last executing test programs: 50.34363703s ago: executing program 4 (id=1206): r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000000)=0x2, 0x4) r1 = syz_open_dev$ptys(0xc, 0x3, 0x0) r2 = dup3(r1, r0, 0x80000) ioctl$sock_inet6_tcp_SIOCINQ(r2, 0x541b, 0x0) 50.313715025s ago: executing program 4 (id=1207): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000240)=0x6, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000280), 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="b00000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa1400040000000000000000000000ffff0a0101020c00028005000100000000003c0002802c00018014000300fc02fa0000000000000000000000000014000400fe8000000000000000000000000000aa0c000280050001000000000008000740000000001c000f8008000340000000060800024000000001080001"], 0xb0}, 0x1, 0x0, 0x0, 0x40}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r1, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20044892}, 0x4040050) sendmsg$IPCTNL_MSG_CT_GET_DYING(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)={0x14, 0x6, 0x1, 0x301, 0x0, 0x0, {0xa, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x2404c031}, 0x20000000) 50.29302235s ago: executing program 4 (id=1209): syz_emit_ethernet(0x3e, &(0x7f00000002c0)=ANY=[], 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', 0x1}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000002c0)="27030200dc0f14000e00203c0024", 0xe}], 0x1}, 0x4005) write$tun(r0, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x27, 0x0, 0x27}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0xfd5e, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffff20, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x700, 0x0, 0x18, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2, 0xffffff07, 0xffc1}, @generic={0x0, 0x2, "d588380003c1"}]}}}}}}, 0xfd6c) 50.257992493s ago: executing program 2 (id=1210): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000001540)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000001580), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000015c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000001600)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001740)={&(0x7f0000000400)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {}, {0x1, 0xb}, {0x4, 0xffe0}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x0, 0x583e}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x240408a0}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000001800)={'syzkaller0\x00', @multicast}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000001840), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f0000001880)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f0000001900)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) 50.235869134s ago: executing program 4 (id=1211): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000440)={'dummy0\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x2048c4, &(0x7f00000001c0)={[{@shortname_win95}, {@uni_xlateno}, {@fat=@nfs}, {@utf8}, {@fat=@usefree}, {@utf8no}, {@shortname_win95}, {@numtail}, {@uni_xlateno}, {@shortname_win95}, {@fat=@quiet}, {@rodir}, {@fat=@flush}]}, 0x0, 0x2c7, &(0x7f0000000540)="$eJzs3E1rE10UwPHTpG3SljZZlAeeBx486EY3Qxs/QZAWxIBSG1EXwtRONGTMhJkYiYjtzq1fwk1x6UpB/QLduHMvbooguOlCHMnLtGM6raFv0zb/H5S5vWfOzB3uTDlzobNx++WjSskzSmZdEmmVhMiqbIpkW62uoe420W6PStiqXJr48fn/m3fuXssXCnMLqvP5xcs5VZ069/7Js9fnP9Ynbr2ZepeS9ey9je+5L+v/rP+78WsxOLojYuqS49TNJdvS5bJXMVRv2JbpWVquepZbV1PdIF6ynVqtqWZ1eXK85lqep2a1qRWrqXVH625TzQdmuaqGYejkuAya5J5R/9XOvuLawoKZP7oR4ZiNRXW6bt5MRgaLa8cxKAAAcLLEVf8/LHta9rTqtOr7Per/hITjf6n/RQa6/t+v2u6hyHoSp0ur/m89DYl0b4T6HwAAAAAAAAAAAAAAAAAAAACA02DT9zO+72eCbfCTEpG0iAS/75KeOObh4pAdcP5xyoX+cS8tYr9oFBvFzrYTz5ekLLZYMjMi8rN9P7SkfL/Tnr9amJvRtqx8sFe6+SuNYlJSQX4gu5Xvh/NnO/kazl+RERkPnz8nGZmOzs9F5DeKo3Lxgp/qntkSQzLy6b44Ysty+77ezn8+q3rleqEnf6y9HwAAAAAAZ4GhW3a8v7fjhgZrfD3xTuf2+oBkQusDfsT6QM/79bD8NxzfdQMAAAAAMEi8UamYtm25XvPpWW8EH7M9lAOKxH056X53HhaRbs/bkzIX/TQSItIbGtnRE91IHmyWv4n8+VxMxz7d+274ya179evjzhPQT3qcf5UAAAAAHIWg6B+KeyAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAywfr8iFuy/n4+QBbmp2K4SAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOBl+BwAA//+KNRQm") mkdirat(0xffffffffffffff9c, &(0x7f0000002b00)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000002b40)='./sys\x00', &(0x7f0000002b80)='sysfs\x00', 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000840)='mounts\x00') mount$tmpfs(0x0, &(0x7f0000000880)='./file0\x00', 0x0, 0x104000, 0x0) mount$bind(&(0x7f00000008c0)='./file0\x00', &(0x7f0000000900)='./file0\x00', 0x0, 0x1333404, 0x0) mount$bind(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980)='./file0\x00', 0x0, 0x93085, 0x0) mount$bind(&(0x7f00000009c0)='.\x00', &(0x7f0000000a00)='./file0\x00', 0x0, 0x1005848, 0x0) read$FUSE(r1, &(0x7f0000000a40)={0x2020}, 0x2020) 50.185853849s ago: executing program 4 (id=1212): socket(0x6, 0x6, 0x10) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$inet6_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f0000000180)=0x2, 0x4) bind$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0xe26, 0x0, @dev={0xfe, 0x80, '\x00', 0xb}, 0x8}, 0x1c) syz_emit_ethernet(0x47, &(0x7f00000003c0)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaaaa86dd6001070000111100fc010000000000000000000000000000ff02000000000000000000000000000100000e0f00119078172c046f6aef8d2f4f"], 0x0) setns(0xc9, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'vxcan1\x00', 0x0}) sendmsg$can_raw(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000480)={0x1d, r2}, 0x10, &(0x7f0000000540)={&(0x7f00000004c0)=@can={{0x3, 0x0, 0x0, 0x1}, 0x2, 0x0, 0x0, 0x0, "def3d65a2ce54567"}, 0x10}, 0x1, 0x0, 0x0, 0x4000080}, 0x20000850) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x1}) ioctl$TUNSETLINK(r1, 0x400454cd, 0x10f) r3 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r4, &(0x7f0000000100), 0x12) listen(r4, 0x1) r5 = socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000600)={'wg2\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000800)=ANY=[@ANYBLOB="380000005500e50226bd70000100000007000000", @ANYRES32=r6, @ANYBLOB="2000010059134ae923dbf0b2c400d148c8f6f151ec95eb1650bb2ef0767247ab85902171f27288ed88e12d5ce53f8b0fa1148e5db779824e8cc9d12fb44211c00b1906c5d6861b959cdf6e770097a0242f0c82d8c027566ad5801c076eced61e422213f3", @ANYRES32=r6, @ANYBLOB="000000f200000000000000000000000000e942449bc19b0cc3ad28a5e820b1bdb7795ad4d002f24ccad9010d859a0e65a088d8c160ee3fae322d3c0690b2ccedcba74a3f2f2a62f0f1bc0938dca4988ee8a00edc3f4a7c5fdbfd5805be33bbf11456658475782d431c3a5e3c0d527149e21e2deb0bee58105f12c879d227d75663b54814a7662984568c0f91fa41086fbd166bf6bc1c208178e39eef4d9b5e0d9a884f3385b2e05b36a3d072bb4184152090229d5b9de523ea2a9b64f32aef4ea720ab65201ad94ddb17ac1436a36b470454"], 0x38}, 0x1, 0x0, 0x0, 0x2000c844}, 0x20000110) write$tun(r1, &(0x7f00000006c0)=ANY=[@ANYBLOB="000008050000010b007e", @ANYBLOB="fd4ab6dc750f5ec9b1289c37c54d0d3bd0213f5b821290df168cb6598f3930c658db0f1e830fc81ec50dee7813a6df831985b366c94b49a1c7d45a02cac6cc50d069e421677b8dfd0a7f9084290fd6dd204f718823357a4a3877b8285a45024cf0012c64740519c473bea4e97ec94a090c90ed"], 0x97) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="b702000002000000732ac0ff10000000180203000a0000010000000000000000180200000a0000020000000000000000bfa200000000000007020000c0ffffffb703000040000000b70400008102000085000000450000009500000000000000"], &(0x7f0000000380)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close_range(r7, 0xffffffffffffffff, 0x0) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffbf}, 0x6) setpgid(0x0, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBTYPE(r8, 0x4b44, &(0x7f00000005c0)) write(r0, &(0x7f0000000200)="05000000010000", 0x7) 50.166279993s ago: executing program 2 (id=1213): ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000140)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x8031, 0xffffffffffffffff, 0x3c441000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000001c0)=@abs={0x0, 0x0, 0xfffffffd}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000240), 0x651, 0x0) ioctl(0xffffffffffffffff, 0x40946400, 0x0) recvmmsg(r1, &(0x7f0000000280), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000002c0)=0x6) r3 = socket(0x2b, 0x1, 0x1) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x400300, 0x10) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r4, 0x800c6613, &(0x7f0000000380)=@v1={0x0, @adiantum, 0x1, @desc2}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000300)={@private0, 0x8000000, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000340)={@loopback={0x600}, 0x8000000, 0x0, 0xff, 0x0, 0x4}, 0x20) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./sys\x00', 0x1ff) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) pwrite64(r5, &(0x7f0000000240)='!', 0x1, 0x2cf2) read$FUSE(r5, 0x0, 0x0) 49.762449124s ago: executing program 32 (id=1215): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000740), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x24, r3, 0x1, 0x70bd2b, 0x1000, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x3}, @NBD_ATTR_SOCKETS={0x4}]}, 0x24}}, 0x400400c) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000880)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="63812bbd7000fcdbdf2503000000080001", @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x440c0}, 0x40040) 49.675716532s ago: executing program 4 (id=1219): r0 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r3, &(0x7f0000003fc0)={0x0, 0x0, &(0x7f0000004000)={0x0, 0xf4}, 0x1, 0x0, 0x0, 0xc001}, 0x4000000) getsockname$packet(r3, &(0x7f0000004040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000004080)=0x14) sendmsg$nl_route(r2, &(0x7f00000040c0)={0x0, 0x0, &(0x7f0000004100)={&(0x7f0000004140)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000004180)={0x0, 0xe12, &(0x7f00000041c0)={&(0x7f0000004200)=ANY=[@ANYBLOB="5400000010001ffffdffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000804003002c0012800b00010067726574617000001c00028008000700e000000108000100", @ANYRES32=r4, @ANYBLOB="050008000300000008000a00", @ANYRES32=r4], 0x54}, 0x1, 0x0, 0x0, 0x81}, 0x804) 49.637734328s ago: executing program 33 (id=1219): r0 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r3, &(0x7f0000003fc0)={0x0, 0x0, &(0x7f0000004000)={0x0, 0xf4}, 0x1, 0x0, 0x0, 0xc001}, 0x4000000) getsockname$packet(r3, &(0x7f0000004040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000004080)=0x14) sendmsg$nl_route(r2, &(0x7f00000040c0)={0x0, 0x0, &(0x7f0000004100)={&(0x7f0000004140)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000004180)={0x0, 0xe12, &(0x7f00000041c0)={&(0x7f0000004200)=ANY=[@ANYBLOB="5400000010001ffffdffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000804003002c0012800b00010067726574617000001c00028008000700e000000108000100", @ANYRES32=r4, @ANYBLOB="050008000300000008000a00", @ANYRES32=r4], 0x54}, 0x1, 0x0, 0x0, 0x81}, 0x804) 49.277909988s ago: executing program 2 (id=1228): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@ipv4={'\x00', '\xff\xff', @empty}, 0x0, 0x0, 0x0, 0x8e4, 0xa, 0x0, 0x0, 0xd, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xffeffffffffffffe}, {0x0, 0x2000000000000, 0x0, 0x100000000000000}, 0x0, 0x0, 0x1, 0x0, 0x2}, {{@in6=@ipv4={'\x00', '\xff\xff', @loopback}, 0x0, 0x32}, 0x0, @in=@broadcast, 0x10000, 0x0, 0x2, 0xb7, 0xc4, 0xfffffffe}}, 0xe8) sendmmsg(r0, &(0x7f00000003c0), 0x800001d, 0x1c) r1 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000000c0)={'netdevsim0\x00', &(0x7f0000000f00)=@ethtool_cmd={0x29, 0x10, 0x5, 0x9, 0x6a, 0xa8, 0x20, 0x7, 0x0, 0x5, 0xfffffff8, 0x6, 0x6, 0x81, 0x6, 0x8, [0xf, 0x7]}}) sendmsg$OSF_MSG_REMOVE(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[], 0x268}, 0x1, 0x0, 0x0, 0x20044080}, 0x44) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) socket$inet6(0xa, 0x3, 0xff) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x200280d0}, 0x40) sendmsg$NFT_BATCH(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000e80)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_DELSET={0x2c, 0xb, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x9}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}]}, @NFT_MSG_DELSET={0x2c, 0xb, 0xa, 0x401, 0x0, 0x0, {0x92258420943190a, 0x0, 0x2}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x2}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x80}, 0x1, 0x0, 0x0, 0x40091}, 0x40) 49.14797906s ago: executing program 2 (id=1229): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000002c40)=ANY=[@ANYBLOB="4c0000001000ffff2abd7000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="f8a65f05218a04001c00128009000100766c616e000000000c0002800600010003000000080004003041000008000500", @ANYRES32, @ANYBLOB="68eff85ba4fa48089b7c8f31bb8592173ea54ab258bdbf94944f"], 0x4c}, 0x1, 0x200000000000000, 0x0, 0xd1}, 0x2000c000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x2048c4, &(0x7f00000001c0)={[{@shortname_win95}, {@uni_xlateno}, {@fat=@nfs}, {@utf8}, {@fat=@usefree}, {@utf8no}, {@shortname_win95}, {@numtail}, {@uni_xlateno}, {@shortname_win95}, {@fat=@quiet}, {@rodir}, {@fat=@flush}]}, 0x0, 0x2c7, &(0x7f0000000540)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000002b00)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000002b40)='./sys\x00', &(0x7f0000002b80)='sysfs\x00', 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000840)='mounts\x00') mount$tmpfs(0x0, &(0x7f0000000880)='./file0\x00', 0x0, 0x104000, 0x0) mount$bind(&(0x7f00000008c0)='./file0\x00', &(0x7f0000000900)='./file0\x00', 0x0, 0x1333404, 0x0) mount$bind(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980)='./file0\x00', 0x0, 0x93085, 0x0) mount$bind(&(0x7f00000009c0)='.\x00', &(0x7f0000000a00)='./file0\x00', 0x0, 0x1005848, 0x0) read$FUSE(r1, &(0x7f0000000a40)={0x2020}, 0x2020) 48.979693953s ago: executing program 2 (id=1231): r0 = socket$l2tp6(0xa, 0x2, 0x73) connect(r0, &(0x7f0000000140)=@generic={0x0, "a580f1724e779971ec8449b37f662c740dd6f32f4192451be94d20d79c1885f5affd021e978c1ba6d87d9bb35f8e73bbb763abcc60fba685174814fbdec7624b87f7ddc441cc67fdf1cb839bea4a7b3f9a0fc44711bdd6913b7381dea622ac79bc252f10f96b9b201e9e4a736d999a2cf671690e4a1b12da522173e13a5f"}, 0x80) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001140)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000011c0)=@base={0x11, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000001240)={0x6, 0x15, &(0x7f0000001300)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x86}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f00000013c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001400)={r3, 0x2000012, 0xe, 0x0, &(0x7f0000001480)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) syz_emit_ethernet(0x3e, &(0x7f0000000100)=ANY=[@ANYBLOB="bbbbbbbbbbbb0100000000c986dd68d82b0600080000fc0200000000ff0200000000000000000000000000012900000000000000"], 0x0) r4 = socket(0x28, 0x5, 0x0) setsockopt$sock_linger(r4, 0x1, 0x3c, &(0x7f0000000040)={0x1, 0x5}, 0x8) sendmmsg(r4, 0x0, 0x0, 0x24008094) socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x3, 0x0) socket$igmp(0x2, 0x3, 0x2) sendto(0xffffffffffffffff, &(0x7f00000015c0)="340000001a000100010000000000000002200000000000000000", 0x1a, 0x0, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000001600)={0x80000000, 0x0, 0xfffffffc}, 0x10) write(r5, &(0x7f0000001640)="240000001a005f0214f9f407000982001f000000fe0000000000000008000f00fd000000", 0x24) syz_genetlink_get_family_id$devlink(&(0x7f0000001680), r5) sendmsg$OSF_MSG_ADD(r4, &(0x7f0000001100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000008}, 0xc, &(0x7f00000010c0)={&(0x7f0000000280)={0xe0c, 0x0, 0x5, 0x5, 0x0, 0x0, {0xa, 0x0, 0x6}, [{{0x254, 0x1, {{0x2, 0x7}, 0x7, 0xdb, 0xe5, 0x7f, 0xc, 'syz0\x00', "c22afee8a6060bdf9ad01f38f0c518e7063c739b8f4bfd89edc0ca190f0ab2e1", "7700ee995cd421a265d6e1eb711c114400bffd78abacb29ae53eabbe7700f539", [{0x7fff, 0x1, {0x3, 0x7f98c382}}, {0x9, 0x5, {0x3, 0xb}}, {0x305b, 0x1, {0x0, 0x4}}, {0x3, 0xb03, {0x3, 0xf}}, {0x8, 0xf1d, {0x0, 0x200}}, {0x3, 0xc, {0x3, 0x8}}, {0x0, 0xb, {0x2, 0x10000}}, {0x1, 0x7fff, {0x3, 0xf57}}, {0x41, 0x1000, {0x0, 0x8}}, {0x0, 0x6, {0x0, 0x100b}}, {0x2e29, 0x3, {0x0, 0x9}}, {0x5, 0x3, {0x0, 0x800}}, {0x101, 0xfff, {0x0, 0x1}}, {0x0, 0x1000, {0x3, 0x6}}, {0xc, 0x401, {0x3, 0x1}}, {0x8, 0xf04b, {0x3, 0x6}}, {0x9, 0x941c, {0x1, 0x9}}, {0x7, 0x1ff, {0x3}}, {0xa, 0x6, {0x3, 0xc92}}, {0xc3, 0x2400, {0x3, 0x6}}, {0x2, 0x8, {0x3, 0x5}}, {0x24f, 0x4, {0x2, 0xfffffffa}}, {0x7fe5, 0x5, {0x1, 0xc}}, {0x4, 0x5, {0x2, 0x74a1}}, {0x86, 0x2, {0x3, 0x9}}, {0x1, 0x8001, {0x1}}, {0x0, 0x0, {0x3, 0xfffffff9}}, {0x7, 0x29, {0x1, 0x5000}}, {0x3, 0x4, {0x3, 0x888}}, {0x2, 0x5, {0x3, 0x3}}, {0x4, 0x3, {0x1, 0x4}}, {0x6, 0x400, {0x3, 0x8592}}, {0x1, 0x4, {0x2, 0x3}}, {0x5, 0x6, {0x3, 0x1}}, {0x0, 0x9046, {0x0, 0xf12}}, {0x2, 0x7, {0x3, 0xcc}}, {0xffff, 0x528}, {0x3, 0x3, {0x0, 0x8001}}, {0xb, 0x3, {0x1, 0x4}}, {0x23f2, 0x38, {0x0, 0x9}}]}}}, {{0x254, 0x1, {{0x0, 0xff}, 0x8, 0x4, 0x0, 0x0, 0x3, 'syz1\x00', "65e713adfa8922f1536e5c327f321b110b2bb6a11f73d99ce3cb26c4326f7900", "5f487d705d74349ba5331e463a1dc4dc064398cf89bcc13d1f19fcbd75f69247", [{0x0, 0x4, {0x0, 0x400}}, {0x0, 0x4, {0x0, 0x3}}, {0x7403, 0xffff, {0x1, 0x9}}, {0x4, 0x519f, {0x2, 0x7}}, {0x9, 0x5, {0x0, 0xa8}}, {0xfff, 0xb, {0x2, 0x1b}}, {0x5, 0x9, {0x2}}, {0x6, 0x2, {0x2, 0x6}}, {0x4, 0x6d1e, {0x2, 0x9}}, {0x90, 0x1, {0x1, 0x9}}, {0x4, 0x6, {0x0, 0x1}}, {0xfffb, 0x6}, {0x101, 0x7, {0x3, 0x2}}, {0x5, 0x933, {0x2, 0x8}}, {0xc, 0x800, {0x2, 0x80}}, {0x8001, 0x0, {0x0, 0x4}}, {0x5, 0x1, {0x3, 0x6}}, {0x3ff, 0x4, {0x3, 0xfffff149}}, {0x7, 0x5370, {0x0, 0x6}}, {0x7, 0xf08f, {0x0, 0xed}}, {0x3, 0x9, {0x3, 0x7}}, {0xfff7, 0x4, {0x2, 0x1}}, {0xc, 0x0, {0x1, 0x82817}}, {0x7, 0xb1, {0x1, 0xfffffff9}}, {0xc, 0x9f9, {0x3, 0x8}}, {0x6, 0x5}, {0x0, 0xf, {0x0, 0x7}}, {0x1, 0x3, {0x1, 0x2}}, {0x9, 0x80, {0x1, 0x6}}, {0x8, 0x7, {0x0, 0x400}}, {0x9, 0x3, {0x1, 0x1000}}, {0xed, 0x8001, {0x0, 0x6}}, {0x1, 0x3, {0x3, 0x4}}, {0xb, 0x9, {0x2}}, {0x4331, 0x9, {0x0, 0x9158}}, {0x1, 0x5, {0x1, 0x4}}, {0x4, 0xfffa, {0x2, 0x2}}, {0xc0c, 0x2, {0x2, 0x3}}, {0x815, 0xd, {0x3, 0x1}}, {0x905, 0x7, {0x2, 0xe}}]}}}, {{0x254, 0x1, {{0x3, 0x2}, 0x9, 0xf, 0xfb98, 0xb00a, 0x24, 'syz0\x00', "c4d6e0c078b063f444726cb7014b2a217de0158e7d1442eb106a9bef55b42984", "9a1b7ba5aa1162018f5813f3183962498ef562ca8edafbc42e5e1236e0db8fd4", [{0x6, 0x8, {0x0, 0x3}}, {0x7ff, 0x5, {0x0, 0x3}}, {0x6, 0x59, {0x0, 0x8}}, {0x0, 0x284b, {0x1, 0xd}}, {0xd, 0x9, {0x3, 0x9}}, {0xfff4, 0x1ff, {0x1, 0x1a7d}}, {0x8001, 0xfffa, {0x1, 0x4}}, {0x5, 0x3, {0x1, 0x1000}}, {0x7, 0x1, {0x2, 0x7f}}, {0x4, 0x7, {0x3, 0x9}}, {0x1448, 0x8000, {0x1, 0x4}}, {0x0, 0x8001, {0x3, 0x1}}, {0x0, 0x6, {0x0, 0xffffffff}}, {0x8, 0x3, {0x3, 0x6}}, {0x9, 0x2c, {0x0, 0x4}}, {0x0, 0x40, {0x2, 0x5}}, {0x5, 0x5, {0x0, 0x80000001}}, {0x6, 0x6, {0x3, 0x8}}, {0x8, 0x7, {0x3, 0x2}}, {0x1fb2, 0xff, {0x3, 0x6}}, {0x6, 0x1, {0x1, 0x8}}, {0x80, 0xee, {0x1, 0x1}}, {0xfffd, 0xd249, {0x3, 0x16}}, {0x76, 0x3, {0x2, 0x10000}}, {0x7f, 0x1000, {0x0, 0x3}}, {0x5, 0x3, {0x2, 0x5}}, {0x6, 0x3ff, {0x0, 0x5}}, {0x3, 0x1, {0x1, 0x1}}, {0x9, 0x3, {0x3, 0x9}}, {0x10, 0x3, {0x1, 0x4}}, {0x1, 0x7fff, {0x3}}, {0x7ff, 0xa, {0x2, 0x3}}, {0xc9c, 0x1, {0x1, 0x9}}, {0x7a8, 0x6, {0x3, 0x1}}, {0x1ff, 0x5, {0x0, 0xb}}, {0xa, 0x10, {0x3, 0xfffffffc}}, {0x2, 0x4, {0x1, 0x1}}, {0x4, 0x7, {0x5c977c4f816ec7df}}, {0x6, 0x9e, {0x2, 0x80000001}}, {0x0, 0x7, {0x0, 0x3}}]}}}, {{0x254, 0x1, {{0x3, 0x2bb914c}, 0x7, 0x1, 0xfff7, 0x111, 0xe, 'syz0\x00', "85974249f7920e2beea6b8f4677d0011f1876d7e036fad454aa26fd599896853", "768289a294f683f78835412b4774b42134b0bd6ce518dcd5edf00dd4473ee5c8", [{0x1, 0x6, {0x3, 0x5}}, {0x61, 0xa, {0x1, 0x10}}, {0xf1a, 0xe, {0x3, 0xffffffff}}, {0xffff, 0xf, {0x3}}, {0x7, 0x8, {0x3, 0x9}}, {0x100, 0x1, {0x1, 0x40}}, {0xfff9, 0xffff, {0x0, 0x5}}, {0x2, 0x0, {0x3}}, {0x6, 0x4, {0x0, 0x8}}, {0xf8, 0x0, {0x0, 0x4}}, {0x5, 0x9, {0x3, 0x1}}, {0x7, 0x3, {0x1, 0xfffff3b5}}, {0x6, 0x3, {0x3, 0x8b61}}, {0xfffb, 0x4, {0x2, 0x80}}, {0x1, 0xa, {0x3, 0xe}}, {0xfd2, 0x6e, {0x0, 0xdba5}}, {0x7, 0xff, {0x3, 0x7f}}, {0x7ff, 0x4, {0x3, 0x81}}, {0xc, 0x3, {0x2, 0x2bf7}}, {0x5c07, 0x5, {0x2, 0x6}}, {0x9, 0x6, {0x3, 0x5}}, {0xd5f, 0x8, {0x3, 0x5}}, {0x1, 0x80, {0x2, 0xa135}}, {0x8, 0x101, {0x2, 0x86}}, {0x2, 0x6, {0x0, 0x1}}, {0x6, 0x3, {0x1, 0x8}}, {0x400, 0x100, {0x0, 0xfffffffc}}, {0xfb, 0x2, {0x3, 0xffffff6d}}, {0x6, 0x5, {0x0, 0x9}}, {0x2, 0x200, {0x1, 0x4}}, {0x5, 0x9, {0x0, 0x5}}, {0x9, 0x5, {0x1, 0x8}}, {0x6cf, 0x401, {0x1}}, {0x7, 0x9, {0x3, 0x2}}, {0xd, 0x8, {0x0, 0x37}}, {0x8, 0x0, {0x2, 0x6}}, {0x9, 0xc, {0x0, 0x3}}, {0x80, 0x2, {0x2, 0xfcad}}, {0x1, 0x67, {0x1, 0x10000}}, {0x1, 0x5, {0x1, 0x60d9}}]}}}, {{0x254, 0x1, {{0x0, 0x6}, 0x6, 0x1, 0x23, 0x8, 0xa, 'syz1\x00', "cd8289c0d5b1c8a0c10c7b17afbf8ebc3fb07cf7c25a7accbe64b68d8e774ac9", "5cb0ede56781cf2e8678b588325deff4439ffdc3dccb311e849a70e90db1f5e1", [{0x3ff, 0x364f, {0x0, 0x8}}, {0x0, 0xfff, {0x0, 0x8}}, {0x6, 0x8000, {0x2, 0x1ff}}, {0xa992, 0x91d, {0x1, 0x6}}, {0x1, 0x7, {0x1, 0x60a}}, {0x1, 0x5c3d, {0x2, 0x10}}, {0xfffb, 0x2, {0x0, 0x6}}, {0x6, 0x8, {0x2, 0x6}}, {0x5, 0x2, {0x3, 0x9}}, {0x7, 0x3ff, {0x2}}, {0x0, 0xce2, {0x1}}, {0x9a5, 0xf9e, {0x2, 0x4}}, {0xfff, 0x401, {0x1, 0x2}}, {0x4, 0x5, {0x0, 0xb}}, {0x400, 0x100, {0x0, 0x3ff}}, {0x2, 0xd5e2, {0x1, 0x7}}, {0xfffd, 0x6, {0x2, 0x7ab7}}, {0xbf, 0x0, {0x3, 0x4}}, {0x8000, 0x3d, {0x0, 0x4}}, {0x4, 0x3, {0x1, 0x40}}, {0x7, 0x885, {0x0, 0x11}}, {0x8, 0x9, {0x1, 0x8}}, {0x4, 0x4, {0x1, 0x1}}, {0x3ff, 0x35, {0x1, 0x7}}, {0x6, 0x1000, {0x2, 0x2}}, {0x9, 0x5, {0x3, 0x1}}, {0x0, 0x4, {0x0, 0x7fffffff}}, {0x77, 0x2fa, {0x44fb42572850a7cd, 0x6}}, {0x6e, 0xfff, {0x1, 0x9}}, {0x9, 0x100, {0x1, 0x8001}}, {0x3, 0x3, {0x2, 0x1}}, {0xff74, 0x5, {0x2, 0x3}}, {0xd3d5, 0x9, {0x3, 0x1ff}}, {0xfffc, 0x7, {0x2, 0x7fffffff}}, {0x2, 0x7, {0x2}}, {0xfff, 0x400, {0x1, 0x10000}}, {0x4, 0x2, {0x2, 0xc}}, {0xa, 0x8, {0x1, 0x4}}, {0xf, 0x3, {0x3, 0xff72}}, {0x2, 0x2, {0x0, 0x400}}]}}}, {{0x254, 0x1, {{0x1, 0x7}, 0x4, 0x7f, 0x7, 0x81, 0x5, 'syz0\x00', "151ac66e18048f011bb08ab4e81fc53a2a8b4aba197213f6797e2bb51ce17894", "2af20b2004d9d061c2e146c2ab55bf913bdb4a3ab453de9b612f51bbd10a1ece", [{0xfb, 0x7, {0x3, 0x4}}, {0x1000, 0x0, {0x2, 0x939}}, {0x5, 0xfff, {0x0, 0x9}}, {0xab18, 0xc948, {0x2, 0xdc9}}, {0x1, 0x7, {0x2, 0x5}}, {0xa206, 0x9, {0x2}}, {0x2, 0x9, {0x3}}, {0x8000, 0x3ba, {0x2, 0x7}}, {0x6, 0xd, {0x0, 0x2}}, {0x4f, 0x7, {0x2, 0x6}}, {0x1, 0xff9e, {0x0, 0x3}}, {0x7, 0x5, {0x1, 0x4}}, {0x3, 0x101, {0x3, 0x4}}, {0x9, 0x1000, {0x0, 0x5}}, {0x5, 0x4, {0x2, 0x7}}, {0xfffe, 0x8, {0x0, 0x3}}, {0xfffd, 0x1, {0x2, 0x2}}, {0x5, 0x9, {0x0, 0x2}}, {0x9, 0x8000, {0x2, 0x7}}, {0x5, 0x7fff, {0x0, 0x372}}, {0x0, 0x9, {0x0, 0x2}}, {0xc4ce, 0x101, {0x3, 0x7948fb5}}, {0x4, 0x3, {0x0, 0x87c000}}, {0xc, 0x4, {0x3, 0x7ff}}, {0xfe00, 0x21, {0x0, 0x6}}, {0x10, 0x9, {0x2, 0x1}}, {0x3, 0xffff, {0x0, 0x86c8}}, {0x5, 0x8000, {0x0, 0xffffffff}}, {0xa, 0xe3, {0x1, 0x6}}, {0x7, 0x6, {0x1, 0x8}}, {0x0, 0x5b05, {0x3, 0x10000}}, {0x4, 0xe309}, {0x7f, 0x9f35, {0x0, 0xe}}, {0x3, 0x6, {0x2, 0x6}}, {0x1, 0x6, {0x0, 0x7ff}}, {0xff00, 0x8, {0x2, 0x29}}, {0x2, 0x4, {0x3, 0x10000}}, {0xd4, 0x54, {0x0, 0x8}}, {0x687, 0x8, {0x2, 0x8}}, {0x1, 0xffff, {0x1, 0x80000000}}]}}}]}, 0xe0c}, 0x1, 0x0, 0x0, 0x48004}, 0x20000014) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r6, &(0x7f00000001c0)={0xa, 0x4e23, 0x6, @loopback, 0x3}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r6, 0x84, 0xb, &(0x7f0000000240)={0x5, 0x5, 0x6, 0x5, 0xff, 0x1, 0xea, 0xfa, 0x2, 0x4, 0x81, 0x8, 0x40, 0x1c}, 0xe) sendto$inet6(r6, &(0x7f00000014c0)="1a", 0x34000, 0x0, &(0x7f0000001500)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r6, 0x1) close(r6) 48.581078967s ago: executing program 2 (id=1232): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x4040850) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0500000005000000fd0900008500000041000000537cba5222ef88c037cd803da33aa5c4a26f92d560762d063ceeb44147aab5fcc671ed130df9e3afe2ca64105fd5dcefb30a506df91215c5806318e1cf39b42ded9592b99c0488531ba7236a3dee51e0cbe74c023ede0e52705e8a385bedff9c81095beeda7f1517509fe871fd7d4932670a3ec8e34efb27a1183ac312c863", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000240), 0x800, r1}, 0x38) r2 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r2, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000240)=0x6, 0x4) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000280), 0x4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="b00000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa1400040000000000000000000000ffff0a0101020c00028005000100000000003c0002802c00018014000300fc02fa0000000000000000000000000014000400fe8000000000000000000000000000aa0c000280050001000000000008000740000000001c000f8008000340000000060800024000000001080001"], 0xb0}, 0x1, 0x0, 0x0, 0x40}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x14, 0x2, 0x1, 0x5, 0x0, 0x0, {0x3, 0x0, 0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x20044892}, 0x4040050) sendmsg$IPCTNL_MSG_CT_GET_DYING(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)={0x14, 0x6, 0x1, 0x301, 0x0, 0x0, {0xa, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x2404c031}, 0x20000000) 48.468237426s ago: executing program 34 (id=1232): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x4040850) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0500000005000000fd0900008500000041000000537cba5222ef88c037cd803da33aa5c4a26f92d560762d063ceeb44147aab5fcc671ed130df9e3afe2ca64105fd5dcefb30a506df91215c5806318e1cf39b42ded9592b99c0488531ba7236a3dee51e0cbe74c023ede0e52705e8a385bedff9c81095beeda7f1517509fe871fd7d4932670a3ec8e34efb27a1183ac312c863", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000240), 0x800, r1}, 0x38) r2 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r2, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000240)=0x6, 0x4) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000280), 0x4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="b00000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa1400040000000000000000000000ffff0a0101020c00028005000100000000003c0002802c00018014000300fc02fa0000000000000000000000000014000400fe8000000000000000000000000000aa0c000280050001000000000008000740000000001c000f8008000340000000060800024000000001080001"], 0xb0}, 0x1, 0x0, 0x0, 0x40}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x14, 0x2, 0x1, 0x5, 0x0, 0x0, {0x3, 0x0, 0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x20044892}, 0x4040050) sendmsg$IPCTNL_MSG_CT_GET_DYING(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)={0x14, 0x6, 0x1, 0x301, 0x0, 0x0, {0xa, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x2404c031}, 0x20000000) 46.659010108s ago: executing program 3 (id=1243): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000ac0)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1002}) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c00000010000500"/20, @ANYRES32=0x0, @ANYBLOB="01000000010000001400030073797a6b616c6c65723000000000000008000a00", @ANYRES32=r3], 0x3c}}, 0x0) write(r0, &(0x7f0000000400)="ffffffffffff0011223344554305000f32000000ffff00112233445500112233445500ff9000", 0xfdef) 46.457728935s ago: executing program 3 (id=1244): close(0x3) 46.436100898s ago: executing program 3 (id=1245): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000040)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000080), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x40040) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) write$nci(r0, &(0x7f0000000240)=@NCI_OP_NFCEE_DISCOVER_NTF={0x2, 0x1, 0x3, 0x0, 0x5, {0x1, 0x9, "189bcc"}}, 0x8) write$nci(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="500404"], 0x7) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000340)={0x0, 0xc, &(0x7f0000000380)={&(0x7f00000003c0)={0x24, r3, 0x1, 0x70bd28, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffff3d}]}, 0x24}, 0x1, 0x0, 0x0, 0x4851}, 0x0) write$nci(r0, &(0x7f0000000440)=@NCI_OP_CORE_SET_CONFIG_RSP={0x0, 0x0, 0x2, 0x2, 0xf, {0x1, 0xd, "299506ad626d94209abe7953d5"}}, 0x12) 46.13461884s ago: executing program 3 (id=1247): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000440)={'dummy0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000002c40)=ANY=[@ANYBLOB="4c0000001000ffff2abd7000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="f8a65f05218a04001c00128009000100766c616e000000000c0002800600010003000000080004003041000008000500", @ANYRES32=r1, @ANYBLOB="68eff85ba4fa48089b7c8f31bb8592173ea54ab258bdbf94944f"], 0x4c}, 0x1, 0x200000000000000, 0x0, 0xd1}, 0x2000c000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x2048c4, &(0x7f00000001c0)={[{@shortname_win95}, {@uni_xlateno}, {@fat=@nfs}, {@utf8}, {@fat=@usefree}, {@utf8no}, {@shortname_win95}, {@numtail}, {@uni_xlateno}, {@shortname_win95}, {@fat=@quiet}, {@rodir}, {@fat=@flush}]}, 0x0, 0x2c7, &(0x7f0000000540)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000002b00)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000002b40)='./sys\x00', &(0x7f0000002b80)='sysfs\x00', 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000840)='mounts\x00') mount$tmpfs(0x0, &(0x7f0000000880)='./file0\x00', 0x0, 0x104000, 0x0) mount$bind(&(0x7f00000008c0)='./file0\x00', &(0x7f0000000900)='./file0\x00', 0x0, 0x1333404, 0x0) mount$bind(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980)='./file0\x00', 0x0, 0x93085, 0x0) mount$bind(&(0x7f00000009c0)='.\x00', &(0x7f0000000a00)='./file0\x00', 0x0, 0x1005848, 0x0) read$FUSE(r2, &(0x7f0000000a40)={0x2020}, 0x2020) 46.038209413s ago: executing program 3 (id=1249): bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000640), &(0x7f0000000740), 0x20075}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x57, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r0, 0x2000000, 0xe, 0x0, &(0x7f0000000600)="c9f7b98600"/14, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 44.93909409s ago: executing program 3 (id=1261): socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)) socket$kcm(0xa, 0x3, 0x87) socket$kcm(0x10, 0x2, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000014c0), 0xe8}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xc, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r3, 0x86dd, 0x12, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee68888a8", 0x0, 0xaded, 0x4000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 44.935565567s ago: executing program 35 (id=1261): socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)) socket$kcm(0xa, 0x3, 0x87) socket$kcm(0x10, 0x2, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000014c0), 0xe8}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xc, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r3, 0x86dd, 0x12, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee68888a8", 0x0, 0xaded, 0x4000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 17.33907995s ago: executing program 8 (id=1613): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xa, 0x1, 0x3f, 0x40, 0x42}, 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0}, 0x38) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[], 0x68}}, 0x0) 17.315232841s ago: executing program 8 (id=1615): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@newtfilter={0x80, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0xb, 0x7}, {0xfff1, 0xffff}, {0x300}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4c, 0x2, [@TCA_MATCHALL_ACT={0x48, 0x2, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x0, 0x0, 0x6}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x80}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000002c0)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000840)={@val={0x0, 0x86dd}, @val={0x0, 0x0, 0x11, 0x800}, @mpls={[], @ipv4=@esp={{0x5, 0x4, 0x1, 0x9, 0x3b0, 0x64, 0x0, 0x1, 0x32, 0x0, @multicast1, @loopback}, {0x4d6, 0x2, @cc={0x1, 0x0, 0xfff, 0x8001, 0x1000, 0xc9, 0x2, [@runt="7ae85aa02cc9cae86a11163a634f038ecd6753162a1dd5d70c07b4048c", @ipv6=@esp={0x2, 0x6, 'Vq/', 0x330, 0x32, 0x1, @loopback, @local, {[@srh={0xff, 0x0, 0x4, 0x0, 0xa, 0x38, 0x7}, @hopopts={0x0, 0x0, '\x00', [@jumbo={0xc2, 0x4, 0x4}]}], {0x4d4, 0x800, @cc={0x1, 0x0, 0x7f, 0x77c1, 0x3, 0x4, 0x80000000, [@ipv4=@tcp={{0x5, 0x4, 0x1, 0x6, 0x2ee, 0x66, 0x0, 0x9, 0x6, 0x0, @dev={0xac, 0x14, 0x14, 0x2d}, @local}, {{0x4e20, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x40, 0x6, 0x0, 0x2}, {"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"}}}]}, "d639077d9610f389", 0x8}}}]}, "0d6ce93d81", 0x5}}}}, 0x3be) 17.186558237s ago: executing program 8 (id=1618): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000680), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000001940)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000001980), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000001a00)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f0000001a80)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0xae0, 0x6361, 0x5, 0xffffffff, 0x3}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x4, 0x7fffffffffffffff, 0x0, 0x1000, 0xc, 0x215}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000001b00)={'syzkaller0\x00', @multicast}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000001b40), r3) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f0000001b80)={0x0, 0x0, &(0x7f0000001bc0)={&(0x7f0000001c00)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000001c40), 0x100, 0x0) close(r5) r6 = socket$unix(0x1, 0x5, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000001c80)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000001cc0)={0x0, 0x0, &(0x7f0000001d00)={&(0x7f0000001d40)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r9, {0x0, 0xd}, {0xffff, 0xb}, {0x2, 0xffe0}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0xc6, 0x9, 0x5}}}}]}, 0x44}}, 0x4890) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000001dc0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001e40)={&(0x7f0000001e80)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0xb}, {0xffff, 0xffff}, {0xffff, 0xfffc}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0x7, 0x8005, 0x5, 0xfffffdff, 0x4006}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x9, 0x9, 0x5, 0x96, 0xfff, 0xc}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x240080c1}, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8922, &(0x7f0000001f00)={'syzkaller0\x00', @random="2b0100004ec6"}) 16.891241987s ago: executing program 8 (id=1621): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000001400)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000001480)={&(0x7f00000014c0)=ANY=[@ANYBLOB="440000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000400000140012800c0001006d6163766c616e000400028008000500", @ANYRES32=r2, @ANYBLOB="080004007f23"], 0x44}, 0x1, 0x0, 0x0, 0x20000080}, 0x20000090) r3 = socket$alg(0x26, 0x5, 0x0) r4 = syz_create_resource$binfmt(&(0x7f0000000000)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r4, 0x41, 0x1ff) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x19, 0x4, 0x8, 0x8}, 0x50) r7 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x3, 0x1, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f00000001c0)='./file0\x00', 0x200008, &(0x7f0000000200)=ANY=[@ANYRES8=r7, @ANYRES32=r7, @ANYRESHEX=r7], 0x1, 0x392, &(0x7f0000000240)="$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") r8 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_opts(r8, 0x0, 0xf, &(0x7f0000001540)="e9", 0x1) r9 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r10, &(0x7f0000000640)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x810}}, {{&(0x7f00000006c0)=@file={0x1, './dev/ttyS0\x00'}, 0x6e, 0x0}}], 0x2, 0x604e054) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x6, 0xd, &(0x7f0000000800)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x33}}, @call={0x85, 0x0, 0x0, 0x5}]}, &(0x7f0000000880)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000008c0)={r11}, 0xc) syz_mount_image$ext4(&(0x7f0000000a80)='ext4\x00', &(0x7f0000000ac0)='./file1\x00', 0x210000, &(0x7f0000000b00), 0xfc, 0x56f, &(0x7f0000000b40)="$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") bpf$PROG_LOAD(0x5, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x19, &(0x7f00000010c0)=""/219, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) chdir(&(0x7f00000011c0)='./file0\x00') symlinkat(&(0x7f0000001200)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000001240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') mount$fuse(0x0, &(0x7f0000000900)='./file0\x00', &(0x7f0000000940), 0x8204, &(0x7f0000000980)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@allow_other}, {}, {@default_permissions}, {@max_read={'max_read', 0x3d, 0x6}}, {}, {@default_permissions}]}}) bind$alg(r3, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des)\x00'}, 0x58) r12 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001340)={0x3, 0x4, 0x4, 0xa, 0x0, r6, 0x3, '\x00', 0x0, r9, 0x1, 0x0, 0x1}, 0x50) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r12, &(0x7f00000013c0)={0x300b}) setsockopt$ALG_SET_KEY(r3, 0x117, 0xffffff1f, 0x0, 0x0) 16.785524571s ago: executing program 8 (id=1623): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x262, &(0x7f0000000000)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "f900f5", 0x22c, 0x6, 0x0, @local, @local, {[@fragment={0x3b, 0x0, 0x7, 0x0, 0x0, 0x2, 0x67}, @srh={0x32, 0x4, 0x4, 0x2, 0xfb, 0x8, 0x1, [@dev={0xfe, 0x80, '\x00', 0x1a}, @private2={0xfc, 0x2, '\x00', 0x1}]}, @dstopts={0x0, 0x2c, '\x00', [@calipso={0x7, 0x10, {0x0, 0x2, 0x40, 0xf, [0xd]}}, @pad1, @pad1, @generic={0xc, 0x9c, "ef7ff50207283789a6cd9bc1e246188c238cf1cea69bbb03bc0b0585b6e82660fe4df29586150fe9a418fb6f97303d93cf49e0699f727375922fc647c4fd422286b14534c1123e6a24f8a35f037b633e5805dfa51c98d71b96278f2eac9b4d5b6bebf460dfe563eab6dea15dcd75fb41a94328dff2cbe36e08a445b8763dbb584c8466cc46f17863a32fb7c93fe0fa6c4710f1bbcbd0eff39aa0d837"}, @generic={0x9, 0xa2, "7608ddafe7d59a96aab053dd3eefb3a767da16371e4b9480892997b4c1aa6d8058d03e195d2e4dd449e5035da817f65427ff3ed1c3b34c6ae3623403d981de8d10bd596d0e28ce5ddc6f32f6df0d1c6369fe60cf17cb86161f0aaa460ed5e265158c6f7e5766da27a3c2ceda606b8a3be972abc6d23094bdfeaed9d0cf1bce81f0893f507de16bce673aac24420e40d3d4c7ba4c19ef54ed37b85aa65311a22ddbd5"}, @jumbo={0xc2, 0x4, 0x1}]}, @fragment={0x40, 0x0, 0x4, 0x1, 0x0, 0x3, 0x68}, @routing={0x6, 0x4, 0x0, 0x4, 0x0, [@mcast1, @remote]}, @routing={0x3c, 0x8, 0x1, 0x4, 0x0, [@remote, @private0={0xfc, 0x0, '\x00', 0x1}, @local, @dev={0xfe, 0x80, '\x00', 0x34}]}], {{0x4, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x7, 0xc2, 0x0, 0x0, 0x0, {[@fastopen={0x1e, 0x4, "823d"}, @eol]}}}}}}}}, 0x0) 16.186037368s ago: executing program 8 (id=1636): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000800}, 0x30004884) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a40), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000001a80)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000001ac0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001b00)={0x0, 0x0, &(0x7f0000001b40)={&(0x7f0000001b80)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) close(0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000001c40)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000001c80)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000001cc0)={0x0, 0x0, &(0x7f0000001d00)={&(0x7f0000001d40)=@newtfilter={0xe8c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r6, {0x1, 0x4}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_matchall={{0xd}, {0xe58, 0x2, [@TCA_MATCHALL_ACT={0xe54, 0x2, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x2, 0x10, 0x6, 0x0, 0x8f}, 0x3, 0x2}, [{0x2, 0x765, 0x800, 0x1, 0x528, 0x3}, {0x9, 0xe237, 0x1, 0x80000003, 0x8, 0x25ad}, {0x1, 0x9, 0x9, 0x2, 0x2, 0x2}, {0x8000, 0xd3, 0x9, 0x2, 0xec, 0x3}, {0x4, 0x9, 0x100, 0xfffffff7, 0x4, 0x7}, {0x5, 0x0, 0xfffffc00, 0x3, 0x5, 0x4}, {0x7, 0x81, 0x5a, 0x2, 0x5, 0x8}, {0xffffff11, 0x5, 0x5, 0x7ff, 0x6, 0x1}, {0x3, 0x6, 0x400, 0x0, 0x5, 0x200}, {0x80, 0x4, 0x61f, 0x1000, 0x5eb, 0xfc}, {0x7, 0x7b9b, 0x5, 0x3, 0x1, 0xb}, {0xeef3, 0x101, 0x9, 0x8, 0x4, 0xb2}, {0x3, 0xf82, 0x81, 0x0, 0xa, 0x4000}, {0x5, 0x101, 0x5, 0x3, 0x20000000, 0xfffffeb0}, {0x400, 0xb, 0x4, 0x7ff, 0x20, 0x3}, {0x1, 0xa, 0x7, 0xd, 0x7, 0x13f9}, {0x7, 0xeedf, 0xffffffff, 0x0, 0x2, 0x7ff}, {0x6, 0x8, 0xc, 0xb9d, 0xfffffff9, 0x8}, {0x5, 0x9, 0x40, 0x8, 0x4, 0x2}, {0x9, 0x58ce, 0x9, 0xc3e1, 0x9, 0xffffffff}, {0x5, 0x160d0ee, 0x3, 0x0, 0x7fff, 0x8}, {0xffffffff, 0xb43a, 0x7, 0x4, 0x6, 0x6}, {0x5, 0x8, 0x2, 0x5, 0x9, 0x8}, {0xfffffbff, 0xdb87, 0x80e, 0x10ba, 0x3, 0x211d}, {0x200, 0x5, 0x4, 0xffffff91, 0x1, 0x7}, {0x40, 0x60b, 0x5, 0xb42d, 0x3241, 0xffffffff}, {0x8001, 0x0, 0x2, 0xc34, 0x6, 0x1}, {0x1, 0x0, 0x5, 0xe, 0x0, 0x3}, {0x8, 0x4, 0x782, 0x7, 0x8, 0xfffffffa}, {0x8, 0x1, 0xc00, 0x3, 0x4, 0x8f24}, {0x8000, 0x0, 0x6e73, 0xa80, 0x6}, {0x80000001, 0x7ff, 0x5, 0x5, 0xe4, 0x5}, {0x8, 0xffff, 0xc, 0x8001, 0xff, 0xfffffffc}, {0x37, 0x4, 0x8, 0x2, 0x2, 0x800}, {0x3, 0x400, 0xffffffff, 0x3263, 0x1e8a, 0x19ee}, {0x800, 0x2, 0x7, 0x81, 0x7, 0x1ff}, {0x6, 0x0, 0x80000000, 0x4, 0x6, 0x5}, {0x0, 0x8, 0x3, 0x8, 0x18f573a, 0x1}, {0x81, 0xca, 0x8, 0xca14, 0x1, 0x10001}, {0x400401, 0x64a1c7de, 0x9, 0x2, 0x17c, 0x8}, {0x5, 0x5e2, 0x7, 0x3d, 0x8, 0x9}, {0x8000, 0x57, 0x10001, 0x1, 0x8000, 0x4}, {0x201, 0x7, 0x5dc2918a, 0x4, 0x81, 0x5}, {0xd, 0x2, 0x3, 0x2, 0x1, 0xcf}, {0x8, 0xdf3, 0x2, 0x7ffffffc, 0x3}, {0xfffffffd, 0x5, 0xff, 0xd7c, 0xffffff7c, 0x80e}, {0xffffffff, 0x40, 0x2, 0x0, 0x401, 0x21}, {0x5, 0x6612, 0xfffffff8, 0x1, 0x2099, 0x1}, {0x241, 0x1, 0x5, 0x5, 0xfffffffd, 0x8000}, {0xfffffff9, 0x5, 0x9, 0x4, 0x47, 0x2}, {0xb5b, 0x81, 0xc4a8, 0x2, 0x5, 0xffffff01}, {0x7, 0x1fe, 0xfffffffe, 0x7a5e, 0x6, 0x1}, {0x2, 0x3, 0x3000000, 0x0, 0x0, 0xb}, {0xffffff79, 0xd2, 0x5, 0x4d, 0x0, 0x9997}, {0x6, 0x8, 0x100, 0xfffff8c0, 0x5, 0xfffffffa}, {0x5, 0x2, 0x5f, 0x7ff, 0x6, 0x2}, {0x0, 0x7ff, 0x7, 0x4, 0x400, 0x2}, {0x24000, 0x0, 0x3, 0x8, 0x100, 0x7}, {0x5, 0x9, 0x101, 0x9, 0x38, 0x6e1e}, {0xe, 0x8001, 0x2, 0x3, 0x9, 0xfffffff8}, {0x9, 0x4, 0x9a87, 0x3}, {0x80000000, 0x0, 0x8, 0x7, 0x4, 0x2}, {0x4500000, 0x8, 0x7, 0x458, 0x0, 0x7fff}, {0x0, 0x2, 0x65e, 0x4, 0x9, 0x8}, {0x1, 0x1, 0x1, 0x757, 0x2, 0xf14}, {0x8001, 0x31b, 0x9, 0xd45, 0xdd2, 0x4}, {0xac1, 0xa1, 0xfffffffd, 0x2, 0xb, 0xb2}, {0x6, 0x0, 0x9, 0x7fff, 0x2c, 0xe07}, {0xffffffff, 0x80000001, 0x7, 0xfffff801, 0xd, 0xffffffff}, {0x2, 0x8, 0x2, 0x1, 0x4fb7e326, 0x14}, {0x80, 0xe, 0x6, 0xe, 0x3, 0xb28e}, {0x0, 0xf4, 0x3ecf, 0x3, 0x7, 0x6}, {0x1, 0xde, 0x8, 0x9, 0x8, 0x7}, {0x101, 0x8, 0x5, 0x9, 0x7, 0x5}, {0x80, 0x10, 0x1000, 0x401, 0x6, 0x8001}, {0x7, 0x9, 0x3, 0xb, 0x8, 0x2}, {0x7fffffff, 0xc22, 0x0, 0x8, 0xfff, 0x1fc}, {0x4, 0x2, 0x7, 0x65, 0x5, 0xff}, {0x401, 0x8, 0x7ec, 0xffffff0d, 0xffff3ba8, 0xc4eb}, {0x9, 0x1, 0x7, 0x0, 0x40, 0x2}, {0x3, 0x7, 0x7f, 0x7f, 0xf, 0x3}, {0x1000, 0x7, 0x1, 0x1, 0x0, 0x4c9c}, {0x2, 0x65cc00, 0x6, 0x2, 0x7, 0x9}, {0x6, 0x6, 0x9, 0x6, 0x7, 0xe}, {0x46, 0x9, 0xfffffffd, 0x1, 0x3, 0x9}, {0x9, 0xb0d, 0x5, 0x6, 0x5, 0x2}, {0x8001, 0x244, 0x2, 0x7, 0x10, 0x5}, {0x1bfd, 0x0, 0x0, 0xdfffffe6, 0x3b1, 0x4}, {0x8, 0x5, 0x6c1, 0x3, 0xffffffdc, 0x1b0}, {0xd4d1, 0x9, 0x3, 0x7, 0xff}, {0x6, 0x663, 0x8, 0x6, 0xffffffff, 0xe}, {0x6, 0x6, 0x87, 0x8, 0x7, 0x5}, {0x1, 0xc0000000, 0x80000000, 0x6, 0x4, 0x5}, {0x0, 0xfffffffb, 0x8, 0x0, 0x800, 0x7}, {0x8, 0x80, 0xfffffffe, 0x4, 0x80000000, 0xfffffeff}, {0x6a6, 0xb1b, 0x8, 0x9, 0x66111b0d, 0xfff}, {0x2cb, 0x1000b5, 0x7, 0x2, 0x0, 0x200}, {0x8, 0x81, 0xf24d, 0x9, 0x19567f98, 0x8001}, {0x6, 0x0, 0x1, 0x6, 0x5, 0x7}, {0x3, 0x2, 0x5fe, 0x5, 0xc05, 0x1}, {0x7, 0x0, 0x6, 0x6, 0x200, 0x2}, {0x10, 0x3, 0x9, 0xffff, 0x8, 0x3}, {0xffff, 0x1, 0xfffffffe, 0x104, 0x1e, 0xfff}, {0x40, 0xfff, 0x7, 0x0, 0x10, 0x7f}, {0x1, 0x1cd, 0x4, 0xfffff62d, 0x0, 0x4}, {0x0, 0x7, 0x9, 0xe, 0x80000000, 0x800}, {0x4, 0x8, 0x0, 0x12, 0x6, 0x9}, {0x1fc, 0x0, 0x4, 0xffffffff, 0xa9, 0xfffffffe}, {0x7fff, 0x9, 0x8001, 0x5, 0x800, 0x8}, {0x5, 0xb382, 0x3, 0xffffffff, 0x44, 0x5}, {0x81, 0x2, 0x7, 0x200, 0x0, 0x1800}, {0x2, 0x4, 0x7f, 0x4, 0x0, 0x7}, {0x4, 0x1, 0x400, 0x9, 0x8, 0x3}, {0x7, 0xb, 0x800, 0x2, 0x0, 0x2}, {0x100, 0x0, 0x6, 0x0, 0x1b5, 0x4}, {0x7, 0xb19, 0x4, 0x8, 0x3, 0xfb}, {0x5, 0x1, 0x2, 0xfffffffe, 0x5, 0xfffffffb}, {0x9, 0x5, 0x42a, 0x15, 0x1243, 0x2}, {0x3, 0x7, 0x3, 0x8001, 0xd, 0xdb90}, {0x1, 0xed6, 0x7973, 0xb, 0x9, 0x6}, {0x5e9b300c, 0x10000, 0x7f, 0x7, 0x1c0f76f1, 0x196}, {0x11, 0xab1f, 0x1, 0x2, 0x0, 0xa7}, {0x7ff, 0x6, 0x6, 0x2c67612f, 0x9, 0xc3}, {0x8, 0x3e5, 0xfffffffb, 0xbe, 0x3, 0xffffffff}, {0x36cf, 0x678, 0x200, 0x1, 0x2, 0x7}, {0x4, 0x3, 0xb882, 0xfffffbff, 0x6cf0fe37, 0x1ff}, {0x5, 0xffff, 0xeee1, 0x8, 0x3e6, 0x85c4}, {0x6, 0x10, 0x8, 0x1, 0x40, 0x1}], [{0x3, 0x1}, {0x3, 0x1}, {0x1}, {0x3}, {0x3, 0x1}, {0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x2}, {0x0, 0x1}, {}, {0x3, 0xe1dcf326175bb8c1}, {0x5, 0x1}, {0x3d37fa9ab3c03abe, 0x1}, {0x3}, {0x0, 0x1}, {0x0, 0x1}, {0x3}, {0x5, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {}, {0x0, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x5}, {0x3, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x6, 0x1}, {0x0, 0x1}, {0x4}, {0x1, 0x1}, {}, {0x4, 0x1}, {0x4}, {0x2}, {0x2}, {0x1, 0x1}, {0x4}, {0x5, 0x1}, {0x2, 0x1}, {0x2}, {0x5, 0x1}, {0x2, 0x1}, {0x3}, {0x1}, {}, {0x3, 0x1}, {0x2}, {0x0, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {}, {0x5}, {0x2}, {0x5}, {0x1}, {0x5}, {0x4}, {0x5, 0x1}, {0x2}, {0x1, 0x1}, {0x4, 0x1}, {0x5}, {0x4}, {0x2ed0ff2de3ef916, 0x1}, {0x1, 0x3}, {}, {0x5}, {0x2}, {0x3}, {}, {0x4, 0x1}, {0x2, 0x1}, {0x9ca8d040297a0a22}, {0x0, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x3}, {0x5, 0x1}, {0x5}, {0x5, 0x1}, {0x5a421c3d54d9c6f2, 0x1}, {}, {0x5, 0x1}, {0x4}, {0x3}, {}, {0x3, 0x1}, {0x3, 0x1}, {0x2}, {0x4, 0x1}, {0x4, 0x1}, {0x3}, {0x2, 0x1}, {0x4, 0x1}, {0x5}, {0x4}, {0x2, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x1}, {0x3, 0x1}, {0x3}, {0x0, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x2}, {0x4, 0x1}, {0x3}, {0x3}, {0x2, 0x1}, {}, {0x5, 0x1}, {0x2}, {0x2, 0x1}, {0x2, 0x1}, {}, {0x4}, {0x2}, {0x5, 0x1}, {0x2, 0x1}, {0x2, 0x1}]}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}}]}, 0xe8c}, 0x1, 0x0, 0x0, 0x10}, 0x0) r7 = socket$kcm(0x11, 0x3, 0x0) r8 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000002c00)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r7, 0x107, 0xf, &(0x7f0000002c40), 0x56) sendmsg$kcm(r7, &(0x7f0000002c80)={&(0x7f0000002cc0)=@xdp={0x2c, 0x0, r9, 0x3e}, 0x80, &(0x7f0000002d40)=[{&(0x7f0000002d80)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) 16.115758062s ago: executing program 36 (id=1636): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000800}, 0x30004884) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a40), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000001a80)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000001ac0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001b00)={0x0, 0x0, &(0x7f0000001b40)={&(0x7f0000001b80)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) close(0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000001c40)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000001c80)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000001cc0)={0x0, 0x0, &(0x7f0000001d00)={&(0x7f0000001d40)=@newtfilter={0xe8c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r6, {0x1, 0x4}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_matchall={{0xd}, {0xe58, 0x2, [@TCA_MATCHALL_ACT={0xe54, 0x2, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x2, 0x10, 0x6, 0x0, 0x8f}, 0x3, 0x2}, [{0x2, 0x765, 0x800, 0x1, 0x528, 0x3}, {0x9, 0xe237, 0x1, 0x80000003, 0x8, 0x25ad}, {0x1, 0x9, 0x9, 0x2, 0x2, 0x2}, {0x8000, 0xd3, 0x9, 0x2, 0xec, 0x3}, {0x4, 0x9, 0x100, 0xfffffff7, 0x4, 0x7}, {0x5, 0x0, 0xfffffc00, 0x3, 0x5, 0x4}, {0x7, 0x81, 0x5a, 0x2, 0x5, 0x8}, {0xffffff11, 0x5, 0x5, 0x7ff, 0x6, 0x1}, {0x3, 0x6, 0x400, 0x0, 0x5, 0x200}, {0x80, 0x4, 0x61f, 0x1000, 0x5eb, 0xfc}, {0x7, 0x7b9b, 0x5, 0x3, 0x1, 0xb}, {0xeef3, 0x101, 0x9, 0x8, 0x4, 0xb2}, {0x3, 0xf82, 0x81, 0x0, 0xa, 0x4000}, {0x5, 0x101, 0x5, 0x3, 0x20000000, 0xfffffeb0}, {0x400, 0xb, 0x4, 0x7ff, 0x20, 0x3}, {0x1, 0xa, 0x7, 0xd, 0x7, 0x13f9}, {0x7, 0xeedf, 0xffffffff, 0x0, 0x2, 0x7ff}, {0x6, 0x8, 0xc, 0xb9d, 0xfffffff9, 0x8}, {0x5, 0x9, 0x40, 0x8, 0x4, 0x2}, {0x9, 0x58ce, 0x9, 0xc3e1, 0x9, 0xffffffff}, {0x5, 0x160d0ee, 0x3, 0x0, 0x7fff, 0x8}, {0xffffffff, 0xb43a, 0x7, 0x4, 0x6, 0x6}, {0x5, 0x8, 0x2, 0x5, 0x9, 0x8}, {0xfffffbff, 0xdb87, 0x80e, 0x10ba, 0x3, 0x211d}, {0x200, 0x5, 0x4, 0xffffff91, 0x1, 0x7}, {0x40, 0x60b, 0x5, 0xb42d, 0x3241, 0xffffffff}, {0x8001, 0x0, 0x2, 0xc34, 0x6, 0x1}, {0x1, 0x0, 0x5, 0xe, 0x0, 0x3}, {0x8, 0x4, 0x782, 0x7, 0x8, 0xfffffffa}, {0x8, 0x1, 0xc00, 0x3, 0x4, 0x8f24}, {0x8000, 0x0, 0x6e73, 0xa80, 0x6}, {0x80000001, 0x7ff, 0x5, 0x5, 0xe4, 0x5}, {0x8, 0xffff, 0xc, 0x8001, 0xff, 0xfffffffc}, {0x37, 0x4, 0x8, 0x2, 0x2, 0x800}, {0x3, 0x400, 0xffffffff, 0x3263, 0x1e8a, 0x19ee}, {0x800, 0x2, 0x7, 0x81, 0x7, 0x1ff}, {0x6, 0x0, 0x80000000, 0x4, 0x6, 0x5}, {0x0, 0x8, 0x3, 0x8, 0x18f573a, 0x1}, {0x81, 0xca, 0x8, 0xca14, 0x1, 0x10001}, {0x400401, 0x64a1c7de, 0x9, 0x2, 0x17c, 0x8}, {0x5, 0x5e2, 0x7, 0x3d, 0x8, 0x9}, {0x8000, 0x57, 0x10001, 0x1, 0x8000, 0x4}, {0x201, 0x7, 0x5dc2918a, 0x4, 0x81, 0x5}, {0xd, 0x2, 0x3, 0x2, 0x1, 0xcf}, {0x8, 0xdf3, 0x2, 0x7ffffffc, 0x3}, {0xfffffffd, 0x5, 0xff, 0xd7c, 0xffffff7c, 0x80e}, {0xffffffff, 0x40, 0x2, 0x0, 0x401, 0x21}, {0x5, 0x6612, 0xfffffff8, 0x1, 0x2099, 0x1}, {0x241, 0x1, 0x5, 0x5, 0xfffffffd, 0x8000}, {0xfffffff9, 0x5, 0x9, 0x4, 0x47, 0x2}, {0xb5b, 0x81, 0xc4a8, 0x2, 0x5, 0xffffff01}, {0x7, 0x1fe, 0xfffffffe, 0x7a5e, 0x6, 0x1}, {0x2, 0x3, 0x3000000, 0x0, 0x0, 0xb}, {0xffffff79, 0xd2, 0x5, 0x4d, 0x0, 0x9997}, {0x6, 0x8, 0x100, 0xfffff8c0, 0x5, 0xfffffffa}, {0x5, 0x2, 0x5f, 0x7ff, 0x6, 0x2}, {0x0, 0x7ff, 0x7, 0x4, 0x400, 0x2}, {0x24000, 0x0, 0x3, 0x8, 0x100, 0x7}, {0x5, 0x9, 0x101, 0x9, 0x38, 0x6e1e}, {0xe, 0x8001, 0x2, 0x3, 0x9, 0xfffffff8}, {0x9, 0x4, 0x9a87, 0x3}, {0x80000000, 0x0, 0x8, 0x7, 0x4, 0x2}, {0x4500000, 0x8, 0x7, 0x458, 0x0, 0x7fff}, {0x0, 0x2, 0x65e, 0x4, 0x9, 0x8}, {0x1, 0x1, 0x1, 0x757, 0x2, 0xf14}, {0x8001, 0x31b, 0x9, 0xd45, 0xdd2, 0x4}, {0xac1, 0xa1, 0xfffffffd, 0x2, 0xb, 0xb2}, {0x6, 0x0, 0x9, 0x7fff, 0x2c, 0xe07}, {0xffffffff, 0x80000001, 0x7, 0xfffff801, 0xd, 0xffffffff}, {0x2, 0x8, 0x2, 0x1, 0x4fb7e326, 0x14}, {0x80, 0xe, 0x6, 0xe, 0x3, 0xb28e}, {0x0, 0xf4, 0x3ecf, 0x3, 0x7, 0x6}, {0x1, 0xde, 0x8, 0x9, 0x8, 0x7}, {0x101, 0x8, 0x5, 0x9, 0x7, 0x5}, {0x80, 0x10, 0x1000, 0x401, 0x6, 0x8001}, {0x7, 0x9, 0x3, 0xb, 0x8, 0x2}, {0x7fffffff, 0xc22, 0x0, 0x8, 0xfff, 0x1fc}, {0x4, 0x2, 0x7, 0x65, 0x5, 0xff}, {0x401, 0x8, 0x7ec, 0xffffff0d, 0xffff3ba8, 0xc4eb}, {0x9, 0x1, 0x7, 0x0, 0x40, 0x2}, {0x3, 0x7, 0x7f, 0x7f, 0xf, 0x3}, {0x1000, 0x7, 0x1, 0x1, 0x0, 0x4c9c}, {0x2, 0x65cc00, 0x6, 0x2, 0x7, 0x9}, {0x6, 0x6, 0x9, 0x6, 0x7, 0xe}, {0x46, 0x9, 0xfffffffd, 0x1, 0x3, 0x9}, {0x9, 0xb0d, 0x5, 0x6, 0x5, 0x2}, {0x8001, 0x244, 0x2, 0x7, 0x10, 0x5}, {0x1bfd, 0x0, 0x0, 0xdfffffe6, 0x3b1, 0x4}, {0x8, 0x5, 0x6c1, 0x3, 0xffffffdc, 0x1b0}, {0xd4d1, 0x9, 0x3, 0x7, 0xff}, {0x6, 0x663, 0x8, 0x6, 0xffffffff, 0xe}, {0x6, 0x6, 0x87, 0x8, 0x7, 0x5}, {0x1, 0xc0000000, 0x80000000, 0x6, 0x4, 0x5}, {0x0, 0xfffffffb, 0x8, 0x0, 0x800, 0x7}, {0x8, 0x80, 0xfffffffe, 0x4, 0x80000000, 0xfffffeff}, {0x6a6, 0xb1b, 0x8, 0x9, 0x66111b0d, 0xfff}, {0x2cb, 0x1000b5, 0x7, 0x2, 0x0, 0x200}, {0x8, 0x81, 0xf24d, 0x9, 0x19567f98, 0x8001}, {0x6, 0x0, 0x1, 0x6, 0x5, 0x7}, {0x3, 0x2, 0x5fe, 0x5, 0xc05, 0x1}, {0x7, 0x0, 0x6, 0x6, 0x200, 0x2}, {0x10, 0x3, 0x9, 0xffff, 0x8, 0x3}, {0xffff, 0x1, 0xfffffffe, 0x104, 0x1e, 0xfff}, {0x40, 0xfff, 0x7, 0x0, 0x10, 0x7f}, {0x1, 0x1cd, 0x4, 0xfffff62d, 0x0, 0x4}, {0x0, 0x7, 0x9, 0xe, 0x80000000, 0x800}, {0x4, 0x8, 0x0, 0x12, 0x6, 0x9}, {0x1fc, 0x0, 0x4, 0xffffffff, 0xa9, 0xfffffffe}, {0x7fff, 0x9, 0x8001, 0x5, 0x800, 0x8}, {0x5, 0xb382, 0x3, 0xffffffff, 0x44, 0x5}, {0x81, 0x2, 0x7, 0x200, 0x0, 0x1800}, {0x2, 0x4, 0x7f, 0x4, 0x0, 0x7}, {0x4, 0x1, 0x400, 0x9, 0x8, 0x3}, {0x7, 0xb, 0x800, 0x2, 0x0, 0x2}, {0x100, 0x0, 0x6, 0x0, 0x1b5, 0x4}, {0x7, 0xb19, 0x4, 0x8, 0x3, 0xfb}, {0x5, 0x1, 0x2, 0xfffffffe, 0x5, 0xfffffffb}, {0x9, 0x5, 0x42a, 0x15, 0x1243, 0x2}, {0x3, 0x7, 0x3, 0x8001, 0xd, 0xdb90}, {0x1, 0xed6, 0x7973, 0xb, 0x9, 0x6}, {0x5e9b300c, 0x10000, 0x7f, 0x7, 0x1c0f76f1, 0x196}, {0x11, 0xab1f, 0x1, 0x2, 0x0, 0xa7}, {0x7ff, 0x6, 0x6, 0x2c67612f, 0x9, 0xc3}, {0x8, 0x3e5, 0xfffffffb, 0xbe, 0x3, 0xffffffff}, {0x36cf, 0x678, 0x200, 0x1, 0x2, 0x7}, {0x4, 0x3, 0xb882, 0xfffffbff, 0x6cf0fe37, 0x1ff}, {0x5, 0xffff, 0xeee1, 0x8, 0x3e6, 0x85c4}, {0x6, 0x10, 0x8, 0x1, 0x40, 0x1}], [{0x3, 0x1}, {0x3, 0x1}, {0x1}, {0x3}, {0x3, 0x1}, {0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x2}, {0x0, 0x1}, {}, {0x3, 0xe1dcf326175bb8c1}, {0x5, 0x1}, {0x3d37fa9ab3c03abe, 0x1}, {0x3}, {0x0, 0x1}, {0x0, 0x1}, {0x3}, {0x5, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {}, {0x0, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x5}, {0x3, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x6, 0x1}, {0x0, 0x1}, {0x4}, {0x1, 0x1}, {}, {0x4, 0x1}, {0x4}, {0x2}, {0x2}, {0x1, 0x1}, {0x4}, {0x5, 0x1}, {0x2, 0x1}, {0x2}, {0x5, 0x1}, {0x2, 0x1}, {0x3}, {0x1}, {}, {0x3, 0x1}, {0x2}, {0x0, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {}, {0x5}, {0x2}, {0x5}, {0x1}, {0x5}, {0x4}, {0x5, 0x1}, {0x2}, {0x1, 0x1}, {0x4, 0x1}, {0x5}, {0x4}, {0x2ed0ff2de3ef916, 0x1}, {0x1, 0x3}, {}, {0x5}, {0x2}, {0x3}, {}, {0x4, 0x1}, {0x2, 0x1}, {0x9ca8d040297a0a22}, {0x0, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x3}, {0x5, 0x1}, {0x5}, {0x5, 0x1}, {0x5a421c3d54d9c6f2, 0x1}, {}, {0x5, 0x1}, {0x4}, {0x3}, {}, {0x3, 0x1}, {0x3, 0x1}, {0x2}, {0x4, 0x1}, {0x4, 0x1}, {0x3}, {0x2, 0x1}, {0x4, 0x1}, {0x5}, {0x4}, {0x2, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x1}, {0x3, 0x1}, {0x3}, {0x0, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x2}, {0x4, 0x1}, {0x3}, {0x3}, {0x2, 0x1}, {}, {0x5, 0x1}, {0x2}, {0x2, 0x1}, {0x2, 0x1}, {}, {0x4}, {0x2}, {0x5, 0x1}, {0x2, 0x1}, {0x2, 0x1}]}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}}]}, 0xe8c}, 0x1, 0x0, 0x0, 0x10}, 0x0) r7 = socket$kcm(0x11, 0x3, 0x0) r8 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000002c00)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r7, 0x107, 0xf, &(0x7f0000002c40), 0x56) sendmsg$kcm(r7, &(0x7f0000002c80)={&(0x7f0000002cc0)=@xdp={0x2c, 0x0, r9, 0x3e}, 0x80, &(0x7f0000002d40)=[{&(0x7f0000002d80)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) 11.272154512s ago: executing program 6 (id=1678): bpf$MAP_CREATE(0x0, &(0x7f0000001140)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000011c0)=@base={0x11, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001240)={0x6, 0xc, &(0x7f0000001300)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f00000013c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001400)={r1, 0x2000012, 0xe, 0x0, &(0x7f0000001480)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) 10.13628378s ago: executing program 6 (id=1689): r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000)=0xffffffffffffffff, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1f, 0xb, &(0x7f0000000780)=ANY=[@ANYRES64=0x0], &(0x7f0000000180)='GPL\x00', 0x3, 0xdd, &(0x7f0000003e40)=""/221, 0x41100, 0x73, '\x00', 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffe47}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1f, 0xb, &(0x7f0000000780)=ANY=[@ANYRES64=0x0], &(0x7f0000000180)='GPL\x00', 0x3, 0xdd, &(0x7f0000003e40)=""/221, 0x41100, 0x73, '\x00', 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffe47}, 0x94) 10.038652083s ago: executing program 6 (id=1692): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x121c02, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1e, 0x4, &(0x7f00000000c0)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x8, 0x1, 0xfffffffffffffff4}]}, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000100)=0x2) ioctl$PPPIOCSACTIVE(r0, 0x40107446, &(0x7f0000000180)={0x1, &(0x7f0000010080)=[{0x6, 0x0, 0x0, 0x8}]}) writev(r1, &(0x7f0000000340)=[{&(0x7f00000001c0)="ecb95a205ff7cbaab4cb6e7657da815382dcee1f81f8bb5f871f7cf1067a945a7cdaa6acd46c61dd48af947deffc2b533ec05c3ed8a99dcffe649d148923f1ca40b2557065b4c46cd3f06f7597c8d164c53c8a728e7af74d9e1c8078f1d4b4530f130211aed4b770b0d14d4e7449d087b4354b4fb112c87dd91a6d592ec886", 0x7f}, {&(0x7f0000000240)="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", 0xfa}], 0x2) write$ppp(r0, &(0x7f0000000400)='0L', 0x2) 9.958680491s ago: executing program 6 (id=1694): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@newtfilter={0x80, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0xb, 0x7}, {0xfff1, 0xffff}, {0x300}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4c, 0x2, [@TCA_MATCHALL_ACT={0x48, 0x2, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x0, 0x0, 0x6}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x80}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000002c0)={'syzkaller1\x00', @link_local}) syz_extract_tcp_res$synack(0x0, 0x1, 0x0) write$tun(r0, &(0x7f0000000840)={@val={0x0, 0x86dd}, @val={0x0, 0x0, 0x11, 0x800}, @mpls={[], @ipv4=@esp={{0x21, 0x4, 0x1, 0x9, 0x420, 0x64, 0x0, 0x1, 0x32, 0x0, @multicast1, @loopback, {[@cipso={0x86, 0x3a, 0x1, [{0x7, 0x7, "74c94d9882"}, {0x0, 0x2}, {0x7, 0xe, "e0dd4ab57e1e9702acb3d535"}, {0x0, 0xd, "f5c9cfd0b1290aeb91da07"}, {0x2, 0x10, "73d29caffadf3cfb7767b6c44a56"}]}, @timestamp_addr={0x44, 0x24, 0x7e, 0x1, 0x7, [{@empty, 0x1}, {@multicast1, 0x3}, {@multicast2, 0xffc}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x10001}]}, @ssrr={0x89, 0xf, 0xb2, [@rand_addr=0x64010102, @remote, @rand_addr=0x64010100]}]}}, {0x4d6, 0x2, @cc={0x1, 0x0, 0xfff, 0x8001, 0x1000, 0xc9, 0x2, [@runt="7ae85aa02cc9cae86a11163a634f038ecd6753162a1dd5d70c07b4048c", @ipv6=@esp={0x2, 0x6, 'Vq/', 0x330, 0x32, 0x1, @loopback, @local, {[@srh={0xff, 0x0, 0x4, 0x0, 0xa, 0x38, 0x7}, @hopopts={0x0, 0x0, '\x00', [@jumbo={0xc2, 0x4, 0x4}]}], {0x4d4, 0x800, @cc={0x1, 0x0, 0x7f, 0x77c1, 0x3, 0x4, 0x80000000, [@ipv4=@tcp={{0x5, 0x4, 0x1, 0x6, 0x2ee, 0x66, 0x0, 0x9, 0x6, 0x0, @dev={0xac, 0x14, 0x14, 0x2d}, @local}, {{0x4e20, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x40, 0x6, 0x0, 0x2}, {"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"}}}]}, "d639077d9610f389", 0x8}}}]}, "0d6ce93d81", 0x5}}}}, 0x42e) 9.159181249s ago: executing program 6 (id=1699): bpf$MAP_CREATE(0x0, &(0x7f0000001140)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000011c0)=@base={0x11, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001240)={0x6, 0xc, &(0x7f0000001300)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f00000013c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001400)={r1, 0x2000012, 0xe, 0x0, &(0x7f0000001480)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) 8.269929993s ago: executing program 6 (id=1713): ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) write$UHID_INPUT(r0, &(0x7f00000001c0)={0x8, {"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", 0x1000}}, 0x1006) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1000002, 0x10, r0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000001200)={0x0, 0x0, 0x0}) socket$alg(0x26, 0x5, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x88040, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0585605, 0x0) syz_ublk_setup_io_uring(0x1fb6, &(0x7f0000001300)={0x0, 0xeae5, 0x4, 0x41, 0x177}, &(0x7f0000001380), &(0x7f0000000100), &(0x7f00000000c0)) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$SEG6(0x0, r2) r3 = mq_open(&(0x7f0000001440)='!sel\x00\x00\x00\x10\x00\x00\x00\x00\xd7\\P\xc1\xde.O\xcb]0y\x00\x00\x00\x00\x00\x00\x00\x00', 0x6e93ebbbcc0884f2, 0x196, &(0x7f0000001480)={0x2000000000002000, 0x1, 0x56, 0x3}) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000014c0)={&(0x7f0000001500)=ANY=[@ANYRESDEC], 0x0, 0x4e}, 0x28) mq_timedsend(r3, 0x0, 0x0, 0x9, 0x0) sendmsg$SEG6_CMD_SETHMAC(r2, 0x0, 0x0) sendmsg$NFT_MSG_GETOBJ(0xffffffffffffffff, &(0x7f0000001540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40044}, 0x4000040) syz_genetlink_get_family_id$gtp(&(0x7f0000001580), 0xffffffffffffffff) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000015c0)={0x0, 0x0, 0x0}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000001600)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000001640)=0x8) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000001680)=0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000016c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000001700)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r6, &(0x7f0000001780), 0x651, 0x0) recvmmsg(r5, &(0x7f00000017c0), 0x10106, 0x2, 0x0) ioctl$VIDIOC_S_STD(r1, 0x40085618, &(0x7f0000000000)=0x4) sync() mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) 5.894258136s ago: executing program 7 (id=1751): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = userfaultfd(0x1) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r1, 0x4010aa0a, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f00000002c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca900000000000035090100000000009500000000000000b7020000000000007b9af8ff00000000bd20020000000000dbaaf8fff1000000bf8200000000000007080000f8ffffffbfa420000000000007090000f0ffffffc70200000800000018220000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004608f1ff76000000bf9800000000000056080000000000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 5.815198976s ago: executing program 7 (id=1752): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) (async) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r3, 0xc004743e, 0x110c230000) (async) ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x110e22fff6) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f00000000c0)={r0, 0x7fffffffffffffff, 0x100000000, 0x254c}) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000380)={&(0x7f0000000240)={0x110, 0x0, 0x1, 0x301, 0x0, 0x0, {0x3}, [@CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x3}, @CTA_HELP={0x14, 0x5, 0x0, 0x1, {0xe, 0x1, 'sip-20000\x00'}}, @CTA_SEQ_ADJ_REPLY={0x54, 0x10, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x4}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x4}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x4}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x200}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x3}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x8}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x4}, @CTA_SEQADJ_CORRECTION_POS={0x8}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x8}]}, @CTA_TUPLE_REPLY={0x34, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0xba}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}, @CTA_LABELS={0x8, 0x16, 0x1, 0x0, [0x0]}, @CTA_TUPLE_REPLY={0x48, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @rand_addr=0x64010100}, {0x8, 0x2, @rand_addr=0x64010102}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x110}, 0x1, 0x0, 0x0, 0x400d0}, 0x4004000) (async) r5 = socket$inet_udp(0x2, 0x2, 0x0) (async) r6 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x48, 0x10, 0x401, 0xfffffffe, 0x200, {0x0, 0x0, 0x0, 0x0, 0x10227}, [@IFLA_MASTER={0x8, 0xa, r1}, @IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GTP_FD0={0x8, 0x1, @udp=r5}, @IFLA_GTP_FD1={0x8, 0x2, @udp=r6}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20040000}, 0x840) 5.763886639s ago: executing program 7 (id=1754): acct(&(0x7f0000000000)='./file0\x00') bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000640)={0xffffffffffffffff, 0xe0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd42, 0x0, 0x0, 0x0, 0x0, 0x4d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x8, 0x0, 0x0}}, 0x10) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000680)={'syzkaller0\x00', 0xca02}) r1 = socket$netlink(0x10, 0x3, 0x0) preadv(r0, &(0x7f00000006c0)=[{&(0x7f0000000700)=""/4, 0x4}], 0x3bc, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000740)={'syzkaller0\x00', @link_local}) 5.615849632s ago: executing program 7 (id=1755): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000140)='./file1\x00', 0x804800, &(0x7f0000000180)=ANY=[@ANYRES8=0x0, @ANYRES8], 0x10, 0x1213, &(0x7f0000000940)="$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") r0 = accept$phonet_pipe(0xffffffffffffffff, &(0x7f0000002f80), &(0x7f0000002fc0)=0x10) accept4(r0, 0x0, 0x0, 0x80000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000002d80)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000002e00)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000002e80)={0x0, 0x0, &(0x7f0000002ec0)={&(0x7f0000002f00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_SREG={0x8, 0x7, 0x1, 0x0, 0xd}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x5}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x7c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x210000, &(0x7f0000000800)={[{@init_itable}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x4}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x2}}, {@bsdgroups}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000001b80)="$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") syz_mount_image$vfat(&(0x7f0000000540), &(0x7f0000000580)='./file0\x00', 0x2004800, &(0x7f0000000700)=ANY=[@ANYBLOB="616c6c6f775f7574696d653d30303030303030303030303030303136323134372c756e695f786c6174653d302c73686f72746e616d653d6d697865642c73686f72746e616d653d77696e6e742c696f636861727365743d6d61637475726b6973682c6e6f6e756d7461696c3d302c696f636861727365743d6b6f69382d72752c756e695f786c6174653d302c696f636861727365743d757466382c6572726f72733d636f6e74696e75652c73686f72746e616d653d6d697865642c73686f72746e616d653d77696e39352c7379735f696d6d757461626c652c757466383d302c0074c3fc52ac6365d676e1"], 0xfe, 0x3c0, &(0x7f0000002940)="$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") mount$overlay(0x0, &(0x7f0000002d00)='./file0\x00', 0x0, 0x16c018, 0x0) lsetxattr$security_capability(&(0x7f0000002100)='./file1\x00', &(0x7f0000002140), &(0x7f0000002180)=@v3={0x3000000, [{0x101, 0x3}, {0x5, 0x1ff}]}, 0x18, 0x0) syz_mount_image$ext4(&(0x7f00000021c0)='ext4\x00', &(0x7f0000002200)='./file1\x00', 0x210080, &(0x7f0000002240)={[{@user_xattr}, {@noquota}, {@dioread_nolock}, {@jqfmt_vfsv1}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x70}}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7b1}}, {@minixdf}, {@bsdgroups}, {@max_batch_time={'max_batch_time', 0x3d, 0x13}}, {@abort}, {@noinit_itable}]}, 0x3, 0x589, &(0x7f0000002340)="$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") truncate(&(0x7f0000002900)='./file1\x00', 0x1bf8) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="780000001000830404000000fedbdf2500007400", @ANYRES32=r3, @ANYBLOB="0008000007500500580012800b0001006272696467650000480002800500190002000000050017"], 0x78}, 0x1, 0x0, 0x0, 0x800}, 0x0) io_setup(0x7, &(0x7f00000005c0)) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0x5, &(0x7f0000000300)=ANY=[@ANYBLOB="18020000ffffffff0000000003000000850000002c000000850000000f000000950000"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x359}, 0x94) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r5, 0x107, 0xa, &(0x7f00000004c0)=0x2, 0x4) setsockopt$packet_rx_ring(r5, 0x107, 0x5, &(0x7f0000000600)=@req3={0x1000, 0x3a, 0x1000, 0xa}, 0x1c) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r4, 0x0, 0xe, 0x0, &(0x7f0000000400)="410c49bc3c388e38d0da5a20564e", 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) r6 = fanotify_init(0xf00, 0x0) r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000000900)='.\x00', 0xa880, 0x97) fanotify_mark(r6, 0x5, 0x4800003e, r7, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000003000)='./sec\x00', 0x1ff) mount(0x0, &(0x7f0000003040)='./sec\x00', &(0x7f0000003080)='securityfs\x00', 0x0, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f00000030c0)='./sec/safesetid/gid_allowlist_policy\x00', 0x2, 0x0) write(r8, 0x0, 0x655a8a3) openat(0xffffffffffffff9c, &(0x7f0000002d40)='./file1\x00', 0x101042, 0x15) 5.294237235s ago: executing program 7 (id=1759): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CMP_DATA={0x8, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4}]}, @NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_CMP_OP={0x8, 0x2, 0x1, 0x0, 0x5}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xc8}, 0x1, 0x0, 0x0, 0x4}, 0x0) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180), 0x80, 0x0) close_range(r0, r2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0xd}, @NFTA_SOCKET_KEY={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xc4}}, 0x0) r4 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r4, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0xe07e872420dfefcb) setsockopt$sock_int(r4, 0x1, 0x2, &(0x7f0000000400), 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e22, @multicast1}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$inet_int(r0, 0x0, 0x1, 0x0, 0x0) r5 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$read(0xb, r5, &(0x7f00000002c0)=""/235, 0xeb) 4.973546457s ago: executing program 7 (id=1764): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e24}, 0x1c) listen(r0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x9}}, 0x0, 0x0, 0xc, 0x0, "9ecf3315567f14d56a87d134cc409e2a652dbbf6c50480937c6fa85af81bc6fc54b71f03985ac33e31d612d976a6efcda8853b8a4430503621f06679995d916cb4361795dd7dbae51d07384b7c2e6949"}, 0xd8) syz_emit_ethernet(0x4a, &(0x7f0000000140)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00@\x00', 0x14, 0x6, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast2, {[], {{0x4e24, 0x4e24, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x80}}}}}}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000880)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000980)={0x34, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_CQM={0x18, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x6384}, @NL80211_ATTR_CQM_RSSI_THOLD={0x4}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x5b}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x811}, 0x80) 4.928166827s ago: executing program 37 (id=1764): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e24}, 0x1c) listen(r0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x9}}, 0x0, 0x0, 0xc, 0x0, "9ecf3315567f14d56a87d134cc409e2a652dbbf6c50480937c6fa85af81bc6fc54b71f03985ac33e31d612d976a6efcda8853b8a4430503621f06679995d916cb4361795dd7dbae51d07384b7c2e6949"}, 0xd8) syz_emit_ethernet(0x4a, &(0x7f0000000140)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00@\x00', 0x14, 0x6, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast2, {[], {{0x4e24, 0x4e24, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x80}}}}}}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000880)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000980)={0x34, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_CQM={0x18, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x6384}, @NL80211_ATTR_CQM_RSSI_THOLD={0x4}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x5b}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x811}, 0x80) 2.572569122s ago: executing program 0 (id=1784): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000019c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000001a00)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x2, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001b00)={&(0x7f0000001b40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) sendmsg$nl_route_sched(r2, &(0x7f0000001b80)={0x0, 0x0, &(0x7f0000001bc0)={&(0x7f0000001c00)=@newqdisc={0x48, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfdfffdfc, {0x0, 0x0, 0x0, 0x0, {0x4}, {0xffff, 0xffff}, {0xfff1, 0xa}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x2, '\x00', 0x3c0d, 0x5, 0xe4, 0x5}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000001c80)={0x0, 0x0, &(0x7f0000001cc0)={&(0x7f0000001d00)=@newqdisc={0x44, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xfff1}, {0xffff, 0x6}, {0x7, 0x1}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x401, 0xa733, 0x2}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2000c00c}, 0x0) close(0x3) 2.470431964s ago: executing program 0 (id=1787): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) (async) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'gre0\x00', @link_local}) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0xe22, 0x0, @empty, 0x2}, 0x1c) (async) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0xe22, 0x0, @empty, 0x2}, 0x1c) openat$mice(0xffffffffffffff9c, &(0x7f0000000640), 0x20101) (async) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000000640), 0x20101) write$FUSE_NOTIFY_INVAL_ENTRY(r2, 0x0, 0x26) (async) write$FUSE_NOTIFY_INVAL_ENTRY(r2, 0x0, 0x26) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000400), 0x3) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)={0x54, 0x2, 0x6, 0x801, 0x0, 0xffef, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x1}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}]}, 0x54}}, 0x4004804) r4 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r4, &(0x7f00000005c0)={&(0x7f0000000600)={0xa, 0x4e20, 0xf5, @loopback}, 0x1c, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000000000000290000003700000016000000000000002400000000000000290000003200000000000000000000000000000000000001", @ANYRES32=0x0, @ANYBLOB="000000e226d4c05bbef2a799a5af41e579503c49156628ba8f490e61425a68f41c77ea373026ed1c7ba176abb14256dfa9c494d13c1ee5d5a108ba4ae346"], 0x40}, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000440)=@gcm_256={{0x304, 0x36}, "1f88014400000070", "a504eb69a751e9d7e9fb434d1665e900000000ffffff7f00", '\x00\t\x00', "a301fbcf1f000004"}, 0x38) close(r0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = syz_open_dev$media(&(0x7f0000000480), 0x1000, 0x341f00) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x40241, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0xc201}) (async) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0xc201}) r8 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f00000002c0)={'syzkaller1\x00', @link_local}) (async) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f00000002c0)={'syzkaller1\x00', @link_local}) write$tun(r7, &(0x7f0000000700)={@val={0x0, 0xf8}, @val={0x0, 0x0, 0x1, 0x400, 0x6, 0x4}, @eth={@local, @random="004d052caf78", @val={@val={0x88a8, 0x3, 0x1}, {0x8100, 0x6, 0x0, 0x4}}, {@canfd={0xd, {{0x3, 0x1, 0x1, 0x1}, 0x2c, 0x3, 0x0, 0x0, "6e471335f8477584606c862cb9dae3302c24785efecd39bc7c2f5117201c457644aa58b40ed6665feff07a7d30989189595216e709ec14e8f11599cdd3d18df6"}}}}}, 0x4d) syz_open_dev$media(&(0x7f0000000080), 0x66, 0x180502) (async) r9 = syz_open_dev$media(&(0x7f0000000080), 0x66, 0x180502) ioctl$MEDIA_IOC_G_TOPOLOGY(r9, 0xc0487c04, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000340)=[{}, {}, {}, {0x0, 0x80000000}], 0x0, 0x0, 0x0}) ioctl$MEDIA_IOC_ENUM_LINKS(r6, 0xc0287c02, &(0x7f00000003c0)={r10, 0x0, 0x0}) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYRES8=r3], 0x148}, 0x1, 0x0, 0x0, 0x40d4}, 0x0) 1.949920483s ago: executing program 5 (id=1797): r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000340), 0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000240)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@bridge_newneigh={0x34, 0x1c, 0x401, 0x70bd2c, 0x25dfdc00, {0x7, 0x0, 0x0, r3, 0x2, 0xe4, 0x9}, [@NDA_LLADDR={0xa, 0x2, @multicast}, @NDA_FDB_EXT_ATTRS={0xc, 0xe, 0x0, 0x1, [@NFEA_ACTIVITY_NOTIFY={0x5, 0x1, 0x5}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x20008011}, 0x24048801) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x92}}, 0x0) getsockname$packet(r5, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route_sched(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newqdisc={0x70, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0x9}, {0xffff, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x40, 0x2, {{0x1ff, 0x24, 0x0, 0x0, 0xfffffffd, 0x8}, [@TCA_NETEM_ECN={0x8, 0x7, 0x1}, @TCA_NETEM_LOSS={0x1c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0x80000001, 0x6, 0x8, 0x1000, 0xd99d}}]}]}}}]}, 0x70}}, 0x8c814) sendto$packet(r0, 0x0, 0x0, 0x830, &(0x7f0000000200)={0x11, 0x9900, r6, 0x1, 0x2, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x14) r7 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r7, 0xc028660f, 0xfffffffffffffffe) socket$packet(0x11, 0x2, 0x300) (async) socket$nl_route(0x10, 0x3, 0x0) (async) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000340), 0x4) (async) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000240)={'bridge_slave_0\x00'}) (async) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@bridge_newneigh={0x34, 0x1c, 0x401, 0x70bd2c, 0x25dfdc00, {0x7, 0x0, 0x0, r3, 0x2, 0xe4, 0x9}, [@NDA_LLADDR={0xa, 0x2, @multicast}, @NDA_FDB_EXT_ATTRS={0xc, 0xe, 0x0, 0x1, [@NFEA_ACTIVITY_NOTIFY={0x5, 0x1, 0x5}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x20008011}, 0x24048801) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket(0x10, 0x803, 0x0) (async) sendmsg$BATADV_CMD_GET_MESH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x92}}, 0x0) (async) getsockname$packet(r5, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) (async) sendmsg$nl_route_sched(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newqdisc={0x70, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0x9}, {0xffff, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x40, 0x2, {{0x1ff, 0x24, 0x0, 0x0, 0xfffffffd, 0x8}, [@TCA_NETEM_ECN={0x8, 0x7, 0x1}, @TCA_NETEM_LOSS={0x1c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0x80000001, 0x6, 0x8, 0x1000, 0xd99d}}]}]}}}]}, 0x70}}, 0x8c814) (async) sendto$packet(r0, 0x0, 0x0, 0x830, &(0x7f0000000200)={0x11, 0x9900, r6, 0x1, 0x2, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x14) (async) openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) (async) ioctl$EXT4_IOC_MOVE_EXT(r7, 0xc028660f, 0xfffffffffffffffe) (async) 1.783225585s ago: executing program 5 (id=1798): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x8001}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000003c0)=@gcm_128={{0x304}, "d0fd1667ae4a202c", "114f0201045879000000927ca09f9467", 'i~c\r', "f02a681cb6f1bd06"}, 0x28) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001480)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$tun(r1, &(0x7f0000000340)=ANY=[], 0x141) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) recvfrom$inet6(r0, &(0x7f00000006c0)=""/222, 0xde, 0x10100, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@ccm_128={{0x303}, "b421eba833d4b156", "56df2295bfda5c4f9fecff61beaa8bb4", "808065e3", "7f1f1c2ab4421d27"}, 0x28) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000001400)=[{&(0x7f0000000140)="58ddb007a47a8b1f458ab677d557ca50def8e5bc61dbc50bca64f7e76268cd64007095adfef77465b69ec03139854d6f03d5f9bd019fe046035ef7049f48fcc7321c34faca94ff08f59edaf2ab55eedcc278df823564618627217a527b971bdfa0afd948a6cdb9e05ccaef35c22047246a7b97a8e1b645e51c47b296c759c8dfd56beb8fa15c800ad060ab378a269557bc053d9be9", 0x95}, {&(0x7f0000000300)="2ea63d218bc1023b2e6eceeb92d548803a43d4dddc2433c76650030c188f490311ff86da69fab1539139f6dda31739c2bb4412dd471137", 0x37}], 0x2) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000000000)=0x2, 0x4) 1.363173045s ago: executing program 9 (id=1805): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$cgroup_int(r0, &(0x7f0000000700), 0xffffffc1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22052, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0xd0840, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x400, &(0x7f0000000140)=ANY=[@ANYBLOB="6572726f72733d72656d6f756e742d726f2c757466383d302c757365667265652c646973636172642c757466383d312c756e695f786c6174653d302c73686f72746e616d653d77696e39352c756e695f786c6174653d302c756e695f786c6174653d302c0008442895b66131b4e4d54b2ba6ae54dabaa5206d4a2a060b5ccc774b3ec4c81a1a9852327ff871d16d0d9344e764c68194b9d9d0be76c595bac1fc5a0a8256a7b77e071e9bdd6100f9aeb8576d329be6e4bb168f1434000000", @ANYRESHEX=0x0], 0xfd, 0x296, &(0x7f0000000440)="$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") mount$9p_fd(0x0, &(0x7f0000001740)='./file0\x00', &(0x7f0000001780), 0x92, &(0x7f00000017c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r3, 0x50009417, &(0x7f0000000740)={{r3}, 0x0, 0x10, @unused=[0x8, 0x2, 0x7, 0x1], @subvolid=0x6}) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x23, &(0x7f0000000000), &(0x7f0000000080)=0x18) 1.29465596s ago: executing program 9 (id=1806): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000b40)={0x40000000, 0x0, &(0x7f0000000b80)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) writev(r0, &(0x7f0000003180)=[{&(0x7f0000000d40)="5805f0c3c30cf10520ce324c6e7a334f38fee399bb882afa10b4940f4bd23bc476d4c529e50796af48d442f4a1d63e7482c092fbd99b139c05659c96509c6007c440cdf09020b9e42f075bc93411388d14d535e26b78c6bd96b035f6a962a8d92c697357607a7c9d0131c24abab94fe35af3e2f528df0006a11f25070027d1fb3b0f7079bab8512248dbb2a59d0eff83da68a9f99d2b02c66dad061c99fef922bfeb83dfe3fed99040af07466f9274ec33554317682f9b2be416d95c99579f2fd6e5549e61654abd86b097b0874e22c5628c0b", 0xd3}, {&(0x7f0000000e40)="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", 0x1000}, {&(0x7f0000001e40)="1571f7d0433b9d740d653d175f0c1748fbbdf04e1857acea8c046c094a1371452bacb3e24f933e072791d3b0d29a955b", 0x30}, {&(0x7f0000001e80)="9d5313ef7a8369c4650ccfdf96b005f78adcddf51c76ae500983dbf18ca26ce6d7bb242d80494b6d30acdb707eb2f9460e771effdcabbd615c2bfefcc0b6ce5e936866fe9fef1520ffb33ba505c0a0663225467b22178fe9099c66dd8be33ea5356bb64d5f94715832d0ac2d6e10481d1631ca52ebf3884754a2b5dfea", 0x7d}, {&(0x7f0000001f00)="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", 0x1000}, {&(0x7f0000002f00)="284f0943ee9b81eda6ef5fd2b2d9780af895aa07d9e1444fe77916c1304f25e421003a75b0b7b57c7d06bb130225db7d1f72d9825e661b13ada46146c00d2cea86430e7424e021e9e9823bddf43f9e2bdd0c490cf1a0ec79749419c224ab82cd4bceda582050f1197b7963e366028cc16b891d88bb1c21a66dd09bc5b7fee7d2c5ff8f5b0e72", 0x86}, {&(0x7f0000002fc0)="4237e71f0fb42e5237e5e9f23eb8a92611a0aea12d92d9256c1114086b3cc2d564d6aa906b404db6f5cefb5f69227b392620f2aa7b5ad932477f32bf332a8c6a0d3ba76b6d9b7830f49fc38eed723e897e825a7095139818befa0fb36f2b0c4aea091a4c6ba8c1285e4e23cbcf979615f33f1ea1dec2c9da6cf97fc67cfe736d7af523a31c76", 0x86}, {&(0x7f0000003080)="74e987a835393eeb7adec17361935d84ed7ccc829d7b057f728ea262a06d60cbb76556808da5c0c356d8fdcbadaa7819eff3cb11b4affd460d8e5ede32d4b63c5efff04e85c0a323d27674c160a6b59f1f86c250347912b7b53d50dfb8de663b12b571c41ec99d13f9fe873e75af56030905ad2233195d91b5f74026fa82fc320118e90a3a94aaded76484b07029807ace6be0388a07908a7df30a9650f09542962205cba76cd1383766b322ef72efc1e17aca41f88ed54db96cec857f5f23192f4b1dc9fba584e6db21514eb2d4f8986a5fe698c4699674c7d29669725d458566e7685695f1a1d0ccd9359ce308b58c662165c2d318", 0xf6}], 0x8) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000200)={'syztnl0\x00', &(0x7f0000000180)={'ip6tnl0\x00', 0x0, 0x2b, 0x5, 0x3, 0x3, 0xe, @remote, @dev={0xfe, 0x80, '\x00', 0x32}, 0x1, 0x8000, 0x141, 0x24000000}}) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x100, 0x100, 0x5, [@volatile={0x10, 0x0, 0x0, 0x9, 0x2}, @typedef={0xb, 0x0, 0x0, 0x8, 0x5}, @union={0x7, 0x9, 0x0, 0x5, 0x0, 0x7, [{0xe, 0x2, 0x3}, {0x8, 0x4, 0x8}, {0xc, 0x3, 0x9}, {0x0, 0x3, 0xffff}, {0xb, 0x2, 0x80000001}, {0x0, 0x5, 0x8}, {0x10, 0x4, 0x5}, {0x2, 0x3, 0x6}, {0xf, 0x5, 0x7b8}]}, @enum={0x2, 0x2, 0x0, 0x6, 0x4, [{0x1, 0x5}, {0x2, 0x8000}]}, @struct={0x1, 0x1, 0x0, 0x4, 0x0, 0x9, [{0x10, 0x0, 0x101}]}, @union={0x1, 0x4, 0x0, 0x5, 0x0, 0x2, [{0xe, 0x3, 0x7}, {0x4, 0x0, 0x2}, {0x2, 0x5, 0x5}, {0x8, 0x0, 0xc5b0}]}]}, {0x0, [0x0, 0x71, 0x61]}}, &(0x7f0000000380)=""/66, 0x11d, 0x42, 0x0, 0x80}, 0x28) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000480)={0x0, 0x0}, 0x8) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000004c0)=r4, 0x4) r5 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./file0\x00', 0x0, 0x8) ioctl$FS_IOC_ENABLE_VERITY(r5, 0x40806685, &(0x7f0000000540)={0x1, 0x1, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000005c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x4, 0x4}, 0x50) r7 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000640), 0x400400, 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000680)='net/ip6_flowlabel\x00') preadv2(r8, &(0x7f00000006c0)=[{&(0x7f0000000700)=""/103, 0x67}], 0x1, 0x5, 0xd8e, 0x1) r9 = openat(0xffffffffffffff9c, &(0x7f0000000780)='./proc/thread-self/fail-nth\x00', 0x2, 0x71) write(r9, &(0x7f00000007c0)='27', 0x2) r10 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./file1\x00', 0x183042, 0x15) preadv2(r10, &(0x7f0000000840)=[{&(0x7f0000000880)=""/165, 0xa5}], 0x1, 0xeb82, 0x7, 0xad2b7d316b9231cb) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000009c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000940), &(0x7f0000000980)}, 0x20) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000a00)={r0, 0x8, 0x6, 0x46}) bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x6, 0x5, &(0x7f00000000c0)=@raw=[@tail_call={{0x18, 0x2, 0x1, 0x0, r1}}], &(0x7f0000000100)='GPL\x00', 0x0, 0x22, &(0x7f0000000140)=""/34, 0x41100, 0x43, '\x00', r2, @xdp=0x25, r3, 0x8, &(0x7f0000000440)={0x7, 0x1}, 0x8, 0x10, 0x0, 0x0, r4, 0xffffffffffffffff, 0x0, &(0x7f0000000a40)=[r5, r6, r7, r8, r9, r10, r11, r12, 0xffffffffffffffff, 0x1], 0x0, 0x10, 0x4}, 0x94) r13 = socket$inet6(0xa, 0x3, 0x1) setsockopt$inet6_IPV6_XFRM_POLICY(r13, 0x29, 0x23, &(0x7f0000000c00)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@multicast2, 0x4e20, 0x0, 0x4e22, 0x48, 0x2, 0x0, 0x0, 0x1}, {0xfffffffffffffffc, 0xffffffffffffffff, 0xfff, 0xfffffffffffffffe, 0x5, 0x5, 0x5, 0xfffffffffffffffd}, {0x58b6c42b, 0xffffffffffff90df, 0xce2, 0x20000000000000}, 0x40, 0x0, 0x1, 0x0, 0x1}, {{@in6=@empty, 0x4d5, 0x6c}, 0xa, @in=@broadcast, 0x3502, 0x4, 0x3, 0x0, 0x0, 0x0, 0x200000}}, 0xe8) connect$inet6(r13, &(0x7f0000000d00)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x17}}}, 0x1c) 1.260308873s ago: executing program 0 (id=1807): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000040)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000080), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x40040) write$nci(r0, &(0x7f0000000240)=@NCI_OP_NFCEE_DISCOVER_NTF={0x2, 0x1, 0x3, 0x0, 0x5, {0x1, 0x9}}, 0x5) write$nci(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="500404"], 0x7) write$nci(r0, &(0x7f0000000300)=@NCI_OP_RF_DISCOVER_MAP_RSP={0x1, 0x0, 0x2, 0x0, 0x1}, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000340)={0x0, 0xc, &(0x7f0000000380)={&(0x7f00000003c0)={0x24, r3, 0x1, 0x70bd28, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffff3d}]}, 0x24}, 0x1, 0x0, 0x0, 0x4851}, 0x0) write$nci(r0, &(0x7f0000000440)=@NCI_OP_CORE_SET_CONFIG_RSP={0x0, 0x0, 0x2, 0x2, 0xf, {0x1, 0xd, "299506ad626d94209abe7953d5"}}, 0x12) 1.08457027s ago: executing program 1 (id=1808): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r0, 0x0, 0x8, &(0x7f0000000bc0)=0x3, 0x4) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x64, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @loopback, @empty}}}}}}, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000240)='syzkaller\x00'}, 0x94) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@can_newroute={0x154, 0x18, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@CGW_CS_CRC8={0x11e, 0x6, {0xfe, 0xff, 0x3, 0x0, 0xff, "71ec6d721744cd5200080000f8cfcad402006511ec028c7028564a9ce83afe1cc93e15e556c2baed7f897fe841c155a2b2a4b9f3052995cdf66a9c7922ff0300005b6c67281f1519cd7c32c2bf7563b9452575505da99ea128d37616896be8764a2c78edbad5bde7a5e405bdc893770338925f824bd24689c0d11a5560fc3aaa9ad0d7766d8ea8d3bf1006e3df494e2f373148ecb4adafdd39874e9808b118301f1e76054a64c6d243523f5de7b347f3b740e105d090b3bcd4cbed5f1cfe93cff41a9630802f96defe9e8ea850529827c5e301953a8abaafa1f121e590f74e28233f4129d458ec5d42c3ef0619022c00", 0x3, "5c8d586b2a88d818b56d2a5e15c8a95d29e5b2ea"}}, @CGW_CS_XOR={0x8, 0x5, {0x2, 0x9, 0xf5, 0x2}}, @CGW_MOD_SET={0x15, 0x4, {{{0x3, 0x1, 0x0, 0x1}, 0x0, 0x5, 0x0, 0x0, '\t\x00'}, 0x1}}]}, 0x154}}, 0x40000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0xffffffffffffff6b, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) 1.083043225s ago: executing program 0 (id=1809): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, &(0x7f00000005c0), 0x8) listen(r0, 0x0) shutdown(r0, 0x0) sendmsg$IPSET_CMD_GET_BYINDEX(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000040)={&(0x7f0000000100)={0x4c, 0xf, 0x6, 0x401, 0x0, 0x0, {0x2, 0x0, 0x7}, [@IPSET_ATTR_INDEX={0x6, 0xb, 0x3}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_INDEX={0x6, 0xb, 0x1}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x45}, 0x4004000) 1.015304348s ago: executing program 0 (id=1810): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@ipv6_newrule={0x30, 0x20, 0x1, 0x4, 0x25dfdbfb, {0xa, 0x40, 0x0, 0x0, 0x3, 0x0, 0x0, 0x8, 0x8}, [@FRA_DST={0x14, 0x1, @rand_addr=' \x01\x00'}]}, 0x30}}, 0x40000) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=@newlink={0x5c, 0x10, 0x539, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1010, 0x5010}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0xff}}]}}}]}, 0x5c}}, 0x0) (fail_nth: 26) 1.015075309s ago: executing program 0 (id=1811): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000002c0), 0x802, 0x0) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x1000009) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000300)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) r3 = socket(0x18, 0x1, 0x2) connect$tipc(r3, 0x0, 0x0) (async) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000340)=@req={0x5, 0x80, 0x9, 0x3}, 0x10) (async) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), r1) (async) syz_genetlink_get_family_id$devlink(0x0, r1) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async, rerun: 64) sendmsg$NFT_BATCH(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a38000000060a0b040000000000000000020000000905000000797a32000000000c00064000000000002844140000050900010073797a30000000db243f3250141d5b7f887a00540000001100"], 0x60}}, 0x0) (rerun: 64) ioctl$SIOCX25GCAUSEDIAG(r3, 0x89e6, &(0x7f0000000400)={0x2, 0x34}) (async, rerun: 32) sendmsg$ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)={0x48, r4, 0x1, 0x70bd27, 0x0, {}, [@ETHTOOL_A_FEATURES_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_FEATURES_WANTED={0x14, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}]}]}]}]}, 0x48}}, 0x804) (rerun: 32) 967.651189ms ago: executing program 1 (id=1812): r0 = syz_mount_image$squashfs(&(0x7f0000000280), &(0x7f00000002c0)='./file1\x00', 0x0, &(0x7f0000000300)=ANY=[], 0xff, 0x1bb, &(0x7f0000000340)="$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") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00'}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3c0000001000010029bd7000ffdbdf2500000000", @ANYRES16=r2, @ANYRES64=r0], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0xc094) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r4, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x6, 0x7}}]}}]}, 0x48}}, 0x4c840) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_SET(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)={0x14, r6, 0x1, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x48c05}, 0x4040140) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@newtfilter={0x60, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0xe, 0xfff3}, {0x0, 0xfff3}, {0x2, 0x5}}, [@filter_kind_options=@f_fw={{0x7}, {0x34, 0x2, [@TCA_FW_INDEV={0x14, 0x3, 'dvmrp0\x00'}, @TCA_FW_CLASSID={0x8, 0x1, {0x5, 0x10}}, @TCA_FW_INDEV={0x14, 0x3, 'veth0_vlan\x00'}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r7, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) 917.690646ms ago: executing program 5 (id=1813): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f00000010c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x54, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x28, 0x3, 0x0, 0x1, [{0x24, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPRESSIONS={0x20, 0xb, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8}]}}}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xd8}}, 0x0) 871.28287ms ago: executing program 9 (id=1814): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x200280d0}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000e80)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_DELSET={0x2c, 0xb, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x9}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}]}, @NFT_MSG_DELSET={0x2c, 0xb, 0xa, 0x401, 0x0, 0x0, {0x92258420943190a, 0x0, 0x2}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x2}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x80}, 0x1, 0x0, 0x0, 0x40091}, 0x40) 870.505264ms ago: executing program 1 (id=1815): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01080000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000211000fa800c000100636f756e74657200500000000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000002400038020000080080003400000000214000780090001006c617374"], 0xe4}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@ipv4_newroute={0x34, 0x1a, 0x1, 0x70bd24, 0x25dfdffd, {0x2, 0x490a93895127c614, 0x20, 0x0, 0xfc, 0x0, 0x0, 0x7}, [@RTA_IIF={0x8, 0x3, r3}, @RTA_DST={0x8, 0x1, @private=0xa010101}, @RTA_SRC={0x8, 0x2, @rand_addr=0x64010102}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0xea5bc50b6199d77e) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001640)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x40, 0x40, 0x7, [@fwd={0x1}, @ptr={0x0, 0x0, 0x0, 0x2, 0x3}, @decl_tag={0x3, 0x0, 0x0, 0x11, 0x4, 0x9}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x2, 0x8}}]}, {0x0, [0x0, 0x0, 0x30, 0x2e, 0x5f]}}, &(0x7f0000000640)=""/4096, 0x5f, 0x1000, 0x1, 0xf}, 0x28) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000016c0)={0x0, 0x0}, 0x8) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001700)=r5, 0x4) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001980)={0x11, 0x8, &(0x7f0000001740)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9}, [@map_idx_val={0x18, 0x6, 0x6, 0x0, 0xc, 0x0, 0x0, 0x0, 0x8}, @map_idx_val={0x18, 0x1, 0x6, 0x0, 0xd, 0x0, 0x0, 0x0, 0x1}, @ldst={0x3, 0x2, 0x3, 0xa, 0x6, 0xffffffffffffffe0, 0xffffffffffffffec}]}, &(0x7f0000001780)='GPL\x00', 0x6, 0x3, &(0x7f00000017c0)=""/3, 0x40f00, 0x4d, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001800)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000001840)={0x1, 0xe, 0xd773, 0xa92}, 0x10, 0x0, 0x0, 0x9, &(0x7f0000001880)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f00000018c0)=[{0x4, 0x2, 0x1, 0xb}, {0x4, 0x4, 0x7, 0x7}, {0x0, 0x2, 0x2, 0x7}, {0x1, 0x1, 0x4, 0xb}, {0x4, 0x4, 0x3, 0xb}, {0x0, 0x2, 0x2}, {0x1, 0x3, 0xb, 0x4}, {0x0, 0x3, 0x1, 0xb}, {0x0, 0x1, 0x6, 0x5}], 0x10, 0x7}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001ac0)={{0x1, 0xffffffffffffffff}, &(0x7f0000001a40), &(0x7f0000001a80)}, 0x20) r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001b00)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x4}, 0x50) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001b80)={0x1b, 0x0, 0x0, 0x6, 0x0, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x2, 0x2}, 0x50) r10 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001c00)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x1}, 0x50) r11 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000001c80)={0x0, 0xc, 0x10}, 0xc) r12 = openat(0xffffffffffffff9c, &(0x7f0000001cc0)='./file1\x00', 0x103a42, 0x32) copy_file_range(r12, 0x0, r12, 0x0, 0x9, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000001d00)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r0}}, './file0\x00'}) r14 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETSW2(r14, 0x4b64, 0xfffffffffffffffe) r15 = syz_open_procfs(0x0, &(0x7f0000001d40)='fdinfo/3\x00') read$FUSE(r15, &(0x7f0000001d80)={0x2020}, 0x2020) r16 = bpf$MAP_CREATE(0x0, &(0x7f0000003dc0)=@bloom_filter={0x1e, 0x3, 0x10001, 0x1271, 0x20000, 0xffffffffffffffff, 0xffffffff, '\x00', 0x0, r0, 0x2, 0x2, 0x3, 0xd}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000003ec0)={0x15, 0x7, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x10000}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}, @map_idx={0x18, 0x6, 0x5, 0x0, 0x7}]}, &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x24, '\x00', r3, @fallback=0x5, r4, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001680)={0x5, 0x7, 0x5, 0xffff}, 0x10, r5, r6, 0x1, &(0x7f0000003e40)=[r7, 0xffffffffffffffff, r8, r9, r10, r11, r12, r13, r15, r16], &(0x7f0000003e80)=[{0x0, 0x4, 0x8}], 0x10, 0x3}, 0x94) 824.803656ms ago: executing program 5 (id=1816): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x44001}, 0x4040850) r1 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r1, &(0x7f00000005c0)={&(0x7f0000000600)=@rxrpc=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev={0xfe, 0x80, '\x00', 0x22}, 0x8000000}}, 0x80, 0x0, 0x0, &(0x7f0000000680)=[{0x18, 0x110, 0xd, "aa"}, {0x18, 0x110, 0x1, '\x00'}], 0x30}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a48000000030a010200000000000000000a0000050900030093797e30000000000900010073797a3100000000080007006e617400140004800800024054dd5e54080001400000000014000000110001"], 0x70}}, 0x24044850) close(r0) setsockopt(r0, 0x6, 0xb2b8, &(0x7f0000000200)="5bc48d5337cb642c77611af7c6c84493aaa1e0eb582320e26bae34ba490456c2345d776ac1dae802ff0059cbb8bb0e48794da2fd8874c622ecb06ffbf522ba8916bf09e5c06f25f6218576153a3f4d3faf4f02d9118c19382542d35567110eeea43e3eb131a41c28b885b0174aa5faeebf72e065b822c21214623b496c5710ed1af8f2a4434a618c0589ff3a6df9dadae1e9d529c44f7597ee7e69dd8c59c52e57e1099148ff99915195e1035504bac43eb32f7b2436ae464305d1235c5be365f07a43be6f", 0xc5) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x2a}, @map_fd={0x18, 0x1}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0xbf, 0x3, 0xa}, @generic={0x7, 0x3, 0x0, 0x0, 0xfffffff0}, @generic={0xb7, 0x4, 0x0, 0x0, 0x4}, @generic={0x85, 0x0, 0x0, 0x0, 0x2}]}, &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r2, 0x0, 0xe, 0x0, &(0x7f0000000580)='\x00'/14, 0x0, 0x3b66, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 786.758943ms ago: executing program 1 (id=1817): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@newtfilter={0x80, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0xb, 0x7}, {0xfff1, 0xffff}, {0x300}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4c, 0x2, [@TCA_MATCHALL_ACT={0x48, 0x2, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x0, 0x0, 0x6}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x80}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000002c0)={'syzkaller1\x00', @link_local}) syz_extract_tcp_res$synack(0x0, 0x1, 0x0) write$tun(r0, &(0x7f0000000840)={@val={0x0, 0x86dd}, @val={0x0, 0x0, 0x11, 0x800}, @mpls={[], @ipv4=@esp={{0x20, 0x4, 0x1, 0x9, 0x41c, 0x64, 0x0, 0x1, 0x32, 0x0, @multicast1, @loopback, {[@cipso={0x86, 0x3a, 0x1, [{0x7, 0x7, "74c94d9882"}, {0x0, 0x2}, {0x7, 0xe, "e0dd4ab57e1e9702acb3d535"}, {0x0, 0xd, "f5c9cfd0b1290aeb91da07"}, {0x2, 0x10, "73d29caffadf3cfb7767b6c44a56"}]}, @timestamp_addr={0x44, 0x24, 0x7e, 0x1, 0x7, [{@empty, 0x1}, {@multicast1, 0x3}, {@multicast2, 0xffc}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x10001}]}, @ssrr={0x89, 0xb, 0xb2, [@rand_addr=0x64010102, @rand_addr=0x64010100]}]}}, {0x4d6, 0x2, @cc={0x1, 0x0, 0xfff, 0x8001, 0x1000, 0xc9, 0x2, [@runt="7ae85aa02cc9cae86a11163a634f038ecd6753162a1dd5d70c07b4048c", @ipv6=@esp={0x2, 0x6, 'Vq/', 0x330, 0x32, 0x1, @loopback, @local, {[@srh={0xff, 0x0, 0x4, 0x0, 0xa, 0x38, 0x7}, @hopopts={0x0, 0x0, '\x00', [@jumbo={0xc2, 0x4, 0x4}]}], {0x4d4, 0x800, @cc={0x1, 0x0, 0x7f, 0x77c1, 0x3, 0x4, 0x80000000, [@ipv4=@tcp={{0x5, 0x4, 0x1, 0x6, 0x2ee, 0x66, 0x0, 0x9, 0x6, 0x0, @dev={0xac, 0x14, 0x14, 0x2d}, @local}, {{0x4e20, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x40, 0x6, 0x0, 0x2}, {"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"}}}]}, "d639077d9610f389", 0x8}}}]}, "0d6ce93d81", 0x5}}}}, 0x42a) 754.248076ms ago: executing program 9 (id=1818): syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x90, 0x0, 0x0, {0x0, 0x400000000000, 0x0, 0x1000000000000000, 0x0, 0xb22f, {0x0, 0x1003, 0x0, 0x0, 0xd, 0xfffffffffffffffd, 0xfffffffd, 0xfffffffe, 0x0, 0x1000}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000180)=0x2f, 0x4) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) symlinkat(&(0x7f00000001c0)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00') mount$bind(0x0, &(0x7f0000000240)='./file1/file0\x00', 0x0, 0x1085408, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x1, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000008000000000000000002000281116600000000009500000000000000"], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8eceb2e30985c02b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) 691.152073ms ago: executing program 9 (id=1819): r0 = socket(0x2b, 0x1, 0x1) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x3, 0xe, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], &(0x7f0000001040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000001080), 0xfffffedf, 0x10, &(0x7f00000010c0)}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001100)={r1, 0x0, 0x62, 0xfe, &(0x7f0000001180)="cb74445b7d4c0b24676c6c71ae37efcedaf40242309766deb4e793f90000000000000000dbc856cbc664650634231454ca2d8034c4ca29e0d99c3b6615e91835a600c08f989af45438a54981be310aad92ae545b1c961e5f3762a51fe4c736edec6f", &(0x7f0000001200)=""/254, 0x2f00, 0x0, 0xff, 0x194, &(0x7f0000001300)="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", &(0x7f0000001440)="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", 0x2, 0x0, 0x10000}, 0x24) listen(r0, 0x5) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x20000001}, 0x1c) listen(r3, 0x0) r5 = socket$pppl2tp(0x18, 0x1, 0x1) r6 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r5, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, r6, {0x2, 0x0, @dev}, 0x2}}, 0x2e) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001600)=@newlink={0x48, 0x10, 0x401, 0x0, 0x25df5bff, {0x0, 0x0, 0x0, 0x0, 0x50010, 0x50042}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE6={0x14, 0x12, @empty}]}}}]}, 0x48}}, 0x40) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000001680), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r8, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001700)={&(0x7f0000001740)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01000cbd70100400000005000000080009000200000008000c00a80a000008000b00000000000600010007"], 0x48}, 0x1, 0x0, 0x0, 0x40811}, 0x20) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r9, &(0x7f0000000140)={0xa, 0x0, 0x3, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) r10 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r10, 0x14) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r11, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x4e20, 0x84f0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x64}}, 0x0, 0x0, 0x4f, 0x0, "698bef80cc15df2d814052cca49c6ccac09c8a8eca1262c791ba0243a6370c72734c0a22bc87750921c34bd24fdc83ec6e02696024852a1c95abe1a804b13cc9c8c9b5628240bb67779dc22bfcf0e846"}, 0xd8) request_key(&(0x7f0000001780)='rxrpc_s\x00', &(0x7f00000017c0)={'syz', 0x1}, &(0x7f0000001800)='y\xa9rust\xe3c*s\xb8dn::e\x00\x00', 0x0) r12 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r12, 0x0) r13 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r13, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00014002080c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x4040) 690.944114ms ago: executing program 5 (id=1820): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0xa, 0x2, 0x8, 0x100, 0x0, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x2a}, @map_fd={0x18, 0x1, 0x1, 0x0, r0}, @generic={0x7e, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0xbf, 0x3, 0xa}, @generic={0x7, 0x3, 0x0, 0x0, 0xfffffff0}, @generic={0xb7, 0x4, 0x0, 0x0, 0x4}, @generic={0x85, 0x0, 0x0, 0x0, 0x2}]}, &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$netlink(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x4000, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r1, &(0x7f0000000140)='100', 0x3) pipe2(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/asound/timers\x00', 0x0, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r4, 0xf504, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000200), 0x2204c83, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) 682.711399ms ago: executing program 9 (id=1821): ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000140)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x8031, 0xffffffffffffffff, 0x3c441000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000001c0)=@abs={0x0, 0x0, 0xfffffffd}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000240), 0x651, 0x0) r3 = openat$smackfs_ambient(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$smackfs_label(r3, &(0x7f0000000040)=ANY=[@ANYBLOB='j8'], 0x4) ioctl(r1, 0x4009, 0x0) recvmmsg(r1, &(0x7f0000000280), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000002c0)=0x6) r4 = socket(0x2b, 0x1, 0x1) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x400300, 0x10) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r5, 0x800c6613, &(0x7f0000000380)=@v1={0x0, @adiantum, 0x1, @desc2}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000300)={@private0, 0x8000000, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000340)={@loopback={0x600}, 0x8000000, 0x0, 0xff, 0x0, 0x4}, 0x20) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./sys\x00', 0x1ff) r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) pwrite64(r6, &(0x7f0000000240)='!', 0x1, 0x2cf2) read$FUSE(r6, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000003c0)) 679.126116ms ago: executing program 1 (id=1822): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@ipv6_newrule={0x30, 0x20, 0x1, 0x4, 0x25dfdbfb, {0xa, 0x40, 0x0, 0x0, 0x3, 0x0, 0x0, 0x8, 0x8}, [@FRA_DST={0x14, 0x1, @rand_addr=' \x01\x00'}]}, 0x30}}, 0x40000) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=@newlink={0x5c, 0x10, 0x539, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1010, 0x5010}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0xff}}]}}}]}, 0x5c}}, 0x0) (fail_nth: 27) 604.944534ms ago: executing program 1 (id=1823): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x8001}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000003c0)=@gcm_128={{0x304}, "d0fd1667ae4a202c", "114f0201045879000000927ca09f9467", 'i~c\r', "f02a681cb6f1bd06"}, 0x28) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001480)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$tun(r1, &(0x7f0000000340)=ANY=[], 0x141) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) recvfrom$inet6(r0, &(0x7f00000006c0)=""/222, 0xde, 0x10100, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@ccm_128={{0x303}, "b421eba833d4b156", "56df2295bfda5c4f9fecff61beaa8bb4", "808065e3", "7f1f1c2ab4421d27"}, 0x28) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000001400)=[{&(0x7f0000000140)="58ddb007a47a8b1f458ab677d557ca50def8e5bc61dbc50bca64f7e76268cd64007095adfef77465b69ec03139854d6f03d5f9bd019fe046035ef7049f48fcc7321c34faca94ff08f59edaf2ab55eedcc278df823564618627217a527b971bdfa0afd948a6cdb9e05ccaef35c22047246a7b97a8e1b645e51c47b296c759c8dfd56beb8fa15c800ad060ab378a269557bc053d9be9", 0x95}, {&(0x7f0000000300)="2ea63d218bc1023b2e6eceeb92d548803a43d4dddc2433c76650030c188f490311ff86da69fab1539139f6dda31739c2bb4412dd471137", 0x37}], 0x2) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000000000)=0x2, 0x4) 0s ago: executing program 5 (id=1824): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000b40)={0x40000000, 0x0, &(0x7f0000000b80)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x1) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000c00)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@multicast2, 0x4e20, 0x0, 0x4e22, 0x48, 0x2, 0x0, 0x0, 0x1}, {0xfffffffffffffffc, 0xffffffffffffffff, 0xfff, 0x2, 0x5, 0x5, 0x5, 0xfffffffffffffffd}, {0x58b6c42b, 0xffffffffffff90df, 0xce2, 0x20000000000000}, 0x40, 0x0, 0x1, 0x0, 0x1}, {{@in6=@empty, 0x4d5, 0x6c}, 0xa, @in=@broadcast, 0x3502, 0x4, 0x3, 0x0, 0x0, 0x0, 0x200000}}, 0xe8) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/rcu_expedited', 0x40082, 0x509cb86664327f4) r3 = fanotify_init(0x81, 0x40000) fanotify_mark(r3, 0x105, 0x30, r2, 0x0) read$FUSE(r3, &(0x7f0000000d40)={0x2020}, 0x2020) connect$inet6(r1, &(0x7f0000000d00)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x17}}}, 0x1c) r4 = socket$inet(0x2, 0x4, 0x5) r5 = syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x6afc, 0x218400) ppoll(&(0x7f0000000040)=[{r4, 0x10}, {r1, 0x4038}, {r5, 0x84a0}, {r0, 0x6602}], 0x4, &(0x7f0000000080)={0x77359400}, &(0x7f00000000c0)={[0xfff]}, 0x8) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r4, 0x89f8, &(0x7f00000001c0)={'syztnl2\x00', &(0x7f0000000140)={'gretap0\x00', 0x0, 0x10, 0x7800, 0x5, 0x9, {{0xf, 0x4, 0x1, 0x2c, 0x3c, 0x67, 0x0, 0x81, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x19}, @multicast2, {[@end, @generic={0x7, 0xa, "0f5139e06aa48b07"}, @noop, @rr={0x7, 0xb, 0xb9, [@remote, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @ssrr={0x89, 0xf, 0xb, [@remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback]}]}}}}}) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f0000000200)={@private0, @mcast2, @mcast2, 0x6, 0x54, 0xfffe, 0x0, 0x7, 0x0, r6}) kernel console output (not intermixed with test programs): 249 > 9 [ 88.546965][ T50] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 88.547208][ T50] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 88.636654][ T8819] rxe_eth0 speed is unknown, defaulting to 1000 [ 88.760624][ T8819] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.760687][ T8819] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.760741][ T8819] bridge_slave_0: entered allmulticast mode [ 88.761216][ T8819] bridge_slave_0: entered promiscuous mode [ 88.770670][ T8819] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.770695][ T8819] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.770756][ T8819] bridge_slave_1: entered allmulticast mode [ 88.771311][ T8819] bridge_slave_1: entered promiscuous mode [ 88.787028][ T8819] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.789363][ T8819] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.810601][ T8819] team0: Port device team_slave_0 added [ 88.819107][ T8819] team0: Port device team_slave_1 added [ 88.835503][ T8819] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.835517][ T8819] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.835531][ T8819] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.836041][ T8819] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.836048][ T8819] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.836062][ T8819] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.848707][ T8819] hsr_slave_0: entered promiscuous mode [ 88.849036][ T8819] hsr_slave_1: entered promiscuous mode [ 88.849350][ T8819] debugfs: 'hsr0' already exists in 'hsr' [ 88.849364][ T8819] Cannot create hsr debugfs directory [ 88.955446][ T8819] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 88.957296][ T8819] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 88.957671][ T8819] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 88.958688][ T8819] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 88.959004][ T8819] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 88.960019][ T8819] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 88.960418][ T8819] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 88.961363][ T8819] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 89.134948][ T4713] Bluetooth: hci3: command tx timeout [ 89.612850][ T8873] syzkaller0: entered promiscuous mode [ 89.612868][ T8873] syzkaller0: entered allmulticast mode [ 89.615707][ T8876] tipc: Enabled bearer , priority 0 [ 89.622320][ T8862] tipc: Resetting bearer [ 89.638923][ T8862] tipc: Disabling bearer [ 89.653854][ T8819] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.676040][ T8819] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.680914][ T1292] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.680952][ T1292] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.681498][ T1292] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.681520][ T1292] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.727413][ T8819] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 89.727431][ T8819] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 89.933436][ T4713] Bluetooth: hci2: command tx timeout [ 89.996704][ T8918] syzkaller0: entered promiscuous mode [ 89.996721][ T8918] syzkaller0: entered allmulticast mode [ 89.998161][ T8918] tipc: Enabled bearer , priority 0 [ 90.094006][ T4713] Bluetooth: hci4: command tx timeout [ 90.164691][ T8917] tipc: Resetting bearer [ 90.447536][ T8917] tipc: Disabling bearer [ 90.536770][ T8819] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.573375][ T4713] Bluetooth: hci1: command tx timeout [ 90.620754][ T8819] veth0_vlan: entered promiscuous mode [ 90.624514][ T8819] veth1_vlan: entered promiscuous mode [ 90.686015][ T8955] FAULT_INJECTION: forcing a failure. [ 90.686015][ T8955] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 90.686036][ T8955] CPU: 1 UID: 0 PID: 8955 Comm: syz.1.1295 Not tainted syzkaller #0 PREEMPT [ 90.686046][ T8955] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 90.686051][ T8955] Call trace: [ 90.686054][ T8955] show_stack+0x2c/0x3c (C) [ 90.686071][ T8955] __dump_stack+0x30/0x40 [ 90.686082][ T8955] dump_stack_lvl+0xd8/0x12c [ 90.686091][ T8955] dump_stack+0x1c/0x28 [ 90.686101][ T8955] should_fail_ex+0x418/0x58c [ 90.686109][ T8955] should_fail+0x14/0x24 [ 90.686115][ T8955] should_fail_usercopy+0x20/0x30 [ 90.686122][ T8955] _inline_copy_from_user+0x3c/0x174 [ 90.686132][ T8955] __sys_bpf+0x1b4/0x82c [ 90.686140][ T8955] __arm64_sys_bpf+0xd0/0xec [ 90.686147][ T8955] invoke_syscall+0x98/0x244 [ 90.686158][ T8955] el0_svc_common+0xec/0x23c [ 90.686167][ T8955] do_el0_svc+0x4c/0x5c [ 90.686176][ T8955] el0_svc+0x60/0x1d8 [ 90.686185][ T8955] el0t_64_sync_handler+0x44/0x104 [ 90.686192][ T8955] el0t_64_sync+0x198/0x19c [ 91.092871][ T8819] veth0_macvtap: entered promiscuous mode [ 91.098156][ T8819] veth1_macvtap: entered promiscuous mode [ 91.101590][ T8819] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.111424][ T8819] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.182019][ T1271] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.182034][ T1271] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.185243][ T13] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.185277][ T13] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.185292][ T13] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.185307][ T13] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.195711][ T1271] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.195725][ T1271] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.214596][ T4713] Bluetooth: hci3: command tx timeout [ 91.293868][ T8982] loop6: detected capacity change from 0 to 256 [ 91.319921][ T8976] tipc: Enabling of bearer rejected, failed to enable media [ 91.352025][ T8988] loop5: detected capacity change from 0 to 512 [ 91.385626][ T8988] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 91.404911][ T8988] 9p: Bad value for 'wfdno' [ 91.436013][ T8484] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.722104][ T9023] loop6: detected capacity change from 0 to 512 [ 91.739432][ T9023] FAT-fs (loop6): error, invalid access to FAT (entry 0x0fffff00) [ 91.739450][ T9023] FAT-fs (loop6): Filesystem has been set read-only [ 91.961561][ T9032] syzkaller0: entered promiscuous mode [ 91.961582][ T9032] syzkaller0: entered allmulticast mode [ 91.982437][ T9026] tipc: Started in network mode [ 91.982458][ T9026] tipc: Node identity baa8fca58d59, cluster identity 4711 [ 91.982510][ T9026] tipc: Enabled bearer , priority 0 [ 91.996282][ T9036] loop5: detected capacity change from 0 to 256 [ 92.004860][ T9026] tipc: Resetting bearer [ 92.008551][ T9025] tipc: Resetting bearer [ 92.015012][ T4713] Bluetooth: hci2: command tx timeout [ 92.019458][ T4618] block nbd0: Possible stuck request 000000001c7a3d62: control (read@0,1024B). Runtime 60 seconds [ 92.019481][ T4618] block nbd0: Possible stuck request 0000000034f4f83a: control (read@1024,1024B). Runtime 60 seconds [ 92.019493][ T4618] block nbd0: Possible stuck request 00000000bc1a48f1: control (read@2048,1024B). Runtime 60 seconds [ 92.019504][ T4618] block nbd0: Possible stuck request 0000000018dc6858: control (read@3072,1024B). Runtime 60 seconds [ 92.019582][ T9025] tipc: Disabling bearer [ 92.077871][ T9042] netlink: 224 bytes leftover after parsing attributes in process `syz.7.1319'. [ 92.091315][ T9040] syzkaller0: entered promiscuous mode [ 92.091331][ T9040] syzkaller0: entered allmulticast mode [ 92.100723][ T9042] netlink: 'syz.7.1319': attribute type 11 has an invalid length. [ 92.107439][ T9040] tipc: Enabled bearer , priority 0 [ 92.108810][ T9039] tipc: Resetting bearer [ 92.124140][ T9039] tipc: Disabling bearer [ 92.138693][ T9042] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1319'. [ 92.140713][ T9046] syzkaller0: entered promiscuous mode [ 92.140831][ T9046] syzkaller0: entered allmulticast mode [ 92.145060][ T9046] tipc: Enabled bearer , priority 0 [ 92.151465][ T9046] tipc: Resetting bearer [ 92.161897][ T9045] tipc: Resetting bearer [ 92.168378][ T9045] tipc: Disabling bearer [ 92.173424][ T4713] Bluetooth: hci4: command tx timeout [ 92.181978][ T9052] FAULT_INJECTION: forcing a failure. [ 92.181978][ T9052] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 92.181998][ T9052] CPU: 1 UID: 0 PID: 9052 Comm: syz.7.1324 Not tainted syzkaller #0 PREEMPT [ 92.182009][ T9052] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 92.182015][ T9052] Call trace: [ 92.182018][ T9052] show_stack+0x2c/0x3c (C) [ 92.182036][ T9052] __dump_stack+0x30/0x40 [ 92.182047][ T9052] dump_stack_lvl+0xd8/0x12c [ 92.182056][ T9052] dump_stack+0x1c/0x28 [ 92.182066][ T9052] should_fail_ex+0x418/0x58c [ 92.182074][ T9052] should_fail+0x14/0x24 [ 92.182080][ T9052] should_fail_usercopy+0x20/0x30 [ 92.182088][ T9052] _inline_copy_from_user+0x3c/0x174 [ 92.182100][ T9052] copy_msghdr_from_user+0xb8/0x194 [ 92.182107][ T9052] ___sys_sendmsg+0x14c/0x224 [ 92.182116][ T9052] __sys_sendmsg+0x158/0x204 [ 92.182125][ T9052] __arm64_sys_sendmsg+0x88/0x9c [ 92.182135][ T9052] invoke_syscall+0x98/0x244 [ 92.182145][ T9052] el0_svc_common+0xec/0x23c [ 92.182155][ T9052] do_el0_svc+0x4c/0x5c [ 92.182164][ T9052] el0_svc+0x60/0x1d8 [ 92.182172][ T9052] el0t_64_sync_handler+0x44/0x104 [ 92.182179][ T9052] el0t_64_sync+0x198/0x19c [ 92.235053][ T9061] batman_adv: batadv0: Adding interface: syzkaller0 [ 92.235068][ T9061] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 92.235085][ T9061] batman_adv: batadv0: Interface activated: syzkaller0 [ 92.329733][ T9065] FAULT_INJECTION: forcing a failure. [ 92.329733][ T9065] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 92.329755][ T9065] CPU: 1 UID: 0 PID: 9065 Comm: syz.6.1328 Not tainted syzkaller #0 PREEMPT [ 92.329768][ T9065] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 92.329773][ T9065] Call trace: [ 92.329777][ T9065] show_stack+0x2c/0x3c (C) [ 92.329796][ T9065] __dump_stack+0x30/0x40 [ 92.329807][ T9065] dump_stack_lvl+0xd8/0x12c [ 92.329817][ T9065] dump_stack+0x1c/0x28 [ 92.329826][ T9065] should_fail_ex+0x418/0x58c [ 92.329835][ T9065] should_fail+0x14/0x24 [ 92.329842][ T9065] should_fail_usercopy+0x20/0x30 [ 92.329849][ T9065] simple_read_from_buffer+0xc4/0x238 [ 92.329860][ T9065] proc_fail_nth_read+0x1a8/0x248 [ 92.329869][ T9065] vfs_read+0x230/0x8c8 [ 92.329877][ T9065] ksys_read+0x12c/0x228 [ 92.329884][ T9065] __arm64_sys_read+0x84/0x98 [ 92.329891][ T9065] invoke_syscall+0x98/0x244 [ 92.329901][ T9065] el0_svc_common+0xec/0x23c [ 92.329911][ T9065] do_el0_svc+0x4c/0x5c [ 92.329920][ T9065] el0_svc+0x60/0x1d8 [ 92.329929][ T9065] el0t_64_sync_handler+0x44/0x104 [ 92.329936][ T9065] el0t_64_sync+0x198/0x19c [ 92.405702][ T9060] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 92.414743][ T9060] batman_adv: batadv0: Removing interface: syzkaller0 [ 92.449485][ T9070] capability: warning: `syz.5.1330' uses 32-bit capabilities (legacy support in use) [ 92.467029][ T9072] loop7: detected capacity change from 0 to 256 [ 92.655554][ T50] Bluetooth: hci1: command tx timeout [ 92.860496][ T9083] syzkaller0: entered promiscuous mode [ 92.860513][ T9083] syzkaller0: entered allmulticast mode [ 92.866249][ T9086] tipc: Started in network mode [ 92.866269][ T9086] tipc: Node identity 6a1dc776299f, cluster identity 4711 [ 92.866318][ T9086] tipc: Enabled bearer , priority 0 [ 92.868167][ T9075] tipc: Resetting bearer [ 92.873040][ T9075] tipc: Disabling bearer [ 92.898805][ T9089] netlink: 'syz.1.1333': attribute type 1 has an invalid length. [ 92.922353][ T9091] FAULT_INJECTION: forcing a failure. [ 92.922353][ T9091] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 92.922376][ T9091] CPU: 0 UID: 0 PID: 9091 Comm: syz.6.1334 Not tainted syzkaller #0 PREEMPT [ 92.922390][ T9091] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 92.922402][ T9091] Call trace: [ 92.922406][ T9091] show_stack+0x2c/0x3c (C) [ 92.922429][ T9091] __dump_stack+0x30/0x40 [ 92.922441][ T9091] dump_stack_lvl+0xd8/0x12c [ 92.922451][ T9091] dump_stack+0x1c/0x28 [ 92.922460][ T9091] should_fail_ex+0x418/0x58c [ 92.922469][ T9091] should_fail+0x14/0x24 [ 92.922475][ T9091] should_fail_usercopy+0x20/0x30 [ 92.922482][ T9091] _inline_copy_from_user+0x3c/0x174 [ 92.922492][ T9091] do_ip_vs_set_ctl+0x26c/0x93c [ 92.922499][ T9091] nf_setsockopt+0xa0/0xe4 [ 92.922508][ T9091] ip_setsockopt+0x118/0x128 [ 92.922515][ T9091] tcp_setsockopt+0xcc/0xe8 [ 92.922524][ T9091] sock_common_setsockopt+0xb0/0xcc [ 92.922534][ T9091] do_sock_setsockopt+0x1f0/0x330 [ 92.922543][ T9091] __sys_setsockopt+0x104/0x170 [ 92.922553][ T9091] __arm64_sys_setsockopt+0xc8/0xe4 [ 92.922563][ T9091] invoke_syscall+0x98/0x244 [ 92.922573][ T9091] el0_svc_common+0xec/0x23c [ 92.922582][ T9091] do_el0_svc+0x4c/0x5c [ 92.922591][ T9091] el0_svc+0x60/0x1d8 [ 92.922600][ T9091] el0t_64_sync_handler+0x44/0x104 [ 92.922607][ T9091] el0t_64_sync+0x198/0x19c [ 92.971244][ T9095] syzkaller0: entered promiscuous mode [ 92.971262][ T9095] syzkaller0: entered allmulticast mode [ 92.976411][ T9095] tipc: Enabled bearer , priority 0 [ 92.977170][ T9094] tipc: Resetting bearer [ 92.981930][ T9094] tipc: Disabling bearer [ 93.156277][ T9118] FAULT_INJECTION: forcing a failure. [ 93.156277][ T9118] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 93.156299][ T9118] CPU: 1 UID: 0 PID: 9118 Comm: syz.5.1344 Not tainted syzkaller #0 PREEMPT [ 93.156311][ T9118] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 93.156316][ T9118] Call trace: [ 93.156320][ T9118] show_stack+0x2c/0x3c (C) [ 93.156340][ T9118] __dump_stack+0x30/0x40 [ 93.156351][ T9118] dump_stack_lvl+0xd8/0x12c [ 93.156361][ T9118] dump_stack+0x1c/0x28 [ 93.156370][ T9118] should_fail_ex+0x418/0x58c [ 93.156379][ T9118] should_fail+0x14/0x24 [ 93.156385][ T9118] should_fail_usercopy+0x20/0x30 [ 93.156392][ T9118] _inline_copy_from_user+0x3c/0x174 [ 93.156404][ T9118] do_sock_getsockopt+0x210/0x720 [ 93.156420][ T9118] __sys_getsockopt+0xfc/0x168 [ 93.156430][ T9118] __arm64_sys_getsockopt+0xc8/0xe4 [ 93.156440][ T9118] invoke_syscall+0x98/0x244 [ 93.156450][ T9118] el0_svc_common+0xec/0x23c [ 93.156460][ T9118] do_el0_svc+0x4c/0x5c [ 93.156469][ T9118] el0_svc+0x60/0x1d8 [ 93.156477][ T9118] el0t_64_sync_handler+0x44/0x104 [ 93.156484][ T9118] el0t_64_sync+0x198/0x19c [ 93.246492][ T9127] syzkaller0: entered promiscuous mode [ 93.246511][ T9127] syzkaller0: entered allmulticast mode [ 93.248685][ T9129] loop6: detected capacity change from 0 to 8192 [ 93.252302][ T9127] tipc: Enabled bearer , priority 0 [ 93.261505][ T9127] tipc: Resetting bearer [ 93.265876][ T9126] tipc: Resetting bearer [ 93.274253][ T9126] tipc: Disabling bearer [ 93.285218][ T9133] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1349'. [ 93.285642][ T9129] loop6: AHDI p1 p2 p3 p4 [ 93.285745][ T9129] loop6: p1 start 2130706432 is beyond EOD, truncated [ 93.285756][ T9129] loop6: p3 start 1761607680 is beyond EOD, truncated [ 93.293949][ T4713] Bluetooth: hci3: command tx timeout [ 93.359173][ T9136] netlink: 'syz.8.1351': attribute type 1 has an invalid length. [ 93.457961][ T9147] FAULT_INJECTION: forcing a failure. [ 93.457961][ T9147] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 93.457984][ T9147] CPU: 1 UID: 0 PID: 9147 Comm: syz.1.1355 Not tainted syzkaller #0 PREEMPT [ 93.457997][ T9147] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 93.458003][ T9147] Call trace: [ 93.458006][ T9147] show_stack+0x2c/0x3c (C) [ 93.458024][ T9147] __dump_stack+0x30/0x40 [ 93.458035][ T9147] dump_stack_lvl+0xd8/0x12c [ 93.458044][ T9147] dump_stack+0x1c/0x28 [ 93.458054][ T9147] should_fail_ex+0x418/0x58c [ 93.458062][ T9147] should_fail+0x14/0x24 [ 93.458068][ T9147] should_fail_usercopy+0x20/0x30 [ 93.458075][ T9147] _inline_copy_from_user+0x3c/0x174 [ 93.458087][ T9147] copy_msghdr_from_user+0xb8/0x194 [ 93.458094][ T9147] ___sys_sendmsg+0x14c/0x224 [ 93.458104][ T9147] __sys_sendmsg+0x158/0x204 [ 93.458113][ T9147] __arm64_sys_sendmsg+0x88/0x9c [ 93.458122][ T9147] invoke_syscall+0x98/0x244 [ 93.458132][ T9147] el0_svc_common+0xec/0x23c [ 93.458142][ T9147] do_el0_svc+0x4c/0x5c [ 93.458151][ T9147] el0_svc+0x60/0x1d8 [ 93.458159][ T9147] el0t_64_sync_handler+0x44/0x104 [ 93.458166][ T9147] el0t_64_sync+0x198/0x19c [ 93.544621][ T9164] FAULT_INJECTION: forcing a failure. [ 93.544621][ T9164] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 93.544645][ T9164] CPU: 1 UID: 0 PID: 9164 Comm: syz.5.1361 Not tainted syzkaller #0 PREEMPT [ 93.544655][ T9164] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 93.544661][ T9164] Call trace: [ 93.544664][ T9164] show_stack+0x2c/0x3c (C) [ 93.544683][ T9164] __dump_stack+0x30/0x40 [ 93.544693][ T9164] dump_stack_lvl+0xd8/0x12c [ 93.544703][ T9164] dump_stack+0x1c/0x28 [ 93.544712][ T9164] should_fail_ex+0x418/0x58c [ 93.544720][ T9164] should_fail+0x14/0x24 [ 93.544726][ T9164] should_fail_usercopy+0x20/0x30 [ 93.544734][ T9164] simple_read_from_buffer+0xc4/0x238 [ 93.544744][ T9164] proc_fail_nth_read+0x1a8/0x248 [ 93.544754][ T9164] vfs_read+0x230/0x8c8 [ 93.544761][ T9164] ksys_read+0x12c/0x228 [ 93.544768][ T9164] __arm64_sys_read+0x84/0x98 [ 93.544775][ T9164] invoke_syscall+0x98/0x244 [ 93.544785][ T9164] el0_svc_common+0xec/0x23c [ 93.544794][ T9164] do_el0_svc+0x4c/0x5c [ 93.544803][ T9164] el0_svc+0x60/0x1d8 [ 93.544812][ T9164] el0t_64_sync_handler+0x44/0x104 [ 93.544819][ T9164] el0t_64_sync+0x198/0x19c [ 93.583501][ T9169] syzkaller0: entered promiscuous mode [ 93.583518][ T9169] syzkaller0: entered allmulticast mode [ 93.584676][ T9169] tipc: Started in network mode [ 93.584691][ T9169] tipc: Node identity 921024700e54, cluster identity 4711 [ 93.585518][ T9169] tipc: Enabled bearer , priority 0 [ 93.594248][ T9169] tipc: Resetting bearer [ 93.596653][ T9168] tipc: Resetting bearer [ 93.606405][ T9168] tipc: Disabling bearer [ 93.707980][ T9178] netlink: 'syz.5.1368': attribute type 14 has an invalid length. [ 93.734677][ T9184] netlink: 'syz.7.1370': attribute type 1 has an invalid length. [ 93.850703][ T9207] syzkaller0: entered promiscuous mode [ 93.850723][ T9207] syzkaller0: entered allmulticast mode [ 93.891219][ T9214] FAULT_INJECTION: forcing a failure. [ 93.891219][ T9214] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 93.891240][ T9214] CPU: 1 UID: 0 PID: 9214 Comm: syz.7.1374 Not tainted syzkaller #0 PREEMPT [ 93.891250][ T9214] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 93.891255][ T9214] Call trace: [ 93.891258][ T9214] show_stack+0x2c/0x3c (C) [ 93.891277][ T9214] __dump_stack+0x30/0x40 [ 93.891287][ T9214] dump_stack_lvl+0xd8/0x12c [ 93.891297][ T9214] dump_stack+0x1c/0x28 [ 93.891306][ T9214] should_fail_ex+0x418/0x58c [ 93.891314][ T9214] should_fail+0x14/0x24 [ 93.891321][ T9214] should_fail_usercopy+0x20/0x30 [ 93.891328][ T9214] _inline_copy_from_user+0x3c/0x174 [ 93.891340][ T9214] move_addr_to_kernel+0x88/0x168 [ 93.891349][ T9214] __sys_connect+0xd4/0x194 [ 93.891358][ T9214] __arm64_sys_connect+0x84/0x9c [ 93.891367][ T9214] invoke_syscall+0x98/0x244 [ 93.891378][ T9214] el0_svc_common+0xec/0x23c [ 93.891387][ T9214] do_el0_svc+0x4c/0x5c [ 93.891396][ T9214] el0_svc+0x60/0x1d8 [ 93.891404][ T9214] el0t_64_sync_handler+0x44/0x104 [ 93.891420][ T9214] el0t_64_sync+0x198/0x19c [ 94.501489][ T9268] IPVS: sync thread started: state = BACKUP, mcast_ifn = bridge0, syncid = 0, id = 0 [ 94.501664][ T9263] syzkaller0: entered promiscuous mode [ 94.501680][ T9263] syzkaller0: entered allmulticast mode [ 94.511613][ T9267] tipc: Enabled bearer , priority 0 [ 94.558455][ T9250] tipc: Resetting bearer [ 94.567109][ T9249] tipc: Resetting bearer [ 94.579238][ T9249] tipc: Disabling bearer [ 94.587857][ T9270] netlink: 'syz.1.1384': attribute type 1 has an invalid length. [ 94.683133][ T9287] FAULT_INJECTION: forcing a failure. [ 94.683133][ T9287] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 94.683155][ T9287] CPU: 0 UID: 0 PID: 9287 Comm: syz.8.1389 Not tainted syzkaller #0 PREEMPT [ 94.683171][ T9287] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 94.683177][ T9287] Call trace: [ 94.683180][ T9287] show_stack+0x2c/0x3c (C) [ 94.683202][ T9287] __dump_stack+0x30/0x40 [ 94.683213][ T9287] dump_stack_lvl+0xd8/0x12c [ 94.683222][ T9287] dump_stack+0x1c/0x28 [ 94.683232][ T9287] should_fail_ex+0x418/0x58c [ 94.683240][ T9287] should_fail+0x14/0x24 [ 94.683247][ T9287] should_fail_usercopy+0x20/0x30 [ 94.683254][ T9287] _inline_copy_from_user+0x3c/0x174 [ 94.683263][ T9287] __sys_bpf+0x1b4/0x82c [ 94.683271][ T9287] __arm64_sys_bpf+0xd0/0xec [ 94.683279][ T9287] invoke_syscall+0x98/0x244 [ 94.683289][ T9287] el0_svc_common+0xec/0x23c [ 94.683299][ T9287] do_el0_svc+0x4c/0x5c [ 94.683308][ T9287] el0_svc+0x60/0x1d8 [ 94.683316][ T9287] el0t_64_sync_handler+0x44/0x104 [ 94.683323][ T9287] el0t_64_sync+0x198/0x19c [ 94.734614][ T4713] Bluetooth: hci1: command tx timeout [ 94.777159][ T9299] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1395'. [ 94.792214][ T9300] syzkaller0: entered promiscuous mode [ 94.792233][ T9300] syzkaller0: entered allmulticast mode [ 94.866857][ T9310] fuse: Bad value for 'group_id' [ 94.866873][ T9310] fuse: Bad value for 'group_id' [ 94.867194][ T9312] netlink: 48 bytes leftover after parsing attributes in process `syz.6.1398'. [ 95.247047][ T9319] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1399'. [ 95.272537][ T9325] FAULT_INJECTION: forcing a failure. [ 95.272537][ T9325] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 95.272560][ T9325] CPU: 1 UID: 0 PID: 9325 Comm: syz.5.1403 Not tainted syzkaller #0 PREEMPT [ 95.272573][ T9325] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 95.272579][ T9325] Call trace: [ 95.272583][ T9325] show_stack+0x2c/0x3c (C) [ 95.272601][ T9325] __dump_stack+0x30/0x40 [ 95.272611][ T9325] dump_stack_lvl+0xd8/0x12c [ 95.272621][ T9325] dump_stack+0x1c/0x28 [ 95.272630][ T9325] should_fail_ex+0x418/0x58c [ 95.272639][ T9325] should_fail+0x14/0x24 [ 95.272645][ T9325] should_fail_usercopy+0x20/0x30 [ 95.272652][ T9325] _inline_copy_from_user+0x3c/0x174 [ 95.272664][ T9325] copy_msghdr_from_user+0xb8/0x194 [ 95.272671][ T9325] ___sys_sendmsg+0x14c/0x224 [ 95.272680][ T9325] __sys_sendmsg+0x158/0x204 [ 95.272690][ T9325] __arm64_sys_sendmsg+0x88/0x9c [ 95.272703][ T9325] invoke_syscall+0x98/0x244 [ 95.272714][ T9325] el0_svc_common+0xec/0x23c [ 95.272723][ T9325] do_el0_svc+0x4c/0x5c [ 95.272733][ T9325] el0_svc+0x60/0x1d8 [ 95.272741][ T9325] el0t_64_sync_handler+0x44/0x104 [ 95.272748][ T9325] el0t_64_sync+0x198/0x19c [ 95.327848][ T9332] syzkaller0: entered promiscuous mode [ 95.327865][ T9332] syzkaller0: entered allmulticast mode [ 95.329933][ T9332] tipc: Enabled bearer , priority 0 [ 95.336497][ T9332] tipc: Resetting bearer [ 95.339194][ T9331] tipc: Resetting bearer [ 95.349085][ T9331] tipc: Disabling bearer [ 95.424690][ T9341] netlink: 'syz.6.1409': attribute type 2 has an invalid length. [ 95.438309][ T9343] FAULT_INJECTION: forcing a failure. [ 95.438309][ T9343] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 95.438331][ T9343] CPU: 1 UID: 0 PID: 9343 Comm: syz.7.1410 Not tainted syzkaller #0 PREEMPT [ 95.438344][ T9343] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 95.438350][ T9343] Call trace: [ 95.438354][ T9343] show_stack+0x2c/0x3c (C) [ 95.438372][ T9343] __dump_stack+0x30/0x40 [ 95.438383][ T9343] dump_stack_lvl+0xd8/0x12c [ 95.438393][ T9343] dump_stack+0x1c/0x28 [ 95.438402][ T9343] should_fail_ex+0x418/0x58c [ 95.438416][ T9343] should_fail+0x14/0x24 [ 95.438423][ T9343] should_fail_usercopy+0x20/0x30 [ 95.438431][ T9343] _copy_from_iter+0x188/0x1064 [ 95.438440][ T9343] tun_get_user+0x1e4/0x37fc [ 95.438450][ T9343] tun_chr_write_iter+0xfc/0x168 [ 95.438459][ T9343] vfs_write+0x51c/0xa0c [ 95.438467][ T9343] ksys_write+0x12c/0x228 [ 95.438473][ T9343] __arm64_sys_write+0x84/0x98 [ 95.438480][ T9343] invoke_syscall+0x98/0x244 [ 95.438490][ T9343] el0_svc_common+0xec/0x23c [ 95.438500][ T9343] do_el0_svc+0x4c/0x5c [ 95.438509][ T9343] el0_svc+0x60/0x1d8 [ 95.438517][ T9343] el0t_64_sync_handler+0x44/0x104 [ 95.438524][ T9343] el0t_64_sync+0x198/0x19c [ 95.491371][ T9348] syzkaller0: entered promiscuous mode [ 95.491392][ T9348] syzkaller0: entered allmulticast mode [ 95.660027][ T9369] netlink: 36 bytes leftover after parsing attributes in process `syz.8.1419'. [ 95.850537][ T9382] FAULT_INJECTION: forcing a failure. [ 95.850537][ T9382] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 95.850559][ T9382] CPU: 0 UID: 0 PID: 9382 Comm: syz.8.1421 Not tainted syzkaller #0 PREEMPT [ 95.850572][ T9382] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 95.850578][ T9382] Call trace: [ 95.850582][ T9382] show_stack+0x2c/0x3c (C) [ 95.850602][ T9382] __dump_stack+0x30/0x40 [ 95.850613][ T9382] dump_stack_lvl+0xd8/0x12c [ 95.850623][ T9382] dump_stack+0x1c/0x28 [ 95.850632][ T9382] should_fail_ex+0x418/0x58c [ 95.850640][ T9382] should_fail+0x14/0x24 [ 95.850647][ T9382] should_fail_usercopy+0x20/0x30 [ 95.850654][ T9382] _inline_copy_from_user+0x3c/0x174 [ 95.850664][ T9382] __sys_bpf+0x1b4/0x82c [ 95.850672][ T9382] __arm64_sys_bpf+0xd0/0xec [ 95.850680][ T9382] invoke_syscall+0x98/0x244 [ 95.850690][ T9382] el0_svc_common+0xec/0x23c [ 95.850700][ T9382] do_el0_svc+0x4c/0x5c [ 95.850709][ T9382] el0_svc+0x60/0x1d8 [ 95.850717][ T9382] el0t_64_sync_handler+0x44/0x104 [ 95.850724][ T9382] el0t_64_sync+0x198/0x19c [ 96.253059][ T9405] netlink: 68 bytes leftover after parsing attributes in process `syz.8.1426'. [ 96.314820][ T9408] xt_l2tp: missing protocol rule (udp|l2tpip) [ 96.584666][ T9407] syzkaller0: entered promiscuous mode [ 96.584689][ T9407] syzkaller0: entered allmulticast mode [ 96.587943][ T9410] tipc: Enabled bearer , priority 0 [ 96.589607][ T9389] tipc: Resetting bearer [ 96.596026][ T9389] tipc: Disabling bearer [ 96.666413][ T9416] FAULT_INJECTION: forcing a failure. [ 96.666413][ T9416] name failslab, interval 1, probability 0, space 0, times 1 [ 96.666435][ T9416] CPU: 1 UID: 0 PID: 9416 Comm: syz.6.1429 Not tainted syzkaller #0 PREEMPT [ 96.666448][ T9416] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 96.666454][ T9416] Call trace: [ 96.666457][ T9416] show_stack+0x2c/0x3c (C) [ 96.666476][ T9416] __dump_stack+0x30/0x40 [ 96.666487][ T9416] dump_stack_lvl+0xd8/0x12c [ 96.666496][ T9416] dump_stack+0x1c/0x28 [ 96.666506][ T9416] should_fail_ex+0x418/0x58c [ 96.666514][ T9416] should_failslab+0xc4/0x120 [ 96.666522][ T9416] kmem_cache_alloc_lru_noprof+0x98/0x5d8 [ 96.666530][ T9416] sock_alloc_inode+0x30/0x180 [ 96.666539][ T9416] alloc_inode+0x68/0x198 [ 96.666548][ T9416] sock_alloc+0x4c/0x204 [ 96.666557][ T9416] do_accept+0x108/0x438 [ 96.666566][ T9416] __sys_accept4+0x11c/0x1f8 [ 96.666574][ T9416] __arm64_sys_accept+0x88/0xa0 [ 96.666584][ T9416] invoke_syscall+0x98/0x244 [ 96.666594][ T9416] el0_svc_common+0xec/0x23c [ 96.666603][ T9416] do_el0_svc+0x4c/0x5c [ 96.666616][ T9416] el0_svc+0x60/0x1d8 [ 96.666624][ T9416] el0t_64_sync_handler+0x44/0x104 [ 96.666631][ T9416] el0t_64_sync+0x198/0x19c [ 96.701784][ T9420] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1430'. [ 96.726048][ T9423] syzkaller0: entered promiscuous mode [ 96.726066][ T9423] syzkaller0: entered allmulticast mode [ 96.728749][ T9423] tipc: Enabled bearer , priority 0 [ 96.731092][ T9423] tipc: Resetting bearer [ 96.739838][ T9422] tipc: Resetting bearer [ 96.746659][ T9422] tipc: Disabling bearer [ 96.804647][ T9434] syzkaller0: entered promiscuous mode [ 96.804665][ T9434] syzkaller0: entered allmulticast mode [ 96.813362][ T4713] Bluetooth: hci1: command tx timeout [ 97.296589][ T9455] netlink: 'syz.7.1439': attribute type 2 has an invalid length. [ 97.387468][ T9465] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1444'. [ 97.526120][ T9473] FAULT_INJECTION: forcing a failure. [ 97.526120][ T9473] name failslab, interval 1, probability 0, space 0, times 0 [ 97.526140][ T9473] CPU: 0 UID: 0 PID: 9473 Comm: syz.1.1445 Not tainted syzkaller #0 PREEMPT [ 97.526150][ T9473] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 97.526155][ T9473] Call trace: [ 97.526158][ T9473] show_stack+0x2c/0x3c (C) [ 97.526176][ T9473] __dump_stack+0x30/0x40 [ 97.526187][ T9473] dump_stack_lvl+0xd8/0x12c [ 97.526196][ T9473] dump_stack+0x1c/0x28 [ 97.526206][ T9473] should_fail_ex+0x418/0x58c [ 97.526214][ T9473] should_failslab+0xc4/0x120 [ 97.526222][ T9473] kmem_cache_alloc_node_noprof+0x98/0x604 [ 97.526231][ T9473] __alloc_skb+0x1f0/0x610 [ 97.526241][ T9473] alloc_skb_with_frags+0xb8/0x690 [ 97.526249][ T9473] sock_alloc_send_pskb+0x740/0x850 [ 97.526258][ T9473] hci_sock_sendmsg+0x1c0/0xc44 [ 97.526268][ T9473] __sock_sendmsg+0xc8/0x17c [ 97.526276][ T9473] sock_write_iter+0x220/0x310 [ 97.526286][ T9473] vfs_write+0x51c/0xa0c [ 97.526293][ T9473] ksys_write+0x12c/0x228 [ 97.526300][ T9473] __arm64_sys_write+0x84/0x98 [ 97.526307][ T9473] invoke_syscall+0x98/0x244 [ 97.526317][ T9473] el0_svc_common+0xec/0x23c [ 97.526327][ T9473] do_el0_svc+0x4c/0x5c [ 97.526336][ T9473] el0_svc+0x60/0x1d8 [ 97.526343][ T9473] el0t_64_sync_handler+0x44/0x104 [ 97.526350][ T9473] el0t_64_sync+0x198/0x19c [ 97.813612][ T9483] syzkaller0: entered promiscuous mode [ 97.813634][ T9483] syzkaller0: entered allmulticast mode [ 97.817074][ T9486] tipc: Enabled bearer , priority 0 [ 97.821386][ T9466] tipc: Resetting bearer [ 97.830592][ T9466] tipc: Disabling bearer [ 97.936209][ T9505] syzkaller0: entered promiscuous mode [ 97.936231][ T9505] syzkaller0: entered allmulticast mode [ 98.082344][ T9529] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1455'. [ 98.130145][ T9534] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1457'. [ 98.155955][ T9537] loop1: detected capacity change from 0 to 8 [ 98.170414][ T9537] squashfs: SQUASHFS error: Xattrs in filesystem, these will be ignored [ 98.170427][ T9537] unable to read xattr id index table [ 98.177128][ T9537] SQUASHFS error: zlib decompression failed, data probably corrupt [ 98.177146][ T9537] SQUASHFS error: Failed to read block 0x9b: -5 [ 98.177154][ T9537] SQUASHFS error: Unable to read metadata cache entry [99] [ 98.177160][ T9537] SQUASHFS error: Unable to read inode 0x127 [ 98.506049][ T9534] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1457'. [ 98.656945][ T9576] FAULT_INJECTION: forcing a failure. [ 98.656945][ T9576] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 98.656966][ T9576] CPU: 1 UID: 0 PID: 9576 Comm: syz.7.1462 Not tainted syzkaller #0 PREEMPT [ 98.656978][ T9576] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 98.656984][ T9576] Call trace: [ 98.656987][ T9576] show_stack+0x2c/0x3c (C) [ 98.657007][ T9576] __dump_stack+0x30/0x40 [ 98.657018][ T9576] dump_stack_lvl+0xd8/0x12c [ 98.657027][ T9576] dump_stack+0x1c/0x28 [ 98.657037][ T9576] should_fail_ex+0x418/0x58c [ 98.657045][ T9576] should_fail+0x14/0x24 [ 98.657051][ T9576] should_fail_usercopy+0x20/0x30 [ 98.657059][ T9576] _inline_copy_from_user+0x3c/0x174 [ 98.657070][ T9576] move_addr_to_kernel+0x88/0x168 [ 98.657079][ T9576] __sys_bind+0x12c/0x268 [ 98.657088][ T9576] __arm64_sys_bind+0x84/0x9c [ 98.657097][ T9576] invoke_syscall+0x98/0x244 [ 98.657107][ T9576] el0_svc_common+0xec/0x23c [ 98.657117][ T9576] do_el0_svc+0x4c/0x5c [ 98.657126][ T9576] el0_svc+0x60/0x1d8 [ 98.657134][ T9576] el0t_64_sync_handler+0x44/0x104 [ 98.657141][ T9576] el0t_64_sync+0x198/0x19c [ 99.178892][ T9610] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1469'. [ 99.249624][ T9623] syzkaller0: entered promiscuous mode [ 99.249646][ T9623] syzkaller0: entered allmulticast mode [ 99.251353][ T9626] syzkaller0: entered promiscuous mode [ 99.251365][ T9626] syzkaller0: entered allmulticast mode [ 99.375581][ T9646] loop1: detected capacity change from 0 to 256 [ 99.948135][ T9672] FAULT_INJECTION: forcing a failure. [ 99.948135][ T9672] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 99.948154][ T9672] CPU: 0 UID: 0 PID: 9672 Comm: syz.8.1482 Not tainted syzkaller #0 PREEMPT [ 99.948164][ T9672] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 99.948169][ T9672] Call trace: [ 99.948172][ T9672] show_stack+0x2c/0x3c (C) [ 99.948190][ T9672] __dump_stack+0x30/0x40 [ 99.948200][ T9672] dump_stack_lvl+0xd8/0x12c [ 99.948210][ T9672] dump_stack+0x1c/0x28 [ 99.948219][ T9672] should_fail_ex+0x418/0x58c [ 99.948227][ T9672] should_fail+0x14/0x24 [ 99.948234][ T9672] should_fail_usercopy+0x20/0x30 [ 99.948241][ T9672] simple_read_from_buffer+0xc4/0x238 [ 99.948251][ T9672] proc_fail_nth_read+0x1a8/0x248 [ 99.948261][ T9672] vfs_read+0x230/0x8c8 [ 99.948268][ T9672] ksys_read+0x12c/0x228 [ 99.948275][ T9672] __arm64_sys_read+0x84/0x98 [ 99.948282][ T9672] invoke_syscall+0x98/0x244 [ 99.948292][ T9672] el0_svc_common+0xec/0x23c [ 99.948301][ T9672] do_el0_svc+0x4c/0x5c [ 99.948310][ T9672] el0_svc+0x60/0x1d8 [ 99.948318][ T9672] el0t_64_sync_handler+0x44/0x104 [ 99.948326][ T9672] el0t_64_sync+0x198/0x19c [ 101.077937][ T9693] loop8: detected capacity change from 0 to 256 [ 101.640703][ T9698] syzkaller0: entered promiscuous mode [ 101.640722][ T9698] syzkaller0: entered allmulticast mode [ 102.153434][ T9611] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 102.201171][ T9707] ªªªªªª: renamed from vlan0 (while UP) [ 102.259939][ T4618] block nbd2: Possible stuck request 000000005537723d: control (read@0,1024B). Runtime 60 seconds [ 102.259972][ T4618] block nbd2: Possible stuck request 000000009195d6cb: control (read@1024,1024B). Runtime 60 seconds [ 102.259985][ T4618] block nbd2: Possible stuck request 000000004d772729: control (read@2048,1024B). Runtime 60 seconds [ 102.259996][ T4618] block nbd2: Possible stuck request 00000000f70ef3f4: control (read@3072,1024B). Runtime 60 seconds [ 102.260020][ T25] block nbd1: Possible stuck request 000000000d9495aa: control (read@0,4096B). Runtime 60 seconds [ 102.482609][ T9755] loop7: detected capacity change from 0 to 128 [ 102.701335][ T9782] FAULT_INJECTION: forcing a failure. [ 102.701335][ T9782] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 102.701357][ T9782] CPU: 0 UID: 0 PID: 9782 Comm: syz.8.1507 Not tainted syzkaller #0 PREEMPT [ 102.701370][ T9782] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 102.701376][ T9782] Call trace: [ 102.701379][ T9782] show_stack+0x2c/0x3c (C) [ 102.701407][ T9782] __dump_stack+0x30/0x40 [ 102.701420][ T9782] dump_stack_lvl+0xd8/0x12c [ 102.701433][ T9782] dump_stack+0x1c/0x28 [ 102.701444][ T9782] should_fail_ex+0x418/0x58c [ 102.701452][ T9782] should_fail+0x14/0x24 [ 102.701459][ T9782] should_fail_usercopy+0x20/0x30 [ 102.701466][ T9782] simple_read_from_buffer+0xc4/0x238 [ 102.701477][ T9782] proc_fail_nth_read+0x1a8/0x248 [ 102.701486][ T9782] vfs_read+0x230/0x8c8 [ 102.701494][ T9782] ksys_read+0x12c/0x228 [ 102.701501][ T9782] __arm64_sys_read+0x84/0x98 [ 102.701507][ T9782] invoke_syscall+0x98/0x244 [ 102.701517][ T9782] el0_svc_common+0xec/0x23c [ 102.701527][ T9782] do_el0_svc+0x4c/0x5c [ 102.701536][ T9782] el0_svc+0x60/0x1d8 [ 102.701545][ T9782] el0t_64_sync_handler+0x44/0x104 [ 102.701552][ T9782] el0t_64_sync+0x198/0x19c [ 102.918047][ T9795] futex_wake_op: syz.8.1510 tries to shift op by 144; fix this program [ 102.992528][ T9797] FAULT_INJECTION: forcing a failure. [ 102.992528][ T9797] name failslab, interval 1, probability 0, space 0, times 0 [ 102.992550][ T9797] CPU: 0 UID: 0 PID: 9797 Comm: syz.8.1511 Not tainted syzkaller #0 PREEMPT [ 102.992564][ T9797] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 102.992570][ T9797] Call trace: [ 102.992573][ T9797] show_stack+0x2c/0x3c (C) [ 102.992593][ T9797] __dump_stack+0x30/0x40 [ 102.992605][ T9797] dump_stack_lvl+0xd8/0x12c [ 102.992614][ T9797] dump_stack+0x1c/0x28 [ 102.992624][ T9797] should_fail_ex+0x418/0x58c [ 102.992632][ T9797] should_failslab+0xc4/0x120 [ 102.992640][ T9797] __kmalloc_noprof+0x108/0x6c8 [ 102.992650][ T9797] bpf_test_init+0xa8/0x154 [ 102.992659][ T9797] bpf_prog_test_run_xdp+0x408/0xe0c [ 102.992667][ T9797] bpf_prog_test_run+0x1e0/0x250 [ 102.992677][ T9797] __sys_bpf+0x6bc/0x82c [ 102.992685][ T9797] __arm64_sys_bpf+0xd0/0xec [ 102.992693][ T9797] invoke_syscall+0x98/0x244 [ 102.992703][ T9797] el0_svc_common+0xec/0x23c [ 102.992712][ T9797] do_el0_svc+0x4c/0x5c [ 102.992722][ T9797] el0_svc+0x60/0x1d8 [ 102.992730][ T9797] el0t_64_sync_handler+0x44/0x104 [ 102.992737][ T9797] el0t_64_sync+0x198/0x19c [ 103.288133][ T9824] loop5: detected capacity change from 0 to 256 [ 103.521033][ T9831] [U] [ 103.521054][ T9831] [U] [ 103.521067][ T9831] [U] [ 103.521080][ T9831] [U] [ 103.521136][ T9831] [U] [ 103.521149][ T9831] [U] [ 103.521161][ T9831] [U] [ 103.521174][ T9831] [U] [ 103.521224][ T9831] [U] [ 103.521237][ T9831] [U] [ 103.521249][ T9831] [U] [ 103.521266][ T9831] [U] 0000000000060929,euid=00000000000000000000,dont_measure, [ 103.521386][ T9831] [U] ¸ùûß÷5\9é~\ê_D]ƒ¨Ù õÝ„š`§›·@SÞÞ1™þ² ü)8SãwËDŸN¯�K™²Üßœ¯Ï -ºì»[`¨Ù [ 103.521411][ T9831] [U] [ 103.521426][ T9831] [U] [ 103.521439][ T9831] [U] [ 103.521509][ T9831] [U] [ 103.521522][ T9831] [U] [ 103.521535][ T9831] [U] [ 103.521548][ T9831] [U] [ 103.521618][ T9831] [U] [ 103.521631][ T9831] [U] [ 103.521644][ T9831] [U] [ 103.521656][ T9831] [U] [ 103.521710][ T9831] [U] [ 103.521723][ T9831] [U] [ 103.521735][ T9831] [U] [ 103.521748][ T9831] [U] [ 103.521807][ T9831] [U] [ 103.521820][ T9831] [U] [ 103.521833][ T9831] [U] [ 103.521846][ T9831] [U] [ 103.521900][ T9831] [U] [ 103.521913][ T9831] [U] [ 103.521925][ T9831] [U] [ 103.521938][ T9831] [U] [ 103.521997][ T9831] [U] [ 103.522009][ T9831] [U] [ 103.522021][ T9831] [U] [ 103.522034][ T9831] [U] [ 103.522046][ T9831] [U] [ 103.522099][ T9831] [U] [ 103.522112][ T9831] [U] [ 103.522124][ T9831] [U] [ 103.522136][ T9831] [U] [ 103.522194][ T9831] [U] [ 103.522207][ T9831] [U] [ 103.522219][ T9831] [U] [ 103.522232][ T9831] [U] [ 103.522285][ T9831] [U] [ 103.522298][ T9831] [U] [ 103.522310][ T9831] [U] [ 103.522322][ T9831] [U] [ 103.522380][ T9831] [U] [ 103.522397][ T9831] [U] [ 103.522409][ T9831] [U] [ 103.522422][ T9831] [U] [ 103.522475][ T9831] [U] [ 103.522488][ T9831] [U] [ 103.522500][ T9831] [U] [ 103.522512][ T9831] [U] [ 103.522570][ T9831] [U] [ 103.522583][ T9831] [U] [ 103.522595][ T9831] [U] [ 103.522607][ T9831] [U] [ 103.522661][ T9831] [U] [ 103.522673][ T9831] [U] [ 103.522686][ T9831] [U] [ 103.522698][ T9831] [U] [ 103.522756][ T9831] [U] [ 103.522768][ T9831] [U] [ 103.522781][ T9831] [U] [ 103.522793][ T9831] [U] [ 103.522846][ T9831] [U] [ 103.522859][ T9831] [U] [ 103.522871][ T9831] [U] [ 103.522883][ T9831] [U] [ 103.522941][ T9831] [U] [ 103.522953][ T9831] [U] [ 103.522966][ T9831] [U] [ 103.522978][ T9831] [U] [ 103.523032][ T9831] [U] [ 103.523044][ T9831] [U] [ 103.523056][ T9831] [U] [ 103.523069][ T9831] [U] [ 103.523126][ T9831] [U] [ 103.523139][ T9831] [U] [ 103.523151][ T9831] [U] [ 103.523165][ T9831] [U] [ 103.523704][ T9831] [U] [ 103.523717][ T9831] [U] [ 103.523730][ T9831] [U] [ 103.523742][ T9831] [U] [ 103.523801][ T9831] [U] [ 103.523814][ T9831] [U] [ 103.523826][ T9831] [U] [ 103.523838][ T9831] [U] [ 103.523891][ T9831] [U] [ 103.523904][ T9831] [U] [ 103.523916][ T9831] [U] [ 103.523928][ T9831] [U] [ 103.523986][ T9831] [U] [ 103.523998][ T9831] [U] [ 103.524011][ T9831] [U] [ 103.524023][ T9831] [U] [ 103.524077][ T9831] [U] [ 103.524089][ T9831] [U] [ 103.524101][ T9831] [U] [ 103.524113][ T9831] [U] [ 103.524171][ T9831] [U] [ 103.524183][ T9831] [U] [ 103.524196][ T9831] [U] [ 103.524208][ T9831] [U] [ 103.524261][ T9831] [U] [ 103.524274][ T9831] [U] [ 103.524286][ T9831] [U] [ 103.524298][ T9831] [U] [ 103.524356][ T9831] [U] [ 103.524368][ T9831] [U] [ 103.524381][ T9831] [U] [ 103.524397][ T9831] [U] [ 103.524457][ T9831] [U] [ 103.524470][ T9831] [U] [ 103.524483][ T9831] [U] [ 103.524495][ T9831] [U] [ 103.524544][ T9831] [U] [ 103.524556][ T9831] [U] [ 103.524569][ T9831] [U] [ 103.592959][ T9830] [U] [ 103.672225][ T9836] futex_wake_op: syz.5.1522 tries to shift op by 144; fix this program [ 103.672244][ T9837] futex_wake_op: syz.5.1522 tries to shift op by 144; fix this program [ 104.817007][ T25] block nbd3: Possible stuck request 00000000dc7e7af3: control (read@0,1024B). Runtime 60 seconds [ 104.817040][ T25] block nbd3: Possible stuck request 00000000a23fccc3: control (read@1024,3072B). Runtime 60 seconds [ 105.620717][ T9772] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 105.845842][ T9868] tipc: Enabling of bearer rejected, failed to enable media [ 105.987205][ T9894] FAULT_INJECTION: forcing a failure. [ 105.987205][ T9894] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 105.987228][ T9894] CPU: 1 UID: 0 PID: 9894 Comm: syz.7.1540 Not tainted syzkaller #0 PREEMPT [ 105.987241][ T9894] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 105.987248][ T9894] Call trace: [ 105.987251][ T9894] show_stack+0x2c/0x3c (C) [ 105.987273][ T9894] __dump_stack+0x30/0x40 [ 105.987286][ T9894] dump_stack_lvl+0xd8/0x12c [ 105.987298][ T9894] dump_stack+0x1c/0x28 [ 105.987310][ T9894] should_fail_ex+0x418/0x58c [ 105.987319][ T9894] should_fail+0x14/0x24 [ 105.987327][ T9894] should_fail_usercopy+0x20/0x30 [ 105.987335][ T9894] strncpy_from_user+0x48/0x388 [ 105.987345][ T9894] __arm64_sys_add_key+0x150/0x43c [ 105.987357][ T9894] invoke_syscall+0x98/0x244 [ 105.987370][ T9894] el0_svc_common+0xec/0x23c [ 105.987381][ T9894] do_el0_svc+0x4c/0x5c [ 105.987393][ T9894] el0_svc+0x60/0x1d8 [ 105.987402][ T9894] el0t_64_sync_handler+0x44/0x104 [ 105.987417][ T9894] el0t_64_sync+0x198/0x19c [ 106.617248][ T9911] loop6: detected capacity change from 0 to 4096 [ 106.619309][ T9911] EXT4-fs: Ignoring removed orlov option [ 106.622481][ T9911] EXT4-fs (loop6): Test dummy encryption mode enabled [ 106.652234][ T9911] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 106.669145][ T9911] fscrypt: AES-256-CBC-CTS using implementation "cts-cbc-aes-ce" [ 106.674127][ T9912] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 106.677104][ T9911] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 106.682713][ T9912] overlayfs: upper fs does not support tmpfile. [ 106.689702][ T9911] fscrypt: AES-256-XTS using blk-crypto-fallback [ 106.780679][ T8498] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.972478][ T9889] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 109.031884][ T9949] FAULT_INJECTION: forcing a failure. [ 109.031884][ T9949] name failslab, interval 1, probability 0, space 0, times 0 [ 109.031907][ T9949] CPU: 1 UID: 0 PID: 9949 Comm: syz.5.1553 Not tainted syzkaller #0 PREEMPT [ 109.031920][ T9949] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 109.031925][ T9949] Call trace: [ 109.031928][ T9949] show_stack+0x2c/0x3c (C) [ 109.031947][ T9949] __dump_stack+0x30/0x40 [ 109.031958][ T9949] dump_stack_lvl+0xd8/0x12c [ 109.031967][ T9949] dump_stack+0x1c/0x28 [ 109.031977][ T9949] should_fail_ex+0x418/0x58c [ 109.031985][ T9949] should_failslab+0xc4/0x120 [ 109.031993][ T9949] kmem_cache_alloc_noprof+0x94/0x5d4 [ 109.032001][ T9949] dst_alloc+0xf4/0x15c [ 109.032012][ T9949] rt_dst_alloc+0x4c/0x240 [ 109.032020][ T9949] ip_route_input_rcu+0x1958/0x23f0 [ 109.032028][ T9949] ip_route_input_noref+0x178/0x27c [ 109.032036][ T9949] ip_rcv_finish_core+0x4c8/0x1824 [ 109.032045][ T9949] ip_rcv_finish+0x12c/0x230 [ 109.032053][ T9949] NF_HOOK+0x308/0x398 [ 109.032061][ T9949] ip_rcv+0x7c/0x9c [ 109.032070][ T9949] __netif_receive_skb_one_core+0xc8/0x110 [ 109.032080][ T9949] __netif_receive_skb+0x34/0x128 [ 109.032087][ T9949] netif_receive_skb+0x1e0/0x888 [ 109.032096][ T9949] tun_rx_batched+0x180/0x620 [ 109.032106][ T9949] tun_get_user+0x2400/0x37fc [ 109.032114][ T9949] tun_chr_write_iter+0xfc/0x168 [ 109.032123][ T9949] vfs_write+0x51c/0xa0c [ 109.032130][ T9949] ksys_write+0x12c/0x228 [ 109.032136][ T9949] __arm64_sys_write+0x84/0x98 [ 109.032143][ T9949] invoke_syscall+0x98/0x244 [ 109.032154][ T9949] el0_svc_common+0xec/0x23c [ 109.032163][ T9949] do_el0_svc+0x4c/0x5c [ 109.032172][ T9949] el0_svc+0x60/0x1d8 [ 109.032180][ T9949] el0t_64_sync_handler+0x44/0x104 [ 109.032187][ T9949] el0t_64_sync+0x198/0x19c [ 109.127059][ T9963] netlink: 'syz.7.1559': attribute type 1 has an invalid length. [ 109.137437][ T9963] 8021q: adding VLAN 0 to HW filter on device bond1 [ 109.144575][ T9963] bond1: (slave gretap1): making interface the new active one [ 109.145919][ T9963] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 109.170371][ T9968] FAULT_INJECTION: forcing a failure. [ 109.170371][ T9968] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 109.170398][ T9968] CPU: 0 UID: 0 PID: 9968 Comm: syz.1.1558 Not tainted syzkaller #0 PREEMPT [ 109.170410][ T9968] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 109.170417][ T9968] Call trace: [ 109.170421][ T9968] show_stack+0x2c/0x3c (C) [ 109.170439][ T9968] __dump_stack+0x30/0x40 [ 109.170450][ T9968] dump_stack_lvl+0xd8/0x12c [ 109.170460][ T9968] dump_stack+0x1c/0x28 [ 109.170469][ T9968] should_fail_ex+0x418/0x58c [ 109.170477][ T9968] should_fail+0x14/0x24 [ 109.170483][ T9968] should_fail_usercopy+0x20/0x30 [ 109.170490][ T9968] _inline_copy_from_user+0x3c/0x174 [ 109.170502][ T9968] copy_msghdr_from_user+0xb8/0x194 [ 109.170509][ T9968] ___sys_recvmsg+0x11c/0x1f4 [ 109.170518][ T9968] do_recvmmsg+0x288/0x7d4 [ 109.170528][ T9968] __sys_recvmmsg+0x1e0/0x270 [ 109.170537][ T9968] __arm64_sys_recvmmsg+0xe0/0x108 [ 109.170547][ T9968] invoke_syscall+0x98/0x244 [ 109.170557][ T9968] el0_svc_common+0xec/0x23c [ 109.170566][ T9968] do_el0_svc+0x4c/0x5c [ 109.170576][ T9968] el0_svc+0x60/0x1d8 [ 109.170583][ T9968] el0t_64_sync_handler+0x44/0x104 [ 109.170590][ T9968] el0t_64_sync+0x198/0x19c [ 109.271399][ T9973] tipc: Enabled bearer , priority 0 [ 109.275266][ T9973] tipc: Resetting bearer [ 109.279995][ T9970] loop1: detected capacity change from 0 to 4096 [ 109.280547][ T9970] EXT4-fs: Ignoring removed nomblk_io_submit option [ 109.282585][ T9972] tipc: Disabling bearer [ 109.288943][ T9970] EXT4-fs (loop1): Test dummy encryption mode enabled [ 109.303066][ T9970] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 109.303123][ T9970] System zones: 0-5 [ 109.311051][ T9970] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 109.400344][ T9987] loop8: detected capacity change from 0 to 256 [ 109.409129][ T9987] FAT-fs (loop8): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 109.492607][ T9989] FAULT_INJECTION: forcing a failure. [ 109.492607][ T9989] name failslab, interval 1, probability 0, space 0, times 0 [ 109.492628][ T9989] CPU: 1 UID: 0 PID: 9989 Comm: syz.8.1566 Not tainted syzkaller #0 PREEMPT [ 109.492641][ T9989] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 109.492648][ T9989] Call trace: [ 109.492652][ T9989] show_stack+0x2c/0x3c (C) [ 109.492672][ T9989] __dump_stack+0x30/0x40 [ 109.492683][ T9989] dump_stack_lvl+0xd8/0x12c [ 109.492693][ T9989] dump_stack+0x1c/0x28 [ 109.492702][ T9989] should_fail_ex+0x418/0x58c [ 109.492711][ T9989] should_failslab+0xc4/0x120 [ 109.492719][ T9989] kmem_cache_alloc_node_noprof+0x98/0x604 [ 109.492727][ T9989] __alloc_skb+0x1f0/0x610 [ 109.492738][ T9989] ppp_write+0xa8/0x33c [ 109.492746][ T9989] vfs_write+0x2a4/0xa0c [ 109.492753][ T9989] ksys_write+0x12c/0x228 [ 109.492760][ T9989] __arm64_sys_write+0x84/0x98 [ 109.492767][ T9989] invoke_syscall+0x98/0x244 [ 109.492777][ T9989] el0_svc_common+0xec/0x23c [ 109.492786][ T9989] do_el0_svc+0x4c/0x5c [ 109.492796][ T9989] el0_svc+0x60/0x1d8 [ 109.492804][ T9989] el0t_64_sync_handler+0x44/0x104 [ 109.492811][ T9989] el0t_64_sync+0x198/0x19c [ 109.508234][ T4709] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.026527][ T4797] corsair-psu 0003:1B1C:1C03.0001: hidraw0: USB HID v0.00 Device [syz0] on syz0 [ 110.283238][ T4797] corsair-psu 0003:1B1C:1C03.0001: unable to initialize device (-110) [ 110.284806][ T4797] corsair-psu 0003:1B1C:1C03.0001: probe with driver corsair-psu failed with error -110 [ 112.388417][ T9983] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 112.444246][T10028] FAULT_INJECTION: forcing a failure. [ 112.444246][T10028] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 112.444270][T10028] CPU: 0 UID: 0 PID: 10028 Comm: syz.6.1577 Not tainted syzkaller #0 PREEMPT [ 112.444282][T10028] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 112.444288][T10028] Call trace: [ 112.444291][T10028] show_stack+0x2c/0x3c (C) [ 112.444312][T10028] __dump_stack+0x30/0x40 [ 112.444322][T10028] dump_stack_lvl+0xd8/0x12c [ 112.444332][T10028] dump_stack+0x1c/0x28 [ 112.444342][T10028] should_fail_ex+0x418/0x58c [ 112.444350][T10028] should_fail+0x14/0x24 [ 112.444357][T10028] should_fail_usercopy+0x20/0x30 [ 112.444364][T10028] _copy_from_iter+0x188/0x1064 [ 112.444373][T10028] netlink_sendmsg+0x570/0x948 [ 112.444384][T10028] __sock_sendmsg+0xc8/0x17c [ 112.444401][T10028] ____sys_sendmsg+0x3d0/0x6c8 [ 112.444411][T10028] ___sys_sendmsg+0x198/0x224 [ 112.444421][T10028] __sys_sendmsg+0x158/0x204 [ 112.444431][T10028] __arm64_sys_sendmsg+0x88/0x9c [ 112.444441][T10028] invoke_syscall+0x98/0x244 [ 112.444451][T10028] el0_svc_common+0xec/0x23c [ 112.444460][T10028] do_el0_svc+0x4c/0x5c [ 112.444470][T10028] el0_svc+0x60/0x1d8 [ 112.444477][T10028] el0t_64_sync_handler+0x44/0x104 [ 112.444485][T10028] el0t_64_sync+0x198/0x19c [ 112.475091][T10033] loop5: detected capacity change from 0 to 1024 [ 112.497048][T10033] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 112.499302][T10033] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c840e02c, mo2=0000] [ 112.517864][T10033] EXT4-fs error (device loop5): ext4_free_blocks:6719: comm syz.5.1578: Freeing blocks not in datazone - block = 0, count = 4096 [ 112.517946][T10033] loop5: lost filesystem error report for type 5 error -117 [ 112.521020][T10033] EXT4-fs (loop5): Remounting filesystem read-only [ 112.521248][T10033] EXT4-fs (loop5): 1 orphan inode deleted [ 112.521717][T10033] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 112.534286][ T9811] EXT4-fs (loop5): Quota write (off=3072, len=1024) cancelled because transaction is not started [ 112.534304][ T9811] Quota error (device loop5): write_blk: dquota write failed [ 112.534359][ T9811] Quota error (device loop5): free_dqentry: Can't move quota data block (2) to free list [ 112.570865][ T8484] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.598079][T10044] batman_adv: batadv0: Adding interface: syzkaller0 [ 112.598092][T10044] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 112.598108][T10044] batman_adv: batadv0: Interface activated: syzkaller0 [ 112.655640][T10039] RDS: rds_bind could not find a transport for fec0:ffff:ffff:ffff::1, load rds_tcp or rds_rdma? [ 112.655694][T10039] RDS: rds_bind could not find a transport for fec0:ffff:ffff:ffff::1, load rds_tcp or rds_rdma? [ 112.655738][T10039] RDS: rds_bind could not find a transport for fec0:ffff:ffff:ffff::1, load rds_tcp or rds_rdma? [ 112.655771][T10039] RDS: rds_bind could not find a transport for fec0:ffff:ffff:ffff::1, load rds_tcp or rds_rdma? [ 112.655802][T10039] RDS: rds_bind could not find a transport for fec0:ffff:ffff:ffff::1, load rds_tcp or rds_rdma? [ 112.655831][T10039] RDS: rds_bind could not find a transport for fec0:ffff:ffff:ffff::1, load rds_tcp or rds_rdma? [ 112.655865][T10039] RDS: rds_bind could not find a transport for fec0:ffff:ffff:ffff::1, load rds_tcp or rds_rdma? [ 112.655894][T10039] RDS: rds_bind could not find a transport for fec0:ffff:ffff:ffff::1, load rds_tcp or rds_rdma? [ 112.655925][T10039] RDS: rds_bind could not find a transport for fec0:ffff:ffff:ffff::1, load rds_tcp or rds_rdma? [ 112.655955][T10039] RDS: rds_bind could not find a transport for fec0:ffff:ffff:ffff::1, load rds_tcp or rds_rdma? [ 112.660571][T10039] 0x000000000000-0x000000010000 : "" [ 112.710206][T10039] ftl_cs: FTL header not found. [ 112.761551][T10043] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 112.770748][T10043] batman_adv: batadv0: Removing interface: syzkaller0 [ 112.792894][T10059] loop6: detected capacity change from 0 to 1024 [ 112.795079][T10059] EXT4-fs: Ignoring removed nomblk_io_submit option [ 112.795090][T10059] EXT4-fs: Ignoring removed i_version option [ 112.811734][T10059] EXT4-fs (loop6): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 112.905657][ T8498] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 112.905737][T10071] loop5: detected capacity change from 0 to 128 [ 112.918111][T10071] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 112.951613][ T8484] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 112.989023][T10083] loop1: detected capacity change from 0 to 1024 [ 113.035444][T10086] sctp: [Deprecated]: syz.8.1593 (pid 10086) Use of struct sctp_assoc_value in delayed_ack socket option. [ 113.035444][T10086] Use struct sctp_sack_info instead [ 113.214674][T10096] input: syz0 as /devices/virtual/input/input2 [ 113.214992][T10096] input: failed to attach handler leds to device input2, error: -6 [ 114.116648][T10105] batman_adv: batadv0: Adding interface: syzkaller0 [ 114.116662][T10105] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 114.116679][T10105] batman_adv: batadv0: Interface activated: syzkaller0 [ 114.169135][T10108] netlink: 28 bytes leftover after parsing attributes in process `syz.8.1594'. [ 114.169156][T10108] netlink: 28 bytes leftover after parsing attributes in process `syz.8.1594'. [ 114.169167][T10108] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1594'. [ 114.178327][T10107] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1597'. [ 114.212733][T10112] loop5: detected capacity change from 0 to 256 [ 114.222151][T10112] FAULT_INJECTION: forcing a failure. [ 114.222151][T10112] name failslab, interval 1, probability 0, space 0, times 0 [ 114.222170][T10112] CPU: 0 UID: 0 PID: 10112 Comm: syz.5.1599 Not tainted syzkaller #0 PREEMPT [ 114.222179][T10112] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 114.222185][T10112] Call trace: [ 114.222187][T10112] show_stack+0x2c/0x3c (C) [ 114.222207][T10112] __dump_stack+0x30/0x40 [ 114.222218][T10112] dump_stack_lvl+0xd8/0x12c [ 114.222228][T10112] dump_stack+0x1c/0x28 [ 114.222237][T10112] should_fail_ex+0x418/0x58c [ 114.222246][T10112] should_failslab+0xc4/0x120 [ 114.222254][T10112] __kmalloc_noprof+0x108/0x6c8 [ 114.222262][T10112] tomoyo_encode2+0x10c/0x330 [ 114.222272][T10112] tomoyo_encode+0x34/0x50 [ 114.222282][T10112] tomoyo_realpath_from_path+0x488/0x4dc [ 114.222291][T10112] tomoyo_path_number_perm+0x1f0/0x500 [ 114.222300][T10112] tomoyo_file_ioctl+0x2c/0x3c [ 114.222311][T10112] security_file_ioctl+0xdc/0x2b0 [ 114.222320][T10112] __arm64_sys_ioctl+0xb0/0x1cc [ 114.222327][T10112] invoke_syscall+0x98/0x244 [ 114.222337][T10112] el0_svc_common+0xec/0x23c [ 114.222347][T10112] do_el0_svc+0x4c/0x5c [ 114.222356][T10112] el0_svc+0x60/0x1d8 [ 114.222364][T10112] el0t_64_sync_handler+0x44/0x104 [ 114.222371][T10112] el0t_64_sync+0x198/0x19c [ 114.222383][T10112] ERROR: Out of memory at tomoyo_realpath_from_path. [ 114.270044][T10114] bond1: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 114.271072][T10114] bond1 (unregistering): Released all slaves [ 114.288920][T10104] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 114.308986][T10104] batman_adv: batadv0: Removing interface: syzkaller0 [ 114.429383][T10131] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1602'. [ 114.525828][T10136] syzkaller0: entered promiscuous mode [ 114.525847][T10136] syzkaller0: entered allmulticast mode [ 115.937000][T10074] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 115.977561][T10142] loop7: detected capacity change from 0 to 256 [ 116.107619][T10158] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1614'. [ 116.107638][T10158] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1614'. [ 116.270479][T10173] syzkaller0: entered promiscuous mode [ 116.270495][T10173] syzkaller0: entered allmulticast mode [ 116.292683][T10173] tipc: Enabled bearer , priority 0 [ 116.347123][T10173] tipc: Resetting bearer [ 116.366680][T10172] tipc: Resetting bearer [ 116.382446][T10172] tipc: Disabling bearer [ 116.390078][T10180] batman_adv: batadv0: Adding interface: syzkaller0 [ 116.390092][T10180] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 116.390108][T10180] batman_adv: batadv0: Interface activated: syzkaller0 [ 116.496413][T10181] loop5: detected capacity change from 0 to 1024 [ 116.535829][T10179] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 116.549893][T10179] batman_adv: batadv0: Removing interface: syzkaller0 [ 116.556870][T10183] loop8: detected capacity change from 0 to 512 [ 116.580923][T10183] loop8: detected capacity change from 0 to 1024 [ 116.611573][T10183] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 116.614931][T10183] EXT4-fs error (device loop8): ext4_check_all_de:675: inode #12: block 7: comm syz.8.1621: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=108 fake=0 [ 116.647785][ T8819] EXT4-fs error (device loop8): ext4_read_inline_dir:1512: inode #12: block 7: comm syz-executor: path /76/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=112 fake=0 [ 116.652781][ T8819] EXT4-fs error (device loop8): ext4_read_inline_dir:1512: inode #12: block 7: comm syz-executor: path /76/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=112 fake=0 [ 116.666124][T10192] loop7: detected capacity change from 0 to 256 [ 116.666615][T10192] vfat: Unknown parameter 'shortnaUe' [ 116.667666][ T8819] EXT4-fs error (device loop8): empty_inline_dir:1796: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0 [ 116.674170][T10192] netlink: 204 bytes leftover after parsing attributes in process `syz.7.1624'. [ 116.680094][ T8819] EXT4-fs warning (device loop8): empty_inline_dir:1803: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 116.680288][ T8819] EXT4-fs error (device loop8): ext4_read_inline_dir:1512: inode #12: block 7: comm syz-executor: path /76/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=112 fake=0 [ 116.680524][ T8819] EXT4-fs error (device loop8): ext4_read_inline_dir:1512: inode #12: block 7: comm syz-executor: path /76/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=112 fake=0 [ 116.680897][ T8819] EXT4-fs error (device loop8): empty_inline_dir:1796: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0 [ 116.681077][ T8819] EXT4-fs warning (device loop8): empty_inline_dir:1803: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 116.681312][T10192] vxcan3: entered promiscuous mode [ 116.681326][T10192] vxcan3: entered allmulticast mode [ 116.681326][ T8819] EXT4-fs error (device loop8): ext4_read_inline_dir:1512: inode #12: block 7: comm syz-executor: path /76/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=112 fake=0 [ 116.681549][ T8819] EXT4-fs error (device loop8): ext4_read_inline_dir:1512: inode #12: block 7: comm syz-executor: path /76/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=112 fake=0 [ 116.681901][ T8819] EXT4-fs error (device loop8): empty_inline_dir:1796: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0 [ 116.682092][ T8819] EXT4-fs warning (device loop8): empty_inline_dir:1803: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 116.719730][ T8819] EXT4-fs warning (device loop8): empty_inline_dir:1803: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 116.727105][ T8819] EXT4-fs warning (device loop8): empty_inline_dir:1803: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 116.729489][ T8819] EXT4-fs warning (device loop8): empty_inline_dir:1803: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 116.730238][ T8819] EXT4-fs warning (device loop8): empty_inline_dir:1803: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 116.731722][ T8819] EXT4-fs warning (device loop8): empty_inline_dir:1803: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 116.744930][ T8819] EXT4-fs warning (device loop8): empty_inline_dir:1803: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 116.745678][T10194] loop7: detected capacity change from 0 to 512 [ 116.747638][ T8819] EXT4-fs warning (device loop8): empty_inline_dir:1803: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 116.748210][T10194] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 116.750126][T10194] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8842e02c, mo2=0002] [ 116.750227][T10194] EXT4-fs (loop7): orphan cleanup on readonly fs [ 116.750236][T10194] EXT4-fs error (device loop7): ext4_orphan_get:1429: comm syz.7.1625: bad orphan inode 267 [ 116.750247][T10194] loop7: lost filesystem error report for type 5 error -117 [ 116.751442][T10194] EXT4-fs (loop7): Remounting filesystem read-only [ 116.751926][T10194] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 116.788019][ T8588] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 116.881448][T10199] netlink: 68 bytes leftover after parsing attributes in process `syz.7.1627'. [ 116.961592][T10211] loop6: detected capacity change from 0 to 512 [ 116.998880][T10211] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 117.002513][T10216] can0: slcan on ttyS3. [ 117.025474][T10211] EXT4-fs error (device loop6): ext4_xattr_block_get:608: inode #15: comm syz.6.1630: corrupted xattr block 33: invalid header [ 117.030875][T10211] EXT4-fs error (device loop6): ext4_xattr_block_get:608: inode #15: comm syz.6.1630: corrupted xattr block 33: invalid header [ 117.033064][T10211] EXT4-fs error (device loop6): ext4_xattr_block_get:608: inode #15: comm syz.6.1630: corrupted xattr block 33: invalid header [ 117.066327][T10216] can0 (unregistered): slcan off ttyS3. [ 117.141427][T10226] syzkaller0: entered promiscuous mode [ 117.141445][T10226] syzkaller0: entered allmulticast mode [ 117.142701][T10226] tipc: Enabled bearer , priority 0 [ 117.150455][ T8498] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.165839][T10226] tipc: Resetting bearer [ 117.171647][T10225] tipc: Resetting bearer [ 117.184910][T10225] tipc: Disabling bearer [ 117.195666][T10228] syzkaller0: entered promiscuous mode [ 117.195682][T10228] syzkaller0: entered allmulticast mode [ 117.215420][ T8819] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.260179][ T13] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.268748][T10236] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1637'. [ 117.269668][T10236] l2tp_ppp: sess 2/0: no socket in recv [ 117.342860][ T13] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.358183][ T50] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 117.358789][ T50] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 117.359352][ T50] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 117.359724][ T50] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 117.359924][ T50] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 117.428586][ T13] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.489425][T10245] rxe_eth0 speed is unknown, defaulting to 1000 [ 117.510673][ T13] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.545606][ T50] Bluetooth: Wrong link type (-71) [ 117.552276][T10264] loop5: detected capacity change from 0 to 512 [ 117.586595][T10264] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 117.656352][T10245] bridge0: port 1(bridge_slave_0) entered blocking state [ 117.656423][T10245] bridge0: port 1(bridge_slave_0) entered disabled state [ 117.656487][T10245] bridge_slave_0: entered allmulticast mode [ 117.656919][T10245] bridge_slave_0: entered promiscuous mode [ 117.657875][T10245] bridge0: port 2(bridge_slave_1) entered blocking state [ 117.657896][T10245] bridge0: port 2(bridge_slave_1) entered disabled state [ 117.657948][T10245] bridge_slave_1: entered allmulticast mode [ 117.658332][T10245] bridge_slave_1: entered promiscuous mode [ 117.670499][T10245] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 117.676919][T10245] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 117.692485][ T13] bridge_slave_1: left allmulticast mode [ 117.692504][ T13] bridge_slave_1: left promiscuous mode [ 117.693591][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 117.700697][ T13] bridge_slave_0: left allmulticast mode [ 117.700717][ T13] bridge_slave_0: left promiscuous mode [ 117.700796][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 117.780367][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 117.792868][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 117.804189][ T13] bond0 (unregistering): Released all slaves [ 117.817459][T10245] team0: Port device team_slave_0 added [ 117.820823][T10245] team0: Port device team_slave_1 added [ 117.840251][ T13] tipc: Left network mode [ 117.841148][T10245] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 117.841157][T10245] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 117.841171][T10245] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 117.847294][T10245] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 117.847308][T10245] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 117.847323][T10245] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 117.898635][T10245] hsr_slave_0: entered promiscuous mode [ 117.898984][T10245] hsr_slave_1: entered promiscuous mode [ 117.899777][T10245] debugfs: 'hsr0' already exists in 'hsr' [ 117.899789][T10245] Cannot create hsr debugfs directory [ 117.926236][T10281] syzkaller0: entered promiscuous mode [ 117.926256][T10281] syzkaller0: entered allmulticast mode [ 118.097046][ T13] hsr_slave_0: left promiscuous mode [ 118.097297][ T13] hsr_slave_1: left promiscuous mode [ 118.097606][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 118.097647][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 118.098139][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 118.098148][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 118.100895][ T13] veth1_macvtap: left promiscuous mode [ 118.100919][ T13] veth0_macvtap: left promiscuous mode [ 118.100961][ T13] veth1_vlan: left promiscuous mode [ 118.100992][ T13] veth0_vlan: left promiscuous mode [ 118.140428][ T8484] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.251060][ T13] team0 (unregistering): Port device team_slave_1 removed [ 118.262234][ T13] team0 (unregistering): Port device team_slave_0 removed [ 118.374441][T10293] ucma_write: process 211 (syz.6.1649) changed security contexts after opening file descriptor, this is not allowed. [ 119.373337][ T4713] Bluetooth: hci1: command tx timeout [ 120.453089][T10255] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 120.459212][T10245] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 120.474237][T10245] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 120.474755][T10245] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 120.478401][T10245] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 120.479014][T10245] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 120.486030][T10245] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 120.486389][T10245] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 120.511626][T10245] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 120.569850][T10245] 8021q: adding VLAN 0 to HW filter on device bond0 [ 120.571166][T10312] __nla_validate_parse: 2 callbacks suppressed [ 120.571179][T10312] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1655'. [ 120.578520][T10245] 8021q: adding VLAN 0 to HW filter on device team0 [ 120.580139][T10312] device-mapper: table: 248:0: multipath: not enough path parameters (-EINVAL) [ 120.580154][T10312] device-mapper: ioctl: error adding target to table [ 120.581176][ T1418] bridge0: port 1(bridge_slave_0) entered blocking state [ 120.581210][ T1418] bridge0: port 1(bridge_slave_0) entered forwarding state [ 120.585148][ T9811] bridge0: port 2(bridge_slave_1) entered blocking state [ 120.585179][ T9811] bridge0: port 2(bridge_slave_1) entered forwarding state [ 120.641363][T10245] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 120.641382][T10245] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 120.870658][ T4399] 8021q: adding VLAN 0 to HW filter on device eth4 [ 120.872757][T10245] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 120.933072][T10370] syzkaller0: entered promiscuous mode [ 120.933089][T10370] syzkaller0: entered allmulticast mode [ 120.941169][T10370] tipc: Enabled bearer , priority 0 [ 121.301924][T10383] tipc: Resetting bearer [ 121.324781][ T4399] 8021q: adding VLAN 0 to HW filter on device eth5 [ 121.379334][T10369] tipc: Resetting bearer [ 121.420586][T10389] tipc: Can't bind to reserved service type 2 [ 121.453581][ T4713] Bluetooth: hci1: command 0x041b tx timeout [ 121.484498][T10369] tipc: Disabling bearer [ 121.644721][T10396] FAULT_INJECTION: forcing a failure. [ 121.644721][T10396] name failslab, interval 1, probability 0, space 0, times 0 [ 121.644741][T10396] CPU: 1 UID: 0 PID: 10396 Comm: syz.7.1668 Not tainted syzkaller #0 PREEMPT [ 121.644751][T10396] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 121.644757][T10396] Call trace: [ 121.644760][T10396] show_stack+0x2c/0x3c (C) [ 121.644779][T10396] __dump_stack+0x30/0x40 [ 121.644791][T10396] dump_stack_lvl+0xd8/0x12c [ 121.644803][T10396] dump_stack+0x1c/0x28 [ 121.644815][T10396] should_fail_ex+0x418/0x58c [ 121.644824][T10396] should_failslab+0xc4/0x120 [ 121.644833][T10396] kmem_cache_alloc_noprof+0x94/0x5d4 [ 121.644842][T10396] __kernfs_new_node+0xf0/0x7d8 [ 121.644854][T10396] kernfs_new_node+0xe8/0x130 [ 121.644865][T10396] __kernfs_create_file+0x60/0x2e0 [ 121.644877][T10396] cgroup_addrm_files+0x694/0xaf8 [ 121.644886][T10396] css_populate_dir+0x230/0x348 [ 121.644898][T10396] cgroup_mkdir+0x744/0xbac [ 121.644911][T10396] kernfs_iop_mkdir+0xe0/0x128 [ 121.644922][T10396] vfs_mkdir+0x2e4/0x46c [ 121.644933][T10396] filename_mkdirat+0x228/0x3f4 [ 121.644944][T10396] __arm64_sys_mkdirat+0x9c/0xc0 [ 121.644956][T10396] invoke_syscall+0x98/0x244 [ 121.644968][T10396] el0_svc_common+0xec/0x23c [ 121.644980][T10396] do_el0_svc+0x4c/0x5c [ 121.644992][T10396] el0_svc+0x60/0x1d8 [ 121.645002][T10396] el0t_64_sync_handler+0x44/0x104 [ 121.645010][T10396] el0t_64_sync+0x198/0x19c [ 121.645025][T10396] cgroup: cgroup_addrm_files: failed to add cgroup.type, err=-12 [ 121.724644][T10396] batadv0: entered promiscuous mode [ 121.724701][T10396] macsec1: entered promiscuous mode [ 121.724774][T10396] macsec1: entered allmulticast mode [ 121.724782][T10396] batadv0: entered allmulticast mode [ 121.726060][T10396] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 121.727225][T10396] batadv0: left allmulticast mode [ 121.727302][T10396] batadv0: left promiscuous mode [ 121.756256][T10245] veth0_vlan: entered promiscuous mode [ 121.769811][T10245] veth1_vlan: entered promiscuous mode [ 121.772077][T10402] FAULT_INJECTION: forcing a failure. [ 121.772077][T10402] name failslab, interval 1, probability 0, space 0, times 0 [ 121.772095][T10402] CPU: 1 UID: 0 PID: 10402 Comm: syz.6.1670 Not tainted syzkaller #0 PREEMPT [ 121.772105][T10402] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 121.772110][T10402] Call trace: [ 121.772112][T10402] show_stack+0x2c/0x3c (C) [ 121.772129][T10402] __dump_stack+0x30/0x40 [ 121.772140][T10402] dump_stack_lvl+0xd8/0x12c [ 121.772150][T10402] dump_stack+0x1c/0x28 [ 121.772159][T10402] should_fail_ex+0x418/0x58c [ 121.772167][T10402] should_failslab+0xc4/0x120 [ 121.772175][T10402] kmem_cache_alloc_noprof+0x94/0x5d4 [ 121.772183][T10402] skb_clone+0x1ac/0x320 [ 121.772194][T10402] raw_local_deliver+0x758/0xbd0 [ 121.772203][T10402] ip_protocol_deliver_rcu+0x60/0x468 [ 121.772213][T10402] ip_local_deliver_finish+0x320/0x65c [ 121.772222][T10402] NF_HOOK+0x308/0x398 [ 121.772230][T10402] ip_local_deliver+0x128/0x188 [ 121.772239][T10402] ip_sublist_rcv_finish+0x1a0/0x234 [ 121.772248][T10402] ip_sublist_rcv+0x5fc/0x8cc [ 121.772257][T10402] ip_list_rcv+0x37c/0x3d8 [ 121.772265][T10402] __netif_receive_skb_list_core+0x4f0/0x67c [ 121.772274][T10402] netif_receive_skb_list_internal+0x748/0xa0c [ 121.772284][T10402] netif_receive_skb_list+0x70/0x5c0 [ 121.772293][T10402] bpf_test_run_xdp_live+0x1434/0x1770 [ 121.772302][T10402] bpf_prog_test_run_xdp+0x634/0xe0c [ 121.772310][T10402] bpf_prog_test_run+0x1e0/0x250 [ 121.772319][T10402] __sys_bpf+0x6bc/0x82c [ 121.772327][T10402] __arm64_sys_bpf+0xd0/0xec [ 121.772335][T10402] invoke_syscall+0x98/0x244 [ 121.772345][T10402] el0_svc_common+0xec/0x23c [ 121.772354][T10402] do_el0_svc+0x4c/0x5c [ 121.772364][T10402] el0_svc+0x60/0x1d8 [ 121.772372][T10402] el0t_64_sync_handler+0x44/0x104 [ 121.772379][T10402] el0t_64_sync+0x198/0x19c [ 121.817893][T10245] veth0_macvtap: entered promiscuous mode [ 121.831471][T10245] veth1_macvtap: entered promiscuous mode [ 121.893061][T10245] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 121.900610][T10245] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 121.963940][ T13] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.963976][ T13] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.963993][ T13] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.964010][ T13] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.969475][T10413] netlink: 'syz.1.1672': attribute type 75 has an invalid length. [ 121.986318][T10420] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 121.997987][T10420] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1673'. [ 122.008300][T10413] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 122.012597][ T9811] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 122.012611][ T9811] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 122.030362][ T4399] 8021q: adding VLAN 0 to HW filter on device eth6 [ 122.044045][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 122.044062][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 122.111713][ T25] block nbd0: Possible stuck request 000000001c7a3d62: control (read@0,1024B). Runtime 90 seconds [ 122.111745][ T25] block nbd0: Possible stuck request 0000000034f4f83a: control (read@1024,1024B). Runtime 90 seconds [ 122.111759][ T25] block nbd0: Possible stuck request 00000000bc1a48f1: control (read@2048,1024B). Runtime 90 seconds [ 122.111771][ T25] block nbd0: Possible stuck request 0000000018dc6858: control (read@3072,1024B). Runtime 90 seconds [ 122.227498][T10451] syzkaller0: entered promiscuous mode [ 122.227515][T10451] syzkaller0: entered allmulticast mode [ 122.230082][T10451] tipc: Enabled bearer , priority 0 [ 122.235735][T10453] process 'syz.9.1680' launched '/dev/fd/7' with NULL argv: empty string added [ 122.618977][T10458] tipc: Resetting bearer [ 122.620905][ T4399] 8021q: adding VLAN 0 to HW filter on device eth7 [ 122.650136][T10449] tipc: Resetting bearer [ 122.728615][T10449] tipc: Disabling bearer [ 122.781523][T10470] loop9: detected capacity change from 0 to 128 [ 122.800465][T10470] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 122.984267][T10245] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 123.280928][ T4359] kernel write not supported for file /set_event (pid: 4359 comm: kworker/0:3) [ 123.534592][ T4713] Bluetooth: hci1: command 0x041b tx timeout [ 123.843703][T10541] netlink: 'syz.7.1696': attribute type 10 has an invalid length. [ 123.898784][T10542] loop7: detected capacity change from 0 to 512 [ 123.899371][T10542] vfat: Unknown parameter 'iocharet' [ 124.250071][T10541] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 124.289625][T10547] bond1: option resend_igmp: invalid value (4099) [ 124.289643][T10547] bond1: option resend_igmp: allowed values 0 - 255 [ 124.391383][T10547] bond1 (unregistering): Released all slaves [ 124.431289][T10555] netlink: 'syz.7.1701': attribute type 15 has an invalid length. [ 124.431311][T10555] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1701'. [ 124.532444][T10570] loop1: detected capacity change from 0 to 256 [ 124.532852][T10570] vfat: Unknown parameter 'uni_xlcte' [ 124.647221][T10576] cgroup: noprefix used incorrectly [ 125.182661][T10594] netlink: 'syz.9.1712': attribute type 2 has an invalid length. [ 125.195306][T10590] FAULT_INJECTION: forcing a failure. [ 125.195306][T10590] name failslab, interval 1, probability 0, space 0, times 0 [ 125.195327][T10590] CPU: 1 UID: 0 PID: 10590 Comm: syz.1.1711 Not tainted syzkaller #0 PREEMPT [ 125.195337][T10590] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 125.195342][T10590] Call trace: [ 125.195344][T10590] show_stack+0x2c/0x3c (C) [ 125.195361][T10590] __dump_stack+0x30/0x40 [ 125.195372][T10590] dump_stack_lvl+0xd8/0x12c [ 125.195381][T10590] dump_stack+0x1c/0x28 [ 125.195390][T10590] should_fail_ex+0x418/0x58c [ 125.195398][T10590] should_failslab+0xc4/0x120 [ 125.195414][T10590] kmem_cache_alloc_noprof+0x94/0x5d4 [ 125.195422][T10590] skb_clone+0x1ac/0x320 [ 125.195433][T10590] raw_local_deliver+0x758/0xbd0 [ 125.195442][T10590] ip_protocol_deliver_rcu+0x60/0x468 [ 125.195452][T10590] ip_local_deliver_finish+0x320/0x65c [ 125.195461][T10590] NF_HOOK+0x308/0x398 [ 125.195470][T10590] ip_local_deliver+0x128/0x188 [ 125.195478][T10590] ip_sublist_rcv_finish+0x1a0/0x234 [ 125.195487][T10590] ip_sublist_rcv+0x5fc/0x8cc [ 125.195496][T10590] ip_list_rcv+0x37c/0x3d8 [ 125.195505][T10590] __netif_receive_skb_list_core+0x4f0/0x67c [ 125.195513][T10590] netif_receive_skb_list_internal+0x748/0xa0c [ 125.195523][T10590] netif_receive_skb_list+0x70/0x5c0 [ 125.195532][T10590] bpf_test_run_xdp_live+0x1434/0x1770 [ 125.195541][T10590] bpf_prog_test_run_xdp+0x634/0xe0c [ 125.195549][T10590] bpf_prog_test_run+0x1e0/0x250 [ 125.195559][T10590] __sys_bpf+0x6bc/0x82c [ 125.195566][T10590] __arm64_sys_bpf+0xd0/0xec [ 125.195574][T10590] invoke_syscall+0x98/0x244 [ 125.195584][T10590] el0_svc_common+0xec/0x23c [ 125.195593][T10590] do_el0_svc+0x4c/0x5c [ 125.195603][T10590] el0_svc+0x60/0x1d8 [ 125.195611][T10590] el0t_64_sync_handler+0x44/0x104 [ 125.195618][T10590] el0t_64_sync+0x198/0x19c [ 125.613478][ T50] Bluetooth: hci1: command 0x041b tx timeout [ 125.635642][T10613] netlink: 1460 bytes leftover after parsing attributes in process `syz.9.1718'. [ 125.663813][T10615] FAULT_INJECTION: forcing a failure. [ 125.663813][T10615] name failslab, interval 1, probability 0, space 0, times 0 [ 125.663835][T10615] CPU: 0 UID: 0 PID: 10615 Comm: syz.5.1719 Not tainted syzkaller #0 PREEMPT [ 125.663847][T10615] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 125.663854][T10615] Call trace: [ 125.663858][T10615] show_stack+0x2c/0x3c (C) [ 125.663879][T10615] __dump_stack+0x30/0x40 [ 125.663892][T10615] dump_stack_lvl+0xd8/0x12c [ 125.663902][T10615] dump_stack+0x1c/0x28 [ 125.663912][T10615] should_fail_ex+0x418/0x58c [ 125.663920][T10615] should_failslab+0xc4/0x120 [ 125.663928][T10615] __kmalloc_cache_noprof+0x94/0x5fc [ 125.663937][T10615] alloc_netdev_mqs+0x97c/0xf34 [ 125.663946][T10615] rtnl_create_link+0x2b0/0xb78 [ 125.663954][T10615] rtnl_newlink_create+0x210/0x6b8 [ 125.663963][T10615] rtnl_newlink+0xfe4/0x138c [ 125.663971][T10615] rtnetlink_rcv_msg+0x66c/0x9bc [ 125.663979][T10615] netlink_rcv_skb+0x238/0x414 [ 125.663989][T10615] rtnetlink_rcv+0x28/0x38 [ 125.663998][T10615] netlink_unicast+0x600/0x7f8 [ 125.664007][T10615] netlink_sendmsg+0x648/0x948 [ 125.664016][T10615] __sock_sendmsg+0xc8/0x17c [ 125.664025][T10615] ____sys_sendmsg+0x3d0/0x6c8 [ 125.664035][T10615] ___sys_sendmsg+0x198/0x224 [ 125.664044][T10615] __sys_sendmsg+0x158/0x204 [ 125.664053][T10615] __arm64_sys_sendmsg+0x88/0x9c [ 125.664063][T10615] invoke_syscall+0x98/0x244 [ 125.664073][T10615] el0_svc_common+0xec/0x23c [ 125.664083][T10615] do_el0_svc+0x4c/0x5c [ 125.664092][T10615] el0_svc+0x60/0x1d8 [ 125.664100][T10615] el0t_64_sync_handler+0x44/0x104 [ 125.664107][T10615] el0t_64_sync+0x198/0x19c [ 125.717287][T10618] loop9: detected capacity change from 0 to 512 [ 125.729294][T10618] EXT4-fs error (device loop9): ext4_validate_block_bitmap:436: comm syz.9.1718: bg 0: block 5: invalid block bitmap [ 125.729318][T10618] loop9: lost filesystem error report for type 5 error -117 [ 125.730149][T10618] EXT4-fs error (device loop9) in ext4_mb_clear_bb:6680: Corrupt filesystem [ 125.730165][T10618] loop9: lost filesystem error report for type 5 error -117 [ 125.730321][T10618] EXT4-fs error (device loop9): ext4_free_branches:1023: inode #11: comm syz.9.1718: invalid indirect mapped block 3 (level 2) [ 125.730405][T10618] loop9: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 125.730639][T10618] EXT4-fs (loop9): 1 orphan inode deleted [ 125.730650][T10618] EXT4-fs (loop9): 1 truncate cleaned up [ 125.731086][T10618] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 125.759998][T10625] loop7: detected capacity change from 0 to 256 [ 125.761681][T10625] vfat: Unknown parameter 'euid<00000000000000000000' [ 125.770966][T10625] binder: 10624:10625 ioctl c0306201 200010c0 returned -14 [ 125.781827][T10625] binder: 10624:10625 ioctl c0306201 20001180 returned -14 [ 125.781996][T10625] binder: 10624:10625 got transaction to invalid handle, 1 [ 125.782031][T10625] binder: 10624:10625 cannot find target node [ 125.782046][T10625] binder: 10624:10625 transaction call to 0:0 failed 3/29201/-22, code 0 size 112-4280 line 3253 [ 125.791766][ T26] binder: undelivered TRANSACTION_ERROR: 29201 [ 125.821993][T10245] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 125.858300][T10628] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1723'. [ 125.860573][T10630] loop7: detected capacity change from 0 to 4096 [ 125.861204][T10630] EXT4-fs: Ignoring removed nomblk_io_submit option [ 125.868090][T10630] EXT4-fs (loop7): Test dummy encryption mode enabled [ 125.871891][T10630] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 125.871950][T10630] System zones: 0-5 [ 125.884650][T10630] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 125.923802][T10632] FAULT_INJECTION: forcing a failure. [ 125.923802][T10632] name failslab, interval 1, probability 0, space 0, times 0 [ 125.923826][T10632] CPU: 1 UID: 0 PID: 10632 Comm: syz.9.1725 Not tainted syzkaller #0 PREEMPT [ 125.923837][T10632] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 125.923842][T10632] Call trace: [ 125.923845][T10632] show_stack+0x2c/0x3c (C) [ 125.923863][T10632] __dump_stack+0x30/0x40 [ 125.923873][T10632] dump_stack_lvl+0xd8/0x12c [ 125.923883][T10632] dump_stack+0x1c/0x28 [ 125.923892][T10632] should_fail_ex+0x418/0x58c [ 125.923900][T10632] should_failslab+0xc4/0x120 [ 125.923908][T10632] __kmalloc_cache_noprof+0x94/0x5fc [ 125.923917][T10632] sctp_auth_shkey_create+0x84/0x188 [ 125.923926][T10632] sctp_endpoint_new+0x388/0x860 [ 125.923934][T10632] sctp_init_sock+0x684/0x115c [ 125.923943][T10632] inet_create+0x9a4/0xd48 [ 125.923953][T10632] __sock_create+0x31c/0x670 [ 125.923963][T10632] __sys_socket_create+0xc0/0x11c [ 125.923973][T10632] __sys_socket+0x44/0xec [ 125.923981][T10632] __arm64_sys_socket+0x84/0x9c [ 125.923990][T10632] invoke_syscall+0x98/0x244 [ 125.924000][T10632] el0_svc_common+0xec/0x23c [ 125.924010][T10632] do_el0_svc+0x4c/0x5c [ 125.924019][T10632] el0_svc+0x60/0x1d8 [ 125.924027][T10632] el0t_64_sync_handler+0x44/0x104 [ 125.924034][T10632] el0t_64_sync+0x198/0x19c [ 125.938414][ T1596] ieee802154 phy1 wpan1: encryption failed: -22 [ 125.946936][ T8588] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 125.984859][T10639] FAULT_INJECTION: forcing a failure. [ 125.984859][T10639] name failslab, interval 1, probability 0, space 0, times 0 [ 125.984880][T10639] CPU: 0 UID: 0 PID: 10639 Comm: syz.7.1727 Not tainted syzkaller #0 PREEMPT [ 125.984892][T10639] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 125.984898][T10639] Call trace: [ 125.984901][T10639] show_stack+0x2c/0x3c (C) [ 125.984922][T10639] __dump_stack+0x30/0x40 [ 125.984934][T10639] dump_stack_lvl+0xd8/0x12c [ 125.984946][T10639] dump_stack+0x1c/0x28 [ 125.984957][T10639] should_fail_ex+0x418/0x58c [ 125.984966][T10639] should_failslab+0xc4/0x120 [ 125.984975][T10639] __kmalloc_cache_noprof+0x94/0x5fc [ 125.984985][T10639] resv_map_alloc+0x60/0x284 [ 125.984996][T10639] hugetlbfs_get_inode+0x70/0x724 [ 125.985006][T10639] hugetlb_file_setup+0x20c/0x574 [ 125.985015][T10639] ksys_mmap_pgoff+0x16c/0x5b4 [ 125.985026][T10639] __arm64_sys_mmap+0x110/0x12c [ 125.985037][T10639] invoke_syscall+0x98/0x244 [ 125.985050][T10639] el0_svc_common+0xec/0x23c [ 125.985061][T10639] do_el0_svc+0x4c/0x5c [ 125.985073][T10639] el0_svc+0x60/0x1d8 [ 125.985082][T10639] el0t_64_sync_handler+0x44/0x104 [ 125.985090][T10639] el0t_64_sync+0x198/0x19c [ 125.989602][T10637] syzkaller0: entered promiscuous mode [ 125.989618][T10637] syzkaller0: entered allmulticast mode [ 126.000007][T10637] tipc: Enabled bearer , priority 0 [ 126.030165][T10646] loop9: detected capacity change from 0 to 256 [ 126.054655][T10637] tipc: Resetting bearer [ 126.085436][T10636] tipc: Resetting bearer [ 126.100651][T10636] tipc: Disabling bearer [ 126.900124][T10670] loop1: detected capacity change from 0 to 1024 [ 126.921725][T10670] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: writeback. [ 126.956370][ T4709] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 126.983389][ T9816] IPVS: starting estimator thread 0... [ 127.073287][T10677] IPVS: using max 60 ests per chain, 144000 per kthread [ 127.087584][T10689] netlink: 32 bytes leftover after parsing attributes in process `syz.9.1742'. [ 127.201219][T10695] loop7: detected capacity change from 0 to 512 [ 127.201645][T10695] EXT4-fs: Ignoring removed nomblk_io_submit option [ 127.212507][T10693] loop5: detected capacity change from 0 to 256 [ 127.229242][T10695] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 127.234477][T10695] EXT4-fs error (device loop7): ext4_xattr_block_get:608: inode #15: comm syz.7.1745: corrupted xattr block 33: invalid ea_ino [ 127.246941][T10695] EXT4-fs error (device loop7): ext4_xattr_block_get:608: inode #15: comm syz.7.1745: corrupted xattr block 33: invalid ea_ino [ 127.248114][T10695] EXT4-fs error (device loop7): ext4_xattr_block_get:608: inode #15: comm syz.7.1745: corrupted xattr block 33: invalid ea_ino [ 127.274278][T10695] EXT4-fs error (device loop7): ext4_xattr_block_get:608: inode #15: comm syz.7.1745: corrupted xattr block 33: invalid ea_ino [ 127.275253][T10693] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 127.275318][T10693] block device autoloading is deprecated and will be removed. [ 127.278887][T10695] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 127.385419][ T8588] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.451791][T10709] EXT4-fs: Ignoring removed i_version option [ 127.468440][T10709] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 127.474878][T10709] EXT4-fs error (device loop5): ext4_xattr_block_get:608: inode #15: comm syz.5.1750: corrupted xattr block 128: overlapping e_value [ 127.475208][T10709] EXT4-fs error (device loop5): ext4_xattr_block_get:608: inode #15: comm syz.5.1750: corrupted xattr block 128: overlapping e_value [ 127.475351][T10709] EXT4-fs error (device loop5): ext4_xattr_block_get:608: inode #15: comm syz.5.1750: corrupted xattr block 128: overlapping e_value [ 127.497790][ T50] Bluetooth: hci1: Unable to find connection for dst 66:55:44:33:22:11 sid 0x01 [ 127.502384][T10709] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1750'. [ 127.569041][T10709] ieee802154 phy1 wpan1: encryption failed: -90 [ 127.572409][T10709] EXT4-fs error (device loop5): ext4_validate_block_bitmap:445: comm syz.5.1750: bg 0: block 112: padding at end of block bitmap is not set [ 127.592124][T10717] gtp0: entered allmulticast mode [ 127.613392][ T8484] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 127.703471][ T50] Bluetooth: hci1: command 0x041b tx timeout [ 127.850692][T10730] set_capacity_and_notify: 1 callbacks suppressed [ 127.850706][T10730] loop7: detected capacity change from 0 to 8192 [ 127.853842][T10730] FAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 128.101867][T10736] loop1: detected capacity change from 0 to 512 [ 128.105915][T10736] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 128.106933][T10736] EXT4-fs (loop1): invalid journal inode [ 128.106979][T10736] EXT4-fs (loop1): can't get journal size [ 128.110644][T10736] EXT4-fs (loop1): 1 truncate cleaned up [ 128.111238][T10736] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 128.170861][ T4709] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.206073][T10740] syzkaller0: entered promiscuous mode [ 128.206089][T10740] syzkaller0: entered allmulticast mode [ 128.206763][T10742] FAULT_INJECTION: forcing a failure. [ 128.206763][T10742] name failslab, interval 1, probability 0, space 0, times 0 [ 128.206780][T10742] CPU: 1 UID: 0 PID: 10742 Comm: syz.9.1761 Not tainted syzkaller #0 PREEMPT [ 128.206790][T10742] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 128.206795][T10742] Call trace: [ 128.206798][T10742] show_stack+0x2c/0x3c (C) [ 128.206815][T10742] __dump_stack+0x30/0x40 [ 128.206826][T10742] dump_stack_lvl+0xd8/0x12c [ 128.206836][T10742] dump_stack+0x1c/0x28 [ 128.206845][T10742] should_fail_ex+0x418/0x58c [ 128.206853][T10742] should_failslab+0xc4/0x120 [ 128.206861][T10742] kmem_cache_alloc_noprof+0x94/0x5d4 [ 128.206872][T10742] skb_clone+0x1ac/0x320 [ 128.206884][T10742] raw_local_deliver+0x758/0xbd0 [ 128.206894][T10742] ip_protocol_deliver_rcu+0x60/0x468 [ 128.206903][T10742] ip_local_deliver_finish+0x320/0x65c [ 128.206913][T10742] NF_HOOK+0x308/0x398 [ 128.206921][T10742] ip_local_deliver+0x128/0x188 [ 128.206930][T10742] ip_sublist_rcv_finish+0x1a0/0x234 [ 128.206939][T10742] ip_sublist_rcv+0x5fc/0x8cc [ 128.206948][T10742] ip_list_rcv+0x37c/0x3d8 [ 128.206957][T10742] __netif_receive_skb_list_core+0x4f0/0x67c [ 128.206965][T10742] netif_receive_skb_list_internal+0x748/0xa0c [ 128.206975][T10742] netif_receive_skb_list+0x70/0x5c0 [ 128.206984][T10742] bpf_test_run_xdp_live+0x1434/0x1770 [ 128.206993][T10742] bpf_prog_test_run_xdp+0x634/0xe0c [ 128.207001][T10742] bpf_prog_test_run+0x1e0/0x250 [ 128.207010][T10742] __sys_bpf+0x6bc/0x82c [ 128.207018][T10742] __arm64_sys_bpf+0xd0/0xec [ 128.207026][T10742] invoke_syscall+0x98/0x244 [ 128.207036][T10742] el0_svc_common+0xec/0x23c [ 128.207046][T10742] do_el0_svc+0x4c/0x5c [ 128.207055][T10742] el0_svc+0x60/0x1d8 [ 128.207063][T10742] el0t_64_sync_handler+0x44/0x104 [ 128.207070][T10742] el0t_64_sync+0x198/0x19c [ 128.210199][T10740] tipc: Enabled bearer , priority 0 [ 128.284999][T10743] tipc: Resetting bearer [ 128.287689][T10739] tipc: Resetting bearer [ 128.291171][T10739] tipc: Disabling bearer [ 128.346611][T10746] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1762'. [ 128.507380][ T1356] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.548933][ T4716] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 128.550247][ T4716] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 128.550644][ T4716] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 128.551602][ T4716] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 128.551851][ T4716] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 128.571804][ T1356] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.619783][ T1356] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.674079][ T1356] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.682122][T10754] rxe_eth0 speed is unknown, defaulting to 1000 [ 128.807131][T10754] bridge0: port 1(bridge_slave_0) entered blocking state [ 128.807200][T10754] bridge0: port 1(bridge_slave_0) entered disabled state [ 128.807280][T10754] bridge_slave_0: entered allmulticast mode [ 128.807739][T10754] bridge_slave_0: entered promiscuous mode [ 128.816401][ T1356] bridge_slave_1: left allmulticast mode [ 128.816419][ T1356] bridge_slave_1: left promiscuous mode [ 128.816500][ T1356] bridge0: port 2(bridge_slave_1) entered disabled state [ 128.817617][ T1356] bridge_slave_0: left allmulticast mode [ 128.817687][ T1356] bridge0: port 1(bridge_slave_0) entered disabled state [ 128.890950][ T1356] bond1 (unregistering): (slave gretap1): Releasing active interface [ 128.936483][ T1356] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 128.966943][ T1356] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 128.994250][ T1356] bond0 (unregistering): Released all slaves [ 128.996651][ T1356] bond1 (unregistering): Released all slaves [ 129.000021][T10754] bridge0: port 2(bridge_slave_1) entered blocking state [ 129.000052][T10754] bridge0: port 2(bridge_slave_1) entered disabled state [ 129.000133][T10754] bridge_slave_1: entered allmulticast mode [ 129.000628][T10754] bridge_slave_1: entered promiscuous mode [ 129.017267][T10754] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 129.018207][T10754] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 129.028071][T10754] team0: Port device team_slave_0 added [ 129.028847][T10754] team0: Port device team_slave_1 added [ 129.038076][T10754] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 129.038089][T10754] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 129.038101][T10754] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 129.039594][T10754] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 129.039602][T10754] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 129.039616][T10754] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 129.067634][T10754] hsr_slave_0: entered promiscuous mode [ 129.067931][T10754] hsr_slave_1: entered promiscuous mode [ 129.068106][T10754] debugfs: 'hsr0' already exists in 'hsr' [ 129.068116][T10754] Cannot create hsr debugfs directory [ 129.076523][ T1356] tipc: Left network mode [ 129.079085][ T1356] IPVS: stopping backup sync thread 9268 ... [ 129.221720][ T4399] 8021q: adding VLAN 0 to HW filter on device eth8 [ 129.298251][T10754] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.324198][T10793] netlink: 45349 bytes leftover after parsing attributes in process `syz.9.1768'. [ 129.324307][T10793] 0ªX¹¦Dö»: renamed from gretap0 (while UP) [ 129.328085][T10793] 0ªX¹¦Dö»: entered allmulticast mode [ 129.389393][T10754] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.431034][ T1356] hsr_slave_0: left promiscuous mode [ 129.441000][ T1356] hsr_slave_1: left promiscuous mode [ 129.441376][ T1356] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 129.441389][ T1356] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 129.446766][ T1356] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 129.446782][ T1356] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 129.459926][ T1356] veth1_macvtap: left promiscuous mode [ 129.459954][ T1356] veth0_macvtap: left promiscuous mode [ 129.460001][ T1356] veth1_vlan: left promiscuous mode [ 129.460442][ T1356] veth0_vlan: left promiscuous mode [ 129.623126][ T1356] team0 (unregistering): Port device team_slave_1 removed [ 129.631516][ T1356] team0 (unregistering): Port device team_slave_0 removed [ 129.698868][ T4399] 8021q: adding VLAN 0 to HW filter on device eth9 [ 129.734268][T10754] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.773413][ T4716] Bluetooth: hci1: command 0x041b tx timeout [ 129.789988][T10754] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.934794][ T4399] 8021q: adding VLAN 0 to HW filter on device eth10 [ 129.951514][T10754] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 129.961197][T10754] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 129.962670][T10754] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 129.970781][T10754] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 129.971131][T10754] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 129.974591][T10754] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 129.978841][T10754] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 129.990483][T10754] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 130.041219][T10879] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1775'. [ 130.059844][T10754] 8021q: adding VLAN 0 to HW filter on device bond0 [ 130.064445][T10754] 8021q: adding VLAN 0 to HW filter on device team0 [ 130.066216][ T9811] bridge0: port 1(bridge_slave_0) entered blocking state [ 130.066241][ T9811] bridge0: port 1(bridge_slave_0) entered forwarding state [ 130.069263][ T9811] bridge0: port 2(bridge_slave_1) entered blocking state [ 130.069293][ T9811] bridge0: port 2(bridge_slave_1) entered forwarding state [ 130.088525][T10754] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 130.088545][T10754] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 130.149645][ T4399] 8021q: adding VLAN 0 to HW filter on device eth11 [ 130.250759][T10754] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 130.275010][T10754] veth0_vlan: entered promiscuous mode [ 130.278217][T10754] veth1_vlan: entered promiscuous mode [ 130.290663][T10754] veth0_macvtap: entered promiscuous mode [ 130.292246][T10754] veth1_macvtap: entered promiscuous mode [ 130.300132][T10754] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 130.302807][T10754] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 130.325357][ T1356] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.325400][ T1356] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.325430][ T1356] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.345698][ T1418] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 130.345715][ T1418] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 130.352948][ T1356] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 130.352961][ T1356] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 130.364375][ T1356] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.411172][T10922] netlink: 'syz.0.1779': attribute type 1 has an invalid length. [ 130.411189][T10922] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1779'. [ 130.412747][ T30] audit: type=1326 audit(130.380:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10921 comm="syz.0.1779" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8697a228 code=0x7ffc0000 [ 130.412828][ T30] audit: type=1326 audit(130.380:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10921 comm="syz.0.1779" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8697a228 code=0x7ffc0000 [ 130.413061][ T30] audit: type=1326 audit(130.380:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10921 comm="syz.0.1779" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=203 compat=0 ip=0xffff8697a228 code=0x7ffc0000 [ 130.415330][ T30] audit: type=1326 audit(130.390:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10921 comm="syz.0.1779" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8697a228 code=0x7ffc0000 [ 130.415585][ T30] audit: type=1326 audit(130.390:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10921 comm="syz.0.1779" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8697a228 code=0x7ffc0000 [ 130.416015][ T30] audit: type=1326 audit(130.390:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10921 comm="syz.0.1779" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=208 compat=0 ip=0xffff8697a228 code=0x7ffc0000 [ 130.416352][ T30] audit: type=1326 audit(130.390:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10921 comm="syz.0.1779" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8697a228 code=0x7ffc0000 [ 130.416455][ T30] audit: type=1326 audit(130.390:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10921 comm="syz.0.1779" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8697a228 code=0x7ffc0000 [ 130.416636][ T30] audit: type=1326 audit(130.390:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10921 comm="syz.0.1779" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffff8697a228 code=0x7ffc0000 [ 130.416791][ T30] audit: type=1326 audit(130.390:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10921 comm="syz.0.1779" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8697a228 code=0x7ffc0000 [ 130.426848][ T4716] Bluetooth: hci3: command 0x1003 tx timeout [ 130.426917][ T50] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 130.517877][T10928] FAULT_INJECTION: forcing a failure. [ 130.517877][T10928] name failslab, interval 1, probability 0, space 0, times 0 [ 130.517898][T10928] CPU: 0 UID: 0 PID: 10928 Comm: syz.0.1781 Not tainted syzkaller #0 PREEMPT [ 130.517910][T10928] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 130.517915][T10928] Call trace: [ 130.517918][T10928] show_stack+0x2c/0x3c (C) [ 130.517940][T10928] __dump_stack+0x30/0x40 [ 130.517953][T10928] dump_stack_lvl+0xd8/0x12c [ 130.517964][T10928] dump_stack+0x1c/0x28 [ 130.517976][T10928] should_fail_ex+0x418/0x58c [ 130.517985][T10928] should_failslab+0xc4/0x120 [ 130.517994][T10928] kmem_cache_alloc_noprof+0x94/0x5d4 [ 130.518004][T10928] p9_client_prepare_req+0x16c/0x9e8 [ 130.518015][T10928] p9_client_rpc+0x164/0x9d0 [ 130.518024][T10928] p9_client_attach+0x130/0x294 [ 130.518033][T10928] v9fs_session_init+0x520/0xa7c [ 130.518042][T10928] v9fs_get_tree+0xc4/0x8e8 [ 130.518053][T10928] vfs_get_tree+0x90/0x28c [ 130.518064][T10928] fc_mount+0x24/0xac [ 130.518074][T10928] do_new_mount+0x2a4/0x538 [ 130.518086][T10928] path_mount+0x5f0/0xa88 [ 130.518096][T10928] do_mount+0xe8/0x148 [ 130.518107][T10928] __arm64_sys_mount+0x33c/0x388 [ 130.518119][T10928] invoke_syscall+0x98/0x244 [ 130.518131][T10928] el0_svc_common+0xec/0x23c [ 130.518142][T10928] do_el0_svc+0x4c/0x5c [ 130.518154][T10928] el0_svc+0x60/0x1d8 [ 130.518162][T10928] el0t_64_sync_handler+0x44/0x104 [ 130.518171][T10928] el0t_64_sync+0x198/0x19c [ 130.574763][ T50] Bluetooth: hci5: command tx timeout [ 130.698142][T10957] syz.1.1780 (10957): /proc/10924/oom_adj is deprecated, please use /proc/10924/oom_score_adj instead. [ 130.915930][T10978] loop9: detected capacity change from 0 to 512 [ 130.919768][T10978] netlink: 40 bytes leftover after parsing attributes in process `syz.9.1785'. [ 131.087792][T10993] loop5: detected capacity change from 0 to 4096 [ 131.107128][T10998] loop9: detected capacity change from 0 to 256 [ 131.109984][T10993] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 131.148821][ T8484] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.222274][T11008] netlink: 260 bytes leftover after parsing attributes in process `syz.5.1793'. [ 131.222303][T11008] netlink: 172 bytes leftover after parsing attributes in process `syz.5.1793'. [ 131.225595][T11009] loop5: detected capacity change from 0 to 128 [ 131.228939][T11009] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 131.229757][T11009] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 131.238257][T11010] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 131.239185][T11010] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 131.395772][T11023] loop1: detected capacity change from 0 to 128 [ 131.400339][T11023] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 131.419656][ T4709] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 131.443989][T11027] Injecting memory failure for pfn 0x216bf1 at process virtual address 0x20001000 [ 131.447351][T11027] Memory failure: 0x216bf1: unhandlable page. [ 131.447374][T11027] Memory failure: 0x216bf1: recovery action for reserved kernel page: Ignored [ 131.848408][T11052] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1800'. [ 131.868897][T11054] loop9: detected capacity change from 0 to 256 [ 132.122137][T11062] loop9: detected capacity change from 0 to 128 [ 132.339581][ T4618] block nbd1: Possible stuck request 000000000d9495aa: control (read@0,4096B). Runtime 90 seconds [ 132.339628][ T25] block nbd2: Possible stuck request 000000005537723d: control (read@0,1024B). Runtime 90 seconds [ 132.339644][ T25] block nbd2: Possible stuck request 000000009195d6cb: control (read@1024,1024B). Runtime 90 seconds [ 132.339655][ T25] block nbd2: Possible stuck request 000000004d772729: control (read@2048,1024B). Runtime 90 seconds [ 132.339666][ T25] block nbd2: Possible stuck request 00000000f70ef3f4: control (read@3072,1024B). Runtime 90 seconds [ 132.474091][T11109] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1811'. [ 132.479149][T11114] loop1: detected capacity change from 0 to 8 [ 132.487694][T11114] squashfs: SQUASHFS error: Xattrs in filesystem, these will be ignored [ 132.487709][T11114] unable to read xattr id index table [ 132.488078][T11114] SQUASHFS error: zlib decompression failed, data probably corrupt [ 132.488091][T11114] SQUASHFS error: Failed to read block 0x9b: -5 [ 132.488098][T11114] SQUASHFS error: Unable to read metadata cache entry [99] [ 132.488104][T11114] SQUASHFS error: Unable to read inode 0x127 [ 132.501895][T11114] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1812'. [ 132.536135][T11109] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1811'. [ 132.604355][T11109] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1811'. [ 132.604468][T11118] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1815'. [ 132.653858][ T50] Bluetooth: hci5: command tx timeout [ 132.674072][T11109] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1811'. [ 134.733226][ T50] Bluetooth: hci5: command tx timeout [ 134.904726][ T25] block nbd3: Possible stuck request 00000000dc7e7af3: control (read@0,1024B). Runtime 90 seconds [ 134.904757][ T25] block nbd3: Possible stuck request 00000000a23fccc3: control (read@1024,3072B). Runtime 90 seconds [ 136.344099][ T30] kauditd_printk_skb: 6745 callbacks suppressed [ 136.344115][ T30] audit: type=1400 audit(136.320:4652): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="j8" object="_" requested=w pid=0 comm="swapper/1" saddr=10.128.0.169 src=30028 daddr=10.128.1.77 dest=55500 netif=enp0s0 [ 136.802751][ T30] audit: type=1400 audit(136.770:4653): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="j8" object="_" requested=w pid=0 comm="swapper/1" saddr=10.128.0.169 src=30028 daddr=10.128.1.77 dest=55500 netif=enp0s0 [ 136.813591][ T50] Bluetooth: hci5: command tx timeout [ 136.843723][ T4342] udevd[4342]: worker [4701] /devices/virtual/block/nbd0 is taking a long time [ 136.843754][ T4342] udevd[4342]: worker [4702] /devices/virtual/block/nbd1 is taking a long time [ 136.843773][ T4342] udevd[4342]: worker [4699] /devices/virtual/block/nbd2 is taking a long time [ 136.843807][ T4342] udevd[4342]: worker [4726] /devices/virtual/block/nbd3 is taking a long time [ 139.774191][ T30] audit: type=1400 audit(139.750:4654): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="j8" object="_" requested=w pid=0 comm="swapper/1" saddr=10.128.0.169 src=30028 daddr=10.128.1.77 dest=55500 netif=enp0s0 [ 140.322786][ T30] audit: type=1400 audit(140.290:4655): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="j8" object="_" requested=w pid=0 comm="swapper/1" saddr=10.128.0.169 src=30028 daddr=10.128.1.77 dest=55500 netif=enp0s0 [ 147.055213][ T30] audit: type=1400 audit(147.030:4656): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="j8" object="_" requested=w pid=0 comm="swapper/1" saddr=10.128.0.169 src=30028 daddr=10.128.1.77 dest=55500 netif=enp0s0 [ 147.490743][ T30] audit: type=1400 audit(147.460:4657): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="j8" object="_" requested=w pid=0 comm="swapper/1" saddr=10.128.0.169 src=30028 daddr=10.128.1.77 dest=55500 netif=enp0s0 [ 152.174328][ T25] block nbd0: Possible stuck request 000000001c7a3d62: control (read@0,1024B). Runtime 120 seconds [ 152.174361][ T25] block nbd0: Possible stuck request 0000000034f4f83a: control (read@1024,1024B). Runtime 120 seconds [ 152.174374][ T25] block nbd0: Possible stuck request 00000000bc1a48f1: control (read@2048,1024B). Runtime 120 seconds [ 152.174385][ T25] block nbd0: Possible stuck request 0000000018dc6858: control (read@3072,1024B). Runtime 120 seconds [ 161.145085][ T30] audit: type=1400 audit(161.120:4658): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="j8" object="_" requested=w pid=0 comm="swapper/1" saddr=10.128.0.169 src=30028 daddr=10.128.1.77 dest=55500 netif=enp0s0 [ 161.570772][ T30] audit: type=1400 audit(161.540:4659): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="j8" object="_" requested=w pid=0 comm="swapper/1" saddr=10.128.0.169 src=30028 daddr=10.128.1.77 dest=55500 netif=enp0s0 [ 162.422584][ T4618] block nbd2: Possible stuck request 000000005537723d: control (read@0,1024B). Runtime 120 seconds [ 162.422613][ T4618] block nbd2: Possible stuck request 000000009195d6cb: control (read@1024,1024B). Runtime 120 seconds [ 162.422625][ T4618] block nbd2: Possible stuck request 000000004d772729: control (read@2048,1024B). Runtime 120 seconds [ 162.422635][ T4618] block nbd2: Possible stuck request 00000000f70ef3f4: control (read@3072,1024B). Runtime 120 seconds [ 162.433536][ T25] block nbd1: Possible stuck request 000000000d9495aa: control (read@0,4096B). Runtime 120 seconds [ 164.983403][ T25] block nbd3: Possible stuck request 00000000dc7e7af3: control (read@0,1024B). Runtime 120 seconds [ 164.983439][ T25] block nbd3: Possible stuck request 00000000a23fccc3: control (read@1024,3072B). Runtime 120 seconds [ 182.254474][ T25] block nbd0: Possible stuck request 000000001c7a3d62: control (read@0,1024B). Runtime 150 seconds [ 182.254506][ T25] block nbd0: Possible stuck request 0000000034f4f83a: control (read@1024,1024B). Runtime 150 seconds [ 182.254518][ T25] block nbd0: Possible stuck request 00000000bc1a48f1: control (read@2048,1024B). Runtime 150 seconds [ 182.254529][ T25] block nbd0: Possible stuck request 0000000018dc6858: control (read@3072,1024B). Runtime 150 seconds [ 187.374637][ T1596] ieee802154 phy1 wpan1: encryption failed: -22 [ 188.658273][ T30] audit: type=1400 audit(188.630:4660): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="j8" object="_" requested=w pid=0 comm="swapper/1" saddr=10.128.0.169 src=30028 daddr=10.128.1.77 dest=55500 netif=enp0s0 [ 190.498738][ T30] audit: type=1400 audit(190.470:4661): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="j8" object="_" requested=w pid=0 comm="swapper/1" saddr=10.128.0.169 src=30028 daddr=10.128.1.77 dest=55500 netif=enp0s0 [ 192.495704][ T25] block nbd2: Possible stuck request 000000005537723d: control (read@0,1024B). Runtime 150 seconds [ 192.495737][ T25] block nbd2: Possible stuck request 000000009195d6cb: control (read@1024,1024B). Runtime 150 seconds [ 192.495752][ T25] block nbd2: Possible stuck request 000000004d772729: control (read@2048,1024B). Runtime 150 seconds [ 192.495763][ T25] block nbd2: Possible stuck request 00000000f70ef3f4: control (read@3072,1024B). Runtime 150 seconds [ 192.495785][ T4618] block nbd1: Possible stuck request 000000000d9495aa: control (read@0,4096B). Runtime 150 seconds [ 195.055897][ T4618] block nbd3: Possible stuck request 00000000dc7e7af3: control (read@0,1024B). Runtime 150 seconds [ 195.055930][ T4618] block nbd3: Possible stuck request 00000000a23fccc3: control (read@1024,3072B). Runtime 150 seconds [ 209.933261][ T4716] Bluetooth: hci4: command 0x0406 tx timeout [ 209.943701][ T4716] Bluetooth: hci2: command 0x0406 tx timeout [ 212.354270][ T4618] block nbd0: Possible stuck request 000000001c7a3d62: control (read@0,1024B). Runtime 180 seconds [ 212.354302][ T4618] block nbd0: Possible stuck request 0000000034f4f83a: control (read@1024,1024B). Runtime 180 seconds [ 212.354315][ T4618] block nbd0: Possible stuck request 00000000bc1a48f1: control (read@2048,1024B). Runtime 180 seconds [ 212.354326][ T4618] block nbd0: Possible stuck request 0000000018dc6858: control (read@3072,1024B). Runtime 180 seconds [ 213.017034][ T4342] udevd[4342]: worker [4701] /devices/virtual/block/nbd0 timeout; kill it [ 213.017613][ T4342] udevd[4342]: seq 10210 '/devices/virtual/block/nbd0' killed [ 222.047656][ T4342] udevd[4342]: worker [4702] /devices/virtual/block/nbd1 timeout; kill it [ 222.048621][ T4342] udevd[4342]: seq 10489 '/devices/virtual/block/nbd1' killed [ 222.049607][ T4342] udevd[4342]: worker [4699] /devices/virtual/block/nbd2 timeout; kill it [ 222.050615][ T4342] udevd[4342]: seq 10518 '/devices/virtual/block/nbd2' killed [ 222.585405][ T4618] block nbd2: Possible stuck request 000000005537723d: control (read@0,1024B). Runtime 180 seconds [ 222.585441][ T4618] block nbd2: Possible stuck request 000000009195d6cb: control (read@1024,1024B). Runtime 180 seconds [ 222.585463][ T4618] block nbd2: Possible stuck request 000000004d772729: control (read@2048,1024B). Runtime 180 seconds [ 222.585482][ T4618] block nbd2: Possible stuck request 00000000f70ef3f4: control (read@3072,1024B). Runtime 180 seconds [ 222.585508][ T25] block nbd1: Possible stuck request 000000000d9495aa: control (read@0,4096B). Runtime 180 seconds [ 225.064065][ T4342] udevd[4342]: worker [4726] /devices/virtual/block/nbd3 timeout; kill it [ 225.065726][ T4342] udevd[4342]: seq 10692 '/devices/virtual/block/nbd3' killed [ 225.153327][ T25] block nbd3: Possible stuck request 00000000dc7e7af3: control (read@0,1024B). Runtime 180 seconds [ 225.153358][ T25] block nbd3: Possible stuck request 00000000a23fccc3: control (read@1024,3072B). Runtime 180 seconds [ 240.663662][ T4713] Bluetooth: hci1: command 0x041b tx timeout [ 242.414576][ T25] block nbd0: Possible stuck request 000000001c7a3d62: control (read@0,1024B). Runtime 210 seconds [ 242.414608][ T25] block nbd0: Possible stuck request 0000000034f4f83a: control (read@1024,1024B). Runtime 210 seconds [ 242.414621][ T25] block nbd0: Possible stuck request 00000000bc1a48f1: control (read@2048,1024B). Runtime 210 seconds [ 242.414632][ T25] block nbd0: Possible stuck request 0000000018dc6858: control (read@3072,1024B). Runtime 210 seconds [ 243.695204][ T30] audit: type=1400 audit(243.670:4662): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="j8" object="_" requested=w pid=0 comm="swapper/1" saddr=10.128.0.169 src=30028 daddr=10.128.1.77 dest=55500 netif=enp0s0 [ 247.842750][ T30] audit: type=1400 audit(247.810:4663): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="j8" object="_" requested=w pid=0 comm="swapper/1" saddr=10.128.0.169 src=30028 daddr=10.128.1.77 dest=55500 netif=enp0s0 [ 248.824728][ T1596] ieee802154 phy1 wpan1: encryption failed: -22 [ 252.655063][ T25] block nbd2: Possible stuck request 000000005537723d: control (read@0,1024B). Runtime 210 seconds [ 252.655096][ T25] block nbd2: Possible stuck request 000000009195d6cb: control (read@1024,1024B). Runtime 210 seconds [ 252.655109][ T25] block nbd2: Possible stuck request 000000004d772729: control (read@2048,1024B). Runtime 210 seconds [ 252.655120][ T25] block nbd2: Possible stuck request 00000000f70ef3f4: control (read@3072,1024B). Runtime 210 seconds [ 252.655141][ T4618] block nbd1: Possible stuck request 000000000d9495aa: control (read@0,4096B). Runtime 210 seconds [ 255.216464][ T4618] block nbd3: Possible stuck request 00000000dc7e7af3: control (read@0,1024B). Runtime 210 seconds [ 255.216497][ T4618] block nbd3: Possible stuck request 00000000a23fccc3: control (read@1024,3072B). Runtime 210 seconds [ 256.013213][ T4713] Bluetooth: hci5: command 0x0406 tx timeout [ 272.493879][ T4618] block nbd0: Possible stuck request 000000001c7a3d62: control (read@0,1024B). Runtime 240 seconds [ 272.493912][ T4618] block nbd0: Possible stuck request 0000000034f4f83a: control (read@1024,1024B). Runtime 240 seconds [ 272.493924][ T4618] block nbd0: Possible stuck request 00000000bc1a48f1: control (read@2048,1024B). Runtime 240 seconds [ 272.493936][ T4618] block nbd0: Possible stuck request 0000000018dc6858: control (read@3072,1024B). Runtime 240 seconds [ 273.783413][ T31] INFO: task syz.6.1713:10606 blocked for more than 143 seconds. [ 273.783432][ T31] Not tainted syzkaller #0 [ 273.783438][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 273.783443][ T31] task:syz.6.1713 state:D stack:0 pid:10606 tgid:10591 ppid:8498 task_flags:0x400040 flags:0x00000011 [ 273.783459][ T31] Call trace: [ 273.783462][ T31] __switch_to+0x2b4/0x6e4 (T) [ 273.783482][ T31] __schedule+0x135c/0x2b00 [ 273.783493][ T31] schedule+0x13c/0x20c [ 273.783503][ T31] schedule_preempt_disabled+0x18/0x2c [ 273.783514][ T31] __mutex_lock+0x5d4/0x1078 [ 273.783524][ T31] mutex_lock_nested+0x24/0x30 [ 273.783535][ T31] sync_bdevs+0x214/0x3d4 [ 273.783546][ T31] ksys_sync+0xc4/0x118 [ 273.783557][ T31] __arm64_sys_sync+0x14/0x24 [ 273.783568][ T31] invoke_syscall+0x98/0x244 [ 273.783580][ T31] el0_svc_common+0xec/0x23c [ 273.783590][ T31] do_el0_svc+0x4c/0x5c [ 273.783600][ T31] el0_svc+0x60/0x1d8 [ 273.783608][ T31] el0t_64_sync_handler+0x44/0x104 [ 273.783616][ T31] el0t_64_sync+0x198/0x19c [ 273.783635][ T31] [ 273.783635][ T31] Showing all locks held in the system: [ 273.783641][ T31] locks held by khungtaskd/31: 1, last CPU#0: [ 273.783648][ T31] #0: ffff800089981820 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x4c/0x188 [ 273.783688][ T31] locks held by getty/4490: 2, on CPU#1: [ 273.783694][ T31] #0: ffff0000cd1510a0 (&tty->ldisc_sem){++++}-{0:0}, at: ldsem_down_read+0x3c/0x4c [ 273.783715][ T31] #1: ffff80009318e2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x348/0xf78 [ 273.783740][ T31] locks held by udevd/4699: 1, on CPU#1: [ 273.783746][ T31] #0: ffff0000c6957350 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xc4/0x880 [ 273.783767][ T31] locks held by udevd/4701: 1, on CPU#1: [ 273.783773][ T31] #0: ffff0000c51d8350 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xc4/0x880 [ 273.783793][ T31] locks held by udevd/4702: 1, on CPU#1: [ 273.783798][ T31] #0: ffff0000c6953350 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xc4/0x880 [ 273.783819][ T31] locks held by udevd/4726: 1, on CPU#0: [ 273.783825][ T31] #0: ffff0000c69f3350 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xc4/0x880 [ 273.783857][ T31] locks held by syz.6.1713/10606: 1, on CPU#1: [ 273.783863][ T31] #0: ffff0000c69f3350 (&disk->open_mutex){+.+.}-{4:4}, at: sync_bdevs+0x214/0x3d4 [ 273.783885][ T31] [ 273.783887][ T31] ============================================= [ 273.783887][ T31] [ 273.783892][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 273.825348][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT [ 273.826933][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 273.828698][ T31] Call trace: [ 273.829283][ T31] show_stack+0x2c/0x3c (C) [ 273.830093][ T31] __dump_stack+0x30/0x40 [ 273.830857][ T31] dump_stack_lvl+0x30/0x12c [ 273.831704][ T31] dump_stack+0x1c/0x28 [ 273.832455][ T31] vpanic+0x594/0xaf8 [ 273.833184][ T31] vpanic+0x0/0xaf8 [ 273.833879][ T31] hung_task_panic+0x0/0x2c [ 273.834722][ T31] kthread+0x304/0x3d4 [ 273.835446][ T31] ret_from_fork+0x10/0x20 [ 273.836232][ T31] SMP: stopping secondary CPUs [ 273.837095][ T31] Kernel Offset: disabled [ 273.837872][ T31] CPU features: 0x0,a0000000,00f00020,9c080a02,a84ff6a7 [ 273.839091][ T31] Memory Limit: none [ 274.254835][ T31] Rebooting in 86400 seconds..