last executing test programs: 1m7.850732563s ago: executing program 32 (id=277): r0 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f00000002c0)={0x3, @sdr={0x47425247}}) 1m1.046066343s ago: executing program 33 (id=393): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000340)={'wlan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)={0x34, r3, 0x1, 0x70bd2c, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16ad}]]}, 0x34}, 0x1, 0x0, 0x0, 0x8001}, 0x4040000) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), r0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_AUTHENTICATE(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)={0x50, r6, 0x1, 0x70bd2a, 0x1, {{}, {@val={0x8, 0x3, r7}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @key_params=[@NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}], @key_params=[@NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x4}], @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x7}, @NL80211_ATTR_MAC={0xa}]}, 0x50}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) sendmsg$NL80211_CMD_PROBE_CLIENT(r1, &(0x7f0000000740)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x4c, r4, 0x800, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x4, 0x3a}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x4c}}, 0x4000) r8 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_DEFER_SETUP(r8, 0x112, 0x7, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="400000001000010400"/20, @ANYRES32=0x0, @ANYRESHEX=r4], 0x40}}, 0x0) r9 = socket$inet(0x2b, 0x801, 0x0) connect$inet(r9, &(0x7f00000002c0)={0x2, 0x4e24, @local}, 0x64) mkdirat(0xffffffffffffff9c, &(0x7f0000000780)='./sys_mnt\x00', 0x1ff) mount(0x0, &(0x7f00000007c0)='./sys_mnt\x00', &(0x7f0000000800)='sysfs\x00', 0x0, 0x0) r10 = openat(0xffffffffffffff9c, &(0x7f0000000840)='./sys_mnt/module/damon_reclaim/parameters/enabled\x00', 0x2, 0x0) write(r10, &(0x7f0000000880)='1', 0x1) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r9, 0x6, 0x21, 0x0, 0x20) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r11, &(0x7f0000000240)={0xa, 0x4e23, 0xa4e4, @remote, 0x3}, 0x1c) r12 = openat$sysctl(0xffffffffffffff9c, &(0x7f00000008c0)='/proc/self/clear_refs\x00', 0x1, 0x0) write$smackfs_logging(r12, &(0x7f0000000900)=0xffffff7f00000000, 0x14) r13 = syz_open_procfs(0x0, &(0x7f0000000280)='task\x00') lseek(r13, 0x4, 0x2) getdents64(r13, 0xffffffffffffffff, 0x43) pipe2$watch_queue(&(0x7f0000000300), 0x80) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r13, 0x89f8, &(0x7f0000000140)={'gretap0\x00', &(0x7f0000000040)={'gretap0\x00', 0x0, 0x700, 0x20, 0x3, 0x5, {{0x6, 0x4, 0x0, 0xd, 0x18, 0x64, 0x0, 0x4, 0x29, 0x0, @empty, @dev={0xac, 0x14, 0x14, 0x1e}, {[@ra={0x94, 0x4, 0x1}]}}}}}) 58.83946711s ago: executing program 34 (id=412): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x16, 0x10, &(0x7f0000000840)=ANY=[@ANYBLOB="1808000004000000000000002000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b70300002bb91a008500000009000000bc090000000000004509030000200000950000000000000085000000b6000000bf980000000000005609fdff020000008500000085000000b70000000000000095"], &(0x7f00000008c0)='GPL\x00', 0x7, 0x0, 0x0, 0x41000, 0x29, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfffffe}, 0x94) 53.882166546s ago: executing program 4 (id=470): socket$nl_route(0x10, 0x3, 0x0) 53.246003524s ago: executing program 4 (id=477): add_key$user(&(0x7f0000000040), 0x0, 0x0, 0x0, 0xfffffffffffffffe) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000140)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2008404, &(0x7f0000000380)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000", @ANYBLOB="999c07c03c5bc6a3d07b90faae21d196274f93a6593a9830472d5633665f2f51cfb24aaad481c74e142cd734ec6fd04935a94af71c756dbd6f5e2f39b2c4c30725d103d40d7e65129bb928ef73849dae618e438695e0a9078605ba418298145bf2fec11b0d16763288e7ecfe663aa5ff450d1e46d251160109c0378e04fe2629890c28366a6489e706ecf23195dc7f19e03fad", @ANYRESHEX=0x0, @ANYRES8, @ANYBLOB="c5ce1b9733c91520022860834995bd440de70a56f9b17205184d3be668bd36e2d9b2c62fb43e3a2a12e69d2eea113cf5ab1f668b2855d9a2bb426304b9bbf1debf4d593fe5"], 0x41, 0x2bd, &(0x7f00000005c0)="$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") mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x1, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000940)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0xc}}], 0x2, 0x20000040) socket$rds(0x15, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'macvlan1\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r2, @ANYBLOB="000000000000000024001280110001006272696467655f736c617665000000000c000580050027"], 0x44}}, 0x0) 53.140320296s ago: executing program 35 (id=477): add_key$user(&(0x7f0000000040), 0x0, 0x0, 0x0, 0xfffffffffffffffe) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000140)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2008404, &(0x7f0000000380)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000", @ANYBLOB="999c07c03c5bc6a3d07b90faae21d196274f93a6593a9830472d5633665f2f51cfb24aaad481c74e142cd734ec6fd04935a94af71c756dbd6f5e2f39b2c4c30725d103d40d7e65129bb928ef73849dae618e438695e0a9078605ba418298145bf2fec11b0d16763288e7ecfe663aa5ff450d1e46d251160109c0378e04fe2629890c28366a6489e706ecf23195dc7f19e03fad", @ANYRESHEX=0x0, @ANYRES8, @ANYBLOB="c5ce1b9733c91520022860834995bd440de70a56f9b17205184d3be668bd36e2d9b2c62fb43e3a2a12e69d2eea113cf5ab1f668b2855d9a2bb426304b9bbf1debf4d593fe5"], 0x41, 0x2bd, &(0x7f00000005c0)="$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") mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x1, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000940)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0xc}}], 0x2, 0x20000040) socket$rds(0x15, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'macvlan1\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r2, @ANYBLOB="000000000000000024001280110001006272696467655f736c617665000000000c000580050027"], 0x44}}, 0x0) 50.387206338s ago: executing program 36 (id=506): r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$inet(r0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@ip_ttl={{0x14}}, @ip_pktinfo={{0x1c, 0x110, 0xd, {0x0, @dev={0xac, 0x14, 0x14, 0x3f}, @dev}}}], 0x38}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./proc\x00', 0x1a8) mount(0x0, &(0x7f0000000240)='./proc\x00', &(0x7f0000000280)='proc\x00', 0x4000, 0x0) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/pid\x00') mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r1, 0x0, 0x17, &(0x7f0000000100)=0x3f7, 0x4) setsockopt$inet_int(r1, 0x0, 0x17, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r2, &(0x7f0000000300)='27', 0x2) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000080), 0x402, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r4 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r4, 0xc0285700, &(0x7f0000000380)={0x1, "5660359c3245d1c42317afad7d48ed51000000000000000100", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r5, 0xc0303e03, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000e, 0x28012, r3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) syz_emit_ethernet(0xa5, &(0x7f00000003c0)={@empty, @empty, @val, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x8f, 0x68, 0x0, 0x0, 0x2f, 0x0, @multicast2, @local}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8906, 0x0, 0x0, [0x4]}, {}, {}, {}, {}, {0x8, 0x6558, 0x0, "2329c3f32451f9d3f2a6c1cb18dfb85b62323d209d382c68e51e0eb685a5ba1837db896ec21c07121df89820fe49d1e536b01c25db"}}}}}}, 0x0) ioctl$FS_IOC_GETFLAGS(r6, 0x80086601, &(0x7f0000000140)) ioctl$UFFDIO_UNREGISTER(r2, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000174000/0x3000)=nil, 0x3000}) unshare(0x20040600) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) mq_getsetattr(r7, 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000600)={'syzkaller0\x00', 0x7101}) 45.446218804s ago: executing program 37 (id=549): ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000016c0)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, &(0x7f0000001700)={0x0, 0x0, 0x0, 0x0, &(0x7f0000832000/0x1000)=nil}) syz_mount_image$ext4(&(0x7f0000000bc0)='ext4\x00', &(0x7f0000000c00)='./file1\x00', 0x0, &(0x7f0000000c40)={[{@buffered_iomap}, {@acl}]}, 0x1, 0x4c4, &(0x7f0000000c80)="$eJzs3c9rHFUcAPA3u02apNG0VaStYAsV6g+azQ+kiXrxpB4KYsGLQo3JNtZssiG7qU3oIdVbDx5EURAP3v0LvNiTRRDPehcPUtEaQQVhZWZ3280mu93WNKuZzwemefNj9/tel+/Lm7czmQCk1rH4nyiEwRDCtyGEoerqxgOOVX+s37g0HS9RqFTO/BIlx8Xr9UPrr9sXQlgLIfSFEF5+PoQ3os1xSyurc1OFQn6ptp4rzy/mSiurJ8/PT83mZ/MLoxOnJicnRsbHJretrVfee+vK6S9e7P38j3evX3v/qy/jag3W9jW2YztVm94TDjRs2xNCePZeBOuCbK09/d2uCHcl/vweCCEcT/J/KGSTTxNIg0qlUvm7srfV7rUKsGtlkjFwlBkOIVTLmczwcHUM/2AYyBSKpfKT54rLCzPVsfL+0JM5d76QH6mdK+wPPVG8PpqUb62PNa2Ph5CMgT/I9ifrw9PFwszOdnVAk31N+f97tpr/QEo45Yf0kv+QXvIf0kv+Q3rJf0gv+Q/pJf8hveQ/pJf8h/SS/5Be8h9S6aXTp+OlUr//febCyvJc8cLJmXxpbnh+eXp4uri0ODxbLM4m9+zM3+79CsXi4uhTYflirpwvlXOlldWz88XlhfLZ5L7+s/meHWkV0IkDR69+H4UQ1p7uT5ZYb22fXIXdrVKJQrfvQQa6I9vtDgjoGlN/kF7O8YHmP9HbPC7oa/XCxVvzhbeTufNqAfeQnIT0OnHY93+QVub/Ib3M/0N6GeMDWzyib4N28//A/5P5f0ivwRbP/7qv4dldIyGE+0MI32V79taf9QXsBpmfotr4/8TQo4PNe3ujP5OvCHpDCG9/cuaji1Pl8tJovP3Xm9vLH9e2jzW8sOUJA9At9Tyt5zEAkF7rNy5N15e2Bw5tb9yfn6tehLA5/p7a3GRf8h3lwHq04VqFaJuuXVi7HEI4tFX8qPa88+qJzMB6dlP8g7WfUfUtkvruSZ6bfkfxo7uNf7gh/iMN8Y/86/8VSIercf8zslX+ZZKcDjfzb2P/M7hN10607v8yN/u/bIv+72iHMd789J0fW8a/HMKRLePX4/UlsZrjx3U70WH866+98lCrfZXPqu/TGD+qxa+LS7ny/GKutLJ6Mvk7crP5hdGJU5OTEyPjY5O5ZI46V5+p3uyZQ99ca9f+gS1//7Vvf7zt8Q7b/9fDX796rE38x45v/fkfbBO/P4TwRIfxfxv74fVW++L4My3an2kTP9423mH80ocv7O3wUABgB5RWVuemCoX8koKCQlcKl/8b1WgqdLtnAu610kp8ah4nfbdrAgAAAAAAAAAAAHRqJy4n7nYbAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB2g38CAAD//zuB1OM=") r1 = openat(0xffffffffffffff9c, &(0x7f00000017c0)='./file1\x00', 0x181042, 0x65) pwrite64(r1, &(0x7f00000011c0)='2', 0x1, 0x84fed0) r2 = openat(0xffffffffffffff9c, &(0x7f0000001200)='./file1\x00', 0x129042, 0x15) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x4000) syz_mount_image$vfat(&(0x7f0000001240), &(0x7f0000001280)='./file0\x00', 0x200008, &(0x7f00000012c0)=ANY=[@ANYRES8, @ANYRES32, @ANYRES64], 0x1, 0x3a0, &(0x7f0000001300)="$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") munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000001880)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000001840)={0xffffffffffffffff}, 0x111, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f00000018c0)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000001800)=0x9, r4, 0x0, 0x0, 0x1}}, 0x20) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000300)='./file1\x00', 0x21081e, &(0x7f0000000380)={[{@grpquota}, {@bsdgroups}, {@quota}]}, 0xfe, 0x506, &(0x7f00000005c0)="$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") prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r5 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) ptrace$getregset(0x4204, r5, 0x2, &(0x7f0000001740)={&(0x7f0000001780)=""/48, 0x30}) r6 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='./file1\x00', 0x101042, 0x15) pwrite64(r6, &(0x7f0000000b40)='2', 0xfdef, 0xc00) 45.21190246s ago: executing program 38 (id=551): syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000600)='./file0\x00', 0x210000, &(0x7f00000000c0)={[{@data_writeback}, {@orlov}]}, 0x1, 0x585, &(0x7f0000000680)="$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") r0 = syz_mount_image$fuse(0x0, &(0x7f0000000080)='./file1\x00', 0xa29000, 0x0, 0x3, 0x0, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_STATISTICS(r1, 0x11b, 0x7, 0x0, &(0x7f0000000100)=0x18) mount$overlay(0x0, &(0x7f0000001440)='./bus\x00', &(0x7f0000001480), 0x210808, &(0x7f0000000180)={[{@xino_off}, {@verity_require}, {@redirect_dir_on}, {@verity_on}], [{@fsuuid={'fsuuid', 0x3d, {[0x33, 0x32, 0x34, 0x34, 0x35, 0x38, 0x37, 0x62], 0x2d, [0x31, 0x39, 0x37, 0x62], 0x2d, [0x32, 0x30, 0x64, 0x64], 0x2d, [0x32, 0x37, 0x31, 0x63], 0x2d, [0x38, 0x33, 0x37, 0x31, 0x33, 0x33, 0x35, 0x36]}}}, {@fsmagic={'fsmagic', 0x3d, 0x6}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'overlay\x00'}}]}) r2 = socket$inet6(0xa, 0x1, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x4, 0x5, &(0x7f0000000d00)=ANY=[@ANYBLOB="180200000300000000000000000000008500000022000000850000007d0000009500000000000000402bca7352f843c77c504b24b7d19994c053aa2e05a39c8b013943758ebfa1c64325881f2fd51114e58e8bd2151d63fa757156212bce58457287eac9860d86"], &(0x7f0000000d80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x46) close(0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000dc0)={0x8, 0x10, &(0x7f0000000e80)=ANY=[@ANYBLOB="bf16000000000000b7070000000000007b7af0ff000000007b7af8ff00000000bf61000000000000bfa200000000000007020000f0ffffffb70300000c000000b704000000000000b70500000001000085000000550000001500020000000000bf010000000000008500000056000000b70000000200000095"], &(0x7f0000000f00)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000f40)={r3, 0x0, 0xe, 0x0, &(0x7f0000000fc0)="e0400000000d85ff9782762f88ca", 0x0, 0xadca, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000004c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0xedc623580215bdcd, 0x12, r4, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) keyctl$dh_compute(0x17, 0x0, 0x0, 0x0, 0x0) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000500)=""/173) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f00000002c0)=0x20800001, 0x4) setsockopt$inet6_int(r2, 0x29, 0x4e, &(0x7f0000000300)=0x2, 0x4) bind$inet6(r2, &(0x7f0000000340)={0xa, 0x4e22, 0x9, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8000}, 0x1c) r5 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r5, &(0x7f0000000480)={0x2, 0x4e22, @empty}, 0x10) connect$inet(r5, &(0x7f0000000640)={0x2, 0x4e22, @loopback}, 0x10) listen(r5, 0x5) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001000)=ANY=[@ANYBLOB="400000bd4fa3c3587fffffffffffffff230000007b1caa1be666", @ANYRES32=0x0, @ANYBLOB="460609000000000020001280080001007369740014000280050005000500000005000a0001000000"], 0x40}, 0x1, 0x0, 0x0, 0x600}, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000380)=0x0) fcntl$lock(r0, 0x0, &(0x7f00000003c0)={0x0, 0x4, 0x8000, 0x2009, r7}) chdir(&(0x7f0000001500)='./bus\x00') r8 = syz_open_dev$usbfs(&(0x7f0000000140), 0x400000001fc, 0x80701) ioctl$USBDEVFS_SUBMITURB(r8, 0x8038550a, &(0x7f0000000240)=@urb_type_control={0x2, {}, 0x3, 0x40, &(0x7f0000000280)={0x4b5a9da54893e123, 0x3, 0x4, 0x2}, 0x8, 0x203ffffd, 0x10, 0x0, 0x2, 0x0, 0x0}) mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3, &(0x7f0000000040)=0x1, 0x9, 0x7) 43.001936863s ago: executing program 39 (id=561): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) (async) mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) r0 = timerfd_create(0x8, 0x0) close(r0) (async) r1 = fsopen(&(0x7f0000000200)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_SET_BINARY(r1, 0x6, 0x0, 0x0, 0x0) (async) r2 = fsmount(r1, 0x0, 0x0) openat$cgroup_subtree(r2, &(0x7f0000000100), 0x2, 0x0) (async) file_getattr(r2, &(0x7f0000000180)='./tracing/per_cpu/cpu0/trace_pipe_raw\x00', &(0x7f00000001c0), 0x18, 0x800) (async, rerun: 32) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x0, 0x0) (rerun: 32) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) (async) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x72, 0xfffffffffffffffe, &(0x7f00000000c0)=0x19) (async, rerun: 32) r5 = mmap$IORING_MAP_OFF_PARAM_REGION(0x0, 0x0, 0x2000001, 0x10, r3, 0x20000000) (async, rerun: 32) syz_ublk_setup_queues(r2, 0x0, &(0x7f0000000240)={0x0, 0x7d68, 0x200, 0x3, 0x95, 0x0, r3}, &(0x7f00000002c0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x61a3, 0x20000, 0x2, 0x242, 0x0, r1}, 0xffffffffffffffff, 0x0, 0x0}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6892, 0x800, 0x1, 0x3ab, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x528a, 0x4, 0x3, 0x341, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x61c2, 0x2000, 0x2, 0x2ce, 0x0, r3}}], 0x4, &(0x7f0000001540)={0x2e, 0x8, 0x0, r2, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0xc574}, 0x0, 0x0, '\x00', {0x2, 0x91a, 0x0, &(0x7f0000000540)=@buf_512="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"}}, &(0x7f00000015c0)) r7 = mmap$IORING_OFF_SQES(0x0, 0xfffffff9, 0x0, 0x12, 0xffffffffffffffff, 0x10000000) r8 = syz_io_uring_setup(0x34b9, &(0x7f0000001600)={0x0, 0x69ec, 0xc00, 0x5, 0x50}, &(0x7f0000001680)=0x0, &(0x7f00000016c0)=0x0, &(0x7f0000001700)=0x0) r12 = io_uring_register$IORING_REGISTER_PERSONALITY(r8, 0x9, 0x0, 0x0) syz_io_uring_submit(r9, r10, r11, &(0x7f0000001740)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index=0x1, 0x1, 0x0, 0x4, 0x1, 0x1, {0x0, r12}}) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000017c0)={0x0}, &(0x7f0000001800)=0xc) ioctl$VIDIOC_TRY_EXT_CTRLS(r3, 0xc0205649, &(0x7f00000019c0)={0xf000000, 0x9, 0x3707, r3, 0x0, &(0x7f0000001980)={0x98091a, 0x7, '\x00', @p_u32=&(0x7f0000001940)=0x6}}) (async, rerun: 32) syz_ublk_add_dev(r2, r5, r6, r7, &(0x7f0000001880)={0x2e, 0x76, 0x0, r2, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r12, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000001840)=@any_dev={0x3, 0x4ae, 0x0, 0x0, 0x1000, 0x10000, r13, 0x0, 0x18}}}, &(0x7f0000001900)) (async, rerun: 32) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x12, r3, 0x31079000) 40.209921535s ago: executing program 40 (id=573): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) syz_fuse_handle_req(r0, &(0x7f0000000180)="3ea4e4305830d12dd9009ddb857b480e92a48b3e45093694091ed788285937ce7b2473522335a690d828b02ab613f956aecae781037db019ffda49138a514ee99a088fd6a2a0028ea055aef75e65cdadd3589c49eb6088bdec10b6d405a915a037c1f8037e1b9301fe4296ab789db8c69c3636af08fbaffd5106dd3788c626c35510cc0ebafc64e8b300d0ffa3bcea4d2e036bbc8dae2e46312e9a637b3002b8931a66cbc28a30ee3287a18f1d162a5985f7ef467a43a807cb75d34504dce996e2a3f1bb43e867f141ed07ef08e0aea605cb5b10346efd6b41a23ea6741dba1e2416380b330788486bba4e359fc0d094cc5301530c1228fcd0e378e0260dbdd56788ad718cac668467d4c50a9878c501cabe3389dcf76acf0267489de4aec621656bdd3878de387af2a3dfa7dbf460daffbef878ce2536a57b05bc44a1e01ef54cca3ad250298c95a52ae9927030eb1096e00f265283a30b4ede2c934dc62c46929761e230567d2ba5999495a5a0977e3156a44365b177a07cae07864be9765ba56bc7ecb29264e6dad2e41eebfeb1ef4115b923c49a8e0919db1de67b1cc4c2f30a672d64efac91e63d7bbf75784aa49346338b22504452b36266eb5e924d4b215ce5037da7b98f09a8dcd086f36787cdd6fab9ce916d12b7b939f113be8b1872a75aa0d8977fe598227998c8b5fa3be8831006f6071d2522b1c9be03873844b0a6e2ca1489f2391981ed762f743e4bc35fd1ca7158bd995a7b801d8525ce381de5497916d59183636f72e9b58c72179f678d1d4434a1fd39d304c3b62cfca763ee8c6108bdca364a438145775a76462927207a7ae654801635dfe3c1915d2ab57a11675724b17c0becb9b20f95d5beea1dd5a6eb66ea864a7d22bdefdc6e13a2a4a8c7780b4250c92dd9bd99453f24268cedca6963ab64c024e56e6f3ae74cf8d1eb5bc3c7292f5fc7d37b4c48ca981b8f54528dedac99a19c1181698b1982668c49b1a6b55142944a0edf891659ea82570ceefe2ca50a95e7df6496acb6bd979ae4b5b6327a201288b8ddadfe0cb91bdd64e74f06deb0133385f5c9cb6e8e554e4fd29126f550adc440e6d42de1bd3ba0ed5d0ebc91bdaeecc7f253190a21eeb51a14b2d949fe86626a88fd33ccd40379f67de81341d225a116e60770ab972ed872c124cd7c0db88709a48487c1c9fa6442997431b99a1ac224a8523430ddcfd699ad27e16bbb54db40785b869328e8e804ed5fc2f4b3e4548a9e60d5b73b2ac8564e8424e0dd292924feb14fb76ed19b1d76edafb1bd5585717a9eb73a8bef605e3ef3f6f8518faab6559f5b4b7d2c07f73edf67d3780d8b5b2042788e5d2f7c7184a80a1951323632b62101094bd80acfae621e56cef19cd059c9ff72fe564944bf8063137fdc7905cb63489cf8d250bda94f453c94fb2f6f33f972c0ffc4830bc8d7fb98c4ed8ef2fa6e147002d488d97122d579a9b214b09f792279021a20a36a05c74c9a668bbc4ee5bba0d8f7e96fe9a61feb01b7c0537e47894c3e7b5d19ce1568f8d9f49f3adf9c02ac941a3edf68c841f29fbe82450c2bbdcb7270dd2f5722666bd21c0839541c907ff43da0a10a05e47ac636d4f9c59e2abfb00d31621ac3f0455723563e402bd3ec56a2b7e59a82262119b02eedda2baef71a5d5efd2533b7e6fc01d6cae9d514fe63b30fdbd92548760f876f8d77e7fd8500f83e6f4e6290e4df64c73d6ab61737797b05235dea939163cf55f322939014acef81d248baa46e1ffbca5a699f0824988b4313ae222bc8d3a3c1e875054a9494c9beac817179749b5cceabbb7cc40bdb8e18d598b683943a61fe105b868896d78e1e3a802774170ef3c1f339b6d20cfb5a260fa197aad2e18146ef53fa9c783772dc9e251c2140fe89709d007c5343681cdf4569d5f3190c0d799504aa0a9001e26a11708fbe929f63ff691a3a0c7a06125d3b3d13b3241abee4fa8c6d27b26eaa58b454e34fe20128a15cf7ff6bfec32904af4b2e04c26bf9393d45b0d66a1a2f15780a67ff34daa1bad27262ec78f27f9ff77157ed5201bf257e1d1d06f2cd3a4cbc02bb9003caebc7e7e9fe7a256de9fc2cce105644c833ee659e3f6d526142d154a881cb70ba8df353a5714bfee5480cf8bff86c62c3a56d45f821d99413f8ea8207a41b7d577e5a1788d051c8c19cc1fc8be844f18227b7eeed330a213a58009c7ea3cfd5c77093b5315c90d36fe15ecd9d9e7e4208aac31abc3928d162449ee68f04aa2aaf5b8711529b97944a873085ed6b59b53b2ef8a397733d5207eb27a81c646eb7079aff7403181b0d658abcdc3445096844b3139ee23cb30f9527b5c84105604e8aa57b32e0470dffa95719415b74ce519ac27b20a38045a9792043d3c5b426deb70b3418d9475c6b85580e7e414c5a9ff35ce7c6fe2f2d5ee8d0aef619d8c2c06e0af87a9bad9dfa2f6ddb57c2e636563a9ee58c8613be2b329f4c16efbe56ae671e712e90712cc4f519276cd7cfa3e421e87ace7e5469665b4345322c77de68639a6f561a0d203d4823d4c3a84f1b2b04c60cd2fe855652c1000b0f5e1bcc2355496522a5046a849d407b5d86123432a41d64b549c1713dc3f0b4a787420c9d3dd3052dbac55dc15ca6584d08bbcc7ece7144fc179d302c5e0833b1f667e0f4110ad9b31f5b7e19e11fc1bf5ea0f9a81806ab5bfa8caff29b84c53c04a85d175c05a74d55b548ae69bb365760ebd841cfd094ce2d7cbf447285f53f5e7cb4ccda0a607c9cf7c3aec55966aca8b8ce33eb300800c3e4d85e4def697e0e00defa03f2c501010baa3470450bec0acdfcdc7f530584e7c2600ba58722303a11c9387edcfbdc85f1128155374f9844f381c2a8a15bb7df67db46f30b9232d3d6037d86dbbbed316bcc5be6fb3ab78a19c9df2889188c7321ffed7795dfd67f3853e516cbaef5d079aac33cbd2cd920b560945744ae03611257ccc66e9523de5282efbf9871092795c05685cfe8749ff4a4cf42aa19fe4f935a71ba462860f1243824fc2888cccc6866f1c81f05bf993b58621cc8f9c6e72a7db971e1bb40632d75c119acbcdcb88b5f1ed4fa5162da82ea66c21f2064867d86abf308a1c65c0a16879d56e2e76ac4110acca20be3abb731effad3aef7f0da4acb9aed0283111670d5ceeba5a551dff13de90acc9dc3176923ad1791a73eb41a3f5c260e4df26a1b8782fa85e5cbf5c20a62bec97da4096264fafafc9f5dcb9a8ca2990a144d6bd138cddcba35fe3cd2609f0189d37e2d76f6d96ea2ba1d5ec9b42c94f254904cd938ea2004b43a111c2f5b53eca1bdb68f8e84fb5834098ea5dd6388d41c987763c8b2c9733f758dd74ce5eeda6cf28137a4d83a66f05d90fb1c9acb0214eb7e5d0869b201330b6fd1a2948e0ad0af0c4f3deb08fa875223ba27f1d42f63da665eaeac81ea9eca52ae1afaed3f4252976019de7d61059e29c8220e88a2d9a4e6202839c74dda2ae43ee2514b55aa812889e4f8e153f9859af16f130053024a8bac43fad387cd526ef42bea5cad61230bbf89db7946a03101d18dc1ae46d046212ec5285564e65d876283fb937d6e38caaceb5716c8b2628b3a349058fe27fa58d53d6e5a769996217960e50846b2cd1b9fbc686f157e19d69a2050098097d45c2879e89e6fa3c5c79339fa3881fd228c29588befa5eb769a1cc1b67e8426b386ee0e6a80d7dd261b0ffb14b321190f1a390c6a0e8052a750d4cb587720ae43f6ffbd7f9328985b2aece118d4838c2eb55e8592823f74550b5d49377464890903f2650999fecb01fce6f6e51eae4f193bfab5f35b854cb0221e75898f111e94d5861fb15086889a5f804df2f7fd41cd49b663d352c59c6e8455f8287aab47cfba4d860c81ae1f61eb8bba8f18bfec3da3eec80bf39a6ff8d028650da69c108f98cdd8359756ff2b911fa688131121523187f1e449baeb64e332558c9d5ad9794e514a4239fe3277749506d69b3ba9df2c48d0111c526674e1ec144de88c58c93ef06da80e14675d0b14842a1ca644af3d7fd5907a46ae58df07f060088573683d14ab5310d471e139a47f8080fc282f16eae908671f35a9c1a7b2941ec86e85e15207e824437f8f79b173cde14b9fdcb9ecd82b224d45f724df18760a2913d907ed48a696367985713ab99d2416213f9991766161ce075aa6da4a7fba3a47c67d04ad7e669afada886f046363fb03a0cc795e5a1840e419967b1a19f40be8bf2a512015d486d00c4026ea86324b5b541ef8388f070800421c137d8ebe7c9a539b529a4af69165c1a6ea23534ce8efa7efb2ac55969df429f3b32d2f2aecb5087359c1b83224e4cfa2c583a1e147dc0202334a2c953383cc69e3a807299d86358b6f42a499eaa5d5680cd670fb49af6488c7cce6efae45682f98d63371eced65de02a82bf560a335ba630283dd77bd3d15296bc21bc337fc1b6d34d77ea7f681055459447f01b65623218dbadbd1958a249ebb76fea35d56299a017c4d7920fb0433d5769bc5130d8a5ed950f8084ba0036078374b82ad14a232f137214bcaa82ea7fcf7393ff4226aa1effda1d44a6100896ebcffb9414baf53c77c84113ef99f89f9f282b19b0e057893ef9c81399e1db0e3a25549dbdc69895e5eebbc545e468401d18dd20afd2913f89c3c0d95d54d5145f5cf434287e01b73b2646a7dc42e0f64fcdc1f3853aa41a6242c6cbafebfd62d147dce9368259beefe4d28179750893fcbdab5956f582372c1c616db2a23537a353e08e275fece1a7c0c0bd9483160fc643ceed9d687d520e944923f1eeccfe7f2e5e1c5876810efa0deb7f00c8f606ca5c14e3bab922243d013288622cad6667696e6759742376f7546339ad37a9246c98a6500686aaec51e2391285e7bdac34fbd4a1df2147bbee2d56c7189b4aeb3880bbc63e6b922b27133497be09318b064166ee8b5ca1c360dc510592bb3077293ff7e48bbfd2221a8c823eef8e677b51b40c7a8bfed1def9e19af5a418b65567ad9cecf4c16232683740dfceef0bde563a0942db0d77493b2d683d413d9fbd0ac8fca1ecaf6e57fd7ae680a493d8c697d3cc038cfcfc55a9a30152ce450dfec029a4edbd38f10222149a87d358f881847d4daf8b182d6b1313d616a767dbd9d71c7a3ca896021216665fcb2c8fbddb593013118cc8ab5044bd6f99bb278ad871917c9b1684cecb2d0e8babaf33fd98c02d8451aa48f3b2a6d6e9a5d12910c7aff613cbcdda418a76abff697229b47783577d0ce2f0041e1360a10f607612405b9b06180d85617ff9c5993a986b32071cf4c43b97f53eef9311929cb8035ec5c2f65cdc40bd757d612de5b9a7eca6e7e70365dd47256ff9f6e22e91ff22bbbee51e153d5321dc76ee8a664505da2039da1fc87e3727f085a47ce3eb52b95edb41ea295b79752c672348621e4d49c48b7d065d116cd1ebe6203e9ed62a9d3367eec2ed7cf3e4762b5f71c6ab34a953482414b762a455ded6e0ede9e07c3b9915aa51aded822c57a72ee3ed236b7c8c3b26db5092baba5d4d385d1e3c0e0d860da91b33a85c20e30da31b890f85a88a5c105e8aa32d6033beafff9ff510a7c7fa566b86eb473c702fcf08449c581650c42b90843b1baabbe95b476983fc98397abb52450a65505212b25c94a2fe3d64816eb9a76e8e8e945b7dd544aa039e61fc6331d88ee4ba297bf0d59a04c95579b62f316da65064247cc1d45792f1510103708d636c53f201b1dc2004a479bccef0bab9bff46eaaedbaa445417ee040c568ca95e606d9d9431798e91491f48434551cb8d8b4b81b389d43845e04d98dc0edbb74eae8d13ef3f662a26d7e548218952bfb4d697bd5c3700cea776ac3eb0ebae5c101bc341688371e31bda8cf7819ff4fa3a478faf97582d497112e510b2986f4238d3d4219024ac82eddc2dfe6d42dd1652ec09548768cb0a46e475493a75a75c54c47ec1e6265d34a87634e09394c77a41b01f374a79333951eec0423e037e0a5dd3cd12dbcc25fbb028613aa7382bade63c1d300b0a6d021f65fca7905e622eb54bde35d59c169f970e3de01272229e78382c7e87cc052da8b7b2dda1d29bc42fd2b7091feab28c14dd9cca5c8946afd8a466c681025128d3f752a8bfd2a8bc0c1bd89c01ad7803d8fe9ea1247e25d8ec18e0c18b8e6293b85cca5535a075b799519623d98a9bb393df5f17065a7f11142320e3138fae891346ca10040fda33128909b485ca1fa733f7d44e424d8dabe3f38d4249c3cb3f22d10521e536be978ff2dee276098db46b56e782596a68d5144ea1f2dff227956f4f860135ec2e0cee212a51b63c60e775fa2e0a7dbcb6f3d27f09dbaf55343bd2af3aee72ed39e15919d3e5b2bc67710c88a68806f1713313887e72e6af52f7de7009399b81cadfe76bff2b61e53b259218bf854d52644bd8e722e170bf9b109ee819b960b8d9da0d2dacf48083bd8a766d3818eae48ba408e18c63c8b59e282553a71f62083e6a007ffa6ce8ad271b7202da28f1d6be4332f404c1e2b98acc4d783785c1eab14361db6382594a9bbc3304f121f198948c91fe58d96aa6a8e12cc3f46f283e635548d96341fe3052aed45be1970010bb76325873b7902f0f73bf21fbe0a5cef6ec0b50902174c3515c89421a496737024b22db73916c4a41d294b8eec3913421b784a2629132461d4e6d5498a88b87abe2e385df8688b70b075e2139def62c18c60f96c1715e203850155ea7bc8d67e77428e9c96a3edf06d984f29959217633a907e7aa0f9792313fd30c6f767b79981ccbf1bf87942cf082090761f9faf5afb90f56a80908cdf34387d3c9ac4d27321b8b2c64f66eb3bc0f7937b0771b68eee977d5f3682fedb04e51868e4e588eb625a71db0057655af47806eaa6b875304738f1129d95ef85921db8b584af8e389297c8d59eb4f5f784474e5e293f48c5cc45e490878c31d32bcbfc88d51f96eee3cfaaea0e443505825a52603a06aa8cdc8920af575650833e7715dc2205ecba7e304eb121cb0d65609b853974fe9ddee9b9cb9fe4d1c08fed5b2f3d0f51e104635dba4857520e0cf319438659cb765bbbe6bed3a6451a85e3efe32707b2c84d7fbb99cd80b3529605b221b808cf34bfe776607cb4074cb9371306c74f3c38a4b48f8a8da8a02be28a08f5a0da463aa85863ef54276c4f414667d3812deb6b0e882381932585e3d08c6f3c2c13b9987088b345e1216b3d525c99820c0b6688d9c0271f648da1881e58fbf5bc02acf226d9e90a64911ebb27b415f3ff4f7bdeb9fdd5bb1f39a99f909f80af444b902d1bd96562882da6e0ce9efb2adfdcd78803164a5ebacd12d6246571066e8f05a37d9eebbf41a88926b6bcb287f4ef47728ec00bd96ccd72eefd5815fa9e2840a100e08be686e6b664c938a0eaa7588e87d69809af59268f3c4e92a98a663f83481668e0f3ee684a6728fa38c75cf66ac73dcee17dfa5ca94601b1e5ff91215492270e24c4abe4dce8686e99d3c64e7c3f5972152da99388bb59e282a1e300627e542cfea5a390dd11f0c95f52702982c0e8c690c1e7bca2ecffb7287b617090ace76f818fa8a9078978e1e249a7f4fa281fb3174fec950f6b9afaabb3279e22c9c37a4ea1c05df6c49c1b89b2ed23ca3673f388f502edd3edc358549c039eeec6ca4ae3404bbfb688c3d90cbd4a092e035ec48c3bb1ef08e2b1b6326622419356669a8399954dcbeddb197de9fb5407e105d800b6cfa91de41b2eb3ad2ead5487b9c7b11e76f2ad08711b00cb8f3da6794398a961853bdcbde90086ff13d69154442c8caa36d56862581a9f326f85c6722be613caf2329d4ff9734c99016390e793b6ef90c540ad3c7478d7b221a71e0f10575ce5f666e2425903f3c358c4dc5b29133da5027b541898b501cfa144e166d1b1d7470d05aeda051a1cd5bc3bafee7ccf8564682cd728d0dfaa4f731438de2ca3095f105c0bad8f3b039a427729ba1f96238403e3d1c8a2bdf1730253d6c78e42f4dc5a6079e95ea5013a9d335e628ee7d2dd1c7f2d25342b2be5c9fef9fd5eeddc8665c1a39705231538d0f3a19e9c021a7d6d2d1c6b3f4b483e6192700d269db9e82746c5ea36c70f29fc98462ecaeed27547de6435a82112b2ec9a8c1e759f82d04810824d97f1ca45071f6ac242b90b218f2c2c9b4cd42b56dbeb5e947a8e8b476749ab8cc7d910fdb17529440107a565737b69440cac0b418858d62fb7af804c5e483faa849a6375ea62581eff9c4dd3ccacdbab7af9fe9b2be75cb2e322c296cb91a792ab424f77ff348d07dfc2a5c5af476cc7c44de169dc1702ddbd5e4d7fb11172d8eab6df3b70c7b66fec5177a533ed44641c291ed9d8cea6832c24c3cd279c9f3bbb355fe47364d23af48cf8a86d27727ab2adf771641ff447291fa9ba99cf5c2cec5c968d565aabe16cd07d752f7d5b2c78e77cbd2dcb2bc151a35207026c98b755eb0e6fdc94628de7653f7a461e0b51f5c089fc4db6deca2243e3e5532bcc279dfccd2651db61565968dfce800e995626a4bf045e3522b996dee4bd10980ede518f4a5d986f41c53f0e2820853337869645c31c41c9563f1c01ce651e916f7472b04929feecd09ff768bdf74f0b40a0c58555f2a390db9bb7990dc31f995ac4bbf1f90271cd4b90ef7fcd096c34040fbd4a74aefdc5a6b8edf38da8084c87564b10e6e2cd7d0ea6849cff02c06e4df741c278f0d29ed6c6c739376e1c262f9d780fec67aeb519cfa669c9d6487ba527e0ccf5012954dbb3ecdbd3f5be1c018784cf83b3bd040e7116be8401e760f82cfc86ac19a18f28c894662f8dd13b1aea577c81bf2447753b57853765eae4353b65475e10c3b36bf0d0dc3199dabff76a06f70b173fac295db1f52100547050f052b9d287155bc8b04435ef35902395ae894bed80080fd3becba14c51da2cf34e2999cdbbf652dc6862e8e65f675b1d7e5da57fbfb497e8111dfe77164372d707a5857325c47afb462f7a38f617d158e8a28fda6d121e532e44b2ca9cef3c34a7a8d748c4edd061b62f6ab7344317b0dbd8ce4836142719a7c0835901236180840246527f3ba39cb64614e95d4af008d281b53853532abdc663051d041af7d1aa9766ab185efb77fcf278f09577e01e507a2034f435b66cab7692a1733d1ad3d5d566396fcacfd1bbdf542e35136a49e2d3cbc21ce157ff051a0c1b636b159f370366565a8ddadaa1502b425ef27a1ff070c52bd17595ee507dc984aeb14d2aba07fe786f3733e3527d5bbfcacfb09d3d5cf94738d1b13d2590b1bb1ea2eb400e9605f90b4b23c125622da85ece62e4493938099a4058e0b3dda2532c6d62bd033ee7a1cd7683620a6501e3ca420f9a64f462bbd4f125d154beff38c8f4a1278f9d6194289234d7e9fd397feb24fe1a8636e334d1342fa590b4578b3c677aae57119bea99ff7a5635b98ee867a282e5f3444b70415c0c33942f041c28589ba0de67d7b7ebe43ec6656f60c82c9d75bc8dac80791cd59a9c576ccf726cc97befcb9aeedf32b9ec6f4aaf043ab9bfc4712ee6bc4906dcd9766658ce56fea361518bb54ccca4bbb82eb64e417a37899ab31736ffddf51f97aa710b29f18ada97a200bd65d655364149db2c41cf32bac2c4bf799bb2356335a4fa01016da72bc7dd99b3f902f8b80a89d19bb04f8c49cdc5a78b17b52d52c06f18baa9839332f3ae59909748cd4dac49c1901f3c2dec64ccb40a49fed1699fe1140f8602384a930fed2ed6f9c120c9e6158aae34d8ec8a4fb0cb7ae19c2865e3939b499b5a08183c342ff4af2b3400980879aaa6e29784e90bfc915b9f31e79b742420952bda798a8b88c77134cc5752630e57fa23f9b174535e3244c9fa475d1b2829fdb768d22d6564e55556fd3750bbb223f3b5748a57c899d324f359c3842fddf8055e1b40588365393b84aa798fcc8b321ba1eeac33d340eda01fdf697e81bb5b55852f6b355a7dd2082cf087949cf9fbbf697af8f81c20f25a1c0b92fcb06dddc50c5d9e989a15a2fb7d0544f1844e3f46711165bab1658615f440b71f93ddb713ba91e8f4d91dd17243082d61cf43fd08861d42f41f1ebc68be633bfcc79b14cdfd7b171ed4b282a926055ce26e7fcf40d1e8e7d05ce6660fdb825dff76d735bce7b43c98e5b6c4763ccff99b45c1439859ccfc61756c298eef7424c465aadcd71455448827e39e5ec21293f2007617fae73b74de8efe349c726a9dac11524720fed5214101b4f26ad6fec2215a54980512a57358545899c6898692d805134d606b3022d16954747d247db0093dbec65fa7d101439ccee58a8790ee0daec0976a743d8f7aabbaf8d9945e95ceede27387e2faebe8d1eae6feedb78cdf016c6c5888e56ab4830b002513f87aed9bb4988784c0debd8f566ea9c8467bab4a52a52de9e262f16ffe222ac1ac6f6d5de557eead4554f03bc8ebd681daa2ae6cf93587d32dcf53a184f5019f0fad0729095a5788b04fc6987064b80c6bba46e36fdd767ca9c6819445e95ec7d60c3f9b2716c206a589e413fd7bf1d8fd3f1245ff54d6db4d7b45f20cb4f6dc8bcde65484d70ac38921f89261d27fc85203b801867850457a3b61fd55e805bd3c40a336bf87101d8914d21c8c968e934ce265cca3efe21d3ae1b78848f7b50a9a2e9b51bfca2ff7e0292ede0aa013af1c09242d6e53f23a216b8ccc64402a46eef3411c06cabb5435b1d2d8ddffc2c3dbbbb0e707e03ae0c518414dc7304dec25084891255011dd133d235e663ff38ee78c9abb93c9f692c5195222c881e35431d638367c7e570c962646424dae41fa2b2af118a93add1e088aaf7e1dd108c7096f4f9868a8af02cc15db7493ef011d320c6d64f6de56a51748e9dc4b7bd1bd515d3e9522a65e87e25477f71a6bddaf7ee5a01d424ac153efaa52f1e56fbef9f66efe5642f7dae41e419a64be65635a088885717942d475daa806ab151b087525446227d0d75a493d5a98486365b3981b3bb77a7c6c6ed44a120a98d0f2d35e8ce83837004c39bf09ac5723b1d7d7392f6e94462e86de853c6841027c697236331e19aa45693b2dbeffea7b00f0b284e49b04935327b9808576b397cb48d6b1960d06058f1cf2d0641d7c99e79dc9d47efd1d5bde85bb51ffe4a687c2d364713ee0ca4981f371c7a418b61118431984324f84f8cdd6e2849c00c1f14b1732a08ffa08d39c312dd809f15c8a651cbec053e870ac04c131946d80a8e684c8f309881f98220d7e532773d4d8304ae53428390ca7914a408030fae3b47619352d8a1edc33856530f806b8efe61bedcbe199aca4dbe79bdacb08b361e31f59c00463071fb19edbc0cb84c59130770fcd17643f7c37c1f54753f40fbeeeee31b22d89944ac6ee913e63145e3e35f804d2cbd08d9f2e278be717872a4fae63d8a8b462f715c3191d394a67a724fab2e4ec31c439fb2fa01295aeb56910fd406316bdfed587c1b42a733542a55793303e59dc23a40bc9b9f5713a3dc21b95b591ac9863f31a4ecd160e7d9b7b2ec2b137e67", 0x2000, &(0x7f0000002180)={&(0x7f0000002240)={0x50, 0x0, 0x8, {0x7, 0x29, 0x7fff, 0x50064c42, 0xc0f3, 0x48e, 0x7, 0x7fff, 0x0, 0x0, 0x20, 0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$FUSE_DEV_IOC_BACKING_CLOSE(r0, 0x4020e504, &(0x7f00000022c0)=0x9ed1) mremap(&(0x7f000001e000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f000065d000/0x3000)=nil) 32.31941029s ago: executing program 0 (id=606): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x16, 0x10, &(0x7f0000000840)=ANY=[@ANYBLOB="1808000004000000000000002000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b70300002bb91a008500000008200000bc090000000000004509030000200000950000000000000085000000b6000000bf980000000000005609fdff020000008500000085000000b70000000000000095"], &(0x7f00000008c0)='GPL\x00', 0x7, 0x0, 0x0, 0x41000, 0x29, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfffffe}, 0x94) 31.843198166s ago: executing program 0 (id=610): unshare(0xe020400) r0 = msgget$private(0x0, 0x351) msgsnd(r0, &(0x7f00000000c0)=ANY=[@ANYRES32], 0x2000, 0x0) msgrcv(0x0, 0x0, 0x0, 0xffffff7f00000000, 0x0) 31.841725952s ago: executing program 0 (id=611): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x20, r0, 0x801, 0x0, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}]}, 0x20}}, 0xc8c1) r3 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r4 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000340), &(0x7f00000003c0)=0x0, &(0x7f0000000400)=0x0, &(0x7f0000000440)=0x0) r8 = syz_ublk_add_dev(r4, r5, r6, r7, &(0x7f0000000480)={0x2e, 0x0, 0x0, r3, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x48, &(0x7f0000000500)=@new_dev={0x1, 0x4}}}, &(0x7f0000000540)) syz_io_uring_submit$UBLK(r5, r6, r7, &(0x7f0000000580)=@ublk_set_params_sqe={0x2e, 0x0, 0x0, r3, 0xc0207508, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {r8, 0xffff, 0x70, &(0x7f0000000600)={0x70, 0x1, {0x4, 0x9, 0xc, 0xa, 0x9, 0x8}, {}, {0x0, 0x0, 0x800}}}}) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='pids.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r9, 0x0) 31.820632008s ago: executing program 0 (id=612): syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f0000001180)='./file0\x00', 0xc5c, &(0x7f00000011c0)={[{@errors_remount}, {@grpid}]}, 0x3, 0x459, &(0x7f0000001200)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0xc) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x220008d0}, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./proc/thread-self/fail-nth\x00', 0x80002, 0x0) write(r0, &(0x7f00000001c0)='3', 0x4e) recvfrom$inet_nvme(0xffffffffffffffff, 0x0, 0x0, 0x10180, 0x0, 0x0) add_key(&(0x7f0000000200)='asymmetric\x00', 0x0, &(0x7f0000000240)="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", 0x559, 0xffffffffffffffff) ioprio_set$pid(0x2, 0x0, 0x6007) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000007c0), 0x8000, 0x0) ioctl$TIOCPKT(r2, 0x5420, &(0x7f0000000800)=0xe) sendfile(r1, r2, 0x0, 0x10ffff) ioctl$TCSETS(r2, 0x5402, &(0x7f0000000840)={0x800001, 0xffffffff, 0x4e8, 0x3, 0x1, "f4951600"}) renameat2(0xffffffffffffff9c, &(0x7f0000001a80)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000001ac0)='./bus\x00', 0x0) 31.764368118s ago: executing program 4 (id=574): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000140)="21000000470010aaaaaaaaaa00030000000000000000000000000000000300000000000000000000000000000003000000000000000000000000000000000000000000000000000000970000", 0x4d) 31.707255825s ago: executing program 4 (id=615): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000680)='./file0\x00', 0x10e, &(0x7f0000000340), 0x3, 0x464, &(0x7f00000006c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000001f00)='./file2\x00', 0x101042, 0x15) pwrite64(r0, &(0x7f0000001f40)='2', 0xfdef, 0xe7c) read$FUSE(r0, &(0x7f0000001f80)={0x2020}, 0x2020) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="4800000010000305000000000000000000cf0000", @ANYRES32=0x0, @ANYBLOB="03000000000000002000128008000100677265"], 0x48}}, 0x2000800) sendmmsg(r1, &(0x7f0000000240), 0x4000000000001f2, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/module/usbcore/parameters/quirks\x00', 0x2, 0x0) mprotect(&(0x7f0000ff1000/0xf000)=nil, 0xf000, 0x1) write(r2, &(0x7f0000000140)='0fc', 0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) 31.622368229s ago: executing program 0 (id=617): munmap(&(0x7f0000002000/0x2000)=nil, 0x2000) r0 = fsopen(&(0x7f0000000180)='tracefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2002, 0x0) mount(&(0x7f0000000040)=@filename='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='ubifs\x00', 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x83) fchdir(r1) ioctl$FS_IOC_MEASURE_VERITY(r0, 0xc0046686, &(0x7f00000001c0)={0x1, 0x52, "38e074562ff38547c3028d47e4d8385a88de62e02e90068007df2e226ca6d098a6265be271f2b52b3917082bdea183ceb01b3abb6e25cb010b2357918554118f7a7890a23ebb100e32ab38da6352ee2cdd4c"}) chdir(&(0x7f00000000c0)='./sys\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x2) getdents64(r2, &(0x7f0000001f80)=""/4096, 0x1000) 31.546497734s ago: executing program 4 (id=618): r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect$printer(0x6, 0x2d, &(0x7f0000000240)=ANY=[], 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x6c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2f}, @NFTA_SET_EXPRESSIONS={0x28, 0x12, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @counter={{0xc}, @void}}, {0x14, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x4}}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x106}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xb4}}, 0x20050800) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$nci(r2, &(0x7f0000000080)=@NCI_OP_CORE_GENERIC_ERROR_NTF={0x0, 0x0, 0x3, 0x7, 0xff}, 0x4) ioctl$EVIOCRMFF(r0, 0x40085507, &(0x7f00000000c0)=0xe65) write$nci(r2, &(0x7f0000000100)=@NCI_OP_RF_DEACTIVATE_RSP={0x1, 0x1, 0x2, 0x6, 0x9, 0x1}, 0x4) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x30, r4, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_NETNS_FD={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x800) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000280), r5) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f0000000540)=0x0) sendmsg$NFC_CMD_DEACTIVATE_TARGET(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)={0xfffffffffffffea7, r6, 0x6, 0x70bd2c, 0x25dfdffb, {}, [@NFC_ATTR_TARGET_INDEX={0x0, 0x4, 0xfffffffe}, @NFC_ATTR_DEVICE_INDEX={0x0, 0x1, r7}]}, 0x14}, 0x1, 0x0, 0x0, 0x20000094}, 0x24000814) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$TIOCSETD(r8, 0x5423, &(0x7f0000000580)=0x3) ioctl$TCFLSH(r8, 0x541b, 0xfffffffffffffffd) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f0000000380)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000003c0)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f0000000400)=0x0) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f00000004c0)={&(0x7f0000000240), 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x34, r6, 0x8, 0x70bd2b, 0x25dfdbfd, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r9}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r10}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r11}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x0) gettid() 30.372175945s ago: executing program 4 (id=632): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x16, 0x10, &(0x7f0000000840)=ANY=[@ANYBLOB="1808000004000000000000002000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b70300002bb91a008500000008300000bc090000000000004509030000200000950000000000000085000000b6000000bf980000000000005609fdff020000008500000085000000b70000000000000095"], &(0x7f00000008c0)='GPL\x00', 0x7, 0x0, 0x0, 0x41000, 0x29, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfffffe}, 0x94) 30.276566487s ago: executing program 41 (id=632): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x16, 0x10, &(0x7f0000000840)=ANY=[@ANYBLOB="1808000004000000000000002000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b70300002bb91a008500000008300000bc090000000000004509030000200000950000000000000085000000b6000000bf980000000000005609fdff020000008500000085000000b70000000000000095"], &(0x7f00000008c0)='GPL\x00', 0x7, 0x0, 0x0, 0x41000, 0x29, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfffffe}, 0x94) 30.234650813s ago: executing program 0 (id=634): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="4800000010001fff000000008100000000000000", @ANYRES32=0x0, @ANYBLOB="00000000003f0000200012800b00010067656e657665000010000280060005004e24000004000e0008000a00", @ANYRES32=r2], 0x48}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) 30.182251432s ago: executing program 42 (id=634): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="4800000010001fff000000008100000000000000", @ANYRES32=0x0, @ANYBLOB="00000000003f0000200012800b00010067656e657665000010000280060005004e24000004000e0008000a00", @ANYRES32=r2], 0x48}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) 24.630531681s ago: executing program 7 (id=764): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000300)=0x2, 0x4) bind$inet6(r0, &(0x7f0000000340)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000780)='X', 0xfee4, 0x0, &(0x7f00000007c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000800)='f', 0x7a80, 0x810, 0x0, 0x0) 24.613221976s ago: executing program 7 (id=767): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) 24.54460864s ago: executing program 7 (id=773): socket(0x80000000000000a, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x1, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)={0x3c, r1, 0x1, 0x0, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x1e, 0x33, @disassoc={{{0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, {0x5}, @device_b, @device_a, @initial, {0x9, 0x1b5}}, 0x17, @void}}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 24.455497543s ago: executing program 7 (id=778): mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00', 0x181) mkdirat(0xffffffffffffff9c, &(0x7f0000000680)='./bus\x00', 0x140) mount$overlay(0x0, &(0x7f00000006c0)='./bus\x00', &(0x7f0000000700), 0x8, &(0x7f0000000740)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './cgroup'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f0000000780)='./bus\x00') syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000880)='./file0\x00', 0x140, 0x82) fanotify_mark(0xffffffffffffffff, 0x105, 0x40001032, r0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f00000008c0)={0x2020}, 0x2020) 24.316197982s ago: executing program 7 (id=786): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000380)='./tracing\x00', &(0x7f00000003c0)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000400)='./tracing/events/enable\x00', 0x1, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 24.238284264s ago: executing program 2 (id=790): socket(0x80000000000000a, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x1, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x88}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)={0x3c, r1, 0x1, 0x0, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x1e, 0x33, @disassoc={{{0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, {0x5}, @device_b, @device_a, @initial, {0x9, 0x1b5}}, 0x17, @void}}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 24.208287621s ago: executing program 2 (id=793): setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000300)=0x2, 0x4) bind$inet6(0xffffffffffffffff, &(0x7f0000000340)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f0000000780)='X', 0xfee4, 0x0, &(0x7f00000007c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f0000000800)='f', 0x7a80, 0x810, 0x0, 0x0) 24.177920748s ago: executing program 2 (id=796): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000c40)={'bond0\x00'}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000cc0)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x20040040) 24.135299342s ago: executing program 1 (id=798): ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0xd) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0xff2e) ioctl$TCFLSH(0xffffffffffffffff, 0x540b, 0x2) 24.134429474s ago: executing program 1 (id=799): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)={0x54, r0, 0x1, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_FRAME={0x38, 0x33, @deauth={{{0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1}, {0xe}, @broadcast, @device_a, @initial, {0x3, 0x9}}, 0x9, @val={0x8c, 0x18, {0x283, "726712ea0202", @long="a25804145623b94ac2157c57a5ea2c8c"}}}}]}, 0x54}, 0x1, 0x0, 0x0, 0x20040080}, 0x28008004) 24.086752268s ago: executing program 2 (id=800): mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00', 0x181) mkdirat(0xffffffffffffff9c, &(0x7f0000000680)='./bus\x00', 0x140) mount$overlay(0x0, &(0x7f00000006c0)='./bus\x00', &(0x7f0000000700), 0x8, &(0x7f0000000740)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './cgroup'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f0000000780)='./bus\x00') syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000880)='./file0\x00', 0x140, 0x82) fanotify_mark(0xffffffffffffffff, 0x105, 0x40001032, r0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f00000008c0)={0x2020}, 0x2020) 24.061147521s ago: executing program 1 (id=803): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) close(r1) r2 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}, {0x1}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x81}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000002c0)={'syzkaller0\x00', @random="0100003600"}) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2c, 0x2, {0x0, 0x0, 0x0, r5, {0x10, 0xd}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a29d}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x4, 0xb130, 0x5, 0x0, 0xe6}, 0x3ff}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x4894}, 0x2) socket(0x400000000010, 0x3, 0x0) r6 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r6, &(0x7f0000000540)={&(0x7f0000000580)=@xdp={0x2c, 0x8, 0x0, 0x40}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000640)="27030200dc0f14000e0000000025c1020000ff11125c", 0x16}], 0x1}, 0x4005) 24.057979195s ago: executing program 2 (id=804): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0xc201}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000ac0)=@newtfilter={0x90, 0x2c, 0x601, 0x70bd28, 0xfffffffe, {0x0, 0x0, 0x0, r2, {0xb, 0xfff8}, {0xfff1, 0xffff}, {0x300}}, [@filter_kind_options=@f_matchall={{0xd}, {0x5c, 0x2, [@TCA_MATCHALL_ACT={0x58, 0x2, [@m_mpls={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0xd, 0x20009, 0x20000000, 0x0, 0x588}, 0x5}}, @TCA_MPLS_LABEL={0x8, 0x5, 0x1fc16}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x90}}, 0x0) 23.819755559s ago: executing program 1 (id=814): mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00', 0x181) mkdirat(0xffffffffffffff9c, &(0x7f0000000680)='./bus\x00', 0x140) mount$overlay(0x0, &(0x7f00000006c0)='./bus\x00', &(0x7f0000000700), 0x8, &(0x7f0000000740)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './cgroup'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f0000000780)='./bus\x00') syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000880)='./file0\x00', 0x140, 0x82) fanotify_mark(0xffffffffffffffff, 0x105, 0x40001032, r0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f00000008c0)={0x2020}, 0x2020) 23.746412742s ago: executing program 1 (id=816): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000c40)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000d00)=@newlink={0x28, 0x10, 0xffffffffffffffff, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x0, 0x33822}, [@IFLA_MASTER={0x8, 0xa, r1}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x20040040) 23.598424576s ago: executing program 2 (id=821): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00'}) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x20040080}, 0x28008004) 23.539390362s ago: executing program 43 (id=821): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00'}) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x20040080}, 0x28008004) 23.364441115s ago: executing program 1 (id=828): r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket(0x400000000010, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r5, {0xf000, 0xffff}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r7, {0xf000, 0xffff}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_FROM={0x8, 0x3, 0x7}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x20008800) 23.2745436s ago: executing program 44 (id=828): r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket(0x400000000010, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r5, {0xf000, 0xffff}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r7, {0xf000, 0xffff}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_FROM={0x8, 0x3, 0x7}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x20008800) 22.890599884s ago: executing program 7 (id=839): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000580)={'syzkaller0\x00', 0x2}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000005c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) sendmsg$nl_route_sched(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000780)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0xffff}, {0xffff, 0xffff}, {0x2, 0x10}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x0, [0x2, 0x8, 0x3, 0x5, 0x2, 0x9, 0x2, 0xb, 0xc, 0xc, 0x1, 0x9, 0x9, 0xc, 0x1, 0x1], 0x1, [0x3, 0x8000, 0x3e63, 0x1, 0x466, 0x5, 0x7ff, 0x0, 0xaf, 0x9, 0x3, 0x9, 0x8e, 0xd4de, 0xb, 0x9], [0x2, 0x7, 0x6, 0x3ff, 0x101, 0x100, 0x5, 0xfffb, 0xfffb, 0x1000, 0x101, 0x81, 0x7fff, 0x4, 0x0, 0x7]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000900)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffffdfc, {0x0, 0x0, 0x0, r6, {0x4}, {0xffff}, {0xfff3, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x9, 0x0, 0xf, 0x10, 0x2, 0x6, 0x8, 0x8, 0x2, 0x0, 0x1, 0x5, 0xff, 0x10, 0x4], 0x3, [0xc, 0x101, 0x4, 0x2002, 0x1, 0x4, 0x6, 0xd03, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x0, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x7, 0x27, 0x401, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x4]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x810}, 0x0) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000003c0)={0x1, &(0x7f0000000400)=[{0x6, 0xf, 0x0, 0x7fff8000}]}) close_range(r7, 0xffffffffffffffff, 0x0) 22.877856571s ago: executing program 45 (id=839): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000580)={'syzkaller0\x00', 0x2}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000005c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) sendmsg$nl_route_sched(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000780)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0xffff}, {0xffff, 0xffff}, {0x2, 0x10}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x0, [0x2, 0x8, 0x3, 0x5, 0x2, 0x9, 0x2, 0xb, 0xc, 0xc, 0x1, 0x9, 0x9, 0xc, 0x1, 0x1], 0x1, [0x3, 0x8000, 0x3e63, 0x1, 0x466, 0x5, 0x7ff, 0x0, 0xaf, 0x9, 0x3, 0x9, 0x8e, 0xd4de, 0xb, 0x9], [0x2, 0x7, 0x6, 0x3ff, 0x101, 0x100, 0x5, 0xfffb, 0xfffb, 0x1000, 0x101, 0x81, 0x7fff, 0x4, 0x0, 0x7]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000900)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffffdfc, {0x0, 0x0, 0x0, r6, {0x4}, {0xffff}, {0xfff3, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x9, 0x0, 0xf, 0x10, 0x2, 0x6, 0x8, 0x8, 0x2, 0x0, 0x1, 0x5, 0xff, 0x10, 0x4], 0x3, [0xc, 0x101, 0x4, 0x2002, 0x1, 0x4, 0x6, 0xd03, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x0, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x7, 0x27, 0x401, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x4]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x810}, 0x0) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000003c0)={0x1, &(0x7f0000000400)=[{0x6, 0xf, 0x0, 0x7fff8000}]}) close_range(r7, 0xffffffffffffffff, 0x0) 1.920999316s ago: executing program 9 (id=1215): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010000507"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x88000}, 0x4040004) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r2, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}, 0x1, 0x0, 0x0, 0x4000054}, 0x0) 1.920114744s ago: executing program 9 (id=1217): r0 = openat$dm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$DM_TABLE_LOAD(r0, 0xc138fd09, &(0x7f0000000300)={0x4, 0x0, 0x0, 0x1b8, 0x147, 0x1, 0x0, 0xa0000, 0x0, 0x0, @by_name={0x0, {'syz', 0x0, '3\x00'}}, [@striped={0x0, 0x0, 0x0, 0x80, 'striped\x00', {0x4, 0x20, '8', [{0x20, {@ram={'/dev/ram', 0x0}, 0x20, '16'}}, {0x20, {@rnull={'/dev/syzrnull', 0x0}, 0x20, '4096'}}, {0x20, {@ram={'/dev/ram', 0x1}, 0x20, '128'}}, {0x20, {@rnull={'/dev/syzrnull', 0x0}, 0x20, '16'}}]}}]}) 1.907052653s ago: executing program 9 (id=1218): mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00', 0x181) mkdirat(0xffffffffffffff9c, 0x0, 0x140) mount$overlay(0x0, &(0x7f00000006c0)='./bus\x00', &(0x7f0000000700), 0x8, &(0x7f0000000740)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './cgroup'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f0000000780)='./bus\x00') syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000880)='./file0\x00', 0x140, 0x82) r1 = fanotify_init(0x81, 0x1000) fanotify_mark(r1, 0x105, 0x40001032, r0, 0x0) read$FUSE(r1, &(0x7f00000008c0)={0x2020}, 0x2020) 1.849745294s ago: executing program 3 (id=1219): r0 = openat$dm_control(0xffffffffffffff9c, &(0x7f0000000b00), 0x2, 0x0) r1 = openat$dm_control(0xffffffffffffff9c, &(0x7f0000000b40), 0x883, 0x0) ioctl$DM_DEV_CREATE(r1, 0xc138fd03, &(0x7f0000000b80)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, {'syz', 0x0, '1\x00'}, @uuid={'CRP-syz', 0x0, '3\x00'}}}) ioctl$DM_TABLE_LOAD(r0, 0xc138fd09, &(0x7f0000001040)={0x4, 0x0, 0x0, 0x1c0, 0x138, 0x1, 0x0, 0x5000, 0x0, 0x0, @by_dev={r2}, [@raid={0x0, 0x8, 0x0, 0x88, 'raid\x00', {'raid10_near', 0x20, '3 64 raid10_format far', 0x20, 0x2, [{0x20, @none, 0x20, @rnull={'/dev/syzrnull', 0x0}}, {0x20, @dev=@ram={'/dev/ram', 0x0}, 0x20, @ram={'/dev/ram', 0x1}}]}}]}) (fail_nth: 5) 1.737108202s ago: executing program 3 (id=1220): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) (async) r0 = socket(0x2b, 0x80801, 0x1) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x3ff, @ipv4={'\x00', '\xff\xff', @local}, 0xfffffffa}, 0x1c) (async) setsockopt$IPT_SO_SET_REPLACE(r0, 0x29, 0x40, 0x0, 0x11e) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x12, 0xffffffffffffffff, 0x0) (async) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000080)=@filter={'filter\x00', 0xe, 0x4, 0x260, 0xffffffff, 0x0, 0x130, 0x1c8, 0xffffffff, 0xffffffff, 0x98, 0x130, 0x1c8, 0xffffffff, 0x4, 0x0, {[{{@ip={@empty, @empty, 0x0, 0x0, '\x00', '\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0xf, 0x7, 0x5b4}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2c0) (async) syz_mount_image$vfat(&(0x7f0000000380), &(0x7f00000003c0)='./file1\x00', 0x4814, &(0x7f0000000400)=ANY=[], 0x1, 0x27e, &(0x7f0000000440)="$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") (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000006c0)='memory.events.local\x00', 0x275a, 0x0) (async) r3 = socket$inet(0x2, 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x33, &(0x7f0000000400)={0x1, &(0x7f0000000700)=[{0x6, 0x0, 0x0, 0x2}]}, 0x8) (async) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) (async) r4 = syz_io_uring_setup(0xf00, &(0x7f0000000740)={0x0, 0x5961, 0x10000, 0x0, 0x4e}, &(0x7f00000007c0)=0x0, &(0x7f0000000800)=0x0, &(0x7f0000000840)=0x0) syz_io_uring_submit(r5, r6, r7, &(0x7f0000000880)=@IORING_OP_FUTEX_WAIT={0x33, 0x0, 0x0, 0x8a, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x2}}) io_uring_enter(r4, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) ftruncate(r2, 0x5) r8 = socket$inet_tcp(0x2, 0x1, 0x6) connect$inet(r8, &(0x7f0000000340)={0x2, 0x6bb, @loopback}, 0x10) (async) close(0x4) (async) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) cachestat(r9, 0x0, 0x0, 0x0) 1.429844073s ago: executing program 6 (id=1227): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000c40)={'bond0\x00', 0x0}) sendto(0xffffffffffffffff, &(0x7f0000000280)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000d00)=@newlink={0x40, 0x10, 0xffffffffffffffff, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x0, 0x33822}, [@IFLA_MASTER={0x8, 0xa, r1}, @IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @vrf={{0x8}, {0xc, 0x2, 0x0, 0x1, {0x8, 0x1, 0xb6}}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x20040040) 1.3507911s ago: executing program 6 (id=1228): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010000507"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x88000}, 0x4040004) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r2, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}, 0x1, 0x0, 0x0, 0x4000054}, 0x0) 1.319322001s ago: executing program 6 (id=1229): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0xc201}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) 1.224244999s ago: executing program 6 (id=1231): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@bridge_getneigh={0x58, 0x1e, 0x1, 0x70bd26, 0x25dfdbfe, {0x7, 0x0, 0x0, 0x0, 0x0, 0x2000a}, [@IFLA_VFINFO_LIST={0x38, 0x16, 0x0, 0x1, [{0x4}, {0x30, 0x1, 0x0, 0x1, [@IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0x400, 0xd37d}}, @IFLA_VF_SPOOFCHK={0xc, 0x4, {0x80000001, 0x9}}, @IFLA_VF_TRUST={0xc, 0x9, {0x9, 0x5}}]}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x20004040}, 0x20000800) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./tracing/events/lock/contended_release/enable\x00', 0x2, 0x0) write(r1, &(0x7f0000000100)='1', 0x1) lsetxattr(&(0x7f0000000140)='./tracing\x00', &(0x7f0000000180)=@random={'osx.', '){{*--&&\x00'}, &(0x7f00000001c0)='\x00', 0x1, 0x1) 1.111426893s ago: executing program 6 (id=1233): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='attr/prev\x00') exit(0xffff) write$RDMA_USER_CM_CMD_JOIN_MCAST(r0, 0x0, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000002a0000000100000000000001040000002000000105000000010000040400000013000000010000000000000017000000020000040800000021000000010000000000000025000000020000002000000000696e74006270665f7370696e5f6c6f636b0076616c006d61705f76616c756500636e74006c"], 0x0, 0x8e}, 0x28) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x2, 0x4, 0x8, 0x1, 0x0, 0x0, 0x0, '\x00', 0x0, r1, 0x1, 0x3}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002500)={0x3, 0x10, &(0x7f00000025c0)=ANY=[@ANYBLOB="bfa200000000000007020000fcffffff620200000000000018110000", @ANYRES32=r2, @ANYBLOB="000000000000000085000000010000001500070000000000bf06000000000000bf610000000000000701000004000000850000005d000000bf61000000000000070100000400000085000000c2000000b70000000000000095"], &(0x7f0000002640)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000ff0000000000000000c3100000000000009500"/32], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xff}, 0x94) r3 = socket(0x1, 0x2, 0x0) bind$unix(r3, &(0x7f0000000200)=@abs={0x1, 0x0, 0x40004e20}, 0x6e) ioctl$SIOCGETMIFCNT_IN6(r3, 0x89e0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x4, 0xd, &(0x7f00000000c0)=""/13, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) read$FUSE(r0, &(0x7f00000004c0)={0x2020}, 0x2020) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r4 = add_key(&(0x7f00000003c0)='asymmetric\x00', 0x0, &(0x7f0000002680)="308205553082033da00302010202147398ea982dd02ea8b1cf57c7f297b3e61afc8c0a300d06092a864886f70d01010b050030343132303006035504030c29436572746966696361746520766572696669636174696f6e2073656c662d74657374696e67206b65793020170d3232303531383232333234315a180f32313232303432343232333234315a30343132303006035504030c29436572746966696361746520766572696669636174696f6e2073656c662d74657374696e67206b657a30820222300d06092a864886f70d01010105000382020f003082020a0282020100ccac49dd3bcab0157e846ab20a695f1c0a61823b4f2ca3952c08584bb15d99e0c3c179c2b3ebc01e6d3e541dbdb7927b4ab59558b2522ec6244b7163803277a7385edb72ae6e0decfbb66d017fe95566dfbf1d76780231e8e507f8b7825c0dd4bbfba2590d2e3a78953a8b4606474446d7cd066a4113e319f6bb6e38f48301a3bf4a394fd70ae938b3f594144eddf743fd24b2493ca5f77a7cd4453d977568f1ed4c420b70ca85f3dee5882cc5beb69734ba2402cd8b869fa973ca73cf9281ee7555bb18675cff3fb5dd331b0ce978db5ccfaa5c4342df5ea96decd7d7ffe6a13a921adaaef68c6f7bd5b46e06e98fe8de093189ed0e11a1fa8ae9e964596253dad170be11d4999711cf99de0b9d947eaab852ea37db907e35bdd9fe6d0a487028ddd50d7f03809314238fb922cd7c29fef172b55c0b12cf9c15f6114c7a45258c450a34ac2d9a81ca0b1322cdeb1a38881897960881aacc8f0f8a327b7668036843bf11ba5560fd801c0d9b69b60972bc0f412f0782c6e3b21391c46d149531be19bdbcede14c74a2e0780bbb94ec4c533aa2b5841d4b657edcf7db367dbe9e3b366642667635bfbef0c13c7ce9425c24530305a86724500275ff24463b358976e670dac5518c9ae505b00bd02dd47d5775946bf90aad0e410015d04fc07f902d18488f28fe5da7cd999ebd026c8a31f31cc74be693cd42a2e46810479dfc210203000001a35d305b300c0603551d130101ff04023000300b0603551d0f040403020780301d0603551d0e04160414f58703bb33ce1b73ee02eccdee5b8817518fe3db301f0603551d23041830168014f58703bb33ce1b73ee02eccdee5b8817518fe3db300d06092a864886f70d01010b05000382020100c02e12417b738516c8db8679e8f5cd44f4c6e281235e47cbab25f11e583e317f78ad85ebfe148860f77fd226a2f4982afdba050c203312cc4d1461648193d333edc8fff178cc5f519f09d7be0d5c74fd9bdf524ac9a871253304106736d0b30bc9a14072ae417b68e6e47bd028f76de73f50fc917c9156d4dfa6bbe84d1b58aa3bfac119eb112f248b7cc5a98626aa6eb79bd5f806fb02527b9c9ea1e0078b5ee4b85529f648521c1b542d46d8e571b960d145b592898a63582ab3c6b276e23c825904ae5ac4997b2e4b4657b82924b2fdee2c0da483fa652a07358b97cfbd962ed17e6cc21e87b66c7665b5b262da8be973e3db33dd133a17636a76de8d8fe04761283a83ff8fe7c7e04aa3e507cfe98c35352ee7806631bf91580ae1253d38d3a4f059344707620fbe30dd818858f028b096e582f805b71301bcfac61f8672ccf9ee8ed9d6048c246cbf0f5d3739cf45c1933ad2ed5c5879748662307e8ebbdd7aa9edca40cb6247f4b49f527f7263a8f02baf452a48196de3fbf9196669c8cc62876c532b2d6e906c543a822541cb186aa422a8a1c447d781001c15510f1aafef9fa6618cbd6b8bede6ac0eb63a4c92e60f910a0f71c7a0b90d3a175a6f35c8e7504f46e870604806828b6658e673919c123d358e46ad5af5b3db692104fdd31cdf949d56b00ad195768dec9edd0b159764ade5f26202fc9e5f56423905b3", 0x559, 0xfffffffffffffffd) r5 = add_key$keyring(&(0x7f0000002c00), &(0x7f0000002c40)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r5, &(0x7f0000002c80)='asymmetric\x00', &(0x7f0000002cc0)) keyctl$link(0x8, r4, r5) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x40f00, 0xa, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) 1.041217175s ago: executing program 9 (id=1236): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000300)=0x2, 0x4) bind$inet6(r0, &(0x7f0000000340)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000780)='X', 0xfee4, 0x0, &(0x7f00000007c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000800)='f', 0x3b4, 0x810, 0x0, 0x0) 877.701437ms ago: executing program 3 (id=1238): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000c40)={'bond0\x00', 0x0}) sendto(0xffffffffffffffff, &(0x7f0000000280)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000d00)=@newlink={0x40, 0x10, 0xffffffffffffffff, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x0, 0x33822}, [@IFLA_MASTER={0x8, 0xa, r1}, @IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @vrf={{0x8}, {0xc, 0x2, 0x0, 0x1, {0x8, 0x1, 0xb6}}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x20040040) 815.830864ms ago: executing program 9 (id=1239): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000300)=0x2, 0x4) bind$inet6(r0, &(0x7f0000000340)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000780)='X', 0xfee4, 0x0, &(0x7f00000007c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000800)='f', 0x7a80, 0x810, 0x0, 0x0) (fail_nth: 4) 762.541475ms ago: executing program 3 (id=1242): mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x1, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000068a000000000000041f00181801000020696c2500000000002020207ba1d8fdffffff807ba1000000000000040100000400ffffb702000008001f00b703000002000020850000002effb00095"], &(0x7f00000003c0)='syzkaller\x00', 0xa, 0xffa, &(0x7f0000000b00)=""/4090, 0x0, 0xa8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200000}, 0x94) 762.460698ms ago: executing program 3 (id=1243): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xa, &(0x7f0000000000)=ANY=[@ANYBLOB="bfa200000000000007020000f0ffffffb70300000c000000b70a000000000000b705000000"], &(0x7f0000000700)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) 695.965762ms ago: executing program 3 (id=1245): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x20001, 0xcb) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = epoll_create1(0x0) ioctl$UI_SET_FFBIT(r0, 0x4004556b, 0x68) r3 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000080)={0x2000001f}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000000c0)={0xe0000000}) io_setup(0x4fe, &(0x7f0000000180)=0x0) io_submit(r4, 0x0, &(0x7f0000000140)) syz_open_dev$mtd(&(0x7f0000000000), 0x0, 0x100) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), r6) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000740)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r6, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="090d2000000000f0ff000700000008000300", @ANYRES32=r8, @ANYBLOB="0800051d000000001400060076657468115f746f5f7465616d0000000400cc0008000500090000001400040073"], 0x58}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="280000001000010024bd7000fc0ddf2500000000", @ANYRES8=r8, @ANYBLOB="1b0b04000300000008001b", @ANYRES64=r5], 0x28}, 0x1, 0x0, 0x0, 0x68010}, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000940), 0xffffffffffffffff) ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, &(0x7f0000000900)={0x4c5f, r5, 0x2}) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000980), 0xffffffffffffffff) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r11, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r12, @ANYBLOB="d16880c6abee5a8bd75d2498230100000000000008004ec6", @ANYRES32=0x0, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x5}, 0x0) setsockopt$IPT_SO_SET_REPLACE(r10, 0x0, 0x40, &(0x7f0000000b40)=@raw={'raw\x00', 0x9, 0x3, 0x278, 0x0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x1e0, 0xffffffff, 0xffffffff, 0x1e0, 0xffffffff, 0x3, 0x0, {[{{@ip={@rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xffffffff, 0x51ea585753fa2362, 'team0\x00', 'pim6reg\x00', {0xff}, {0xff}, 0xff, 0x3, 0x2}, 0x0, 0xc8, 0xf0, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'lo\x00', {0x1d, 0x3e8, 0x5, 0x8, 0x40, 0x3e8, 0x3e8}}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}, {{@uncond, 0x0, 0xc8, 0xf0, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x2, 0x1, 0x3, 0x1, 0x7}}, @common=@ttl={{0x28}, {0x0, 0x2}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xffffffffffffffff}}}}, 0x2d8) r13 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r13, 0x0, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x9, 0x3, 0x220, 0x0, 0xffffffff, 0xffffffff, 0x188, 0xffffffff, 0xf0, 0xffffffff, 0xffffffff, 0x188, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0xf0, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'lo\x00', {0x0, 0x3e8, 0x5, 0x8, 0x40, 0x3e8, 0x3e8}}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xffffffffffffffff}}}}, 0x280) r14 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) ioctl$TIOCSETD(r14, 0x5423, &(0x7f0000000b00)=0xf) ioctl$TCFLSH(r14, 0x400455c8, 0x400000009) 646.755159ms ago: executing program 9 (id=1246): mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00', 0x181) mkdirat(0xffffffffffffff9c, 0x0, 0x140) mount$overlay(0x0, &(0x7f00000006c0)='./bus\x00', &(0x7f0000000700), 0x8, &(0x7f0000000740)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './cgroup'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f0000000780)='./bus\x00') syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000880)='./file0\x00', 0x140, 0x82) r1 = fanotify_init(0x81, 0x1000) fanotify_mark(r1, 0x105, 0x40001032, r0, 0x0) read$FUSE(r1, &(0x7f00000008c0)={0x2020}, 0x2020) 574.316655ms ago: executing program 8 (id=1247): openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) close(r0) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {0xffff, 0xffff}, {0x1}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x81}, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f00000002c0)={'syzkaller0\x00', @random="0100003600"}) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2c, 0x2, {0x0, 0x0, 0x0, r4, {0x10, 0xd}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a29d}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x4, 0xb130, 0x5, 0x0, 0xe6}, 0x3ff}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x4894}, 0x2) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000004c0)={'syzkaller0\x00', 0x0}) r7 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r7, &(0x7f0000000540)={&(0x7f0000000580)=@xdp={0x2c, 0x8, r6, 0x40}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000640)="27030200dc0f14000e0000000025c1020000ff11125c", 0x16}], 0x1}, 0x4005) 355.683628ms ago: executing program 5 (id=1250): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='afs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b) write(r2, &(0x7f00000002c0)='7', 0x1) write$cgroup_pid(r1, &(0x7f0000000580), 0x12) 324.159366ms ago: executing program 8 (id=1251): r0 = socket(0x10, 0x80003, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000380)='./tracing\x00', &(0x7f00000003c0)='tracefs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./tracing/events/enable\x00', 0x1, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r1, 0x8983, &(0x7f0000000000)) close_range(r0, 0xffffffffffffffff, 0x0) 234.59332ms ago: executing program 6 (id=1252): r0 = socket$packet(0x11, 0x2, 0x300) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_sco_SCO_CONNINFO(r1, 0x11, 0x2, 0x0, &(0x7f0000000580)) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0xe, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000004c0), 0x0, 0x10, &(0x7f0000000500), 0xfffffffffffffe19}, 0x42) fcntl$dupfd(r1, 0x0, r0) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000540)=r2, 0x4) syz_emit_vhci(&(0x7f00000005c0)=ANY=[@ANYRES16=r0, @ANYBLOB="28db68b2d5415751c9e82f78f9b0994bdc027db655beef583c7a21d365e74901e26eadfdca2395152c27921ac02430098967d4bb1e15223a8b03d9c8358180a82c31872a7e237077b3e8f36001e00e694b4f1935001bfd4f492e62084872bff4252cc8fafc352d1d76de023061a3761c3f8e1d4b674371f13313ae77d17ab03e5e6f627c245f453d4ca7f2c712aa6d25e0ee5b2719225bc919bca81a584f44a6c437fc7c1a28393ce3e6b5fffe53a204d1977d99fb9266f184e2c84f2ce28d3d42817b133b3cd20a68744eaf1aef870b5d0f924c26a8d308931276090d9afa80df19e86a", @ANYRESDEC=r2, @ANYRESDEC=r0], 0xf) 234.377375ms ago: executing program 8 (id=1253): r0 = syz_mount_image$ext4(&(0x7f0000002740)='ext4\x00', &(0x7f0000002780)='./file0\x00', 0x0, &(0x7f00000027c0), 0x1, 0x2740, &(0x7f0000002800)="$eJzs3XuIXOX5B/DnzM5mk82q0ejPH41ag5I2qJuLVFday4rFQk0NVNBaWk1oJpK4mrpZ2yZYSbBUCorQaNUWbKu2lPSvFpH+oTUN1V6wtIL2gmClF62CF9hQLDXZ8s6Zjas7m82y3fPGzOcDkznv2XPO87wz+31nAwcmgM5VRMTpEfcVEfcviXitteug+eVjsDVcu2t0c8TY2OWvF83jyvHbl0oWRsSOiDj7hIi9yyJ665PLbt22/br1Q0ON4bmdXbP9cTt7Xnx4d2PNwAODT59yzQsjVxfFYPRNmFfvaBHvaLUeMTCjaosm7SnaHFUvIi6a0XWPfCvq5Vy7pjnupMadj00c981tWxzCNf++5KH0fvW0MvtgV390tRKw+calz/bH2LopT7750XOijEgzY4sj4kBPWiW6mz9uPJnWjOXdU53eOLl8TgcsiIglaTB/sNVNaTCG90w3h3kR0RsRZ0TE/gn1T92fzj+tXfyadt093ZXh6Dd25Hh/h88fKjfd32tHu9yvP+SUO39APh3++b8j9/oLeZUrQO4ugOrl/gAGAACqt3bX6ObxR1U1dy+NePWi8iaiyfXrUWs+l3fwvfvevCIizppl/TsunuUFZmnrJ/LWf/qKvPWP/1He+t99Lm/9dcsiduyM5n2jk3//i9avfvvf/5nfmzpZX2OWF5ilM7Pc8fO2u7dE7Enrz8p2608t/r/53P7174uIs2dZ/9arWu//jnb1i9Y91+3rnx4RA23uq56JNTdEvLozYkPb9b+Ydv399Czr3zJ6qPW/Nm39q2ZZ/6lLyvm/r2398Xrt66fePjPL+o23Isa+F/GBKV7/iVaMXP+FFVu3bT9n0/Xrr21c27jh3PPPW3n+6tUfWnXBio2bhhory39nVP/Ad8r5905R/1DzT919dgbz/1ybY18+q6z/wTPav//xjvoRs3y5J/nk3/7HFwQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4KhRa36XdVHrP7hdq/X3RyyMiBOjtza0ZevIWRu33HTDhohjmvsWFBs3DTX6P79laENEHNv89vLu2vi3Dx9fjpvHrIqIEyaMV7fGX+0qx+fmnjx0qL6I5//892tfWviu/P+zq8w/cPRK+X/miZ8+nrb3deXuBqhSyv/ufddfGvIPHUf+oXPJP3Qu+YfOJf/QueQfOpf8Q+eSf+hc8g+dS/6hc43nf8+HL7g3Iurl3vr4ZtF6HI7DPQ4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADhK1H+zaOGV3//1R3P3AVQv5f+4l97ck7sPoHop//935cd/mbsPoHop/5ed9MULcvcBVC/l/8zzB36Vuw+gein/N9+04LzcfQDVS/lvPPHIqtx9ANVL+b/wttt+l7sPoHop/48v27svdx9A9VL+X9ow2pu7D6B6Kf8HnllzTO4+gOql/P/gm18Zzd0HUL2U/6cePreWuw+gein/d/2r9lbuPoDqpfzfcclj/8ndB1C9lP9n67d35+4DqF7K/w9HfntK7j6A6qX8v3HeW3/N3QdQvZT/l7928T9y9wFUL+X/x78YXpK7D6B6Kf/PvfiRV3L3AVQv5f/Wh445MXcfQPVS/r914k8W5+4DqF7K/94rbn01dx9A9VL+1+1buTR3H0D1Uv4HHin+krsPoHop/0vn/exPufsAqpfyv+1jdy7L3QdQvZT/xRt//sfcfQDVS/m/9Mw3lufuA6heyv+n7lrbn7sPoHop/71/uOX3W7dtv2790FBjeA43cs8VaO/YiOiLopb+EKg1t2u1/v6I4yJiUXQXGzcNNVY2tyOe6uruSWNfGgTvbX0Rz6+5/cklVXz+27Bh4722kXuFAuaa/6VDJ6u9UkRE0Rpd9vXBeyb+dF7xZlfzOSK+9O3L7/ny+pGR4VVp/xsH94/c29q/Okf/wOEaz+l4jgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgMNQRMTpEfcVEfcviXitteug+eVjsDVcu2t0c8TY2OWvl8eV47cvlSyMiB1RxNknROxdFtFbn1x267bt160fGmoMz+3smu2P29nz4sO7G2sGHhh8+pRrXhi5uigGo2/CvHpHi3hHq/WIgRlVWzRpT9HmqHoRceGMrnvkW1Ev59o1zXEnNe58bOK4b27b4hC2Lf/G7vR+9bQy+2BXf3S1ErD5xqXP9sfYuilPvvnRc6KMSDNjiyPiQE9aJbqbP248mdaM5d1Tnd44uXxOByyIiCVpMH+w1U1pMIb3TDeHeRHRGxFnRMT+CfVP3Z/OP61d/Jp23T3dlQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOC/7NSvi1RRFAfw72PeOuu4QRQxrIoiCIKuxbBFeM0iGOz+CK+sW1wtikH/AsNisBi0mY0riMFuEIwmo4bN68j7oY7srsOGAcHPB4bh3Dn33nMYzgUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOC/UyQ5mTwrkueLydd+6Zf57lP14dX1zZVkPL72rcvr4t9HNQ4keZRBzh1K3p1JRuX2a+/ef3D71upqvTbb7tryf3o8/PL6VX1l+UX14diNz/euF0WVhYm+RptF/ii1TJb3dNvBbSvFDlllkVza07n/vgtl1+tgSt6R+smbyXhhtmXxF5c3Pl1s/q9hP7MvB0sZ9BOwcufUx6WMb+66+eHG+XQj0s7Y4STfh80rMdf+XL9v3oyzc7ttr492303C/iSLTTBf9dV0qqy9ndbDviSjJKeTbE3cf3yr2X9ip/FrrT+ddjIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD/YgWMBAAAAAGH+1mH0bAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcCkAAP//S/o/DA==") openat$ext4_procfs(0xffffffffffffff9c, &(0x7f0000000cc0)={'/proc/fs/ext4/loop', 0x0, 0x2f, 'mb_groups\x00'}, 0x0, 0x0) read(r0, &(0x7f0000000d00)=""/498, 0x1f2) 234.145088ms ago: executing program 5 (id=1254): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010000507"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000009c0)=@newtfilter={0x24, 0x2c, 0x400, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xffff, 0x10}, {0xfff2, 0x1}, {0x8015, 0xc}}}, 0x24}, 0x1, 0x0, 0x0, 0x88000}, 0x4040004) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r2, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}, 0x1, 0x0, 0x0, 0x4000054}, 0x0) 233.234067ms ago: executing program 5 (id=1255): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) sendto(0xffffffffffffffff, &(0x7f0000000280)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000d00)=@newlink={0x40, 0x10, 0xffffffffffffffff, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x0, 0x33822}, [@IFLA_MASTER={0x8}, @IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @vrf={{0x8}, {0xc, 0x2, 0x0, 0x1, {0x8, 0x1, 0xb6}}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x20040040) 205.671581ms ago: executing program 8 (id=1256): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xa, &(0x7f0000000000)=ANY=[@ANYBLOB="bfa200000000000007020000f0ffffffb70300000c000000b70a000000000000b705000000"], &(0x7f0000000700)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) 176.512512ms ago: executing program 5 (id=1257): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0xc201}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) 143.373058ms ago: executing program 8 (id=1258): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x4c02}) r1 = socket$kcm(0x2, 0xa, 0x2) r2 = gettid() timer_create(0x0, &(0x7f00000104c0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000010500)) timer_settime(0x0, 0x0, &(0x7f0000010540)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = socket$tipc(0x1e, 0x1, 0x0) bind$tipc(r3, &(0x7f0000010580)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) listen(r3, 0x0) r4 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r4, &(0x7f00000105c0)={&(0x7f0000010600)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, &(0x7f0000010640)=[{&(0x7f0000010680)="2fee", 0x2}], 0x1, 0x0, 0x0, 0x40010}, 0x0) ioctl$AUTOFS_IOC_PROTOVER(r0, 0x80049363, &(0x7f0000000280)) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000080)=0x1000) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000000c0)={'syzkaller1\x00', @link_local}) read(r0, &(0x7f00000003c0)=""/65529, 0xfff9) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r5 = syz_open_dev$media(&(0x7f0000000100), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r5, 0xc0487c04, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000001c0)=[{}]}) socket$packet(0x11, 0x2, 0x300) r6 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_encap(r6, 0x11, 0x64, &(0x7f00000103c0)=0x2, 0x4) bind$inet6(r6, &(0x7f0000010400)={0xa, 0xe22, 0x0, @empty}, 0x1c) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000106c0)={0x1f, 0x3, &(0x7f0000010780)=ANY=[@ANYBLOB="1800000000490000000000000000000095"], &(0x7f00000107c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000010800)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffec, 0x0, &(0x7f0000010880)="89", 0x0, 0xf, 0x0, 0x2}, 0x32) syz_emit_ethernet(0x66, &(0x7f0000010440)={@link_local, @local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010700", 0x30, 0x11, 0x0, @private1, @mcast2, {[], {0x4e24, 0xe22, 0x30, 0x0, @opaque="386d9cbc98b94c74bd0f3df77108b1fdced4fd15193d639133a6099b19960858f98f97819248671d"}}}}}}, 0x0) unshare(0x22020400) io_uring_setup(0x1694, 0x0) r8 = syz_io_uring_setup(0x48ce, &(0x7f0000000200)={0x0, 0xd353, 0x3221, 0x0, 0x19a}, 0x0, &(0x7f00000002c0)=0x0, &(0x7f0000000300)=0x0) syz_ublk_add_dev(r8, 0x0, r9, r10, &(0x7f0000000340)={0x2e, 0x5c, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x0, 0x0}}, 0x0) 93.712438ms ago: executing program 5 (id=1259): syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f0000000280)=@IORING_OP_SEND_ZC={0x2f, 0x40, 0x28, 0xffffffffffffffff, &(0x7f0000001800)="f9a8", &(0x7f0000002840)={&(0x7f0000001840)="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", 0x2da}, 0x0, 0x4c000, 0x1, {0x0, 0x0, 0x2}}) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001740)={&(0x7f0000001780)=ANY=[@ANYBLOB="f4060000", @ANYRES16, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r1, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}, 0x1, 0x0, 0x0, 0x4000054}, 0x0) 30.616575ms ago: executing program 5 (id=1260): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000003580)={0x0, 0x0, &(0x7f00000035c0)={&(0x7f0000003600)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x74, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_EXPRESSIONS={0x30, 0x12, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0x80000001}]}}}, {0xc, 0x1, 0x0, 0x1, @ct={{0x7}, @void}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x110}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x7, 0x84}}}, 0xbc}}, 0x20050800) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x4000, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000003380)={0x0, 0x0, &(0x7f00000033c0)={&(0x7f0000003400)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x38, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x2}, @NFTA_CHAIN_HOOK={0xc, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x80}}, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/thread-self/fail-nth\x00', 0x282, 0x6) setns(0xc9, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003480), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r3, &(0x7f00000034c0)={0x0, 0x0, &(0x7f0000003500)={&(0x7f0000003540)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002dbd7000fedbdf2567000000080001000100000008000300", @ANYRES32=0x0, @ANYBLOB="0c0099000100000077000000"], 0x30}, 0x1, 0x0, 0x0, 0x4000001}, 0xc800) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000100)={0x0, 0x0, 0x10001, 0x5}) timer_settime(0x0, 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r5 = fsopen(&(0x7f0000000140)='nsfs\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x0, 0x0) r7 = openat$cgroup_subtree(r6, &(0x7f0000000180), 0x2, 0x0) write$cgroup_subtree(r7, &(0x7f00000001c0)=ANY=[@ANYBLOB='-cpu'], 0x5) write$cgroup_subtree(r7, &(0x7f0000000240)=ANY=[@ANYBLOB="2bf61136024702003e05e7aff8b7007520"], 0x5) ioctl$F2FS_IOC_COMPRESS_FILE(r6, 0xf518, 0x0) write(r7, &(0x7f0000000240), 0x0) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000001380)="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", 0x2000, 0x0) userfaultfd(0x801) write$UHID_INPUT(r0, &(0x7f0000000340)={0xc, {"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", 0xffffff20}}, 0x1006) r8 = syz_open_dev$cec(&(0x7f0000000280), 0x0, 0x307480) ioctl$CEC_S_MODE(r8, 0x40046109, &(0x7f00000002c0)=0xd0) r9 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r9, 0x10f, 0x87, &(0x7f00000036c0)={0x41}, 0x10) 0s ago: executing program 8 (id=1261): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @empty, 0x4}, 0x1c) listen(r0, 0x5) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r1, 0x0, 0x0, 0x20000000, &(0x7f0000000240)={0xa, 0x4e23, 0x5, @local, 0x8}, 0x1c) sendto$inet6(r1, &(0x7f0000000280)='X', 0x1, 0x200080c0, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback, 0x10}, 0x1c) kernel console output (not intermixed with test programs): entered blocking state [ 65.486059][ T95] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.486597][ T95] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.486619][ T95] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.555206][ T1203] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 65.555224][ T1203] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 65.562735][ T1203] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 65.562752][ T1203] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 65.569581][ T1203] hsr_slave_0: left promiscuous mode [ 65.570513][ T1203] hsr_slave_1: left promiscuous mode [ 65.570776][ T1203] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 65.570786][ T1203] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 65.571095][ T1203] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 65.571104][ T1203] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 65.583222][ T1203] veth1_macvtap: left promiscuous mode [ 65.583254][ T1203] veth0_macvtap: left promiscuous mode [ 65.583432][ T1203] veth0_vlan: left promiscuous mode [ 65.589208][ T1203] veth1_macvtap: left promiscuous mode [ 65.589234][ T1203] veth0_macvtap: left promiscuous mode [ 65.589310][ T1203] veth1_vlan: left promiscuous mode [ 65.589376][ T1203] veth0_vlan: left promiscuous mode [ 65.746401][ T1203] team0 (unregistering): Port device team_slave_1 removed [ 65.750137][ T1203] team0 (unregistering): Port device team_slave_0 removed [ 65.872259][ T1203] team0 (unregistering): Port device team_slave_1 removed [ 65.877773][ T1203] team0 (unregistering): Port device team_slave_0 removed [ 65.952215][ T7126] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 65.953449][ T7126] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 65.954024][ T7126] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 65.957431][ T7126] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 65.958274][ T7126] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 65.959579][ T7126] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 65.981438][ T7126] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 65.982662][ T7126] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 66.047153][ T7126] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.061777][ T7126] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.087917][ T95] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.087952][ T95] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.088983][ T95] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.089018][ T95] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.102951][ T7070] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.166043][ T7070] veth0_vlan: entered promiscuous mode [ 66.167903][ T7070] veth1_vlan: entered promiscuous mode [ 66.173944][ T7070] veth0_macvtap: entered promiscuous mode [ 66.175104][ T7070] veth1_macvtap: entered promiscuous mode [ 66.188582][ T7070] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.189554][ T7070] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.191026][ T6451] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.191378][ T6451] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.191532][ T6451] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.245663][ T40] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.272140][ T6451] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.272157][ T6451] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.319197][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.319216][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.382059][ T7126] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.393255][ T1203] IPVS: stop unused estimator thread 0... [ 66.475696][ T7126] veth0_vlan: entered promiscuous mode [ 66.478482][ T7126] veth1_vlan: entered promiscuous mode [ 66.492701][ T7054] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 66.498502][ T7054] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 66.499026][ T7054] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 66.505456][ T7054] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 66.517303][ T7126] veth0_macvtap: entered promiscuous mode [ 66.527357][ T7054] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 66.530488][ T7054] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 66.533203][ T7126] veth1_macvtap: entered promiscuous mode [ 66.570311][ T7054] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 66.572625][ T7054] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 66.594201][ T1203] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.611228][ T7126] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.872480][ T7126] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.904765][ T7232] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 66.909652][ T7232] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 66.921331][ T1203] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.929636][ T7232] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 66.931005][ T7232] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 66.931779][ T7232] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 66.932977][ T7232] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 66.943083][ T7232] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 66.944337][ T7232] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 66.995112][ T1203] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.005602][ T40] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.005882][ T40] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.006068][ T40] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.006374][ T40] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.021506][ T4403] 8021q: adding VLAN 0 to HW filter on device eth22 [ 67.052331][ T7054] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.063635][ T1203] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.138026][ T7531] netlink: 12 bytes leftover after parsing attributes in process `syz.1.589'. [ 67.145953][ T4718] Bluetooth: hci4: command tx timeout [ 67.340848][ T7054] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.348458][ T7380] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.348473][ T7380] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.365126][ T40] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.365161][ T40] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.403623][ T7380] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.403660][ T7380] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.415445][ T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.415461][ T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.441036][ T7054] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 67.465700][ T4718] Bluetooth: hci1: command tx timeout [ 67.527226][ T7232] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.530922][ T1203] bridge_slave_1: left allmulticast mode [ 67.530942][ T1203] bridge_slave_1: left promiscuous mode [ 67.531038][ T1203] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.533766][ T1203] bridge_slave_0: left allmulticast mode [ 67.533782][ T1203] bridge_slave_0: left promiscuous mode [ 67.533850][ T1203] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.543819][ T7545] fuse: Bad value for 'fd' [ 67.549715][ T1203] batman_adv: batadv0: Interface deactivated: gretap1 [ 67.642715][ T1203] batman_adv: batadv0: Removing interface: gretap1 [ 67.644202][ T7554] ip_tables: iptables: counters copy to user failed while replacing table [ 67.680466][ T1203] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 67.693969][ T1203] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 67.716500][ T1203] bond0 (unregistering): Released all slaves [ 67.718901][ T1203] bond1 (unregistering): Released all slaves [ 67.722796][ T1203] bond2 (unregistering): Released all slaves [ 67.730903][ T1203] bond3 (unregistering): Released all slaves [ 67.735352][ T1203] bond4 (unregistering): Released all slaves [ 67.742607][ T1203] bond5 (unregistering): Released all slaves [ 68.086590][ T1203] tipc: Disabling bearer [ 68.086854][ T1203] tipc: Left network mode [ 68.119566][ T7232] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.141916][ T95] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.141953][ T95] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.149845][ T3732] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.149874][ T3732] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.301443][ T7054] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.337041][ T7590] loop0: detected capacity change from 0 to 8192 [ 68.339270][ T7590] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 68.376124][ T7054] veth0_vlan: entered promiscuous mode [ 68.388220][ T7054] veth1_vlan: entered promiscuous mode [ 68.426487][ T7054] veth0_macvtap: entered promiscuous mode [ 68.432634][ T7054] veth1_macvtap: entered promiscuous mode [ 68.461173][ T7054] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.483682][ T7054] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.511408][ T7380] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.516243][ T6451] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.517832][ T6451] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.518160][ T6451] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.585358][ T7590] netlink: 8 bytes leftover after parsing attributes in process `syz.0.602'. [ 68.603710][ T1203] hsr_slave_0: left promiscuous mode [ 68.604610][ T1203] hsr_slave_1: left promiscuous mode [ 68.604898][ T1203] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 68.604909][ T1203] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 68.605264][ T1203] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 68.605274][ T1203] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 68.618773][ T1203] veth0_macvtap: left promiscuous mode [ 68.618859][ T1203] veth1_vlan: left promiscuous mode [ 68.618903][ T1203] veth0_vlan: left promiscuous mode [ 68.734532][ T1203] team0 (unregistering): Port device team_slave_1 removed [ 68.749753][ T1203] team0 (unregistering): Port device team_slave_0 removed [ 68.808534][ T7232] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.860302][ T6451] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.860321][ T6451] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.877895][ T95] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.877911][ T95] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.998372][ T7622] loop2: detected capacity change from 0 to 2048 [ 69.007947][ T7619] device-mapper: ioctl: Next dm_target_spec (offset 327) is not 8-byte aligned [ 69.007963][ T7619] device-mapper: ioctl: unable to find target [ 69.039002][ T7622] loop2: p3 < > [ 69.045284][ T4346] loop2: p3 < > [ 69.048699][ T7232] veth0_vlan: entered promiscuous mode [ 69.052222][ T7232] veth1_vlan: entered promiscuous mode [ 69.066805][ T7232] veth0_macvtap: entered promiscuous mode [ 69.070695][ T7232] veth1_macvtap: entered promiscuous mode [ 69.074803][ T7627] ip_tables: iptables: counters copy to user failed while replacing table [ 69.081981][ T7232] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.087833][ T7232] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.088343][ T7627] syz_tun: entered allmulticast mode [ 69.101785][ T7627] netlink: 'syz.1.605': attribute type 12 has an invalid length. [ 69.132668][ T7626] syz_tun: left allmulticast mode [ 69.152139][ T13] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.160214][ T4734] udevd[4734]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 69.196568][ T13] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.196599][ T13] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.196617][ T13] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.214402][ T7380] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.214414][ T7380] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.243843][ T95] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.243860][ T95] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.251258][ T7642] fuse: Bad value for 'fd' [ 69.343780][ T7654] netlink: 12 bytes leftover after parsing attributes in process `syz.2.609'. [ 69.545871][ T4718] Bluetooth: hci1: command tx timeout [ 69.568331][ T7659] loop0: detected capacity change from 0 to 33280 [ 69.571128][ T7659] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 69.571151][ T7659] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 69.579073][ T7659] EXT4-fs (loop0): 1 truncate cleaned up [ 69.580210][ T7659] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 69.608083][ T7659] FAULT_INJECTION: forcing a failure. [ 69.608083][ T7659] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 69.608106][ T7659] CPU: 1 UID: 0 PID: 7659 Comm: syz.0.612 Tainted: G L syzkaller #0 PREEMPT [ 69.608122][ T7659] Tainted: [L]=SOFTLOCKUP [ 69.608126][ T7659] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 69.608132][ T7659] Call trace: [ 69.608135][ T7659] show_stack+0x2c/0x3c (C) [ 69.608151][ T7659] __dump_stack+0x30/0x40 [ 69.608159][ T7659] dump_stack_lvl+0xd8/0x12c [ 69.608168][ T7659] dump_stack+0x1c/0x28 [ 69.608175][ T7659] should_fail_ex+0x3fc/0x570 [ 69.608189][ T7659] should_fail+0x14/0x24 [ 69.608201][ T7659] should_fail_usercopy+0x20/0x30 [ 69.608209][ T7659] strncpy_from_user+0x48/0x388 [ 69.608220][ T7659] __arm64_sys_add_key+0x150/0x43c [ 69.608230][ T7659] invoke_syscall+0x98/0x244 [ 69.608239][ T7659] el0_svc_common+0xec/0x23c [ 69.608247][ T7659] do_el0_svc+0x4c/0x5c [ 69.608254][ T7659] el0_svc+0x60/0x1d8 [ 69.608265][ T7659] el0t_64_sync_handler+0x44/0x104 [ 69.608275][ T7659] el0t_64_sync+0x198/0x19c [ 69.659587][ T7669] netlink: 56 bytes leftover after parsing attributes in process `syz.9.614'. [ 69.675376][ T7675] loop4: detected capacity change from 0 to 33280 [ 69.684402][ T7659] EXT4-fs error (device loop0): ext4_find_dest_de:2052: inode #2: block 13: comm syz.0.612: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 69.694311][ T7659] EXT4-fs (loop0): Remounting filesystem read-only [ 69.704513][ T7675] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 69.704534][ T7675] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 69.720250][ T7675] EXT4-fs error (device loop4): ext4_free_branches:1040: inode #16: comm syz.4.615: invalid indirect mapped block 32768 (level 2) [ 69.720279][ T7675] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 69.725541][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 69.725555][ C1] EXT4-fs (loop4): initial error at time 2000000040: ext4_free_branches:1040: inode 16 [ 69.725570][ C1] EXT4-fs (loop4): last error at time 2000000040: ext4_free_branches:1040: inode 16 [ 69.745993][ T7675] EXT4-fs (loop4): 1 orphan inode deleted [ 69.746010][ T7675] EXT4-fs (loop4): 1 truncate cleaned up [ 69.746426][ T7675] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 69.769540][ T7683] loop9: detected capacity change from 0 to 256 [ 69.776012][ T7675] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 69.809789][ T7232] EXT4-fs error (device loop4): ext4_lookup:1791: inode #2: comm syz-executor: deleted inode referenced: 17 [ 69.816800][ T7232] EXT4-fs error (device loop4): ext4_lookup:1791: inode #2: comm syz-executor: deleted inode referenced: 17 [ 69.891120][ T7691] netlink: 36 bytes leftover after parsing attributes in process `syz.9.616'. [ 69.893135][ T7691] netlink: 8 bytes leftover after parsing attributes in process `syz.9.616'. [ 70.133556][ T4403] 8021q: adding VLAN 0 to HW filter on device eth23 [ 70.259932][ T7712] netlink: 8 bytes leftover after parsing attributes in process `syz.1.623'. [ 70.259949][ T7712] netlink: 4 bytes leftover after parsing attributes in process `syz.1.623'. [ 70.275160][ T7712] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.280508][ T7712] bond1: (slave bond0): making interface the new active one [ 70.280873][ T7712] bond1: (slave bond0): Enslaving as an active interface with an up link [ 70.282172][ T7712] netlink: 'syz.1.623': attribute type 4 has an invalid length. [ 70.282184][ T7712] netlink: 152 bytes leftover after parsing attributes in process `syz.1.623'. [ 70.295159][ T7712] .`: renamed from bond0 (while UP) [ 70.497835][ T7752] netlink: 4 bytes leftover after parsing attributes in process `syz.1.629'. [ 70.973336][ T7232] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.028576][ T3732] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.049133][ T7126] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.135374][ T4719] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 71.136728][ T4719] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 71.138971][ T4719] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 71.141115][ T4719] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 71.141329][ T4719] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 71.260500][ T4718] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 71.261331][ T4718] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 71.261653][ T4718] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 71.261983][ T4718] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 71.262201][ T4718] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 71.341622][ T7816] rxe_eth0 speed is unknown, defaulting to 1000 [ 71.357949][ T7850] loop9: detected capacity change from 0 to 33792 [ 71.374087][ T7850] EXT4-fs (loop9): warning: mounting unchecked fs, running e2fsck is recommended [ 71.374561][ T7850] EXT4-fs (loop9): Errors on filesystem, clearing orphan list. [ 71.379540][ T7850] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 71.391975][ T4719] Bluetooth: hci3: unexpected cc 0x042f length: 9 > 7 [ 71.401198][ T7852] FAULT_INJECTION: forcing a failure. [ 71.401198][ T7852] name failslab, interval 1, probability 0, space 0, times 0 [ 71.401224][ T7852] CPU: 0 UID: 0 PID: 7852 Comm: syz.2.638 Tainted: G L syzkaller #0 PREEMPT [ 71.401237][ T7852] Tainted: [L]=SOFTLOCKUP [ 71.401241][ T7852] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 71.401246][ T7852] Call trace: [ 71.401250][ T7852] show_stack+0x2c/0x3c (C) [ 71.401266][ T7852] __dump_stack+0x30/0x40 [ 71.401276][ T7852] dump_stack_lvl+0xd8/0x12c [ 71.401284][ T7852] dump_stack+0x1c/0x28 [ 71.401291][ T7852] should_fail_ex+0x3fc/0x570 [ 71.401305][ T7852] should_failslab+0xc4/0x120 [ 71.401314][ T7852] kmem_cache_alloc_node_noprof+0x98/0x604 [ 71.401324][ T7852] __alloc_skb+0x1f0/0x610 [ 71.401335][ T7852] inet_netconf_notify_devconf+0x50/0x118 [ 71.401346][ T7852] __devinet_sysctl_unregister+0xa8/0xc0 [ 71.401356][ T7852] devinet_sysctl_unregister+0x94/0xf0 [ 71.401366][ T7852] inetdev_event+0x58c/0x11c4 [ 71.401376][ T7852] notifier_call_chain+0x1a4/0x4cc [ 71.401388][ T7852] raw_notifier_call_chain+0x3c/0x50 [ 71.401399][ T7852] call_netdevice_notifiers_info+0xb8/0x120 [ 71.401412][ T7852] unregister_netdevice_many_notify+0xcb8/0x14f0 [ 71.401426][ T7852] unregister_netdevice_queue+0x274/0x30c [ 71.401438][ T7852] __tun_detach+0x9d8/0x1180 [ 71.401449][ T7852] tun_chr_close+0x118/0x1f4 [ 71.401459][ T7852] __fput+0x338/0x74c [ 71.401469][ T7852] fput_close_sync+0x10c/0x278 [ 71.401479][ T7852] filp_close_sync+0x7c/0xb4 [ 71.401487][ T7852] __arm64_sys_close_range+0x898/0xbdc [ 71.401499][ T7852] invoke_syscall+0x98/0x244 [ 71.401508][ T7852] el0_svc_common+0xec/0x23c [ 71.401516][ T7852] do_el0_svc+0x4c/0x5c [ 71.401524][ T7852] el0_svc+0x60/0x1d8 [ 71.401535][ T7852] el0t_64_sync_handler+0x44/0x104 [ 71.401545][ T7852] el0t_64_sync+0x198/0x19c [ 71.460373][ T4403] 8021q: adding VLAN 0 to HW filter on device eth24 [ 71.467977][ T7850] EXT4-fs (loop9): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 71.474973][ T7836] rxe_eth0 speed is unknown, defaulting to 1000 [ 71.505160][ T6778] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.696598][ T7816] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.696656][ T7816] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.696748][ T7816] bridge_slave_0: entered allmulticast mode [ 71.697172][ T7816] bridge_slave_0: entered promiscuous mode [ 71.707142][ T7816] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.707393][ T7816] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.707514][ T7816] bridge_slave_1: entered allmulticast mode [ 71.710575][ T7816] bridge_slave_1: entered promiscuous mode [ 71.740773][ T7816] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.754759][ T7816] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.755323][ T4403] 8021q: adding VLAN 0 to HW filter on device eth25 [ 71.777173][ T7836] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.777263][ T7836] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.777367][ T7836] bridge_slave_0: entered allmulticast mode [ 71.777757][ T7836] bridge_slave_0: entered promiscuous mode [ 71.785688][ T7816] team0: Port device team_slave_0 added [ 71.786501][ T7816] team0: Port device team_slave_1 added [ 71.789992][ T7836] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.790036][ T7836] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.790184][ T7836] bridge_slave_1: entered allmulticast mode [ 71.790584][ T7836] bridge_slave_1: entered promiscuous mode [ 71.800417][ T7836] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.821226][ T7898] block device autoloading is deprecated and will be removed. [ 71.822776][ T3732] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.828506][ T7898] block device autoloading is deprecated and will be removed. [ 71.837592][ T7836] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.848270][ T7816] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.848280][ T7816] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.848293][ T7816] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.849585][ T7816] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.849596][ T7816] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.849613][ T7816] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.867056][ T7836] team0: Port device team_slave_0 added [ 71.867997][ T7836] team0: Port device team_slave_1 added [ 71.874631][ T7836] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.874641][ T7836] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.874653][ T7836] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.875170][ T7836] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.875177][ T7836] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.875192][ T7836] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.884363][ T7836] hsr_slave_0: entered promiscuous mode [ 71.884675][ T7836] hsr_slave_1: entered promiscuous mode [ 71.884846][ T7836] debugfs: 'hsr0' already exists in 'hsr' [ 71.884853][ T7836] Cannot create hsr debugfs directory [ 71.956882][ T3732] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.971913][ T7816] hsr_slave_0: entered promiscuous mode [ 71.975019][ T7816] hsr_slave_1: entered promiscuous mode [ 71.975270][ T7816] debugfs: 'hsr0' already exists in 'hsr' [ 71.975279][ T7816] Cannot create hsr debugfs directory [ 72.028637][ T4403] 8021q: adding VLAN 0 to HW filter on device eth26 [ 72.054315][ T3732] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.178929][ T3732] bridge_slave_1: left allmulticast mode [ 72.178952][ T3732] bridge_slave_1: left promiscuous mode [ 72.179050][ T3732] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.181480][ T3732] bridge_slave_0: left allmulticast mode [ 72.181498][ T3732] bridge_slave_0: left promiscuous mode [ 72.181576][ T3732] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.294892][ T7958] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 72.295117][ T7958] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 72.302228][ T3732] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 72.327258][ T3732] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 72.356564][ T3732] bond0 (unregistering): Released all slaves [ 72.387719][ T4403] 8021q: adding VLAN 0 to HW filter on device eth27 [ 72.633904][ T4403] 8021q: adding VLAN 0 to HW filter on device eth28 [ 72.782844][ T3732] hsr_slave_0: left promiscuous mode [ 72.783169][ T3732] hsr_slave_1: left promiscuous mode [ 72.783431][ T3732] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 72.783440][ T3732] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 72.791994][ T3732] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 72.792013][ T3732] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 72.799492][ T3732] veth1_macvtap: left promiscuous mode [ 72.799544][ T3732] veth0_macvtap: left promiscuous mode [ 72.799619][ T3732] veth1_vlan: left promiscuous mode [ 72.799655][ T3732] veth0_vlan: left promiscuous mode [ 72.954504][ T3732] team0 (unregistering): Port device team_slave_1 removed [ 72.964306][ T3732] team0 (unregistering): Port device team_slave_0 removed [ 73.126266][ T7994] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 73.126443][ T7994] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 73.225974][ T4719] Bluetooth: hci1: command tx timeout [ 73.305791][ T4719] Bluetooth: hci4: command tx timeout [ 73.333236][ T7836] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 73.352462][ T7836] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 73.352888][ T7836] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 73.354205][ T7836] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 73.354480][ T7836] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 73.357030][ T7836] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 73.432003][ T7836] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 73.438751][ T7836] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 73.560085][ T3732] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.586143][ T7836] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.624060][ T7836] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.628286][ T877] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.628323][ T877] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.631173][ T6451] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.631200][ T6451] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.653870][ T3732] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.756153][ T3732] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.838827][ T3732] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.882185][ T7836] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.940642][ T7816] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 73.942169][ T7816] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 73.957691][ T7816] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 73.960052][ T7816] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 73.960402][ T7816] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 73.961256][ T7816] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 73.961555][ T7816] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 73.963380][ T7816] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 74.002045][ T3732] bridge_slave_1: left allmulticast mode [ 74.002068][ T3732] bridge_slave_1: left promiscuous mode [ 74.002157][ T3732] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.006009][ T3732] bridge_slave_0: left allmulticast mode [ 74.006033][ T3732] bridge_slave_0: left promiscuous mode [ 74.006100][ T3732] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.038325][ T8033] ip_tables: iptables: counters copy to user failed while replacing table [ 74.071866][ T8037] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 74.071960][ T8037] xt_SECMARK: unable to map security context 'system_u:object_r:dbusd_etc_t:s0' [ 74.128773][ T3732] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 74.170258][ T3732] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 74.217809][ T3732] bond0 (unregistering): Released all slaves [ 74.241801][ T7836] veth0_vlan: entered promiscuous mode [ 74.249261][ T7836] veth1_vlan: entered promiscuous mode [ 74.316267][ T7836] veth0_macvtap: entered promiscuous mode [ 74.320934][ T7836] veth1_macvtap: entered promiscuous mode [ 74.370069][ T8069] ip_tables: iptables: counters copy to user failed while replacing table [ 74.381886][ T7836] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.382877][ T7836] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.386721][ T877] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.386852][ T877] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.386919][ T877] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.386977][ T877] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.431976][ T7816] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.559643][ T7816] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.619294][ T6451] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.619327][ T6451] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.619912][ T6451] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.619933][ T6451] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.709751][ T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.709768][ T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.801299][ T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.801315][ T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.834989][ T3732] hsr_slave_0: left promiscuous mode [ 74.835276][ T3732] hsr_slave_1: left promiscuous mode [ 74.836282][ T3732] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 74.836295][ T3732] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 74.843553][ T3732] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 74.843570][ T3732] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 74.852044][ T3732] veth1_macvtap: left promiscuous mode [ 74.852079][ T3732] veth0_macvtap: left promiscuous mode [ 74.852303][ T3732] veth1_vlan: left promiscuous mode [ 74.852344][ T3732] veth0_vlan: left promiscuous mode [ 74.930710][ T8133] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 74.931510][ T8133] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 74.996618][ T3732] team0 (unregistering): Port device team_slave_1 removed [ 75.002504][ T3732] team0 (unregistering): Port device team_slave_0 removed [ 75.170054][ T7816] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.269704][ T8171] FAULT_INJECTION: forcing a failure. [ 75.269704][ T8171] name fail_futex, interval 1, probability 0, space 0, times 0 [ 75.269727][ T8171] CPU: 0 UID: 0 PID: 8171 Comm: syz.8.635 Tainted: G L syzkaller #0 PREEMPT [ 75.269740][ T8171] Tainted: [L]=SOFTLOCKUP [ 75.269744][ T8171] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 75.269750][ T8171] Call trace: [ 75.269753][ T8171] show_stack+0x2c/0x3c (C) [ 75.269769][ T8171] __dump_stack+0x30/0x40 [ 75.269778][ T8171] dump_stack_lvl+0xd8/0x12c [ 75.269786][ T8171] dump_stack+0x1c/0x28 [ 75.269794][ T8171] should_fail_ex+0x3fc/0x570 [ 75.269808][ T8171] should_fail+0x14/0x24 [ 75.269820][ T8171] get_futex_key+0x1e0/0x118c [ 75.269832][ T8171] futex_wait_setup+0x58/0x674 [ 75.269844][ T8171] __futex_wait+0x11c/0x2b8 [ 75.269859][ T8171] futex_wait+0x108/0x2c0 [ 75.269871][ T8171] do_futex+0x320/0x378 [ 75.269881][ T8171] __arm64_sys_futex+0x2e4/0x418 [ 75.269893][ T8171] invoke_syscall+0x98/0x244 [ 75.269902][ T8171] el0_svc_common+0xec/0x23c [ 75.269910][ T8171] do_el0_svc+0x4c/0x5c [ 75.269917][ T8171] el0_svc+0x60/0x1d8 [ 75.269928][ T8171] el0t_64_sync_handler+0x44/0x104 [ 75.269938][ T8171] el0t_64_sync+0x198/0x19c [ 75.305733][ T4719] Bluetooth: hci1: command tx timeout [ 75.349085][ T7816] veth0_vlan: entered promiscuous mode [ 75.358913][ T7816] veth1_vlan: entered promiscuous mode [ 75.372387][ T7816] veth0_macvtap: entered promiscuous mode [ 75.373558][ T7816] veth1_macvtap: entered promiscuous mode [ 75.385760][ T4719] Bluetooth: hci4: command tx timeout [ 75.406451][ T7816] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.411369][ T7816] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.427992][ T13] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.428030][ T13] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.428052][ T13] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.428068][ T13] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.492217][ T8192] xt_SECMARK: unable to map security context 'system_u:object_r:dbusd_etc_t:s0' [ 75.492348][ T8192] FAULT_INJECTION: forcing a failure. [ 75.492348][ T8192] name failslab, interval 1, probability 0, space 0, times 0 [ 75.492363][ T8192] CPU: 1 UID: 0 PID: 8192 Comm: syz.9.700 Tainted: G L syzkaller #0 PREEMPT [ 75.492378][ T8192] Tainted: [L]=SOFTLOCKUP [ 75.492382][ T8192] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 75.492387][ T8192] Call trace: [ 75.492391][ T8192] show_stack+0x2c/0x3c (C) [ 75.492406][ T8192] __dump_stack+0x30/0x40 [ 75.492414][ T8192] dump_stack_lvl+0xd8/0x12c [ 75.492422][ T8192] dump_stack+0x1c/0x28 [ 75.492429][ T8192] should_fail_ex+0x3fc/0x570 [ 75.492441][ T8192] should_failslab+0xc4/0x120 [ 75.492449][ T8192] __kvmalloc_node_noprof+0x160/0x7fc [ 75.492458][ T8192] allocate_hook_entries_size+0x50/0xb8 [ 75.492470][ T8192] __nf_hook_entries_try_shrink+0x10c/0x2b4 [ 75.492481][ T8192] __nf_unregister_net_hook+0x3dc/0x62c [ 75.492491][ T8192] nf_unregister_net_hook+0xc0/0xfc [ 75.492501][ T8192] nf_unregister_net_hooks+0x48/0x7c [ 75.492511][ T8192] nf_ct_netns_do_put+0x1b8/0x330 [ 75.492519][ T8192] nf_ct_netns_put+0x7c/0x8c [ 75.492526][ T8192] connlimit_mt_destroy+0xa8/0xe0 [ 75.492536][ T8192] cleanup_match+0xe4/0x160 [ 75.492547][ T8192] cleanup_entry+0xc8/0x23c [ 75.492557][ T8192] translate_table+0x1634/0x17f8 [ 75.492567][ T8192] do_ipt_set_ctl+0x908/0xc38 [ 75.492581][ T8192] nf_setsockopt+0xa0/0xe4 [ 75.492589][ T8192] ip_setsockopt+0x118/0x128 [ 75.492600][ T8192] tcp_setsockopt+0xcc/0xe8 [ 75.492610][ T8192] sock_common_setsockopt+0xb0/0xcc [ 75.492620][ T8192] do_sock_setsockopt+0x1f0/0x330 [ 75.492630][ T8192] __sys_setsockopt+0x104/0x170 [ 75.492638][ T8192] __arm64_sys_setsockopt+0xc8/0xe4 [ 75.492647][ T8192] invoke_syscall+0x98/0x244 [ 75.492655][ T8192] el0_svc_common+0xec/0x23c [ 75.492662][ T8192] do_el0_svc+0x4c/0x5c [ 75.492670][ T8192] el0_svc+0x60/0x1d8 [ 75.492679][ T8192] el0t_64_sync_handler+0x44/0x104 [ 75.492687][ T8192] el0t_64_sync+0x198/0x19c [ 75.498181][ T3732] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.498196][ T3732] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.537008][ T1203] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.537029][ T1203] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.690972][ T8227] phram: parameter too long [ 75.705346][ T8233] ip_tables: iptables: counters copy to user failed while replacing table [ 75.756567][ T8242] xt_SECMARK: unable to map security context 'system_u:object_r:dbusd_etc_t:s0' [ 75.756682][ T8242] FAULT_INJECTION: forcing a failure. [ 75.756682][ T8242] name failslab, interval 1, probability 0, space 0, times 0 [ 75.756697][ T8242] CPU: 0 UID: 0 PID: 8242 Comm: syz.8.712 Tainted: G L syzkaller #0 PREEMPT [ 75.756709][ T8242] Tainted: [L]=SOFTLOCKUP [ 75.756713][ T8242] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 75.756718][ T8242] Call trace: [ 75.756722][ T8242] show_stack+0x2c/0x3c (C) [ 75.756738][ T8242] __dump_stack+0x30/0x40 [ 75.756747][ T8242] dump_stack_lvl+0xd8/0x12c [ 75.756755][ T8242] dump_stack+0x1c/0x28 [ 75.756763][ T8242] should_fail_ex+0x3fc/0x570 [ 75.756777][ T8242] should_failslab+0xc4/0x120 [ 75.756786][ T8242] __kvmalloc_node_noprof+0x160/0x7fc [ 75.756797][ T8242] allocate_hook_entries_size+0x50/0xb8 [ 75.756812][ T8242] __nf_hook_entries_try_shrink+0x10c/0x2b4 [ 75.756825][ T8242] __nf_unregister_net_hook+0x3dc/0x62c [ 75.756837][ T8242] nf_unregister_net_hook+0xc0/0xfc [ 75.756850][ T8242] nf_unregister_net_hooks+0x48/0x7c [ 75.756862][ T8242] nf_defrag_ipv4_disable+0xb8/0x104 [ 75.756875][ T8242] nf_ct_netns_do_put+0x1c0/0x330 [ 75.756883][ T8242] nf_ct_netns_put+0x7c/0x8c [ 75.756891][ T8242] connlimit_mt_destroy+0xa8/0xe0 [ 75.756903][ T8242] cleanup_match+0xe4/0x160 [ 75.756915][ T8242] cleanup_entry+0xc8/0x23c [ 75.756927][ T8242] translate_table+0x1634/0x17f8 [ 75.756940][ T8242] do_ipt_set_ctl+0x908/0xc38 [ 75.756952][ T8242] nf_setsockopt+0xa0/0xe4 [ 75.756960][ T8242] ip_setsockopt+0x118/0x128 [ 75.756972][ T8242] tcp_setsockopt+0xcc/0xe8 [ 75.756983][ T8242] sock_common_setsockopt+0xb0/0xcc [ 75.756993][ T8242] do_sock_setsockopt+0x1f0/0x330 [ 75.757004][ T8242] __sys_setsockopt+0x104/0x170 [ 75.757021][ T8242] __arm64_sys_setsockopt+0xc8/0xe4 [ 75.757032][ T8242] invoke_syscall+0x98/0x244 [ 75.757041][ T8242] el0_svc_common+0xec/0x23c [ 75.757049][ T8242] do_el0_svc+0x4c/0x5c [ 75.757057][ T8242] el0_svc+0x60/0x1d8 [ 75.757068][ T8242] el0t_64_sync_handler+0x44/0x104 [ 75.757079][ T8242] el0t_64_sync+0x198/0x19c [ 76.073431][ T8283] ip_tables: iptables: counters copy to user failed while replacing table [ 76.158197][ T8294] device-mapper: table: 248:11: integrity: Unknown tag size (-EINVAL) [ 76.158218][ T8294] device-mapper: ioctl: error adding target to table [ 76.449181][ T8337] xt_SECMARK: unable to map security context 'system_u:object_r:dbusd_etc_t:s0' [ 76.830885][ T8398] xt_SECMARK: unable to map security context 'system_u:object_r:dbusd_etc_t:s0' [ 77.100981][ T8452] xt_SECMARK: unable to map security context 'system_u:object_r:dbusd_etc_t:s0' [ 77.386527][ T4811] hid-generic 0003:1B1E:0C13.0003: item fetching failed at offset 8/10 [ 77.386676][ T4811] hid-generic 0003:1B1E:0C13.0003: probe with driver hid-generic failed with error -22 [ 77.465585][ T4719] Bluetooth: hci4: command tx timeout [ 77.748799][ T1203] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.854360][ T1203] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.896893][ T4718] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 77.902272][ T4718] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 77.903072][ T4718] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 77.903534][ T4718] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 77.903812][ T4718] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 77.958628][ T1203] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.040261][ T1203] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.095405][ T8568] rxe_eth0 speed is unknown, defaulting to 1000 [ 78.130874][ T4718] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 78.138045][ T4718] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 78.139283][ T4718] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 78.140134][ T4718] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 78.140460][ T4718] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 78.222805][ T1203] bridge_slave_1: left allmulticast mode [ 78.222831][ T1203] bridge_slave_1: left promiscuous mode [ 78.222939][ T1203] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.236253][ T1203] bridge_slave_0: left allmulticast mode [ 78.236284][ T1203] bridge_slave_0: left promiscuous mode [ 78.237279][ T1203] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.355467][ T1203] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 78.360476][ T1203] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 78.393435][ T1203] bond0 (unregistering): Released all slaves [ 78.536152][ T4718] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 78.537304][ T4718] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 78.540173][ T4718] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 78.540862][ T4718] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 78.541173][ T4718] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 78.707216][ T8568] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.707299][ T8568] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.707466][ T8568] bridge_slave_0: entered allmulticast mode [ 78.707958][ T8568] bridge_slave_0: entered promiscuous mode [ 78.749866][ T8602] rxe_eth0 speed is unknown, defaulting to 1000 [ 78.757292][ T8568] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.757334][ T8568] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.757440][ T8568] bridge_slave_1: entered allmulticast mode [ 78.764114][ T8568] bridge_slave_1: entered promiscuous mode [ 78.795959][ T8568] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.796882][ T8568] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.957279][ T8568] team0: Port device team_slave_0 added [ 78.958104][ T8568] team0: Port device team_slave_1 added [ 78.963523][ T8568] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.963533][ T8568] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 78.963546][ T8568] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.964061][ T8568] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.964069][ T8568] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 78.964084][ T8568] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.970664][ T8652] rxe_eth0 speed is unknown, defaulting to 1000 [ 79.014267][ T1203] hsr_slave_0: left promiscuous mode [ 79.021587][ T1203] hsr_slave_1: left promiscuous mode [ 79.021977][ T1203] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 79.021990][ T1203] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 79.022518][ T1203] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 79.022528][ T1203] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 79.036583][ T1203] veth1_macvtap: left promiscuous mode [ 79.036618][ T1203] veth0_macvtap: left promiscuous mode [ 79.036696][ T1203] veth1_vlan: left promiscuous mode [ 79.036731][ T1203] veth0_vlan: left promiscuous mode [ 79.167724][ T1203] team0 (unregistering): Port device team_slave_1 removed [ 79.171715][ T1203] team0 (unregistering): Port device team_slave_0 removed [ 79.272277][ T8568] hsr_slave_0: entered promiscuous mode [ 79.272601][ T8568] hsr_slave_1: entered promiscuous mode [ 79.355347][ T7265] hid-generic 0003:1B1E:0C13.0004: unbalanced collection at end of report description [ 79.360552][ T7265] hid-generic 0003:1B1E:0C13.0004: probe with driver hid-generic failed with error -22 [ 79.535643][ T8757] FAULT_INJECTION: forcing a failure. [ 79.535643][ T8757] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 79.535669][ T8757] CPU: 0 UID: 0 PID: 8757 Comm: syz.9.854 Tainted: G L syzkaller #0 PREEMPT [ 79.535682][ T8757] Tainted: [L]=SOFTLOCKUP [ 79.535686][ T8757] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 79.535691][ T8757] Call trace: [ 79.535695][ T8757] show_stack+0x2c/0x3c (C) [ 79.535711][ T8757] __dump_stack+0x30/0x40 [ 79.535720][ T8757] dump_stack_lvl+0xd8/0x12c [ 79.535727][ T8757] dump_stack+0x1c/0x28 [ 79.535734][ T8757] should_fail_ex+0x3fc/0x570 [ 79.535747][ T8757] should_fail+0x14/0x24 [ 79.535757][ T8757] should_fail_usercopy+0x20/0x30 [ 79.535765][ T8757] strncpy_from_user+0x48/0x388 [ 79.535773][ T8757] setxattr_copy+0x88/0x1c0 [ 79.535783][ T8757] path_setxattrat+0x130/0x2a8 [ 79.535792][ T8757] __arm64_sys_lsetxattr+0xd0/0xec [ 79.535801][ T8757] invoke_syscall+0x98/0x244 [ 79.535809][ T8757] el0_svc_common+0xec/0x23c [ 79.535816][ T8757] do_el0_svc+0x4c/0x5c [ 79.535823][ T8757] el0_svc+0x60/0x1d8 [ 79.535833][ T8757] el0t_64_sync_handler+0x44/0x104 [ 79.535841][ T8757] el0t_64_sync+0x198/0x19c [ 79.546838][ T4719] Bluetooth: hci4: command tx timeout [ 79.600167][ T8775] ip_tables: iptables: counters copy to user failed while replacing table [ 79.618947][ T1203] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.658648][ T8757] FAULT_INJECTION: forcing a failure. [ 79.658648][ T8757] name fail_futex, interval 1, probability 0, space 0, times 0 [ 79.658675][ T8757] CPU: 0 UID: 0 PID: 8757 Comm: syz.9.854 Tainted: G L syzkaller #0 PREEMPT [ 79.658687][ T8757] Tainted: [L]=SOFTLOCKUP [ 79.658691][ T8757] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 79.658696][ T8757] Call trace: [ 79.658699][ T8757] show_stack+0x2c/0x3c (C) [ 79.658716][ T8757] __dump_stack+0x30/0x40 [ 79.658725][ T8757] dump_stack_lvl+0xd8/0x12c [ 79.658733][ T8757] dump_stack+0x1c/0x28 [ 79.658740][ T8757] should_fail_ex+0x3fc/0x570 [ 79.658752][ T8757] should_fail+0x14/0x24 [ 79.658762][ T8757] get_futex_key+0x1e0/0x118c [ 79.658773][ T8757] futex_wake+0x10c/0x594 [ 79.658782][ T8757] do_futex+0x2c4/0x378 [ 79.658791][ T8757] __arm64_sys_futex+0x2e4/0x418 [ 79.658801][ T8757] invoke_syscall+0x98/0x244 [ 79.658809][ T8757] el0_svc_common+0xec/0x23c [ 79.658816][ T8757] do_el0_svc+0x4c/0x5c [ 79.658823][ T8757] el0_svc+0x60/0x1d8 [ 79.658832][ T8757] el0t_64_sync_handler+0x44/0x104 [ 79.658840][ T8757] el0t_64_sync+0x198/0x19c [ 79.671853][ T8602] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.671883][ T8602] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.671992][ T8602] bridge_slave_0: entered allmulticast mode [ 79.672379][ T8602] bridge_slave_0: entered promiscuous mode [ 79.673223][ T8602] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.673248][ T8602] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.688532][ T8602] bridge_slave_1: entered allmulticast mode [ 79.689469][ T8602] bridge_slave_1: entered promiscuous mode [ 79.738086][ T8602] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.738993][ T8602] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.744762][ T8602] team0: Port device team_slave_0 added [ 79.750442][ T8602] team0: Port device team_slave_1 added [ 79.776451][ T1203] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.784291][ T8602] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.784305][ T8602] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.784321][ T8602] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.784862][ T8602] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.784869][ T8602] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.784883][ T8602] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.813672][ T26] hid-generic 0003:1B1E:0C13.0005: item fetching failed at offset 17/18 [ 79.813813][ T26] hid-generic 0003:1B1E:0C13.0005: probe with driver hid-generic failed with error -22 [ 79.848341][ T8602] hsr_slave_0: entered promiscuous mode [ 79.848781][ T8602] hsr_slave_1: entered promiscuous mode [ 79.848998][ T8602] debugfs: 'hsr0' already exists in 'hsr' [ 79.849007][ T8602] Cannot create hsr debugfs directory [ 79.910045][ T1203] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.946591][ T4719] Bluetooth: hci0: command tx timeout [ 79.953768][ T8652] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.957640][ T8652] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.957778][ T8652] bridge_slave_0: entered allmulticast mode [ 79.959563][ T8652] bridge_slave_0: entered promiscuous mode [ 79.985251][ T8828] netlink: 44 bytes leftover after parsing attributes in process `syz.8.864'. [ 79.990947][ T1203] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.023436][ T8652] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.023469][ T8652] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.023573][ T8652] bridge_slave_1: entered allmulticast mode [ 80.024048][ T8652] bridge_slave_1: entered promiscuous mode [ 80.044092][ T8652] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.045078][ T8652] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.120110][ T8652] team0: Port device team_slave_0 added [ 80.127380][ T8652] team0: Port device team_slave_1 added [ 80.171728][ T8652] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.171743][ T8652] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.171759][ T8652] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.173845][ T1203] bridge_slave_1: left allmulticast mode [ 80.173865][ T1203] bridge_slave_1: left promiscuous mode [ 80.173953][ T1203] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.191844][ T1203] bridge_slave_0: left allmulticast mode [ 80.191864][ T1203] bridge_slave_0: left promiscuous mode [ 80.191962][ T1203] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.196875][ T4719] Bluetooth: hci1: command tx timeout [ 80.271242][ T1203] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 80.282453][ T1203] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 80.306466][ T1203] bond0 (unregistering): Released all slaves [ 80.308950][ T8652] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.308961][ T8652] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.308976][ T8652] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.359942][ T8652] hsr_slave_0: entered promiscuous mode [ 80.362051][ T8652] hsr_slave_1: entered promiscuous mode [ 80.362318][ T8652] debugfs: 'hsr0' already exists in 'hsr' [ 80.362327][ T8652] Cannot create hsr debugfs directory [ 80.423777][ T8568] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 80.432347][ T8568] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 80.432743][ T8568] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 80.434636][ T8568] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 80.450204][ T8568] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 80.453078][ T8568] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 80.469159][ T8568] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 80.470706][ T8568] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 80.598145][ T4719] Bluetooth: hci3: command tx timeout [ 80.617930][ T8568] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.628261][ T8568] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.643946][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.643978][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.644554][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.644574][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.679363][ T8568] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 80.679382][ T8568] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 80.694390][ T1203] hsr_slave_0: left promiscuous mode [ 80.695027][ T1203] hsr_slave_1: left promiscuous mode [ 80.695304][ T1203] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 80.695316][ T1203] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 80.696115][ T1203] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 80.696126][ T1203] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 80.700526][ T1203] veth1_macvtap: left promiscuous mode [ 80.700554][ T1203] veth0_macvtap: left promiscuous mode [ 80.700626][ T1203] veth1_vlan: left promiscuous mode [ 80.700659][ T1203] veth0_vlan: left promiscuous mode [ 80.835230][ T1203] team0 (unregistering): Port device team_slave_1 removed [ 80.841754][ T1203] team0 (unregistering): Port device team_slave_0 removed [ 80.874843][ T8884] xt_SECMARK: unable to map security context 'system_u:object_r:dbusd_etc_t:s0' [ 81.077669][ T8602] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 81.084130][ T8602] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 81.084488][ T8602] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 81.329504][ T8602] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 81.332421][ T8602] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 81.333723][ T8602] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 81.334155][ T8602] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 81.335096][ T8602] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 81.399129][ T8568] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.519656][ T4403] 8021q: adding VLAN 0 to HW filter on device eth0 [ 81.526327][ T8602] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.532818][ T8602] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.543786][ T6451] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.543821][ T6451] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.550286][ T6451] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.550317][ T6451] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.600468][ T8568] veth0_vlan: entered promiscuous mode [ 81.632552][ T8568] veth1_vlan: entered promiscuous mode [ 81.651972][ T8568] veth0_macvtap: entered promiscuous mode [ 81.653407][ T8568] veth1_macvtap: entered promiscuous mode [ 81.666181][ T8568] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.670835][ T8568] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.740328][ T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.740351][ T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.765111][ T8602] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.771860][ T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.771876][ T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.785925][ T13] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.787633][ T13] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.787753][ T13] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.789719][ T13] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.831377][ T8652] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 81.834545][ T8652] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 81.839913][ T8652] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 81.844934][ T8652] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 81.851173][ T8652] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 81.872136][ T8652] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 81.877643][ T8652] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 81.889581][ T8652] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 81.947957][ T8602] veth0_vlan: entered promiscuous mode [ 81.988682][ T8602] veth1_vlan: entered promiscuous mode [ 82.002935][ T8652] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.012184][ T8652] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.027191][ T4719] Bluetooth: hci0: command tx timeout [ 82.033257][ T8602] veth0_macvtap: entered promiscuous mode [ 82.039474][ T40] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.039506][ T40] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.041521][ T8602] veth1_macvtap: entered promiscuous mode [ 82.045629][ T6451] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.045660][ T6451] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.072675][ T8602] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.073743][ T8602] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.077084][ T13] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.077208][ T13] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.077278][ T13] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.077342][ T13] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.083561][ T8652] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 82.083576][ T8652] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 82.157681][ T6451] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.157690][ T6451] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.179444][ T3732] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.179461][ T3732] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.198702][ T9022] FAULT_INJECTION: forcing a failure. [ 82.198702][ T9022] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 82.198720][ T9022] CPU: 0 UID: 0 PID: 9022 Comm: syz.5.886 Tainted: G L syzkaller #0 PREEMPT [ 82.198731][ T9022] Tainted: [L]=SOFTLOCKUP [ 82.198735][ T9022] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 82.198739][ T9022] Call trace: [ 82.198742][ T9022] show_stack+0x2c/0x3c (C) [ 82.198757][ T9022] __dump_stack+0x30/0x40 [ 82.198765][ T9022] dump_stack_lvl+0xd8/0x12c [ 82.198772][ T9022] dump_stack+0x1c/0x28 [ 82.198779][ T9022] should_fail_ex+0x3fc/0x570 [ 82.198791][ T9022] should_fail+0x14/0x24 [ 82.198800][ T9022] should_fail_usercopy+0x20/0x30 [ 82.198808][ T9022] simple_read_from_buffer+0xc4/0x238 [ 82.198819][ T9022] proc_fail_nth_read+0x1a8/0x248 [ 82.198830][ T9022] vfs_read+0x230/0x8c8 [ 82.198838][ T9022] ksys_read+0x12c/0x228 [ 82.198845][ T9022] __arm64_sys_read+0x84/0x98 [ 82.198853][ T9022] invoke_syscall+0x98/0x244 [ 82.198860][ T9022] el0_svc_common+0xec/0x23c [ 82.198872][ T9022] do_el0_svc+0x4c/0x5c [ 82.198879][ T9022] el0_svc+0x60/0x1d8 [ 82.198889][ T9022] el0t_64_sync_handler+0x44/0x104 [ 82.198897][ T9022] el0t_64_sync+0x198/0x19c [ 82.265640][ T4719] Bluetooth: hci1: command tx timeout [ 82.376651][ T8652] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.404142][ T8652] veth0_vlan: entered promiscuous mode [ 82.410864][ T8652] veth1_vlan: entered promiscuous mode [ 82.448392][ T8652] veth0_macvtap: entered promiscuous mode [ 82.454615][ T8652] veth1_macvtap: entered promiscuous mode [ 82.458424][ T9054] ip_tables: iptables: counters copy to user failed while replacing table [ 82.476847][ T8652] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.482232][ T8652] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.488813][ T3732] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.488919][ T3732] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.488954][ T3732] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.488973][ T3732] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.553846][ T6451] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.553864][ T6451] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.574062][ T3732] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.574079][ T3732] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.665642][ T4719] Bluetooth: hci3: command tx timeout [ 82.698001][ T9086] FAULT_INJECTION: forcing a failure. [ 82.698001][ T9086] name fail_futex, interval 1, probability 0, space 0, times 0 [ 82.698028][ T9086] CPU: 0 UID: 0 PID: 9086 Comm: syz.3.898 Tainted: G L syzkaller #0 PREEMPT [ 82.698043][ T9086] Tainted: [L]=SOFTLOCKUP [ 82.698048][ T9086] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 82.698054][ T9086] Call trace: [ 82.698058][ T9086] show_stack+0x2c/0x3c (C) [ 82.698074][ T9086] __dump_stack+0x30/0x40 [ 82.698083][ T9086] dump_stack_lvl+0xd8/0x12c [ 82.698091][ T9086] dump_stack+0x1c/0x28 [ 82.698098][ T9086] should_fail_ex+0x3fc/0x570 [ 82.698112][ T9086] should_fail+0x14/0x24 [ 82.698124][ T9086] get_futex_key+0x1e0/0x118c [ 82.698136][ T9086] futex_wait_setup+0x58/0x674 [ 82.698148][ T9086] __futex_wait+0x11c/0x2b8 [ 82.698159][ T9086] futex_wait+0x108/0x2c0 [ 82.698171][ T9086] do_futex+0x320/0x378 [ 82.698181][ T9086] __arm64_sys_futex+0x2e4/0x418 [ 82.698193][ T9086] invoke_syscall+0x98/0x244 [ 82.698201][ T9086] el0_svc_common+0xec/0x23c [ 82.698209][ T9086] do_el0_svc+0x4c/0x5c [ 82.698217][ T9086] el0_svc+0x60/0x1d8 [ 82.698227][ T9086] el0t_64_sync_handler+0x44/0x104 [ 82.698237][ T9086] el0t_64_sync+0x198/0x19c [ 82.802722][ T9102] ip_tables: iptables: counters copy to user failed while replacing table [ 82.947893][ T9129] xt_SECMARK: unable to map security context 'system_u:object_r:dbusd_etc_t:s0' [ 83.220850][ T4403] 8021q: adding VLAN 0 to HW filter on device eth7 [ 83.667810][ T9201] xt_SECMARK: unable to map security context 'system_u:object_r:dbusd_etc_t:s0' [ 83.714951][ T9210] netlink: 40 bytes leftover after parsing attributes in process `syz.8.930'. [ 84.022369][ T9243] loop8: detected capacity change from 0 to 33792 [ 84.022767][ T9243] ext4: Bad value for 'barrier' [ 84.084364][ T9245] xt_SECMARK: unable to map security context 'system_u:object_r:dbusd_etc_t:s0' [ 84.105830][ T4719] Bluetooth: hci0: command tx timeout [ 84.333307][ T9306] xt_SECMARK: unable to map security context 'system_u:object_r:dbusd_etc_t:s0' [ 84.346575][ T4719] Bluetooth: hci1: command tx timeout [ 84.755768][ T4719] Bluetooth: hci3: command tx timeout [ 84.856040][ T9360] FAULT_INJECTION: forcing a failure. [ 84.856040][ T9360] name failslab, interval 1, probability 0, space 0, times 0 [ 84.856065][ T9360] CPU: 0 UID: 0 PID: 9360 Comm: syz.9.973 Tainted: G L syzkaller #0 PREEMPT [ 84.856080][ T9360] Tainted: [L]=SOFTLOCKUP [ 84.856084][ T9360] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 84.856090][ T9360] Call trace: [ 84.856093][ T9360] show_stack+0x2c/0x3c (C) [ 84.856109][ T9360] __dump_stack+0x30/0x40 [ 84.856118][ T9360] dump_stack_lvl+0xd8/0x12c [ 84.856125][ T9360] dump_stack+0x1c/0x28 [ 84.856132][ T9360] should_fail_ex+0x3fc/0x570 [ 84.856144][ T9360] should_failslab+0xc4/0x120 [ 84.856152][ T9360] __kmalloc_cache_noprof+0x94/0x5fc [ 84.856161][ T9360] l2tp_tunnel_create+0x98/0x390 [ 84.856171][ T9360] pppol2tp_connect+0x658/0x13a0 [ 84.856180][ T9360] __sys_connect_file+0x13c/0x184 [ 84.856190][ T9360] __sys_connect+0x114/0x194 [ 84.856198][ T9360] __arm64_sys_connect+0x84/0x9c [ 84.856206][ T9360] invoke_syscall+0x98/0x244 [ 84.856214][ T9360] el0_svc_common+0xec/0x23c [ 84.856221][ T9360] do_el0_svc+0x4c/0x5c [ 84.856228][ T9360] el0_svc+0x60/0x1d8 [ 84.856237][ T9360] el0t_64_sync_handler+0x44/0x104 [ 84.856246][ T9360] el0t_64_sync+0x198/0x19c [ 85.053352][ T9393] netlink: 24 bytes leftover after parsing attributes in process `syz.9.981'. [ 85.081214][ T9396] FAULT_INJECTION: forcing a failure. [ 85.081214][ T9396] name failslab, interval 1, probability 0, space 0, times 0 [ 85.081236][ T9396] CPU: 1 UID: 0 PID: 9396 Comm: syz.3.982 Tainted: G L syzkaller #0 PREEMPT [ 85.081248][ T9396] Tainted: [L]=SOFTLOCKUP [ 85.081252][ T9396] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 85.081257][ T9396] Call trace: [ 85.081260][ T9396] show_stack+0x2c/0x3c (C) [ 85.081279][ T9396] __dump_stack+0x30/0x40 [ 85.081289][ T9396] dump_stack_lvl+0xd8/0x12c [ 85.081299][ T9396] dump_stack+0x1c/0x28 [ 85.081306][ T9396] should_fail_ex+0x3fc/0x570 [ 85.081318][ T9396] should_failslab+0xc4/0x120 [ 85.081327][ T9396] kmem_cache_alloc_noprof+0x94/0x5d4 [ 85.081335][ T9396] taskstats_exit+0x30c/0x89c [ 85.081346][ T9396] do_exit+0x500/0x1a64 [ 85.081356][ T9396] do_group_exit+0x198/0x238 [ 85.081366][ T9396] get_signal+0x104c/0x1130 [ 85.081373][ T9396] arch_do_signal_or_restart+0x288/0x444c [ 85.081381][ T9396] exit_to_user_mode_loop+0x70/0x17c [ 85.081391][ T9396] el0_svc+0x12c/0x1d8 [ 85.081400][ T9396] el0t_64_sync_handler+0x44/0x104 [ 85.081409][ T9396] el0t_64_sync+0x198/0x19c [ 85.131665][ T9400] FAULT_INJECTION: forcing a failure. [ 85.131665][ T9400] name failslab, interval 1, probability 0, space 0, times 0 [ 85.131686][ T9400] CPU: 0 UID: 0 PID: 9400 Comm: syz.9.983 Tainted: G L syzkaller #0 PREEMPT [ 85.131698][ T9400] Tainted: [L]=SOFTLOCKUP [ 85.131701][ T9400] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 85.131707][ T9400] Call trace: [ 85.131709][ T9400] show_stack+0x2c/0x3c (C) [ 85.131725][ T9400] __dump_stack+0x30/0x40 [ 85.131733][ T9400] dump_stack_lvl+0xd8/0x12c [ 85.131741][ T9400] dump_stack+0x1c/0x28 [ 85.131748][ T9400] should_fail_ex+0x3fc/0x570 [ 85.131760][ T9400] should_failslab+0xc4/0x120 [ 85.131768][ T9400] __kmalloc_noprof+0x108/0x6c8 [ 85.131776][ T9400] tomoyo_encode2+0x10c/0x330 [ 85.131786][ T9400] tomoyo_encode+0x34/0x50 [ 85.131795][ T9400] tomoyo_realpath_from_path+0x488/0x4dc [ 85.131804][ T9400] tomoyo_path_number_perm+0x1f0/0x500 [ 85.131813][ T9400] tomoyo_file_ioctl+0x2c/0x3c [ 85.131822][ T9400] security_file_ioctl+0xdc/0x2b0 [ 85.131831][ T9400] __arm64_sys_ioctl+0xb0/0x1cc [ 85.131839][ T9400] invoke_syscall+0x98/0x244 [ 85.131847][ T9400] el0_svc_common+0xec/0x23c [ 85.131854][ T9400] do_el0_svc+0x4c/0x5c [ 85.131861][ T9400] el0_svc+0x60/0x1d8 [ 85.131870][ T9400] el0t_64_sync_handler+0x44/0x104 [ 85.131879][ T9400] el0t_64_sync+0x198/0x19c [ 85.131892][ T9400] ERROR: Out of memory at tomoyo_realpath_from_path. [ 85.266278][ T9426] Bluetooth: MGMT ver 1.23 [ 85.433100][ T9460] netlink: 8 bytes leftover after parsing attributes in process `syz.5.997'. [ 85.437819][ T9461] xt_SECMARK: unable to map security context 'system_u:object_r:dbusd_etc_t:s0' [ 85.497012][ T9470] FAULT_INJECTION: forcing a failure. [ 85.497012][ T9470] name failslab, interval 1, probability 0, space 0, times 0 [ 85.497040][ T9470] CPU: 1 UID: 0 PID: 9470 Comm: syz.8.1000 Tainted: G L syzkaller #0 PREEMPT [ 85.497058][ T9470] Tainted: [L]=SOFTLOCKUP [ 85.497063][ T9470] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 85.497069][ T9470] Call trace: [ 85.497073][ T9470] show_stack+0x2c/0x3c (C) [ 85.497087][ T9470] __dump_stack+0x30/0x40 [ 85.497096][ T9470] dump_stack_lvl+0xd8/0x12c [ 85.497103][ T9470] dump_stack+0x1c/0x28 [ 85.497110][ T9470] should_fail_ex+0x3fc/0x570 [ 85.497123][ T9470] should_failslab+0xc4/0x120 [ 85.497131][ T9470] __kmalloc_noprof+0x108/0x6c8 [ 85.497140][ T9470] tomoyo_encode2+0x10c/0x330 [ 85.497150][ T9470] tomoyo_encode+0x34/0x50 [ 85.497158][ T9470] tomoyo_realpath_from_path+0x488/0x4dc [ 85.497167][ T9470] tomoyo_path_number_perm+0x1f0/0x500 [ 85.497176][ T9470] tomoyo_file_ioctl+0x2c/0x3c [ 85.497185][ T9470] security_file_ioctl+0xdc/0x2b0 [ 85.497194][ T9470] __arm64_sys_ioctl+0xb0/0x1cc [ 85.497202][ T9470] invoke_syscall+0x98/0x244 [ 85.497209][ T9470] el0_svc_common+0xec/0x23c [ 85.497217][ T9470] do_el0_svc+0x4c/0x5c [ 85.497224][ T9470] el0_svc+0x60/0x1d8 [ 85.497233][ T9470] el0t_64_sync_handler+0x44/0x104 [ 85.497242][ T9470] el0t_64_sync+0x198/0x19c [ 85.497257][ T9470] ERROR: Out of memory at tomoyo_realpath_from_path. [ 85.551524][ T9460] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 85.559344][ T9460] loop5: detected capacity change from 0 to 33280 [ 85.567389][ T9460] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 85.588645][ T9460] EXT4-fs (loop5): can't mount with journal_async_commit, fs mounted w/o journal [ 85.591895][ T9485] loop9: detected capacity change from 0 to 33280 [ 85.602364][ T9485] EXT4-fs (loop9): orphan cleanup on readonly fs [ 85.602718][ T9485] EXT4-fs error (device loop9): ext4_xattr_inode_iget:437: inode #11: comm syz.9.1004: ea_inode with extended attributes [ 85.602736][ T9485] loop9: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 85.605537][ C0] EXT4-fs (loop9): error count since last fsck: 1 [ 85.605556][ C0] EXT4-fs (loop9): initial error at time 2000000056: ext4_xattr_inode_iget:437: inode 11 [ 85.605573][ C0] EXT4-fs (loop9): last error at time 2000000056: ext4_xattr_inode_iget:437: inode 11 [ 85.643778][ T9485] EXT4-fs error (device loop9): ext4_xattr_inode_iget:442: comm syz.9.1004: error while reading EA inode 11 err=-117 [ 85.643807][ T9485] loop9: lost filesystem error report for type 5 error -117 [ 85.647166][ T9485] EXT4-fs (loop9): 1 orphan inode deleted [ 85.647574][ T9485] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 85.777567][ T6778] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.869952][ T9493] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.882580][ T4841] input: syz0 as /devices/virtual/misc/uhid/0003:1B1E:0C13.0006/input/input5 [ 85.888688][ T4841] hid-generic 0003:1B1E:0C13.0006: input,hidraw0: USB HID v0.07 Device [syz0] on syz0 [ 85.911875][ T9523] fido_id[9523]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 85.968531][ T1064] input: syz0 as /devices/virtual/misc/uhid/0003:1B1E:0C13.0007/input/input6 [ 85.969105][ T9529] FAULT_INJECTION: forcing a failure. [ 85.969105][ T9529] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 85.969119][ T9529] CPU: 1 UID: 0 PID: 9529 Comm: syz.5.1014 Tainted: G L syzkaller #0 PREEMPT [ 85.969131][ T9529] Tainted: [L]=SOFTLOCKUP [ 85.969134][ T9529] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 85.969139][ T9529] Call trace: [ 85.969142][ T9529] show_stack+0x2c/0x3c (C) [ 85.969157][ T9529] __dump_stack+0x30/0x40 [ 85.969165][ T9529] dump_stack_lvl+0xd8/0x12c [ 85.969172][ T9529] dump_stack+0x1c/0x28 [ 85.969179][ T9529] should_fail_ex+0x3fc/0x570 [ 85.969191][ T9529] should_fail+0x14/0x24 [ 85.969201][ T9529] should_fail_usercopy+0x20/0x30 [ 85.969208][ T9529] _inline_copy_from_user+0x3c/0x174 [ 85.969220][ T9529] uhid_char_write+0x1ac/0xa20 [ 85.969230][ T9529] vfs_write+0x2a4/0xa0c [ 85.969238][ T9529] ksys_write+0x12c/0x228 [ 85.969246][ T9529] __arm64_sys_write+0x84/0x98 [ 85.969253][ T9529] invoke_syscall+0x98/0x244 [ 85.969261][ T9529] el0_svc_common+0xec/0x23c [ 85.969269][ T9529] do_el0_svc+0x4c/0x5c [ 85.969275][ T9529] el0_svc+0x60/0x1d8 [ 85.969285][ T9529] el0t_64_sync_handler+0x44/0x104 [ 85.969293][ T9529] el0t_64_sync+0x198/0x19c [ 85.977541][ T1064] hid-generic 0003:1B1E:0C13.0007: input,hidraw0: USB HID v0.07 Device [syz0] on syz0 [ 86.034275][ T9534] fido_id[9534]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 86.092175][ T9547] netlink: 16 bytes leftover after parsing attributes in process `syz.8.1019'. [ 86.149191][ T9558] FAULT_INJECTION: forcing a failure. [ 86.149191][ T9558] name fail_futex, interval 1, probability 0, space 0, times 0 [ 86.149212][ T9558] CPU: 0 UID: 0 PID: 9558 Comm: syz.8.1023 Tainted: G L syzkaller #0 PREEMPT [ 86.149225][ T9558] Tainted: [L]=SOFTLOCKUP [ 86.149229][ T9558] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 86.149234][ T9558] Call trace: [ 86.149238][ T9558] show_stack+0x2c/0x3c (C) [ 86.149253][ T9558] __dump_stack+0x30/0x40 [ 86.149262][ T9558] dump_stack_lvl+0xd8/0x12c [ 86.149270][ T9558] dump_stack+0x1c/0x28 [ 86.149278][ T9558] should_fail_ex+0x3fc/0x570 [ 86.149292][ T9558] should_fail+0x14/0x24 [ 86.149304][ T9558] get_futex_key+0x1e0/0x118c [ 86.149316][ T9558] futex_wake+0x10c/0x594 [ 86.149331][ T9558] do_futex+0x2c4/0x378 [ 86.149341][ T9558] __arm64_sys_futex+0x2e4/0x418 [ 86.149353][ T9558] invoke_syscall+0x98/0x244 [ 86.149362][ T9558] el0_svc_common+0xec/0x23c [ 86.149370][ T9558] do_el0_svc+0x4c/0x5c [ 86.149378][ T9558] el0_svc+0x60/0x1d8 [ 86.149389][ T9558] el0t_64_sync_handler+0x44/0x104 [ 86.149399][ T9558] el0t_64_sync+0x198/0x19c [ 86.187803][ T4719] Bluetooth: hci0: command tx timeout [ 86.228912][ T9493] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.332157][ T9493] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.371985][ T9583] loop8: detected capacity change from 0 to 8192 [ 86.426062][ T4719] Bluetooth: hci1: command tx timeout [ 86.448772][ T9493] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.490362][ T9589] FAULT_INJECTION: forcing a failure. [ 86.490362][ T9589] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 86.490386][ T9589] CPU: 0 UID: 0 PID: 9589 Comm: syz.8.1028 Tainted: G L syzkaller #0 PREEMPT [ 86.490401][ T9589] Tainted: [L]=SOFTLOCKUP [ 86.490405][ T9589] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 86.490411][ T9589] Call trace: [ 86.490414][ T9589] show_stack+0x2c/0x3c (C) [ 86.490430][ T9589] __dump_stack+0x30/0x40 [ 86.490438][ T9589] dump_stack_lvl+0xd8/0x12c [ 86.490445][ T9589] dump_stack+0x1c/0x28 [ 86.490452][ T9589] should_fail_ex+0x3fc/0x570 [ 86.490466][ T9589] should_fail+0x14/0x24 [ 86.490476][ T9589] should_fail_usercopy+0x20/0x30 [ 86.490483][ T9589] _copy_from_iter+0x188/0x1050 [ 86.490492][ T9589] skb_copy_datagram_from_iter+0xe8/0x5c8 [ 86.490502][ T9589] tap_get_user+0x514/0x13ac [ 86.490513][ T9589] tap_write_iter+0xd4/0x12c [ 86.490522][ T9589] vfs_write+0x51c/0xa0c [ 86.490531][ T9589] ksys_write+0x12c/0x228 [ 86.490538][ T9589] __arm64_sys_write+0x84/0x98 [ 86.490545][ T9589] invoke_syscall+0x98/0x244 [ 86.490553][ T9589] el0_svc_common+0xec/0x23c [ 86.490560][ T9589] do_el0_svc+0x4c/0x5c [ 86.490567][ T9589] el0_svc+0x60/0x1d8 [ 86.490577][ T9589] el0t_64_sync_handler+0x44/0x104 [ 86.490585][ T9589] el0t_64_sync+0x198/0x19c [ 86.586488][ T3732] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.597457][ T3732] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.604197][ T3732] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.605594][ T3732] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.636958][ T9601] FAULT_INJECTION: forcing a failure. [ 86.636958][ T9601] name failslab, interval 1, probability 0, space 0, times 0 [ 86.636992][ T9601] CPU: 1 UID: 0 PID: 9601 Comm: syz.8.1030 Tainted: G L syzkaller #0 PREEMPT [ 86.637006][ T9601] Tainted: [L]=SOFTLOCKUP [ 86.637010][ T9601] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 86.637015][ T9601] Call trace: [ 86.637018][ T9601] show_stack+0x2c/0x3c (C) [ 86.637040][ T9601] __dump_stack+0x30/0x40 [ 86.637050][ T9601] dump_stack_lvl+0xd8/0x12c [ 86.637059][ T9601] dump_stack+0x1c/0x28 [ 86.637068][ T9601] should_fail_ex+0x3fc/0x570 [ 86.637080][ T9601] should_failslab+0xc4/0x120 [ 86.637089][ T9601] __kmalloc_noprof+0x108/0x6c8 [ 86.637100][ T9601] tomoyo_realpath_from_path+0xbc/0x4dc [ 86.637110][ T9601] tomoyo_path_number_perm+0x1f0/0x500 [ 86.637119][ T9601] tomoyo_file_ioctl+0x2c/0x3c [ 86.637128][ T9601] security_file_ioctl+0xdc/0x2b0 [ 86.637136][ T9601] __arm64_sys_ioctl+0xb0/0x1cc [ 86.637144][ T9601] invoke_syscall+0x98/0x244 [ 86.637152][ T9601] el0_svc_common+0xec/0x23c [ 86.637159][ T9601] do_el0_svc+0x4c/0x5c [ 86.637166][ T9601] el0_svc+0x60/0x1d8 [ 86.637176][ T9601] el0t_64_sync_handler+0x44/0x104 [ 86.637184][ T9601] el0t_64_sync+0x198/0x19c [ 86.637208][ T9601] ERROR: Out of memory at tomoyo_realpath_from_path. [ 86.720364][ T9604] FAULT_INJECTION: forcing a failure. [ 86.720364][ T9604] name failslab, interval 1, probability 0, space 0, times 0 [ 86.720388][ T9604] CPU: 1 UID: 0 PID: 9604 Comm: syz.3.1031 Tainted: G L syzkaller #0 PREEMPT [ 86.720402][ T9604] Tainted: [L]=SOFTLOCKUP [ 86.720405][ T9604] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 86.720411][ T9604] Call trace: [ 86.720414][ T9604] show_stack+0x2c/0x3c (C) [ 86.720431][ T9604] __dump_stack+0x30/0x40 [ 86.720440][ T9604] dump_stack_lvl+0xd8/0x12c [ 86.720448][ T9604] dump_stack+0x1c/0x28 [ 86.720456][ T9604] should_fail_ex+0x3fc/0x570 [ 86.720470][ T9604] should_failslab+0xc4/0x120 [ 86.720479][ T9604] kmem_cache_alloc_lru_noprof+0x98/0x5d8 [ 86.720489][ T9604] proc_alloc_inode+0x2c/0xb8 [ 86.720499][ T9604] alloc_inode+0x68/0x198 [ 86.720511][ T9604] new_inode+0x20/0x50 [ 86.720523][ T9604] proc_pid_make_inode+0x30/0x148 [ 86.720533][ T9604] proc_pident_instantiate+0x70/0x268 [ 86.720544][ T9604] proc_fill_cache+0x234/0x2f0 [ 86.720554][ T9604] proc_pident_readdir+0x298/0x3e8 [ 86.720564][ T9604] proc_tgid_base_readdir+0x34/0x44 [ 86.720575][ T9604] iterate_dir+0x33c/0x6f0 [ 86.720583][ T9604] __arm64_sys_getdents64+0x124/0x310 [ 86.720592][ T9604] invoke_syscall+0x98/0x244 [ 86.720601][ T9604] el0_svc_common+0xec/0x23c [ 86.720609][ T9604] do_el0_svc+0x4c/0x5c [ 86.720617][ T9604] el0_svc+0x60/0x1d8 [ 86.720628][ T9604] el0t_64_sync_handler+0x44/0x104 [ 86.720638][ T9604] el0t_64_sync+0x198/0x19c [ 86.743883][ T9608] netlink: 16 bytes leftover after parsing attributes in process `syz.9.1032'. [ 86.825788][ T4719] Bluetooth: hci3: command tx timeout [ 86.922515][ T9624] FAULT_INJECTION: forcing a failure. [ 86.922515][ T9624] name fail_futex, interval 1, probability 0, space 0, times 0 [ 86.922538][ T9624] CPU: 0 UID: 0 PID: 9624 Comm: syz.3.1036 Tainted: G L syzkaller #0 PREEMPT [ 86.922551][ T9624] Tainted: [L]=SOFTLOCKUP [ 86.922555][ T9624] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 86.922560][ T9624] Call trace: [ 86.922564][ T9624] show_stack+0x2c/0x3c (C) [ 86.922580][ T9624] __dump_stack+0x30/0x40 [ 86.922588][ T9624] dump_stack_lvl+0xd8/0x12c [ 86.922596][ T9624] dump_stack+0x1c/0x28 [ 86.922604][ T9624] should_fail_ex+0x3fc/0x570 [ 86.922618][ T9624] should_fail+0x14/0x24 [ 86.922630][ T9624] get_futex_key+0x1e0/0x118c [ 86.922642][ T9624] futex_wake+0x10c/0x594 [ 86.922653][ T9624] do_futex+0x2c4/0x378 [ 86.922664][ T9624] __arm64_sys_futex+0x2e4/0x418 [ 86.922675][ T9624] invoke_syscall+0x98/0x244 [ 86.922684][ T9624] el0_svc_common+0xec/0x23c [ 86.922692][ T9624] do_el0_svc+0x4c/0x5c [ 86.922700][ T9624] el0_svc+0x60/0x1d8 [ 86.922711][ T9624] el0t_64_sync_handler+0x44/0x104 [ 86.922720][ T9624] el0t_64_sync+0x198/0x19c [ 87.371963][ T9646] xt_SECMARK: unable to map security context 'system_u:object_r:dbusd_etc_t:s0' [ 87.432309][ T9654] FAULT_INJECTION: forcing a failure. [ 87.432309][ T9654] name fail_futex, interval 1, probability 0, space 0, times 0 [ 87.432335][ T9654] CPU: 1 UID: 0 PID: 9654 Comm: syz.5.1039 Tainted: G L syzkaller #0 PREEMPT [ 87.432350][ T9654] Tainted: [L]=SOFTLOCKUP [ 87.432354][ T9654] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 87.432359][ T9654] Call trace: [ 87.432363][ T9654] show_stack+0x2c/0x3c (C) [ 87.432379][ T9654] __dump_stack+0x30/0x40 [ 87.432388][ T9654] dump_stack_lvl+0xd8/0x12c [ 87.432396][ T9654] dump_stack+0x1c/0x28 [ 87.432404][ T9654] should_fail_ex+0x3fc/0x570 [ 87.432418][ T9654] should_fail+0x14/0x24 [ 87.432430][ T9654] get_futex_key+0x1e0/0x118c [ 87.432442][ T9654] futex_wake+0x10c/0x594 [ 87.432453][ T9654] do_futex+0x2c4/0x378 [ 87.432463][ T9654] __arm64_sys_futex+0x2e4/0x418 [ 87.432475][ T9654] invoke_syscall+0x98/0x244 [ 87.432484][ T9654] el0_svc_common+0xec/0x23c [ 87.432492][ T9654] do_el0_svc+0x4c/0x5c [ 87.432500][ T9654] el0_svc+0x60/0x1d8 [ 87.432510][ T9654] el0t_64_sync_handler+0x44/0x104 [ 87.432523][ T9654] el0t_64_sync+0x198/0x19c [ 87.475013][ T9661] IPVS: persistence engine module ip_vs_pe_ not found [ 87.492436][ T9657] rxe_eth0 speed is unknown, defaulting to 1000 [ 87.563018][ T1064] hid-generic 0003:1B1E:0C13.0008: hidraw0: USB HID v0.07 Device [syz0] on syz0 [ 87.589150][ T9673] fido_id[9673]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 87.914299][ T9683] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1046'. [ 88.179808][ T9711] FAULT_INJECTION: forcing a failure. [ 88.179808][ T9711] name failslab, interval 1, probability 0, space 0, times 0 [ 88.179831][ T9711] CPU: 0 UID: 0 PID: 9711 Comm: syz.9.1052 Tainted: G L syzkaller #0 PREEMPT [ 88.179844][ T9711] Tainted: [L]=SOFTLOCKUP [ 88.179848][ T9711] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 88.179853][ T9711] Call trace: [ 88.179856][ T9711] show_stack+0x2c/0x3c (C) [ 88.179871][ T9711] __dump_stack+0x30/0x40 [ 88.179879][ T9711] dump_stack_lvl+0xd8/0x12c [ 88.179886][ T9711] dump_stack+0x1c/0x28 [ 88.179893][ T9711] should_fail_ex+0x3fc/0x570 [ 88.179905][ T9711] should_failslab+0xc4/0x120 [ 88.179913][ T9711] __kmalloc_noprof+0x108/0x6c8 [ 88.179922][ T9711] tomoyo_realpath_from_path+0xbc/0x4dc [ 88.179932][ T9711] tomoyo_path_number_perm+0x1f0/0x500 [ 88.179941][ T9711] tomoyo_file_ioctl+0x2c/0x3c [ 88.179950][ T9711] security_file_ioctl+0xdc/0x2b0 [ 88.179958][ T9711] __arm64_sys_ioctl+0xb0/0x1cc [ 88.179966][ T9711] invoke_syscall+0x98/0x244 [ 88.179974][ T9711] el0_svc_common+0xec/0x23c [ 88.179981][ T9711] do_el0_svc+0x4c/0x5c [ 88.179988][ T9711] el0_svc+0x60/0x1d8 [ 88.179997][ T9711] el0t_64_sync_handler+0x44/0x104 [ 88.180006][ T9711] el0t_64_sync+0x198/0x19c [ 88.180022][ T9711] ERROR: Out of memory at tomoyo_realpath_from_path. [ 88.308419][ T9716] FAULT_INJECTION: forcing a failure. [ 88.308419][ T9716] name failslab, interval 1, probability 0, space 0, times 0 [ 88.308440][ T9716] CPU: 1 UID: 0 PID: 9716 Comm: syz.9.1053 Tainted: G L syzkaller #0 PREEMPT [ 88.308452][ T9716] Tainted: [L]=SOFTLOCKUP [ 88.308456][ T9716] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 88.308461][ T9716] Call trace: [ 88.308464][ T9716] show_stack+0x2c/0x3c (C) [ 88.308480][ T9716] __dump_stack+0x30/0x40 [ 88.308489][ T9716] dump_stack_lvl+0xd8/0x12c [ 88.308496][ T9716] dump_stack+0x1c/0x28 [ 88.308503][ T9716] should_fail_ex+0x3fc/0x570 [ 88.308515][ T9716] should_failslab+0xc4/0x120 [ 88.308524][ T9716] __kmalloc_noprof+0x108/0x6c8 [ 88.308532][ T9716] tomoyo_encode2+0x10c/0x330 [ 88.308542][ T9716] tomoyo_encode+0x34/0x50 [ 88.308551][ T9716] tomoyo_realpath_from_path+0x488/0x4dc [ 88.308560][ T9716] tomoyo_path_number_perm+0x1f0/0x500 [ 88.308569][ T9716] tomoyo_file_ioctl+0x2c/0x3c [ 88.308578][ T9716] security_file_ioctl+0xdc/0x2b0 [ 88.308586][ T9716] __arm64_sys_ioctl+0xb0/0x1cc [ 88.308594][ T9716] invoke_syscall+0x98/0x244 [ 88.308602][ T9716] el0_svc_common+0xec/0x23c [ 88.308610][ T9716] do_el0_svc+0x4c/0x5c [ 88.308617][ T9716] el0_svc+0x60/0x1d8 [ 88.308626][ T9716] el0t_64_sync_handler+0x44/0x104 [ 88.308635][ T9716] el0t_64_sync+0x198/0x19c [ 88.308647][ T9716] ERROR: Out of memory at tomoyo_realpath_from_path. [ 88.391919][ T4823] hid-generic 0003:1B1E:0C13.0009: hidraw0: USB HID v0.07 Device [syz0] on syz0 [ 88.458665][ T9725] fido_id[9725]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 88.590744][ T9754] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 88.608502][ T9757] loop9: detected capacity change from 0 to 128 [ 89.051810][ T9788] xt_SECMARK: unable to map security context 'system_u:object_r:dbusd_etc_t:s0' [ 89.540283][ T7265] hid-generic 0003:1B1E:0C13.000A: item fetching failed at offset 2/3 [ 89.540423][ T7265] hid-generic 0003:1B1E:0C13.000A: probe with driver hid-generic failed with error -22 [ 89.665952][ T9847] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1081'. [ 89.696469][ T7265] input: syz0 as /devices/virtual/misc/uhid/0003:1B1E:0C13.000B/input/input7 [ 89.699023][ T7265] hid-generic 0003:1B1E:0C13.000B: input,hidraw0: USB HID v0.07 Device [syz0] on syz0 [ 89.704096][ T9854] loop5: detected capacity change from 0 to 33792 [ 89.747661][ T9862] fido_id[9862]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 89.860602][ T9874] FAULT_INJECTION: forcing a failure. [ 89.860602][ T9874] name fail_futex, interval 1, probability 0, space 0, times 0 [ 89.860625][ T9874] CPU: 0 UID: 0 PID: 9874 Comm: syz.5.1087 Tainted: G L syzkaller #0 PREEMPT [ 89.860638][ T9874] Tainted: [L]=SOFTLOCKUP [ 89.860642][ T9874] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 89.860647][ T9874] Call trace: [ 89.860651][ T9874] show_stack+0x2c/0x3c (C) [ 89.860666][ T9874] __dump_stack+0x30/0x40 [ 89.860675][ T9874] dump_stack_lvl+0xd8/0x12c [ 89.860683][ T9874] dump_stack+0x1c/0x28 [ 89.860690][ T9874] should_fail_ex+0x3fc/0x570 [ 89.860704][ T9874] should_fail+0x14/0x24 [ 89.860716][ T9874] get_futex_key+0x1e0/0x118c [ 89.860727][ T9874] futex_wait_setup+0x58/0x674 [ 89.860739][ T9874] __futex_wait+0x11c/0x2b8 [ 89.860751][ T9874] futex_wait+0x108/0x2c0 [ 89.860762][ T9874] do_futex+0x320/0x378 [ 89.860773][ T9874] __arm64_sys_futex+0x2e4/0x418 [ 89.860784][ T9874] invoke_syscall+0x98/0x244 [ 89.860792][ T9874] el0_svc_common+0xec/0x23c [ 89.860800][ T9874] do_el0_svc+0x4c/0x5c [ 89.860808][ T9874] el0_svc+0x60/0x1d8 [ 89.860819][ T9874] el0t_64_sync_handler+0x44/0x104 [ 89.860828][ T9874] el0t_64_sync+0x198/0x19c [ 89.863048][ T9874] xt_SECMARK: unable to map security context 'system_u:object_r:dbusd_etc_t:s0' [ 89.943872][ T4823] input: syz0 as /devices/virtual/misc/uhid/0003:1B1E:0C13.000C/input/input8 [ 89.945340][ T4823] hid-generic 0003:1B1E:0C13.000C: input,hidraw0: USB HID v0.07 Device [syz0] on syz0 [ 89.946750][ T9879] FAULT_INJECTION: forcing a failure. [ 89.946750][ T9879] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 89.946767][ T9879] CPU: 1 UID: 0 PID: 9879 Comm: syz.5.1090 Tainted: G L syzkaller #0 PREEMPT [ 89.946780][ T9879] Tainted: [L]=SOFTLOCKUP [ 89.946784][ T9879] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 89.946789][ T9879] Call trace: [ 89.946792][ T9879] show_stack+0x2c/0x3c (C) [ 89.946808][ T9879] __dump_stack+0x30/0x40 [ 89.946817][ T9879] dump_stack_lvl+0xd8/0x12c [ 89.946824][ T9879] dump_stack+0x1c/0x28 [ 89.946831][ T9879] should_fail_ex+0x3fc/0x570 [ 89.946843][ T9879] should_fail+0x14/0x24 [ 89.946853][ T9879] should_fail_usercopy+0x20/0x30 [ 89.946860][ T9879] simple_read_from_buffer+0xc4/0x238 [ 89.946871][ T9879] proc_fail_nth_read+0x1a8/0x248 [ 89.946882][ T9879] vfs_read+0x230/0x8c8 [ 89.946890][ T9879] ksys_read+0x12c/0x228 [ 89.946897][ T9879] __arm64_sys_read+0x84/0x98 [ 89.946905][ T9879] invoke_syscall+0x98/0x244 [ 89.946913][ T9879] el0_svc_common+0xec/0x23c [ 89.946920][ T9879] do_el0_svc+0x4c/0x5c [ 89.946927][ T9879] el0_svc+0x60/0x1d8 [ 89.946937][ T9879] el0t_64_sync_handler+0x44/0x104 [ 89.946945][ T9879] el0t_64_sync+0x198/0x19c [ 89.958096][ T4823] hid-generic 0003:1B1E:0C13.000D: item fetching failed at offset 2/3 [ 89.958253][ T4823] hid-generic 0003:1B1E:0C13.000D: probe with driver hid-generic failed with error -22 [ 90.041744][ T9892] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1093'. [ 90.074216][ T9886] fido_id[9886]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 90.222338][ T4718] Bluetooth: hci3: unexpected event for opcode 0x7747 [ 90.474845][ T9925] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1098'. [ 90.768550][ T9929] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1099'. [ 90.783427][ T9927] rxe_eth0 speed is unknown, defaulting to 1000 [ 90.808157][ T9945] FAULT_INJECTION: forcing a failure. [ 90.808157][ T9945] name failslab, interval 1, probability 0, space 0, times 0 [ 90.808186][ T9945] CPU: 1 UID: 0 PID: 9945 Comm: syz.8.1101 Tainted: G L syzkaller #0 PREEMPT [ 90.808204][ T9945] Tainted: [L]=SOFTLOCKUP [ 90.808208][ T9945] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 90.808214][ T9945] Call trace: [ 90.808217][ T9945] show_stack+0x2c/0x3c (C) [ 90.808233][ T9945] __dump_stack+0x30/0x40 [ 90.808241][ T9945] dump_stack_lvl+0xd8/0x12c [ 90.808250][ T9945] dump_stack+0x1c/0x28 [ 90.808257][ T9945] should_fail_ex+0x3fc/0x570 [ 90.808271][ T9945] should_failslab+0xc4/0x120 [ 90.808280][ T9945] kmem_cache_alloc_lru_noprof+0x98/0x5d8 [ 90.808290][ T9945] sock_alloc_inode+0x30/0x180 [ 90.808302][ T9945] alloc_inode+0x68/0x198 [ 90.808314][ T9945] sock_alloc+0x4c/0x1f4 [ 90.808322][ T9945] do_accept+0x108/0x438 [ 90.808332][ T9945] __sys_accept4+0x11c/0x1fc [ 90.808341][ T9945] __arm64_sys_accept+0x88/0xa0 [ 90.808351][ T9945] invoke_syscall+0x98/0x244 [ 90.808360][ T9945] el0_svc_common+0xec/0x23c [ 90.808368][ T9945] do_el0_svc+0x4c/0x5c [ 90.808375][ T9945] el0_svc+0x60/0x1d8 [ 90.808386][ T9945] el0t_64_sync_handler+0x44/0x104 [ 90.808396][ T9945] el0t_64_sync+0x198/0x19c [ 90.814871][ T9945] xt_SECMARK: unable to map security context 'system_u:object_r:dbusd_etc_t:s0' [ 90.968138][ T9955] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1105'. [ 91.865957][ T9960] input: syz0 as /devices/virtual/input/input9 [ 92.505661][ T9985] loop5: detected capacity change from 0 to 128 [ 92.627764][ T4403] 8021q: adding VLAN 0 to HW filter on device eth8 [ 92.699782][ T9985] syzkaller0: entered promiscuous mode [ 92.699805][ T9985] syzkaller0: entered allmulticast mode [ 92.710465][ T9985] tipc: Started in network mode [ 92.710487][ T9985] tipc: Node identity 5ef9550301e, cluster identity 4711 [ 92.710747][ T9985] tipc: Enabled bearer , priority 0 [ 92.724154][ T9983] tipc: Resetting bearer [ 92.731294][ T9998] loop8: detected capacity change from 0 to 49152 [ 92.754627][ T9998] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w with ordered data mode. Quota mode: none. [ 92.761940][ T9983] tipc: Disabling bearer [ 92.795109][T10009] overlayfs: failed to clone upperpath [ 92.821719][T10009] loop6: detected capacity change from 0 to 128 [ 92.831381][T10012] bridge0: port 3(syz_tun) entered blocking state [ 92.831415][T10012] bridge0: port 3(syz_tun) entered disabled state [ 92.831528][T10012] syz_tun: entered allmulticast mode [ 92.831986][T10012] syz_tun: entered promiscuous mode [ 92.832232][T10012] bridge0: port 3(syz_tun) entered blocking state [ 92.832256][T10012] bridge0: port 3(syz_tun) entered forwarding state [ 92.862798][ T7836] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.289333][ T4403] 8021q: adding VLAN 0 to HW filter on device eth9 [ 93.390897][T10067] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1131'. [ 93.391296][T10067] netdevsim netdevsim6 netdevsim0: entered allmulticast mode [ 93.410710][T10067] PKCS7: Unknown OID: [4] 5.25.43183.11314.97.496.3.846527319083.2007.15776 [ 93.410725][T10067] PKCS7: Only support pkcs7_signedData type [ 93.415059][T10072] ip_tables: iptables: counters copy to user failed while replacing table [ 93.467626][T10081] FAULT_INJECTION: forcing a failure. [ 93.467626][T10081] name failslab, interval 1, probability 0, space 0, times 0 [ 93.467650][T10081] CPU: 1 UID: 0 PID: 10081 Comm: syz.8.1136 Tainted: G L syzkaller #0 PREEMPT [ 93.467665][T10081] Tainted: [L]=SOFTLOCKUP [ 93.467669][T10081] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 93.467675][T10081] Call trace: [ 93.467678][T10081] show_stack+0x2c/0x3c (C) [ 93.467693][T10081] __dump_stack+0x30/0x40 [ 93.467702][T10081] dump_stack_lvl+0xd8/0x12c [ 93.467709][T10081] dump_stack+0x1c/0x28 [ 93.467716][T10081] should_fail_ex+0x3fc/0x570 [ 93.467729][T10081] should_failslab+0xc4/0x120 [ 93.467737][T10081] kmem_cache_alloc_node_noprof+0x98/0x604 [ 93.467746][T10081] __alloc_skb+0x1f0/0x610 [ 93.467756][T10081] netlink_alloc_large_skb+0xd4/0x114 [ 93.467765][T10081] netlink_sendmsg+0x4ac/0x98c [ 93.467775][T10081] __sock_sendmsg+0xc8/0x188 [ 93.467783][T10081] ____sys_sendmsg+0x3d0/0x6c8 [ 93.467791][T10081] ___sys_sendmsg+0x198/0x224 [ 93.467800][T10081] __sys_sendmsg+0x158/0x204 [ 93.467809][T10081] __arm64_sys_sendmsg+0x88/0x9c [ 93.467818][T10081] invoke_syscall+0x98/0x244 [ 93.467826][T10081] el0_svc_common+0xec/0x23c [ 93.467833][T10081] do_el0_svc+0x4c/0x5c [ 93.467840][T10081] el0_svc+0x60/0x1d8 [ 93.467849][T10081] el0t_64_sync_handler+0x44/0x104 [ 93.467858][T10081] el0t_64_sync+0x198/0x19c [ 93.870157][T10103] FAULT_INJECTION: forcing a failure. [ 93.870157][T10103] name failslab, interval 1, probability 0, space 0, times 0 [ 93.870180][T10103] CPU: 0 UID: 0 PID: 10103 Comm: syz.5.1140 Tainted: G L syzkaller #0 PREEMPT [ 93.870195][T10103] Tainted: [L]=SOFTLOCKUP [ 93.870198][T10103] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 93.870204][T10103] Call trace: [ 93.870208][T10103] show_stack+0x2c/0x3c (C) [ 93.870223][T10103] __dump_stack+0x30/0x40 [ 93.870232][T10103] dump_stack_lvl+0xd8/0x12c [ 93.870240][T10103] dump_stack+0x1c/0x28 [ 93.870247][T10103] should_fail_ex+0x3fc/0x570 [ 93.870262][T10103] should_failslab+0xc4/0x120 [ 93.870270][T10103] __kmalloc_cache_noprof+0x94/0x5fc [ 93.870280][T10103] ip6addrlbl_add+0x140/0x924 [ 93.870292][T10103] ip6addrlbl_net_init+0xe0/0x284 [ 93.870306][T10103] ops_init+0x2cc/0x528 [ 93.870317][T10103] setup_net+0x118/0x2fc [ 93.870326][T10103] copy_net_ns+0x450/0x694 [ 93.870336][T10103] create_new_namespaces+0x304/0x50c [ 93.870347][T10103] unshare_nsproxy_namespaces+0x11c/0x16c [ 93.870358][T10103] ksys_unshare+0x444/0x6c8 [ 93.870367][T10103] __arm64_sys_unshare+0x40/0x54 [ 93.870375][T10103] invoke_syscall+0x98/0x244 [ 93.870384][T10103] el0_svc_common+0xec/0x23c [ 93.870392][T10103] do_el0_svc+0x4c/0x5c [ 93.870400][T10103] el0_svc+0x60/0x1d8 [ 93.870411][T10103] el0t_64_sync_handler+0x44/0x104 [ 93.870421][T10103] el0t_64_sync+0x198/0x19c [ 93.894247][T10111] netlink: 'syz.3.1143': attribute type 3 has an invalid length. [ 93.934509][T10117] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 93.974785][T10124] FAULT_INJECTION: forcing a failure. [ 93.974785][T10124] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 93.974805][T10124] CPU: 0 UID: 0 PID: 10124 Comm: syz.8.1145 Tainted: G L syzkaller #0 PREEMPT [ 93.974817][T10124] Tainted: [L]=SOFTLOCKUP [ 93.974820][T10124] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 93.974825][T10124] Call trace: [ 93.974828][T10124] show_stack+0x2c/0x3c (C) [ 93.974842][T10124] __dump_stack+0x30/0x40 [ 93.974851][T10124] dump_stack_lvl+0xd8/0x12c [ 93.974858][T10124] dump_stack+0x1c/0x28 [ 93.974865][T10124] should_fail_ex+0x3fc/0x570 [ 93.974877][T10124] should_fail+0x14/0x24 [ 93.974887][T10124] should_fail_usercopy+0x20/0x30 [ 93.974894][T10124] _inline_copy_from_user+0x3c/0x174 [ 93.974902][T10124] kstrtoul_from_user+0xd8/0x180 [ 93.974910][T10124] event_enable_write+0xa0/0x2f4 [ 93.974919][T10124] vfs_write+0x2a4/0xa0c [ 93.974928][T10124] ksys_write+0x12c/0x228 [ 93.974935][T10124] __arm64_sys_write+0x84/0x98 [ 93.974942][T10124] invoke_syscall+0x98/0x244 [ 93.974951][T10124] el0_svc_common+0xec/0x23c [ 93.974958][T10124] do_el0_svc+0x4c/0x5c [ 93.974965][T10124] el0_svc+0x60/0x1d8 [ 93.974975][T10124] el0t_64_sync_handler+0x44/0x104 [ 93.974983][T10124] el0t_64_sync+0x198/0x19c [ 94.066923][ T4794] hid-generic 0003:1B1E:0C13.000E: item fetching failed at offset 2/3 [ 94.067186][ T4794] hid-generic 0003:1B1E:0C13.000E: probe with driver hid-generic failed with error -22 [ 94.068529][T10135] FAULT_INJECTION: forcing a failure. [ 94.068529][T10135] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 94.068545][T10135] CPU: 0 UID: 0 PID: 10135 Comm: syz.8.1149 Tainted: G L syzkaller #0 PREEMPT [ 94.068556][T10135] Tainted: [L]=SOFTLOCKUP [ 94.068560][T10135] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 94.068564][T10135] Call trace: [ 94.068567][T10135] show_stack+0x2c/0x3c (C) [ 94.068582][T10135] __dump_stack+0x30/0x40 [ 94.068590][T10135] dump_stack_lvl+0xd8/0x12c [ 94.068597][T10135] dump_stack+0x1c/0x28 [ 94.068604][T10135] should_fail_ex+0x3fc/0x570 [ 94.068616][T10135] should_fail+0x14/0x24 [ 94.068626][T10135] should_fail_usercopy+0x20/0x30 [ 94.068633][T10135] _inline_copy_from_user+0x3c/0x174 [ 94.068648][T10135] uhid_char_write+0x1ac/0xa20 [ 94.068658][T10135] vfs_write+0x2a4/0xa0c [ 94.068667][T10135] ksys_write+0x12c/0x228 [ 94.068675][T10135] __arm64_sys_write+0x84/0x98 [ 94.068683][T10135] invoke_syscall+0x98/0x244 [ 94.068691][T10135] el0_svc_common+0xec/0x23c [ 94.068698][T10135] do_el0_svc+0x4c/0x5c [ 94.068705][T10135] el0_svc+0x60/0x1d8 [ 94.068715][T10135] el0t_64_sync_handler+0x44/0x104 [ 94.068724][T10135] el0t_64_sync+0x198/0x19c [ 94.475195][ T4403] 8021q: adding VLAN 0 to HW filter on device eth10 [ 94.600781][T10182] FAULT_INJECTION: forcing a failure. [ 94.600781][T10182] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 94.600810][T10182] CPU: 1 UID: 0 PID: 10182 Comm: syz.9.1158 Tainted: G L syzkaller #0 PREEMPT [ 94.600824][T10182] Tainted: [L]=SOFTLOCKUP [ 94.600827][T10182] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 94.600833][T10182] Call trace: [ 94.600836][T10182] show_stack+0x2c/0x3c (C) [ 94.600851][T10182] __dump_stack+0x30/0x40 [ 94.600860][T10182] dump_stack_lvl+0xd8/0x12c [ 94.600868][T10182] dump_stack+0x1c/0x28 [ 94.600875][T10182] should_fail_ex+0x3fc/0x570 [ 94.600890][T10182] should_fail+0x14/0x24 [ 94.600900][T10182] should_fail_usercopy+0x20/0x30 [ 94.600908][T10182] simple_read_from_buffer+0xc4/0x238 [ 94.600921][T10182] proc_fail_nth_read+0x1a8/0x248 [ 94.600932][T10182] vfs_read+0x230/0x8c8 [ 94.600941][T10182] ksys_read+0x12c/0x228 [ 94.600948][T10182] __arm64_sys_read+0x84/0x98 [ 94.600956][T10182] invoke_syscall+0x98/0x244 [ 94.600964][T10182] el0_svc_common+0xec/0x23c [ 94.600971][T10182] do_el0_svc+0x4c/0x5c [ 94.600979][T10182] el0_svc+0x60/0x1d8 [ 94.600988][T10182] el0t_64_sync_handler+0x44/0x104 [ 94.600997][T10182] el0t_64_sync+0x198/0x19c [ 94.606955][T10186] FAULT_INJECTION: forcing a failure. [ 94.606955][T10186] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 94.606973][T10186] CPU: 0 UID: 0 PID: 10186 Comm: syz.5.1160 Tainted: G L syzkaller #0 PREEMPT [ 94.606986][T10186] Tainted: [L]=SOFTLOCKUP [ 94.606991][T10186] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 94.606996][T10186] Call trace: [ 94.606999][T10186] show_stack+0x2c/0x3c (C) [ 94.607021][T10186] __dump_stack+0x30/0x40 [ 94.607031][T10186] dump_stack_lvl+0xd8/0x12c [ 94.607038][T10186] dump_stack+0x1c/0x28 [ 94.607046][T10186] should_fail_ex+0x3fc/0x570 [ 94.607059][T10186] should_fail+0x14/0x24 [ 94.607069][T10186] should_fail_usercopy+0x20/0x30 [ 94.607077][T10186] _inline_copy_from_user+0x3c/0x188 [ 94.607088][T10186] dm_ctl_ioctl+0x10c/0xbbc [ 94.607098][T10186] __arm64_sys_ioctl+0x154/0x1cc [ 94.607107][T10186] invoke_syscall+0x98/0x244 [ 94.607115][T10186] el0_svc_common+0xec/0x23c [ 94.607122][T10186] do_el0_svc+0x4c/0x5c [ 94.607129][T10186] el0_svc+0x60/0x1d8 [ 94.607142][T10186] el0t_64_sync_handler+0x44/0x104 [ 94.607151][T10186] el0t_64_sync+0x198/0x19c [ 94.741638][T10205] loop9: detected capacity change from 0 to 33280 [ 94.743785][T10205] EXT4-fs: Ignoring removed oldalloc option [ 94.754552][T10205] EXT4-fs error (device loop9): ext4_xattr_inode_iget:433: comm syz.9.1166: Parent and EA inode have the same ino 15 [ 94.754579][T10205] loop9: lost filesystem error report for type 5 error -117 [ 94.755520][ C0] EXT4-fs (loop9): error count since last fsck: 1 [ 94.755535][ C0] EXT4-fs (loop9): initial error at time 2000000065: ext4_xattr_inode_iget:433 [ 94.755550][ C0] EXT4-fs (loop9): last error at time 2000000065: ext4_xattr_inode_iget:433 [ 94.759712][T10205] EXT4-fs (loop9): Remounting filesystem read-only [ 94.759775][T10205] EXT4-fs (loop9): 1 orphan inode deleted [ 94.760191][T10205] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 94.919227][T10227] FAULT_INJECTION: forcing a failure. [ 94.919227][T10227] name fail_futex, interval 1, probability 0, space 0, times 0 [ 94.919252][T10227] CPU: 1 UID: 0 PID: 10227 Comm: syz.8.1170 Tainted: G L syzkaller #0 PREEMPT [ 94.919266][T10227] Tainted: [L]=SOFTLOCKUP [ 94.919270][T10227] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 94.919275][T10227] Call trace: [ 94.919279][T10227] show_stack+0x2c/0x3c (C) [ 94.919295][T10227] __dump_stack+0x30/0x40 [ 94.919304][T10227] dump_stack_lvl+0xd8/0x12c [ 94.919312][T10227] dump_stack+0x1c/0x28 [ 94.919320][T10227] should_fail_ex+0x3fc/0x570 [ 94.919334][T10227] should_fail+0x14/0x24 [ 94.919346][T10227] get_futex_key+0x1e0/0x118c [ 94.919358][T10227] futex_wake+0x10c/0x594 [ 94.919369][T10227] do_futex+0x2c4/0x378 [ 94.919380][T10227] __arm64_sys_futex+0x2e4/0x418 [ 94.919391][T10227] invoke_syscall+0x98/0x244 [ 94.919400][T10227] el0_svc_common+0xec/0x23c [ 94.919408][T10227] do_el0_svc+0x4c/0x5c [ 94.919416][T10227] el0_svc+0x60/0x1d8 [ 94.919427][T10227] el0t_64_sync_handler+0x44/0x104 [ 94.919437][T10227] el0t_64_sync+0x198/0x19c [ 95.596107][T10240] input: syz0 as /devices/virtual/input/input12 [ 96.465407][T10248] FAULT_INJECTION: forcing a failure. [ 96.465407][T10248] name failslab, interval 1, probability 0, space 0, times 0 [ 96.465430][T10248] CPU: 1 UID: 0 PID: 10248 Comm: syz.6.1174 Tainted: G L syzkaller #0 PREEMPT [ 96.465442][T10248] Tainted: [L]=SOFTLOCKUP [ 96.465446][T10248] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 96.465451][T10248] Call trace: [ 96.465454][T10248] show_stack+0x2c/0x3c (C) [ 96.465470][T10248] __dump_stack+0x30/0x40 [ 96.465484][T10248] dump_stack_lvl+0xd8/0x12c [ 96.465491][T10248] dump_stack+0x1c/0x28 [ 96.465498][T10248] should_fail_ex+0x3fc/0x570 [ 96.465511][T10248] should_failslab+0xc4/0x120 [ 96.465519][T10248] __kmalloc_noprof+0x108/0x6c8 [ 96.465528][T10248] io_cache_alloc_new+0x58/0x114 [ 96.465539][T10248] io_uring_cmd_prep+0x344/0x560 [ 96.465547][T10248] io_submit_sqes+0xa40/0x1fec [ 96.465555][T10248] __arm64_sys_io_uring_enter+0x308/0x16c4 [ 96.465563][T10248] invoke_syscall+0x98/0x244 [ 96.465571][T10248] el0_svc_common+0xec/0x23c [ 96.465578][T10248] do_el0_svc+0x4c/0x5c [ 96.465585][T10248] el0_svc+0x60/0x1d8 [ 96.465595][T10248] el0t_64_sync_handler+0x44/0x104 [ 96.465603][T10248] el0t_64_sync+0x198/0x19c [ 96.724872][ T4403] 8021q: adding VLAN 0 to HW filter on device eth11 [ 96.775421][ T6778] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.195002][T10290] loop5: detected capacity change from 0 to 33280 [ 97.208811][T10291] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1183'. [ 97.208847][T10291] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1183'. [ 97.209095][T10291] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1183'. [ 97.214921][T10291] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1183'. [ 97.230450][T10290] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 97.232256][T10294] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 97.280219][T10306] loop9: detected capacity change from 0 to 33280 [ 97.284244][T10306] EXT4-fs (loop9): mounting ext3 file system using the ext4 subsystem [ 97.304105][ T8568] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.304336][T10306] EXT4-fs (loop9): 1 truncate cleaned up [ 97.304929][T10306] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 97.382016][T10306] EXT4-fs error (device loop9): ext4_free_branches:1040: inode #13: comm syz.9.1185: invalid indirect mapped block 4294901760 (level 0) [ 97.382888][ T4403] 8021q: adding VLAN 0 to HW filter on device eth13 [ 97.388833][T10306] EXT4-fs error (device loop9): ext4_free_branches:1040: inode #13: comm syz.9.1185: invalid indirect mapped block 2185560079 (level 0) [ 97.393112][T10306] EXT4-fs error (device loop9): ext4_free_branches:1040: inode #13: comm syz.9.1185: invalid indirect mapped block 65535 (level 2) [ 97.402873][T10306] EXT4-fs error (device loop9): __ext4_get_inode_loc:5733: comm syz.9.1185: Invalid inode table block 1 in block_group 0 [ 97.413291][T10306] EXT4-fs error (device loop9): ext4_read_inode_bitmap:141: comm syz.9.1185: Invalid inode bitmap blk 1 in block_group 0 [ 97.453814][ T6778] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.549965][T10334] netlink: 'syz.5.1192': attribute type 1 has an invalid length. [ 97.567728][T10334] 8021q: adding VLAN 0 to HW filter on device bond1 [ 97.609136][T10334] bond1: (slave geneve2): making interface the new active one [ 97.611060][T10334] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 98.599182][ T4403] 8021q: adding VLAN 0 to HW filter on device eth12 [ 98.646215][T10355] FAULT_INJECTION: forcing a failure. [ 98.646215][T10355] name failslab, interval 1, probability 0, space 0, times 0 [ 98.646238][T10355] CPU: 0 UID: 0 PID: 10355 Comm: syz.3.1197 Tainted: G L syzkaller #0 PREEMPT [ 98.646252][T10355] Tainted: [L]=SOFTLOCKUP [ 98.646255][T10355] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 98.646261][T10355] Call trace: [ 98.646264][T10355] show_stack+0x2c/0x3c (C) [ 98.646279][T10355] __dump_stack+0x30/0x40 [ 98.646287][T10355] dump_stack_lvl+0xd8/0x12c [ 98.646294][T10355] dump_stack+0x1c/0x28 [ 98.646301][T10355] should_fail_ex+0x3fc/0x570 [ 98.646313][T10355] should_failslab+0xc4/0x120 [ 98.646321][T10355] kmem_cache_alloc_noprof+0x94/0x5d4 [ 98.646329][T10355] pagetable_pte_ctor+0x7c/0x268 [ 98.646337][T10355] __do_fault+0x278/0x4a8 [ 98.646344][T10355] do_pte_missing+0x4f4/0x28bc [ 98.646352][T10355] handle_mm_fault+0x14d0/0x2b58 [ 98.646362][T10355] do_page_fault+0x4d8/0xc00 [ 98.646373][T10355] do_translation_fault+0xc4/0x114 [ 98.646383][T10355] do_mem_abort+0x70/0x194 [ 98.646392][T10355] el1_abort+0x50/0x74 [ 98.646402][T10355] el1h_64_sync_handler+0xdc/0x130 [ 98.646410][T10355] el1h_64_sync+0x78/0x7c [ 98.646418][T10355] __arch_clear_user+0x30/0xb0 (P) [ 98.646428][T10355] read_iter_zero+0x94/0x2ac [ 98.646437][T10355] vfs_read+0x498/0x8c8 [ 98.646445][T10355] ksys_read+0x12c/0x228 [ 98.646452][T10355] __arm64_sys_read+0x84/0x98 [ 98.646460][T10355] invoke_syscall+0x98/0x244 [ 98.646467][T10355] el0_svc_common+0xec/0x23c [ 98.646474][T10355] do_el0_svc+0x4c/0x5c [ 98.646481][T10355] el0_svc+0x60/0x1d8 [ 98.646489][T10355] el0t_64_sync_handler+0x44/0x104 [ 98.646497][T10355] el0t_64_sync+0x198/0x19c [ 98.725290][T10362] loop9: detected capacity change from 0 to 34816 [ 98.767081][T10362] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 98.767143][T10362] ext4 filesystem being mounted at /179/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 98.882107][ T6778] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.175888][T10395] FAULT_INJECTION: forcing a failure. [ 99.175888][T10395] name failslab, interval 1, probability 0, space 0, times 0 [ 99.175910][T10395] CPU: 1 UID: 0 PID: 10395 Comm: syz.9.1207 Tainted: G L syzkaller #0 PREEMPT [ 99.175926][T10395] Tainted: [L]=SOFTLOCKUP [ 99.175931][T10395] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 99.175938][T10395] Call trace: [ 99.175941][T10395] show_stack+0x2c/0x3c (C) [ 99.175956][T10395] __dump_stack+0x30/0x40 [ 99.175964][T10395] dump_stack_lvl+0xd8/0x12c [ 99.175971][T10395] dump_stack+0x1c/0x28 [ 99.175978][T10395] should_fail_ex+0x3fc/0x570 [ 99.175991][T10395] should_failslab+0xc4/0x120 [ 99.175999][T10395] __kvmalloc_node_noprof+0x160/0x7fc [ 99.176008][T10395] dm_ctl_ioctl+0x4c4/0xbbc [ 99.176020][T10395] __arm64_sys_ioctl+0x154/0x1cc [ 99.176035][T10395] invoke_syscall+0x98/0x244 [ 99.176043][T10395] el0_svc_common+0xec/0x23c [ 99.176051][T10395] do_el0_svc+0x4c/0x5c [ 99.176058][T10395] el0_svc+0x60/0x1d8 [ 99.176068][T10395] el0t_64_sync_handler+0x44/0x104 [ 99.176077][T10395] el0t_64_sync+0x198/0x19c [ 99.241774][T10402] netlink: 'syz.8.1208': attribute type 10 has an invalid length. [ 99.241954][T10402] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.242122][T10402] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.249676][T10403] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 99.249853][T10403] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 99.254139][T10402] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.254178][T10402] bridge0: port 2(bridge_slave_1) entered forwarding state [ 99.254280][T10402] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.254309][T10402] bridge0: port 1(bridge_slave_0) entered forwarding state [ 99.258327][T10402] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 99.268707][T10411] FAULT_INJECTION: forcing a failure. [ 99.268707][T10411] name failslab, interval 1, probability 0, space 0, times 0 [ 99.268729][T10411] CPU: 1 UID: 0 PID: 10411 Comm: syz.3.1211 Tainted: G L syzkaller #0 PREEMPT [ 99.268745][T10411] Tainted: [L]=SOFTLOCKUP [ 99.268749][T10411] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 99.268755][T10411] Call trace: [ 99.268758][T10411] show_stack+0x2c/0x3c (C) [ 99.268774][T10411] __dump_stack+0x30/0x40 [ 99.268783][T10411] dump_stack_lvl+0xd8/0x12c [ 99.268790][T10411] dump_stack+0x1c/0x28 [ 99.268797][T10411] should_fail_ex+0x3fc/0x570 [ 99.268810][T10411] should_failslab+0xc4/0x120 [ 99.268818][T10411] __kmalloc_noprof+0x108/0x6c8 [ 99.268826][T10411] tracepoint_add_func+0x360/0xa18 [ 99.268837][T10411] tracepoint_probe_register_prio+0x70/0xb4 [ 99.268848][T10411] tracepoint_probe_register+0x38/0x4c [ 99.268858][T10411] tracing_start_sched_switch+0x174/0x23c [ 99.268870][T10411] tracing_start_cmdline_record+0x18/0x24 [ 99.268881][T10411] __ftrace_event_enable_disable+0x294/0x7ec [ 99.268889][T10411] event_enable_write+0x1fc/0x2f4 [ 99.268897][T10411] vfs_write+0x2a4/0xa0c [ 99.268905][T10411] ksys_write+0x12c/0x228 [ 99.268913][T10411] __arm64_sys_write+0x84/0x98 [ 99.268920][T10411] invoke_syscall+0x98/0x244 [ 99.268928][T10411] el0_svc_common+0xec/0x23c [ 99.268936][T10411] do_el0_svc+0x4c/0x5c [ 99.268943][T10411] el0_svc+0x60/0x1d8 [ 99.268952][T10411] el0t_64_sync_handler+0x44/0x104 [ 99.268960][T10411] el0t_64_sync+0x198/0x19c [ 99.268970][T10411] sched trace: Couldn't activate tracepoint probe to kernel_sched_switch [ 99.317532][ T4403] 8021q: adding VLAN 0 to HW filter on device eth14 [ 99.534511][ T4403] 8021q: adding VLAN 0 to HW filter on device eth15 [ 99.540605][T10444] FAULT_INJECTION: forcing a failure. [ 99.540605][T10444] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 99.540627][T10444] CPU: 1 UID: 0 PID: 10444 Comm: syz.3.1219 Tainted: G L syzkaller #0 PREEMPT [ 99.540642][T10444] Tainted: [L]=SOFTLOCKUP [ 99.540646][T10444] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 99.540651][T10444] Call trace: [ 99.540655][T10444] show_stack+0x2c/0x3c (C) [ 99.540671][T10444] __dump_stack+0x30/0x40 [ 99.540679][T10444] dump_stack_lvl+0xd8/0x12c [ 99.540687][T10444] dump_stack+0x1c/0x28 [ 99.540693][T10444] should_fail_ex+0x3fc/0x570 [ 99.540706][T10444] should_fail+0x14/0x24 [ 99.540716][T10444] should_fail_usercopy+0x20/0x30 [ 99.540723][T10444] _inline_copy_from_user+0x3c/0x188 [ 99.540735][T10444] dm_ctl_ioctl+0x3e4/0xbbc [ 99.540745][T10444] __arm64_sys_ioctl+0x154/0x1cc [ 99.540754][T10444] invoke_syscall+0x98/0x244 [ 99.540762][T10444] el0_svc_common+0xec/0x23c [ 99.540769][T10444] do_el0_svc+0x4c/0x5c [ 99.540776][T10444] el0_svc+0x60/0x1d8 [ 99.540785][T10444] el0t_64_sync_handler+0x44/0x104 [ 99.540794][T10444] el0t_64_sync+0x198/0x19c [ 99.627391][T10449] loop3: detected capacity change from 0 to 256 [ 99.627769][T10449] vfat: Unknown parameter '' [ 99.700058][ T7265] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 99.713951][ T7265] hid-generic 0000:0000:0000.000F: hidraw0: HID v0.00 Device [syz1] on syz0 [ 99.852514][T10473] netlink: 'syz.6.1224': attribute type 1 has an invalid length. [ 99.864539][T10473] 8021q: adding VLAN 0 to HW filter on device bond1 [ 99.875298][T10473] bond1: (slave geneve2): making interface the new active one [ 99.878410][T10473] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 99.897176][ T4403] 8021q: adding VLAN 0 to HW filter on device eth17 [ 99.902508][T10478] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(3) [ 99.903339][T10478] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(9) [ 99.963951][T10482] loop8: detected capacity change from 0 to 49152 [ 99.972664][T10482] EXT4-fs (loop8): Using encoding defined by superblock: utf8-12.1.0 with flags 0x0 [ 99.972687][T10482] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 99.972694][T10482] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 99.989723][T10482] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w with journalled data mode. Quota mode: journalled. [ 100.088979][ T7836] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.179425][ T4403] 8021q: adding VLAN 0 to HW filter on device eth16 [ 100.262143][T10519] FAULT_INJECTION: forcing a failure. [ 100.262143][T10519] name failslab, interval 1, probability 0, space 0, times 0 [ 100.262167][T10519] CPU: 0 UID: 0 PID: 10519 Comm: syz.8.1234 Tainted: G L syzkaller #0 PREEMPT [ 100.262182][T10519] Tainted: [L]=SOFTLOCKUP [ 100.262186][T10519] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 100.262191][T10519] Call trace: [ 100.262194][T10519] show_stack+0x2c/0x3c (C) [ 100.262208][T10519] __dump_stack+0x30/0x40 [ 100.262216][T10519] dump_stack_lvl+0xd8/0x12c [ 100.262223][T10519] dump_stack+0x1c/0x28 [ 100.262230][T10519] should_fail_ex+0x3fc/0x570 [ 100.262242][T10519] should_failslab+0xc4/0x120 [ 100.262251][T10519] kmem_cache_alloc_noprof+0x94/0x5d4 [ 100.262259][T10519] skb_clone+0x1ac/0x320 [ 100.262269][T10519] __netlink_deliver_tap+0x304/0x5c4 [ 100.262279][T10519] netlink_deliver_tap+0x1d8/0x1dc [ 100.262288][T10519] netlink_unicast+0x718/0x934 [ 100.262297][T10519] netlink_sendmsg+0x670/0x98c [ 100.262306][T10519] __sock_sendmsg+0xc8/0x188 [ 100.262314][T10519] ____sys_sendmsg+0x3d0/0x6c8 [ 100.262323][T10519] ___sys_sendmsg+0x198/0x224 [ 100.262331][T10519] __sys_sendmsg+0x158/0x204 [ 100.262340][T10519] __arm64_sys_sendmsg+0x88/0x9c [ 100.262349][T10519] invoke_syscall+0x98/0x244 [ 100.262357][T10519] el0_svc_common+0xec/0x23c [ 100.262364][T10519] do_el0_svc+0x4c/0x5c [ 100.262371][T10519] el0_svc+0x60/0x1d8 [ 100.262380][T10519] el0t_64_sync_handler+0x44/0x104 [ 100.262389][T10519] el0t_64_sync+0x198/0x19c [ 100.462549][T10539] loop8: detected capacity change from 0 to 49152 [ 100.480497][T10539] EXT4-fs (loop8): Using encoding defined by superblock: utf8-12.1.0 with flags 0x0 [ 100.501976][T10539] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w with ordered data mode. Quota mode: none. [ 100.502041][T10539] ext4 filesystem being mounted at /143/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 100.562106][ T7836] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.563239][ T4403] 8021q: adding VLAN 0 to HW filter on device eth18 [ 100.622285][T10553] FAULT_INJECTION: forcing a failure. [ 100.622285][T10553] name failslab, interval 1, probability 0, space 0, times 0 [ 100.622309][T10553] CPU: 0 UID: 0 PID: 10553 Comm: syz.9.1239 Tainted: G L syzkaller #0 PREEMPT [ 100.622324][T10553] Tainted: [L]=SOFTLOCKUP [ 100.622328][T10553] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 100.622333][T10553] Call trace: [ 100.622336][T10553] show_stack+0x2c/0x3c (C) [ 100.622352][T10553] __dump_stack+0x30/0x40 [ 100.622360][T10553] dump_stack_lvl+0xd8/0x12c [ 100.622368][T10553] dump_stack+0x1c/0x28 [ 100.622375][T10553] should_fail_ex+0x3fc/0x570 [ 100.622386][T10553] should_failslab+0xc4/0x120 [ 100.622395][T10553] kmem_cache_alloc_noprof+0x94/0x5d4 [ 100.622403][T10553] sctp_chunkify+0x64/0x244 [ 100.622415][T10553] _sctp_make_chunk+0x130/0x240 [ 100.622425][T10553] sctp_make_datafrag_empty+0x114/0x218 [ 100.622435][T10553] sctp_datamsg_from_user+0x670/0xdd0 [ 100.622445][T10553] sctp_sendmsg_to_asoc+0xc6c/0x1338 [ 100.622452][T10553] sctp_sendmsg+0xc70/0x17bc [ 100.622461][T10553] inet_sendmsg+0xb4/0xd8 [ 100.622471][T10553] __sock_sendmsg+0xc8/0x188 [ 100.622480][T10553] __sys_sendto+0x250/0x328 [ 100.622488][T10553] __arm64_sys_sendto+0xec/0x10c [ 100.622497][T10553] invoke_syscall+0x98/0x244 [ 100.622504][T10553] el0_svc_common+0xec/0x23c [ 100.622512][T10553] do_el0_svc+0x4c/0x5c [ 100.622519][T10553] el0_svc+0x60/0x1d8 [ 100.622528][T10553] el0t_64_sync_handler+0x44/0x104 [ 100.622536][T10553] el0t_64_sync+0x198/0x19c [ 100.703569][T10565] netlink: 'syz.3.1245': attribute type 11 has an invalid length. [ 100.729181][T10565] ip_tables: iptables: counters copy to user failed while replacing table [ 100.788252][ T1203] Bluetooth: hci5: Frame reassembly failed (-84) [ 100.872980][T10590] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1249'. [ 100.897154][T10590] Invalid source name [ 100.897175][T10590] UBIFS error (pid: 10590): cannot open "./file0", error -22 [ 100.899007][ T4801] input: syz0 as /devices/virtual/misc/uhid/0003:1B1E:0C13.0010/input/input18 [ 100.904890][ T4801] hid-generic 0003:1B1E:0C13.0010: input,hidraw0: USB HID v0.07 Device [syz0] on syz0 [ 100.993555][T10593] fido_id[10593]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 101.097887][ T50] Bluetooth: hci1: SCO packet for unknown connection handle 2048 [ 101.129697][T10617] loop8: detected capacity change from 0 to 49152 [ 101.142346][T10617] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w with ordered data mode. Quota mode: none. [ 101.142405][T10617] ext4 filesystem being mounted at /147/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 101.159196][ T7836] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.348048][T10644] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1260'. [ 101.412284][T10644] ================================================================== [ 101.412296][T10644] BUG: KASAN: vmalloc-out-of-bounds in sys_imageblit+0xffc/0x1758 [ 101.412314][T10644] Write of size 8 at addr ffff800094119880 by task syz.5.1260/10644 [ 101.412322][T10644] [ 101.412328][T10644] CPU: 1 UID: 0 PID: 10644 Comm: syz.5.1260 Tainted: G L syzkaller #0 PREEMPT [ 101.412339][T10644] Tainted: [L]=SOFTLOCKUP [ 101.412342][T10644] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 101.412347][T10644] Call trace: [ 101.412350][T10644] show_stack+0x2c/0x3c (C) [ 101.412360][T10644] __dump_stack+0x30/0x40 [ 101.412367][T10644] dump_stack_lvl+0xd8/0x12c [ 101.412374][T10644] print_address_description+0xb0/0x238 [ 101.412383][T10644] print_report+0x68/0x84 [ 101.412391][T10644] kasan_report+0x8c/0xc4 [ 101.412401][T10644] __asan_report_store8_noabort+0x20/0x2c [ 101.412412][T10644] sys_imageblit+0xffc/0x1758 [ 101.412423][T10644] drm_fbdev_shmem_defio_imageblit+0x38/0x144 [ 101.412432][T10644] soft_cursor+0x534/0x6bc [ 101.412442][T10644] bit_cursor+0xa8c/0x1138 [ 101.412452][T10644] fbcon_cursor+0x344/0x498 [ 101.412460][T10644] set_cursor+0x1a0/0x200 [ 101.412470][T10644] con_flush_chars+0x84/0xc0 [ 101.412478][T10644] con_write+0x40/0x58 [ 101.412485][T10644] n_tty_write+0x99c/0xde4 [ 101.412492][T10644] file_tty_write+0x3e0/0x6a0 [ 101.412502][T10644] tty_write+0x44/0x54 [ 101.412512][T10644] vfs_write+0x51c/0xa0c [ 101.412519][T10644] ksys_write+0x12c/0x228 [ 101.412527][T10644] __arm64_sys_write+0x84/0x98 [ 101.412534][T10644] invoke_syscall+0x98/0x244 [ 101.412542][T10644] el0_svc_common+0xec/0x23c [ 101.412549][T10644] do_el0_svc+0x4c/0x5c [ 101.412556][T10644] el0_svc+0x60/0x1d8 [ 101.412565][T10644] el0t_64_sync_handler+0x44/0x104 [ 101.412574][T10644] el0t_64_sync+0x198/0x19c [ 101.412582][T10644] [ 101.412584][T10644] The buggy address belongs to a 0-page vmalloc region starting at 0xffff800093e19000 allocated at drm_gem_shmem_vmap_locked+0x45c/0x690 [ 101.412602][T10644] Memory state around the buggy address: [ 101.412607][T10644] ffff800094119780: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 101.412612][T10644] ffff800094119800: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 101.412616][T10644] >ffff800094119880: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 101.412620][T10644] ^ [ 101.412624][T10644] ffff800094119900: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 101.412628][T10644] ffff800094119980: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 101.412631][T10644] ================================================================== [ 101.412882][T10644] Disabling lock debugging due to kernel taint [ 101.412908][T10644] Unable to handle kernel paging request at virtual address ffff800094119880 [ 101.412917][T10644] KASAN: probably user-memory-access in range [0x00000004a08cc400-0x00000004a08cc407] [ 101.412927][T10644] Mem abort info: [ 101.412930][T10644] ESR = 0x0000000096000047 [ 101.412935][T10644] EC = 0x25: DABT (current EL), IL = 32 bits [ 101.412940][T10644] SET = 0, FnV = 0 [ 101.412944][T10644] EA = 0, S1PTW = 0 [ 101.412948][T10644] FSC = 0x07: level 3 translation fault [ 101.412952][T10644] Data abort info: [ 101.412955][T10644] ISV = 0, ISS = 0x00000047, ISS2 = 0x00000000 [ 101.412959][T10644] CM = 0, WnR = 1, TnD = 0, TagAccess = 0 [ 101.412964][T10644] GCS = 0, Overlay = 0, DirtyBit = 0 [ 101.412969][T10644] swapper pgtable: 4k pages, 48-bit VAs, pgdp=00000002193b5000 [ 101.412976][T10644] [ffff800094119880] pgd=0000000000000000, p4d=100000021f6f0003, pud=100000021f6f1003, pmd=1000000107743403, pte=0000000000000000 [ 101.412994][T10644] Internal error: Oops: 0000000096000047 [#1] SMP [ 101.485870][T10644] Modules linked in: [ 101.486683][T10644] CPU: 1 UID: 0 PID: 10644 Comm: syz.5.1260 Tainted: G B L syzkaller #0 PREEMPT [ 101.488740][T10644] Tainted: [B]=BAD_PAGE, [L]=SOFTLOCKUP [ 101.489854][T10644] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 101.491820][T10644] pstate: 63400005 (nZCv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 101.493450][T10644] pc : sys_imageblit+0x1018/0x1758 [ 101.494489][T10644] lr : sys_imageblit+0xffc/0x1758 [ 101.495474][T10644] sp : ffff8000958a7430 [ 101.496330][T10644] x29: ffff8000958a74b0 x28: 0000000000aaaaaa x27: 0000000000000020 [ 101.497849][T10644] x26: 0000000000000002 x25: 0000000000000007 x24: 0000000000000040 [ 101.499472][T10644] x23: ffff8000958a7490 x22: ffff800094119880 x21: ffff0000c745d08a [ 101.501096][T10644] x20: 00aaaaaa00000000 x19: 0000000000000020 x18: 1fffe000359d3e28 [ 101.502570][T10644] x17: 0000000000000003 x16: ffff8000898b7000 x15: 0000000000000000 [ 101.504085][T10644] x14: 0000000000002e34 x13: 0000000000000001 x12: 0000000000000000 [ 101.505592][T10644] x11: 0000000000000000 x10: 0000000000080000 x9 : 0000000000000001 [ 101.507207][T10644] x8 : 0000000000000040 x7 : 0000000000000000 x6 : ffff8000804a121c [ 101.508873][T10644] x5 : 0000000000000000 x4 : 0000000000000000 x3 : ffff80008030cfb4 [ 101.510335][T10644] x2 : 0000000000000000 x1 : ffff0000d7a00000 x0 : 0000000000000000 [ 101.511867][T10644] Call trace: [ 101.512506][T10644] sys_imageblit+0x1018/0x1758 (P) [ 101.513527][T10644] drm_fbdev_shmem_defio_imageblit+0x38/0x144 [ 101.514733][T10644] soft_cursor+0x534/0x6bc [ 101.515594][T10644] bit_cursor+0xa8c/0x1138 [ 101.516488][T10644] fbcon_cursor+0x344/0x498 [ 101.517397][T10644] set_cursor+0x1a0/0x200 [ 101.518281][T10644] con_flush_chars+0x84/0xc0 [ 101.519214][T10644] con_write+0x40/0x58 [ 101.520031][T10644] n_tty_write+0x99c/0xde4 [ 101.520898][T10644] file_tty_write+0x3e0/0x6a0 [ 101.521801][T10644] tty_write+0x44/0x54 [ 101.522538][T10644] vfs_write+0x51c/0xa0c [ 101.523400][T10644] ksys_write+0x12c/0x228 [ 101.524260][T10644] __arm64_sys_write+0x84/0x98 [ 101.525204][T10644] invoke_syscall+0x98/0x244 [ 101.526090][T10644] el0_svc_common+0xec/0x23c [ 101.526965][T10644] do_el0_svc+0x4c/0x5c [ 101.527767][T10644] el0_svc+0x60/0x1d8 [ 101.528555][T10644] el0t_64_sync_handler+0x44/0x104 [ 101.529582][T10644] el0t_64_sync+0x198/0x19c [ 101.530454][T10644] Code: 2a1f03e0 f81c83a9 1100075a 0b1b0268 (f90002d4) [ 101.531830][T10644] ---[ end trace 0000000000000000 ]--- [ 101.890027][T10644] Kernel panic - not syncing: Oops: Fatal exception [ 101.891447][T10644] SMP: stopping secondary CPUs [ 101.892444][T10644] Kernel Offset: disabled [ 101.893351][T10644] CPU features: 0x0,a0000000,00f00020,9c080a02,a84ff6a7 [ 101.894730][T10644] Memory Limit: none [ 102.247069][T10644] Rebooting in 86400 seconds..