last executing test programs: 1m55.391570234s ago: executing program 1 (id=41): r0 = socket(0x15, 0x5, 0x0) getsockopt(r0, 0x200000000114, 0x2713, 0x0, &(0x7f0000000000)) 1m55.341988382s ago: executing program 1 (id=42): r0 = socket$inet6(0xa, 0x80003, 0x6) syz_mount_image$fuse(0x0, &(0x7f00000001c0)='./file0\x00', 0x2882026, 0x0, 0x1, 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100), 0x2000080, &(0x7f0000000440)=ANY=[@ANYBLOB='noswap,mpol=interleave']) syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000180)='./file0\x00', 0x400a8, &(0x7f0000000440)=ANY=[], 0x1, 0x0, 0x0) r1 = syz_open_dev$video(&(0x7f0000000040), 0xffffffff, 0x0) ioctl$VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f00000002c0)={0x1, @pix={0x300, 0x0, 0x50565559, 0x0, 0x0, 0x0, 0x6, 0xfeedcafe, 0x3, 0x0, 0x0, 0x5}}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_netprio_ifpriomap(r2, &(0x7f0000000080), 0x2, 0x0) sendfile(r3, r3, 0x0, 0xc) getsockopt$inet6_mreq(r0, 0x29, 0x1, 0x0, &(0x7f0000000480)) 1m55.341398987s ago: executing program 1 (id=43): r0 = socket$inet6(0xa, 0x80003, 0x6) getsockopt$inet6_mreq(r0, 0x29, 0x1, 0x0, &(0x7f0000000480)) 1m55.340077096s ago: executing program 1 (id=44): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='./file2\x00', 0x2800000, &(0x7f00000002c0)={[{@init_itable_val={'init_itable', 0x3d, 0xff}}, {@jqfmt_vfsv0}, {@inlinecrypt}, {@errors_remount}, {@test_dummy_encryption_v1}, {@jqfmt_vfsv1}, {@delalloc}, {@nogrpid}, {@minixdf}]}, 0x1, 0xbdb, &(0x7f0000001000)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) setrlimit(0x0, &(0x7f00000000c0)={0x28, 0xfffffffffffffffd}) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) set_mempolicy(0x3, &(0x7f0000000480)=0x3d, 0x2) r3 = socket$inet(0x2, 0x802, 0x1) connect$inet(r3, &(0x7f0000002780)={0x2, 0x4e22, @remote}, 0x10) setsockopt$inet_int(r3, 0x0, 0x14, &(0x7f0000000140)=0x80000001, 0x4) write(r3, &(0x7f0000000000)="08001800000020a3", 0x8) recvmmsg(r3, &(0x7f00000007c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=""/169, 0xa9}, 0xffff}], 0x1, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) mlock(&(0x7f0000c00000/0x400000)=nil, 0x400000) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) execve(&(0x7f0000000080)='./file3\x00', 0x0, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'veth0_macvtap\x00', 0x0}) fsetxattr$security_smack_transmute(r4, &(0x7f0000000180), &(0x7f00000003c0), 0x4, 0x2) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x3c, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x3, 0x3}}}]}, 0x3c}}, 0x20000000) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000c00)=@deltfilter={0x144, 0x2d, 0x200, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0x0, 0x8}, {0x0, 0x5}, {0xd, 0x9}}, [@TCA_RATE={0x6, 0x5, {0x1, 0x3}}, @filter_kind_options=@f_route={{0xa}, {0x1c, 0x2, [@TCA_ROUTE4_CLASSID={0x8, 0x1, {0xe, 0xfff1}}, @TCA_ROUTE4_TO={0x8, 0x2, 0x62}, @TCA_ROUTE4_IIF={0x8, 0x4, r5}]}}, @filter_kind_options=@f_basic={{0xa}, {0xdc, 0x2, [@TCA_BASIC_EMATCHES={0x1c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xfff7}}, @TCA_EMATCH_TREE_LIST={0x0, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x0, 0x1, 0x0, 0x0, {{0xb7, 0x2, 0x7fff}, {0xba, 0x0, 0x2, "6130a8b9ce43780b119d"}}}, @TCF_EM_IPSET={0x0, 0x1, 0x0, 0x0, {{0x2, 0x8, 0x7}, {0x0, 0x5, 0x1}}}, @TCF_EM_IPT={0x0, 0x1, 0x0, 0x0, {{0x13, 0x9, 0x8e8}, [@TCA_EM_IPT_HOOK]}}, @TCF_EM_NBYTE={0x0, 0x2, 0x0, 0x0, {{0x2, 0x2, 0x10b}, {0x1, 0x0, 0x0, "a4efc08c35"}}}, @TCF_EM_NBYTE={0x0, 0x2, 0x0, 0x0, {{0x3, 0x2, 0xff}, {0xf44, 0x0, 0x1, "d1"}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x4}}]}, @TCA_BASIC_ACT={0xbc, 0x3, [@m_ct={0xb8, 0x1a, 0x0, 0x0, {{0x7}, {0x64, 0x2, 0x0, 0x1, [@TCA_CT_NAT_PORT_MIN={0xfffffe3c, 0xd, 0x4e24}, @TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @loopback}, @TCA_CT_NAT_PORT_MAX={0x6, 0xe, 0x4e24}, @TCA_CT_PARMS={0x18, 0x1, {0x8, 0x0, 0x5, 0xfffffffb, 0x3}}, @TCA_CT_MARK_MASK={0x8, 0x6, 0x7}, @TCA_CT_NAT_IPV4_MIN={0x0, 0x9, @dev={0xac, 0x14, 0x14, 0x2c}}, @TCA_CT_ACTION={0x6, 0x3, 0x2}]}, {0x30, 0x6, "b2ef5d31ff0826f40b59faa1c5edbda214d07d046ec49c023c59101f38094be0c2beb1aa3be9233405a895d4"}, {0x4e, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1}}}}]}]}}, @TCA_CHAIN={0x8, 0xb, 0x8}]}, 0x144}, 0x1, 0x0, 0x0, 0x40001}, 0x10) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file3\x00', 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x1040f, &(0x7f0000000100)={[{@nogrpid}, {@noload}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@debug}, {@nombcache}, {@quota}, {@nobh}], [{@measure}, {@dont_measure}]}, 0x3, 0x442, &(0x7f0000000780)="$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") 1m54.93726869s ago: executing program 1 (id=47): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) mprotect(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x8) setsockopt$sock_int(r1, 0x1, 0x21, &(0x7f0000000040), 0x4) r2 = memfd_create(&(0x7f0000000340)='a\x00'/14, 0x1) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fcntl$setownex(r2, 0xf, 0x0) sendmsg$netlink(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2800000010000100000000000000000085ff090045000000000000000000000008001c00c9", @ANYRES8=r0], 0x28}], 0x1, 0x0, 0x52, 0x2000011}, 0x8080) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r3, 0x4b6a, 0x0) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r6 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r6, 0x65, 0x1, &(0x7f0000000000)=[{{0x0, 0x0, 0x0, 0x1}, {0x1fffffff, 0x0, 0x1, 0x1}}], 0x8) bind$can_raw(r6, &(0x7f0000000100), 0x10) r7 = syz_open_procfs(0x0, &(0x7f0000000040)='net\x00') r8 = openat(r7, &(0x7f0000000080)='can/rcvlist_eff\x00', 0x0, 0x0) read(r8, &(0x7f0000000300), 0x1000) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) sendmsg$DEVLINK_CMD_RATE_NEW(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r5, 0x1, 0x9, 0x25dfdbff, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x24004804) madvise(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2) 1m52.303132318s ago: executing program 1 (id=60): ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) ioctl$DRM_IOCTL_SG_ALLOC(r0, 0xc0106438, &(0x7f0000000040)) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP(r1, 0x3b85, &(0x7f0000000400)={0x28, 0x6, r2, 0x0, &(0x7f0000000d40)='L', 0xfffffffffffffe9e, 0x56149215}) capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x803, 0x4, 0x7}) bpf$BPF_PROG_QUERY(0x10, 0x0, 0xfffffffffffffda9) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(twofish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000080)="b7f2288d3aaea20000def1260a0000000000000000000000000000000000000060a9f75569ef1580fe53acb8de1287", 0x20) 1m52.25935604s ago: executing program 32 (id=60): ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) ioctl$DRM_IOCTL_SG_ALLOC(r0, 0xc0106438, &(0x7f0000000040)) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP(r1, 0x3b85, &(0x7f0000000400)={0x28, 0x6, r2, 0x0, &(0x7f0000000d40)='L', 0xfffffffffffffe9e, 0x56149215}) capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x803, 0x4, 0x7}) bpf$BPF_PROG_QUERY(0x10, 0x0, 0xfffffffffffffda9) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(twofish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000080)="b7f2288d3aaea20000def1260a0000000000000000000000000000000000000060a9f75569ef1580fe53acb8de1287", 0x20) 1m43.317001624s ago: executing program 3 (id=164): mount(0x0, &(0x7f0000000140)='./sys_mnt\x00', 0x0, 0x0, 0x0) r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) connect$can_bcm(r0, &(0x7f00000000c0)={0x1d, r1}, 0x10) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000000)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="020300000f0000000000000000000000010018000000000005000600000000000a00000000000000fc0200000700000000000000000000000000000000000000020001000000000000000280ff00000005000500000000000a"], 0x78}, 0x1, 0x7}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="0100000003ece1e40ad8871461ab0800", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="3bf81bb9f9"], 0x20000600}, 0x1, 0x0, 0x0, 0x40000}, 0x1) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r4, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd60ff00f598e740ac789b2bbb000000000000000000000034fe8000000000000000000000000000aa00024e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="60c2ffff9078000004020000"], 0x0) unshare(0x8040480) syz_read_part_table(0x1077, &(0x7f0000001080)="$eJzs0L1NA0EQBtDvuLXXBgJCyqAIJCTIoBZit0BMTVAGRSCEBp3vDDQATt4LVvOj2R1tOKpWu5Y8Ju/1dnoojtvazdHtOjk/VJO8bqaoJyfJR81Sw76/TVbTkZfneWBpb/YT1T+rJ0/JsNxXQ1rurx/u1r/2uTzrP0lVrXKR3LTvzaYHxtS45Fd/8ikAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8M++AgAA//8k1iLE") sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40ff"], 0x84}, 0x1, 0x0, 0x0, 0x200280d0}, 0x40) sendmsg$can_bcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[], 0x4640}, 0x2}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) ioctl(0xffffffffffffffff, 0xc138fd03, &(0x7f0000000000)="04000000000000000000000038010000000000000000000000000000000000000000000000000000000000000000000074") r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) r7 = dup3(r6, r5, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000180)=[@exit_looper], 0x0, 0x0, 0x0}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_PROBE_CLIENT(r7, &(0x7f0000000540)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000500)={&(0x7f00000005c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="000425bd7000fcdbdf25540000000c00990010000000330000000a00060008021100000100000a00060008021100000000000a000600ffffffffffff00000a000600085800000000000000000600080211000100000099ab55d461a320ff4a5ab9b720f25a3e57c433f72b1b02cb84856ac996b3ac749cb591ad6d9f817ea6cc1df294c6699765add53367fc25161196160712ff739a1148a64eece1ff1ae7bd676f99c071b489ff98d60e679db42a234fbc9b13ea4e5132a206aae8042c3463f86bd872ed853bd5a8"], 0x5c}, 0x1, 0x0, 0x0, 0x48802}, 0x20000040) ioctl(0xffffffffffffffff, 0xc138fd09, &(0x7f0000000000)="0400000000000000000000007e0100003801000001") ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000100)={0x80000000, "18dcc3093882bf10a4c5218e2fb01a56571ea531decf1209aab0ea7a028b6c48", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, &(0x7f0000000180)={"c503d957fc9c514fc883a7dc9d8a690ee56d1c3a1cf3eed7e3743702b6a6e24d", r9}) 1m40.152264431s ago: executing program 3 (id=183): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xe, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b702000000000080bfa300000000000007030000fffeffff7a0af0fff8ffff1971a4f0ff00000000b7050000080000001e2400000000000045040400010000001704000001000a00b7040000000100006a0af2fe00000000850000001a000000b70000000000000095"], &(0x7f0000000040)='GPL\x00', 0xc, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x7fffffff}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x10, 0x20000227, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, 0xfff3}, 0x54) 1m39.84319795s ago: executing program 3 (id=185): rt_sigprocmask(0x2, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbee7, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000003900), 0x34aa945a513d639, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) ftruncate(0xffffffffffffffff, 0x800) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40"], 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[], 0xa4}, 0x1, 0x0, 0x0, 0x4d9fa924cd605e73}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x122}, 0x1, 0x0, 0x0, 0x240000c1}, 0x0) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)=0x0) clock_gettime(0x0, &(0x7f00000000c0)) timer_settime(r5, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 1m38.736839053s ago: executing program 3 (id=190): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000440)={0xa, 0x4e21, 0x0, @empty, 0x4}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x28) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000340)=@ccm_128={{0x304}, "1f5fe89b3e65d0fd", "313a19ff4c7d278bf34b54168b154d15", "1e5a7ddb", "2fd978cbd6bf3b5d"}, 0x28) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r1, 0x4b33, 0xffffffffffffffff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.net/syz1\x00', 0x1ff) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5c0000000206050000000000000000000000000005000400000000000900020073797a30000000001400078008000840000028590800064000000000050005000000400005000100060000000d000300686173683a6d6163"], 0x5c}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000300)=ANY=[@ANYBLOB="54000000090601020000000000000000010000050900020073797a30000000000500010007000000080009400000000124000880100007800a0011000180c2000000000010"], 0x54}, 0x1, 0x0, 0x0, 0x8000}, 0x44000) setsockopt$inet6_tcp_int(r0, 0x11a, 0x5, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000580)=@nat={'nat\x00', 0x1b, 0x5, 0x400, 0x0, 0x1b8, 0xffffffff, 0x2c0, 0x0, 0x368, 0x368, 0xffffffff, 0x368, 0x368, 0x5, &(0x7f00000003c0), {[{{@uncond, 0x0, 0xb8, 0x100, 0x0, {}, [@common=@socket0={{0x20}}, @common=@icmp={{0x28}, {0x11, "0edc"}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x12, @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, @ipv6=@mcast1, @gre_key=0x4, @gre_key=0x3}}}, {{@ip={@broadcast, @rand_addr=0x64010102, 0xff, 0xff000000, 'veth1\x00', 'veth1_virt_wifi\x00', {0xff}, {0xff}, 0x33, 0x3, 0x8}, 0x0, 0x70, 0xb8}, @unspec=@DNAT1={0x48, 'DNAT\x00', 0x1, {0x2, @ipv4=@empty, @ipv4=@private=0xa010102, @icmp_id=0x67, @port=0x4e24}}}, {{@uncond, 0x0, 0xd0, 0x108, 0x0, {}, [@common=@addrtype={{0x30}, {0x200}}, @common=@addrtype={{0x30}, {0x110, 0x31e, 0x1}}]}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0x4, @broadcast, @multicast1, @port=0x4e24, @port=0x4e23}}}}, {{@ip={@multicast1, @local, 0x0, 0xff000000, 'gre0\x00', 'syzkaller1\x00', {0xff}, {}, 0x32, 0x3, 0x1}, 0x0, 0x70, 0xa8}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0x3, @rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x1, 0x0}, @gre_key, @icmp_id=0x67}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x460) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./dev/mapper/control\x00', 0x0, 0x0) io_setup(0x239f, &(0x7f0000000380)=0x0) r6 = eventfd2(0x8001, 0x0) r7 = userfaultfd(0x801) ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x298}) ioctl$UFFDIO_REGISTER(r7, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r7, 0xc028aa03, &(0x7f0000000040)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00005cf000/0x4000)=nil, 0x400000, 0x2, 0x2}) syz_clone(0x2000, 0x0, 0x0, 0x0, 0x0, 0x0) r8 = getpid() process_vm_readv(r8, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) io_submit(r5, 0x2, &(0x7f0000000180)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x6, r6, 0x0, 0x300, 0x800002, 0x0, 0x0, r6}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x7, 0x9841, r6, &(0x7f0000000080)="e2", 0x36, 0x5, 0x0, 0x1, r6}]) syz_open_pts(0xffffffffffffffff, 0x20000) ioctl(r4, 0xc138fd03, &(0x7f0000000000)="04000000000000000000000038010000000000000000000000000000000000000000000000000000000000000000000074") 1m38.459412468s ago: executing program 3 (id=198): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001400)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x7}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x8400}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, "1d"}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xc4}, 0x1, 0x0, 0x0, 0x20000841}, 0x0) 1m36.958695822s ago: executing program 3 (id=205): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, 0x0, &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_smc(0x2b, 0x1, 0x0) socket(0x2, 0x80805, 0x0) 1m36.850976063s ago: executing program 33 (id=205): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, 0x0, &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_smc(0x2b, 0x1, 0x0) socket(0x2, 0x80805, 0x0) 5.354451851s ago: executing program 4 (id=640): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000300)='/proc/stat\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) r1 = socket$can_raw(0x1d, 0x3, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) r4 = socket$inet(0xa, 0x801, 0x84) getsockopt$IPT_SO_GET_INFO(r4, 0x29, 0x40, &(0x7f00000000c0)={'mangle\x00', 0x0, [0x8, 0x0, 0x7, 0x4, 0x9]}, &(0x7f0000000200)=0x54) bind$can_j1939(r2, &(0x7f0000000180)={0x1d, r3, 0x40001, {0x2, 0x0, 0x6}, 0x1}, 0x18) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r2, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x4048081) fcntl$setlease(r2, 0x400, 0x1) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mdstat\x00', 0x0, 0x0) io_setup(0x3, &(0x7f0000000140)=0x0) io_submit(r6, 0x1, &(0x7f0000000a40)=[&(0x7f0000000840)={0x0, 0x0, 0x0, 0x5, 0x0, r5, 0x0}]) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x6, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x1}}}, &(0x7f0000000300)=0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) r9 = syz_open_dev$vim2m(&(0x7f0000000680), 0x8, 0x2) ioctl$VIDIOC_S_STD(r9, 0x40085618, &(0x7f0000000000)=0x20) openat$cgroup_ro(r0, &(0x7f0000000000)='memory.swap.current\x00', 0x0, 0x0) r10 = dup(r8) syz_ublk_setup_queues(r10, r7, &(0x7f0000000180)={0x0, 0xfffffffd, 0x0, 0x1, 0x1f4}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x800, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c85, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x4003ffff, 0x338}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x80000, 0x1, 0xffffffff, 0x0, r1}}], 0x1, 0x0, 0x0) 5.162604086s ago: executing program 0 (id=644): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) socket(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x36, &(0x7f00000000c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x38}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @empty}, {{0xfffc, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x0, 0xd}}}}}}, 0x0) r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)="711f66", 0x3}, 0x1, 0x0, 0x0, 0x20004040}, 0x4044014) socket(0x40000000015, 0x5, 0x0) socket$packet(0x11, 0x2, 0x300) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) 4.980744127s ago: executing program 4 (id=648): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000b, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000600)=ANY=[@ANYBLOB="1c000000430001002dbd7000ffdbdf25e4ffffff04000100"], 0x1c}, 0x1, 0x0, 0x0, 0x4000004}, 0x14004040) socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001700)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffffff00"/28], 0x50) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={r4, 0x2000000, 0xfe7f, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x7ffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 4.252542431s ago: executing program 0 (id=655): socket$nl_route(0x10, 0x3, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') (async) exit(0xbfc0035) read$FUSE(r0, 0x0, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000040), 0x8002) write$binfmt_aout(r1, &(0x7f0000000380)=ANY=[@ANYBLOB="03070000b5"], 0xc8) (async) write$binfmt_aout(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="03010000b5"], 0xc8) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) (async) r3 = getpid() sched_setscheduler(r3, 0x5, &(0x7f0000000200)=0x3) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeed, 0x8031, r1, 0x0) (async) mremap(&(0x7f0000097000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f0000bff000/0x400000)=nil) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, 0x0) (async) sendmmsg$sock(r4, 0x0, 0x0, 0x4040040) (async) mremap(&(0x7f000033a000/0x3000)=nil, 0x3000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) (async) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xfc778000) (async) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) mount$9p_rdma(&(0x7f00000000c0), 0x0, 0x0, 0x10000, &(0x7f0000000440)=ANY=[]) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000240)=ANY=[@ANYRES32, @ANYRES32=r6, @ANYBLOB="060000003c000000", @ANYRES32=r6, @ANYBLOB="d73b2ada0ac8bb5e4fe85863fe80bb14e841a0d62eca0f6784c18d8de300d4b1d3aef2969cf4f1e7c7d4f4810f9d3e9ddf6301e689feb2e6eb622679a93488b23488b1edaa20284aaa395effdfd1e8ff8f32aae5ff9b82762a066798a21918f287e7d065e5b5b03c634a16d1f5fe3d855df09014bbd96fe78874811b7275cd6092b640f109f770c2b50ce3ee0d4c", @ANYRES32, @ANYRES64=0x0], 0x20) (async) splice(r2, &(0x7f0000000040)=0x7, r4, &(0x7f0000000080)=0x101, 0x0, 0x9) 3.222901144s ago: executing program 5 (id=661): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001400)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x7}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, "1d"}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xc4}, 0x1, 0x100000000000000, 0x0, 0x20000841}, 0x0) 3.1523227s ago: executing program 5 (id=662): mount(0x0, &(0x7f0000000140)='./sys_mnt\x00', 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./dev/mapper/control\x00', 0x0, 0x0) ioctl(r0, 0xc138fd03, &(0x7f0000000000)="04000000000000000000000038010000000000000000000000000000000000000000000000000000000000000000000074") ioctl(r0, 0xc138fd09, &(0x7f0000000000)="0400000000000000010000007e0100003801000001") 3.038203805s ago: executing program 5 (id=663): ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000003c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x6}}, './file1\x00'}) ioctl$XFS_IOC_START_COMMIT(0xffffffffffffffff, 0x80585882, &(0x7f0000000440)) syz_open_dev$vim2m(0x0, 0x800, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r2, 0x3b82, &(0x7f0000000000)={0x18, 0x0, 0x1, 0x0, &(0x7f0000000140)=[{0x9, 0x4e16}]}) ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, &(0x7f0000000380)={0x28, 0x6, 0x0, 0x0, &(0x7f00002c0000/0x4000)=nil, 0x4000, 0x10}) sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) ioctl$RTC_PIE_OFF(r0, 0x7006) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) ioctl$NILFS_IOCTL_GET_BDESCS(r2, 0xc0186e87, &(0x7f0000000580)={&(0x7f0000000540)=[{0x7, 0xf7, 0x400, 0x9, 0x8}], 0x1, 0x28, 0x5, 0x8000000000000001}) r5 = landlock_create_ruleset(&(0x7f0000000180)={0x0, 0x3, 0x1, 0x0, 0x2}, 0x30, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x0, 0x0) mmap(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xc, 0x6c033, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r5, 0xc0096616, &(0x7f00000002c0)) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="010000002000010000000000000000000a00204000000007000000001400110076657468305f746f5f627269646765001400030076657468315f766c616e00000000000014000200fe800000000000000000000000000017"], 0x58}, 0x1, 0x0, 0x0, 0x24040804}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00'], 0x5c}}, 0x0) setxattr$system_posix_acl(&(0x7f0000000300)='./file1\x00', &(0x7f0000000400)='system.posix_acl_default\x00', 0x0, 0x0, 0x2) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) 2.626899939s ago: executing program 4 (id=665): socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_smc(0x2b, 0x1, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000004c0)="0000000000aa303e97380e90231bdbdaf6a4bd866226b7cdb7c26858c4e4fd703be2f51ed6ddc4a47116ec2db75c7042a22491af0ffea4174a9de3350c0a498396b28c7d1784d04aa38922721cb7816094cb82950fd012efd26d", 0x5a}, {&(0x7f0000000900)="0f198d5aa5caa1c55b84b414797cbdd4e8c576a921a070fc828060506683fd1106a961ac55b5b8ea3342ca7de5559ca2c14e05e42aed8ba14b2c78cb540f71a817d80fbf1945a046ebda494a8048a106a4d49d7f214735ada53397db3b203885ce39ee48d69465935eade21ce36e61826c52c82f038341d9bab5687c740ed3c18897094e7e1391eb84a4052e03c0c7c39ae86d454938f65e284620b99481c33d9f5e5b7a6c0d7548723f55b213c76be37f40c850c38e265758ebd8238257a146d6eced16fd658a784c928fea7a841db1a7fd6520442dae5fc0d3a3d3a5f16fcf6fe4f062ecdad7d0f3c6cd339339533c0ef28ad1e2729907094c3de93c1b1b00ad6df89507000000fb7565d3a8e9eaea020ed173c2179fb03e0944460989240a689c7fe795d310be4e7a6b778a903280dbf426b39c3603c49049980767e31edb997f59785184cbd7b9070400000073c745f71db0906cb51780f908fa61634af8ac85d9f04f3dff0a948e81cd3229a59aaeb00995358155343e3239588a0383e4df109d5ca24276d0d83a27d0e9bf681c1bbea12a6f3c20ad50f63430333bb327eb6ae32fe8809065bce26d2dc2fbb2b48d404637d61fd86852e0e1b6ccc6f75b1107aaa5f60ef45f94e953b3f213c3cb4ca4c716565078c666f84e1a99bb4cb5c7190648132f6ff1f6cb79b93f20752753c938da6241607a742361d995188b23cb4b8269e98e822585695962620673433748e476f7cc3e37db88639c525ff3a502c82c283b00aecfe7734ab369e1ed7c75e27a5a333641817baa3ea37844e20e6266c5095abf9d47ca5f8ad93f1a4d8795daec222ada00d65cf91425fae7939ceaa8d94ec1ab5082e1d251c27b3132119b350e81771f3733be232ffb90c03a818bf458aac3314007c3e35d5e4bed6b897608b01e7e26a54433e5f5c74a2ee3c2fc50067be05a677f122b7dba7010830b879a41b579d44158fb89ea05761d2d369853bea84dfb8081ed7b891dcb3bb3361534fdc5252e4964aed936ad2838e7af14fc65c7c1c6d44c6256f2462ae83cfd6a6b2651da607fe79d345e5080098e9e6e7482cc5c267e00d8d09dcde70b60fe6220fe9530547201664db91cf1885ecc2f106b66cd99131523c99f6102ddd7403791b3a7ac59b256cc4c938fe01740ae4f19b5204ca305b1666b0c2a7e5015d6d530995843adfbac3954306d4cd82257d4d2c3283d45dbae43548fed9879328f114f7c8238ac955391b24614d91be1701ae07c170a9c299fcf3d0ac4cea07e88fbf66b697883af17a06ac3f9954eb2fbd20f101802cd023fc48c5d464c16059cc9dce8558c5322ac7612db0e2725427628c2c41a21f0d2f3962e32f710bf9e216ff1694e8d88c8a81328744b36d9ef9f08c0ea3ccd4f8729e2f00a048162834a95", 0x3f1}, {&(0x7f00000003c0)="128b9306006d4810e5ac5040ad9201847839fc378469d5765b9cc241840896c1498194a7197b45d74a8532b82037b02c9e6045c361eb", 0x36}], 0x3}, 0x0) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000180), 0xc0802, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_route(0x10, 0x3, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x21) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0xd0, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xa, 0x80000006, 0x400}, 0x0, 0x0) 2.515304558s ago: executing program 0 (id=666): sendto$packet(0xffffffffffffffff, &(0x7f0000000040)="18", 0x48, 0x20008884, &(0x7f0000000080)={0x11, 0xd, 0x0, 0x1, 0xfd, 0x6, @multicast}, 0x14) bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(twofish)\x00'}, 0x58) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000080)="b7f2288d3aaea20000def1260a0000000000000000000000000000000000000060a9f75569ef1580fe53acb8de1287", 0x20) 2.471825294s ago: executing program 0 (id=667): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./dev/mapper/control\x00', 0x0, 0x0) ioctl(r0, 0xc138fd03, &(0x7f0000000000)="04000000000000000000000038010000000000000000000000000000000000000000000000000000000000000000000074") ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, &(0x7f0000000000)={"cb02a6be95eab5700900a190c6d8cb00fc18137f1caf3e48018b251f7320a0e8"}) ioctl(r0, 0xc138fd09, &(0x7f0000000000)="0400000000000000000000007e0100003801000001") 2.327387864s ago: executing program 0 (id=669): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) getpid() sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x101}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = landlock_create_ruleset(&(0x7f00000001c0)={0xa019, 0x1, 0x3, 0x0, 0x0, 0x2}, 0x30, 0x0) landlock_restrict_self(r5, 0x1) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r6, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r6, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x2, &(0x7f0000000000)=@ccm_128={{0x303}, "0600", "a9df7ccf060089d5de4d4f2c3e000009"}, 0x28) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x1, &(0x7f0000000080)=@ccm_128={{0x303}, "f64e40992f79ecf0", "53c272d8b763f690b35605dff8a4a8d2", '\x00', "72392a24199b5903"}, 0x28) writev(r6, &(0x7f00000000c0)=[{&(0x7f0000000140)="c800", 0x2}], 0x1) 2.326864941s ago: executing program 6 (id=670): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x4000011) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) openat$tun(0xffffffffffffff9c, 0x0, 0x42902, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) madvise(&(0x7f00007bd000/0x1000)=nil, 0x1000, 0x14) 2.169961908s ago: executing program 2 (id=671): setregid(0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ed) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/devices/system/cpu/cpu1/online\x00', 0x2, 0x0) pwrite64(r0, &(0x7f00000001c0)='n', 0x1, 0xb) 1.189455201s ago: executing program 0 (id=672): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=@newqdisc={0x24, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r2, {0xfff2, 0xa}, {0xffff, 0xffff}, {0xd, 0x4}}}, 0x24}}, 0x4080000) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/power/state\x00', 0x0, 0x0) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000040)='./sys/power/state\x00', &(0x7f0000000080)=ANY=[@ANYBLOB="28000000020000003449b8bffa20f90f733f67f580da5bcdfeffffff9cb8d5c6d1e95041916f40f5b5797f4605000000"], &(0x7f0000000140), 0x600) write(r3, &(0x7f00000000c0)="63050000000087d5f0cf66d78174faccded9cdcb981b4200360c7e5f5b2fba8ecffd403fecbb47e1a4cfcfdc3b7dda2e3a94af95655d65f80cf01c0cbdc15a654909162dfa14", 0x46) close(r3) r4 = openat(r3, &(0x7f0000000600)='./sys/power/mem_sleep\x00', 0x1, 0x1a2) write(r4, &(0x7f0000000700)='s2idle\n\x00', 0x7) truncate(&(0x7f0000000180)='./sys/power/state\x00', 0x6) close(r4) r5 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./sys/power/state\x00', 0x1, 0x0) write(r5, &(0x7f0000000900)='mem\n\x00', 0x4) close(r5) 1.185349576s ago: executing program 5 (id=673): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='vcan0\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) (fail_nth: 2) 1.06035885s ago: executing program 4 (id=674): mount(0x0, &(0x7f0000000140)='./sys_mnt\x00', 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./dev/mapper/control\x00', 0x0, 0x0) ioctl(r0, 0xc138fd03, &(0x7f0000000000)="04000000000000000000000038010000000000000000000000000000000000000000000000000000000000000000000074") ioctl(r0, 0xc138fd09, &(0x7f0000000000)="0400000000000000080000007e0100003801000001") 1.007420871s ago: executing program 5 (id=675): bind$netlink(0xffffffffffffffff, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$netlink(0x10, 0x3, 0xa) r2 = socket$unix(0x1, 0x0, 0x0) writev(r1, &(0x7f0000000080)=[{&(0x7f0000000000)="480000001400190d09004beafd0d36020a8447000b4e230f00000000a2bc5603ca00000f", 0x24}], 0x1) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x4c, 0x3, 0xa, 0x101, 0x0, 0x0, {0xa}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x20, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'bond_slave_0\x00'}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x521deb07}]}]}, @NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0x1}, [@NFTA_RULE_EXPRESSIONS={0x4}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @tunnel={{0xb}, @void}}, {0x18, 0x1, 0x0, 0x1, @fwd={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_FWD_SREG_DEV={0x8, 0x1, 0x1, 0x0, 0x9}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xe4}}, 0x20000001) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1, {r2}}, './file0\x00'}) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000240), r1) sendmsg$BATADV_CMD_TP_METER_CANCEL(r3, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r4, 0x100, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x880) 1.001375303s ago: executing program 2 (id=676): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x1d, 0x21, &(0x7f0000000000)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x6}, {}, {}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}}, @call={0x85, 0x0, 0x0, 0x78}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @jmp={0x5, 0x1, 0x0, 0x6, 0x6, 0xc, 0x4}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x109}}}, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x1e, &(0x7f0000000180)=""/30, 0x40f00, 0x5, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x3, 0x4}, 0x8, 0x10, &(0x7f0000000200)={0x4, 0x10, 0x2, 0xffff}, 0x10, 0xffffffffffffffff, 0x0, 0x1, 0x0, &(0x7f0000000240)=[{0x4, 0x1, 0x0, 0x1}], 0x10, 0x5563}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r0, 0x0, 0xd4, 0x59, &(0x7f0000000340)="d2e2e2287a5536abeafedd5668a9a8391add1f2aaa1550c3abd03c16c538c25466e6c3f577772eaf5db6d4af7a8420265afb9966bfc322c71adac036eeb3f2b768c5b5f7083961fefd1285c45d5c52a3b40efae5dd756751945dc5d99000b22cbafc1e97ea6c3057fc26f7ec4da84acb368a76ff4778ab755ee670e152174c9d6697fd7807da63ec78167e67a1b3ac4b8ffe32ec95f252f4cee93ac9efc8601b6e8bccbfe44431fe6864fc0789777c1895f3caaa5aff359fbe434e3e446f649d14199131ea738340d540103615d3fe8c2adf691f", &(0x7f0000000440)=""/89, 0x9, 0x0, 0x27, 0x2c, &(0x7f00000004c0)="5d8fe878fa020d1cac19059501b7924cc567ada88c771c0c1d40f6a69119657e44bc1aa7a7d9a9", &(0x7f0000000500)="175b4f136a99d3af927cc401c8ff76901b3d852120ae947fc57d22b89aaa619704f777d33f237315ae69b381", 0x7, 0x0, 0x2}, 0x50) bpf$PROG_BIND_MAP(0x23, &(0x7f00000005c0)={r0, 0x1}, 0xc) (async) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000600)={r0, 0xfffffffffffffffe, 0xc, 0x3}) setsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, &(0x7f0000000640)=0x1, 0x4) (async) r2 = syz_io_uring_complete(0x0, 0x0) prctl$PR_SVE_SET_VL(0x32, 0x107d) (async) prctl$PR_SVE_SET_VL(0x32, 0x2f614) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0xd, 0x1, 0x101, 0x1a, 0x21000, r1, 0x100, '\x00', 0x0, r2, 0x4, 0x5, 0x3}, 0x50) (async) r3 = openat$incfs(r2, &(0x7f0000000700)='.pending_reads\x00', 0xc2000, 0x120) (async) newfstatat(0xffffffffffffff9c, &(0x7f0000000740)='./file0\x00', &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400) fchown(r0, 0xee00, r5) (async) r6 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000840)=@o_path={&(0x7f0000000800)='./file0\x00', 0x0, 0x8008, r1}, 0x18) (async) ioctl$BTRFS_IOC_BALANCE_V2(r3, 0xc4009420, &(0x7f0000000900)={0x4, 0x1, {0x5, @usage=0xf, 0x0, 0x401, 0x6, 0x8e, 0x0, 0x9, 0x180, @usage=0x4, 0x3, 0x9, [0x7, 0xffff, 0xc, 0x7, 0xffff, 0x2]}, {0x40, @struct={0xb, 0x7}, 0x0, 0x81, 0x200, 0x5, 0xffffffff80000001, 0x5, 0x1, @usage=0x4ee7663, 0x8, 0x0, [0x0, 0x0, 0x2, 0x5, 0x6, 0x2]}, {0x100, @struct={0xff, 0xa}, 0x0, 0xfa2, 0x7, 0xf, 0x56aa, 0x1000, 0xe4, @usage=0x7255, 0x1, 0xfffffff8, [0x4a, 0x5, 0x9, 0x80000001, 0x1, 0xfffffffeffffffff]}, {0x77, 0x4, 0x1000}}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r6, 0x50009417, &(0x7f0000000d00)={{r2}, 0x0, 0x2, @inherit={0x60, &(0x7f0000000880)={0x1, 0x3, 0x8, 0xffffffff, {0x14, 0x4, 0x4, 0xd, 0x8001}, [0xd, 0xe, 0xffffffffffffe784]}}, @devid=r7}) (async) keyctl$revoke(0x3, 0x0) (async) r8 = add_key$fscrypt_v1(&(0x7f0000001d00), &(0x7f0000001d40)={'fscrypt:', @auto=[0x35, 0x66, 0x34, 0x62, 0x30, 0x37, 0x34, 0x30, 0x30, 0x64, 0x33, 0x32, 0x36, 0x64, 0x66, 0x31]}, &(0x7f0000001d80)={0x0, "f381ad8a868f08556299ac369b1ab7fa464b808958b3b51bf7728d52e3ddadf0c0d40796e5404c6b10de00d528cc1459d5bb1bc95035e3bc9f575f3c958c8ff5", 0x1c}, 0x48, 0xfffffffffffffffb) keyctl$KEYCTL_WATCH_KEY(0x20, r8, r3, 0x84) (async) add_key(&(0x7f0000001e00)='rxrpc\x00', &(0x7f0000001e40)={'syz', 0x0}, &(0x7f0000001e80)="0f000e549621ff697adb2d770b7df65342118ddd4dd9899e0f5c96cdf1004239a46a99182c622918fa937a6e96e03db5a0aff0ea0595eaed3d8765064421", 0x3e, r8) r9 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r9, 0x29, 0x40, &(0x7f0000001f00)=@raw={'raw\x00', 0x9, 0x3, 0x310, 0x0, 0xffffffff, 0xffffffff, 0x128, 0xffffffff, 0x240, 0xffffffff, 0xffffffff, 0x240, 0xffffffff, 0x3, &(0x7f0000001ec0), {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @remote}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, [0xffffff00, 0xffffffff, 0xffffff00], [0xff000000, 0xff, 0xffffffff], 'nr0\x00', 'veth0_to_team\x00', {}, {}, 0x2e, 0xb2, 0x2, 0x40}, 0x0, 0x100, 0x128, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xb}}, @common=@srh={{0x30}, {0x2, 0x80, 0x2b, 0xf, 0x7, 0x804, 0x120}}]}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x2, 0x0, 0x5}, {0x1, 0x6, 0x1}}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x8}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private2, 'ipvlan1\x00', {0x5}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x370) keyctl$revoke(0x3, r8) (async) setreuid(r4, r4) (async) r10 = add_key$keyring(&(0x7f0000002280), &(0x7f00000022c0)={'syz', 0x1}, 0x0, 0x0, r8) keyctl$instantiate(0xc, r8, 0x0, 0x0, r10) setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f0000002300)=@req={0x2, 0x7, 0x13598099, 0x4}, 0x10) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r8, 0x0, &(0x7f0000002340)=@chain={'key_or_keyring:', r10}) (async) prctl$PR_SVE_SET_VL(0x32, 0x8ab2) (async) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r1, 0x18, &(0x7f0000002380)={0x5, r1, 0x6, {0x8, 0x3}, 0x1}, 0x1) add_key$user(&(0x7f00000023c0), &(0x7f0000002400)={'syz', 0x0}, &(0x7f0000002440)="07d410403b00323b6acd959e6f6141282c34818c203ef0bcd8b76ce7249e573d1441722d54c12cb39320848114fa0b131e524d1d4ecf6734901d93f9f615794e998b9cd57315289f6615e19c6ad38d63657cec13d870f4bbfd2754586fa27e031ddea4e799741fabd11c5237d36e9422e745cf86f2f9aa12da45639314c2541a49d3d6ce8ac7e6032d905236d250f4421fb2a9e251ea8268cfb3473e07345d2088b0ba4bb10383039d5fb1508e9bc095f1a131", 0xb3, r10) 979.644493ms ago: executing program 6 (id=677): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x9, &(0x7f0000000000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='vcan0\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xc, 0x4010, r0, 0x3ea79000) 863.39581ms ago: executing program 4 (id=678): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) socket(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x40000000015, 0x5, 0x0) socket$packet(0x11, 0x2, 0x300) pselect6(0x40, &(0x7f00000001c0)={0x400000, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) 862.873145ms ago: executing program 6 (id=679): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x2}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x10000000000) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000280)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08a0ab73ffcf5ad07693727980eea946e6cba1723e81bfa5c3688803c8a124dcb27df7938e7ddfdd52"}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000004a40)={0x4c, 0x0, &(0x7f0000000600)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000540)={@flat=@binder={0x73622a85, 0x101, 0x3}, @fda={0x66646185, 0x6, 0x1, 0x1a}, @flat=@weak_binder={0x77622a85, 0x100, 0x1}}, &(0x7f00000005c0)={0x0, 0x18, 0x38}}, 0xfcffffffffffffff}], 0x0, 0x0, 0x0}) 819.216422ms ago: executing program 4 (id=680): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) ioctl$BTRFS_IOC_WAIT_SYNC(r0, 0x40089416, &(0x7f0000000000)) listen(r0, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, 0x0, 0x0}, 0x94) r4 = syz_open_dev$vim2m(&(0x7f0000000000), 0xd, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r4, 0xc0405602, &(0x7f0000000040)={0x1, 0x2, 0x2, "feac64c361a7d83bb5684a562aaca1d2c5ed7ceca0fbd8c119922ab8c3cea6e8", 0xb5315258}) syz_emit_ethernet(0x5a, &(0x7f0000000080)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "f900f5", 0x24, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x9, 0x2, 0x0, 0x0, 0x0, {[@mptcp=@add_addr={0x1e, 0x10, 0x0, 0x10, 0x5, @dev={0xac, 0x14, 0x14, 0x26}, 0x7, "99003a2342db"}]}}}}}}}}, 0x0) 799.661396ms ago: executing program 6 (id=681): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000000c0), 0x400c82, 0x0) r3 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, &(0x7f0000000040)={0x4, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042", 0xffffffffffffffff}) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000100)) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r7 = dup3(r6, r5, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r7, 0x40046208, 0x0) r8 = syz_genetlink_get_family_id$team(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_GET(r7, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000380)={&(0x7f0000000840)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="1a0027bd7000fcdbdf250200000008000100", @ANYRES32=r1, @ANYBLOB="3c00028038000100240001006d636173745f72656a6f696e5f636f756e740000000000000000000000000000050003000300000008000400000400008492f107dea6411c75c573e3bab3086ec495ebebc39dfd855b8edb0dc80d61567302a400ab2686b595ed16c52412f329eaa36d541f3847fd33e5c2e7cf3d8aef7011823b0109c264204f3780835bf125dea7c0320d2c664a65ce4494f4a1a2767d8352bd11a7c9045d8016b4b3434d8a5b33976e4b6ea9b45b8408bd6a4f4b7309f5677fa8a7b5c2d6be193474f248e599dffcd9088929cc43e0ab8e5ac1cfe3b2"], 0x58}, 0x1, 0x0, 0x0, 0x40040}, 0x44004) ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f0000000100)={0x8, "b546baa5cc590d3033de259c2996817bb959ebab028deda501009bdeffafde25", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r4, 0xc0303e03, &(0x7f00000001c0)={"0080bced01eb0100000000000000000700000000000000c900", r9, 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_INC(r2, 0x40045701, &(0x7f0000000400)=0xa7) ppoll(&(0x7f0000000500)=[{r10, 0x200}], 0x1, &(0x7f0000000200)={0x0, 0x989680}, 0x0, 0x0) r11 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r11, 0x4008af00, &(0x7f0000001340)=0x4000000) r12 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="18020000000000000000000000000000850000001700000095"], &(0x7f00000005c0)='GPL\x00'}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r12, r1, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x7e, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd600101000048117900fe8000000000000000000000000000bbff0200000000000000000000000000014e200e2200489078030000000200000088c73b21f267636d01dbe5712c1c941e1cdafbbb43f09c28e13808ca72381f41e5fff9620915b6f78628dfaf9a2038083179cf6b7931c9"], 0x0) 731.118797ms ago: executing program 2 (id=682): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000001c0)={0x50, r3, 0x801, 0x0, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY={0x28, 0x50, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x2}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "7ee5d52ffd"}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}, @NL80211_KEY_TYPE={0x8}]}]}, 0x50}}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000280)='./proc\x00', &(0x7f00000002c0)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000480)='./proc/net/rpc/auth.rpcsec.context/channel\x00', 0x1, 0x0) unshare(0x2c020400) r6 = getuid() syz_mount_image$vfat(&(0x7f0000000540), &(0x7f0000000000)='./file1\x00', 0xa18c14, &(0x7f0000000700)={[{@shortname_win95}, {@iocharset={'iocharset', 0x3d, 'cp863'}}, {@shortname_winnt}, {@fat=@codepage={'codepage', 0x3d, '857'}}, {@fat=@uid}, {@shortname_mixed}, {@utf8}, {@uni_xlate}, {@utf8no}, {@fat=@check_strict}, {@shortname_mixed}, {@iocharset={'iocharset', 0x3d, 'cp865'}}, {@utf8no}, {@iocharset={'iocharset', 0x3d, 'koi8-ru'}}], [{@hash}, {@subj_type={'subj_type', 0x3d, 'uni_xlate=1'}}, {@euid_eq={'euid', 0x3d, r6}}, {@smackfsroot={'smackfsroot', 0x3d, '{/-[\\'}}, {@fscontext={'fscontext', 0x3d, 'system_u'}}, {@dont_measure}, {@dont_measure}, {@subj_role={'subj_role', 0x3d, 'codepage'}}]}, 0x81, 0x2a6, &(0x7f0000000180)="$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") r7 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) open_tree(0xffffffffffffff9c, &(0x7f00000000c0)='./file0/file0\x00', 0x801) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x80000, 0x0) ioctl$TUNSETOFFLOAD(r8, 0x4004743d, 0x110c23004a) shmget$private(0x0, 0xfffffffffeffffff, 0x4800, &(0x7f0000ffc000/0x3000)=nil) ioctl$PPPIOCSMRU1(r7, 0x40047452, &(0x7f0000000040)=0x4) socket$key(0xf, 0x3, 0x2) 655.761526ms ago: executing program 6 (id=683): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x27) 448.367257ms ago: executing program 2 (id=684): r0 = socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc_mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc_mnt\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000180)='./proc_mnt/net/rpc/auth.unix.ip/flush\x00', &(0x7f00000001c0)={0x10000, 0x1, 0x18}, 0x18) (async) r1 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000180)='./proc_mnt/net/rpc/auth.unix.ip/flush\x00', &(0x7f00000001c0)={0x10000, 0x1, 0x18}, 0x18) r2 = openat(r1, &(0x7f0000000200)='./proc_mnt/net/rpc/auth.unix.ip/flush\x00', 0x0, 0xa4) openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc_mnt\x00', 0x218042, 0x1) (async) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc_mnt\x00', 0x218042, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000018c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) (async) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000018c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r4, 0xffffffffffffffff, 0x0) (async) close_range(r4, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0) (async) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x3c, r5, 0x205, 0xfffffffc, 0x25dfdbfd, {}, [@ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x1}, @ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}]}, @ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8}]}, 0x3c}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000002c0)={'wlan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000200)={0x48, r7, 0x1, 0x70bd2a, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_FRAME={0x2a, 0x33, @action={{{}, {0x8}, @device_b, @device_a, @initial, {0x0, 0x400}}, @delba={0x3, 0x2, {{0x0, 0x1, 0x1}, 0x3, {0xbd, 0x6}}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0xc0}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r9) setsockopt$inet_int(r2, 0x0, 0xf, &(0x7f0000000380)=0x9, 0x4) r11 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f0000000680)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_KEY(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="050826bd7000fcdbdf250900000008000300", @ANYRES32=r12, @ANYBLOB="080037000000000004000b0004006e800a000600"], 0x38}, 0x1, 0x0, 0x0, 0x48011}, 0x40) sendmsg$NL80211_CMD_SET_PMKSA(r3, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x50, r7, 0x20, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r12}, @void}}, [@NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x41}, @NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0x7}, @NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x1a}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_SSID={0x7, 0x34, @random="57cfa8"}, @NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0x9}]}, 0x50}, 0x1, 0x0, 0x0, 0x40}, 0x20000000) 218.37136ms ago: executing program 6 (id=685): r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000200)={@cgroup=r1, 0x32, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) syz_extract_tcp_res(&(0x7f0000000000)={0x41424344, 0x41424344}, 0x0, 0x1ff) syz_emit_ethernet(0x4e, &(0x7f00000000c0)=ANY=[@ANYBLOB="0180c200000205aaaaaaaaaa8100120086dd6000340000140600fe8000000300000000000000000000bbfe8004000000000000000000000000aa00004e22", @ANYRES32=r3, @ANYRES32=0x41424344, @ANYBLOB="54c2000090780009"], 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000340)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00 \x00', 0x14, 0x6, 0x1, @local, @local, {[], {{0x0, 0x4e22, r3, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x0, 0x0, 0xe}}}}}}}, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x8, 0x3, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000001200)='syzkaller\x00'}, 0x80) r5 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x0, 0x80) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000003c0)={r4, r6}, 0x10) syz_emit_ethernet(0x4a, &(0x7f0000000280)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd600a843500140600fe8000000000000000000000000000bbfe8000000000000000000000000000aa00004e226e92ad650d3c3cbd7fe61b1bfefdde0cad42713bd7a0e86a1c27dea26d6f0867a8978a9c783158017afbbdbc7994d89dde0bd8f259de9ff14ef87036f3461ed6ef64b3", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5002000090780000"], 0x0) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/cpuinfo\x00', 0x0, 0x0) read$hiddev(r7, &(0x7f00000033c0)=""/5, 0x5) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r10, 0xc004743e, &(0x7f0000000200)=0x104) r11 = socket(0x10, 0x3, 0x0) write(r11, &(0x7f0000000b80)="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", 0x124) setsockopt$inet6_tcp_TCP_CONGESTION(r11, 0x6, 0xd, &(0x7f0000000240)='cubic', 0x5) ioctl$PPPIOCSACTIVE(r10, 0x40047459, &(0x7f0000009280)={0xfffffffffffffff7, 0x0}) readv(r10, &(0x7f0000000480)=[{&(0x7f00000004c0)=""/106, 0x6a}], 0x1) write$ppp(r10, &(0x7f0000000100)="e0bf", 0x2) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000011540)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48) setsockopt$sock_attach_bpf(r8, 0x1, 0x32, &(0x7f00000001c0)=r12, 0x4) sendmsg$inet(r9, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) 218.035374ms ago: executing program 2 (id=686): setregid(0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ed) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/devices/system/cpu/cpu1/online\x00', 0x2, 0x0) pwrite64(r0, &(0x7f00000001c0)='n', 0x1, 0xb) 216.663044ms ago: executing program 2 (id=687): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) set_mempolicy(0x6005, &(0x7f0000000080)=0xfffffffffffffffd, 0x4) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(&(0x7f00000002c0)={0x22001500, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, 0x0, 0x0) socket(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x40000000015, 0x5, 0x0) socket$packet(0x11, 0x2, 0x300) socket$nl_route(0x10, 0x3, 0x0) socket$rds(0x15, 0x5, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) close(0x3) r4 = socket(0x40000000015, 0x5, 0x0) connect$inet6(r4, 0x0, 0x0) setsockopt$SO_J1939_FILTER(r4, 0x6b, 0x1, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 0s ago: executing program 5 (id=688): rt_sigprocmask(0x2, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbee7, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000003900), 0x34aa945a513d639, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) ftruncate(0xffffffffffffffff, 0x800) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40"], 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[], 0xa4}, 0x1, 0x0, 0x0, 0x4d9fa924cd605e73}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000040000000000000a20000000000a03"], 0x122}, 0x1, 0x0, 0x0, 0x240000c1}, 0x0) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)=0x0) clock_gettime(0x0, &(0x7f00000000c0)) timer_settime(r5, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.115' (ED25519) to the list of known hosts. [ 28.828202][ T4700] cgroup: Unknown subsys name 'net' [ 28.968159][ T4700] cgroup: Unknown subsys name 'cpuset' [ 28.970150][ T4700] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 29.137874][ T4700] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SS [ 31.247803][ T4715] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 31.247899][ T4716] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 31.248600][ T4715] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 31.251504][ T4715] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 31.252433][ T4716] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 31.252780][ T4716] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 31.252929][ T4716] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 31.253253][ T4716] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 31.253688][ T4716] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 31.256184][ T4718] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 31.259352][ T4718] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 31.266626][ T4712] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 31.267626][ T4712] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 31.271899][ T4712] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 31.272168][ T4712] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 31.278872][ T4722] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 31.282835][ T4722] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 31.288329][ T4712] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 31.291986][ T4712] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 31.293630][ T4712] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 31.295281][ T4722] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 31.295579][ T4712] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 31.297346][ T4722] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 31.297572][ T4722] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 31.299645][ T4715] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 31.613424][ T4720] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.613683][ T4720] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.613810][ T4720] bridge_slave_0: entered allmulticast mode [ 31.618687][ T4720] bridge_slave_0: entered promiscuous mode [ 31.620387][ T4720] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.620410][ T4720] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.620465][ T4720] bridge_slave_1: entered allmulticast mode [ 31.620889][ T4720] bridge_slave_1: entered promiscuous mode [ 31.653781][ T4720] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.659446][ T4720] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.704559][ T4720] team0: Port device team_slave_0 added [ 31.722682][ T4720] team0: Port device team_slave_1 added [ 31.758675][ T4719] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.760187][ T4719] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.761668][ T4719] bridge_slave_0: entered allmulticast mode [ 31.762120][ T4719] bridge_slave_0: entered promiscuous mode [ 31.763018][ T4719] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.763041][ T4719] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.763143][ T4719] bridge_slave_1: entered allmulticast mode [ 31.763540][ T4719] bridge_slave_1: entered promiscuous mode [ 31.764507][ T4720] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.764516][ T4720] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.764533][ T4720] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.765333][ T4720] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.765340][ T4720] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.765355][ T4720] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.782836][ T4720] hsr_slave_0: entered promiscuous mode [ 31.783165][ T4720] hsr_slave_1: entered promiscuous mode [ 31.794648][ T4710] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.794690][ T4710] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.795136][ T4710] bridge_slave_0: entered allmulticast mode [ 31.795544][ T4710] bridge_slave_0: entered promiscuous mode [ 31.799242][ T4713] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.799273][ T4713] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.799370][ T4713] bridge_slave_0: entered allmulticast mode [ 31.799763][ T4713] bridge_slave_0: entered promiscuous mode [ 31.800479][ T4713] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.800498][ T4713] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.800544][ T4713] bridge_slave_1: entered allmulticast mode [ 31.800955][ T4713] bridge_slave_1: entered promiscuous mode [ 31.809108][ T4713] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.810030][ T4713] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.816530][ T4713] team0: Port device team_slave_0 added [ 31.819387][ T4710] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.820747][ T4710] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.820840][ T4710] bridge_slave_1: entered allmulticast mode [ 31.821301][ T4710] bridge_slave_1: entered promiscuous mode [ 31.835201][ T4713] team0: Port device team_slave_1 added [ 31.842092][ T4719] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.844880][ T4719] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.848000][ T4710] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.858267][ T4710] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.867665][ T4713] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.869101][ T4713] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.874441][ T4713] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.880467][ T4719] team0: Port device team_slave_0 added [ 31.885123][ T4710] team0: Port device team_slave_0 added [ 31.887513][ T4713] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.887534][ T4713] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.887561][ T4713] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.897450][ T4713] hsr_slave_0: entered promiscuous mode [ 31.897805][ T4713] hsr_slave_1: entered promiscuous mode [ 31.898017][ T4713] debugfs: 'hsr0' already exists in 'hsr' [ 31.898052][ T4713] Cannot create hsr debugfs directory [ 31.901284][ T4717] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.901370][ T4717] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.901426][ T4717] bridge_slave_0: entered allmulticast mode [ 31.901844][ T4717] bridge_slave_0: entered promiscuous mode [ 31.903810][ T4719] team0: Port device team_slave_1 added [ 31.904658][ T4710] team0: Port device team_slave_1 added [ 31.913152][ T4710] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.913175][ T4710] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.913187][ T4710] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.917875][ T4717] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.917945][ T4717] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.918009][ T4717] bridge_slave_1: entered allmulticast mode [ 31.918455][ T4717] bridge_slave_1: entered promiscuous mode [ 31.925368][ T4710] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.925377][ T4710] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.925393][ T4710] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.938042][ T4719] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.938067][ T4719] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.938081][ T4719] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.953475][ T4719] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.953504][ T4719] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.953521][ T4719] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.959922][ T4717] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.960920][ T4717] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.968663][ T4710] hsr_slave_0: entered promiscuous mode [ 31.968972][ T4710] hsr_slave_1: entered promiscuous mode [ 31.969151][ T4710] debugfs: 'hsr0' already exists in 'hsr' [ 31.969160][ T4710] Cannot create hsr debugfs directory [ 31.987849][ T4717] team0: Port device team_slave_0 added [ 31.988634][ T4717] team0: Port device team_slave_1 added [ 31.994490][ T4719] hsr_slave_0: entered promiscuous mode [ 31.995302][ T4719] hsr_slave_1: entered promiscuous mode [ 31.995586][ T4719] debugfs: 'hsr0' already exists in 'hsr' [ 31.995596][ T4719] Cannot create hsr debugfs directory [ 32.016341][ T4717] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 32.016367][ T4717] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 32.016384][ T4717] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 32.033144][ T4717] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 32.033175][ T4717] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 32.033189][ T4717] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 32.083365][ T4717] hsr_slave_0: entered promiscuous mode [ 32.087760][ T4717] hsr_slave_1: entered promiscuous mode [ 32.089238][ T4717] debugfs: 'hsr0' already exists in 'hsr' [ 32.089287][ T4717] Cannot create hsr debugfs directory [ 32.093862][ T4720] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 32.097681][ T4720] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 32.098602][ T4720] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 32.099980][ T4720] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 32.103840][ T4720] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 32.106150][ T4720] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 32.106503][ T4720] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 32.108509][ T4720] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 32.138139][ T4720] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.138193][ T4720] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.138353][ T4720] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.138388][ T4720] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.159846][ T4713] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 32.162134][ T4713] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 32.164557][ T4713] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 32.167607][ T4713] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 32.167919][ T4713] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 32.170259][ T4713] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 32.173500][ T4713] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 32.175713][ T4713] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 32.195564][ T4710] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 32.198204][ T4710] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 32.200128][ T4710] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 32.202633][ T4710] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 32.204593][ T4710] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 32.207583][ T4710] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 32.209305][ T4710] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 32.211481][ T4710] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 32.215663][ T4713] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.215705][ T4713] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.215781][ T4713] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.215814][ T4713] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.231294][ T4720] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.247186][ T4720] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.259699][ T1180] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.261869][ T1180] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.269967][ T4719] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 32.272429][ T4719] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 32.273105][ T4719] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 32.274474][ T4719] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 32.275747][ T4719] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 32.277744][ T4719] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 32.288796][ T4719] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 32.291108][ T4719] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 32.304561][ T4720] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 32.322148][ T4713] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.325421][ T4713] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.332369][ T4717] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 32.334867][ T4717] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 32.348004][ T4717] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 32.350559][ T4717] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 32.352352][ T4717] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 32.354755][ T4717] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 32.357634][ T1180] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.357691][ T1180] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.358077][ T1180] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.358111][ T1180] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.366017][ T4710] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.370496][ T4717] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 32.372793][ T4717] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 32.391904][ T4710] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.393524][ T4713] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 32.402559][ T4719] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.413378][ T197] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.413422][ T197] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.413769][ T197] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.413787][ T197] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.425660][ T4719] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.443870][ T197] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.443918][ T197] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.444299][ T197] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.444318][ T197] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.461815][ T4710] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 32.502892][ T4720] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.507890][ T4717] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.512666][ T4717] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.537439][ T197] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.537479][ T197] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.542714][ T197] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.542760][ T197] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.554536][ T4717] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 32.554572][ T4717] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 32.668841][ T4719] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.709325][ T4719] veth0_vlan: entered promiscuous mode [ 32.717720][ T4713] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.721930][ T4719] veth1_vlan: entered promiscuous mode [ 32.724038][ T4720] veth0_vlan: entered promiscuous mode [ 32.726120][ T4720] veth1_vlan: entered promiscuous mode [ 32.743778][ T4710] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.746110][ T4713] veth0_vlan: entered promiscuous mode [ 32.753415][ T4720] veth0_macvtap: entered promiscuous mode [ 32.755811][ T4720] veth1_macvtap: entered promiscuous mode [ 32.761384][ T4720] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.766103][ T4719] veth0_macvtap: entered promiscuous mode [ 32.770939][ T4717] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.773605][ T4719] veth1_macvtap: entered promiscuous mode [ 32.786359][ T4717] veth0_vlan: entered promiscuous mode [ 32.788586][ T4720] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.799755][ T4713] veth1_vlan: entered promiscuous mode [ 32.803661][ T4719] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.810417][ T4710] veth0_vlan: entered promiscuous mode [ 32.817203][ T4717] veth1_vlan: entered promiscuous mode [ 32.819750][ T4719] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.834919][ T4713] veth0_macvtap: entered promiscuous mode [ 32.836002][ T4713] veth1_macvtap: entered promiscuous mode [ 32.840433][ T4710] veth1_vlan: entered promiscuous mode [ 32.845742][ T4713] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.848203][ T4713] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.858646][ T3015] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.858673][ T3015] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.884597][ T4717] veth0_macvtap: entered promiscuous mode [ 32.885704][ T4717] veth1_macvtap: entered promiscuous mode [ 32.888143][ T3015] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.888652][ T3015] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.888684][ T3015] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.888709][ T3015] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.888735][ T3015] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.888758][ T3015] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.888782][ T3015] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.888806][ T3015] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.888830][ T3015] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.888852][ T3015] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.888874][ T3015] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.888895][ T3015] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.892492][ T4710] veth0_macvtap: entered promiscuous mode [ 32.893519][ T4710] veth1_macvtap: entered promiscuous mode [ 32.898116][ T4710] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.917461][ T1180] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.919152][ T1180] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.927026][ T4717] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.931231][ T4717] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.934408][ T4710] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.955160][ T1180] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.955194][ T1180] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.970075][ T4720] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 32.977681][ T197] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.979720][ T197] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.982654][ T197] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.984046][ T197] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.984076][ T197] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.984084][ T197] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.984271][ T197] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.984684][ T197] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.984779][ T197] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.989772][ T1180] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.989782][ T1180] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.010084][ T1180] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.010114][ T1180] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.027549][ T3015] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.032869][ T4893] FAULT_INJECTION: forcing a failure. [ 33.032869][ T4893] name failslab, interval 1, probability 0, space 0, times 1 [ 33.032900][ T4893] CPU: 1 UID: 0 PID: 4893 Comm: syz.4.5 Not tainted syzkaller #0 PREEMPT [ 33.032914][ T4893] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 33.032921][ T4893] Call trace: [ 33.032924][ T4893] show_stack+0x2c/0x3c (C) [ 33.032944][ T4893] __dump_stack+0x30/0x40 [ 33.032955][ T4893] dump_stack_lvl+0xd8/0x12c [ 33.032965][ T4893] dump_stack+0x1c/0x28 [ 33.032974][ T4893] should_fail_ex+0x41c/0x590 [ 33.032985][ T4893] should_failslab+0xc4/0x120 [ 33.033004][ T4893] kmem_cache_alloc_noprof+0x94/0x5d4 [ 33.033015][ T4893] do_getname+0x48/0x234 [ 33.033022][ T4893] user_path_at+0x38/0x78 [ 33.033030][ T4893] do_mount+0xb0/0x148 [ 33.033039][ T4893] __arm64_sys_mount+0x33c/0x388 [ 33.033049][ T4893] invoke_syscall+0x98/0x244 [ 33.033059][ T4893] el0_svc_common+0xec/0x23c [ 33.033068][ T4893] do_el0_svc+0x4c/0x5c [ 33.033078][ T4893] el0_svc+0x64/0x260 [ 33.033087][ T4893] el0t_64_sync_handler+0x44/0x104 [ 33.033095][ T4893] el0t_64_sync+0x198/0x19c [ 33.045953][ T3015] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.045965][ T3015] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.060574][ T3015] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.060586][ T3015] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.073223][ T3015] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.073250][ T3015] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.081424][ T197] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.081455][ T197] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.149493][ T4901] binder: 4899:4901 tried to acquire reference to desc 0, got 1 instead [ 33.150102][ T4901] binder: 4899:4901 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 33.150115][ T4901] binder: 4901 RLIMIT_NICE not set [ 33.150151][ T4901] binder: 4901 RLIMIT_NICE not set [ 33.150275][ T4901] binder: 4901 RLIMIT_NICE not set [ 33.150312][ T4901] binder: 4899:4901 got transaction with invalid parent offset or type [ 33.150370][ T4901] binder: 4899:4901 transaction reply to 4899:4901 failed 6/29201/-22, code 0 size 80-24 line 3617 [ 33.150388][ T4901] binder: send failed reply for transaction 5 to 4899:4901 [ 33.155966][ T4821] binder: undelivered TRANSACTION_COMPLETE [ 33.155987][ T4821] binder: undelivered TRANSACTION_ERROR: 29201 [ 33.156127][ T4821] binder: undelivered TRANSACTION_ERROR: 29190 [ 33.167938][ T4895] bond1: option all_slaves_active: invalid value (8) [ 33.174157][ T4895] bond1 (unregistering): Released all slaves [ 33.176500][ T4904] tmpfs: Bad value for 'mpol' [ 33.186262][ T4902] usb251xb 0-002c: supply vdd not found, using dummy regulator [ 33.204415][ T4909] random: crng reseeded on system resumption [ 33.210255][ T4902] usb251xb 0-002c: configuring block 0 failed: -5 [ 33.210289][ T4902] usb251xb 0-002c: Failed to connect hub (-5) [ 33.211773][ T4902] usb251xb 0-002c: probe with driver usb251xb failed with error -5 [ 33.215625][ T4902] i2c i2c-0: new_device: Instantiated device usb2512b at 0x2c [ 33.233036][ T197] nvmet: connect request for invalid subsystem nqn.2014-08.org.nvmexpress.discovery! [ 33.241883][ T4898] nvme nvme1: Connect Invalid Data Parameter, subsysnqn "nqn.2014-08.org.nvmexpress.discovery" [ 33.287291][ T4715] Bluetooth: hci0: command tx timeout [ 33.287522][ T4718] Bluetooth: hci1: command tx timeout [ 33.287524][ T4715] Bluetooth: hci2: command tx timeout [ 33.367151][ T4722] Bluetooth: hci3: command tx timeout [ 33.368389][ T4718] Bluetooth: hci4: command tx timeout [ 33.396601][ T4928] FAULT_INJECTION: forcing a failure. [ 33.396601][ T4928] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 33.396635][ T4928] CPU: 0 UID: 0 PID: 4928 Comm: syz.1.10 Not tainted syzkaller #0 PREEMPT [ 33.396649][ T4928] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 33.396655][ T4928] Call trace: [ 33.396659][ T4928] show_stack+0x2c/0x3c (C) [ 33.396685][ T4928] __dump_stack+0x30/0x40 [ 33.396696][ T4928] dump_stack_lvl+0xd8/0x12c [ 33.396706][ T4928] dump_stack+0x1c/0x28 [ 33.396716][ T4928] should_fail_ex+0x41c/0x590 [ 33.396727][ T4928] should_fail+0x14/0x24 [ 33.396736][ T4928] should_fail_usercopy+0x20/0x30 [ 33.396746][ T4928] strncpy_from_user+0x48/0x388 [ 33.396754][ T4928] do_getname+0x84/0x234 [ 33.396762][ T4928] getname_flags+0x2c/0x3c [ 33.396769][ T4928] do_sys_openat2+0xd0/0x1e8 [ 33.396779][ T4928] do_sys_open+0xb0/0xe0 [ 33.396788][ T4928] __arm64_sys_openat+0xa8/0xc4 [ 33.396797][ T4928] invoke_syscall+0x98/0x244 [ 33.396808][ T4928] el0_svc_common+0xec/0x23c [ 33.396817][ T4928] do_el0_svc+0x4c/0x5c [ 33.396826][ T4928] el0_svc+0x64/0x260 [ 33.396836][ T4928] el0t_64_sync_handler+0x44/0x104 [ 33.396844][ T4928] el0t_64_sync+0x198/0x19c [ 33.429487][ T4932] device-mapper: ioctl: Invalid ioctl structure: name t, dev f800 [ 33.477004][ T4937] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1'. [ 33.477040][ T4937] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1'. [ 33.498166][ T4940] Driver unsupported XDP return value 0 on prog (id 2) dev N/A, expect packet loss! [ 33.561029][ T4942] ubi0: attaching mtd0 [ 33.566871][ T4942] ubi0: scanning is finished [ 33.566918][ T4942] ubi0: empty MTD device detected [ 33.755356][ T4936] loop2: detected capacity change from 0 to 4096 [ 33.758495][ T4936] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 33.758527][ T4936] EXT4-fs (loop2): Test dummy encryption mode enabled [ 33.768817][ T4936] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=280ec1a8, mo2=0002] [ 33.768894][ T4936] System zones: 0-5 [ 33.774391][ T4936] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 34.239903][ T4942] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 34.239935][ T4942] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 34.239959][ T4942] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 34.239972][ T4942] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 34.239984][ T4942] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 34.240000][ T4942] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 34.240013][ T4942] ubi0: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 319454988 [ 34.240027][ T4942] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 34.240223][ T4959] ubi0: background thread "ubi_bgt0d" started, PID 4959 [ 34.255752][ T4719] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.395993][ T4970] FAULT_INJECTION: forcing a failure. [ 34.395993][ T4970] name failslab, interval 1, probability 0, space 0, times 0 [ 34.403269][ T4970] CPU: 1 UID: 0 PID: 4970 Comm: syz.2.22 Not tainted syzkaller #0 PREEMPT [ 34.403294][ T4970] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 34.403301][ T4970] Call trace: [ 34.403304][ T4970] show_stack+0x2c/0x3c (C) [ 34.403330][ T4970] __dump_stack+0x30/0x40 [ 34.403345][ T4970] dump_stack_lvl+0xd8/0x12c [ 34.403357][ T4970] dump_stack+0x1c/0x28 [ 34.403368][ T4970] should_fail_ex+0x41c/0x590 [ 34.403381][ T4970] should_failslab+0xc4/0x120 [ 34.403394][ T4970] kmem_cache_alloc_lru_noprof+0x98/0x5d8 [ 34.403407][ T4970] sock_alloc_inode+0x30/0x180 [ 34.403419][ T4970] alloc_inode+0x68/0x198 [ 34.403430][ T4970] sock_alloc+0x4c/0x204 [ 34.403438][ T4970] __sock_create+0x108/0x670 [ 34.403446][ T4970] __sys_socket_create+0xc0/0x11c [ 34.403455][ T4970] __sys_socket+0x44/0xec [ 34.403463][ T4970] __arm64_sys_socket+0x84/0x9c [ 34.403472][ T4970] invoke_syscall+0x98/0x244 [ 34.403484][ T4970] el0_svc_common+0xec/0x23c [ 34.403496][ T4970] do_el0_svc+0x4c/0x5c [ 34.403507][ T4970] el0_svc+0x64/0x260 [ 34.403517][ T4970] el0t_64_sync_handler+0x44/0x104 [ 34.403527][ T4970] el0t_64_sync+0x198/0x19c [ 34.417703][ T4970] socket: no more sockets [ 34.423599][ T4971] FAULT_INJECTION: forcing a failure. [ 34.423599][ T4971] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 34.423615][ T4971] CPU: 0 UID: 0 PID: 4971 Comm: syz.4.19 Not tainted syzkaller #0 PREEMPT [ 34.423626][ T4971] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 34.423631][ T4971] Call trace: [ 34.423635][ T4971] show_stack+0x2c/0x3c (C) [ 34.423649][ T4971] __dump_stack+0x30/0x40 [ 34.423660][ T4971] dump_stack_lvl+0xd8/0x12c [ 34.423670][ T4971] dump_stack+0x1c/0x28 [ 34.423679][ T4971] should_fail_ex+0x41c/0x590 [ 34.423690][ T4971] should_fail+0x14/0x24 [ 34.423699][ T4971] should_fail_usercopy+0x20/0x30 [ 34.423709][ T4971] dm_ctl_ioctl+0x1e4/0xbbc [ 34.423718][ T4971] __arm64_sys_ioctl+0x154/0x1cc [ 34.423728][ T4971] invoke_syscall+0x98/0x244 [ 34.423738][ T4971] el0_svc_common+0xec/0x23c [ 34.423748][ T4971] do_el0_svc+0x4c/0x5c [ 34.423757][ T4971] el0_svc+0x64/0x260 [ 34.423766][ T4971] el0t_64_sync_handler+0x44/0x104 [ 34.423774][ T4971] el0t_64_sync+0x198/0x19c [ 34.512914][ T4973] loop0: detected capacity change from 0 to 256 [ 34.513320][ T4973] vfat: Unknown parameter 'iocharset' [ 34.598756][ T4975] syz.2.24 uses obsolete (PF_INET,SOCK_PACKET) [ 35.466911][ T4722] Bluetooth: hci0: command tx timeout [ 35.467135][ T4722] Bluetooth: hci1: command tx timeout [ 35.467469][ T4722] Bluetooth: hci4: command tx timeout [ 35.467648][ T4722] Bluetooth: hci3: command tx timeout [ 35.468854][ T4718] Bluetooth: hci2: command tx timeout [ 35.756522][ T4997] netlink: 'syz.1.27': attribute type 1 has an invalid length. [ 35.821858][ T4983] device-mapper: table: 248:0:  : unknown target type [ 35.823684][ T4983] device-mapper: ioctl: error adding target to table [ 35.913539][ T5010] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(3) [ 35.915653][ T5010] device-mapper: ioctl: Invalid data size in the ioctl structure: 0 [ 36.328861][ T5023] loop1: detected capacity change from 0 to 512 [ 36.340628][ T5023] EXT4-fs error (device loop1): ext4_quota_enable:7256: comm syz.1.38: Bad quota inum: 2, type: 1 [ 36.340697][ T5023] loop1: lost filesystem error report for type 5 error -117 [ 36.342975][ T5023] EXT4-fs warning (device loop1): ext4_enable_quotas:7304: Failed to enable quota tracking (type=1, err=-117, ino=2). Please run e2fsck to fix. [ 36.346722][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 36.346741][ C1] EXT4-fs (loop1): initial error at time 36: ext4_quota_enable:7256 [ 36.346755][ C1] EXT4-fs (loop1): last error at time 36: ext4_quota_enable:7256 [ 36.353142][ T5023] EXT4-fs (loop1): mount failed [ 36.368555][ T5023] loop1: detected capacity change from 0 to 512 [ 36.651828][ T5023] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 36.678653][ T4710] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.844760][ T5033] input: syz1 as /devices/virtual/input/input2 [ 36.964578][ T5043] loop1: detected capacity change from 0 to 4096 [ 36.968667][ T5043] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 36.968692][ T5043] EXT4-fs (loop1): Test dummy encryption mode enabled [ 36.975425][ T5043] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 37.178129][ T5046] process 'syz.1.44' launched './file3' with NULL argv: empty string added [ 37.369403][ T5052] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(3) [ 37.369556][ T5052] device-mapper: ioctl: Invalid data size in the ioctl structure: 0 [ 37.575618][ T4715] Bluetooth: hci2: command tx timeout [ 37.575736][ T4715] Bluetooth: hci3: command tx timeout [ 37.575826][ T4715] Bluetooth: hci4: command tx timeout [ 37.575905][ T4715] Bluetooth: hci1: command tx timeout [ 38.329822][ T5068] binder: 5067:5068 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 38.331945][ T5069] binder: 5067:5069 BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 38.333947][ T5069] binder: 5067:5069 ioctl c0306201 20000040 returned -22 [ 38.482607][ T5076] FAULT_INJECTION: forcing a failure. [ 38.482607][ T5076] name failslab, interval 1, probability 0, space 0, times 0 [ 38.482638][ T5076] CPU: 1 UID: 0 PID: 5076 Comm: syz.4.53 Not tainted syzkaller #0 PREEMPT [ 38.482649][ T5076] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 38.482655][ T5076] Call trace: [ 38.482658][ T5076] show_stack+0x2c/0x3c (C) [ 38.482677][ T5076] __dump_stack+0x30/0x40 [ 38.482690][ T5076] dump_stack_lvl+0xd8/0x12c [ 38.482702][ T5076] dump_stack+0x1c/0x28 [ 38.482713][ T5076] should_fail_ex+0x41c/0x590 [ 38.482726][ T5076] should_failslab+0xc4/0x120 [ 38.482739][ T5076] kmem_cache_alloc_lru_noprof+0x98/0x5d8 [ 38.482752][ T5076] shmem_alloc_inode+0x2c/0x48 [ 38.482765][ T5076] alloc_inode+0x68/0x198 [ 38.482776][ T5076] new_inode+0x20/0x50 [ 38.482786][ T5076] shmem_get_inode+0xac/0x788 [ 38.482798][ T5076] shmem_fill_super+0x984/0xe68 [ 38.482810][ T5076] vfs_get_super+0xb8/0x148 [ 38.482820][ T5076] get_tree_nodev+0x2c/0x3c [ 38.482828][ T5076] shmem_get_tree+0x28/0x38 [ 38.482840][ T5076] vfs_get_tree+0x90/0x28c [ 38.482850][ T5076] fc_mount+0x24/0xac [ 38.482859][ T5076] do_new_mount+0x2a4/0x538 [ 38.482869][ T5076] path_mount+0x5f0/0xa88 [ 38.482880][ T5076] do_mount+0xe8/0x148 [ 38.482890][ T5076] __arm64_sys_mount+0x33c/0x388 [ 38.482900][ T5076] invoke_syscall+0x98/0x244 [ 38.482912][ T5076] el0_svc_common+0xec/0x23c [ 38.482924][ T5076] do_el0_svc+0x4c/0x5c [ 38.482935][ T5076] el0_svc+0x64/0x260 [ 38.482945][ T5076] el0t_64_sync_handler+0x44/0x104 [ 38.482955][ T5076] el0t_64_sync+0x198/0x19c [ 38.536490][ T5080] loop4: detected capacity change from 0 to 512 [ 38.549676][ T5080] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.616752][ T4718] Bluetooth: hci1: command tx timeout [ 39.617209][ T4718] Bluetooth: hci4: command tx timeout [ 39.617230][ T4718] Bluetooth: hci3: command tx timeout [ 39.617247][ T4718] Bluetooth: hci2: command tx timeout [ 39.845822][ T4720] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.896399][ T5047] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.985342][ T3351] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.117228][ T4718] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 40.119522][ T4718] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 40.121493][ T4718] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 40.124036][ T4718] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 40.125860][ T4718] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 40.132392][ T3351] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.596269][ T5125] device-mapper: ioctl: Invalid target message parameters. [ 41.145633][ T4890] lg-g15 0003:046D:0A07.0001: hidraw0: USB HID v0.00 Device [syz0] on syz0 [ 41.148339][ T4890] input: Logitech Z-10 LCD Menu Keys as /devices/virtual/misc/uhid/0003:046D:0A07.0001/input/input3 [ 41.240155][ T3351] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.276125][ T5144] netlink: 36 bytes leftover after parsing attributes in process `syz.2.71'. [ 41.284597][ T3351] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.298374][ T5144] netlink: 24 bytes leftover after parsing attributes in process `syz.2.71'. [ 41.330698][ T5144] bond1: option arp_interval: mode dependency failed, not supported in mode 802.3ad(4) [ 41.334516][ T5144] bond1 (unregistering): Released all slaves [ 41.612274][ T3351] bridge_slave_1: left allmulticast mode [ 41.612330][ T3351] bridge_slave_1: left promiscuous mode [ 41.612794][ T3351] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.633494][ T3351] bridge_slave_0: left allmulticast mode [ 41.633526][ T3351] bridge_slave_0: left promiscuous mode [ 41.633618][ T3351] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.745902][ T5165] FAULT_INJECTION: forcing a failure. [ 41.745902][ T5165] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 41.749062][ T5165] CPU: 1 UID: 0 PID: 5165 Comm: syz.2.75 Not tainted syzkaller #0 PREEMPT [ 41.749082][ T5165] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 41.749088][ T5165] Call trace: [ 41.749092][ T5165] show_stack+0x2c/0x3c (C) [ 41.749116][ T5165] __dump_stack+0x30/0x40 [ 41.749128][ T5165] dump_stack_lvl+0xd8/0x12c [ 41.749138][ T5165] dump_stack+0x1c/0x28 [ 41.749147][ T5165] should_fail_ex+0x41c/0x590 [ 41.749158][ T5165] should_fail+0x14/0x24 [ 41.749168][ T5165] should_fail_usercopy+0x20/0x30 [ 41.749178][ T5165] simple_read_from_buffer+0xc4/0x238 [ 41.749188][ T5165] proc_fail_nth_read+0x1a8/0x248 [ 41.749197][ T5165] vfs_read+0x230/0x8c8 [ 41.749207][ T5165] ksys_read+0x12c/0x228 [ 41.749217][ T5165] __arm64_sys_read+0x84/0x98 [ 41.749227][ T5165] invoke_syscall+0x98/0x244 [ 41.749237][ T5165] el0_svc_common+0xec/0x23c [ 41.749247][ T5165] do_el0_svc+0x4c/0x5c [ 41.749256][ T5165] el0_svc+0x64/0x260 [ 41.749266][ T5165] el0t_64_sync_handler+0x44/0x104 [ 41.749274][ T5165] el0t_64_sync+0x198/0x19c [ 41.811055][ T3351] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 41.848734][ T3351] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 41.861190][ T3351] bond0 (unregistering): Released all slaves [ 41.877562][ T5173] FAULT_INJECTION: forcing a failure. [ 41.877562][ T5173] name failslab, interval 1, probability 0, space 0, times 0 [ 41.879039][ T5173] CPU: 0 UID: 0 PID: 5173 Comm: syz.2.78 Not tainted syzkaller #0 PREEMPT [ 41.879058][ T5173] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 41.879064][ T5173] Call trace: [ 41.879068][ T5173] show_stack+0x2c/0x3c (C) [ 41.879088][ T5173] __dump_stack+0x30/0x40 [ 41.879101][ T5173] dump_stack_lvl+0xd8/0x12c [ 41.879113][ T5173] dump_stack+0x1c/0x28 [ 41.879124][ T5173] should_fail_ex+0x41c/0x590 [ 41.879137][ T5173] should_failslab+0xc4/0x120 [ 41.879150][ T5173] kmem_cache_alloc_lru_noprof+0x98/0x5d8 [ 41.879164][ T5173] sock_alloc_inode+0x30/0x180 [ 41.879175][ T5173] alloc_inode+0x68/0x198 [ 41.879186][ T5173] sock_alloc+0x4c/0x204 [ 41.879194][ T5173] __sock_create+0x108/0x670 [ 41.879202][ T5173] __sys_socket_create+0xc0/0x11c [ 41.879211][ T5173] __sys_socket+0x44/0xec [ 41.879219][ T5173] __arm64_sys_socket+0x84/0x9c [ 41.879228][ T5173] invoke_syscall+0x98/0x244 [ 41.879239][ T5173] el0_svc_common+0xec/0x23c [ 41.879250][ T5173] do_el0_svc+0x4c/0x5c [ 41.879262][ T5173] el0_svc+0x64/0x260 [ 41.879275][ T5173] el0t_64_sync_handler+0x44/0x104 [ 41.879285][ T5173] el0t_64_sync+0x198/0x19c [ 41.879360][ T5173] socket: no more sockets [ 41.925710][ T5106] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.925796][ T5106] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.925861][ T5106] bridge_slave_0: entered allmulticast mode [ 41.930546][ T5106] bridge_slave_0: entered promiscuous mode [ 41.931483][ T5106] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.931505][ T5106] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.931556][ T5106] bridge_slave_1: entered allmulticast mode [ 41.935079][ T5106] bridge_slave_1: entered promiscuous mode [ 42.010487][ T5195] fuse: Bad value for 'fd' [ 42.066053][ T5203] FAULT_INJECTION: forcing a failure. [ 42.066053][ T5203] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 42.066095][ T5203] CPU: 0 UID: 0 PID: 5203 Comm: syz.4.83 Not tainted syzkaller #0 PREEMPT [ 42.066109][ T5203] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 42.066115][ T5203] Call trace: [ 42.066120][ T5203] show_stack+0x2c/0x3c (C) [ 42.066138][ T5203] __dump_stack+0x30/0x40 [ 42.066150][ T5203] dump_stack_lvl+0xd8/0x12c [ 42.066162][ T5203] dump_stack+0x1c/0x28 [ 42.066173][ T5203] should_fail_ex+0x41c/0x590 [ 42.066184][ T5203] should_fail+0x14/0x24 [ 42.066193][ T5203] should_fail_usercopy+0x20/0x30 [ 42.066203][ T5203] _inline_copy_from_user+0x3c/0x174 [ 42.066213][ T5203] do_sock_getsockopt+0x210/0x720 [ 42.066222][ T5203] __sys_getsockopt+0xfc/0x168 [ 42.066229][ T5203] __arm64_sys_getsockopt+0xc8/0xe4 [ 42.066238][ T5203] invoke_syscall+0x98/0x244 [ 42.066248][ T5203] el0_svc_common+0xec/0x23c [ 42.066257][ T5203] do_el0_svc+0x4c/0x5c [ 42.066267][ T5203] el0_svc+0x64/0x260 [ 42.066276][ T5203] el0t_64_sync_handler+0x44/0x104 [ 42.066284][ T5203] el0t_64_sync+0x198/0x19c [ 42.151060][ T5106] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 42.166775][ T4715] Bluetooth: hci0: command tx timeout [ 42.216340][ T5106] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 42.222316][ T4401] 8021q: adding VLAN 0 to HW filter on device eth0 [ 42.231158][ T5212] Zero length message leads to an empty skb [ 42.263037][ T5220] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(4.838860800.0), cmd(14) [ 42.274562][ T5106] team0: Port device team_slave_0 added [ 42.283738][ T5223] netlink: 'syz.0.88': attribute type 11 has an invalid length. [ 42.285596][ T5223] Bluetooth: MGMT ver 1.23 [ 42.289425][ T5106] team0: Port device team_slave_1 added [ 42.337700][ T3351] hsr_slave_0: left promiscuous mode [ 42.343307][ T3351] hsr_slave_1: left promiscuous mode [ 42.343649][ T3351] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 42.343674][ T3351] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 42.348225][ T3351] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 42.348237][ T3351] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 42.359190][ T3351] veth1_macvtap: left promiscuous mode [ 42.360347][ T3351] veth0_macvtap: left promiscuous mode [ 42.361402][ T3351] veth1_vlan: left promiscuous mode [ 42.362523][ T3351] veth0_vlan: left promiscuous mode [ 42.473026][ T3351] team0 (unregistering): Port device team_slave_1 removed [ 42.480064][ T3351] team0 (unregistering): Port device team_slave_0 removed [ 42.534474][ T5106] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 42.534499][ T5106] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 42.534517][ T5106] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 42.535186][ T5106] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 42.535194][ T5106] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 42.535206][ T5106] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 42.539683][ T4401] 8021q: adding VLAN 0 to HW filter on device eth2 [ 42.589600][ T5106] hsr_slave_0: entered promiscuous mode [ 42.591167][ T5106] hsr_slave_1: entered promiscuous mode [ 42.592484][ T5106] debugfs: 'hsr0' already exists in 'hsr' [ 42.592510][ T5106] Cannot create hsr debugfs directory [ 42.600688][ T5249] netlink: 4 bytes leftover after parsing attributes in process `syz.3.92'. [ 42.615584][ T5249] tmpfs: Cannot change global quota limit on remount [ 42.619236][ T5247] device-mapper: ioctl: Invalid target message parameters. [ 42.654356][ T5255] FAULT_INJECTION: forcing a failure. [ 42.654356][ T5255] name failslab, interval 1, probability 0, space 0, times 0 [ 42.654399][ T5255] CPU: 1 UID: 0 PID: 5255 Comm: syz.2.93 Not tainted syzkaller #0 PREEMPT [ 42.654415][ T5255] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 42.654420][ T5255] Call trace: [ 42.654424][ T5255] show_stack+0x2c/0x3c (C) [ 42.654443][ T5255] __dump_stack+0x30/0x40 [ 42.654453][ T5255] dump_stack_lvl+0xd8/0x12c [ 42.654463][ T5255] dump_stack+0x1c/0x28 [ 42.654473][ T5255] should_fail_ex+0x41c/0x590 [ 42.654484][ T5255] should_failslab+0xc4/0x120 [ 42.654495][ T5255] __kmalloc_cache_noprof+0x94/0x5fc [ 42.654502][ T5255] __kthread_create_on_node+0x118/0x3b0 [ 42.654511][ T5255] kthread_create_on_node+0xe4/0x134 [ 42.654519][ T5255] vivid_start_generating_vid_out+0x1bc/0x458 [ 42.654531][ T5255] vid_out_start_streaming+0xec/0x2d8 [ 42.654540][ T5255] vb2_start_streaming+0x114/0x4ac [ 42.654551][ T5255] vb2_core_streamon+0x288/0x44c [ 42.654561][ T5255] __vb2_init_fileio+0xb7c/0xe84 [ 42.654571][ T5255] __vb2_perform_fileio+0x228/0x1504 [ 42.654581][ T5255] vb2_write+0x4c/0x64 [ 42.654591][ T5255] vb2_fop_write+0x1bc/0x2b0 [ 42.654599][ T5255] v4l2_write+0x150/0x250 [ 42.654610][ T5255] do_loop_readv_writev+0x24c/0x3dc [ 42.654618][ T5255] vfs_writev+0x2c8/0x630 [ 42.654625][ T5255] do_writev+0x134/0x2a8 [ 42.654631][ T5255] __arm64_sys_writev+0x88/0x9c [ 42.654642][ T5255] invoke_syscall+0x98/0x244 [ 42.654652][ T5255] el0_svc_common+0xec/0x23c [ 42.654661][ T5255] do_el0_svc+0x4c/0x5c [ 42.654671][ T5255] el0_svc+0x64/0x260 [ 42.654680][ T5255] el0t_64_sync_handler+0x44/0x104 [ 42.654689][ T5255] el0t_64_sync+0x198/0x19c [ 42.654698][ T5255] vivid-000: kernel_thread() failed [ 42.688977][ T5254] loop4: detected capacity change from 0 to 512 [ 42.690784][ T5254] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 42.693262][ T5254] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 42.742635][ T5106] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 42.756318][ T5106] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 42.760016][ T5106] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 42.760449][ T5254] EXT4-fs (loop4): 1 truncate cleaned up [ 42.760894][ T5254] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 42.772546][ T5106] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 42.777174][ T5106] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 42.842420][ T5106] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 42.844680][ T5106] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 42.850313][ T5106] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 42.874001][ T5257] infiniband syz0: set active [ 42.875302][ T5257] infiniband syz0: added bond0 [ 43.154523][ T5257] RDS/IB: syz0: added [ 43.154680][ T5257] smc: adding ib device syz0 with port count 1 [ 43.154730][ T5257] smc: ib device syz0 port 1 has no pnetid [ 43.228160][ T5106] 8021q: adding VLAN 0 to HW filter on device bond0 [ 43.236265][ T5106] 8021q: adding VLAN 0 to HW filter on device team0 [ 43.250174][ T5106] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 43.252427][ T5106] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 43.284375][ T3227] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.284450][ T3227] bridge0: port 1(bridge_slave_0) entered forwarding state [ 43.287591][ T3227] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.287642][ T3227] bridge0: port 2(bridge_slave_1) entered forwarding state [ 43.415253][ T5295] FAULT_INJECTION: forcing a failure. [ 43.415253][ T5295] name failslab, interval 1, probability 0, space 0, times 0 [ 43.415279][ T5295] CPU: 0 UID: 0 PID: 5295 Comm: syz.0.99 Not tainted syzkaller #0 PREEMPT [ 43.415290][ T5295] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 43.415297][ T5295] Call trace: [ 43.415300][ T5295] show_stack+0x2c/0x3c (C) [ 43.415324][ T5295] __dump_stack+0x30/0x40 [ 43.415338][ T5295] dump_stack_lvl+0xd8/0x12c [ 43.415350][ T5295] dump_stack+0x1c/0x28 [ 43.415362][ T5295] should_fail_ex+0x41c/0x590 [ 43.415375][ T5295] should_failslab+0xc4/0x120 [ 43.415388][ T5295] kmem_cache_alloc_noprof+0x94/0x5d4 [ 43.415402][ T5295] __send_signal_locked+0x1ec/0xc9c [ 43.415415][ T5295] send_signal_locked+0x6bc/0x7ac [ 43.415428][ T5295] force_sig_info_to_task+0x288/0x438 [ 43.415441][ T5295] force_sig_fault+0xcc/0x124 [ 43.415449][ T5295] arm64_force_sig_fault+0x6c/0x80 [ 43.415462][ T5295] do_page_fault+0x424/0xb88 [ 43.415473][ T5295] do_translation_fault+0xc4/0x114 [ 43.415484][ T5295] do_mem_abort+0x70/0x194 [ 43.415494][ T5295] el0_da+0x78/0x254 [ 43.415504][ T5295] el0t_64_sync_handler+0xd8/0x104 [ 43.415515][ T5295] el0t_64_sync+0x198/0x19c [ 43.503355][ T4401] 8021q: adding VLAN 0 to HW filter on device eth1 [ 43.528615][ T4720] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.532133][ T5106] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 43.681733][ T4715] Bluetooth: hci2: unexpected subevent 0x0e length: 30 > 15 [ 43.683752][ T4715] Bluetooth: hci2: Unable to find connection for dst 00:00:00:00:00:00 sid 0x00 [ 43.755582][ T5106] veth0_vlan: entered promiscuous mode [ 43.777748][ T5333] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(3276804.0.0), cmd(9) [ 43.779895][ T5106] veth1_vlan: entered promiscuous mode [ 43.788960][ T5106] veth0_macvtap: entered promiscuous mode [ 43.791394][ T5106] veth1_macvtap: entered promiscuous mode [ 43.796767][ T5106] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 43.799943][ T5106] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 43.845514][ T12] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.849459][ T12] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.849686][ T12] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.849712][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 43.849721][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 43.849803][ T12] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.875581][ T5345] FAULT_INJECTION: forcing a failure. [ 43.875581][ T5345] name failslab, interval 1, probability 0, space 0, times 0 [ 43.875618][ T5345] CPU: 1 UID: 0 PID: 5345 Comm: syz.0.109 Not tainted syzkaller #0 PREEMPT [ 43.875630][ T5345] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 43.875636][ T5345] Call trace: [ 43.875640][ T5345] show_stack+0x2c/0x3c (C) [ 43.875658][ T5345] __dump_stack+0x30/0x40 [ 43.875670][ T5345] dump_stack_lvl+0xd8/0x12c [ 43.875680][ T5345] dump_stack+0x1c/0x28 [ 43.875689][ T5345] should_fail_ex+0x41c/0x590 [ 43.875700][ T5345] should_failslab+0xc4/0x120 [ 43.875711][ T5345] __kmalloc_noprof+0x108/0x6c8 [ 43.875719][ T5345] __memcg_list_lru_alloc+0x1c4/0x4e8 [ 43.875727][ T5345] memcg_list_lru_alloc+0xc4/0xf8 [ 43.875734][ T5345] __memcg_slab_post_alloc_hook+0x28c/0x8c0 [ 43.875745][ T5345] kmem_cache_alloc_lru_noprof+0x32c/0x5d8 [ 43.875756][ T5345] __d_alloc+0x50/0x690 [ 43.875764][ T5345] d_alloc_parallel+0xc4/0xf2c [ 43.875772][ T5345] lookup_open+0x234/0x1180 [ 43.875780][ T5345] path_openat+0x50c/0x18f4 [ 43.875788][ T5345] do_file_open+0x1c8/0x2e8 [ 43.875796][ T5345] do_sys_openat2+0x114/0x1e8 [ 43.875806][ T5345] do_sys_open+0xb0/0xe0 [ 43.875815][ T5345] __arm64_sys_openat+0xa8/0xc4 [ 43.875824][ T5345] invoke_syscall+0x98/0x244 [ 43.875834][ T5345] el0_svc_common+0xec/0x23c [ 43.875844][ T5345] do_el0_svc+0x4c/0x5c [ 43.875853][ T5345] el0_svc+0x64/0x260 [ 43.875862][ T5345] el0t_64_sync_handler+0x44/0x104 [ 43.875871][ T5345] el0t_64_sync+0x198/0x19c [ 43.905319][ T5344] loop4: detected capacity change from 0 to 512 [ 43.919764][ T3530] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 43.919801][ T3530] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 43.928929][ T4401] 8021q: adding VLAN 0 to HW filter on device eth3 [ 44.417055][ T4715] Bluetooth: hci0: command tx timeout [ 44.548057][ T3530] IPVS: starting estimator thread 0... [ 44.636770][ T5361] IPVS: using max 53 ests per chain, 127200 per kthread [ 44.748671][ T5367] netlink: 24 bytes leftover after parsing attributes in process `syz.4.113'. [ 44.793879][ T5370] loop5: detected capacity change from 0 to 512 [ 44.797702][ T5373] PKCS7: Unsupported SignedData version [ 44.800698][ T5370] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 44.815479][ T5370] EXT4-fs (loop5): 1 truncate cleaned up [ 44.815987][ T5370] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 44.895902][ T5379] overlay: Unknown parameter 'appraise_type' [ 44.913684][ T5379] netlink: 8 bytes leftover after parsing attributes in process `syz.2.116'. [ 45.203348][ T5387] binder: 5385:5387 tried to acquire reference to desc 0, got 1 instead [ 45.203827][ T5387] binder: 5385:5387 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 45.203840][ T5387] binder: 5387 RLIMIT_NICE not set [ 45.203851][ T5387] binder: 5387 RLIMIT_NICE not set [ 45.203945][ T5387] binder: 5387 RLIMIT_NICE not set [ 45.203976][ T5387] binder: 5385:5387 got transaction with invalid parent offset or type [ 45.204017][ T5387] binder: 5385:5387 transaction reply to 5385:5387 failed 15/29201/-22, code 0 size 80-24 line 3617 [ 45.204038][ T5387] binder: send failed reply for transaction 14 to 5385:5387 [ 45.217899][ T4809] binder: undelivered TRANSACTION_COMPLETE [ 45.217932][ T4809] binder: undelivered TRANSACTION_ERROR: 29201 [ 45.218049][ T4809] binder: undelivered TRANSACTION_ERROR: 29190 [ 45.664528][ T5106] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.711789][ T5426] FAULT_INJECTION: forcing a failure. [ 45.711789][ T5426] name failslab, interval 1, probability 0, space 0, times 0 [ 45.714656][ T5426] CPU: 1 UID: 0 PID: 5426 Comm: syz.0.129 Not tainted syzkaller #0 PREEMPT [ 45.714678][ T5426] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 45.714684][ T5426] Call trace: [ 45.714688][ T5426] show_stack+0x2c/0x3c (C) [ 45.714713][ T5426] __dump_stack+0x30/0x40 [ 45.714727][ T5426] dump_stack_lvl+0xd8/0x12c [ 45.714739][ T5426] dump_stack+0x1c/0x28 [ 45.714751][ T5426] should_fail_ex+0x41c/0x590 [ 45.714763][ T5426] should_failslab+0xc4/0x120 [ 45.714776][ T5426] kmem_cache_alloc_lru_noprof+0x98/0x5d8 [ 45.714790][ T5426] sock_alloc_inode+0x30/0x180 [ 45.714801][ T5426] alloc_inode+0x68/0x198 [ 45.714812][ T5426] sock_alloc+0x4c/0x204 [ 45.714820][ T5426] __sock_create+0x108/0x670 [ 45.714828][ T5426] __sys_socket_create+0xc0/0x11c [ 45.714837][ T5426] __sys_socket+0x44/0xec [ 45.714845][ T5426] __arm64_sys_socket+0x84/0x9c [ 45.714854][ T5426] invoke_syscall+0x98/0x244 [ 45.714866][ T5426] el0_svc_common+0xec/0x23c [ 45.714877][ T5426] do_el0_svc+0x4c/0x5c [ 45.714888][ T5426] el0_svc+0x64/0x260 [ 45.714899][ T5426] el0t_64_sync_handler+0x44/0x104 [ 45.714909][ T5426] el0t_64_sync+0x198/0x19c [ 45.726735][ T5426] socket: no more sockets [ 45.778511][ T5429] netlink: 'syz.0.130': attribute type 30 has an invalid length. [ 45.785463][ T5429] bond1: option arp_missed_max: invalid value (0) [ 45.787179][ T5429] bond1: option arp_missed_max: allowed values 1 - 255 [ 45.789650][ T5429] bond1 (unregistering): Released all slaves [ 46.507304][ T4715] Bluetooth: hci0: command tx timeout [ 46.655638][ T5444] netlink: 4 bytes leftover after parsing attributes in process `syz.2.132'. [ 46.708564][ T5445] netlink: 8 bytes leftover after parsing attributes in process `syz.2.132'. [ 47.211323][ T5460] device-mapper: ioctl: Invalid target message parameters. [ 47.211371][ T5460] FAULT_INJECTION: forcing a failure. [ 47.211371][ T5460] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 47.211400][ T5460] CPU: 0 UID: 0 PID: 5460 Comm: syz.0.138 Not tainted syzkaller #0 PREEMPT [ 47.211414][ T5460] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 47.211420][ T5460] Call trace: [ 47.211424][ T5460] show_stack+0x2c/0x3c (C) [ 47.211444][ T5460] __dump_stack+0x30/0x40 [ 47.211458][ T5460] dump_stack_lvl+0xd8/0x12c [ 47.211468][ T5460] dump_stack+0x1c/0x28 [ 47.211478][ T5460] should_fail_ex+0x41c/0x590 [ 47.211491][ T5460] should_fail+0x14/0x24 [ 47.211500][ T5460] should_fail_usercopy+0x20/0x30 [ 47.211510][ T5460] simple_read_from_buffer+0xc4/0x238 [ 47.211521][ T5460] proc_fail_nth_read+0x1a8/0x248 [ 47.211529][ T5460] vfs_read+0x230/0x8c8 [ 47.211540][ T5460] ksys_read+0x12c/0x228 [ 47.211549][ T5460] __arm64_sys_read+0x84/0x98 [ 47.211559][ T5460] invoke_syscall+0x98/0x244 [ 47.211570][ T5460] el0_svc_common+0xec/0x23c [ 47.211579][ T5460] do_el0_svc+0x4c/0x5c [ 47.211589][ T5460] el0_svc+0x64/0x260 [ 47.211598][ T5460] el0t_64_sync_handler+0x44/0x104 [ 47.211606][ T5460] el0t_64_sync+0x198/0x19c [ 47.247955][ T5464] bond1: entered allmulticast mode [ 47.248179][ T5464] 8021q: adding VLAN 0 to HW filter on device bond1 [ 47.330897][ T5466] loop5: detected capacity change from 0 to 512 [ 47.514233][ T5470] FAULT_INJECTION: forcing a failure. [ 47.514233][ T5470] name failslab, interval 1, probability 0, space 0, times 0 [ 47.514275][ T5470] CPU: 1 UID: 0 PID: 5470 Comm: syz.0.140 Not tainted syzkaller #0 PREEMPT [ 47.514291][ T5470] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 47.514298][ T5470] Call trace: [ 47.514302][ T5470] show_stack+0x2c/0x3c (C) [ 47.514323][ T5470] __dump_stack+0x30/0x40 [ 47.514339][ T5470] dump_stack_lvl+0xd8/0x12c [ 47.514350][ T5470] dump_stack+0x1c/0x28 [ 47.514361][ T5470] should_fail_ex+0x41c/0x590 [ 47.514374][ T5470] should_failslab+0xc4/0x120 [ 47.514388][ T5470] kmem_cache_alloc_lru_noprof+0x98/0x5d8 [ 47.514402][ T5470] sock_alloc_inode+0x30/0x180 [ 47.514414][ T5470] alloc_inode+0x68/0x198 [ 47.514426][ T5470] sock_alloc+0x4c/0x204 [ 47.514434][ T5470] __sock_create+0x108/0x670 [ 47.514442][ T5470] __sys_socket_create+0xc0/0x11c [ 47.514451][ T5470] __sys_socket+0x44/0xec [ 47.514459][ T5470] __arm64_sys_socket+0x84/0x9c [ 47.514468][ T5470] invoke_syscall+0x98/0x244 [ 47.514480][ T5470] el0_svc_common+0xec/0x23c [ 47.514491][ T5470] do_el0_svc+0x4c/0x5c [ 47.514502][ T5470] el0_svc+0x64/0x260 [ 47.514513][ T5470] el0t_64_sync_handler+0x44/0x104 [ 47.514523][ T5470] el0t_64_sync+0x198/0x19c [ 47.514549][ T5470] socket: no more sockets [ 47.517405][ T5466] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 47.542145][ T5472] binder: 5471:5472 tried to acquire reference to desc 0, got 1 instead [ 47.673773][ T4890] binder: release 5471:5472 transaction 22 out, still active [ 47.673809][ T4890] binder: undelivered TRANSACTION_COMPLETE [ 47.673835][ T4890] binder: undelivered TRANSACTION_COMPLETE [ 47.692156][ T4890] binder: send failed reply for transaction 22, target dead [ 47.692186][ T4890] binder: undelivered transaction 23, process died. [ 47.710714][ T5487] netlink: 40 bytes leftover after parsing attributes in process `syz.2.147'. [ 47.731289][ T5489] FAULT_INJECTION: forcing a failure. [ 47.731289][ T5489] name failslab, interval 1, probability 0, space 0, times 0 [ 47.731318][ T5489] CPU: 0 UID: 0 PID: 5489 Comm: syz.2.148 Not tainted syzkaller #0 PREEMPT [ 47.731331][ T5489] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 47.731338][ T5489] Call trace: [ 47.731341][ T5489] show_stack+0x2c/0x3c (C) [ 47.731361][ T5489] __dump_stack+0x30/0x40 [ 47.731372][ T5489] dump_stack_lvl+0xd8/0x12c [ 47.731382][ T5489] dump_stack+0x1c/0x28 [ 47.731392][ T5489] should_fail_ex+0x41c/0x590 [ 47.731403][ T5489] should_failslab+0xc4/0x120 [ 47.731414][ T5489] kmem_cache_alloc_lru_noprof+0x98/0x5d8 [ 47.731425][ T5489] alloc_inode+0x84/0x198 [ 47.731435][ T5489] new_inode+0x20/0x50 [ 47.731443][ T5489] configfs_new_inode+0x30/0x3c8 [ 47.731455][ T5489] configfs_create+0xc4/0x22c [ 47.731465][ T5489] configfs_lookup+0x328/0x624 [ 47.731472][ T5489] lookup_open+0x6a8/0x1180 [ 47.731480][ T5489] path_openat+0x50c/0x18f4 [ 47.731488][ T5489] do_file_open+0x1c8/0x2e8 [ 47.731496][ T5489] do_sys_openat2+0x114/0x1e8 [ 47.731506][ T5489] do_sys_open+0xb0/0xe0 [ 47.731515][ T5489] __arm64_sys_openat+0xa8/0xc4 [ 47.731525][ T5489] invoke_syscall+0x98/0x244 [ 47.731535][ T5489] el0_svc_common+0xec/0x23c [ 47.731544][ T5489] do_el0_svc+0x4c/0x5c [ 47.731554][ T5489] el0_svc+0x64/0x260 [ 47.731563][ T5489] el0t_64_sync_handler+0x44/0x104 [ 47.731572][ T5489] el0t_64_sync+0x198/0x19c [ 48.028855][ T5106] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.095554][ T5500] device-mapper: ioctl: Invalid target message parameters. [ 48.500214][ T5512] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(1601007108.796096883.46), cmd(9) [ 48.525471][ T5518] netlink: 12 bytes leftover after parsing attributes in process `syz.0.157'. [ 48.526320][ T5518] FAULT_INJECTION: forcing a failure. [ 48.526320][ T5518] name failslab, interval 1, probability 0, space 0, times 0 [ 48.526335][ T5518] CPU: 1 UID: 0 PID: 5518 Comm: syz.0.157 Not tainted syzkaller #0 PREEMPT [ 48.526345][ T5518] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 48.526351][ T5518] Call trace: [ 48.526354][ T5518] show_stack+0x2c/0x3c (C) [ 48.526374][ T5518] __dump_stack+0x30/0x40 [ 48.526388][ T5518] dump_stack_lvl+0xd8/0x12c [ 48.526400][ T5518] dump_stack+0x1c/0x28 [ 48.526411][ T5518] should_fail_ex+0x41c/0x590 [ 48.526424][ T5518] should_failslab+0xc4/0x120 [ 48.526437][ T5518] kmem_cache_alloc_noprof+0x94/0x5d4 [ 48.526450][ T5518] locks_alloc_lease+0x28/0x12c [ 48.526462][ T5518] lease_alloc+0x2c/0x1b4 [ 48.526472][ T5518] do_fcntl_add_lease+0xa8/0x1cc [ 48.526483][ T5518] fcntl_setlease+0x11c/0x188 [ 48.526493][ T5518] do_fcntl+0x140/0x1568 [ 48.526506][ T5518] __arm64_sys_fcntl+0x118/0x1ac [ 48.526517][ T5518] invoke_syscall+0x98/0x244 [ 48.526529][ T5518] el0_svc_common+0xec/0x23c [ 48.526541][ T5518] do_el0_svc+0x4c/0x5c [ 48.526552][ T5518] el0_svc+0x64/0x260 [ 48.526563][ T5518] el0t_64_sync_handler+0x44/0x104 [ 48.526572][ T5518] el0t_64_sync+0x198/0x19c [ 48.567955][ T4715] Bluetooth: hci0: command tx timeout [ 48.689220][ T5520] mmap: syz.5.158 (5520) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 48.899906][ T5536] netlink: 4 bytes leftover after parsing attributes in process `syz.2.163'. [ 49.361373][ T5546] device-mapper: ioctl: name not supplied when creating device [ 49.382278][ T5548] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(4.3276800.0), cmd(14) [ 50.548959][ T5566] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 50.549005][ T5566] overlayfs: failed to set xattr on upper [ 50.549010][ T5566] overlayfs: ...falling back to redirect_dir=nofollow. [ 50.549015][ T5566] overlayfs: ...falling back to metacopy=off. [ 50.549020][ T5566] overlayfs: ...falling back to uuid=null. [ 50.585117][ T5568] loop5: detected capacity change from 0 to 128 [ 51.571179][ T5579] loop5: detected capacity change from 0 to 256 [ 51.571607][ T5579] vfat: Unknown parameter 'hash' [ 51.869828][ T5536] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 51.921159][ T5589] device-mapper: table: 248:0: zero-length target [ 51.921186][ T5589] device-mapper: ioctl: error adding target to table [ 52.497082][ T5610] netlink: 16 bytes leftover after parsing attributes in process `syz.5.184'. [ 53.347124][ T5623] FAULT_INJECTION: forcing a failure. [ 53.347124][ T5623] name failslab, interval 1, probability 0, space 0, times 0 [ 53.347163][ T5623] CPU: 0 UID: 0 PID: 5623 Comm: syz.5.186 Tainted: G L syzkaller #0 PREEMPT [ 53.347181][ T5623] Tainted: [L]=SOFTLOCKUP [ 53.347184][ T5623] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 53.347190][ T5623] Call trace: [ 53.347192][ T5623] show_stack+0x2c/0x3c (C) [ 53.347212][ T5623] __dump_stack+0x30/0x40 [ 53.347223][ T5623] dump_stack_lvl+0xd8/0x12c [ 53.347233][ T5623] dump_stack+0x1c/0x28 [ 53.347242][ T5623] should_fail_ex+0x41c/0x590 [ 53.347253][ T5623] should_failslab+0xc4/0x120 [ 53.347264][ T5623] __kmalloc_cache_noprof+0x94/0x5fc [ 53.347273][ T5623] sget_fc+0x5f4/0x14e8 [ 53.347281][ T5623] vfs_get_super+0x40/0x148 [ 53.347289][ T5623] get_tree_nodev+0x2c/0x3c [ 53.347297][ T5623] shmem_get_tree+0x28/0x38 [ 53.347307][ T5623] vfs_get_tree+0x90/0x28c [ 53.347315][ T5623] fc_mount+0x24/0xac [ 53.347324][ T5623] do_new_mount+0x2a4/0x538 [ 53.347332][ T5623] path_mount+0x5f0/0xa88 [ 53.347341][ T5623] do_mount+0xe8/0x148 [ 53.347350][ T5623] __arm64_sys_mount+0x33c/0x388 [ 53.347359][ T5623] invoke_syscall+0x98/0x244 [ 53.347369][ T5623] el0_svc_common+0xec/0x23c [ 53.347378][ T5623] do_el0_svc+0x4c/0x5c [ 53.347388][ T5623] el0_svc+0x64/0x260 [ 53.347397][ T5623] el0t_64_sync_handler+0x44/0x104 [ 53.347406][ T5623] el0t_64_sync+0x198/0x19c [ 53.581032][ T5633] loop5: detected capacity change from 0 to 1024 [ 53.583360][ T5633] EXT4-fs: Ignoring removed bh option [ 53.585561][ T5633] EXT4-fs (loop5): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 53.616337][ T5633] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 53.622883][ T5643] FAULT_INJECTION: forcing a failure. [ 53.622883][ T5643] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 53.622922][ T5643] CPU: 1 UID: 0 PID: 5643 Comm: syz.4.188 Tainted: G L syzkaller #0 PREEMPT [ 53.622938][ T5643] Tainted: [L]=SOFTLOCKUP [ 53.622943][ T5643] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 53.622949][ T5643] Call trace: [ 53.622953][ T5643] show_stack+0x2c/0x3c (C) [ 53.622973][ T5643] __dump_stack+0x30/0x40 [ 53.622985][ T5643] dump_stack_lvl+0xd8/0x12c [ 53.623001][ T5643] dump_stack+0x1c/0x28 [ 53.623013][ T5643] should_fail_ex+0x41c/0x590 [ 53.623026][ T5643] should_fail+0x14/0x24 [ 53.623038][ T5643] should_fail_usercopy+0x20/0x30 [ 53.623049][ T5643] simple_read_from_buffer+0xc4/0x238 [ 53.623059][ T5643] proc_fail_nth_read+0x1a8/0x248 [ 53.623068][ T5643] vfs_read+0x230/0x8c8 [ 53.623078][ T5643] ksys_read+0x12c/0x228 [ 53.623088][ T5643] __arm64_sys_read+0x84/0x98 [ 53.623098][ T5643] invoke_syscall+0x98/0x244 [ 53.623108][ T5643] el0_svc_common+0xec/0x23c [ 53.623118][ T5643] do_el0_svc+0x4c/0x5c [ 53.623127][ T5643] el0_svc+0x64/0x260 [ 53.623137][ T5643] el0t_64_sync_handler+0x44/0x104 [ 53.623145][ T5643] el0t_64_sync+0x198/0x19c [ 53.658033][ T5633] overlayfs: failed to resolve 'w5T)`)YFnA@T<3ڂ$rcnHwC" -8/': -2 [ 53.669254][ T5633] EXT4-fs error (device loop5): ext4_check_all_de:675: inode #12: block 7: comm syz.5.187: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=108 fake=0 [ 53.671215][ T5633] EXT4-fs (loop5): Remounting filesystem read-only [ 53.689165][ T5106] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.725113][ T5651] FAULT_INJECTION: forcing a failure. [ 53.725113][ T5651] name failslab, interval 1, probability 0, space 0, times 0 [ 53.725152][ T5651] CPU: 1 UID: 0 PID: 5651 Comm: syz.0.192 Tainted: G L syzkaller #0 PREEMPT [ 53.725167][ T5651] Tainted: [L]=SOFTLOCKUP [ 53.725171][ T5651] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 53.725177][ T5651] Call trace: [ 53.725181][ T5651] show_stack+0x2c/0x3c (C) [ 53.725201][ T5651] __dump_stack+0x30/0x40 [ 53.725212][ T5651] dump_stack_lvl+0xd8/0x12c [ 53.725222][ T5651] dump_stack+0x1c/0x28 [ 53.725231][ T5651] should_fail_ex+0x41c/0x590 [ 53.725242][ T5651] should_failslab+0xc4/0x120 [ 53.725254][ T5651] __kmalloc_noprof+0x108/0x6c8 [ 53.725261][ T5651] tomoyo_realpath_from_path+0xbc/0x4dc [ 53.725271][ T5651] tomoyo_check_open_permission+0x1c4/0x394 [ 53.725280][ T5651] tomoyo_file_open+0x78/0xcc [ 53.725288][ T5651] security_file_open+0xbc/0x258 [ 53.725297][ T5651] do_dentry_open+0x2a8/0xfc0 [ 53.725307][ T5651] vfs_open+0x44/0x2dc [ 53.725316][ T5651] path_openat+0x1084/0x18f4 [ 53.725324][ T5651] do_file_open+0x1c8/0x2e8 [ 53.725333][ T5651] do_sys_openat2+0x114/0x1e8 [ 53.725342][ T5651] do_sys_open+0xb0/0xe0 [ 53.725351][ T5651] __arm64_sys_openat+0xa8/0xc4 [ 53.725360][ T5651] invoke_syscall+0x98/0x244 [ 53.725370][ T5651] el0_svc_common+0xec/0x23c [ 53.725380][ T5651] do_el0_svc+0x4c/0x5c [ 53.725389][ T5651] el0_svc+0x64/0x260 [ 53.725399][ T5651] el0t_64_sync_handler+0x44/0x104 [ 53.725407][ T5651] el0t_64_sync+0x198/0x19c [ 53.725416][ T5651] ERROR: Out of memory at tomoyo_realpath_from_path. [ 53.872680][ T5666] tipc: Started in network mode [ 53.872723][ T5666] tipc: Node identity ac14140f, cluster identity 4711 [ 53.873047][ T5666] tipc: New replicast peer: 255.255.255.255 [ 53.873213][ T5666] tipc: Enabled bearer , priority 10 [ 54.988391][ T4430] tipc: Node number set to 2886997007 [ 55.367259][ T5701] pi3usb30532 0-0005: Error reading config register -5 [ 55.367673][ T5701] pi3usb30532 0-0005: probe with driver pi3usb30532 failed with error -5 [ 55.367899][ T5701] i2c i2c-0: new_device: Instantiated device pi3usb30532 at 0x05 [ 55.378407][ T5701] netlink: 12 bytes leftover after parsing attributes in process `syz.0.204'. [ 55.399758][ T197] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.542887][ T4718] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 55.544029][ T197] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.546446][ T4718] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 55.549842][ T4718] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 55.552865][ T4718] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 55.554785][ T4718] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 55.852152][ T197] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.031275][ T197] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.090167][ T5751] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(838860804.0.0), cmd(9) [ 56.138806][ T5756] binder: 5755:5756 tried to acquire reference to desc 0, got 1 instead [ 56.142615][ T5756] binder: 5755:5756 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 56.142655][ T5756] binder: 5756 RLIMIT_NICE not set [ 56.142676][ T5756] binder: 5756 RLIMIT_NICE not set [ 56.144001][ T5756] binder: 5756 RLIMIT_NICE not set [ 56.144050][ T5756] binder: 5755:5756 got transaction with invalid data ptr [ 56.144100][ T5756] binder: 5755:5756 transaction reply to 5755:5756 failed 29/29201/-14, code 0 size 80-24 line 3511 [ 56.144137][ T5756] binder: send failed reply for transaction 28 to 5755:5756 [ 56.153976][ T9] binder: undelivered TRANSACTION_COMPLETE [ 56.154001][ T9] binder: undelivered TRANSACTION_ERROR: 29201 [ 56.154166][ T9] binder: undelivered TRANSACTION_ERROR: 29190 [ 56.231164][ T197] bridge_slave_1: left allmulticast mode [ 56.231437][ T197] bridge_slave_1: left promiscuous mode [ 56.231522][ T197] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.234189][ T197] bridge_slave_0: left allmulticast mode [ 56.234203][ T197] bridge_slave_0: left promiscuous mode [ 56.234268][ T197] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.241629][ T5765] netlink: 64 bytes leftover after parsing attributes in process `syz.2.219'. [ 56.298438][ T40] smc: removing ib device syz0 [ 56.350627][ T197] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 56.358871][ T197] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 56.397886][ T197] bond0 (unregistering): Released all slaves [ 56.640136][ T5799] FAULT_INJECTION: forcing a failure. [ 56.640136][ T5799] name failslab, interval 1, probability 0, space 0, times 0 [ 56.640179][ T5799] CPU: 1 UID: 0 PID: 5799 Comm: syz.4.227 Tainted: G L syzkaller #0 PREEMPT [ 56.640197][ T5799] Tainted: [L]=SOFTLOCKUP [ 56.640202][ T5799] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 56.640208][ T5799] Call trace: [ 56.640211][ T5799] show_stack+0x2c/0x3c (C) [ 56.640230][ T5799] __dump_stack+0x30/0x40 [ 56.640244][ T5799] dump_stack_lvl+0xd8/0x12c [ 56.640254][ T5799] dump_stack+0x1c/0x28 [ 56.640264][ T5799] should_fail_ex+0x41c/0x590 [ 56.640277][ T5799] should_failslab+0xc4/0x120 [ 56.640288][ T5799] kmem_cache_alloc_node_noprof+0x98/0x604 [ 56.640300][ T5799] __alloc_skb+0x1f0/0x610 [ 56.640309][ T5799] netlink_alloc_large_skb+0xd4/0x114 [ 56.640318][ T5799] netlink_sendmsg+0x4c4/0x948 [ 56.640326][ T5799] __sock_sendmsg+0xc8/0x17c [ 56.640333][ T5799] ____sys_sendmsg+0x3d0/0x6c8 [ 56.640341][ T5799] ___sys_sendmsg+0x198/0x224 [ 56.640349][ T5799] __sys_sendmsg+0x158/0x204 [ 56.640358][ T5799] __arm64_sys_sendmsg+0x88/0x9c [ 56.640366][ T5799] invoke_syscall+0x98/0x244 [ 56.640376][ T5799] el0_svc_common+0xec/0x23c [ 56.640385][ T5799] do_el0_svc+0x4c/0x5c [ 56.640395][ T5799] el0_svc+0x64/0x260 [ 56.640404][ T5799] el0t_64_sync_handler+0x44/0x104 [ 56.640412][ T5799] el0t_64_sync+0x198/0x19c [ 56.691618][ T5804] netlink: 68 bytes leftover after parsing attributes in process `syz.4.228'. [ 56.800978][ T4401] 8021q: adding VLAN 0 to HW filter on device eth4 [ 56.804974][ T5714] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.805042][ T5714] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.805123][ T5714] bridge_slave_0: entered allmulticast mode [ 56.816410][ T5714] bridge_slave_0: entered promiscuous mode [ 56.820532][ T5714] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.820580][ T5714] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.820643][ T5714] bridge_slave_1: entered allmulticast mode [ 56.821841][ T5804] netlink: 24 bytes leftover after parsing attributes in process `syz.4.228'. [ 56.831475][ T5714] bridge_slave_1: entered promiscuous mode [ 56.886847][ T5714] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 56.896075][ T5714] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 56.977535][ T5714] team0: Port device team_slave_0 added [ 56.980953][ T5714] team0: Port device team_slave_1 added [ 57.044266][ T5714] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 57.044298][ T5714] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 57.044313][ T5714] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 57.062647][ T5714] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 57.062679][ T5714] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 57.062695][ T5714] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 57.180464][ T5714] hsr_slave_0: entered promiscuous mode [ 57.182085][ T5714] hsr_slave_1: entered promiscuous mode [ 57.182325][ T5714] debugfs: 'hsr0' already exists in 'hsr' [ 57.182336][ T5714] Cannot create hsr debugfs directory [ 57.185092][ T4401] 8021q: adding VLAN 0 to HW filter on device eth5 [ 57.280609][ T5843] device-mapper: ioctl: populate_table: no targets specified [ 57.282177][ T5714] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 57.289538][ T5714] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 57.291160][ T5714] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 57.360357][ T5714] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 57.379240][ T5714] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 57.383366][ T5714] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 57.386554][ T5714] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 57.397055][ T5714] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 57.607597][ T4718] Bluetooth: hci4: command tx timeout [ 57.763959][ T4401] 8021q: adding VLAN 0 to HW filter on device eth6 [ 57.844621][ T5714] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.851356][ T5714] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.855594][ T1180] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.855636][ T1180] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.860586][ T3530] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.860629][ T3530] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.960468][ T197] hsr_slave_0: left promiscuous mode [ 57.961685][ T197] hsr_slave_1: left promiscuous mode [ 57.962077][ T197] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 57.962088][ T197] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 57.966602][ T197] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 57.966627][ T197] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 57.976100][ T197] veth1_macvtap: left promiscuous mode [ 57.976152][ T197] veth0_macvtap: left promiscuous mode [ 57.976206][ T197] veth1_vlan: left promiscuous mode [ 57.976632][ T197] veth0_vlan: left promiscuous mode [ 58.172674][ T197] team0 (unregistering): Port device team_slave_1 removed [ 58.181320][ T197] team0 (unregistering): Port device team_slave_0 removed [ 58.209192][ T5900] nvme_fc: nvme_fc_create_ctrl: nn-0x3333333333333333:pn-0x4444444444444444 - nn-0x1111111111111111:pn-0x2222222222222222 combination not found [ 58.349789][ T5714] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.463362][ T5714] veth0_vlan: entered promiscuous mode [ 58.470631][ T5714] veth1_vlan: entered promiscuous mode [ 58.484450][ T5714] veth0_macvtap: entered promiscuous mode [ 58.493672][ T5714] veth1_macvtap: entered promiscuous mode [ 58.503827][ T5714] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 58.504828][ T5714] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 58.517620][ T197] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.522834][ T197] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.522938][ T197] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.522963][ T197] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.580793][ T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.580827][ T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.593157][ T5929] gadgetfs: bound to dummy_udc driver [ 58.606619][ T197] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.606658][ T197] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.682802][ T5937] netlink: 8 bytes leftover after parsing attributes in process `syz.2.241'. [ 59.093727][ T4891] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 59.094345][ C1] gadgetfs: connected [ 59.099295][ T4891] gadgetfs: disconnected [ 59.099951][ T4890] kernel read not supported for file /dummy_udc (pid: 4890 comm: kworker/1:4) [ 59.140113][ T4401] 8021q: adding VLAN 0 to HW filter on device eth7 [ 59.183207][ T5967] netlink: 116 bytes leftover after parsing attributes in process `syz.5.249'. [ 59.656648][ T5987] loop6: detected capacity change from 0 to 512 [ 59.659876][ T5987] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 59.726739][ T4718] Bluetooth: hci4: command tx timeout [ 59.737220][ T5990] capability: warning: `syz.2.256' uses deprecated v2 capabilities in a way that may be insecure [ 59.741550][ T5987] EXT4-fs (loop6): 1 truncate cleaned up [ 59.742039][ T5987] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 60.359054][ T6007] vhci_hcd vhci_hcd.0: Expecting SOCK_STREAM - found 2 [ 60.434499][ T6019] netlink: 8 bytes leftover after parsing attributes in process `syz.4.261'. [ 60.439175][ T6019] erspan0: entered promiscuous mode [ 61.106353][ T6019] netlink: 16 bytes leftover after parsing attributes in process `syz.4.261'. [ 61.118214][ T5714] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.132246][ T6027] overlay: Bad value for 'metacopy' [ 61.256509][ T3227] wlan1: IBSS 50:50:50:50:50:50 switches to unsupported channel (2484 MHz, width:0, CF1/2: 2484/0 MHz), disconnecting [ 61.400650][ T3227] wlan1: Selected IBSS BSSID 50:50:50:50:50:50 based on configured SSID [ 61.768908][ T4718] Bluetooth: hci4: command tx timeout [ 62.150902][ T6105] loop6: detected capacity change from 0 to 512 [ 62.153994][ T6105] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 62.161855][ T6105] EXT4-fs (loop6): 1 truncate cleaned up [ 62.165141][ T6105] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 62.264294][ T4891] atkbd serio0: keyboard reset failed on [ 62.564481][ T6131] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(4.2048.0), cmd(9) [ 62.710891][ T6159] netlink: 264 bytes leftover after parsing attributes in process `syz.5.285'. [ 62.812695][ T6164] netlink: 264 bytes leftover after parsing attributes in process `syz.5.285'. [ 63.285177][ T5714] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.674550][ T6190] FAULT_INJECTION: forcing a failure. [ 63.674550][ T6190] name failslab, interval 1, probability 0, space 0, times 0 [ 63.677550][ T6190] CPU: 0 UID: 0 PID: 6190 Comm: syz.6.292 Tainted: G L syzkaller #0 PREEMPT [ 63.677572][ T6190] Tainted: [L]=SOFTLOCKUP [ 63.677577][ T6190] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 63.677585][ T6190] Call trace: [ 63.677589][ T6190] show_stack+0x2c/0x3c (C) [ 63.677611][ T6190] __dump_stack+0x30/0x40 [ 63.677625][ T6190] dump_stack_lvl+0xd8/0x12c [ 63.677636][ T6190] dump_stack+0x1c/0x28 [ 63.677647][ T6190] should_fail_ex+0x41c/0x590 [ 63.677660][ T6190] should_failslab+0xc4/0x120 [ 63.677673][ T6190] __kmalloc_cache_noprof+0x94/0x5fc [ 63.677682][ T6190] io_ring_ctx_alloc+0x64/0x958 [ 63.677692][ T6190] io_uring_create+0x6c/0x830 [ 63.677701][ T6190] __arm64_sys_io_uring_setup+0x284/0x290 [ 63.677711][ T6190] invoke_syscall+0x98/0x244 [ 63.677723][ T6190] el0_svc_common+0xec/0x23c [ 63.677735][ T6190] do_el0_svc+0x4c/0x5c [ 63.677746][ T6190] el0_svc+0x64/0x260 [ 63.677756][ T6190] el0t_64_sync_handler+0x44/0x104 [ 63.677766][ T6190] el0t_64_sync+0x198/0x19c [ 63.721409][ T6190] tmpfs: Unknown parameter '' [ 63.779669][ T3351] wlan1: IBSS 50:50:50:50:50:50 switches to unsupported channel (2484 MHz, width:0, CF1/2: 2484/0 MHz), disconnecting [ 63.847231][ T4718] Bluetooth: hci4: command tx timeout [ 63.864532][ T30] audit: type=1326 audit(63.850:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6206 comm="syz.5.300" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff9e3792a8 code=0x0 [ 64.083274][ T3351] wlan1: Selected IBSS BSSID 50:50:50:50:50:50 based on configured SSID [ 64.557698][ T1593] ieee802154 phy0 wpan0: encryption failed: -22 [ 64.557770][ T1593] ieee802154 phy1 wpan1: encryption failed: -22 [ 64.633066][ T867] cfg80211: failed to load regulatory.db [ 64.826455][ T9] atkbd serio1: keyboard reset failed on [ 65.173020][ T6238] netlink: 8 bytes leftover after parsing attributes in process `syz.2.309'. [ 65.200732][ T6240] device-mapper: table: 248:0: too large device [ 65.200761][ T6240] device-mapper: ioctl: error adding target to table [ 65.204622][ T6238] tipc: Enabling of bearer rejected, failed to enable media [ 65.222106][ T6244] device-mapper: ioctl: Invalid target message parameters. [ 65.347446][ T6261] netlink: 116 bytes leftover after parsing attributes in process `syz.6.315'. [ 65.415133][ T6268] device-mapper: ioctl: populate_table: no targets specified [ 65.450787][ T6277] netlink: 28 bytes leftover after parsing attributes in process `syz.6.321'. [ 65.452746][ T6277] netlink: 'syz.6.321': attribute type 7 has an invalid length. [ 65.455191][ T6277] netlink: 'syz.6.321': attribute type 8 has an invalid length. [ 65.458103][ T6277] netlink: 4 bytes leftover after parsing attributes in process `syz.6.321'. [ 65.462992][ T6277] gretap0: entered promiscuous mode [ 65.503124][ T6278] netlink: 28 bytes leftover after parsing attributes in process `syz.6.321'. [ 65.503163][ T6278] netlink: 'syz.6.321': attribute type 7 has an invalid length. [ 65.508072][ T6278] netlink: 'syz.6.321': attribute type 8 has an invalid length. [ 65.508112][ T6278] netlink: 4 bytes leftover after parsing attributes in process `syz.6.321'. [ 65.514324][ T6277] gretap0: left promiscuous mode [ 65.521567][ T6278] gretap0: entered promiscuous mode [ 65.523465][ T6278] gretap0: left promiscuous mode [ 65.723809][ T6306] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(1835925508.1937339231.11823), cmd(9) [ 65.744387][ T6309] device-mapper: ioctl: Invalid target message parameters. [ 65.883245][ T6326] netlink: 'syz.5.327': attribute type 9 has an invalid length. [ 65.883285][ T6326] netlink: 'syz.5.327': attribute type 7 has an invalid length. [ 65.883315][ T6326] netlink: 'syz.5.327': attribute type 8 has an invalid length. [ 65.922494][ T6326] device-mapper: table: 248:0: too large device [ 65.922524][ T6326] device-mapper: ioctl: error adding target to table [ 66.143156][ T6351] netlink: 8 bytes leftover after parsing attributes in process `syz.4.341'. [ 66.166208][ T6351] device-mapper: ioctl: populate_table: no targets specified [ 66.227649][ T6358] binder: 6357:6358 tried to acquire reference to desc 0, got 1 instead [ 66.229815][ T6358] binder: 6357:6358 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 66.229828][ T6358] binder: 6358 RLIMIT_NICE not set [ 66.229841][ T6358] binder: 6358 RLIMIT_NICE not set [ 66.230980][ T6358] binder: 6358 RLIMIT_NICE not set [ 66.231022][ T6358] binder: 6357:6358 got transaction with invalid data ptr [ 66.231061][ T6358] binder: 6357:6358 transaction reply to 6357:6358 failed 35/29201/-14, code 0 size 80-24 line 3511 [ 66.231083][ T6358] binder: send failed reply for transaction 34 to 6357:6358 [ 66.249851][ T4809] binder: undelivered TRANSACTION_ERROR: 29190 [ 66.249920][ T4809] binder: undelivered TRANSACTION_COMPLETE [ 66.249930][ T4809] binder: undelivered TRANSACTION_ERROR: 29201 [ 66.385295][ T6376] device-mapper: ioctl: Invalid target message parameters. [ 66.822423][ T6400] PKCS7: Unsupported SignerInfo version [ 66.844399][ T6402] device-mapper: ioctl: populate_table: no targets specified [ 67.312484][ T6417] sctp: [Deprecated]: syz.4.361 (pid 6417) Use of int in max_burst socket option. [ 67.312484][ T6417] Use struct sctp_assoc_value instead [ 67.354668][ T6423] FAULT_INJECTION: forcing a failure. [ 67.354668][ T6423] name failslab, interval 1, probability 0, space 0, times 0 [ 67.357818][ T6423] CPU: 0 UID: 0 PID: 6423 Comm: syz.4.364 Tainted: G L syzkaller #0 PREEMPT [ 67.357841][ T6423] Tainted: [L]=SOFTLOCKUP [ 67.357845][ T6423] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 67.357851][ T6423] Call trace: [ 67.357854][ T6423] show_stack+0x2c/0x3c (C) [ 67.357878][ T6423] __dump_stack+0x30/0x40 [ 67.357889][ T6423] dump_stack_lvl+0xd8/0x12c [ 67.357901][ T6423] dump_stack+0x1c/0x28 [ 67.357912][ T6423] should_fail_ex+0x41c/0x590 [ 67.357924][ T6423] should_failslab+0xc4/0x120 [ 67.357935][ T6423] kmem_cache_alloc_noprof+0x94/0x5d4 [ 67.357946][ T6423] security_inode_alloc+0x40/0x304 [ 67.357954][ T6423] inode_init_always_gfp+0x704/0xbac [ 67.357964][ T6423] alloc_inode+0x9c/0x198 [ 67.357973][ T6423] new_inode+0x20/0x50 [ 67.357987][ T6423] shmem_get_inode+0xac/0x788 [ 67.358001][ T6423] shmem_fill_super+0x984/0xe68 [ 67.358013][ T6423] vfs_get_super+0xb8/0x148 [ 67.358021][ T6423] get_tree_nodev+0x2c/0x3c [ 67.358029][ T6423] shmem_get_tree+0x28/0x38 [ 67.358039][ T6423] vfs_get_tree+0x90/0x28c [ 67.358047][ T6423] fc_mount+0x24/0xac [ 67.358055][ T6423] do_new_mount+0x2a4/0x538 [ 67.358064][ T6423] path_mount+0x5f0/0xa88 [ 67.358073][ T6423] do_mount+0xe8/0x148 [ 67.358081][ T6423] __arm64_sys_mount+0x33c/0x388 [ 67.358090][ T6423] invoke_syscall+0x98/0x244 [ 67.358100][ T6423] el0_svc_common+0xec/0x23c [ 67.358110][ T6423] do_el0_svc+0x4c/0x5c [ 67.358119][ T6423] el0_svc+0x64/0x260 [ 67.358128][ T6423] el0t_64_sync_handler+0x44/0x104 [ 67.358137][ T6423] el0t_64_sync+0x198/0x19c [ 67.926082][ T6432] netlink: 'syz.0.367': attribute type 1 has an invalid length. [ 67.941646][ T6432] bond1: option mode: invalid value (8) [ 67.946035][ T6432] bond1 (unregistering): Released all slaves [ 67.951820][ T6435] netlink: 12 bytes leftover after parsing attributes in process `syz.5.368'. [ 68.143932][ T6445] device-mapper: table: 248:0: zero-length target [ 68.145239][ T6445] device-mapper: ioctl: error adding target to table [ 68.283927][ T6461] FAULT_INJECTION: forcing a failure. [ 68.283927][ T6461] name failslab, interval 1, probability 0, space 0, times 0 [ 68.283972][ T6461] CPU: 0 UID: 0 PID: 6461 Comm: syz.5.377 Tainted: G L syzkaller #0 PREEMPT [ 68.283993][ T6461] Tainted: [L]=SOFTLOCKUP [ 68.283997][ T6461] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 68.284004][ T6461] Call trace: [ 68.284007][ T6461] show_stack+0x2c/0x3c (C) [ 68.284027][ T6461] __dump_stack+0x30/0x40 [ 68.284039][ T6461] dump_stack_lvl+0xd8/0x12c [ 68.284051][ T6461] dump_stack+0x1c/0x28 [ 68.284061][ T6461] should_fail_ex+0x41c/0x590 [ 68.284074][ T6461] should_failslab+0xc4/0x120 [ 68.284087][ T6461] kmem_cache_alloc_noprof+0x94/0x5d4 [ 68.284100][ T6461] security_file_alloc+0x3c/0x300 [ 68.284109][ T6461] init_file+0x90/0x28c [ 68.284118][ T6461] alloc_empty_file+0x80/0x1cc [ 68.284126][ T6461] alloc_file+0x58/0x98 [ 68.284134][ T6461] alloc_file_pseudo+0xe0/0x198 [ 68.284142][ T6461] sock_alloc_file+0xb4/0x1ac [ 68.284151][ T6461] do_accept+0x1e0/0x438 [ 68.284159][ T6461] __sys_accept4+0x11c/0x1f8 [ 68.284168][ T6461] __arm64_sys_accept4+0xa8/0xc4 [ 68.284177][ T6461] invoke_syscall+0x98/0x244 [ 68.284188][ T6461] el0_svc_common+0xec/0x23c [ 68.284200][ T6461] do_el0_svc+0x4c/0x5c [ 68.284211][ T6461] el0_svc+0x64/0x260 [ 68.284221][ T6461] el0t_64_sync_handler+0x44/0x104 [ 68.284231][ T6461] el0t_64_sync+0x198/0x19c [ 68.634093][ T6466] netlink: 8 bytes leftover after parsing attributes in process `syz.4.379'. [ 68.644527][ T6466] device-mapper: table: 248:0: too large device [ 68.650049][ T6466] device-mapper: ioctl: error adding target to table [ 68.753781][ T6477] device-mapper: ioctl: Invalid target message parameters. [ 68.999274][ T6487] netlink: 'syz.0.384': attribute type 21 has an invalid length. [ 69.006327][ T6487] device-mapper: table: 248:0: too large device [ 69.006351][ T6487] device-mapper: ioctl: error adding target to table [ 69.085141][ T6490] device-mapper: ioctl: populate_table: no targets specified [ 69.161264][ T6501] device-mapper: table: 248:0: too large device [ 69.161291][ T6501] device-mapper: ioctl: error adding target to table [ 69.165283][ T6502] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(838860804.0.0), cmd(9) [ 69.174647][ T6497] ptrace attach of ""[6504] was attempted by "ci-upstream-gce-arm64/syz-executor exec"[6497] [ 70.251678][ T6507] mmap: syz.0.391 (6507): VmData 20848640 exceed data ulimit 7. Update limits or use boot option ignore_rlimit_data. [ 70.405367][ T6522] syz_tun: entered allmulticast mode [ 70.412637][ T6527] netlink: 56 bytes leftover after parsing attributes in process `syz.4.398'. [ 70.555311][ T6543] FAULT_INJECTION: forcing a failure. [ 70.555311][ T6543] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 70.560618][ T6543] CPU: 0 UID: 0 PID: 6543 Comm: syz.4.403 Tainted: G L syzkaller #0 PREEMPT [ 70.560645][ T6543] Tainted: [L]=SOFTLOCKUP [ 70.560649][ T6543] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 70.560655][ T6543] Call trace: [ 70.560659][ T6543] show_stack+0x2c/0x3c (C) [ 70.560683][ T6543] __dump_stack+0x30/0x40 [ 70.560695][ T6543] dump_stack_lvl+0xd8/0x12c [ 70.560705][ T6543] dump_stack+0x1c/0x28 [ 70.560715][ T6543] should_fail_ex+0x41c/0x590 [ 70.560726][ T6543] should_fail+0x14/0x24 [ 70.560736][ T6543] should_fail_usercopy+0x20/0x30 [ 70.560746][ T6543] do_sock_getsockopt+0x4bc/0x720 [ 70.560756][ T6543] __sys_getsockopt+0xfc/0x168 [ 70.560764][ T6543] __arm64_sys_getsockopt+0xc8/0xe4 [ 70.560772][ T6543] invoke_syscall+0x98/0x244 [ 70.560782][ T6543] el0_svc_common+0xec/0x23c [ 70.560792][ T6543] do_el0_svc+0x4c/0x5c [ 70.560801][ T6543] el0_svc+0x64/0x260 [ 70.560811][ T6543] el0t_64_sync_handler+0x44/0x104 [ 70.560819][ T6543] el0t_64_sync+0x198/0x19c [ 70.584894][ T6546] tmpfs: Bad value for 'mpol' [ 71.165975][ T6521] syz_tun: left allmulticast mode [ 71.196100][ T6575] device-mapper: ioctl: Empty message received. [ 71.745886][ T6605] netlink: 'syz.0.419': attribute type 31 has an invalid length. [ 72.901588][ T6649] netlink: 'syz.4.424': attribute type 8 has an invalid length. [ 111.561350][ T6691] netlink: 8 bytes leftover after parsing attributes in process `syz.6.433'. [ 111.576966][ T6691] netlink: 116 bytes leftover after parsing attributes in process `syz.6.433'. [ 112.425122][ T6709] overlayfs: missing 'lowerdir' [ 112.708561][ T6711] netlink: 'syz.0.434': attribute type 1 has an invalid length. [ 112.736398][ T6711] bond2: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 112.747303][ T6711] bond2 (unregistering): Released all slaves [ 112.771894][ T6718] syzkaller0: entered promiscuous mode [ 112.775759][ T6718] syzkaller0: entered allmulticast mode [ 112.802174][ T6711] bridge1: entered promiscuous mode [ 112.808855][ T6711] bond1: (slave bridge1): making interface the new active one [ 112.812245][ T6711] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 112.830085][ T6726] binder: 6725:6726 tried to acquire reference to desc 0, got 1 instead [ 112.833035][ T6726] binder: 6725:6726 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 112.836091][ T6726] binder: 6726 RLIMIT_NICE not set [ 112.840232][ T6726] binder: 6726 RLIMIT_NICE not set [ 112.841648][ T6726] binder: 6726 RLIMIT_NICE not set [ 112.841737][ T6726] binder_alloc: 6725: binder_alloc_buf size 61800 failed, no address space [ 112.841795][ T6726] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 8192 (num: 1 largest: 8192) [ 112.841817][ T6726] binder: cannot allocate buffer: no space left [ 112.841840][ T6726] binder: 6725:6726 transaction reply to 6725:6726 failed 43/29201/-28, code 0 size 80-24 line 3408 [ 112.841866][ T6726] binder: send failed reply for transaction 42 to 6725:6726 [ 112.870113][ T24] binder: undelivered TRANSACTION_COMPLETE [ 112.870145][ T24] binder: undelivered TRANSACTION_ERROR: 29201 [ 112.873676][ T24] binder: undelivered TRANSACTION_ERROR: 29190 [ 112.998400][ T6735] netlink: 20 bytes leftover after parsing attributes in process `syz.4.443'. [ 112.999263][ T6739] device-mapper: table: 248:0: too large device [ 112.999273][ T6739] device-mapper: ioctl: error adding target to table [ 113.006417][ T6735] tmpfs: Unknown parameter '' [ 113.723822][ T6795] FAULT_INJECTION: forcing a failure. [ 113.723822][ T6795] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 113.723862][ T6795] CPU: 0 UID: 0 PID: 6795 Comm: syz.6.452 Tainted: G L syzkaller #0 PREEMPT [ 113.723877][ T6795] Tainted: [L]=SOFTLOCKUP [ 113.723880][ T6795] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 113.723885][ T6795] Call trace: [ 113.723888][ T6795] show_stack+0x2c/0x3c (C) [ 113.723907][ T6795] __dump_stack+0x30/0x40 [ 113.723923][ T6795] dump_stack_lvl+0xd8/0x12c [ 113.723934][ T6795] dump_stack+0x1c/0x28 [ 113.723943][ T6795] should_fail_ex+0x41c/0x590 [ 113.723954][ T6795] should_fail+0x14/0x24 [ 113.723964][ T6795] should_fail_usercopy+0x20/0x30 [ 113.723974][ T6795] simple_read_from_buffer+0xc4/0x238 [ 113.723990][ T6795] proc_fail_nth_read+0x1a8/0x248 [ 113.723999][ T6795] vfs_read+0x230/0x8c8 [ 113.724010][ T6795] ksys_read+0x12c/0x228 [ 113.724020][ T6795] __arm64_sys_read+0x84/0x98 [ 113.724031][ T6795] invoke_syscall+0x98/0x244 [ 113.724041][ T6795] el0_svc_common+0xec/0x23c [ 113.724050][ T6795] do_el0_svc+0x4c/0x5c [ 113.724060][ T6795] el0_svc+0x64/0x260 [ 113.724069][ T6795] el0t_64_sync_handler+0x44/0x104 [ 113.724078][ T6795] el0t_64_sync+0x198/0x19c [ 125.927760][ T1593] ieee802154 phy0 wpan0: encryption failed: -22 [ 125.927804][ T1593] ieee802154 phy1 wpan1: encryption failed: -22 [ 131.256797][ T6826] binder: 6825:6826 Acquire 1 refcount change on invalid ref 0 ret -22 [ 131.256951][ T6826] binder: 6825:6826 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 131.256968][ T6826] binder: 6825:6826 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 131.256978][ T6826] binder: 6825:6826 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 131.256988][ T6826] binder: 6826 RLIMIT_NICE not set [ 131.320978][ T6843] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(1845493764.2037604205.3026803), cmd(9) [ 132.152624][ T6863] sctp: [Deprecated]: syz.5.466 (pid 6863) Use of struct sctp_assoc_value in delayed_ack socket option. [ 132.152624][ T6863] Use struct sctp_sack_info instead [ 132.340744][ T6885] binder: 6884:6885 Acquire 1 refcount change on invalid ref 0 ret -22 [ 132.342774][ T6885] binder: 6884:6885 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 132.344624][ T6883] netlink: 8 bytes leftover after parsing attributes in process `syz.2.475'. [ 132.346573][ T6885] binder: 6884:6885 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 132.348489][ T6885] binder: 6884:6885 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 132.351059][ T6885] binder: 6885 RLIMIT_NICE not set [ 132.592420][ T6890] device-mapper: ioctl: populate_table: no targets specified [ 133.055636][ T6910] netlink: 20 bytes leftover after parsing attributes in process `syz.5.483'. [ 133.321968][ T6941] overlayfs: missing 'lowerdir' [ 133.322435][ T6940] overlayfs: missing 'lowerdir' [ 134.147293][ T6968] device-mapper: ioctl: populate_table: no targets specified [ 134.615324][ T7004] netlink: 'syz.2.514': attribute type 83 has an invalid length. [ 134.886910][ T6993] netlink: 36 bytes leftover after parsing attributes in process `syz.5.511'. [ 134.889267][ T6993] netlink: 116 bytes leftover after parsing attributes in process `syz.5.511'. [ 134.921076][ T7014] netlink: 12 bytes leftover after parsing attributes in process `syz.2.517'. [ 134.946304][ T7014] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(5001287.50.0), cmd(9) [ 135.509334][ T7048] netlink: 12 bytes leftover after parsing attributes in process `syz.0.530'. [ 136.753813][ T7074] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(4.12800.0), cmd(9) [ 136.894371][ T7095] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(4.134217728.0), cmd(9) [ 137.123679][ T7079] psci: CPU1 killed (polled 0 ms) [ 137.174671][ T7101] netlink: 12 bytes leftover after parsing attributes in process `syz.6.550'. [ 141.047604][ T7133] overlay: Bad value for 'upperdir' [ 141.048891][ T7136] overlay: Bad value for 'upperdir' [ 141.257852][ T7141] input: syz1 as /devices/virtual/input/input8 [ 141.489295][ T7156] binder_user_error: 10 callbacks suppressed [ 141.489333][ T7156] binder: 7154:7156 Acquire 1 refcount change on invalid ref 0 ret -22 [ 141.492727][ T7156] binder: 7154:7156 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 141.492760][ T7156] binder: 7154:7156 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 141.492783][ T7156] binder: 7154:7156 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 141.492801][ T7156] binder: 7156 RLIMIT_NICE not set [ 141.525414][ T7157] netlink: 116 bytes leftover after parsing attributes in process `syz.5.567'. [ 141.684900][ T7162] binder: 7161:7162 tried to acquire reference to desc 0, got 1 instead [ 141.688211][ T7162] binder: 7161:7162 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 141.690948][ T7162] binder: 7162 RLIMIT_NICE not set [ 141.690971][ T7162] binder: 7162 RLIMIT_NICE not set [ 141.698481][ T7162] binder: 7162 RLIMIT_NICE not set [ 141.698515][ T7162] binder_alloc: 7161: binder_alloc_buf size 4294967384 failed, no address space [ 141.698541][ T7162] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 8192 (num: 1 largest: 8192) [ 141.698566][ T7162] binder: cannot allocate buffer: no space left [ 141.698588][ T7162] binder: 7161:7162 transaction reply to 7161:7162 failed 49/29201/-28, code 0 size 80-24 line 3408 [ 141.698614][ T7162] binder: send failed reply for transaction 48 to 7161:7162 [ 141.797926][ T4814] binder: undelivered TRANSACTION_COMPLETE [ 141.797967][ T4814] binder: undelivered TRANSACTION_ERROR: 29201 [ 141.800895][ T4814] binder: undelivered TRANSACTION_ERROR: 29190 [ 142.617147][ T7216] netlink: 68 bytes leftover after parsing attributes in process `syz.6.584'. [ 142.663888][ T7220] xt_recent: hitcount (262144) is larger than allowed maximum (65535) [ 142.683204][ T7220] bond2 (unregistering): Released all slaves [ 142.787967][ T7225] nvme_tcp: malformed address passed: 127.:.0.1:4420 [ 142.790147][ T7232] netlink: 12 bytes leftover after parsing attributes in process `syz.6.587'. [ 142.859293][ T7236] null_blk: nullb1: using native zone append [ 142.877278][ T7236] null_blk: disk nullb1 created [ 144.479199][ T7280] netlink: 'syz.0.597': attribute type 9 has an invalid length. [ 144.556246][ T7288] netlink: 4 bytes leftover after parsing attributes in process `syz.0.601'. [ 144.560477][ T7288] ipvlan2: entered promiscuous mode [ 145.064610][ T7178] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 145.380451][ T7307] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(4.3276800.0), cmd(9) [ 145.445817][ T7313] device-mapper: table: 248:0: too large device [ 145.445846][ T7313] device-mapper: ioctl: error adding target to table [ 145.606786][ T4814] atkbd serio3: keyboard reset failed on [ 145.830169][ T7341] netlink: 32 bytes leftover after parsing attributes in process `syz.5.621'. [ 145.832645][ T7341] sch_fq: defrate 0 ignored. [ 145.884312][ T7343] device-mapper: table: 248:0: zero-length target [ 145.884340][ T7343] device-mapper: ioctl: error adding target to table [ 145.949715][ T7350] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(4.2037591854.1852661619), cmd(9) [ 146.195911][ T7358] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 146.208288][ T7358] netlink: 8 bytes leftover after parsing attributes in process `syz.0.628'. [ 146.212793][ T7358] netlink: 8 bytes leftover after parsing attributes in process `syz.0.628'. [ 146.685177][ T7373] netlink: 28 bytes leftover after parsing attributes in process `syz.2.634'. [ 146.699168][ T30] audit: type=1807 audit(146.680:3): action=measure func=F res=0 [ 146.701203][ T30] audit: type=1802 audit(146.690:4): pid=7373 uid=0 auid=4294967295 ses=4294967295 subj=_ op=update_policy cause=invalid-policy comm="syz.2.634" res=0 errno=0 [ 146.721528][ T7372] ima: policy update failed [ 146.724757][ T30] audit: type=1802 audit(146.710:5): pid=7372 uid=0 auid=4294967295 ses=4294967295 subj=_ op=policy_update cause=failed comm="syz.2.634" res=0 errno=0 [ 146.917881][ T13] wlan1: IBSS 50:50:50:50:50:50 switches to unsupported channel (2484 MHz, width:0, CF1/2: 2484/0 MHz), disconnecting [ 146.928778][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 146.931748][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 146.996310][ T7387] vcan0: tx drop: invalid sa for name 0x0000000000040001 [ 147.189678][ T7396] ieee802154 phy0 wpan0: encryption failed: -22 [ 147.310739][ T7403] binder: 7401:7403 Acquire 1 refcount change on invalid ref 0 ret -22 [ 147.380716][ T7403] binder: 7401:7403 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 147.380756][ T7403] binder: 7401:7403 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 147.380781][ T7403] binder: 7401:7403 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 147.380800][ T7403] binder: 7403 RLIMIT_NICE not set [ 147.564148][ T7413] device-mapper: table: 248:0: zero-length target [ 147.564176][ T7413] device-mapper: ioctl: error adding target to table [ 147.680459][ T56] wlan1: IBSS 50:50:50:50:50:50 switches to unsupported channel (2484 MHz, width:0, CF1/2: 2484/0 MHz), disconnecting [ 147.690962][ T56] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 147.694756][ T56] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 148.666204][ T7449] xt_time: unknown flags 0x4 [ 149.216926][ T7459] device-mapper: table: 248:0: too large device [ 149.216959][ T7459] device-mapper: ioctl: error adding target to table [ 149.607612][ T7463] netlink: 4 bytes leftover after parsing attributes in process `syz.5.663'. [ 151.131265][ T7484] FAULT_INJECTION: forcing a failure. [ 151.131265][ T7484] name failslab, interval 1, probability 0, space 0, times 0 [ 151.131307][ T7484] CPU: 0 UID: 0 PID: 7484 Comm: syz.5.673 Tainted: G L syzkaller #0 PREEMPT [ 151.131322][ T7484] Tainted: [L]=SOFTLOCKUP [ 151.131326][ T7484] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 151.131331][ T7484] Call trace: [ 151.131334][ T7484] show_stack+0x2c/0x3c (C) [ 151.131354][ T7484] __dump_stack+0x30/0x40 [ 151.131365][ T7484] dump_stack_lvl+0xd8/0x12c [ 151.131375][ T7484] dump_stack+0x1c/0x28 [ 151.131384][ T7484] should_fail_ex+0x41c/0x590 [ 151.131396][ T7484] should_failslab+0xc4/0x120 [ 151.131407][ T7484] __kmalloc_cache_noprof+0x94/0x5fc [ 151.131415][ T7484] tcp_sendmsg_fastopen+0x1ac/0x54c [ 151.131427][ T7484] tcp_sendmsg_locked+0x2e00/0x330c [ 151.131437][ T7484] tcp_sendmsg+0x40/0x64 [ 151.131447][ T7484] inet_sendmsg+0xb4/0xd8 [ 151.131455][ T7484] __sock_sendmsg+0xc8/0x17c [ 151.131463][ T7484] __sys_sendto+0x250/0x328 [ 151.131471][ T7484] __arm64_sys_sendto+0xec/0x10c [ 151.131479][ T7484] invoke_syscall+0x98/0x244 [ 151.131489][ T7484] el0_svc_common+0xec/0x23c [ 151.131498][ T7484] do_el0_svc+0x4c/0x5c [ 151.131508][ T7484] el0_svc+0x64/0x260 [ 151.131517][ T7484] el0t_64_sync_handler+0x44/0x104 [ 151.131526][ T7484] el0t_64_sync+0x198/0x19c [ 151.238252][ T7487] PM: suspend entry (deep) [ 151.275688][ T13] Filesystems sync: 0.035 seconds [ 151.349185][ T7490] device-mapper: table: 248:0: too large device [ 151.349213][ T7490] device-mapper: ioctl: error adding target to table [ 151.431862][ T7506] binder: 7504:7506 tried to acquire reference to desc 0, got 1 instead [ 151.434333][ T7497] x_tables: duplicate underflow at hook 3 [ 151.438818][ T7506] binder: 7504:7506 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 151.442885][ T7506] binder: 7506 RLIMIT_NICE not set [ 151.442929][ T7506] binder: 7506 RLIMIT_NICE not set [ 151.445515][ T7506] binder: 7506 RLIMIT_NICE not set [ 151.445542][ T7506] binder_alloc: 7504: binder_alloc_buf size -216172782113783704 failed, no address space [ 151.445565][ T7506] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 8192 (num: 1 largest: 8192) [ 151.445590][ T7506] binder: cannot allocate buffer: no space left [ 151.445613][ T7506] binder: 7504:7506 transaction reply to 7504:7506 failed 55/29201/-28, code 0 size 80-24 line 3408 [ 151.445639][ T7506] binder: send failed reply for transaction 54 to 7504:7506 [ 151.478863][ T4814] binder: undelivered TRANSACTION_ERROR: 29190 [ 151.478948][ T4814] binder: undelivered TRANSACTION_COMPLETE [ 151.478970][ T4814] binder: undelivered TRANSACTION_ERROR: 29201 [ 151.521223][ T7509] binder: 7507:7509 cannot find target node [ 151.521259][ T7509] binder: 7507:7509 transaction call to 0:0 failed 58/29201/-22, code 0 size 72-24 line 3252 [ 151.593795][ T7509] binder: undelivered TRANSACTION_ERROR: 29201 [ 151.904846][ T7520] netlink: 260 bytes leftover after parsing attributes in process `syz.6.685'. [ 152.020121][ T7487] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 152.020189][ T7487] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 152.030989][ T7487] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 152.043368][ T7487] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 152.044872][ T7487] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 152.054219][ T7487] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 152.057372][ T7487] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 152.060970][ T7487] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 152.062470][ T7487] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 152.255687][ T7487] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 152.267203][ T7487] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 152.267260][ T7487] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 152.280421][ T7487] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 152.286322][ T7487] Freezing user space processes [ 152.296603][ T7487] Freezing user space processes completed (elapsed 0.006 seconds) [ 152.298620][ T7487] OOM killer disabled. [ 152.299542][ T7487] Freezing remaining freezable tasks [ 152.303206][ T7487] Freezing remaining freezable tasks completed (elapsed 0.002 seconds) [ 152.304829][ T7487] printk: Suspending console(s) (use no_console_suspend to debug) [ 152.393371][ T7487] vhci_hcd vhci_hcd.15: suspend vhci_hcd [ 152.393427][ T7487] vhci_hcd vhci_hcd.14: suspend vhci_hcd [ 152.393474][ T7487] vhci_hcd vhci_hcd.13: suspend vhci_hcd [ 152.393520][ T7487] vhci_hcd vhci_hcd.12: suspend vhci_hcd [ 152.393565][ T7487] vhci_hcd vhci_hcd.11: suspend vhci_hcd [ 152.393611][ T7487] vhci_hcd vhci_hcd.10: suspend vhci_hcd [ 152.393656][ T7487] vhci_hcd vhci_hcd.9: suspend vhci_hcd [ 152.393702][ T7487] vhci_hcd vhci_hcd.8: suspend vhci_hcd [ 152.393747][ T7487] vhci_hcd vhci_hcd.7: suspend vhci_hcd [ 152.393792][ T7487] vhci_hcd vhci_hcd.6: suspend vhci_hcd [ 152.393837][ T7487] vhci_hcd vhci_hcd.5: suspend vhci_hcd [ 152.393882][ T7487] vhci_hcd vhci_hcd.4: suspend vhci_hcd [ 152.393927][ T7487] vhci_hcd vhci_hcd.3: suspend vhci_hcd [ 152.393972][ T7487] vhci_hcd vhci_hcd.2: suspend vhci_hcd [ 152.394023][ T7487] vhci_hcd vhci_hcd.1: suspend vhci_hcd [ 152.394067][ T7487] vhci_hcd vhci_hcd.0: suspend vhci_hcd [ 152.627207][ T7487] Disabling non-boot CPUs ... [ 152.627223][ T7487] ------------[ cut here ]------------ [ 152.627223][ T7487] WARNING: kernel/context_tracking.c:120 at ct_kernel_exit+0x1b4/0x1f4, CPU#0: syz.0.672/7487 [ 152.627223][ T7487] Modules linked in: [ 152.627223][ T7487] CPU: 0 UID: 0 PID: 7487 Comm: syz.0.672 Tainted: G L syzkaller #0 PREEMPT [ 152.627223][ T7487] Tainted: [L]=SOFTLOCKUP [ 152.627223][ T7487] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 152.627223][ T7487] pstate: 634003c5 (nZCv DAIF +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 152.627223][ T7487] pc : ct_kernel_exit+0x1b4/0x1f4 [ 152.627223][ T7487] lr : ct_kernel_exit+0x13c/0x1f4 [ 152.627223][ T7487] sp : ffff8000935d75f0 [ 152.627223][ T7487] x29: ffff8000935d75f0 x28: dfff800000000000 x27: ffff8000935d7660 [ 152.627223][ T7487] x26: 00000000000000c0 x25: ffff7000126baecc x24: ffff800088bb0aa0 [ 152.627223][ T7487] x23: ffff800088bfa960 x22: ffff0001add04aa0 x21: ffff0001add04aa0 [ 152.627223][ T7487] x20: 0000000000000000 x19: 0000000000000005 x18: 00000000ffffffff [ 152.627223][ T7487] x17: 0000000000000003 x16: ffff800088bf7000 x15: 0098968000000000 [ 152.627223][ T7487] x14: 0000000000000000 x13: 0000000000000001 x12: 0000000000000000 [ 152.627223][ T7487] x11: 0000000000000000 x10: ffff600035ba0956 x9 : dfff800000000000 [ 152.627223][ T7487] x8 : 0000000000000040 x7 : 0000000000000000 x6 : 000000000000003f [ 152.627223][ T7487] x5 : 0000000000000040 x4 : 0000000000000008 x3 : ffff80008698ac80 [ 152.627223][ T7487] x2 : 0000000000000000 x1 : 0000000000000004 x0 : 0000000000000001 [ 152.627223][ T7487] Call trace: [ 152.627223][ T7487] ct_kernel_exit+0x1b4/0x1f4 (P) [ 152.627223][ T7487] ct_idle_enter+0x20/0x34 [ 152.627223][ T7487] cpu_suspend+0x264/0x474 [ 152.627223][ T7487] psci_system_suspend_enter+0x4c/0x80 [ 152.627223][ T7487] suspend_devices_and_enter+0x88c/0xd0c [ 152.627223][ T7487] pm_suspend+0x498/0x698 [ 152.627223][ T7487] state_store+0x14c/0x1fc [ 152.627223][ T7487] kobj_attr_store+0x6c/0x90 [ 152.627223][ T7487] sysfs_kf_write+0xe0/0x108 [ 152.627223][ T7487] kernfs_fop_write_iter+0x260/0x3b8 [ 152.627223][ T7487] vfs_write+0x51c/0xa0c [ 152.627223][ T7487] ksys_write+0x12c/0x228 [ 152.627223][ T7487] __arm64_sys_write+0x84/0x98 [ 152.627223][ T7487] invoke_syscall+0x98/0x244 [ 152.627223][ T7487] el0_svc_common+0xec/0x23c [ 152.627223][ T7487] do_el0_svc+0x4c/0x5c [ 152.627223][ T7487] el0_svc+0x64/0x260 [ 152.627223][ T7487] el0t_64_sync_handler+0x44/0x104 [ 152.627223][ T7487] el0t_64_sync+0x198/0x19c [ 152.627223][ T7487] irq event stamp: 75224 [ 152.627223][ T7487] hardirqs last enabled at (75223): [] vprintk_store+0x924/0xb94 [ 152.627223][ T7487] hardirqs last disabled at (75224): [] arch_suspend_disable_irqs+0x34/0x4c [ 152.627223][ T7487] softirqs last enabled at (75218): [] handle_softirqs+0xc28/0xd98 [ 152.627223][ T7487] softirqs last disabled at (75197): [] __do_softirq+0x14/0x20 [ 152.627223][ T7487] ---[ end trace 0000000000000000 ]--- [ 152.627223][ T7487] ------------[ cut here ]------------ [ 152.627223][ T7487] WARNING: kernel/context_tracking.c:165 at ct_kernel_enter+0x138/0x170, CPU#0: syz.0.672/7487 [ 152.627223][ T7487] Modules linked in: [ 152.627223][ T7487] CPU: 0 UID: 0 PID: 7487 Comm: syz.0.672 Tainted: G W L syzkaller #0 PREEMPT [ 152.627223][ T7487] Tainted: [W]=WARN, [L]=SOFTLOCKUP [ 152.627223][ T7487] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 152.627223][ T7487] pstate: 600003c5 (nZCv DAIF -PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 152.627223][ T7487] pc : ct_kernel_enter+0x138/0x170 [ 152.627223][ T7487] lr : ct_kernel_enter+0xc8/0x170 [ 152.627223][ T7487] sp : ffff8000935d75e0 [ 152.627223][ T7487] x29: ffff8000935d75e0 x28: dfff800000000000 x27: ffff8000935d7660 [ 152.627223][ T7487] x26: 00000000000000c0 x25: ffff7000126baecc x24: 0000000100000000 [ 152.627223][ T7487] x23: ffff800088bfa960 x22: ffff800088bb0aa0 x21: ffff0001add04aa0 [ 152.627223][ T7487] x20: ffff0001add04aa0 x19: 0000000000000000 x18: 00000000ffffffff [ 152.627223][ T7487] x17: 000000040044ffff x16: 041000f5b5503510 x15: 0000000000000000 [ 152.627223][ T7487] x14: ffff0000f00a8000 x13: 0000000000000001 x12: 0000000000000000 [ 152.627223][ T7487] x11: 0000000000000000 x10: ffff600035ba0956 x9 : dfff800000000000 [ 152.627223][ T7487] x8 : 0000000000000040 x7 : 0000000000000000 x6 : 000000000000003f [ 152.627223][ T7487] x5 : 0000000000000040 x4 : 0000000000000000 x3 : ffff80008698ae48 [ 152.627223][ T7487] x2 : 0000000000000000 x1 : 0000000000000004 x0 : 0000000000000001 [ 152.627223][ T7487] Call trace: [ 152.627223][ T7487] ct_kernel_enter+0x138/0x170 (P) [ 152.627223][ T7487] ct_idle_exit+0x24/0x48 [ 152.627223][ T7487] cpu_suspend+0x2dc/0x474 [ 152.627223][ T7487] psci_system_suspend_enter+0x4c/0x80 [ 152.627223][ T7487] suspend_devices_and_enter+0x88c/0xd0c [ 152.627223][ T7487] pm_suspend+0x498/0x698 [ 152.627223][ T7487] state_store+0x14c/0x1fc [ 152.627223][ T7487] kobj_attr_store+0x6c/0x90 [ 152.627223][ T7487] sysfs_kf_write+0xe0/0x108 [ 152.627223][ T7487] kernfs_fop_write_iter+0x260/0x3b8 [ 152.627223][ T7487] vfs_write+0x51c/0xa0c [ 152.627223][ T7487] ksys_write+0x12c/0x228 [ 152.627223][ T7487] __arm64_sys_write+0x84/0x98 [ 152.627223][ T7487] invoke_syscall+0x98/0x244 [ 152.627223][ T7487] el0_svc_common+0xec/0x23c [ 152.627223][ T7487] do_el0_svc+0x4c/0x5c [ 152.627223][ T7487] el0_svc+0x64/0x260 [ 152.627223][ T7487] el0t_64_sync_handler+0x44/0x104 [ 152.627223][ T7487] el0t_64_sync+0x198/0x19c [ 152.627223][ T7487] irq event stamp: 75226 [ 152.627223][ T7487] hardirqs last enabled at (75225): [] psci_system_suspend_enter+0x4c/0x80 [ 152.627223][ T7487] hardirqs last disabled at (75226): [] psci_system_suspend_enter+0x4c/0x80 [ 152.627223][ T7487] softirqs last enabled at (75218): [] handle_softirqs+0xc28/0xd98 [ 152.627223][ T7487] softirqs last disabled at (75197): [] __do_softirq+0x14/0x20 [ 152.627223][ T7487] ---[ end trace 0000000000000000 ]--- [ 152.732373][ T3085] nvme nvme0: 2/0/0 default/read/poll queues [ 152.771547][ T3085] gve 0000:00:00.0 enp0s0: Device link is up. [ 153.036762][ T7487] OOM killer enabled. [ 153.037582][ T7487] Restarting tasks: Starting SYZFAIL: failed to send rpc fd=3 want=56 sent=0 n=-1 (errno 32: Broken pipe) [ 153.144904][ T7487] Restarting tasks: Done [ 153.146069][ T7487] random: crng reseeded on system resumption [ 153.148812][ T7487] hwrng_fill thread creation failed [ 153.151231][ T7487] PM: suspend exit [ 154.122465][ T4712] Bluetooth: hci0: command 0x0c1a tx timeout [ 154.122529][ T4712] Bluetooth: hci3: command 0x0406 tx timeout [ 154.122563][ T4712] Bluetooth: hci2: command 0x0406 tx timeout [ 154.125988][ T4722] Bluetooth: hci1: command 0x0c1a tx timeout [ 155.127309][ T4722] Bluetooth: hci4: command 0x0c1a tx timeout [ 156.173028][ T4722] Bluetooth: hci2: command 0x0406 tx timeout [ 156.173072][ T4722] Bluetooth: hci3: command 0x0406 tx timeout [ 156.173104][ T4722] Bluetooth: hci0: command 0x0c1a tx timeout [ 156.720264][ T7539] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.796043][ T7539] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.876940][ T7539] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.913880][ T7539] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.981918][ T7539] bridge_slave_1: left allmulticast mode [ 156.981950][ T7539] bridge_slave_1: left promiscuous mode [ 156.982046][ T7539] bridge0: port 2(bridge_slave_1) entered disabled state [ 156.986496][ T7539] bridge_slave_0: left allmulticast mode [ 156.986520][ T7539] bridge_slave_0: left promiscuous mode [ 156.986584][ T7539] bridge0: port 1(bridge_slave_0) entered disabled state [ 157.055585][ T7539] bond1 (unregistering): (slave bridge1): Releasing backup interface [ 157.064474][ T7539] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 157.068458][ T7539] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 157.070862][ T7539] bond0 (unregistering): Released all slaves [ 157.074545][ T7539] bond1 (unregistering): Released all slaves [ 157.110349][ T7539] tipc: Disabling bearer [ 157.110507][ T7539] tipc: Left network mode [ 157.165285][ T7539] hsr_slave_0: left promiscuous mode [ 157.168992][ T7539] hsr_slave_1: left promiscuous mode [ 157.171053][ T7539] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 157.173190][ T7539] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 157.175312][ T7539] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 157.175337][ T7539] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 157.180215][ T7539] veth1_macvtap: left promiscuous mode [ 157.181391][ T7539] veth0_macvtap: left promiscuous mode [ 157.182918][ T7539] veth1_vlan: left promiscuous mode [ 157.184031][ T7539] veth0_vlan: left promiscuous mode [ 157.291976][ T7539] team0 (unregistering): Port device team_slave_1 removed [ 157.301474][ T7539] team0 (unregistering): Port device team_slave_0 removed [ 157.430598][ T7539] IPVS: stop unused estimator thread 0... [ 157.463688][ T7539] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.483401][ T7539] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.501882][ T7539] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.511871][ T7539] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.570691][ T7539] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.584084][ T7539] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.612410][ T7539] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.633108][ T7539] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.684323][ T7539] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.705454][ T7539] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.732347][ T7539] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.744104][ T7539] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.783791][ T7539] bridge_slave_1: left allmulticast mode [ 157.783824][ T7539] bridge_slave_1: left promiscuous mode [ 157.783918][ T7539] bridge0: port 2(bridge_slave_1) entered disabled state [ 157.789082][ T7539] bridge_slave_0: left allmulticast mode [ 157.790647][ T7539] bridge_slave_0: left promiscuous mode [ 157.790743][ T7539] bridge0: port 1(bridge_slave_0) entered disabled state [ 157.800626][ T7539] bridge_slave_1: left allmulticast mode [ 157.800656][ T7539] bridge_slave_1: left promiscuous mode [ 157.800738][ T7539] bridge0: port 2(bridge_slave_1) entered disabled state [ 157.805985][ T7539] bridge_slave_0: left allmulticast mode [ 157.811865][ T7539] bridge_slave_0: left promiscuous mode [ 157.811963][ T7539] bridge0: port 1(bridge_slave_0) entered disabled state [ 157.821899][ T7539] bridge_slave_1: left allmulticast mode [ 157.823084][ T7539] bridge_slave_1: left promiscuous mode [ 157.824476][ T7539] bridge0: port 2(bridge_slave_1) entered disabled state [ 157.827766][ T7539] bridge_slave_0: left allmulticast mode [ 157.828811][ T7539] bridge_slave_0: left promiscuous mode [ 157.830236][ T7539] bridge0: port 1(bridge_slave_0) entered disabled state [ 157.936432][ T7539] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 157.939740][ T7539] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 157.942351][ T7539] bond0 (unregistering): Released all slaves [ 157.946049][ T7539] bond1 (unregistering): Released all slaves [ 157.999872][ T7539] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 158.002743][ T7539] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 158.005464][ T7539] bond0 (unregistering): Released all slaves [ 158.053525][ T7539] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 158.056416][ T7539] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 158.064103][ T7539] bond0 (unregistering): Released all slaves [ 158.068863][ T7539] bond1 (unregistering): Released all slaves [ 158.308619][ T7539] hsr_slave_0: left promiscuous mode [ 158.310643][ T7539] hsr_slave_1: left promiscuous mode [ 158.312141][ T7539] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 158.313811][ T7539] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 158.315810][ T7539] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 158.317617][ T7539] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 158.320668][ T7539] hsr_slave_0: left promiscuous mode [ 158.322025][ T7539] hsr_slave_1: left promiscuous mode [ 158.323486][ T7539] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 158.325101][ T7539] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 158.327513][ T7539] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 158.327532][ T7539] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 158.332358][ T7539] hsr_slave_0: left promiscuous mode [ 158.333598][ T7539] hsr_slave_1: left promiscuous mode [ 158.335202][ T7539] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 158.336586][ T7539] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 158.340124][ T7539] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 158.341881][ T7539] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 158.352587][ T7539] veth1_macvtap: left promiscuous mode [ 158.352631][ T7539] veth0_macvtap: left promiscuous mode [ 158.352692][ T7539] veth1_vlan: left promiscuous mode [ 158.352751][ T7539] veth0_vlan: left promiscuous mode [ 158.358485][ T7539] veth1_macvtap: left promiscuous mode [ 158.359571][ T7539] veth0_macvtap: left promiscuous mode [ 158.360972][ T7539] veth1_vlan: left promiscuous mode [ 158.362088][ T7539] veth0_vlan: left promiscuous mode [ 158.363938][ T7539] veth1_macvtap: left promiscuous mode [ 158.365123][ T7539] veth0_macvtap: left promiscuous mode [ 158.366538][ T7539] veth1_vlan: left promiscuous mode [ 158.368001][ T7539] veth0_vlan: left promiscuous mode [ 158.528973][ T7539] team0 (unregistering): Port device team_slave_1 removed [ 158.534786][ T7539] team0 (unregistering): Port device team_slave_0 removed [ 158.655336][ T7539] team0 (unregistering): Port device team_slave_1 removed [ 158.663199][ T7539] team0 (unregistering): Port device team_slave_0 removed [ 158.786352][ T7539] team0 (unregistering): Port device team_slave_1 removed [ 158.791784][ T7539] team0 (unregistering): Port device team_slave_0 removed