [ 319.941404][ T9410] binder: 9407:9410 got transaction to invalid handle, 1 [ 319.942902][ T9410] binder_debug: 2 callbacks suppressed [ 319.942915][ T9410] binder: 9410:9407 cannot find target node [ 319.944966][ T9410] binder: 9407:9410 transaction call to 0:0 failed 294/29201/-22, size 252-0 line 3062 [ 319.948421][ T7172] binder: release 9407:9410 transaction 292 out, still active [ 319.949916][ T7172] binder: undelivered TRANSACTION_COMPLETE [ 319.951079][ T7172] binder: undelivered TRANSACTION_ERROR: 29201 [ 319.969721][ T7172] binder: send failed reply for transaction 292, target dead [ 320.122528][ T9430] netlink: 'syz.3.1340': attribute type 1 has an invalid length. [ 322.836510][ T9447] loop4: detected capacity change from 0 to 128 [ 322.961227][ T9447] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 324.037664][ T8953] EXT4-fs (loop4): unmounting filesystem. [ 324.088884][ T9480] binder: 9479:9480 ioctl 4018620d 0 returned -22 [ 324.114349][ T9469] device syzkaller0 entered promiscuous mode [ 324.120049][ T9482] loop3: detected capacity change from 0 to 256 [ 324.123437][ T9480] binder: 9479:9480 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 324.127934][ T9482] FAT-fs (loop3): Unrecognized mount option "1844674407370955161500000000000000000000" or missing value [ 324.134920][ T9480] binder: 9479:9480 tried to acquire reference to desc 0, got 1 instead [ 324.136652][ T9480] binder: 9479:9480 got transaction to invalid handle, 1 [ 324.143244][ T9480] binder: 9480:9479 cannot find target node [ 324.144325][ T9480] binder: 9479:9480 transaction call to 0:0 failed 301/29201/-22, size 252-0 line 3062 [ 324.163073][ T9482] netdevsim netdevsim3: Direct firmware load for TÕÔ)­`)YFæ¾nA­½@T<Ÿ3»Ú‚$¢ó×rçcnH³<¿pƒrèñ¹“>ÅwC¾" žð-ùËòöè€Ó8/ failed with error -2 [ 324.165436][ T9482] netdevsim netdevsim3: Falling back to sysfs fallback for: TÕÔ)­`)YFæ¾nA­½@T<Ÿ3»Ú‚$¢ó×rçcnH³<¿pƒrèñ¹“>ÅwC¾" žð-ùËòöè€Ó8/ [ 324.169914][ T3902] binder: release 9479:9480 transaction 299 out, still active [ 324.171256][ T3902] binder: undelivered TRANSACTION_COMPLETE [ 324.202353][ T9486] FAULT_INJECTION: forcing a failure. [ 324.202353][ T9486] name failslab, interval 1, probability 0, space 0, times 0 [ 324.204954][ T9486] CPU: 1 PID: 9486 Comm: syz.9.1349 Not tainted syzkaller #0 [ 324.206348][ T9486] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 324.208154][ T9486] Call trace: [ 324.208755][ T9486] dump_backtrace+0x1c4/0x1f0 [ 324.209672][ T9486] show_stack+0x2c/0x3c [ 324.210417][ T9486] __dump_stack+0x30/0x40 [ 324.211221][ T9486] dump_stack_lvl+0xf4/0x15c [ 324.212139][ T9486] dump_stack+0x1c/0x5c [ 324.212868][ T9486] should_fail_ex+0x3cc/0x524 [ 324.213696][ T9486] __should_failslab+0xc0/0x11c [ 324.214579][ T9486] should_failslab+0x10/0x28 [ 324.215474][ T9486] __kmem_cache_alloc_node+0x7c/0x318 [ 324.216508][ T9486] __kmalloc+0xc4/0x180 [ 324.217321][ T9486] memcg_list_lru_alloc+0x280/0x8bc [ 324.218248][ T9486] slab_pre_alloc_hook+0x2cc/0x31c [ 324.219197][ T9486] kmem_cache_alloc_lru+0x60/0x284 [ 324.220097][ T9486] iget_locked+0x1d8/0x754 [ 324.220944][ T9486] kernfs_get_inode+0x5c/0x5b4 [ 324.221821][ T9486] kernfs_get_tree+0x410/0x688 [ 324.222679][ T9486] sysfs_get_tree+0x4c/0x124 [ 324.223546][ T9486] vfs_get_tree+0x90/0x278 [ 324.224409][ T9486] do_new_mount+0x228/0x804 [ 324.225273][ T9486] path_mount+0x5ac/0xe6c [ 324.226079][ T9486] __arm64_sys_mount+0x4a0/0x5a0 [ 324.227020][ T9486] invoke_syscall+0x98/0x290 [ 324.227851][ T9486] el0_svc_common+0x13c/0x258 [ 324.228693][ T9486] do_el0_svc+0x5c/0x134 [ 324.229474][ T9486] el0_svc+0x58/0x128 [ 324.230184][ T9486] el0t_64_sync_handler+0x84/0xf0 [ 324.231051][ T9486] el0t_64_sync+0x18c/0x190 [ 324.306520][ T9489] binder: BINDER_SET_CONTEXT_MGR already set [ 324.309503][ T9489] binder: 9488:9489 ioctl 4018620d 20000240 returned -16 [ 324.324331][ T9489] binder: BINDER_SET_CONTEXT_MGR already set [ 324.325474][ T9489] binder: 9488:9489 ioctl 4018620d 20000040 returned -16 [ 324.327052][ T9489] binder: 9488:9489 got transaction to invalid handle, 1 [ 324.590455][ T9502] ip_tables: iptables: counters copy to user failed while replacing table [ 325.631733][ T9501] ip_tables: iptables: counters copy to user failed while replacing table [ 325.967334][ T9482] FAULT_INJECTION: forcing a failure. [ 325.967334][ T9482] name failslab, interval 1, probability 0, space 0, times 0 [ 326.480151][ T9482] CPU: 1 PID: 9482 Comm: syz.3.1347 Not tainted syzkaller #0 [ 326.481506][ T9482] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 326.483220][ T9482] Call trace: [ 326.483812][ T9482] dump_backtrace+0x1c4/0x1f0 [ 326.484701][ T9482] show_stack+0x2c/0x3c [ 326.485444][ T9482] __dump_stack+0x30/0x40 [ 326.486266][ T9482] dump_stack_lvl+0xf4/0x15c [ 326.487152][ T9482] dump_stack+0x1c/0x5c [ 326.487943][ T9482] should_fail_ex+0x3cc/0x524 [ 326.488780][ T9482] __should_failslab+0xc0/0x11c [ 326.489825][ T9482] should_failslab+0x10/0x28 [ 326.490664][ T9482] __kmem_cache_alloc_node+0x7c/0x318 [ 326.491696][ T9482] kmalloc_trace+0x48/0x94 [ 326.492564][ T9482] kobject_uevent_env+0x258/0x88c [ 326.493551][ T9482] kobject_uevent+0x2c/0x3c [ 326.494428][ T9482] device_del+0x800/0x990 [ 326.495263][ T9482] firmware_fallback_sysfs+0x314/0x87c [ 326.496345][ T9482] _request_firmware+0xcec/0xf88 [ 326.497290][ T9482] request_firmware+0x4c/0x70 [ 326.498231][ T9482] devlink_compat_flash_update+0x100/0x22c [ 326.499344][ T9482] dev_ethtool+0x1104/0x132c [ 326.500216][ T9482] dev_ioctl+0x3fc/0xc78 [ 326.501066][ T9482] sock_do_ioctl+0x198/0x258 [ 326.501902][ T9482] sock_ioctl+0x234/0x828 [ 326.502692][ T9482] __arm64_sys_ioctl+0x14c/0x1c8 [ 326.503571][ T9482] invoke_syscall+0x98/0x290 [ 326.504425][ T9482] el0_svc_common+0x13c/0x258 [ 326.505272][ T9482] do_el0_svc+0x5c/0x134 [ 326.506071][ T9482] el0_svc+0x58/0x128 [ 326.506819][ T9482] el0t_64_sync_handler+0x84/0xf0 [ 326.507756][ T9482] el0t_64_sync+0x18c/0x190 [ 326.900910][ T9510] loop2: detected capacity change from 0 to 4096 [ 326.902503][ T9510] EXT4-fs: inline encryption not supported [ 326.904047][ T9510] EXT4-fs (loop2): Test dummy encryption mode enabled [ 326.918096][ T9514] loop1: detected capacity change from 0 to 128 [ 326.930054][ T9511] ip_tables: iptables: counters copy to user failed while replacing table [ 326.948368][ T9510] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 326.964525][ T9514] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 327.084438][ T9523] binder: BINDER_SET_CONTEXT_MGR already set [ 327.085522][ T9523] binder: 9522:9523 ioctl 4018620d 20000240 returned -16 [ 327.114789][ T9523] binder: BINDER_SET_CONTEXT_MGR already set [ 327.115874][ T9523] binder: 9522:9523 ioctl 4018620d 20000040 returned -16 [ 327.136294][ T9523] binder: 9522:9523 got transaction to invalid handle, 1 [ 327.146646][ T9523] binder_debug: 5 callbacks suppressed [ 327.146661][ T9523] binder: 9523:9522 cannot find target node [ 327.153708][ T9523] binder: 9522:9523 transaction call to 0:0 failed 307/29201/-22, size 0-0 line 3062 [ 327.157604][ T3837] binder: undelivered TRANSACTION_ERROR: 29201 [ 327.163160][ T4345] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 327.165408][ T4345] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 327.167539][ T4345] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 327.169354][ T4345] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 327.179505][ T4345] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 327.181041][ T4345] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 327.187842][ T9059] EXT4-fs (loop2): unmounting filesystem. [ 329.178190][ T8918] EXT4-fs (loop1): unmounting filesystem. [ 329.197246][ T4345] Bluetooth: hci1: command 0x0409 tx timeout [ 329.582978][ T9562] ip_tables: iptables: counters copy to user failed while replacing table [ 329.751110][ T9528] chnl_net:caif_netlink_parms(): no params data found [ 330.970531][ T9528] bridge0: port 1(bridge_slave_0) entered blocking state [ 330.972381][ T9528] bridge0: port 1(bridge_slave_0) entered disabled state [ 330.977822][ T9528] device bridge_slave_0 entered promiscuous mode [ 330.980969][ T9528] bridge0: port 2(bridge_slave_1) entered blocking state [ 330.983664][ T9528] bridge0: port 2(bridge_slave_1) entered disabled state [ 330.991778][ T9528] device bridge_slave_1 entered promiscuous mode [ 331.105388][ T9528] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 331.116479][ T9528] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 331.418289][ T4338] Bluetooth: hci1: command 0x041b tx timeout [ 331.773867][ T9528] team0: Port device team_slave_0 added [ 331.784065][ T9528] team0: Port device team_slave_1 added [ 331.804376][ T9528] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 331.805674][ T9528] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 331.831294][ T9528] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 331.847689][ T9528] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 331.848908][ T9528] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 331.867198][ T9528] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 331.977383][ T9528] device hsr_slave_0 entered promiscuous mode [ 332.049409][ T9528] device hsr_slave_1 entered promiscuous mode [ 332.109922][ T9528] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 332.111366][ T9528] Cannot create hsr debugfs directory [ 332.250780][ T9591] loop9: detected capacity change from 0 to 256 [ 332.257557][ T9591] FAT-fs (loop9): Unrecognized mount option "1844674407370955161500000000000000000000" or missing value [ 332.636009][ T9591] netdevsim netdevsim9: Direct firmware load for TÕÔ)­`)YFæ¾nA­½@T<Ÿ3»Ú‚$¢ó×rçcnH³<¿pƒrèñ¹“>ÅwC¾" žð-ùËòöè€Ó8/ failed with error -2 [ 332.640988][ T9591] netdevsim netdevsim9: Falling back to sysfs fallback for: TÕÔ)­`)YFæ¾nA­½@T<Ÿ3»Ú‚$¢ó×rçcnH³<¿pƒrèñ¹“>ÅwC¾" žð-ùËòöè€Ó8/ [ 333.288303][ T9591] FAULT_INJECTION: forcing a failure. [ 333.288303][ T9591] name failslab, interval 1, probability 0, space 0, times 0 [ 333.292635][ T9591] CPU: 0 PID: 9591 Comm: syz.9.1370 Not tainted syzkaller #0 [ 333.293870][ T9591] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 333.295534][ T9591] Call trace: [ 333.296122][ T9591] dump_backtrace+0x1c4/0x1f0 [ 333.297054][ T9591] show_stack+0x2c/0x3c [ 333.297879][ T9591] __dump_stack+0x30/0x40 [ 333.298725][ T9591] dump_stack_lvl+0xf4/0x15c [ 333.299633][ T9591] dump_stack+0x1c/0x5c [ 333.300451][ T9591] should_fail_ex+0x3cc/0x524 [ 333.301371][ T9591] __should_failslab+0xc0/0x11c [ 333.302297][ T9591] should_failslab+0x10/0x28 [ 333.303178][ T9591] kmem_cache_alloc+0x88/0x310 [ 333.304054][ T9591] skb_clone+0x194/0x308 [ 333.304860][ T9591] netlink_broadcast+0x580/0x1054 [ 333.305828][ T9591] kobject_uevent_net_broadcast+0x32c/0x528 [ 333.306889][ T9591] kobject_uevent_env+0x550/0x88c [ 333.307836][ T9591] kobject_uevent+0x2c/0x3c [ 333.308669][ T9591] device_del+0x800/0x990 [ 333.309478][ T9591] firmware_fallback_sysfs+0x314/0x87c [ 333.310513][ T9591] _request_firmware+0xcec/0xf88 [ 333.311446][ T9591] request_firmware+0x4c/0x70 [ 333.312335][ T9591] devlink_compat_flash_update+0x100/0x22c [ 333.313416][ T9591] dev_ethtool+0x1104/0x132c [ 333.314289][ T9591] dev_ioctl+0x3fc/0xc78 [ 333.315067][ T9591] sock_do_ioctl+0x198/0x258 [ 333.315906][ T9591] sock_ioctl+0x234/0x828 [ 333.316714][ T9591] __arm64_sys_ioctl+0x14c/0x1c8 [ 333.317623][ T9591] invoke_syscall+0x98/0x290 [ 333.318408][ T9591] el0_svc_common+0x13c/0x258 [ 333.319266][ T9591] do_el0_svc+0x5c/0x134 [ 333.320027][ T9591] el0_svc+0x58/0x128 [ 333.320760][ T9591] el0t_64_sync_handler+0x84/0xf0 [ 333.321732][ T9591] el0t_64_sync+0x18c/0x190 [ 333.437186][ T4338] Bluetooth: hci1: command 0x040f tx timeout [ 334.397886][ T9612] binder: BINDER_SET_CONTEXT_MGR already set [ 334.399047][ T9612] binder: 9611:9612 ioctl 4018620d 20000240 returned -16 [ 334.404514][ T7354] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.416151][ T9612] binder: BINDER_SET_CONTEXT_MGR already set [ 334.418788][ T9612] binder: 9611:9612 ioctl 4018620d 20000040 returned -16 [ 334.420315][ T9612] binder: 9611:9612 got transaction to invalid handle, 1 [ 334.432680][ T9617] loop3: detected capacity change from 0 to 512 [ 334.434716][ T9612] binder: 9612:9611 cannot find target node [ 334.435811][ T9612] binder: 9611:9612 transaction call to 0:0 failed 310/29201/-22, size 0-0 line 3062 [ 334.452134][ T4379] binder: undelivered TRANSACTION_ERROR: 29201 [ 334.500932][ T9617] 8021q: adding VLAN 0 to HW filter on device bond1 [ 334.526749][ T9617] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1375'. [ 334.596700][ T9622] loop9: detected capacity change from 0 to 128 [ 334.604784][ T9625] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1375'. [ 334.697471][ T9622] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 335.583032][ T4345] Bluetooth: hci1: command 0x0419 tx timeout [ 335.948691][ T9625] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 335.991078][ T9625] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 336.039347][ T9625] bond0 (unregistering): Released all slaves [ 336.099818][ T7354] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 336.212051][ T7354] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 336.643540][ T8883] EXT4-fs (loop9): unmounting filesystem. [ 336.680489][ T9648] loop9: detected capacity change from 0 to 2048 [ 336.693875][ T9648] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 336.726627][ T9646] netlink: 'syz.2.1384': attribute type 1 has an invalid length. [ 336.733458][ T9649] 8021q: VLANs not supported on hsr0 [ 336.809777][ T7354] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 336.824304][ T9528] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 336.859355][ T9528] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 336.890294][ T9528] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 336.920772][ T9528] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 336.989817][ T9662] FAULT_INJECTION: forcing a failure. [ 336.989817][ T9662] name failslab, interval 1, probability 0, space 0, times 0 [ 336.995635][ T9662] CPU: 0 PID: 9662 Comm: syz.2.1390 Not tainted syzkaller #0 [ 336.996872][ T9662] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 336.998725][ T9662] Call trace: [ 336.999329][ T9662] dump_backtrace+0x1c4/0x1f0 [ 337.000142][ T9662] show_stack+0x2c/0x3c [ 337.000886][ T9662] __dump_stack+0x30/0x40 [ 337.001629][ T9662] dump_stack_lvl+0xf4/0x15c [ 337.002483][ T9662] dump_stack+0x1c/0x5c [ 337.003257][ T9662] should_fail_ex+0x3cc/0x524 [ 337.004082][ T9662] __should_failslab+0xc0/0x11c [ 337.004957][ T9662] should_failslab+0x10/0x28 [ 337.005750][ T9662] __kmem_cache_alloc_node+0x7c/0x318 [ 337.006728][ T9662] __kmalloc+0xc4/0x180 [ 337.007497][ T9662] tomoyo_realpath_from_path+0xc4/0x508 [ 337.008502][ T9662] tomoyo_path_number_perm+0x1c4/0x540 [ 337.009487][ T9662] tomoyo_file_ioctl+0x2c/0x3c [ 337.010407][ T9662] security_file_ioctl+0x80/0xbc [ 337.011331][ T9662] __arm64_sys_ioctl+0xa8/0x1c8 [ 337.012249][ T9662] invoke_syscall+0x98/0x290 [ 337.013095][ T9662] el0_svc_common+0x13c/0x258 [ 337.013955][ T9662] do_el0_svc+0x5c/0x134 [ 337.014753][ T9662] el0_svc+0x58/0x128 [ 337.015491][ T9662] el0t_64_sync_handler+0x84/0xf0 [ 337.016381][ T9662] el0t_64_sync+0x18c/0x190 [ 337.056043][ T9662] ERROR: Out of memory at tomoyo_realpath_from_path. [ 337.109721][ T7354] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 337.135888][ T9528] 8021q: adding VLAN 0 to HW filter on device bond0 [ 337.452057][ T4709] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 337.453820][ T4709] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 337.464636][ T9666] overlayfs: failed to create directory ./bus/work (errno: 28); mounting read-only [ 337.528176][ T7354] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 337.532317][ T9528] 8021q: adding VLAN 0 to HW filter on device team0 [ 337.540312][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 337.542071][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 337.543640][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 337.544928][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 337.546549][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 337.555821][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 337.557989][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 337.559253][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 337.560758][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 337.609310][ T7354] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 337.616642][ T9528] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 337.623722][ T9528] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 337.626471][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 337.628166][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 337.629878][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 337.631997][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 337.636362][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 337.643001][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 337.651299][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 337.654971][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 337.656799][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 337.663942][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 337.705172][ T9672] loop2: detected capacity change from 0 to 512 [ 337.709811][ T7354] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 337.719102][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 337.720932][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 337.771361][ T9528] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 337.773085][ T5001] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 337.774479][ T5001] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 337.783013][ T9672] 8021q: adding VLAN 0 to HW filter on device bond1 [ 337.801364][ T9672] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1392'. [ 337.859561][ T9672] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1392'. [ 337.987500][ T9672] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 338.017271][ T9672] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 338.123845][ T9672] bond0 (unregistering): Released all slaves [ 338.128741][ T9681] netlink: 'syz.1.1393': attribute type 1 has an invalid length. [ 338.167770][ T9681] 8021q: adding VLAN 0 to HW filter on device bond1 [ 338.244274][ T9689] ip_tables: iptables: counters copy to user failed while replacing table [ 339.275310][ T9703] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 339.281526][ T9703] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 339.327995][ T9706] FAULT_INJECTION: forcing a failure. [ 339.327995][ T9706] name fail_futex, interval 1, probability 0, space 0, times 0 [ 339.338670][ T9706] CPU: 0 PID: 9706 Comm: syz.3.1398 Not tainted syzkaller #0 [ 339.339932][ T9706] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 339.341895][ T9706] Call trace: [ 339.342545][ T9706] dump_backtrace+0x1c4/0x1f0 [ 339.343452][ T9706] show_stack+0x2c/0x3c [ 339.344246][ T9706] __dump_stack+0x30/0x40 [ 339.345102][ T9706] dump_stack_lvl+0xf4/0x15c [ 339.345959][ T9706] dump_stack+0x1c/0x5c [ 339.346754][ T9706] should_fail_ex+0x3cc/0x524 [ 339.347635][ T9706] should_fail+0x14/0x24 [ 339.348424][ T9706] get_futex_key+0x904/0xfb0 [ 339.349340][ T9706] futex_wake+0x10c/0x458 [ 339.350228][ T9706] do_futex+0x2c4/0x340 [ 339.351019][ T9706] __arm64_sys_futex+0x390/0x414 [ 339.351967][ T9706] invoke_syscall+0x98/0x290 [ 339.352811][ T9706] el0_svc_common+0x13c/0x258 [ 339.353659][ T9706] do_el0_svc+0x5c/0x134 [ 339.354436][ T9706] el0_svc+0x58/0x128 [ 339.355132][ T9706] el0t_64_sync_handler+0x84/0xf0 [ 339.356004][ T9706] el0t_64_sync+0x18c/0x190 [ 339.362345][ T5760] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 339.365241][ T5760] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 339.463959][ T9709] netlink: 'syz.2.1399': attribute type 1 has an invalid length. [ 339.475823][ T9528] device veth0_vlan entered promiscuous mode [ 339.478222][ T5760] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 339.480009][ T5760] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 339.482004][ T5760] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 339.484022][ T5760] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 339.574850][ T9528] device veth1_vlan entered promiscuous mode [ 339.578337][ T9713] netlink: 'syz.3.1401': attribute type 1 has an invalid length. [ 339.593863][ T9713] 8021q: adding VLAN 0 to HW filter on device bond0 [ 339.774430][ T9719] FAULT_INJECTION: forcing a failure. [ 339.774430][ T9719] name failslab, interval 1, probability 0, space 0, times 0 [ 339.776728][ T9719] CPU: 0 PID: 9719 Comm: syz.3.1402 Not tainted syzkaller #0 [ 339.778037][ T9719] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 339.779997][ T9719] Call trace: [ 339.780643][ T9719] dump_backtrace+0x1c4/0x1f0 [ 339.781555][ T9719] show_stack+0x2c/0x3c [ 339.782350][ T9719] __dump_stack+0x30/0x40 [ 339.783188][ T9719] dump_stack_lvl+0xf4/0x15c [ 339.784072][ T9719] dump_stack+0x1c/0x5c [ 339.784870][ T9719] should_fail_ex+0x3cc/0x524 [ 339.785773][ T9719] __should_failslab+0xc0/0x11c [ 339.786672][ T9719] should_failslab+0x10/0x28 [ 339.787493][ T9719] __kmem_cache_alloc_node+0x7c/0x318 [ 339.788514][ T9719] __kmalloc+0xc4/0x180 [ 339.789352][ T9719] tomoyo_realpath_from_path+0xc4/0x508 [ 339.790386][ T9719] tomoyo_path_number_perm+0x1c4/0x540 [ 339.791332][ T9719] tomoyo_file_ioctl+0x2c/0x3c [ 339.792213][ T9719] security_file_ioctl+0x80/0xbc [ 339.793094][ T9719] __arm64_sys_ioctl+0xa8/0x1c8 [ 339.793986][ T9719] invoke_syscall+0x98/0x290 [ 339.794846][ T9719] el0_svc_common+0x13c/0x258 [ 339.795755][ T9719] do_el0_svc+0x5c/0x134 [ 339.796528][ T9719] el0_svc+0x58/0x128 [ 339.797247][ T9719] el0t_64_sync_handler+0x84/0xf0 [ 339.798143][ T9719] el0t_64_sync+0x18c/0x190 [ 340.138640][ T9528] device veth0_macvtap entered promiscuous mode [ 340.141232][ T9528] device veth1_macvtap entered promiscuous mode [ 340.143667][ T4692] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 340.145931][ T4692] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 340.150013][ T4692] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 340.152295][ T4692] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 340.154320][ T4692] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 340.156118][ T4692] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 340.168519][ T9719] ERROR: Out of memory at tomoyo_realpath_from_path. [ 340.261608][ T9528] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 340.265771][ T9528] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 340.274197][ T9528] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 340.281168][ T9528] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 340.286290][ T9528] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 340.289975][ T9528] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 340.296275][ T9528] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 340.300662][ T9528] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 340.304508][ T9528] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 340.308588][ T9528] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 340.312534][ T9528] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 340.316627][ T9528] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 340.326137][ T9528] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 340.333511][ T9528] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 340.338730][ T9528] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 340.342559][ T9528] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 340.346581][ T9528] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 340.350590][ T9528] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 340.354859][ T9528] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 340.361754][ T9528] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 340.366799][ T9528] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 340.369680][ T9528] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 340.374149][ T9528] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 340.376809][ T9528] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 340.382649][ T9528] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 340.387719][ T9528] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 340.389228][ T238] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 340.391125][ T238] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 340.392798][ T238] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 340.394360][ T238] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 340.410841][ T8883] EXT4-fs (loop9): unmounting filesystem. [ 340.473843][ T9528] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.475801][ T9528] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.477957][ T9528] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.479802][ T9528] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.482298][ T9728] netlink: 'syz.3.1407': attribute type 1 has an invalid length. [ 340.499467][ T9728] 8021q: adding VLAN 0 to HW filter on device bond2 [ 340.642653][ T9737] FAULT_INJECTION: forcing a failure. [ 340.642653][ T9737] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 340.645367][ T9737] CPU: 0 PID: 9737 Comm: syz.2.1409 Not tainted syzkaller #0 [ 340.646649][ T9737] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 340.648555][ T9737] Call trace: [ 340.649167][ T9737] dump_backtrace+0x1c4/0x1f0 [ 340.650035][ T9737] show_stack+0x2c/0x3c [ 340.650808][ T9737] __dump_stack+0x30/0x40 [ 340.651613][ T9737] dump_stack_lvl+0xf4/0x15c [ 340.652444][ T9737] dump_stack+0x1c/0x5c [ 340.653209][ T9737] should_fail_ex+0x3cc/0x524 [ 340.654057][ T9737] should_fail+0x14/0x24 [ 340.654832][ T9737] should_fail_usercopy+0x20/0x30 [ 340.655744][ T9737] copy_from_bpfptr+0x84/0x1d8 [ 340.656622][ T9737] __sys_bpf+0x1f8/0x660 [ 340.657377][ T9737] __arm64_sys_bpf+0x80/0x98 [ 340.658212][ T9737] invoke_syscall+0x98/0x290 [ 340.659076][ T9737] el0_svc_common+0x13c/0x258 [ 340.659954][ T9737] do_el0_svc+0x5c/0x134 [ 340.660752][ T9737] el0_svc+0x58/0x128 [ 340.661476][ T9737] el0t_64_sync_handler+0x84/0xf0 [ 340.662404][ T9737] el0t_64_sync+0x18c/0x190 [ 340.738252][ T9745] netlink: 'syz.3.1411': attribute type 1 has an invalid length. [ 340.756472][ T9745] 8021q: adding VLAN 0 to HW filter on device bond3 [ 341.336960][ T9759] loop3: detected capacity change from 0 to 2048 [ 341.351749][ T9759] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 341.446698][ T1620] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 341.449116][ T1620] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 341.643185][ T9764] overlayfs: failed to create directory ./bus/index (errno: 28); mounting read-only [ 341.645000][ T9764] overlayfs: try deleting index dir or mounting with '-o index=off' to disable inodes index. [ 341.714717][ T4692] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 341.750379][ T9769] FAULT_INJECTION: forcing a failure. [ 341.750379][ T9769] name fail_futex, interval 1, probability 0, space 0, times 0 [ 341.753403][ T4692] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 341.754794][ T4692] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 341.756210][ T1620] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 341.763089][ T9769] CPU: 0 PID: 9769 Comm: syz.9.1416 Not tainted syzkaller #0 [ 341.764443][ T9769] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 341.766398][ T9769] Call trace: [ 341.767040][ T9769] dump_backtrace+0x1c4/0x1f0 [ 341.767931][ T9769] show_stack+0x2c/0x3c [ 341.768733][ T9769] __dump_stack+0x30/0x40 [ 341.769528][ T9769] dump_stack_lvl+0xf4/0x15c [ 341.770381][ T9769] dump_stack+0x1c/0x5c [ 341.771152][ T9769] should_fail_ex+0x3cc/0x524 [ 341.772008][ T9769] should_fail+0x14/0x24 [ 341.772806][ T9769] get_futex_key+0x904/0xfb0 [ 341.773616][ T9769] futex_wait_setup+0xbc/0x320 [ 341.774474][ T9769] futex_wait+0x164/0x424 [ 341.775256][ T9769] do_futex+0x2e8/0x340 [ 341.776036][ T9769] __arm64_sys_futex+0x390/0x414 [ 341.776964][ T9769] invoke_syscall+0x98/0x290 [ 341.777836][ T9769] el0_svc_common+0x13c/0x258 [ 341.778709][ T9769] do_el0_svc+0x5c/0x134 [ 341.779491][ T9769] el0_svc+0x58/0x128 [ 341.780246][ T9769] el0t_64_sync_handler+0x84/0xf0 [ 341.781207][ T9769] el0t_64_sync+0x18c/0x190 [ 343.652701][ T9784] netlink: 'syz.2.1419': attribute type 1 has an invalid length. [ 343.669198][ T9784] 8021q: adding VLAN 0 to HW filter on device bond0 [ 344.209973][ T9818] ip_tables: iptables: counters copy to user failed while replacing table [ 344.978221][ T7354] device hsr_slave_0 left promiscuous mode [ 345.956763][ T7354] device hsr_slave_1 left promiscuous mode [ 345.969340][ T9834] device-mapper: ioctl: Invalid ioctl structure: name t, dev f800 [ 346.197256][ T7354] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 346.198628][ T7354] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 346.201500][ T7354] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 346.202956][ T7354] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 346.205483][ T7354] device bridge_slave_1 left promiscuous mode [ 346.211064][ T7354] bridge0: port 2(bridge_slave_1) entered disabled state [ 347.272122][ T7354] device bridge_slave_0 left promiscuous mode [ 347.273401][ T7354] bridge0: port 1(bridge_slave_0) entered disabled state [ 347.403003][ T7354] device hsr_slave_0 left promiscuous mode [ 347.428116][ T7354] device hsr_slave_1 left promiscuous mode [ 347.487205][ T7354] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 347.488613][ T7354] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 347.490202][ T7354] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 347.491635][ T7354] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 347.493065][ T7354] device bridge_slave_1 left promiscuous mode [ 347.494260][ T7354] bridge0: port 2(bridge_slave_1) entered disabled state [ 347.522350][ T7354] device bridge_slave_0 left promiscuous mode [ 347.523491][ T7354] bridge0: port 1(bridge_slave_0) entered disabled state [ 347.637362][ T7354] device veth1_macvtap left promiscuous mode [ 347.638540][ T7354] device veth0_macvtap left promiscuous mode [ 347.639674][ T7354] device veth1_vlan left promiscuous mode [ 347.640800][ T7354] device veth0_vlan left promiscuous mode [ 347.653780][ T8989] EXT4-fs (loop3): unmounting filesystem. [ 347.727801][ T7354] device veth1_macvtap left promiscuous mode [ 347.729005][ T7354] device veth0_macvtap left promiscuous mode [ 347.730186][ T7354] device veth1_vlan left promiscuous mode [ 347.731327][ T7354] device veth0_vlan left promiscuous mode [ 348.718371][ T7354] bond1 (unregistering): Released all slaves [ 350.470372][ T7354] team0 (unregistering): Port device team_slave_1 removed [ 350.600567][ T7354] team0 (unregistering): Port device team_slave_0 removed [ 353.739466][ T7354] team0 (unregistering): Port device team_slave_1 removed [ 353.871293][ T7354] team0 (unregistering): Port device team_slave_0 removed [ 354.020687][ T7354] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 354.191509][ T7354] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 355.378252][ T7354] bond0 (unregistering): Released all slaves [ 356.052069][ T9881] ip_tables: iptables: counters copy to user failed while replacing table [ 356.106823][ T9877] tipc: Started in network mode [ 356.110550][ T9877] tipc: Node identity 3a461e635d95, cluster identity 4711 [ 356.111802][ T9877] tipc: Enabled bearer , priority 0 [ 357.235926][ T9679] tipc: Node number set to 1741889123 [ 357.276874][ T9892] binder: 9891:9892 tried to acquire reference to desc 0, got 1 instead [ 357.279167][ T9892] binder: 9891:9892 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 357.282002][ T9892] binder: 9892 RLIMIT_NICE not set [ 357.283344][ T9892] binder: 9891:9892 got reply transaction with bad transaction stack, transaction 315 has target 9891:0 [ 357.285436][ T9892] binder: 9891:9892 transaction reply to 0:0 failed 316/29201/-71, size 0-0 line 2978 [ 357.797328][ T4376] binder: release 9891:9892 transaction 315 out, still active [ 357.798845][ T4376] binder: undelivered TRANSACTION_COMPLETE [ 357.799936][ T4376] binder: undelivered TRANSACTION_ERROR: 29201 [ 357.825045][ T4376] binder: send failed reply for transaction 315, target dead [ 358.222631][ T9876] tipc: Disabling bearer [ 358.547339][ T9909] loop9: detected capacity change from 0 to 8192 [ 358.689206][ T9909] loop9: p3 < > p4 [ 358.691097][ T9909] loop9: p4 size 851974 extends beyond EOD, truncated [ 358.708379][ T3940] loop9: p3 < > p4 [ 358.710428][ T3940] loop9: p4 size 851974 extends beyond EOD, truncated [ 358.723343][ T9911] FAULT_INJECTION: forcing a failure. [ 358.723343][ T9911] name failslab, interval 1, probability 0, space 0, times 0 [ 358.732226][ T9911] CPU: 1 PID: 9911 Comm: syz.1.1453 Not tainted syzkaller #0 [ 358.733697][ T9911] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 358.735703][ T9911] Call trace: [ 358.736328][ T9911] dump_backtrace+0x1c4/0x1f0 [ 358.737152][ T9911] show_stack+0x2c/0x3c [ 358.737937][ T9911] __dump_stack+0x30/0x40 [ 358.738737][ T9911] dump_stack_lvl+0xf4/0x15c [ 358.739628][ T9911] dump_stack+0x1c/0x5c [ 358.740396][ T9911] should_fail_ex+0x3cc/0x524 [ 358.741238][ T9911] __should_failslab+0xc0/0x11c [ 358.742122][ T9911] should_failslab+0x10/0x28 [ 358.742949][ T9911] slab_pre_alloc_hook+0x6c/0x31c [ 358.743871][ T9911] kmem_cache_alloc_lru+0x60/0x284 [ 358.744841][ T9911] sock_alloc_inode+0x2c/0xcc [ 358.745683][ T9911] new_inode_pseudo+0x68/0x1cc [ 358.746558][ T9911] __sock_create+0x138/0x8a8 [ 358.747390][ T9911] __sys_socket+0xc0/0x1b0 [ 358.748189][ T9911] __arm64_sys_socket+0x7c/0x94 [ 358.749036][ T9911] invoke_syscall+0x98/0x290 [ 358.749847][ T9911] el0_svc_common+0x13c/0x258 [ 358.750734][ T9911] do_el0_svc+0x5c/0x134 [ 358.751523][ T9911] el0_svc+0x58/0x128 [ 358.752264][ T9911] el0t_64_sync_handler+0x84/0xf0 [ 358.753183][ T9911] el0t_64_sync+0x18c/0x190 [ 358.770375][ T9911] socket: no more sockets [ 358.941980][ T9918] netlink: 'syz.3.1455': attribute type 1 has an invalid length. [ 359.865374][ T9918] 8021q: adding VLAN 0 to HW filter on device bond4 [ 360.135100][ T9928] loop1: detected capacity change from 0 to 512 [ 360.258698][ T9932] ptrace attach of "ci2-linux-6-1-kasan-arm64/syz-executor exec"[9059] was attempted by "ci2-linux-6-1-kasan-arm64/syz-executor exec"[9932] [ 360.295161][ T9932] loop2: detected capacity change from 0 to 164 [ 360.378013][ T9934] ptrace attach of "ci2-linux-6-1-kasan-arm64/syz-executor exec"[8883] was attempted by "ci2-linux-6-1-kasan-arm64/syz-executor exec"[9934] [ 360.408652][ T9934] loop9: detected capacity change from 0 to 164 [ 360.466492][ T9932] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 360.469937][ T9934] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 360.552004][ T9928] 8021q: adding VLAN 0 to HW filter on device bond2 [ 360.669878][ T9928] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1459'. [ 360.673394][ T9928] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1459'. [ 360.740991][ T9941] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1459'. [ 362.970501][ T9941] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 363.165956][ T9941] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 363.212892][ T9941] bond0 (unregistering): Released all slaves [ 363.959180][ T9962] loop1: detected capacity change from 0 to 8192 [ 364.038237][ T9965] loop6: detected capacity change from 0 to 8192 [ 364.052065][ T9966] netlink: 'syz.9.1468': attribute type 1 has an invalid length. [ 364.067751][ T9962] loop1: p3 < > p4 [ 364.069400][ T9962] loop1: p4 size 851974 extends beyond EOD, truncated [ 364.070871][ T9965] loop6: p3 < > p4 [ 364.072216][ T9965] loop6: p4 size 851974 extends beyond EOD, truncated [ 364.094799][ T9968] binder: 9967:9968 tried to acquire reference to desc 0, got 1 instead [ 364.098829][ T9968] binder: 9967:9968 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 364.100763][ T9966] 8021q: adding VLAN 0 to HW filter on device bond1 [ 364.102014][ T3940] loop1: p3 < > p4 [ 364.103763][ T9968] binder: 9968 RLIMIT_NICE not set [ 364.106931][ T3940] loop1: p4 size 851974 extends beyond EOD, truncated [ 364.120214][ T3940] loop6: p3 < > p4 [ 364.121508][ T3940] loop6: p4 size 851974 extends beyond EOD, truncated [ 364.173523][ T9974] binder: 9967:9974 got reply transaction with no transaction stack [ 364.175019][ T9974] binder: 9967:9974 transaction reply to 0:0 failed 322/29201/-71, size 0-0 line 2963 [ 364.182578][ T4336] binder: release 9967:9968 transaction 321 out, still active [ 364.184955][ T4336] binder: undelivered TRANSACTION_COMPLETE [ 364.186616][ T4336] binder: undelivered TRANSACTION_ERROR: 29201 [ 364.205705][ T4336] binder: send failed reply for transaction 321, target dead [ 365.495000][ T9987] binder: 9983:9987 ioctl 4018620d 0 returned -22 [ 365.496666][ T9987] binder: 9983:9987 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 365.503224][ T9987] binder: 9983:9987 got transaction to invalid handle, 1 [ 365.504560][ T9987] binder: 9987:9983 cannot find target node [ 365.505534][ T9987] binder: 9983:9987 transaction call to 0:0 failed 327/29201/-22, size 0-0 line 3062 [ 365.509093][ T9987] binder: 9983:9987 tried to acquire reference to desc 0, got 1 instead [ 365.510523][ T9987] binder: 9983:9987 got transaction with invalid data ptr [ 365.511768][ T9987] binder: 9983:9987 transaction call to 9983:0 failed 329/29201/-14, size 252-0 line 3582 [ 365.513777][ T7172] binder: undelivered TRANSACTION_ERROR: 29201 [ 365.515124][ T7172] binder: undelivered TRANSACTION_ERROR: 29201 [ 365.568236][ T9988] ptrace attach of "ci2-linux-6-1-kasan-arm64/syz-executor exec"[8883] was attempted by "ci2-linux-6-1-kasan-arm64/syz-executor exec"[9988] [ 365.601540][ T9988] loop9: detected capacity change from 0 to 164 [ 365.615420][ T9988] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 365.825527][ T9990] loop2: detected capacity change from 0 to 128 [ 365.914781][ T9990] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 366.893988][ T9059] EXT4-fs (loop2): unmounting filesystem. [ 368.631231][T10009] syzkaller0: Number of in use tx queues changed invalidating tc mappings. Priority traffic classification disabled! [ 370.296818][T10022] loop9: detected capacity change from 0 to 8192 [ 370.383818][T10024] loop6: detected capacity change from 0 to 8192 [ 370.407871][T10022] loop9: p3 < > p4 [ 370.409088][T10024] loop6: p3 < > p4 [ 370.410182][T10022] loop9: p4 size 851974 extends beyond EOD, truncated [ 370.411660][T10024] loop6: p4 size 851974 extends beyond EOD, truncated [ 370.433984][ T3940] loop9: p3 < > p4 [ 370.435163][ T3940] loop9: p4 size 851974 extends beyond EOD, truncated [ 370.443222][ T3940] loop6: p3 < > p4 [ 370.444450][ T3940] loop6: p4 size 851974 extends beyond EOD, truncated [ 370.624039][T10030] binder: BINDER_SET_CONTEXT_MGR already set [ 370.625394][T10030] binder: 10029:10030 ioctl 4018620d 20000040 returned -16 [ 370.828801][T10032] loop9: detected capacity change from 0 to 8192 [ 370.982214][T10030] binder: 10029:10030 tried to acquire reference to desc 0, got 1 instead [ 370.984287][T10030] binder_alloc: 10029: binder_alloc_buf, no vma [ 370.986591][T10030] binder: cannot allocate buffer: vma cleared, target dead or dying [ 370.986629][T10030] binder: 10029:10030 transaction call to 10029:0 failed 334/29189/-3, size 252-0 line 3247 [ 370.995511][ T7172] binder: undelivered TRANSACTION_ERROR: 29189 [ 371.007653][T10032] loop9: p3 < > p4 [ 371.008936][T10032] loop9: p4 size 851974 extends beyond EOD, truncated [ 371.019982][ T3940] loop9: p3 < > p4 [ 371.021465][ T3940] loop9: p4 size 851974 extends beyond EOD, truncated [ 371.231287][T10036] ptrace attach of "ci2-linux-6-1-kasan-arm64/syz-executor exec"[9528] was attempted by "ci2-linux-6-1-kasan-arm64/syz-executor exec"[10036] [ 371.267659][T10036] loop6: detected capacity change from 0 to 164 [ 371.336375][T10036] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 371.488979][T10038] loop1: detected capacity change from 0 to 128 [ 371.504370][T10038] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 371.678093][ T2065] ieee802154 phy0 wpan0: encryption failed: -22 [ 371.679459][ T2065] ieee802154 phy1 wpan1: encryption failed: -22 [ 372.110319][T10048] ptrace attach of "ci2-linux-6-1-kasan-arm64/syz-executor exec"[9528] was attempted by "ci2-linux-6-1-kasan-arm64/syz-executor exec"[10048] [ 372.144542][T10048] loop6: detected capacity change from 0 to 164 [ 372.236959][T10048] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 372.359262][ T8918] EXT4-fs (loop1): unmounting filesystem. [ 372.596969][T10052] loop1: detected capacity change from 0 to 8192 [ 372.681487][T10052] loop1: p3 < > p4 [ 372.702640][T10052] loop1: p4 size 851974 extends beyond EOD, truncated [ 372.846702][ T3940] loop1: p3 < > p4 [ 372.848281][ T3940] loop1: p4 size 851974 extends beyond EOD, truncated [ 373.491230][T10060] ptrace attach of "ci2-linux-6-1-kasan-arm64/syz-executor exec"[9528] was attempted by "ci2-linux-6-1-kasan-arm64/syz-executor exec"[10060] [ 373.523672][T10060] loop6: detected capacity change from 0 to 164 [ 373.714940][T10060] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 374.880230][T10064] ptrace attach of "ci2-linux-6-1-kasan-arm64/syz-executor exec"[9528] was attempted by "ci2-linux-6-1-kasan-arm64/syz-executor exec"[10064] [ 374.913934][T10064] loop6: detected capacity change from 0 to 164 [ 374.946611][T10064] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 376.717912][T10072] loop6: detected capacity change from 0 to 8192 [ 376.898096][T10072] loop6: p3 < > p4 [ 376.899286][T10072] loop6: p4 size 851974 extends beyond EOD, truncated [ 376.915602][ T3940] loop6: p3 < > p4 [ 376.916817][ T3940] loop6: p4 size 851974 extends beyond EOD, truncated [ 377.386385][T10074] binder: BINDER_SET_CONTEXT_MGR already set [ 377.387695][T10074] binder: 10073:10074 ioctl 4018620d 20000040 returned -16 [ 377.389185][T10074] binder: 10073:10074 tried to acquire reference to desc 0, got 1 instead [ 377.390683][T10074] binder_alloc: 10073: binder_alloc_buf, no vma [ 377.391702][T10074] binder: cannot allocate buffer: vma cleared, target dead or dying [ 377.391734][T10074] binder: 10073:10074 transaction call to 10073:0 failed 339/29189/-3, size 252-0 line 3247 [ 377.395340][ T7172] binder: undelivered TRANSACTION_ERROR: 29189 [ 378.388429][T10085] loop6: detected capacity change from 0 to 128 [ 378.412213][T10085] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 379.250014][ T9528] EXT4-fs (loop6): unmounting filesystem. [ 379.271885][T10091] FAULT_INJECTION: forcing a failure. [ 379.271885][T10091] name fail_futex, interval 1, probability 0, space 0, times 0 [ 379.274510][T10091] CPU: 0 PID: 10091 Comm: syz.6.1502 Not tainted syzkaller #0 [ 379.275780][T10091] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 379.277598][T10091] Call trace: [ 379.278246][T10091] dump_backtrace+0x1c4/0x1f0 [ 379.279120][T10091] show_stack+0x2c/0x3c [ 379.279891][T10091] __dump_stack+0x30/0x40 [ 379.280709][T10091] dump_stack_lvl+0xf4/0x15c [ 379.281602][T10091] dump_stack+0x1c/0x5c [ 379.282410][T10091] should_fail_ex+0x3cc/0x524 [ 379.283308][T10091] should_fail+0x14/0x24 [ 379.284080][T10091] get_futex_key+0x904/0xfb0 [ 379.284951][T10091] futex_wait_setup+0xbc/0x320 [ 379.285835][T10091] futex_wait+0x164/0x424 [ 379.286676][T10091] do_futex+0x2e8/0x340 [ 379.287488][T10091] __arm64_sys_futex+0x390/0x414 [ 379.288369][T10091] invoke_syscall+0x98/0x290 [ 379.289232][T10091] el0_svc_common+0x13c/0x258 [ 379.290132][T10091] do_el0_svc+0x5c/0x134 [ 379.290990][T10091] el0_svc+0x58/0x128 [ 379.291784][T10091] el0t_64_sync_handler+0x84/0xf0 [ 379.292759][T10091] el0t_64_sync+0x18c/0x190 [ 379.587491][T10096] loop6: detected capacity change from 0 to 8192 [ 379.679512][T10096] loop6: p3 < > p4 [ 379.684245][T10096] loop6: p4 size 851974 extends beyond EOD, truncated [ 379.763038][ T3940] loop6: p3 < > p4 [ 379.764258][ T3940] loop6: p4 size 851974 extends beyond EOD, truncated [ 380.359930][T10100] loop6: detected capacity change from 0 to 8192 [ 380.687702][T10100] loop6: p3 < > p4 [ 380.688860][T10100] loop6: p4 size 851974 extends beyond EOD, truncated [ 380.695937][ T3940] loop6: p3 < > p4 [ 380.698233][ T3940] loop6: p4 size 851974 extends beyond EOD, truncated [ 381.274442][T10104] loop6: detected capacity change from 0 to 8192 [ 381.423823][T10104] loop6: p3 < > p4 [ 381.451525][T10104] loop6: p4 size 851974 extends beyond EOD, truncated [ 381.578713][ T3940] loop6: p3 < > p4 [ 381.579832][ T3940] loop6: p4 size 851974 extends beyond EOD, truncated [ 381.731173][T10018] netlink: 'syz.2.1483': attribute type 1 has an invalid length. [ 381.799785][T10107] rnbd_client L600: Mapping device /dev/ram0 on session s+, (access_mode: rw, nr_poll_queues: 0) [ 381.830214][ T39] rtrs_client L2019: : CM error (CM event: address error, err: -19) [ 381.835939][T10111] binder: BINDER_SET_CONTEXT_MGR already set [ 381.840847][T10107] rtrs_client L2619: : init_conns() failed: err=-113 path=@ip:27.0.0.1 [:0] [ 381.846659][T10111] binder: 10110:10111 ioctl 4018620d 20000040 returned -16 [ 381.853526][T10111] binder: 10110:10111 tried to acquire reference to desc 0, got 1 instead [ 381.856276][T10111] binder_alloc: 10110: binder_alloc_buf, no vma [ 381.868001][T10111] binder: cannot allocate buffer: vma cleared, target dead or dying [ 381.868035][T10111] binder: 10110:10111 transaction call to 10110:0 failed 344/29189/-3, size 252-0 line 3247 [ 381.878157][ T7172] binder: undelivered TRANSACTION_ERROR: 29189 [ 381.882850][T10113] loop1: detected capacity change from 0 to 164 [ 381.887704][T10113] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 381.913653][T10115] loop3: detected capacity change from 0 to 512 [ 381.940336][T10117] rnbd_client L600: Mapping device /dev/ram0 on session s+, (access_mode: rw, nr_poll_queues: 0) [ 381.946356][ T39] rtrs_client L2019: : CM error (CM event: address error, err: -19) [ 381.948970][T10117] rtrs_client L2619: : init_conns() failed: err=-113 path=@ip:27.0.0.1 [:0] [ 381.953853][T10120] loop9: detected capacity change from 0 to 128 [ 381.967053][T10115] bond1: option mode: unable to set because the bond device is up [ 381.971065][T10120] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 381.975538][T10115] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 382.001890][T10115] bond1: (slave macvlan2): Enslaving as a backup interface with a down link [ 382.020006][T10115] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1510'. [ 382.173205][T10131] netlink: 'syz.2.1517': attribute type 1 has an invalid length. [ 382.192682][T10131] 8021q: adding VLAN 0 to HW filter on device bond2 [ 382.262626][T10136] ptrace attach of "ci2-linux-6-1-kasan-arm64/syz-executor exec"[8918] was attempted by "ci2-linux-6-1-kasan-arm64/syz-executor exec"[10136] [ 382.298052][T10136] loop1: detected capacity change from 0 to 164 [ 382.450375][T10136] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 382.623237][T10144] loop3: detected capacity change from 0 to 8192 [ 382.670541][T10144] loop3: p3 < > p4 [ 382.697358][T10144] loop3: p4 size 851974 extends beyond EOD, truncated [ 383.054278][ T8883] EXT4-fs (loop9): unmounting filesystem. [ 383.060240][ T3940] loop3: p3 < > p4 [ 383.061510][ T3940] loop3: p4 size 851974 extends beyond EOD, truncated [ 383.095008][T10146] loop6: detected capacity change from 0 to 164 [ 383.108003][T10146] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 383.118283][T10151] binder: 10150:10151 ioctl c0306201 0 returned -14 [ 383.121829][T10151] binder: 10150:10151 got transaction to invalid handle, 1 [ 383.123185][T10151] binder: 10151:10150 cannot find target node [ 383.131634][T10151] binder: 10150:10151 transaction call to 0:0 failed 350/29201/-22, size 0-0 line 3062 [ 383.137858][T10151] binder: 10150:10151 tried to acquire reference to desc 0, got 1 instead [ 383.144956][T10151] binder: 10150:10151 got transaction with invalid data ptr [ 383.196071][T10151] binder: 10150:10151 transaction call to 10150:0 failed 352/29201/-14, size 252-0 line 3582 [ 383.218480][ T7376] binder: undelivered TRANSACTION_ERROR: 29201 [ 383.219972][ T7376] binder: undelivered TRANSACTION_ERROR: 29201 [ 383.368785][T10158] ubi31: attaching mtd0 [ 383.373265][T10158] ubi31: scanning is finished [ 383.374200][T10158] ubi31: empty MTD device detected [ 384.722689][T10158] ubi31 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt31d", error -4 [ 384.848580][T10167] ubi31: attaching mtd0 [ 384.851164][T10167] ubi31: scanning is finished [ 385.077406][T10167] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 385.078873][T10167] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 385.080130][T10167] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 385.081312][T10167] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 385.082551][T10167] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 385.083731][T10167] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 385.085110][T10167] ubi31: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 2170260700 [ 385.086850][T10167] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 385.114916][T10171] ubi31: background thread "ubi_bgt31d" started, PID 10171 [ 385.132830][T10177] rnbd_client L600: Mapping device /dev/ram0 on session s+, (access_mode: rw, nr_poll_queues: 0) [ 385.135862][ T4691] rtrs_client L2019: : CM error (CM event: address error, err: -19) [ 385.139802][T10177] rtrs_client L2619: : init_conns() failed: err=-113 path=@ip:27.0.0.1 [:0] [ 385.166114][T10182] loop2: detected capacity change from 0 to 128 [ 385.169528][T10183] netlink: 'syz.6.1529': attribute type 1 has an invalid length. [ 385.350980][T10187] loop3: detected capacity change from 0 to 8192 [ 385.424261][T10187] loop3: p3 < > p4 [ 385.472907][T10187] loop3: p4 size 851974 extends beyond EOD, truncated [ 385.590536][T10183] 8021q: adding VLAN 0 to HW filter on device bond1 [ 385.600245][ T3940] loop3: p3 < > p4 [ 385.601399][ T3940] loop3: p4 size 851974 extends beyond EOD, truncated [ 385.634795][T10182] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 386.171805][ T9059] EXT4-fs (loop2): unmounting filesystem. [ 387.310756][T10212] binder: 10211:10212 ioctl c0306201 0 returned -14 [ 387.313242][T10212] binder: 10211:10212 got transaction to invalid handle, 1 [ 387.314547][T10212] binder: 10212:10211 cannot find target node [ 387.315685][T10212] binder: 10211:10212 transaction call to 0:0 failed 358/29201/-22, size 0-0 line 3062 [ 387.338761][T10212] binder: 10211:10212 tried to acquire reference to desc 0, got 1 instead [ 387.340762][T10212] binder: 10211:10212 got transaction with invalid data ptr [ 387.342124][T10212] binder: 10211:10212 transaction call to 10211:0 failed 360/29201/-14, size 252-0 line 3582 [ 387.351291][ T4649] binder: undelivered TRANSACTION_ERROR: 29201 [ 387.352501][ T4649] binder: undelivered TRANSACTION_ERROR: 29201 [ 387.463339][T10216] ubi: mtd0 is already attached to ubi31 [ 387.901767][T10218] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 387.903504][T10218] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 387.905681][T10227] rnbd_client L600: Mapping device /dev/ram0 on session s+, (access_mode: rw, nr_poll_queues: 0) [ 387.908659][ T7302] rtrs_client L2019: : CM error (CM event: address error, err: -19) [ 387.910234][T10227] rtrs_client L2619: : init_conns() failed: err=-113 path=@ip:27.0.0.1 [:0] [ 387.979615][T10229] netlink: 'syz.1.1544': attribute type 1 has an invalid length. [ 387.999219][T10229] 8021q: adding VLAN 0 to HW filter on device bond0 [ 388.054579][T10234] rnbd_client L600: Mapping device /dev/ram0 on session s+, (access_mode: rw, nr_poll_queues: 0) [ 388.057522][ T7302] rtrs_client L2019: : CM error (CM event: address error, err: -19) [ 388.059718][T10234] rtrs_client L2619: : init_conns() failed: err=-113 path=@ip:27.0.0.1 [:0] [ 388.273419][T10242] FAULT_INJECTION: forcing a failure. [ 388.273419][T10242] name fail_futex, interval 1, probability 0, space 0, times 0 [ 388.275815][T10242] CPU: 0 PID: 10242 Comm: syz.9.1548 Not tainted syzkaller #0 [ 388.277054][T10242] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 388.278880][T10242] Call trace: [ 388.279485][T10242] dump_backtrace+0x1c4/0x1f0 [ 388.280364][T10242] show_stack+0x2c/0x3c [ 388.281118][T10242] __dump_stack+0x30/0x40 [ 388.281968][T10242] dump_stack_lvl+0xf4/0x15c [ 388.282764][T10242] dump_stack+0x1c/0x5c [ 388.283464][T10242] should_fail_ex+0x3cc/0x524 [ 388.285780][T10242] should_fail+0x14/0x24 [ 388.286522][T10242] get_futex_key+0x904/0xfb0 [ 388.287333][T10242] futex_wake+0x10c/0x458 [ 388.288069][T10242] do_futex+0x2c4/0x340 [ 388.288816][T10242] __arm64_sys_futex+0x390/0x414 [ 388.289705][T10242] invoke_syscall+0x98/0x290 [ 388.290519][T10242] el0_svc_common+0x13c/0x258 [ 388.291445][T10242] do_el0_svc+0x5c/0x134 [ 388.292254][T10242] el0_svc+0x58/0x128 [ 388.292997][T10242] el0t_64_sync_handler+0x84/0xf0 [ 388.293974][T10242] el0t_64_sync+0x18c/0x190 [ 388.763662][T10252] binder: 10251:10252 ioctl c0306201 0 returned -14 [ 388.768801][T10252] binder: 10251:10252 got transaction to invalid handle, 1 [ 388.770256][T10252] binder: 10252:10251 cannot find target node [ 388.774552][T10252] binder: 10251:10252 transaction call to 0:0 failed 366/29201/-22, size 0-0 line 3062 [ 388.778667][T10252] binder: 10251:10252 tried to acquire reference to desc 0, got 1 instead [ 388.780457][T10252] binder: 10251:10252 got transaction with invalid data ptr [ 388.782421][T10252] binder: 10251:10252 transaction call to 10251:0 failed 368/29201/-14, size 252-0 line 3582 [ 388.784802][ T3902] binder: undelivered TRANSACTION_ERROR: 29201 [ 388.786036][ T3902] binder: undelivered TRANSACTION_ERROR: 29201 [ 390.672026][T10271] netlink: 'syz.1.1557': attribute type 1 has an invalid length. [ 390.760825][T10274] ubi: mtd0 is already attached to ubi31 [ 391.002161][T10271] 8021q: adding VLAN 0 to HW filter on device bond3 [ 392.516655][T10292] FAULT_INJECTION: forcing a failure. [ 392.516655][T10292] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 392.530346][T10292] CPU: 0 PID: 10292 Comm: syz.6.1562 Not tainted syzkaller #0 [ 392.531697][T10292] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 392.533372][T10292] Call trace: [ 392.533899][T10292] dump_backtrace+0x1c4/0x1f0 [ 392.534713][T10292] show_stack+0x2c/0x3c [ 392.535431][T10292] __dump_stack+0x30/0x40 [ 392.536152][T10292] dump_stack_lvl+0xf4/0x15c [ 392.536883][T10292] dump_stack+0x1c/0x5c [ 392.537620][T10292] should_fail_ex+0x3cc/0x524 [ 392.538490][T10292] should_fail+0x14/0x24 [ 392.539272][T10292] should_fail_usercopy+0x20/0x30 [ 392.540205][T10292] copy_from_bpfptr+0x84/0x1d8 [ 392.541107][T10292] __sys_bpf+0x1f8/0x660 [ 392.541895][T10292] __arm64_sys_bpf+0x80/0x98 [ 392.542765][T10292] invoke_syscall+0x98/0x290 [ 392.543655][T10292] el0_svc_common+0x13c/0x258 [ 392.544491][T10292] do_el0_svc+0x5c/0x134 [ 392.545231][T10292] el0_svc+0x58/0x128 [ 392.545968][T10292] el0t_64_sync_handler+0x84/0xf0 [ 392.546901][T10292] el0t_64_sync+0x18c/0x190 [ 392.643777][T10295] ubi: mtd0 is already attached to ubi31 [ 392.898320][T10297] binder: 10296:10297 got transaction to invalid handle, 1 [ 392.899737][T10297] binder: 10297:10296 cannot find target node [ 392.900899][T10297] binder: 10296:10297 transaction call to 0:0 failed 374/29201/-22, size 0-0 line 3062 [ 392.903179][T10297] binder: 10296:10297 tried to acquire reference to desc 0, got 1 instead [ 392.905038][T10297] binder: 10296:10297 got transaction with invalid data ptr [ 392.906438][T10297] binder: 10296:10297 transaction call to 10296:0 failed 376/29201/-14, size 252-0 line 3582 [ 392.910571][ T4379] binder: undelivered TRANSACTION_ERROR: 29201 [ 392.911668][ T4379] binder: undelivered TRANSACTION_ERROR: 29201 [ 393.376622][T10309] loop1: detected capacity change from 0 to 128 [ 393.380008][T10309] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 394.042249][T10328] ubi: mtd0 is already attached to ubi31 [ 394.315697][ T8918] EXT4-fs (loop1): unmounting filesystem. [ 394.538442][T10341] ubi: mtd0 is already attached to ubi31 [ 396.040174][T10338] binder: 10337:10338 got transaction to invalid handle, 1 [ 396.041558][T10338] binder: 10338:10337 cannot find target node [ 396.042601][T10338] binder: 10337:10338 transaction call to 0:0 failed 382/29201/-22, size 0-0 line 3062 [ 396.049468][T10338] binder: 10337:10338 tried to acquire reference to desc 0, got 1 instead [ 396.051016][T10338] binder: 10337:10338 got transaction with invalid data ptr [ 396.052288][T10338] binder: 10337:10338 transaction call to 10337:0 failed 384/29201/-14, size 252-0 line 3582 [ 396.078560][ T4379] binder: undelivered TRANSACTION_ERROR: 29201 [ 396.079866][ T4379] binder: undelivered TRANSACTION_ERROR: 29201 [ 397.684236][T10373] ubi: mtd0 is already attached to ubi31 [ 398.181684][T10377] loop2: detected capacity change from 0 to 8192 [ 398.317206][T10377] loop2: p3 < > p4 [ 398.319909][T10377] loop2: p4 size 851974 extends beyond EOD, truncated [ 398.500164][ T3940] loop2: p3 < > p4 [ 398.501326][ T3940] loop2: p4 size 851974 extends beyond EOD, truncated [ 398.609793][T10383] loop2: detected capacity change from 0 to 128 [ 398.901930][T10383] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 399.087668][T10397] 8021q: adding VLAN 0 to HW filter on device bond2 [ 399.123343][T10391] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 399.125244][T10391] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 399.130552][T10397] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 399.134394][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): bond2: link becomes ready [ 399.219935][T10400] binder: 10399:10400 got transaction to invalid handle, 1 [ 399.221456][T10400] binder: 10400:10399 cannot find target node [ 399.222675][T10400] binder: 10399:10400 transaction call to 0:0 failed 390/29201/-22, size 0-0 line 3062 [ 399.224945][T10400] binder: 10399:10400 tried to acquire reference to desc 0, got 1 instead [ 399.226603][T10400] binder: 10399:10400 got transaction with invalid data ptr [ 399.229078][T10400] binder: 10399:10400 transaction call to 10399:0 failed 392/29201/-14, size 252-0 line 3582 [ 399.231631][ T7376] binder: undelivered TRANSACTION_ERROR: 29201 [ 399.233020][ T7376] binder: undelivered TRANSACTION_ERROR: 29201 [ 399.255575][T10402] loop1: detected capacity change from 0 to 512 [ 399.276066][T10402] bond2: option mode: unable to set because the bond device is up [ 399.284012][T10402] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 399.290899][T10402] bond2: (slave macvlan2): Enslaving as a backup interface with a down link [ 399.302728][T10402] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1589'. [ 399.304673][T10402] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1589'. [ 399.308364][T10402] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1589'. [ 399.469008][ T9059] EXT4-fs (loop2): unmounting filesystem. [ 399.880705][T10417] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 400.209983][T10432] loop1: detected capacity change from 0 to 512 [ 400.268237][T10435] binder: 10433:10435 got transaction to invalid handle, 1 [ 400.269787][T10435] binder: 10433:10435 tried to acquire reference to desc 0, got 1 instead [ 400.273467][T10432] bond2: option mode: unable to set because the bond device has slaves [ 400.277465][T10435] binder: 10433:10435 got transaction with invalid data ptr [ 400.279577][T10436] loop9: detected capacity change from 0 to 512 [ 400.286048][T10432] bond2: (slave macvlan3): Error -98 calling set_mac_address [ 400.354022][T10436] 8021q: adding VLAN 0 to HW filter on device bond2 [ 400.439787][T10432] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1598'. [ 400.482472][T10436] device bond_slave_0 entered promiscuous mode [ 400.483633][T10436] device bond_slave_1 entered promiscuous mode [ 401.535928][T10436] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 401.828099][T10436] bond2: (slave macvlan2): Enslaving as a backup interface with an up link [ 401.841748][ T4800] IPv6: ADDRCONF(NETDEV_CHANGE): bond2: link becomes ready [ 401.917639][T10451] loop1: detected capacity change from 0 to 128 [ 401.972296][T10451] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 402.102349][T10436] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1600'. [ 402.106619][T10450] netlink: 14 bytes leftover after parsing attributes in process `syz.9.1600'. [ 402.110309][T10450] device bond_slave_0 left promiscuous mode [ 402.111310][T10450] device bond_slave_1 left promiscuous mode [ 402.367344][T10474] ptrace attach of "ci2-linux-6-1-kasan-arm64/syz-executor exec"[9059] was attempted by "ci2-linux-6-1-kasan-arm64/syz-executor exec"[10474] [ 402.389481][T10474] loop2: detected capacity change from 0 to 164 [ 402.491368][T10450] bond2: (slave macvlan2): Removing an active aggregator [ 402.578013][ T5760] bond2: Warning: Found an uninitialized port [ 402.588014][T10450] bond2: (slave macvlan2): Releasing backup interface [ 402.632340][T10450] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 402.663856][T10450] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 402.699114][T10450] bond0 (unregistering): Released all slaves [ 402.769063][ T8918] EXT4-fs (loop1): unmounting filesystem. [ 402.806989][T10479] binder: 10478:10479 got transaction to invalid handle, 1 [ 402.812129][T10479] binder_debug: 5 callbacks suppressed [ 402.812143][T10479] binder: 10479:10478 cannot find target node [ 402.814247][T10479] binder: 10478:10479 transaction call to 0:0 failed 406/29201/-22, size 0-0 line 3062 [ 402.816248][T10479] binder: 10478:10479 tried to acquire reference to desc 0, got 1 instead [ 402.818482][T10479] binder: 10478:10479 got transaction with invalid data ptr [ 402.820032][T10479] binder: 10478:10479 transaction call to 10478:0 failed 408/29201/-14, size 252-0 line 3582 [ 402.879146][ T4379] binder: undelivered TRANSACTION_ERROR: 29201 [ 402.890816][ T4379] binder: undelivered TRANSACTION_ERROR: 29201 [ 404.471618][T10491] loop6: detected capacity change from 0 to 164 [ 404.486265][T10490] binder: 10489:10490 got transaction to invalid handle, 1 [ 404.491921][T10493] rnbd_client L600: Mapping device /dev/ram0 on session s+, (access_mode: rw, nr_poll_queues: 0) [ 404.495133][ T6973] rtrs_client L2019: : CM error (CM event: address error, err: -19) [ 404.496654][T10493] rtrs_client L2619: : init_conns() failed: err=-113 path=@ip:27.0.0.1 [:0] [ 404.499938][T10490] binder: 10490:10489 cannot find target node [ 404.500983][T10490] binder: 10489:10490 transaction call to 0:0 failed 414/29201/-22, size 0-0 line 3062 [ 404.502978][T10490] binder: 10489:10490 tried to acquire reference to desc 0, got 1 instead [ 404.504511][T10490] binder: 10489:10490 got transaction with invalid data ptr [ 404.508122][T10491] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 404.509786][T10490] binder: 10489:10490 transaction call to 10489:0 failed 416/29201/-14, size 252-0 line 3582 [ 404.565818][ T7] binder: undelivered TRANSACTION_ERROR: 29201 [ 404.567137][ T7] binder: undelivered TRANSACTION_ERROR: 29201 [ 404.587592][T10497] FAULT_INJECTION: forcing a failure. [ 404.587592][T10497] name fail_futex, interval 1, probability 0, space 0, times 0 [ 404.602642][T10497] CPU: 1 PID: 10497 Comm: syz.3.1617 Not tainted syzkaller #0 [ 404.604051][T10497] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 404.606107][T10497] Call trace: [ 404.606762][T10497] dump_backtrace+0x1c4/0x1f0 [ 404.607765][T10497] show_stack+0x2c/0x3c [ 404.608598][T10497] __dump_stack+0x30/0x40 [ 404.609449][T10497] dump_stack_lvl+0xf4/0x15c [ 404.610334][T10497] dump_stack+0x1c/0x5c [ 404.611111][T10497] should_fail_ex+0x3cc/0x524 [ 404.611972][T10497] should_fail+0x14/0x24 [ 404.612738][T10497] get_futex_key+0x904/0xfb0 [ 404.613570][T10497] futex_wait_setup+0xbc/0x320 [ 404.614440][T10497] futex_wait+0x164/0x424 [ 404.615239][T10497] do_futex+0x2e8/0x340 [ 404.615980][T10497] __arm64_sys_futex+0x390/0x414 [ 404.616918][T10497] invoke_syscall+0x98/0x290 [ 404.617767][T10497] el0_svc_common+0x13c/0x258 [ 404.618651][T10497] do_el0_svc+0x5c/0x134 [ 404.619447][T10497] el0_svc+0x58/0x128 [ 404.620202][T10497] el0t_64_sync_handler+0x84/0xf0 [ 404.621147][T10497] el0t_64_sync+0x18c/0x190 [ 405.025588][T10509] binder: tried to use weak ref as strong ref [ 405.027371][T10509] binder: 10508:10509 Acquire 1 refcount change on invalid ref 0 ret -22 [ 405.029751][T10509] binder: 10508:10509 got transaction to invalid handle, 1 [ 405.033576][T10511] loop1: detected capacity change from 0 to 512 [ 405.034923][T10509] binder: tried to use weak ref as strong ref [ 405.151096][T10511] bond2: option mode: unable to set because the bond device has slaves [ 405.157730][T10516] bond2: (slave macvlan3): Error -98 calling set_mac_address [ 405.195786][T10511] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1621'. [ 405.397329][T10526] ptrace attach of "ci2-linux-6-1-kasan-arm64/syz-executor exec"[9528] was attempted by "ci2-linux-6-1-kasan-arm64/syz-executor exec"[10526] [ 405.415542][T10526] loop6: detected capacity change from 0 to 164 [ 407.251089][T10539] FAULT_INJECTION: forcing a failure. [ 407.251089][T10539] name failslab, interval 1, probability 0, space 0, times 0 [ 407.254324][T10539] CPU: 0 PID: 10539 Comm: syz.3.1633 Not tainted syzkaller #0 [ 407.255765][T10539] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 407.257686][T10539] Call trace: [ 407.258361][T10539] dump_backtrace+0x1c4/0x1f0 [ 407.259309][T10539] show_stack+0x2c/0x3c [ 407.260144][T10539] __dump_stack+0x30/0x40 [ 407.261033][T10539] dump_stack_lvl+0xf4/0x15c [ 407.261977][T10539] dump_stack+0x1c/0x5c [ 407.262824][T10539] should_fail_ex+0x3cc/0x524 [ 407.263786][T10539] __should_failslab+0xc0/0x11c [ 407.264761][T10539] should_failslab+0x10/0x28 [ 407.265677][T10539] kmem_cache_alloc+0x88/0x310 [ 407.266560][T10539] getname_flags+0xb8/0x458 [ 407.267371][T10539] __arm64_sys_mkdirat+0x80/0xa8 [ 407.268316][T10539] invoke_syscall+0x98/0x290 [ 407.269252][T10539] el0_svc_common+0x13c/0x258 [ 407.270226][T10539] do_el0_svc+0x5c/0x134 [ 407.271135][T10539] el0_svc+0x58/0x128 [ 407.271986][T10539] el0t_64_sync_handler+0x84/0xf0 [ 407.273031][T10539] el0t_64_sync+0x18c/0x190 [ 407.306261][T10541] loop1: detected capacity change from 0 to 164 [ 407.311109][T10535] 8021q: adding VLAN 0 to HW filter on device bond3 [ 407.355431][T10541] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 407.427442][T10535] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 407.579882][ T5760] IPv6: ADDRCONF(NETDEV_CHANGE): bond3: link becomes ready [ 407.585634][T10553] 8021q: adding VLAN 0 to HW filter on device bond5 [ 407.602027][T10558] bond5: (slave geneve2): Enslaving as an active interface with an up link [ 407.608335][ T4800] IPv6: ADDRCONF(NETDEV_CHANGE): bond5: link becomes ready [ 408.094291][T10568] ptrace attach of "ci2-linux-6-1-kasan-arm64/syz-executor exec"[9059] was attempted by "ci2-linux-6-1-kasan-arm64/syz-executor exec"[10568] [ 408.121074][T10568] loop2: detected capacity change from 0 to 164 [ 408.128469][T10568] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 408.922789][T10582] FAULT_INJECTION: forcing a failure. [ 408.922789][T10582] name failslab, interval 1, probability 0, space 0, times 0 [ 408.926349][T10582] CPU: 1 PID: 10582 Comm: syz.9.1646 Not tainted syzkaller #0 [ 408.927631][T10582] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 408.929436][T10582] Call trace: [ 408.930034][T10582] dump_backtrace+0x1c4/0x1f0 [ 408.930895][T10582] show_stack+0x2c/0x3c [ 408.931633][T10582] __dump_stack+0x30/0x40 [ 408.932393][T10582] dump_stack_lvl+0xf4/0x15c [ 408.933207][T10582] dump_stack+0x1c/0x5c [ 408.933961][T10582] should_fail_ex+0x3cc/0x524 [ 408.934814][T10582] __should_failslab+0xc0/0x11c [ 408.935659][T10582] should_failslab+0x10/0x28 [ 408.936468][T10582] kmem_cache_alloc+0x88/0x310 [ 408.937280][T10582] getname_flags+0xb8/0x458 [ 408.938041][T10582] __arm64_sys_mkdirat+0x80/0xa8 [ 408.938878][T10582] invoke_syscall+0x98/0x290 [ 408.939651][T10582] el0_svc_common+0x13c/0x258 [ 408.940454][T10582] do_el0_svc+0x5c/0x134 [ 408.941186][T10582] el0_svc+0x58/0x128 [ 408.941937][T10582] el0t_64_sync_handler+0x84/0xf0 [ 408.942799][T10582] el0t_64_sync+0x18c/0x190 [ 409.122302][T10585] ubi: mtd0 is already attached to ubi31 [ 409.128734][T10583] ptrace attach of "ci2-linux-6-1-kasan-arm64/syz-executor exec"[8989] was attempted by "ci2-linux-6-1-kasan-arm64/syz-executor exec"[10583] [ 409.214882][T10583] loop3: detected capacity change from 0 to 164 [ 409.397593][T10583] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 409.405918][T10580] loop2: detected capacity change from 0 to 512 [ 409.422217][T10588] binder_user_error: 8 callbacks suppressed [ 409.422225][T10588] binder: tried to use weak ref as strong ref [ 409.424602][T10588] binder: 10587:10588 Acquire 1 refcount change on invalid ref 0 ret -22 [ 409.426786][T10588] binder: 10587:10588 got transaction to invalid handle, 1 [ 409.429795][T10588] binder_debug: 12 callbacks suppressed [ 409.429809][T10588] binder: 10588:10587 cannot find target node [ 409.433685][T10580] bond1: option mode: unable to set because the bond device is up [ 409.435134][T10588] binder: 10587:10588 transaction call to 0:0 failed 433/29201/-22, size 0-0 line 3062 [ 409.438855][T10588] binder: tried to use weak ref as strong ref [ 409.440084][T10588] binder: 10587:10588 Acquire 1 refcount change on invalid ref 0 ret -22 [ 409.444784][T10588] binder: 10587:10588 got transaction to invalid handle, 1 [ 409.446823][T10580] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 409.448370][T10588] binder: 10588:10587 cannot find target node [ 409.449526][T10588] binder: 10587:10588 transaction call to 0:0 failed 434/29201/-22, size 252-0 line 3062 [ 409.452067][T10580] bond1: (slave macvlan2): Enslaving as a backup interface with a down link [ 409.454143][ T24] binder: undelivered TRANSACTION_ERROR: 29201 [ 409.455463][ T24] binder: undelivered TRANSACTION_ERROR: 29201 [ 409.472321][T10580] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1644'. [ 409.499997][T10592] netlink: 'syz.2.1650': attribute type 1 has an invalid length. [ 409.508503][T10592] 8021q: adding VLAN 0 to HW filter on device bond4 [ 411.002448][T10631] binder: 10630:10631 ioctl 4018620d 0 returned -22 [ 411.003971][T10631] binder: tried to use weak ref as strong ref [ 411.006156][T10631] binder: 10630:10631 Acquire 1 refcount change on invalid ref 0 ret -22 [ 411.275737][T10633] binder: 10630:10633 got transaction to invalid handle, 1 [ 411.292653][T10633] binder: 10633:10630 cannot find target node [ 411.294496][T10633] binder: 10630:10633 transaction call to 0:0 failed 439/29201/-22, size 0-0 line 3062 [ 411.296474][T10631] binder: tried to use weak ref as strong ref [ 411.299083][T10631] binder: 10631:10630 cannot find target node [ 411.300311][T10631] binder: 10630:10631 transaction call to 0:0 failed 440/29201/-22, size 252-0 line 3062 [ 411.356439][T10637] loop6: detected capacity change from 0 to 512 [ 411.410174][T10637] 8021q: adding VLAN 0 to HW filter on device bond3 [ 411.422512][T10640] loop1: detected capacity change from 0 to 512 [ 411.511927][T10637] device bond_slave_0 entered promiscuous mode [ 411.513223][T10637] device bond_slave_1 entered promiscuous mode [ 411.516797][T10637] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 411.523847][T10637] bond3: (slave macvlan2): Enslaving as a backup interface with an up link [ 411.529818][T10640] bond2: option mode: unable to set because the bond device has slaves [ 411.595409][T10644] ptrace attach of "ci2-linux-6-1-kasan-arm64/syz-executor exec"[9059] was attempted by "ci2-linux-6-1-kasan-arm64/syz-executor exec"[10644] [ 411.622250][T10644] loop2: detected capacity change from 0 to 164 [ 411.854968][T10644] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 411.857011][T10640] bond2: (slave macvlan3): Error -98 calling set_mac_address [ 411.869535][ T6951] IPv6: ADDRCONF(NETDEV_CHANGE): bond3: link becomes ready [ 411.871615][T10637] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1661'. [ 411.873172][T10637] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1661'. [ 411.875587][T10637] netlink: 14 bytes leftover after parsing attributes in process `syz.6.1661'. [ 411.883500][T10637] device bond_slave_0 left promiscuous mode [ 411.884838][T10637] device bond_slave_1 left promiscuous mode [ 412.040354][T10637] bond3: (slave macvlan2): Removing an active aggregator [ 412.042252][T10637] bond3: (slave macvlan2): Releasing backup interface [ 412.072498][T10637] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 412.111219][T10637] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 412.152785][T10637] bond0 (unregistering): Released all slaves [ 412.158880][T10640] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1663'. [ 412.163672][T10652] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1663'. [ 412.235189][T10658] loop1: detected capacity change from 0 to 512 [ 412.286120][T10658] bond2: option mode: unable to set because the bond device has slaves [ 412.291143][T10658] bond2: (slave macvlan3): Error -98 calling set_mac_address [ 412.351554][T10667] loop3: detected capacity change from 0 to 512 [ 412.409317][T10665] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1667'. [ 412.422550][T10667] bond1: option mode: unable to set because the bond device has slaves [ 412.424167][T10658] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1667'. [ 412.445657][T10672] binder: 10671:10672 ioctl 4018620d 0 returned -22 [ 412.452431][T10667] bond1: (slave macvlan3): Error -98 calling set_mac_address [ 412.485069][T10674] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1681'. [ 412.492194][T10674] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1681'. [ 412.579532][T10683] loop3: detected capacity change from 0 to 512 [ 412.624811][T10690] loop2: detected capacity change from 0 to 512 [ 413.870667][T10683] bond1: option mode: unable to set because the bond device has slaves [ 413.872336][T10690] bond1: option mode: unable to set because the bond device has slaves [ 413.879325][T10693] bond1: (slave macvlan3): Error -98 calling set_mac_address [ 413.883902][T10694] bond1: (slave macvlan3): Error -98 calling set_mac_address [ 413.888185][T10696] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1688'. [ 414.461538][T10712] loop6: detected capacity change from 0 to 8192 [ 415.506816][T10717] binder: 10716:10717 ioctl 4018620d 0 returned -22 [ 415.524015][T10717] binder_user_error: 8 callbacks suppressed [ 415.524024][T10717] binder: tried to use weak ref as strong ref [ 415.526166][T10717] binder: 10716:10717 Acquire 1 refcount change on invalid ref 0 ret -22 [ 415.764203][T10721] loop9: detected capacity change from 0 to 8192 [ 415.904132][T10712] loop6: p3 < > p4 [ 415.905675][T10712] loop6: p4 size 851974 extends beyond EOD, truncated [ 415.924087][T10717] binder: 10716:10717 got transaction to invalid handle, 1 [ 415.925447][T10717] binder_debug: 8 callbacks suppressed [ 415.925460][T10717] binder: 10717:10716 cannot find target node [ 415.932218][T10717] binder: 10716:10717 transaction call to 0:0 failed 451/29201/-22, size 0-0 line 3062 [ 415.934779][T10717] binder: tried to use weak ref as strong ref [ 415.936040][T10717] binder: 10716:10717 Acquire 1 refcount change on invalid ref 0 ret -22 [ 415.937934][T10717] binder: 10716:10717 got transaction to invalid handle, 1 [ 415.938044][T10721] loop9: p3 < > p4 [ 415.939350][T10717] binder: 10717:10716 cannot find target node [ 415.940492][T10721] loop9: p4 size 851974 extends beyond EOD, truncated [ 415.941228][T10717] binder: 10716:10717 transaction call to 0:0 failed 452/29201/-22, size 252-0 line 3062 [ 415.951528][ T3940] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 415.952730][ T7] binder: undelivered TRANSACTION_ERROR: 29201 [ 415.953564][ T3940] Buffer I/O error on dev loop6, logical block 0, async page read [ 415.954620][ T7] binder: undelivered TRANSACTION_ERROR: 29201 [ 415.955860][ T3940] ldm_validate_partition_table(): Disk read failed. [ 415.958461][ T3940] Dev loop6: unable to read RDB block 0 [ 415.959467][ T3940] loop6: unable to read partition table [ 415.960595][ T3940] loop6: partition table beyond EOD, truncated [ 415.974626][ T3940] loop9: p3 < > p4 [ 415.976708][ T3940] loop9: p4 size 851974 extends beyond EOD, truncated [ 416.034895][T10731] loop1: detected capacity change from 0 to 512 [ 416.483515][T10731] bond2: option mode: unable to set because the bond device has slaves [ 416.490863][T10735] bond2: (slave macvlan3): Error -98 calling set_mac_address [ 416.515268][T10742] 8021q: adding VLAN 0 to HW filter on device bond0 [ 416.535927][T10742] bond0: (slave geneve2): Enslaving as an active interface with an up link [ 416.538007][T10378] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 416.717660][T10746] loop3: detected capacity change from 0 to 8192 [ 416.838997][T10746] loop3: p3 < > p4 [ 416.844333][T10746] loop3: p4 size 851974 extends beyond EOD, truncated [ 416.954062][ T3940] loop3: p3 < > p4 [ 416.959821][ T3940] loop3: p4 size 851974 extends beyond EOD, truncated [ 419.429875][T10758] __nla_validate_parse: 8 callbacks suppressed [ 419.429893][T10758] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1696'. [ 419.433013][T10761] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1697'. [ 419.593812][T10769] loop1: detected capacity change from 0 to 8192 [ 419.625945][T10769] loop1: p3 < > p4 [ 419.660808][T10769] loop1: p4 size 851974 extends beyond EOD, truncated [ 419.882695][T10772] binder: 10771:10772 ioctl c0306201 0 returned -14 [ 419.884174][T10772] binder: 10771:10772 got transaction to invalid handle, 1 [ 419.885557][T10772] binder: 10772:10771 cannot find target node [ 419.886682][T10772] binder: 10771:10772 transaction call to 0:0 failed 458/29201/-22, size 0-0 line 3062 [ 419.889416][ T3940] loop1: p3 < > p4 [ 419.894238][T10772] binder: 10771:10772 tried to acquire reference to desc 0, got 1 instead [ 419.895981][T10772] binder: 10771:10772 got transaction with invalid data ptr [ 419.896262][ T3940] loop1: p4 size 851974 extends beyond EOD, [ 419.897729][T10772] binder: 10771:10772 transaction call to 10771:0 failed 460/29201/-14, size 252-0 line 3582 [ 419.898105][ T24] binder: undelivered TRANSACTION_ERROR: 29201 [ 419.902043][ T3940] truncated [ 419.940674][T10782] loop9: detected capacity change from 0 to 8 [ 419.973602][T10786] loop6: detected capacity change from 0 to 512 [ 419.983918][T10782] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 421.466784][T10799] loop9: detected capacity change from 0 to 8192 [ 421.583191][T10786] bond3: option mode: unable to set because the bond device is up [ 421.587762][T10799] loop9: p3 < > p4 [ 421.589038][T10799] loop9: p4 size 851974 extends beyond EOD, truncated [ 421.609735][T10797] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1709'. [ 421.644627][T10786] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1708'. [ 421.651794][ T3940] loop9: p3 < > p4 [ 421.653805][T10786] netlink: 14 bytes leftover after parsing attributes in process `syz.6.1708'. [ 421.655853][ T3940] loop9: p4 size 851974 extends beyond EOD, truncated [ 422.030043][T10816] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1714'. [ 423.504332][T10822] binder: 10821:10822 ioctl c0306201 0 returned -14 [ 423.513681][T10822] binder: 10821:10822 got transaction to invalid handle, 1 [ 423.514911][T10822] binder_debug: 1 callbacks suppressed [ 423.514923][T10822] binder: 10822:10821 cannot find target node [ 423.516696][T10822] binder: 10821:10822 transaction call to 0:0 failed 466/29201/-22, size 0-0 line 3062 [ 423.519433][T10822] binder: 10821:10822 tried to acquire reference to desc 0, got 1 instead [ 423.520833][T10822] binder: 10821:10822 got transaction with invalid data ptr [ 423.522044][T10822] binder: 10821:10822 transaction call to 10821:0 failed 468/29201/-14, size 252-0 line 3582 [ 423.524153][ T4336] binder: undelivered TRANSACTION_ERROR: 29201 [ 423.525368][ T4336] binder: undelivered TRANSACTION_ERROR: 29201 [ 423.743157][T10824] loop9: detected capacity change from 0 to 8192 [ 423.774553][T10818] loop6: detected capacity change from 0 to 8192 [ 423.910747][T10818] loop6: p3 < > p4 [ 423.912035][T10818] loop6: p4 size 851974 extends beyond EOD, truncated [ 423.914325][T10824] loop9: p3 < > p4 [ 423.917647][T10824] loop9: p4 size 851974 extends beyond EOD, truncated [ 423.926961][ T3940] loop6: p3 < > p4 [ 423.928900][ T3940] loop6: p4 size 851974 extends beyond EOD, truncated [ 423.940683][ T3940] loop9: p3 < > p4 [ 423.941912][ T3940] loop9: p4 size 851974 extends beyond EOD, truncated [ 423.958191][T10830] loop1: detected capacity change from 0 to 512 [ 423.977859][T10832] loop3: detected capacity change from 0 to 128 [ 423.994619][T10830] bond2: option mode: unable to set because the bond device has slaves [ 423.996939][T10832] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 424.005521][T10830] bond2: (slave macvlan3): Error -98 calling set_mac_address [ 424.089674][T10839] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1719'. [ 424.944104][ T8989] EXT4-fs (loop3): unmounting filesystem. [ 425.411538][T10850] loop1: detected capacity change from 0 to 8192 [ 425.576201][T10850] loop1: p3 < > p4 [ 425.577488][T10850] loop1: p4 size 851974 extends beyond EOD, truncated [ 425.602949][ T3940] loop1: p3 < > p4 [ 425.604070][ T3940] loop1: p4 size 851974 extends beyond EOD, truncated [ 425.687799][T10858] netlink: 'syz.3.1728': attribute type 1 has an invalid length. [ 425.719655][T10858] 8021q: adding VLAN 0 to HW filter on device bond6 [ 425.742138][T10858] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1728'. [ 425.807991][T10863] binder: 10862:10863 ioctl c0306201 0 returned -14 [ 425.809571][T10863] binder: 10862:10863 got transaction to invalid handle, 1 [ 425.810883][T10863] binder: 10863:10862 cannot find target node [ 425.811939][T10863] binder: 10862:10863 transaction call to 0:0 failed 474/29201/-22, size 0-0 line 3062 [ 425.827353][T10863] binder: 10862:10863 tried to acquire reference to desc 0, got 1 instead [ 425.829061][T10863] binder: 10862:10863 got transaction with invalid data ptr [ 425.830363][T10863] binder: 10862:10863 transaction call to 10862:0 failed 476/29201/-14, size 252-0 line 3582 [ 425.840595][ T4377] binder: undelivered TRANSACTION_ERROR: 29201 [ 425.841840][ T4377] binder: undelivered TRANSACTION_ERROR: 29201 [ 426.016747][T10871] netlink: 'syz.1.1732': attribute type 1 has an invalid length. [ 426.034623][T10871] 8021q: adding VLAN 0 to HW filter on device bond4 [ 426.047926][T10871] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1732'. [ 426.397391][T10882] loop9: detected capacity change from 0 to 8192 [ 426.548440][T10880] loop1: detected capacity change from 0 to 128 [ 426.557912][T10882] loop9: p3 < > p4 [ 426.562262][T10882] loop9: p4 size 851974 extends beyond EOD, truncated [ 426.578721][ T3940] loop9: p3 < > p4 [ 426.579852][ T3940] loop9: p4 size 851974 extends beyond EOD, truncated [ 426.586616][T10885] loop3: detected capacity change from 0 to 512 [ 426.589115][T10880] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 426.663417][T10885] bond1: option mode: unable to set because the bond device has slaves [ 426.685786][T10885] bond1: (slave macvlan3): Error -98 calling set_mac_address [ 426.759834][T10885] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1736'. [ 426.770693][T10885] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1736'. [ 427.963079][ T8918] EXT4-fs (loop1): unmounting filesystem. [ 428.149819][T10898] loop1: detected capacity change from 0 to 8 [ 428.162165][T10902] binder: 10901:10902 got transaction to invalid handle, 1 [ 428.163959][T10902] binder: 10901:10902 tried to acquire reference to desc 0, got 1 instead [ 428.167004][T10902] binder: 10901:10902 got transaction with invalid data ptr [ 428.168666][T10895] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1737'. [ 428.200535][T10898] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 428.416618][T10908] loop2: detected capacity change from 0 to 8192 [ 428.568091][T10908] loop2: p3 < > p4 [ 428.569271][T10908] loop2: p4 size 851974 extends beyond EOD, truncated [ 428.593203][ T3940] loop2: p3 < > p4 [ 428.594427][ T3940] loop2: p4 size 851974 extends beyond EOD, truncated [ 428.991685][T10926] loop9: detected capacity change from 0 to 8192 [ 429.167553][T10924] loop3: detected capacity change from 0 to 128 [ 429.184739][T10924] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 429.248580][T10926] loop9: p3 < > p4 [ 429.249813][T10926] loop9: p4 size 851974 extends beyond EOD, truncated [ 429.257411][ T3940] loop9: p3 < > p4 [ 429.258723][ T3940] loop9: p4 size 851974 extends beyond EOD, truncated [ 429.314441][T10933] binder: 10931:10933 got transaction to invalid handle, 1 [ 429.317191][T10933] binder_debug: 5 callbacks suppressed [ 429.317205][T10933] binder: 10933:10931 cannot find target node [ 429.322102][T10933] binder: 10931:10933 transaction call to 0:0 failed 490/29201/-22, size 0-0 line 3062 [ 429.327195][T10933] binder: 10931:10933 tried to acquire reference to desc 0, got 1 instead [ 429.328907][T10933] binder: 10931:10933 got transaction with invalid data ptr [ 429.332883][T10933] binder: 10931:10933 transaction call to 10931:0 failed 492/29201/-14, size 252-0 line 3582 [ 429.335412][ T7] binder: undelivered TRANSACTION_ERROR: 29201 [ 429.336907][ T7] binder: undelivered TRANSACTION_ERROR: 29201 [ 430.316661][ T8989] EXT4-fs (loop3): unmounting filesystem. [ 430.335161][T10941] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1751'. [ 430.464399][T10949] loop3: detected capacity change from 0 to 128 [ 430.468728][T10949] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 431.448304][T10958] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1755'. [ 431.525239][ T8989] EXT4-fs (loop3): unmounting filesystem. [ 431.617918][T10966] loop3: detected capacity change from 0 to 8 [ 431.624969][T10966] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 431.714196][T10970] ptrace attach of "ci2-linux-6-1-kasan-arm64/syz-executor exec"[8918] was attempted by "ci2-linux-6-1-kasan-arm64/syz-executor exec"[10970] [ 431.735141][T10970] loop1: detected capacity change from 0 to 164 [ 432.001300][T10970] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 432.090490][T10975] binder: 10973:10975 got transaction to invalid handle, 1 [ 432.091851][T10975] binder: 10975:10973 cannot find target node [ 432.093058][T10975] binder: 10973:10975 transaction call to 0:0 failed 498/29201/-22, size 0-0 line 3062 [ 432.095195][T10975] binder: 10973:10975 tried to acquire reference to desc 0, got 1 instead [ 432.096974][T10975] binder: 10973:10975 got transaction with invalid data ptr [ 432.109175][T10975] binder: 10973:10975 transaction call to 10973:0 failed 500/29201/-14, size 252-0 line 3582 [ 432.111405][ T7172] binder: undelivered TRANSACTION_ERROR: 29201 [ 432.112572][ T7172] binder: undelivered TRANSACTION_ERROR: 29201 [ 432.593076][T10981] loop2: detected capacity change from 0 to 8192 [ 432.640885][T10981] loop2: p3 < > p4 [ 432.657900][T10981] loop2: p4 size 851974 extends beyond EOD, truncated [ 432.898243][ T3940] loop2: p3 < > p4 [ 432.899508][ T3940] loop2: p4 size 851974 extends beyond EOD, truncated [ 433.019938][T10992] loop2: detected capacity change from 0 to 128 [ 433.023385][T10992] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 433.118284][ T2065] ieee802154 phy0 wpan0: encryption failed: -22 [ 433.119517][ T2065] ieee802154 phy1 wpan1: encryption failed: -22 [ 433.233196][T11005] ptrace attach of "ci2-linux-6-1-kasan-arm64/syz-executor exec"[9528] was attempted by "ci2-linux-6-1-kasan-arm64/syz-executor exec"[11005] [ 433.259512][T11005] loop6: detected capacity change from 0 to 164 [ 433.439009][T11005] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 433.501359][T11009] loop3: detected capacity change from 0 to 8 [ 433.525429][T11011] binder: 11010:11011 got transaction to invalid handle, 1 [ 433.528224][T11011] binder: 11010:11011 tried to acquire reference to desc 0, got 1 instead [ 433.533402][T11011] binder: 11010:11011 got transaction with invalid data ptr [ 433.643773][T11015] netlink: 'syz.3.1777': attribute type 1 has an invalid length. [ 433.651957][T11015] 8021q: adding VLAN 0 to HW filter on device bond7 [ 433.653814][T11017] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1777'. [ 433.726387][T11019] ptrace attach of "ci2-linux-6-1-kasan-arm64/syz-executor exec"[8918] was attempted by "ci2-linux-6-1-kasan-arm64/syz-executor exec"[11019] [ 433.751474][T11019] loop1: detected capacity change from 0 to 164 [ 433.776562][T11019] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 433.967866][ T9059] EXT4-fs (loop2): unmounting filesystem. [ 434.113131][T11021] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 434.490923][T11047] binder: 11046:11047 got transaction to invalid handle, 1 [ 434.492325][T11047] binder_debug: 5 callbacks suppressed [ 434.492337][T11047] binder: 11047:11046 cannot find target node [ 434.494242][T11047] binder: 11046:11047 transaction call to 0:0 failed 514/29201/-22, size 0-0 line 3062 [ 434.500609][T11047] binder: 11046:11047 tried to acquire reference to desc 0, got 1 instead [ 434.501974][T11047] binder: 11046:11047 got transaction with invalid data ptr [ 434.503333][T11047] binder: 11046:11047 transaction call to 11046:0 failed 516/29201/-14, size 252-0 line 3582 [ 434.505790][ T4379] binder: undelivered TRANSACTION_ERROR: 29201 [ 434.508232][ T7] binder: undelivered TRANSACTION_ERROR: 29201 [ 434.870088][ T8989] EXT4-fs (loop3): unmounting filesystem. [ 435.015798][T11065] FAULT_INJECTION: forcing a failure. [ 435.015798][T11065] name fail_futex, interval 1, probability 0, space 0, times 0 [ 435.022789][T11065] CPU: 1 PID: 11065 Comm: syz.3.1795 Not tainted syzkaller #0 [ 435.024190][T11065] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 435.026309][T11065] Call trace: [ 435.026961][T11065] dump_backtrace+0x1c4/0x1f0 [ 435.027874][T11065] show_stack+0x2c/0x3c [ 435.028664][T11065] __dump_stack+0x30/0x40 [ 435.029486][T11065] dump_stack_lvl+0xf4/0x15c [ 435.030344][T11065] dump_stack+0x1c/0x5c [ 435.031113][T11065] should_fail_ex+0x3cc/0x524 [ 435.031969][T11065] should_fail+0x14/0x24 [ 435.032750][T11065] get_futex_key+0x96c/0xfb0 [ 435.033604][T11065] futex_wake+0x10c/0x458 [ 435.034418][T11065] do_futex+0x2c4/0x340 [ 435.035173][T11065] mm_release+0x190/0x274 [ 435.035953][T11065] exit_mm_release+0x30/0x40 [ 435.036774][T11065] exit_mm+0x50/0x290 [ 435.037496][T11065] do_exit+0x4d0/0x19ac [ 435.038264][T11065] do_group_exit+0x198/0x238 [ 435.039176][T11065] get_signal+0x11f4/0x133c [ 435.040038][T11065] do_notify_resume+0x364/0x2c84 [ 435.040984][T11065] el0_svc+0x98/0x128 [ 435.041766][T11065] el0t_64_sync_handler+0x84/0xf0 [ 435.042748][T11065] el0t_64_sync+0x18c/0x190 [ 435.090212][T11071] ptrace attach of "ci2-linux-6-1-kasan-arm64/syz-executor exec"[9528] was attempted by "ci2-linux-6-1-kasan-arm64/syz-executor exec"[11071] [ 435.114045][T11071] set_capacity_and_notify: 1 callbacks suppressed [ 435.114064][T11071] loop6: detected capacity change from 0 to 164 [ 435.315573][T11071] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 435.334963][T11074] loop3: detected capacity change from 0 to 512 [ 435.371199][T11077] netlink: 'syz.9.1800': attribute type 1 has an invalid length. [ 435.379159][T11077] 8021q: adding VLAN 0 to HW filter on device bond3 [ 435.429602][T11074] bond1: option mode: unable to set because the bond device has slaves [ 435.443142][T11074] bond1: (slave macvlan3): Error -98 calling set_mac_address [ 435.484016][T11074] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1799'. [ 435.489039][T11083] binder: 11082:11083 got transaction to invalid handle, 1 [ 435.490417][T11083] binder: 11083:11082 cannot find target node [ 435.492165][T11074] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1799'. [ 435.499792][T11083] binder: 11082:11083 transaction call to 0:0 failed 522/29201/-22, size 0-0 line 3062 [ 435.501615][T11083] binder: 11082:11083 tried to acquire reference to desc 0, got 1 instead [ 435.508641][T11083] binder: 11082:11083 got transaction with invalid data ptr [ 435.565902][T11084] ptrace attach of "ci2-linux-6-1-kasan-arm64/syz-executor exec"[8883] was attempted by "ci2-linux-6-1-kasan-arm64/syz-executor exec"[11084] [ 435.588058][T11084] loop9: detected capacity change from 0 to 164 [ 435.686166][T11084] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 435.794908][T11083] binder: 11082:11083 transaction call to 11082:0 failed 524/29201/-14, size 252-0 line 3582 [ 435.800681][ T4379] binder: undelivered TRANSACTION_ERROR: 29201 [ 435.801950][ T4379] binder: undelivered TRANSACTION_ERROR: 29201 [ 436.313223][T11090] binder: 11089:11090 tried to acquire reference to desc 0, got 1 instead [ 436.315151][T11092] FAULT_INJECTION: forcing a failure. [ 436.315151][T11092] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 436.317969][T11090] binder: 11089:11090 ioctl c0306201 0 returned -14 [ 436.319300][T11090] binder: 11089:11090 tried to acquire reference to desc 0, got 1 instead [ 436.320917][T11090] binder: 11089:11090 got transaction with invalid data ptr [ 436.333682][T11092] CPU: 0 PID: 11092 Comm: syz.1.1805 Not tainted syzkaller #0 [ 436.335178][T11092] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 436.337197][T11092] Call trace: [ 436.337858][T11092] dump_backtrace+0x1c4/0x1f0 [ 436.338778][T11092] show_stack+0x2c/0x3c [ 436.339590][T11092] __dump_stack+0x30/0x40 [ 436.340437][T11092] dump_stack_lvl+0xf4/0x15c [ 436.341328][T11092] dump_stack+0x1c/0x5c [ 436.342128][T11092] should_fail_ex+0x3cc/0x524 [ 436.342996][T11092] should_fail+0x14/0x24 [ 436.343822][T11092] should_fail_usercopy+0x20/0x30 [ 436.344762][T11092] copy_from_bpfptr+0x84/0x1d8 [ 436.345657][T11092] __sys_bpf+0x1f8/0x660 [ 436.346452][T11092] __arm64_sys_bpf+0x80/0x98 [ 436.347315][T11092] invoke_syscall+0x98/0x290 [ 436.348162][T11092] el0_svc_common+0x13c/0x258 [ 436.349052][T11092] do_el0_svc+0x5c/0x134 [ 436.349840][T11092] el0_svc+0x58/0x128 [ 436.350562][T11092] el0t_64_sync_handler+0x84/0xf0 [ 436.351455][T11092] el0t_64_sync+0x18c/0x190 [ 436.424415][T11099] loop6: detected capacity change from 0 to 128 [ 436.496288][T11099] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 436.590849][T11109] netlink: 'syz.9.1811': attribute type 1 has an invalid length. [ 436.778169][T11109] 8021q: adding VLAN 0 to HW filter on device bond4 [ 436.859277][T11121] ptrace attach of "ci2-linux-6-1-kasan-arm64/syz-executor exec"[8918] was attempted by "ci2-linux-6-1-kasan-arm64/syz-executor exec"[11121] [ 436.886819][T11121] loop1: detected capacity change from 0 to 164 [ 437.001635][T11124] ptrace attach of "ci2-linux-6-1-kasan-arm64/syz-executor exec"[8989] was attempted by "ci2-linux-6-1-kasan-arm64/syz-executor exec"[11124] [ 437.026023][T11124] loop3: detected capacity change from 0 to 164 [ 437.161366][T11126] loop2: detected capacity change from 0 to 8192 [ 437.181764][T11121] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 437.181787][T11124] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 437.189812][T11126] loop2: p3 < > p4 [ 437.191318][T11126] loop2: p4 size 851974 extends beyond EOD, truncated [ 437.428622][ T9528] EXT4-fs (loop6): unmounting filesystem. [ 437.452049][ T3940] loop2: p3 < > p4 [ 437.455170][ T3940] loop2: p4 size 851974 extends beyond EOD, truncated [ 437.473742][T11130] loop6: detected capacity change from 0 to 512 [ 437.523928][T11130] bond3: option mode: unable to set because the bond device is up [ 437.583827][T11130] netlink: 52 bytes leftover after parsing attributes in process `syz.6.1817'. [ 437.586090][T11130] netlink: 14 bytes leftover after parsing attributes in process `syz.6.1817'. [ 437.697849][T11137] binder: 11136:11137 tried to acquire reference to desc 0, got 1 instead [ 437.699683][T11137] binder: 11136:11137 ioctl c0306201 0 returned -14 [ 437.783199][T11145] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 438.013467][T11152] FAULT_INJECTION: forcing a failure. [ 438.013467][T11152] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 438.016035][T11152] CPU: 0 PID: 11152 Comm: syz.3.1824 Not tainted syzkaller #0 [ 438.017338][T11152] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 438.019469][T11152] Call trace: [ 438.020135][T11152] dump_backtrace+0x1c4/0x1f0 [ 438.021060][T11152] show_stack+0x2c/0x3c [ 438.021887][T11152] __dump_stack+0x30/0x40 [ 438.022735][T11152] dump_stack_lvl+0xf4/0x15c [ 438.023609][T11152] dump_stack+0x1c/0x5c [ 438.024397][T11152] should_fail_ex+0x3cc/0x524 [ 438.025314][T11152] should_fail+0x14/0x24 [ 438.026134][T11152] should_fail_usercopy+0x20/0x30 [ 438.027049][T11152] copy_from_bpfptr+0x84/0x1d8 [ 438.027908][T11152] __sys_bpf+0x1f8/0x660 [ 438.028684][T11152] __arm64_sys_bpf+0x80/0x98 [ 438.029508][T11152] invoke_syscall+0x98/0x290 [ 438.030352][T11152] el0_svc_common+0x13c/0x258 [ 438.031224][T11152] do_el0_svc+0x5c/0x134 [ 438.031996][T11152] el0_svc+0x58/0x128 [ 438.032717][T11152] el0t_64_sync_handler+0x84/0xf0 [ 438.033651][T11152] el0t_64_sync+0x18c/0x190 [ 438.081533][T11154] loop1: detected capacity change from 0 to 8 [ 438.149834][T11158] netlink: 'syz.1.1826': attribute type 1 has an invalid length. [ 438.171508][T11161] FAULT_INJECTION: forcing a failure. [ 438.171508][T11161] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 438.172155][T11158] 8021q: adding VLAN 0 to HW filter on device bond5 [ 438.173628][T11161] CPU: 0 PID: 11161 Comm: syz.3.1827 Not tainted syzkaller #0 [ 438.176150][T11161] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 438.177919][T11161] Call trace: [ 438.178526][T11161] dump_backtrace+0x1c4/0x1f0 [ 438.179389][T11161] show_stack+0x2c/0x3c [ 438.180150][T11161] __dump_stack+0x30/0x40 [ 438.180962][T11161] dump_stack_lvl+0xf4/0x15c [ 438.181783][T11161] dump_stack+0x1c/0x5c [ 438.182540][T11161] should_fail_ex+0x3cc/0x524 [ 438.183380][T11161] should_fail+0x14/0x24 [ 438.184182][T11161] should_fail_usercopy+0x20/0x30 [ 438.185140][T11161] copy_from_bpfptr+0x84/0x1d8 [ 438.186039][T11161] __sys_bpf+0x1f8/0x660 [ 438.186851][T11161] __arm64_sys_bpf+0x80/0x98 [ 438.187712][T11161] invoke_syscall+0x98/0x290 [ 438.188576][T11161] el0_svc_common+0x13c/0x258 [ 438.189430][T11161] do_el0_svc+0x5c/0x134 [ 438.190220][T11161] el0_svc+0x58/0x128 [ 438.190982][T11161] el0t_64_sync_handler+0x84/0xf0 [ 438.191894][T11161] el0t_64_sync+0x18c/0x190 [ 438.338343][T11168] loop1: detected capacity change from 0 to 512 [ 438.473986][T11168] bond2: option mode: unable to set because the bond device has slaves [ 438.550401][T11172] ptrace attach of "ci2-linux-6-1-kasan-arm64/syz-executor exec"[8989] was attempted by "ci2-linux-6-1-kasan-arm64/syz-executor exec"[11172] [ 438.587091][T11172] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 438.786868][T11168] bond2: (slave macvlan3): Error -98 calling set_mac_address [ 438.801164][T11173] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1829'. [ 438.803322][T11173] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1829'. [ 438.992738][T11177] binder: 11176:11177 ioctl c0306201 0 returned -14 [ 439.276318][T11181] nvme_fabrics: unknown parameter or missing value 'transpo' in ctrl creation request [ 439.342220][T11187] FAULT_INJECTION: forcing a failure. [ 439.342220][T11187] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 439.344900][T11187] CPU: 0 PID: 11187 Comm: syz.2.1837 Not tainted syzkaller #0 [ 439.346219][T11187] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 439.348040][T11187] Call trace: [ 439.348644][T11187] dump_backtrace+0x1c4/0x1f0 [ 439.349469][T11187] show_stack+0x2c/0x3c [ 439.350216][T11187] __dump_stack+0x30/0x40 [ 439.350988][T11187] dump_stack_lvl+0xf4/0x15c [ 439.351814][T11187] dump_stack+0x1c/0x5c [ 439.352549][T11187] should_fail_ex+0x3cc/0x524 [ 439.353373][T11187] should_fail+0x14/0x24 [ 439.354124][T11187] should_fail_usercopy+0x20/0x30 [ 439.355031][T11187] copy_from_bpfptr+0x84/0x1d8 [ 439.355887][T11187] __sys_bpf+0x1f8/0x660 [ 439.356661][T11187] __arm64_sys_bpf+0x80/0x98 [ 439.357477][T11187] invoke_syscall+0x98/0x290 [ 439.358302][T11187] el0_svc_common+0x13c/0x258 [ 439.359142][T11187] do_el0_svc+0x5c/0x134 [ 439.359936][T11187] el0_svc+0x58/0x128 [ 439.360659][T11187] el0t_64_sync_handler+0x84/0xf0 [ 439.361569][T11187] el0t_64_sync+0x18c/0x190 [ 439.481034][T11192] ptrace attach of "ci2-linux-6-1-kasan-arm64/syz-executor exec"[9528] was attempted by "ci2-linux-6-1-kasan-arm64/syz-executor exec"[11192] [ 439.675709][T11192] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 439.722362][T11195] netlink: 'syz.2.1839': attribute type 1 has an invalid length. [ 439.730494][T11195] 8021q: adding VLAN 0 to HW filter on device bond5 [ 440.042982][T11200] loop9: p3 < > p4 [ 440.045206][T11200] loop9: p4 size 851974 extends beyond EOD, truncated [ 440.322353][ T3940] loop9: p3 < > p4 [ 440.325022][ T3940] loop9: p4 size 851974 extends beyond EOD, truncated [ 440.483989][T11206] set_capacity_and_notify: 3 callbacks suppressed [ 440.484186][T11206] loop1: detected capacity change from 0 to 512 [ 440.502473][T11208] binder_user_error: 5 callbacks suppressed [ 440.502734][T11208] binder: 11207:11208 tried to acquire reference to desc 0, got 1 instead [ 440.506436][T11208] binder: 11207:11208 tried to acquire reference to desc 0, got 1 instead [ 440.519503][T11208] binder: 11207:11208 got transaction with invalid data ptr [ 440.521350][T11208] binder_debug: 6 callbacks suppressed [ 440.521370][T11208] binder: 11207:11208 transaction call to 11207:0 failed 556/29201/-14, size 252-0 line 3582 [ 440.536561][ T4379] binder: undelivered TRANSACTION_ERROR: 29201 [ 440.568193][T11206] bond2: option mode: unable to set because the bond device has slaves [ 440.589740][T11206] bond2: (slave macvlan3): Error -98 calling set_mac_address [ 440.725368][T11206] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1842'. [ 440.850864][T11218] ptrace attach of "ci2-linux-6-1-kasan-arm64/syz-executor exec"[8883] was attempted by "ci2-linux-6-1-kasan-arm64/syz-executor exec"[11218] [ 440.880435][T11218] loop9: detected capacity change from 0 to 164 [ 440.959310][T11218] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 441.057685][T11217] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 441.769101][T11237] loop9: detected capacity change from 0 to 8192 [ 441.810483][T11237] loop9: p3 < > p4 [ 441.811966][T11237] loop9: p4 size 851974 extends beyond EOD, truncated [ 441.834269][ T3940] loop9: p3 < > p4 [ 441.836695][ T3940] loop9: p4 size 851974 extends beyond EOD, truncated [ 442.193654][T11240] nvme_fabrics: unknown parameter or missing value 'transpo' in ctrl creation request [ 442.235552][T11241] binder: 11239:11241 tried to acquire reference to desc 0, got 1 instead [ 442.245197][T11241] binder: 11239:11241 tried to acquire reference to desc 0, got 1 instead [ 442.253081][T11241] binder: 11239:11241 got transaction with invalid data ptr [ 442.258268][T11241] binder: 11239:11241 transaction call to 11239:0 failed 564/29201/-14, size 252-0 line 3582 [ 442.268652][ T7] binder: undelivered TRANSACTION_ERROR: 29201 [ 442.444675][T11246] ptrace attach of "ci2-linux-6-1-kasan-arm64/syz-executor exec"[8918] was attempted by "ci2-linux-6-1-kasan-arm64/syz-executor exec"[11246] [ 442.477639][T11246] loop1: detected capacity change from 0 to 164 [ 442.657546][T11246] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 442.692324][T11247] FAULT_INJECTION: forcing a failure. [ 442.692324][T11247] name fail_futex, interval 1, probability 0, space 0, times 0 [ 442.694671][T11247] CPU: 1 PID: 11247 Comm: syz.6.1857 Not tainted syzkaller #0 [ 442.696065][T11247] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 442.697986][T11247] Call trace: [ 442.698624][T11247] dump_backtrace+0x1c4/0x1f0 [ 442.699534][T11247] show_stack+0x2c/0x3c [ 442.700344][T11247] __dump_stack+0x30/0x40 [ 442.701188][T11247] dump_stack_lvl+0xf4/0x15c [ 442.702067][T11247] dump_stack+0x1c/0x5c [ 442.702861][T11247] should_fail_ex+0x3cc/0x524 [ 442.703711][T11247] should_fail+0x14/0x24 [ 442.704477][T11247] get_futex_key+0x904/0xfb0 [ 442.705370][T11247] futex_wait_setup+0xbc/0x320 [ 442.706333][T11247] futex_wait+0x164/0x424 [ 442.707191][T11247] do_futex+0x2e8/0x340 [ 442.708016][T11247] __arm64_sys_futex+0x390/0x414 [ 442.708984][T11247] invoke_syscall+0x98/0x290 [ 442.709881][T11247] el0_svc_common+0x13c/0x258 [ 442.710790][T11247] do_el0_svc+0x5c/0x134 [ 442.711566][T11247] el0_svc+0x58/0x128 [ 442.712302][T11247] el0t_64_sync_handler+0x84/0xf0 [ 442.713186][T11247] el0t_64_sync+0x18c/0x190 [ 442.849800][T11252] loop6: detected capacity change from 0 to 512 [ 443.051414][T11252] bond3: option mode: unable to set because the bond device is up [ 443.066178][T11252] netlink: 52 bytes leftover after parsing attributes in process `syz.6.1858'. [ 443.071127][T11252] netlink: 14 bytes leftover after parsing attributes in process `syz.6.1858'. [ 443.349201][T11265] ptrace attach of "ci2-linux-6-1-kasan-arm64/syz-executor exec"[9528] was attempted by "ci2-linux-6-1-kasan-arm64/syz-executor exec"[11265] [ 443.365037][T11265] loop6: detected capacity change from 0 to 164 [ 443.659466][T11265] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 443.896624][T11273] loop9: detected capacity change from 0 to 512 [ 443.938954][T11277] FAULT_INJECTION: forcing a failure. [ 443.938954][T11277] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 443.957676][T11277] CPU: 1 PID: 11277 Comm: syz.1.1868 Not tainted syzkaller #0 [ 443.958959][T11277] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 443.960922][T11277] Call trace: [ 443.961562][T11277] dump_backtrace+0x1c4/0x1f0 [ 443.962434][T11277] show_stack+0x2c/0x3c [ 443.963250][T11277] __dump_stack+0x30/0x40 [ 443.964081][T11277] dump_stack_lvl+0xf4/0x15c [ 443.964928][T11277] dump_stack+0x1c/0x5c [ 443.965713][T11277] should_fail_ex+0x3cc/0x524 [ 443.966600][T11277] should_fail+0x14/0x24 [ 443.967442][T11277] should_fail_usercopy+0x20/0x30 [ 443.968397][T11277] copy_from_bpfptr+0x84/0x1d8 [ 443.969245][T11277] __sys_bpf+0x1f8/0x660 [ 443.970027][T11277] __arm64_sys_bpf+0x80/0x98 [ 443.970876][T11277] invoke_syscall+0x98/0x290 [ 443.971844][T11277] el0_svc_common+0x13c/0x258 [ 443.972771][T11277] do_el0_svc+0x5c/0x134 [ 443.973607][T11277] el0_svc+0x58/0x128 [ 443.974371][T11277] el0t_64_sync_handler+0x84/0xf0 [ 443.975325][T11277] el0t_64_sync+0x18c/0x190 [ 444.038578][T11273] bond2: option mode: unable to set because the bond device is up [ 444.069067][T11273] device geneve2 entered promiscuous mode [ 444.072388][T11273] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 444.089751][ T4800] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 444.092411][T11283] FAULT_INJECTION: forcing a failure. [ 444.092411][T11283] name fail_futex, interval 1, probability 0, space 0, times 0 [ 444.094917][T11283] CPU: 1 PID: 11283 Comm: syz.3.1870 Not tainted syzkaller #0 [ 444.096287][T11283] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 444.098206][T11283] Call trace: [ 444.098909][T11283] dump_backtrace+0x1c4/0x1f0 [ 444.099672][T11273] bond2: (slave macvlan2): Enslaving as an active interface with an up link [ 444.099854][T11283] show_stack+0x2c/0x3c [ 444.099871][T11283] __dump_stack+0x30/0x40 [ 444.103175][T11283] dump_stack_lvl+0xf4/0x15c [ 444.104084][T11283] dump_stack+0x1c/0x5c [ 444.104862][T11283] should_fail_ex+0x3cc/0x524 [ 444.105761][T11283] should_fail+0x14/0x24 [ 444.106574][T11283] get_futex_key+0x904/0xfb0 [ 444.107448][T11283] futex_wake+0x10c/0x458 [ 444.108275][T11283] do_futex+0x2c4/0x340 [ 444.109031][T11283] __arm64_sys_futex+0x390/0x414 [ 444.109896][T11283] invoke_syscall+0x98/0x290 [ 444.110776][T11283] el0_svc_common+0x13c/0x258 [ 444.111659][T11283] do_el0_svc+0x5c/0x134 [ 444.112463][T11283] el0_svc+0x58/0x128 [ 444.113226][T11283] el0t_64_sync_handler+0x84/0xf0 [ 444.114194][T11283] el0t_64_sync+0x18c/0x190 [ 444.119581][T11285] netlink: 52 bytes leftover after parsing attributes in process `syz.9.1863'. [ 444.122175][T11285] netlink: 14 bytes leftover after parsing attributes in process `syz.9.1863'. [ 444.198664][ T7146] bond2: (slave macvlan2): link status up again after 0 ms [ 444.200185][ T7146] bond2: (slave macvlan2): failed to get link speed/duplex [ 444.209169][ T7354] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 444.260698][T11292] loop9: detected capacity change from 0 to 512 [ 444.408108][T11292] bond2: option mode: unable to set because the bond device has slaves [ 444.423518][T11293] bond2: (slave macvlan3): Error -98 calling set_mac_address [ 444.454605][T11299] loop3: detected capacity change from 0 to 8 [ 444.456340][T11296] netlink: 52 bytes leftover after parsing attributes in process `syz.9.1873'. [ 444.463076][T11292] netlink: 14 bytes leftover after parsing attributes in process `syz.9.1873'. [ 444.487234][ T11] bond2: (slave macvlan2): failed to get link speed/duplex [ 444.597224][ T7146] bond2: (slave macvlan2): failed to get link speed/duplex [ 444.633909][T11303] loop3: detected capacity change from 0 to 512 [ 444.717267][ T4800] bond2: (slave macvlan2): failed to get link speed/duplex [ 444.745069][T11303] bond1: option mode: unable to set because the bond device has slaves [ 444.767776][T11303] bond1: (slave macvlan3): Error -98 calling set_mac_address [ 444.866306][T11310] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1877'. [ 444.876466][T11312] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1877'. [ 444.898554][ T7146] bond2: (slave macvlan2): failed to get link speed/duplex [ 445.007180][ T7146] bond2: (slave macvlan2): failed to get link speed/duplex [ 445.117997][ T7146] bond2: (slave macvlan2): failed to get link speed/duplex [ 445.223612][T11319] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 445.230625][ T1620] bond2: (slave macvlan2): failed to get link speed/duplex [ 445.524246][T11317] FAULT_INJECTION: forcing a failure. [ 445.524246][T11317] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 445.545340][T11317] CPU: 1 PID: 11317 Comm: syz.3.1881 Not tainted syzkaller #0 [ 445.546660][T11317] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 445.548706][T11317] Call trace: [ 445.549404][T11317] dump_backtrace+0x1c4/0x1f0 [ 445.550368][T11317] show_stack+0x2c/0x3c [ 445.551222][T11317] __dump_stack+0x30/0x40 [ 445.552087][T11317] dump_stack_lvl+0xf4/0x15c [ 445.553019][T11317] dump_stack+0x1c/0x5c [ 445.553840][T11317] should_fail_ex+0x3cc/0x524 [ 445.554746][T11317] should_fail+0x14/0x24 [ 445.555626][T11317] should_fail_usercopy+0x20/0x30 [ 445.556616][T11317] copy_from_bpfptr+0x84/0x1d8 [ 445.557508][T11317] __sys_bpf+0x1f8/0x660 [ 445.558309][T11317] __arm64_sys_bpf+0x80/0x98 [ 445.559185][T11317] invoke_syscall+0x98/0x290 [ 445.560036][T11317] el0_svc_common+0x13c/0x258 [ 445.560888][T11317] do_el0_svc+0x5c/0x134 [ 445.561703][T11317] el0_svc+0x58/0x128 [ 445.562454][T11317] el0t_64_sync_handler+0x84/0xf0 [ 445.563397][T11317] el0t_64_sync+0x18c/0x190 [ 445.775099][T11327] set_capacity_and_notify: 1 callbacks suppressed [ 445.775109][T11327] loop6: detected capacity change from 0 to 512 [ 445.971491][T11327] bond3: option mode: unable to set because the bond device is up [ 445.976127][T11327] netlink: 52 bytes leftover after parsing attributes in process `syz.6.1883'. [ 445.979270][T11327] netlink: 14 bytes leftover after parsing attributes in process `syz.6.1883'. [ 446.433406][T11357] loop6: detected capacity change from 0 to 512 [ 446.510738][T11357] bond3: option mode: unable to set because the bond device is up [ 446.663554][T11369] loop9: detected capacity change from 0 to 512 [ 446.912055][T11369] bond2: option mode: unable to set because the bond device has slaves [ 446.920328][T11360] loop1: detected capacity change from 0 to 164 [ 446.923046][T11376] bond2: (slave macvlan3): Error -98 calling set_mac_address [ 446.931627][T11360] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 446.998160][T11383] loop6: detected capacity change from 0 to 128 [ 447.030873][T11386] loop3: detected capacity change from 0 to 512 [ 447.069270][T11383] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 447.083037][T11389] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 447.143567][T11392] loop9: detected capacity change from 0 to 512 [ 447.210090][T11386] bond1: option mode: unable to set because the bond device has slaves [ 447.232070][T11386] bond1: (slave macvlan3): Error -98 calling set_mac_address [ 447.272482][T11391] bond2: option mode: unable to set because the bond device has slaves [ 447.291477][T11391] bond2: (slave macvlan3): Error -98 calling set_mac_address [ 447.872095][ T9528] EXT4-fs (loop6): unmounting filesystem. [ 448.863998][T11433] loop2: detected capacity change from 0 to 512 [ 448.935584][T11433] bond1: option mode: unable to set because the bond device has slaves [ 448.958387][T11433] bond1: (slave macvlan3): Error -98 calling set_mac_address [ 449.019669][T11436] __nla_validate_parse: 8 callbacks suppressed [ 449.019687][T11436] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1918'. [ 449.023283][T11436] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1918'. [ 449.103049][T11435] loop9: detected capacity change from 0 to 8192 [ 449.137658][ T9690] net_ratelimit: 30 callbacks suppressed [ 449.137671][ T9690] bond2: (slave macvlan2): failed to get link speed/duplex [ 449.140357][T11435] loop9: p3 < > p4 [ 449.151861][T11435] loop9: p4 size 851974 extends beyond EOD, truncated [ 449.249766][ T11] bond2: (slave macvlan2): failed to get link speed/duplex [ 449.298620][ T3940] loop9: p3 < > p4 [ 449.302125][ T3940] loop9: p4 size 851974 extends beyond EOD, truncated [ 449.377311][ T7146] bond2: (slave macvlan2): failed to get link speed/duplex [ 449.487399][ T1620] bond2: (slave macvlan2): failed to get link speed/duplex [ 449.697314][ T1620] bond2: (slave macvlan2): failed to get link speed/duplex [ 449.807749][ T9690] bond2: (slave macvlan2): failed to get link speed/duplex [ 449.825336][T11462] ------------[ cut here ]------------ [ 449.826498][T11462] WARNING: CPU: 1 PID: 11462 at net/sched/sch_taprio.c:1022 taprio_get_start_time+0x13c/0x16c [ 449.828263][T11462] Modules linked in: [ 449.828978][T11462] CPU: 1 PID: 11462 Comm: syz.6.1930 Not tainted syzkaller #0 [ 449.830338][T11462] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 449.832355][T11462] pstate: 82400005 (Nzcv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 449.833868][T11462] pc : taprio_get_start_time+0x13c/0x16c [ 449.834981][T11462] lr : taprio_get_start_time+0x13c/0x16c [ 449.836072][T11462] sp : ffff800023a86c00 [ 449.836862][T11462] x29: ffff800023a86c00 x28: 00000000f8f8f8f8 x27: dfff800000000000 [ 449.838366][T11462] x26: 0000000000000000 x25: ffff0000f63cb400 x24: dfff800000000000 [ 449.840091][T11462] x23: 0000000000000001 x22: 00000068bb3ee54f x21: 0000000000000000 [ 449.841750][T11462] x20: 0000000000000000 x19: ffff800023a86cf8 x18: 0000000000000000 [ 449.843283][T11462] x17: 00000000ffff0000 x16: ffff8000082dd284 x15: 000000000004ffff [ 449.844716][T11462] x14: 0000000000000001 x13: 1ffff00002a78071 x12: 0000000000080000 [ 449.846091][T11462] x11: 0000000000002c78 x10: ffff80002231a000 x9 : ffff8000101d958c [ 449.847523][T11462] x8 : 0000000000002c79 x7 : ffff8000101d94e4 x6 : 0000000000000000 [ 449.848963][T11462] x5 : 0000000000000080 x4 : 0000000000000001 x3 : 0000000000000000 [ 449.850488][T11462] x2 : 0000000000000002 x1 : 0000000000000000 x0 : 0000000000000000 [ 449.851990][T11462] Call trace: [ 449.852586][T11462] taprio_get_start_time+0x13c/0x16c [ 449.853579][T11462] taprio_change+0x3940/0x4ef8 [ 449.854478][T11462] taprio_init+0x4ac/0x53c [ 449.855298][T11462] qdisc_create+0x704/0xe48 [ 449.856138][T11462] tc_modify_qdisc+0x96c/0x1814 [ 449.857006][T11462] rtnetlink_rcv_msg+0x694/0xcc4 [ 449.857885][T11462] netlink_rcv_skb+0x220/0x3ec [ 449.858738][T11462] rtnetlink_rcv+0x28/0x38 [ 449.859523][T11462] netlink_unicast+0x5fc/0x80c [ 449.860351][T11462] netlink_sendmsg+0x6f0/0x9d8 [ 449.861213][T11462] ____sys_sendmsg+0x588/0x90c [ 449.862035][T11462] __sys_sendmsg+0x288/0x374 [ 449.862863][T11462] __arm64_sys_sendmsg+0x80/0x94 [ 449.863746][T11462] invoke_syscall+0x98/0x290 [ 449.864564][T11462] el0_svc_common+0x13c/0x258 [ 449.865439][T11462] do_el0_svc+0x5c/0x134 [ 449.866223][T11462] el0_svc+0x58/0x128 [ 449.866947][T11462] el0t_64_sync_handler+0x84/0xf0 [ 449.867855][T11462] el0t_64_sync+0x18c/0x190 [ 449.868676][T11462] irq event stamp: 507 [ 449.869418][T11462] hardirqs last enabled at (506): [] ktime_mono_to_any+0x14c/0x228 [ 449.871105][T11462] hardirqs last disabled at (507): [] el1_dbg+0x24/0x80 [ 449.872650][T11462] softirqs last enabled at (482): [] local_bh_enable+0x10/0x34 [ 449.874407][T11462] softirqs last disabled at (498): [] taprio_change+0x37d8/0x4ef8 [ 449.876187][T11462] ---[ end trace 0000000000000000 ]--- [ 449.938911][T11464] loop2: detected capacity change from 0 to 8192 [ 450.312321][T11464] loop2: p3 < > p4 [ 450.313829][T11464] loop2: p4 size 851974 extends beyond EOD, truncated [ 450.323961][ T3940] loop2: p3 < > p4 [ 450.325654][ T3940] loop2: p4 size 851974 extends beyond EOD, truncated [ 450.447866][ T7146] bond2: (slave macvlan2): failed to get link speed/duplex [ 450.597740][ T11] bond2: (slave macvlan2): failed to get link speed/duplex [ 450.707821][ T11] bond2: (slave macvlan2): failed to get link speed/duplex [ 450.817186][ T11] bond2: (slave macvlan2): failed to get link speed/duplex [ 454.157570][ T4800] net_ratelimit: 28 callbacks suppressed [ 454.157581][ T4800] bond2: (slave macvlan2): failed to get link speed/duplex [ 454.279702][ T4800] bond2: (slave macvlan2): failed to get link speed/duplex [ 454.404966][ T4800] bond2: (slave macvlan2): failed to get link speed/duplex [ 454.517203][ T4800] bond2: (slave macvlan2): failed to get link speed/duplex [ 454.639994][ T4800] bond2: (slave macvlan2): failed to get link speed/duplex [ 454.759987][ T9189] bond2: (slave macvlan2): failed to get link speed/duplex [ 454.880433][ T9189] bond2: (slave macvlan2): failed to get link speed/duplex [ 454.997176][ T5902] bond2: (slave macvlan2): failed to get link speed/duplex [ 455.120578][ T9189] bond2: (slave macvlan2): failed to get link speed/duplex [ 455.227163][ T11] bond2: (slave macvlan2): failed to get link speed/duplex [ 459.227172][ T4800] net_ratelimit: 33 callbacks suppressed [ 459.227193][ T4800] bond2: (slave macvlan2): failed to get link speed/duplex [ 459.337769][ T4800] bond2: (slave macvlan2): failed to get link speed/duplex [ 459.457769][ T7146] bond2: (slave macvlan2): failed to get link speed/duplex [ 459.580535][ T7146] bond2: (slave macvlan2): failed to get link speed/duplex [ 459.700078][ T7146] bond2: (slave macvlan2): failed to get link speed/duplex [ 459.820188][ T7146] bond2: (slave macvlan2): failed to get link speed/duplex