last executing test programs: 3m8.111998244s ago: executing program 0 (id=6): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x6, 0x4, &(0x7f0000000000)=@framed={{}, [@alu={0x4, 0x1, 0x2, 0x0, 0x0, 0x1}]}, &(0x7f0000000100)='syzkaller\x00', 0x2}, 0x94) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="280100001700000224bd700000000000ffffffff000000000000000000000000000000100000000000000000000000000000ffffe0000002ac1414bb000000000000000000000000ff020000000000000000000000000001"], 0x128}, 0x1, 0x0, 0x0, 0x4008001}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x164}, 0x1, 0x0, 0x0, 0x4000819}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000240)=0x0) prlimit64(r2, 0xf, &(0x7f0000000340)={0x4, 0x2}, &(0x7f0000000380)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000ac0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x15}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0xc0}}, 0x0) io_setup(0x2007, &(0x7f0000000980)=0x0) r5 = eventfd2(0x3, 0x80000) r6 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r6, &(0x7f00000016c0)=[{{&(0x7f0000000000)={0x2, 0x0, @rand_addr=0x64010100}, 0x10, &(0x7f0000000300)=[{&(0x7f0000000100)="01", 0x1}], 0x1}}], 0x1, 0x18000) r7 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r6, 0x84, 0x72, &(0x7f00000003c0)={r8, 0x0, 0x20}, 0xc) io_pgetevents(r4, 0x2, 0x2, &(0x7f0000000080)=[{}, {}], 0x0, 0x0) io_submit(r4, 0x1, &(0x7f0000000280)=[&(0x7f0000000000)={0x1802, 0x0, 0x0, 0x5, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x1, r5}]) io_destroy(r4) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(0xffffffffffffffff, 0xc0305602, &(0x7f0000000040)={0x0, 0x51, 0x5001, 0x1}) 3m7.887320771s ago: executing program 0 (id=8): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./mydev/v4l-touch0\x00', 0x2, 0x0) ioctl(r1, 0xc0145608, &(0x7f0000000600)) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000180)={0x0, 0x6, {0x0}, {}, 0xe, 0x6}) sendmsg$nl_generic(r1, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000380)={&(0x7f0000000440)={0xd4, 0x2d, 0x400, 0xfffffffa, 0x25dfdbfd, {0x15}, [@generic="78d80232daf98d45", @nested={0x14, 0x73, 0x0, 0x1, [@nested={0x4, 0xe3}, @typed={0x4, 0x123}, @nested={0x4, 0x10b}, @nested={0x4, 0xe8}]}, @generic="0deff190376558220023b9524490cb6e12ca8e5d19c963e3f076d5c349df4d2cb67bc4caf7a19c34d135", @generic="223bfe018657cc6c3baf5a6832fe0166de7c0ba99c576402b769971ffee9354b4021d717e5f2024389ad02fd7067a5ff448e570a451324f36a9a320d26baaca6cd9849aac88600d47cb9d51712a9a3bb71dd40da1fd47a518b96710260145e8536e5b50e03a31d93014fca3316ade2b89a75e994c505198e"]}, 0xd4}, 0x1, 0x0, 0x0, 0x40}, 0x8840) mmap(&(0x7f00003e8000/0x2000)=nil, 0x2000, 0xd, 0x4010, r1, 0x986bb000) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu\x00', 0x275a, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fcntl$lock(r3, 0x24, &(0x7f0000000400)={0x2, 0x0, 0x5, 0x407}) r4 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r4, &(0x7f0000000180)="0b032200e0ff2500021d07540006a13bb1000000080086dd4803", 0x10000, 0x0, &(0x7f0000000140), 0xffffffffffffff49) timer_create(0x6, &(0x7f0000000000)={0x0, 0x4, 0x0, @tid=r2}, &(0x7f00000001c0)=0x0) clock_gettime(0x0, &(0x7f0000000200)={0x0, 0x0}) ioctl$TUNGETVNETBE(r3, 0x800454df, &(0x7f00000005c0)=0x1) timer_settime(r5, 0x0, &(0x7f0000000540)={{0x0, 0x3938700}, {r6, r7+10000000}}, &(0x7f0000000580)) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x4c, 0x9, 0x6, 0x5, 0x0, 0x0, {0x5, 0x0, 0x40}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x8}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xe0004000}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x10004893}, 0x14000884) fcntl$lock(r3, 0x26, &(0x7f0000000280)={0x1, 0x0, 0x9, 0x9}) fcntl$lock(r3, 0x7, &(0x7f0000000140)={0x1, 0x1, 0x25, 0x5}) fcntl$lock(r3, 0x7, &(0x7f00000000c0)={0x1, 0x2, 0x8, 0x73e9}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) 3m6.49343026s ago: executing program 0 (id=16): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) openat$userfaultfd(0xffffffffffffff9c, &(0x7f0000000300), 0x800, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)={0x14, r3, 0x321, 0x70bd29, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4c811}, 0x4) recvmmsg(r4, &(0x7f0000001300)=[{{0x0, 0x0, 0x0}, 0xddda}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}, 0x60000000}, {{0x0, 0x0, 0x0}, 0x871}, {{0x0, 0x0, 0x0}, 0x6c2}, {{0x0, 0x0, 0x0}, 0x9}], 0x6, 0x20, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r6 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SCUDMATCHLEN(r6, 0x89e7, &(0x7f0000000000)={0x4d}) sendmsg$TIPC_CMD_GET_MAX_PORTS(r4, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x1c, 0x0, 0x20, 0x70bd2d, 0x25dfdbfc, {}, ["", "", "", "", "", ""]}, 0x1c}}, 0x24) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r7, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000001c0)={0x48, r5, 0x801, 0x0, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY={0x20, 0x50, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x2}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "7ee5d52ffd"}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}]}]}, 0x48}}, 0x0) 3m4.528040772s ago: executing program 0 (id=20): openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x107000, 0x0) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000400)='./mnt\x00', 0x840, &(0x7f0000000440)={[{@test_dummy_encryption_v1}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x2}}]}, 0x1, 0x249, &(0x7f00000007c0)="$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") bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x3, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='syzkaller\x00', 0x9, 0xfdd, &(0x7f0000001e00)=""/4061}, 0x94) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet6_tcp(0xa, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/nullb/my_zoned_dev\x00', 0x1ff) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./config/nullb/my_zoned_dev/memory_backed\x00', 0x2, 0x0) write(r3, &(0x7f00000001c0)='1\x00', 0x1) write$smackfs_netlabel(r3, &(0x7f00000000c0)=ANY=[@ANYBLOB='00000000000000003622.00000000000000065536.00000000000000000005.00000000000000000000./000000000000000000040net/rpc\x00\x00'], 0x73) r4 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/nullb/my_zoned_dev/zoned\x00', 0x2, 0x0) write(r4, &(0x7f0000000240)='1\x00', 0x1) r5 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./config/nullb/my_zoned_dev/power\x00', 0x2, 0x0) write(r5, &(0x7f0000000480), 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) r6 = syz_open_procfs(0x0, 0x0) openat(r6, 0x0, 0x4200, 0x1ec) 3m3.588687552s ago: executing program 0 (id=29): r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x20006, 0x2) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) (async, rerun: 32) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x777) (async, rerun: 32) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x142, 0x80) write(r1, &(0x7f0000000180)='100000', 0x6) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./bus\x00', 0x248480, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r2, &(0x7f0000000280)='0', 0x1) (async, rerun: 32) r3 = fsopen(&(0x7f0000000140)='cgroup2\x00', 0x0) (rerun: 32) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x0) setuid(0xee01) (async) syz_clone3(&(0x7f0000000340)={0x201800000, 0x0, 0x0, 0x0, {0x2d}, 0x0, 0x0, 0x0, 0x0, 0x0, {r4}}, 0x58) (async) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r5, 0x8983, &(0x7f0000000d00)={0x0, 'syz_tun\x00', {0x4}, 0xa}) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x1db) (async, rerun: 64) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000003e00070100001a0005000000047c0000040049800c000180060006008035"], 0x28}, 0x1, 0x0, 0x0, 0x8044}, 0x4010) (rerun: 64) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000500)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c00000070000100000000000000000007000000", @ANYRES32=r7, @ANYBLOB="1400018008000100000001000500060002000000"], 0x2c}}, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000100)={0x4c, 0x2, 0x0, "bc57499e007105bf0000000100100000e403000000000000000040002100", 0x38414761}) (async) r8 = request_key(&(0x7f0000000040)='id_resolver\x00', &(0x7f0000000140)={'syz', 0x2}, &(0x7f0000000180)='bridge_slave_0\x00', 0xfffffffffffffffb) keyctl$KEYCTL_PKEY_QUERY(0x18, r8, 0x0, &(0x7f00000001c0)='-[.{/^=:(^:H\x00', &(0x7f0000000200)) 3m2.220466492s ago: executing program 0 (id=95): bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0xb, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000200000000000000000850000002a0000001801000020786c2500000000002020207b1af8ff00000000bfa1000000000000070100"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2a}]}, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r3}, &(0x7f0000000280), &(0x7f0000000240)=r0}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4) sendmsg$inet(r2, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 3m2.195932687s ago: executing program 32 (id=95): bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0xb, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000200000000000000000850000002a0000001801000020786c2500000000002020207b1af8ff00000000bfa1000000000000070100"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2a}]}, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r3}, &(0x7f0000000280), &(0x7f0000000240)=r0}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4) sendmsg$inet(r2, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 2m30.458434825s ago: executing program 4 (id=945): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000024c0)={@val={0x0, 0x800}, @val={0x0, 0x0, 0x3}, @ipv4=@icmp={{0x9, 0x4, 0x1, 0x16, 0x2c, 0x65, 0x0, 0x4, 0x1, 0x0, @remote, @broadcast, {[@generic={0x94, 0xf, "f00c8e76d0966f9a2b2407c08a"}]}}, @address_reply={0x12, 0x0, 0x0, 0xffff}}}, 0xff04) 2m30.381931207s ago: executing program 4 (id=949): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), r0) sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x0) 2m30.367974665s ago: executing program 4 (id=950): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40000c0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x4c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x20, 0x3, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\v'}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x7}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000400)=ANY=[@ANYBLOB="500000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000400000140012800c0001006d6163766c616e000400028008000500", @ANYRES32, @ANYBLOB="08000400aabb"], 0x50}, 0x1, 0x0, 0x0, 0x20000080}, 0x20000090) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 2m30.30155376s ago: executing program 4 (id=952): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2f, &(0x7f0000000000)=0x1, 0x4) close(0x3) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7a, &(0x7f0000000340)={r3, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r1, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000100)={0x0, 0x4}, 0x8) 2m29.236041741s ago: executing program 4 (id=960): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000024c0)={@val={0x0, 0x800}, @val={0x0, 0x0, 0x3}, @ipv4=@icmp={{0x9, 0x4, 0x1, 0x16, 0x2c, 0x65, 0x0, 0x4, 0x1, 0x0, @remote, @broadcast, {[@generic={0x94, 0xf, "f00c8e76d0966f9a2b2407c08a"}]}}, @address_reply={0x12, 0x0, 0x0, 0xffff}}}, 0xff04) 2m29.09756519s ago: executing program 4 (id=964): r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x2) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x4) ioctl$NBD_DO_IT(r0, 0xab03) write(r0, &(0x7f0000000000)='7', 0x1) 2m13.907986734s ago: executing program 33 (id=964): r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x2) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x4) ioctl$NBD_DO_IT(r0, 0xab03) write(r0, &(0x7f0000000000)='7', 0x1) 1m14.658930005s ago: executing program 3 (id=2456): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newnexthop={0x28, 0x68, 0x1, 0x2, 0x7ffffffc, {0x0, 0x0, 0x4}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x5}]}, @NHA_RES_GROUP={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) syz_open_dev$video(&(0x7f0000000080), 0x7, 0x0) socket$tipc(0x1e, 0x2, 0x0) socket$tipc(0x1e, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x50}, 0x80) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x50}}}, &(0x7f0000000300)=0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup(r7) syz_ublk_setup_queues(r8, r6, 0x0, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x800, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x801f70, 0x2, 0x40040001, 0x334}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) 1m13.75099001s ago: executing program 3 (id=2466): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, 0x0, 0x40) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) sendmmsg(r0, 0x0, 0x0, 0x0) sendmsg$key(r0, &(0x7f0000000000)={0x9, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB="0209000902"], 0x10}}, 0x0) (fail_nth: 2) 1m13.698623272s ago: executing program 3 (id=2467): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@getqdisc={0x24, 0x26, 0x200, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x3, 0x10}, {0x8, 0xf}, {0xf, 0xffe0}}}, 0x24}}, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c070054001280080001006873720048000280"], 0x90}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="3400000013000100000000000000000007000000", @ANYRES32=r1, @ANYBLOB="000000000000000014001a80100004800c"], 0x34}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1m13.697178801s ago: executing program 3 (id=2468): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x2a0471a, &(0x7f0000000000)={[{@prjquota}]}, 0x82, 0x4a0, &(0x7f0000000240)="$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") chdir(&(0x7f0000000100)='./file0\x00') bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x288242, 0x100) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x2811, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="5000000002060500000000000000000000000000050005000004000000000005000100070000000900020073797a310000000015000300686173683a69702c706f72742c6e657400000000"], 0x50}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r3, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000000140)={0x30, r4, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x4}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}]}, 0x30}}, 0x4000004) getsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@initdev, @empty, 0x0}, &(0x7f0000000800)=0xc) syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000180)='./file1\x00', 0x300001a, &(0x7f0000000040)=ANY=[@ANYRES8=0x0], 0xfc, 0x2c6, &(0x7f0000000240)="$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") r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x12042, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x101042, 0x1d0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r7, 0x0) setsockopt(r7, 0x5, 0x6, &(0x7f0000001040)="f945ebb5f7ebc2b223377580a923646bfb39d0e401e58aeb0c7c0229db20d8a527e563cb55862383940a57547b9bb73c0373acd2204980a7c9faf0b474de4c900e1f609ed833a9d80166c74480bff78c8ab2222b6a07bfcfaf377688dc2a7117859f699409697a875ba945231330d3a3747c2af890cff555821dbe30973efe4d7d92eefbb64cd2d0fc727ee891e0cddb56a670aa951a0cc612be8cd5171665339ce9c211770e187eb0722473f8e1f1f8e90678028abdcac67d3fa924ba4c1de741282d6f01dbc4b39baea57b4c5dd74faa2dc9d4e25ed899a621b91fb11e93b6b6247ec85397bbbc642c1e3dfea0232a6a00417d8ba8d8b6bbf8c7a9beac01a4720e18f1bfd61a68da78ec04fa0da8d964fed33f5c67221ec1bdf633422d95026ff6ce707b4540b8382603d8d144c9b6236cef16d65fb207225703d9c548fc1ae099795272b506b22b3bd98c4b0b55e0d170c531bc7e854723442fe7ec2c3f768e3c2e3ceb1ad34e51107fab83ab6c283df42f3bf6fd82c2036be61506756501c46d712070c7a0f00b7f6eb4e3b5c8cd98227793e81f326c3927d6dc9c6aad7f5b5668de2f9024ef47cd7713a1ef4804eacc55940d5d5d859ffc8a8dd4c8e502d12ca245e2ab1098663c4c4371c2c595554e68e07e4de77f2f878ae7939afef1cb74aa3d6f802a70f08d426b3720516a3cdd2ceed9eb2b2f5ac09361f8e29c4ea53311f646f20a81e0800df8cb71f0f894f643bda518e3d5bd739d1c1ac3cde7ede0f4514ac012951d0eed8124e29746362c1113da28fbd89c9cab638def5a8e46fdf72003fe5dde02943d6804fafb42ccd98d89f407e776300f6e17c675ee4e25bc26bd1d7e31a87e98c4d90a51983baf5f212f217605e0ca543a5acc5c51940da0c084c2198116cc5bc061b1beb269747040926af06f6aeafb33e2922f45d6edf8c050c692f733d3006b579b93f738327d81d2e6ee60d327be55533e1307cea454605ffd88e4b92ee41f9ebea86c5a7ffb243215d70193b6256de3816f0f422743491e2d501ee3f1ae701bc8607554973b1f40577c463d2e7d6259829d54ee54feefa4fcf269dca27e338b43e9da86551e359bb311b987c18aa5c845e9593121c16645986acb7f8363efe97af1137815b6b4d6af2359b9b7d62e9f9fb7984e6ab4f464ab96e55f05bbd9a903b019c48e877b83c9dbb519d7c93dfb15069e6d50e5cb4c600e70c2ef1c1469256e4f534cf9fc82243f9df26575cc0707a05307327ecf9c75612e3e07ce2c0b9f95137400fcb796e47521a36dd03485aaadd89302eec3b34870a39aa6c4887eede7101747b32a7cce4bd91a7702e75884db09857461b96dedb93cb2e4a669d9ffaa3b44c2d490575c804ae82415f9261324a930c7f11c95fab6c80c1224d950984a3da8649ed7323e5fbd570ac88a0c8675e0d0ab001a4ed07c6c8e0aa6910348caa23fbaaa93fc01597708d82d0c085428ebabb2f7631746c4aa20c40dcd168b0a7eae7f89a1e4937feafb070e4a828478e2deedbff32457d9944a46f94265c0f122d42c97a2ce4fd6c63f20991cd28c9ffebef79f7ec276d35d969ae4c2096c05ff326494a2716543e42e358c382e2cf3553c33414a474336d4ba0153f6f0ea9ee789344392aac4703acbdab231b9faf9235972f71cba9542532338aa38397fa6f0a56c9077b7bb30e7d3aa15dc4ef4db3636d46d7047fbfff458b33cdcf2a91c17b9e59590dbe3f29a06061e013535503e48e482585371de971643e477aae4c68d1ea1088487856921b30846066b80de202aa024ee9dc435939057761f26a07dad134e2cd3003c3150934d60f9cf164f9846941b099184e613a6ecf7cbcab0c0836ba7d72a78ef4857604531f04f859b4ca5f2c9a8cf35b163dbaa772a12e3f9cd7a1a0cff4ba09e16c2c7a852c40214df77d31b3c9ec1b9b268be542460bb672654dc2d3a32d32f5b1e203fad07f3c53720f4cad93adb31c368912476b3203f6b6af2e718fa6a9cf08b902ff296a883ed523e29a83d40a9d04087b45c346914beb2e1ed7ae5954a5c2aed76a64e3f1e14408a38ddd8c52bf2d6f0bf7e02bd432e8230d0f0948698f259ce7f44e393fc244938b532053c1231a1d4322aa0cb48c53e459b193dc9928204e778692158bd59900d64bbccf72904c77890c4f45390f568decba1bde99d500b923fcea301aa022175089ac0ba79e33439b739f87952945b1a25726611cecf38bbe61ddeee5af14b5cc36c242fb75469841e818999c243b044c9fbe62ef2086ea33484b087c3ca787b345bd0c70d2d216958ac9b8fa454992167173ef839c28a95ca5c7889a713d84b404481f67d4f1f2bed5538117174b7aa96af6cbac62dca76dba6fa2b031e582ae60c6fd3fee63785d395b387cb5719eae1f8f81406e9f1d9a486e8d468d3b5525fb0f0b9f3e0f60faf8013543e5178d52ca9431baa59276229edabf5127f61c47a1833cb5b53f3adc4702e827b86598cca5ff77676de0b5406eb249aefa238366256ae7f1db6baaf20b1e9c74862c620851c76fcdefdaedd54dfb9cf89c7c9d64e129dbdddf604476f3277c01963e8b705e37eb25580e9533bed6f49b79a78de7379e344a8e5121c339102a57c799353e04bf28d506b5caf8b8a0268baede3d53366bf1cc2835fe4c35b252d35d719a54e35980118a07a816228c3eb28ebe8b52af89c240cdfae8260950d390c12bab075b933ca4ddd95501c3ddbd35e1766805265e51d1ea1d742a0ee89f3f97e38642a32ac0eeac1aedfd79798c767422b352680bab1c76ea745fd044250fabcb0e28d91832015110135bcb773d98b5f4543ae678574de12eb4cd8dc0deb607d7249dd7582d0bce7e3239f5b19b16fcdc58234089fa147b665c0b03a553958a28425b148ebf9db47a431556ef108db89ecfefd5de1a1eeb5ed6d5b579dfdfe0cf79ac6e39936af37c4838c52c674e4629b9dea0b2090e4f6551b7edbb8b80ef6e014f7b14276c6adcc8b8654eabffe0c86f80fad421b9218e3ed747fde935d22ccae77f04f5d6dcd159fb3665dcf30574c22400eef11e54cda31bb5ba1157f83060d28910a6bf3449b95a03f84672a576f7e1c9ae8eb1eb662b4d2a6d69e160e5c307c3894d8268d450cc651764dbe72f96dc0faf9ba3b0c2a078c72263d1c0164924d6478f373520472a1768dea63d307f0270e870070343def8bf5c9e44d4209dbf31b224ba1a988c7f3d2081109b9a759564d4881b7f36db6b952e2e50989b7a67b2c1ca58a388f0947990fbd0c0ef4e3d6a201ded9d25753b168c22f59545e19a840798cfb1617175b074cb07d60d172b2faaff589a3e489f3bad441fb3dee66fce182966eef4a5b07a375a85a462c426aa6305f2d815ded3c701c3321c52c0b1485a9211941f537cd2e4f685a26f81ac114ad2d54711585d12b267633180e5205bec14491cea0151f2aa459b0f8617a860cd5b2510661ce27a2e400e0bdab50c90e2838567b66ee3fd50e918cfae48f973c54565b86720967ec7fab25d71847a258fc115ab58d8d2f4f5e4e2804b68f8be98984d322d56408afaf99fc1d837da95bd8d5de0685592c67c827fcb4c35b40d83941ed78eb29b57dc6018f421dd28b035b334265d3444e511a492735bfde2635dee414327d8d0d8ae90979bcf1817559c216f0db07130b24414e8e9e980d812db5589ee763f0f369f3ad2df0aaaee735ca6bdd6dc784e40d6c440fc0c0236e9b82c94dd4b0fb965cdccd4ade6cdd8a569f0ca7d1b2b25b2d78f8bc0ec32a68f52798d607ae518e6a2b4e7451c1bffe5b4a5d6418f4a1d797a00bd8cfb6f85e254ea53be6ea1ef0d8e2b34f910c592bc9829c601e91e7231162e30d67b6bafd0c2aba513969db6e1d686cb358a95b7fe69ac1237125256fc4bbaf0272f958569269e15e34e749e8d065ddd22f12de2095557dc86fb875a48c16daf16c9c9f189247f78c41ba58000305df3658e43f93d4b05fce3384b17b2bca847488afdecc85bd963f6d6c5fb7758e364a8cc70c429f28513618a41f039b744cdd80ad188ffd5a334b2dca9309d4098f90977a8b28a378560127ae56c3fb7afc66d54900fb30b6815e4a2480d7c7f275cec6673b508b410c02dcddf894a519e8db3ec2427f8c3579defe25631b1e5dd24d1b286b6be18123afee1e0a58db1ba8ae46c473b9ad50d40049a1e85bacd99b49c735b2dae1bcbd958641f2c166803dfa7bd377ff5c28af1ebd0bce58404484a83a72ca3fa72d44fb46713709bd85c293ac726b702d14ee3238f6f750963aefc811c5ff1718d6fab0ff4a06748d2916d534a998eaf648a684293edf18888df7989cbc66ae40cb9d73f230f92d0f9491d91ae87b7be82b0be5403cec9efad6f05c8cd05136c997174ccdfa9caf15c3b73b011b52f6cc24fc740b7cacceb235716a60fe577468d23939d187f6fad1fb054353f3bb6361e466cfec5063d38afd093e84a7d5035663f8e7318f72d1f2101aaa8da48d712e70553e806aeb827eaf92a5cdbf389c42a32654e61230885d6cec70e528aa992039200a13df12734b89489858f4aba884192d41c7cd86f6c8f0e85c09eaa44e5cab09914681d74e9d34ca1c67585ece9e69cf80d17066fcd03801936c64dac06740044baa9700a2340bfa14546b71c6bb8a780627d9cd8ff0a112be7e0a232565bd12e09a1d3adf574079a7e28dd5626d93a8c4151161f17b6b9a5e4e56ba72d9fa1cd7ddcd9e17957b47e98376676215a94e7c0a66abb059a9d96256e526e39fabf64c3316e26c15f395e64de03be74b49ec6b2c812039e58d26dd070016e9bb605e7af42988f9ffb1325e2793869013c0b399549ecb8f9e0f7192ed62745ac0eda365549146e75f295ba67299e72c997fa66de39f6d86f6cb8c1352e54f35f675ef531e7a1b0491ecfd83eb70514e12773b47b86aa30dee48ef1ee258f0db5e0677786548a44de83dbeafc3453a309069ade66f3e167c68860f09dea9d8eb031748cea5358c8559a2851cbbd8cfbc428af0f26ab4f0dcbdddba40d8c8251e178f8ac2a8103579688ceadaf431e404e1235398228ddfa15f943bf47b5a8c318a1cb166cfe46aa136ff13d4d1189662a01df5624914d75b9c580ef35ceee6947603dc877202b642eb4872ea2755fc3eba995bf5963a8b6f962bc9ca90e6ca3230f2cd16a90b9aa9c7dd25c39a6daf56b459d351abed57978e918b4d47a30f6ebb1fa6f3d5413cc5658f6bfe623f983df1d739705ff0405cab17645dc2c590b35096f4b2ea906d20bc6735ed12a95ab8082fafc0db1574ed00972f5076a6d3b232784727971c3e2d0bf88774c6b75b473f57eea907d819975e02e84c5451b669a0e5a72d505ac1942cfb2cddc916461a8f296c2fe0d5bde9f146136a456571eff6629403d27c283b65067612358470aa3745d1528f2e06fd6a50e8f4c4988040b0ebb59a1af9db7dd52ab1a24dd9282b9b5a9d82d736e03bda37927f39acd8fda2a469a0fa49b70b67966d625fcdb4a21fef0a04604091a7e3fe07f1f44b7a62fccc7af613d119e2b010d3ac57664838c5d8b7e3280bfc1514623b731a54e08851d130b01f4904ec12d67b0ec3af052418099bb15981f1966f3ff1c2e3882238e8e7246c87425d555041fdb23dfdacdcfc3d0120330bc953ade2453ded2893151867aaa3e9630f749e32f657e4fd36e773e6119cc663abdd3c7d8a74d63a121b34e3bd423b4dbf79c0b9a95ae53b7d50e947538accbee1b75fb80e7ec318", 0x1000) sendfile(r7, r6, 0x0, 0x1000000000007) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000008c0)={'syztnl1\x00', &(0x7f0000000840)={'syztnl0\x00', 0x0, 0x2f, 0x0, 0x1, 0x7, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x80, 0x80, 0x80, 0x46}}) getsockname$packet(r0, &(0x7f0000000d80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000dc0)=0x14) getsockopt$PNPIPE_IFINDEX(r2, 0x113, 0x2, &(0x7f0000000900)=0x0, &(0x7f0000000940)=0x4) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000a40)={'gre0\x00', &(0x7f0000000980)={'sit0\x00', 0x0, 0x1, 0x7, 0x0, 0x0, {{0x1f, 0x4, 0x2, 0x25, 0x7c, 0x66, 0x0, 0xf, 0x29, 0x0, @loopback, @multicast2, {[@lsrr={0x83, 0x1b, 0xdc, [@loopback, @local, @rand_addr=0x64010101, @loopback, @local, @rand_addr=0x64010100]}, @end, @timestamp_prespec={0x44, 0x2c, 0x73, 0x3, 0x3, [{@remote, 0x5}, {@multicast1, 0xffffffff}, {@multicast2, 0x3ff}, {@rand_addr=0x64010102, 0x8fd7}, {@empty, 0x9}]}, @ssrr={0x89, 0x1b, 0xb4, [@private=0xa010102, @multicast1, @rand_addr=0x64010102, @private=0xa010102, @local, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @ra={0x94, 0x4, 0x1}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000b40)={'sit0\x00', &(0x7f0000000a80)={'gre0\x00', 0x0, 0x40, 0x20, 0x1, 0x4, {{0x1b, 0x4, 0x0, 0x15, 0x6c, 0x68, 0x0, 0x4, 0x2f, 0x0, @multicast2, @rand_addr=0x64010101, {[@lsrr={0x83, 0x1f, 0xf6, [@rand_addr=0x64010102, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010100, @rand_addr=0x64010100, @broadcast, @rand_addr=0x64010100]}, @noop, @rr={0x7, 0x17, 0x4f, [@initdev={0xac, 0x1e, 0x0, 0x0}, @local, @local, @loopback, @local]}, @end, @lsrr={0x83, 0xf, 0x8c, [@initdev={0xac, 0x1e, 0x0, 0x0}, @empty, @broadcast]}, @rr={0x7, 0xf, 0xd2, [@initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010100, @remote]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000b80)={'batadv0\x00', 0x0}) sendmsg$ETHTOOL_MSG_COALESCE_GET(r0, &(0x7f0000000d40)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000d00)={&(0x7f0000000bc0)={0x104, r4, 0x400, 0x70bd28, 0x25dfdbfd, {}, [@HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}]}, @HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x4000}, 0x80) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000300000000aa1800148014000240fc000000000000000000000000000000060004404e1f00000500070084000000060005"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) semget$private(0x0, 0x5, 0x0) 1m13.495235317s ago: executing program 3 (id=2472): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x121800, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6364, 0x200005, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x240048e4}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r4, &(0x7f00000004c0)=':', 0x1, 0x4000845, &(0x7f0000000140)={0x11, 0x88a8, r5, 0x1, 0x3, 0x6, @local}, 0x14) 1m12.976705247s ago: executing program 3 (id=2485): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000200)=0x237a, 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4}, 0x0) r2 = syz_open_dev$vivid(&(0x7f0000000100), 0x1, 0x2) ioctl$VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000140)={0x2, 0xc, 0x2, 0x0, 0x40}) socket$nl_generic(0x10, 0x3, 0x10) r3 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x15, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = openat$cgroup(r4, &(0x7f0000000040)='syz0\x00', 0x200002, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={r5, r6, 0x15}, 0x14) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_INFO(r7, 0x0, 0x40, &(0x7f0000000000)={'raw\x00', 0x7003, [0x3, 0xe9, 0x81, 0x2, 0x3f]}, &(0x7f0000000140)=0x54) sendmsg$NFT_BATCH(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000060a0b04000000000000000002000000200004801c000180090001006d617371000000000c00028008074e81060c90ad8d9e72000140000000200900010073797a30000000000900020073797a3200000000140000001100010000000600296d4e94"], 0x74}}, 0x0) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000000)=0xb2, 0x4) sendmmsg$inet6(r0, &(0x7f0000000e00)=[{{&(0x7f0000000080)={0xa, 0x4e22, 0x4, @mcast2}, 0x1c, 0x0}}], 0x1, 0x0) recvmmsg(r0, &(0x7f00000031c0)=[{{&(0x7f0000000340)=@ieee802154={0x24, @short}, 0x0, &(0x7f0000003040)=[{&(0x7f0000000540)=""/199}, {&(0x7f00000007c0)=""/172}, {&(0x7f0000000640)=""/58}, {&(0x7f00000009c0)=""/22}, {&(0x7f0000000a00)=""/188}, {&(0x7f0000001f40)=""/4096}, {&(0x7f0000002f40)=""/83}, {&(0x7f0000002fc0)=""/108}], 0x0, &(0x7f00000030c0)=""/234}, 0x40}], 0x2, 0x40002042, 0x0) r8 = syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x4, &(0x7f0000000500)={[{@init_itable}]}, 0x1, 0x79f, &(0x7f0000000f80)="$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") r9 = socket$netlink(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) getpeername$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r4, 0xc018937b, &(0x7f0000000300)={{0x1, 0x1, 0x18, r8, {0xee00, 0xffffffffffffffff}}, './file1\x00'}) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000001e40)={{{@in6=@loopback, @in=@private=0xa010102, 0x4e21, 0x0, 0x4e24, 0x36, 0xa, 0x80, 0xa0, 0x6, r10, r11}, {0x8, 0x7, 0x0, 0x7, 0x4, 0xf, 0x9, 0xfffffffffffffc01}, {0x2, 0x9, 0x1000, 0xd}, 0x5, 0x6e6bb2, 0x1, 0x0, 0x0, 0x2}, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x4d6, 0xff}, 0xa, @in=@local, 0x34ff, 0x0, 0x2, 0xd, 0x7ff, 0xfffffffd}}, 0xe8) writev(r9, &(0x7f0000000000)=[{&(0x7f0000000080)="390000001000090468fe0700000000000000ff3f02000000480100100000000019002b000a0004000500000000000072000000000000000000", 0x39}], 0x1) syz_emit_ethernet(0x46, &(0x7f0000000080)={@local, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010101, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x3, 0x0, 0x6, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @empty, @multicast2}, "1a3f02eb38ad1bf6"}}}}}, 0x0) lsetxattr$security_capability(&(0x7f0000000280)='./file1\x00', &(0x7f0000000080), &(0x7f0000000180)=@v3={0x3000000, [{0x7fffffdf, 0xabda}, {0x5, 0x2}], 0xee00}, 0x18, 0x1) 1m12.906018565s ago: executing program 34 (id=2485): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000200)=0x237a, 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4}, 0x0) r2 = syz_open_dev$vivid(&(0x7f0000000100), 0x1, 0x2) ioctl$VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000140)={0x2, 0xc, 0x2, 0x0, 0x40}) socket$nl_generic(0x10, 0x3, 0x10) r3 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x15, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = openat$cgroup(r4, &(0x7f0000000040)='syz0\x00', 0x200002, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={r5, r6, 0x15}, 0x14) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_INFO(r7, 0x0, 0x40, &(0x7f0000000000)={'raw\x00', 0x7003, [0x3, 0xe9, 0x81, 0x2, 0x3f]}, &(0x7f0000000140)=0x54) sendmsg$NFT_BATCH(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000060a0b04000000000000000002000000200004801c000180090001006d617371000000000c00028008074e81060c90ad8d9e72000140000000200900010073797a30000000000900020073797a3200000000140000001100010000000600296d4e94"], 0x74}}, 0x0) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000000)=0xb2, 0x4) sendmmsg$inet6(r0, &(0x7f0000000e00)=[{{&(0x7f0000000080)={0xa, 0x4e22, 0x4, @mcast2}, 0x1c, 0x0}}], 0x1, 0x0) recvmmsg(r0, &(0x7f00000031c0)=[{{&(0x7f0000000340)=@ieee802154={0x24, @short}, 0x0, &(0x7f0000003040)=[{&(0x7f0000000540)=""/199}, {&(0x7f00000007c0)=""/172}, {&(0x7f0000000640)=""/58}, {&(0x7f00000009c0)=""/22}, {&(0x7f0000000a00)=""/188}, {&(0x7f0000001f40)=""/4096}, {&(0x7f0000002f40)=""/83}, {&(0x7f0000002fc0)=""/108}], 0x0, &(0x7f00000030c0)=""/234}, 0x40}], 0x2, 0x40002042, 0x0) r8 = syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x4, &(0x7f0000000500)={[{@init_itable}]}, 0x1, 0x79f, &(0x7f0000000f80)="$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") r9 = socket$netlink(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) getpeername$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r4, 0xc018937b, &(0x7f0000000300)={{0x1, 0x1, 0x18, r8, {0xee00, 0xffffffffffffffff}}, './file1\x00'}) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000001e40)={{{@in6=@loopback, @in=@private=0xa010102, 0x4e21, 0x0, 0x4e24, 0x36, 0xa, 0x80, 0xa0, 0x6, r10, r11}, {0x8, 0x7, 0x0, 0x7, 0x4, 0xf, 0x9, 0xfffffffffffffc01}, {0x2, 0x9, 0x1000, 0xd}, 0x5, 0x6e6bb2, 0x1, 0x0, 0x0, 0x2}, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x4d6, 0xff}, 0xa, @in=@local, 0x34ff, 0x0, 0x2, 0xd, 0x7ff, 0xfffffffd}}, 0xe8) writev(r9, &(0x7f0000000000)=[{&(0x7f0000000080)="390000001000090468fe0700000000000000ff3f02000000480100100000000019002b000a0004000500000000000072000000000000000000", 0x39}], 0x1) syz_emit_ethernet(0x46, &(0x7f0000000080)={@local, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010101, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x3, 0x0, 0x6, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @empty, @multicast2}, "1a3f02eb38ad1bf6"}}}}}, 0x0) lsetxattr$security_capability(&(0x7f0000000280)='./file1\x00', &(0x7f0000000080), &(0x7f0000000180)=@v3={0x3000000, [{0x7fffffdf, 0xabda}, {0x5, 0x2}], 0xee00}, 0x18, 0x1) 27.408833183s ago: executing program 2 (id=3214): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@getqdisc={0x24, 0x26, 0x200, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x3, 0x10}, {0x8, 0xf}, {0xf, 0xffe0}}}, 0x24}}, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c070054001280080001006873720048000280"], 0x90}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000001100000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a03000000000000000000050000000900010073797a30000000000900030073797a300000000008000c40000000032800048008"], 0xa4}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="3400000013000100000000000000000007000000", @ANYRES32=r1, @ANYBLOB="00000000000000001400"], 0x34}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 27.380298159s ago: executing program 2 (id=3215): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1d}}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000280), 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000003c0)=@gcm_128={{0x304}, "77b40400", "bb6710bc8150e4d09a00", "8c76287d", "3d8efa05fdffffff"}, 0x28) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28) recvmmsg(r0, &(0x7f0000000a00)=[{{0x0, 0x0, &(0x7f0000002980)=[{&(0x7f0000001580)=""/4096, 0x1000}], 0x1}, 0x5}], 0x1, 0x23, 0x0) writev(r0, &(0x7f0000001540)=[{&(0x7f0000000300)='.', 0x1}], 0x1) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f00000000c0)=0xffff1884, 0x4) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={'batadv_slave_1\x00', {0x2, 0x0, @loopback=0x7f000000}}) ioctl$sock_inet_SIOCSIFADDR(r1, 0x891c, &(0x7f0000000080)={'batadv_slave_1\x00', {0x2, 0x0, @private=0xfffffffc}}) unshare(0x20400) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) close(r2) socket$alg(0x26, 0x5, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000e00)=ANY=[@ANYBLOB="18000000000000000000000000000000711241000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) mount$9p_fd(0x0, &(0x7f0000000680)='./file0\x00', &(0x7f0000000480), 0x14c98, &(0x7f0000000380)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB="2c937c646e6f3d", @ANYRESHEX=r3, @ANYBLOB=',\x00']) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) r5 = dup(r4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x3}], 0x1c) sendmsg$inet6(r4, &(0x7f0000000800)={&(0x7f00000001c0)={0xa, 0x4e24, 0x8, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1d}}, 0x4}, 0x1c, &(0x7f0000000200)=[{&(0x7f0000000240)='\b', 0x1}], 0x1}, 0x4048043) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r6, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000340)={0x0, @in6={{0xa, 0x4e24, 0x4, @empty, 0x3}}, 0x800, 0x6, 0xfffc, 0x0, 0xb23be0fbe66397b6, 0x9, 0x1b}, 0x9c) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0xfc, 0x7fff0026}]}) close_range(r7, 0xffffffffffffffff, 0x0) unshare(0x40020080) 27.238833433s ago: executing program 2 (id=3217): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@getqdisc={0x24, 0x26, 0x200, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x3, 0x10}, {0x8, 0xf}, {0xf, 0xffe0}}}, 0x24}}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[], 0x90}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="3400000013000100000000000000000007000000", @ANYRES32=r1, @ANYBLOB="000000000000000014001a80100004"], 0x34}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 27.216547896s ago: executing program 2 (id=3219): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)=0x2) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSLCKTRMIOS(r1, 0x5457, &(0x7f0000000040)) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x12) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(&(0x7f0000000380)='./file0/file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x185093, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) getdents64(r2, &(0x7f0000000080)=""/48, 0x30) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x11050ca, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0xb) ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000180)={0x2, &(0x7f0000000080)=[{0x48, 0x0, 0x7, 0x2}, {0x6, 0xfd, 0xee}]}) r3 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x80082) mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r3, @ANYBLOB="0034dbf53106ba76afebea36"]) fsetxattr$smack_xattr_label(r0, &(0x7f00000000c0)='security.SMACK64MMAP\x00', &(0x7f0000000400)={'syz'}, 0x4, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x4) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b) write(r4, &(0x7f0000000000)='7', 0x1) ioctl$LOOP_CONFIGURE(r4, 0x4c0a, &(0x7f00000002c0)={r4, 0x7, {0x0, 0x0, 0x0, 0x6, 0x4, 0x0, 0x4, 0x12, 0x8, "2597a5f4d29d9332a95090f8e509fd4832a980bbe3c2b28072bcbbd60214c54e0cd01d6b2098cc7fd7538c2d23148f5de41cefda84bcc1bf83611d5ffa9a4f3b", "86b6cabd8e69647b7a077ecef04ee77656aa45a15e3844eba92875dc5bfa0e7c570ed2b65fd1bfff2d2becd97c0a6c0d720feabf84840fd559f4742a02c2a2d2", "28eaf88eeadccdbe8c3c974e4a1801e3df000290a3209692b71d83d6210bd3f2", [0x6, 0x7fff]}}) add_key(&(0x7f0000000200)='id_resolver\x00', &(0x7f0000000180), 0x0, 0x0, 0xfffffffffffffffd) write$ppp(r0, &(0x7f00000001c0)="43f1", 0x2) 27.033708755s ago: executing program 2 (id=3223): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="00000800000003000000000000004959002c0065000004019078ac1414bbffffffff940ff00c8e76d0966f9a2b2407c08a00120090780000ffff394e682a1ddd2f9d679aa1e377c4816c865a1e717136c3e66c0a7356dd0dc454726fd2f8a92419b065b01e55a994949f7da1e7947b2664c1"], 0xff04) 26.574639983s ago: executing program 2 (id=3234): syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x2004400, 0x0, 0x0, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./bus\x00', 0x30040a9, 0x0, 0xf, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000240)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_on}, {@lowerdir={'lowerdir', 0x3d, '.'}}]}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0, 0x1) open_by_handle_at(r0, &(0x7f00000003c0)=@ocfs2={0xc, 0xf8, {0xfc, 0x80, 0x4}}, 0x200000) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) setfsuid(0xffffffffffffffff) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000480)={'veth1\x00', 0x400}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) write$cgroup_int(r1, &(0x7f00000000c0)=0x7, 0x12) 26.49334356s ago: executing program 35 (id=3234): syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x2004400, 0x0, 0x0, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./bus\x00', 0x30040a9, 0x0, 0xf, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000240)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_on}, {@lowerdir={'lowerdir', 0x3d, '.'}}]}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0, 0x1) open_by_handle_at(r0, &(0x7f00000003c0)=@ocfs2={0xc, 0xf8, {0xfc, 0x80, 0x4}}, 0x200000) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) setfsuid(0xffffffffffffffff) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000480)={'veth1\x00', 0x400}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) write$cgroup_int(r1, &(0x7f00000000c0)=0x7, 0x12) 8.472277202s ago: executing program 5 (id=3668): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@getqdisc={0x24, 0x26, 0x200, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x3, 0x10}, {0x8, 0xf}, {0xf, 0xffe0}}}, 0x24}}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002"], 0x90}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000001100000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a03000000000000000000050000000900010073797a30000000000900030073797a300000000008000c40000000032800048008"], 0xa4}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="3400000013000100000000000000000007000000", @ANYRES32, @ANYBLOB="000000000000000014001a80100004800c"], 0x34}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) 8.470686314s ago: executing program 5 (id=3669): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_buf(r0, 0x6, 0xd, &(0x7f00000002c0), 0x0) setsockopt$inet6_int(r0, 0x29, 0x3c, 0x0, 0x0) unshare(0x20400) r1 = socket$vsock_stream(0x28, 0x1, 0x0) r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$XFS_IOC_START_COMMIT(r2, 0x80585882, &(0x7f00000001c0)) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) r4 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000400)={'vcan0\x00'}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x1c}}, 0x0) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="5c00000002060108000000000000000000000101050005000a000000050001000700000005000400000000000900020073797a310000000016000300686173683a6e65742c706f72742c6e65740000000c00078008000640"], 0x5c}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000300000000aa1800148014000240fc00000000000000"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x20000040) r5 = socket$netlink(0x10, 0x3, 0xc) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(r1, 0x28, 0x6, &(0x7f0000000180), 0x10) close(0x3) 8.422715469s ago: executing program 5 (id=3670): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@getqdisc={0x24, 0x26, 0x200, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x3, 0x10}, {0x8, 0xf}, {0xf, 0xffe0}}}, 0x24}}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c070054001280080001006873"], 0x90}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="340000001300010000000000000000", @ANYRES32=r1, @ANYBLOB="000000000000000014001a8010000480"], 0x34}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 8.405421524s ago: executing program 5 (id=3671): r0 = syz_mount_image$ext4(&(0x7f0000000340)='ext4\x00', &(0x7f0000000980)='./file0\x00', 0x8000, &(0x7f00000006c0)={[{@resuid}, {@nobh}]}, 0x1, 0x519, &(0x7f00000009c0)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x42) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r1, 0x8004587d, &(0x7f0000000080)={@desc={0x1, 0x0, @desc2}}) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) wait4(r2, 0x0, 0x2, 0x0) ptrace(0x420f, r2) fsetxattr$security_ima(r0, &(0x7f00000000c0), &(0x7f0000000140)=@sha1={0x1, "88704719234d497808ed9fc3f89d3dee7ba0fa89"}, 0x15, 0x0) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000440)=@known='trusted.overlay.upper\x00', 0x0, 0x4000) ppoll(0x0, 0x0, &(0x7f00000000c0)={0x0, 0x3938700}, &(0x7f0000000100)={[0xd]}, 0x8) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r4 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000100)=[{0x80000006}]}, 0x10) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000011c0)=ANY=[@ANYBLOB="140000001a00010a28bd3e070000f2ff80"], 0x14}, 0x1, 0x0, 0x0, 0x4080}, 0x0) r6 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @random="d976f308c05c"}) socket$nl_netfilter(0x10, 0x3, 0xc) write$tun(r3, &(0x7f0000000480)=ANY=[@ANYBLOB="08000800070303000200140007004518002c040000000000000000000000ffffffff6c8100659b435f7862776d0e85a3ef4c6c73c0f056127063b6fcf65b4cc48d7c042b0107011ef1dfff6371564dc752cd7475f779b9db72ccc9cdd572f171c31c38f8160e5f65295d01f48d598d02e0282d9ccc09852e6e223e", @ANYRES16=r3, @ANYRES32=0x41424344, @ANYRES16=r5], 0x3a) 8.156157479s ago: executing program 5 (id=3672): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@getqdisc={0x24, 0x26, 0x200, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x3, 0x10}, {0x8, 0xf}, {0xf, 0xffe0}}}, 0x24}}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000", @ANYRES32=0x0, @ANYBLOB="996e06004d4c070054001280080001006873720048000280"], 0x90}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000001100000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a03000000000000000000050000000900010073797a30000000000900030073797a300000000008000c40000000032800048008"], 0xa4}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="3400000013000100000000000000000007000000", @ANYRES32=r1, @ANYBLOB="000000000000000014001a80100004800c"], 0x34}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 7.968208639s ago: executing program 5 (id=3676): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x20a201, 0x0) close(r6) socket$tipc(0x1e, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000a80)=@newtfilter={0xb4, 0x2c, 0xd27, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0x4}, {}, {0x8, 0xfff2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x80, 0x2, [@TCA_MATCHALL_ACT={0x7c, 0x2, [@m_tunnel_key={0x78, 0x1, 0x0, 0x0, {{0xf}, {0x48, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @empty}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @remote}}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x3, 0x8, 0x4, 0x7fff, 0x7}, 0x1}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}]}]}}]}, 0xb4}, 0x1, 0x0, 0x0, 0x8080}, 0x20000000) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r5, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r7, 0x36}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000000)="27030200000214000e00002fb96dffff1144ee163cddcb000000800000827600000000000000", 0x26}, {&(0x7f0000000640)="442ea407", 0x4}], 0x2}, 0x20000085) 7.959670602s ago: executing program 36 (id=3676): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x20a201, 0x0) close(r6) socket$tipc(0x1e, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000a80)=@newtfilter={0xb4, 0x2c, 0xd27, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0x4}, {}, {0x8, 0xfff2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x80, 0x2, [@TCA_MATCHALL_ACT={0x7c, 0x2, [@m_tunnel_key={0x78, 0x1, 0x0, 0x0, {{0xf}, {0x48, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @empty}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @remote}}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x3, 0x8, 0x4, 0x7fff, 0x7}, 0x1}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}]}]}}]}, 0xb4}, 0x1, 0x0, 0x0, 0x8080}, 0x20000000) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r5, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r7, 0x36}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000000)="27030200000214000e00002fb96dffff1144ee163cddcb000000800000827600000000000000", 0x26}, {&(0x7f0000000640)="442ea407", 0x4}], 0x2}, 0x20000085) 2.548715291s ago: executing program 7 (id=3747): r0 = openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000040)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000080), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) write$nci(r0, &(0x7f0000000300)=@NCI_OP_CORE_INIT_RSP={0x0, 0x0, 0x2, 0x1, 0x11}, 0x14) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) read$nci(r0, &(0x7f0000000200), 0x100) write$nci(r0, &(0x7f0000000380)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x2, {0x1, 0x7, 0x0, 0x3}}, 0x7) 2.474548719s ago: executing program 7 (id=3750): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f00000004c0)={r2, 0x3, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x29}}, 0x10) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000000)={r2, 0x1, 0x6, @random="790c7edd3d8d"}, 0x10) r3 = getpid() r4 = syz_pidfd_open(r3, 0x0) pidfd_send_signal(r4, 0x0, &(0x7f0000000000)={0x0, 0x9, 0x3}, 0x10000000000001) setsockopt$packet_drop_memb(r1, 0x107, 0x2, &(0x7f0000000300)={r2, 0x1, 0x6, @broadcast}, 0x10) sendmsg$inet(r0, &(0x7f00000004c0)={&(0x7f0000000000)={0x2, 0x4e22, @rand_addr=0x64010102}, 0x10, &(0x7f0000000400)=[{&(0x7f0000000200)="da502f8cb6c5284d0d82fd7b7b7edacb5d913bc571815716e8fd26d64b1f98c65c4788bf46dd78a096a77606fcd66e1a915c93589d79336ba7af8333b253f3bf10e501e118796b3532245e0fb4df5e7eadeedd25c37b0b19a2e0aeeff9010af6f36aa625082cc4d1bb1e39b5019380dc5ab154f8f38899edd424f796e360e9e7519174fc8a18e8406a9f49a1db96f544715ea596db6feccc3f7845b91bd48e61c3aeae97", 0xa4}, {&(0x7f00000002c0)="554bb38a7c239f0cc0137fdb73e12e597548f24ef87c17f8b96f203ee79a0ea4a1692ad611751e8b0d84ec7708c3c2873d1e1cd9db271117ce8bc2839dc729eb95d6b1dc095be83ed2a645244e58eb3380eeacd21bc128cac7709c5638c2536d371b13abfc535ed8bad2a3759db6ea06", 0x70}, {&(0x7f0000000340)="f9ed66dd1499a9b3e6c34d3162aecda2cb07edfc8dbc0644a26dc697e9bd33b17fcacffa6a5323360ce26490d974351385ea926859cbc57acb1f59a17e8817479c03195d896f9ae30cffa66332ad151d547c059e401303290fff77301b0ca4611ab1dc23494e39552c283e5dbb2277bf9ea9f34daaadcb00da9bb82b7b4fc39e784be9648106f08259c4222e61c56daf8516cba9f5d8f4305168f59fa15a06b0933896aaf3bdbfffcbeb21308fd939d7e2bae347", 0xb4}], 0x3, &(0x7f0000000440)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x2}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xf}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @multicast1, @rand_addr=0x64010100}}}], 0x50}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000000000000000000000300008500000018000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000cd00000095"], &(0x7f0000000180)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000001000)=ANY=[@ANYBLOB="0a00000004000000080000000a00000000000000", @ANYRES32, @ANYBLOB="fdffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00(\x00'/26], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x0, 0x0, 0x0, 0x8, 0xdf, 0x0, 0x0, 0x4f, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8001}, 0x94) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r5, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0}, 0x20) 2.107868803s ago: executing program 7 (id=3752): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newnexthop={0x28, 0x68, 0x1, 0x2, 0x7ffffffc, {0x0, 0x0, 0x4}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x5}]}, @NHA_RES_GROUP={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) syz_open_dev$video(&(0x7f0000000080), 0x7, 0x0) socket$tipc(0x1e, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) getpid() sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x50}, 0x80) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x50}}}, &(0x7f0000000300)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, 0x0, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x800, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x801f70, 0x2, 0x40040001, 0x334}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) 1.94270771s ago: executing program 1 (id=3754): bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket(0x1e, 0x1, 0x0) sendto$packet(r1, 0x0, 0xffffffffffffff5a, 0x842, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @remote}, 0x6}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) syz_emit_ethernet(0x4e, &(0x7f0000000000)={@local, @empty, @val={@val={0x88a8, 0x0, 0x0, 0x3}, {0x8100, 0x0, 0x0, 0x4}}, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x21, 0x38, 0x64, 0x0, 0x4, 0x6, 0x0, @remote, @remote}, {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x9, 0x10, 0x40, 0x0, 0xe7, {[@sack={0x5, 0xa, [0x2020000, 0x1000]}, @mss={0x2, 0x4, 0xe51}]}}}}}}}, 0x0) 1.86444664s ago: executing program 1 (id=3755): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40000c0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x4c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x20, 0x3, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\v'}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x7}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000400)=ANY=[@ANYBLOB="50000000100003050000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x50}, 0x1, 0x0, 0x0, 0x20000080}, 0x20000090) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 1.733926178s ago: executing program 1 (id=3756): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_buf(r0, 0x6, 0xd, &(0x7f00000002c0), 0x0) setsockopt$inet6_int(r0, 0x29, 0x3c, 0x0, 0x0) unshare(0x20400) r1 = socket$vsock_stream(0x28, 0x1, 0x0) r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$XFS_IOC_START_COMMIT(r2, 0x80585882, &(0x7f00000001c0)) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) r4 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000400)={'vcan0\x00'}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x1c}}, 0x0) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="5c00000002060108000000000000000000000101050005000a000000050001000700000005000400000000000900020073797a310000000016000300686173683a6e65742c706f72742c6e65740000000c00078008000640"], 0x5c}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000300000000aa1800148014000240fc000000000000000000000000000000060004404e1f00000500070084000000060005"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x20000040) r5 = socket$netlink(0x10, 0x3, 0xc) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(r1, 0x28, 0x6, &(0x7f0000000180), 0x10) close(0x3) 1.638723496s ago: executing program 1 (id=3758): socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) syz_open_dev$video(&(0x7f0000000080), 0x7, 0x0) socket$tipc(0x1e, 0x2, 0x0) socket$tipc(0x1e, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x50}, 0x80) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x50}}}, &(0x7f0000000300)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, 0x0, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x800, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x801f70, 0x2, 0x40040001, 0x334}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) 1.545654586s ago: executing program 9 (id=3760): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000080), r1) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x1c, r2, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}}, 0x0) write$nci(r0, &(0x7f0000000300)=@NCI_OP_CORE_INIT_RSP={0x0, 0x0, 0x2, 0x1, 0x11}, 0x14) sendmsg$NFC_CMD_START_POLL(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)={0x24, r2, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) read$nci(r0, &(0x7f0000000200), 0x100) write$nci(r0, &(0x7f0000000380)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x2, {0x1, 0x7, 0x0, 0x3}}, 0x7) 1.330808816s ago: executing program 6 (id=3764): sendto$inet(0xffffffffffffffff, &(0x7f00000003c0)="62334951851e2486cfaf59a42866758df3d0fe3c765b21c7e9d6e3b272df5935a483c8f08b98b93f66571f1bfb4198703f", 0x31, 0x80, &(0x7f0000000400)={0x2, 0x4e20, @rand_addr=0x64010102}, 0x10) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) r3 = dup(0xffffffffffffffff) ioctl$BLKFLSBUF(r3, 0x1261, 0x0) r4 = dup(r2) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) write$nci(r4, &(0x7f0000000000)=@NCI_OP_NFCEE_MODE_SET_RSP={0x2, 0x0, 0x2, 0x1, 0x59, 0x1}, 0xffffffe9) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r5) sendmsg$NFC_CMD_DEV_UP(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r6, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) write$nci(r0, &(0x7f0000000580)=@NCI_OP_RF_DISCOVER_RSP={0x1, 0x1, 0x2, 0x3, 0x1, 0x1}, 0x4) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r8, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) setsockopt$packet_add_memb(r8, 0x107, 0x1, &(0x7f0000000000)={r9, 0x1, 0x4, @remote}, 0x10) socket$netlink(0x10, 0x3, 0xe) setsockopt$packet_add_memb(r8, 0x107, 0x1, &(0x7f0000000200)={r9, 0x11, 0x6, @random="bdf19b71a0f9"}, 0x10) setsockopt$packet_drop_memb(r8, 0x107, 0x2, &(0x7f0000000100)={r9, 0x1, 0x6, @random="b3e1af68ca36"}, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r7, &(0x7f0000000d00)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000cc0)={&(0x7f00000005c0)={0x6dc, r10, 0x4, 0x70bd25, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_IE={0x28, 0x2a, [@prep={0x83, 0x1f, {{}, 0x2, 0x40, @broadcast, 0x5, @void, 0x1, 0xfffffffe, @device_b, 0x9}}, @erp={0x2a, 0x1, {0x0, 0x1}}]}, @fils_params=[@NL80211_ATTR_FILS_ERP_RRK={0x73, 0xfc, "26058f0f300bc9dd0e3ffa15c30860c11f60dd02966cf7244d6c0c8ce305dd92364f380e7dcc066afec7b723e5ef7db74cde46bd77489e20d6a7b4e16bf4a35f75c1fd105dec1949511519d13e64e7652adce9818b29ed8bec03b879bbbc45f032c7614c536ee07781c6817ef3a6c3"}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x6}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0xfff9}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x7ff}, @NL80211_ATTR_FILS_ERP_USERNAME={0xa, 0xf9, "1da865558232"}, @NL80211_ATTR_FILS_ERP_RRK={0xd9, 0xfc, "51b1e859d7b12d8837461ff1f1d9c089bc4a2ecae82bca516b1946dc4f66e5c18d59a9b363ebbe837b3ca7e671f080153c96be25a5511e2025f62b7f637299e26b0f81971fc62aedae75f5379072ea525e2a72d8908b65fcb1ed876e896596dda274a3602bd4145834d66f9be887ddb75ccd9ce40792778fa44be6590c7a0747c2e15eab2a3cd698e5013b7e5b174f3bcf834b09a0bb10f70355ab495a877b380e3b3510766cd1657635abc05c90973bedf438c51f18021414c4a786e41eddc86535cc7a7c6fba3f5fed9a4a655d2077cdc23e0c69"}, @NL80211_ATTR_FILS_ERP_REALM={0xcd, 0xfa, "a07d2744dc37593b9f8958e915c0fad8f3828056ca0f041e3c0087ad415aeff9ec7771571029651a03d848b9252618519120aa6ab40b9d2cb0aee7b2fce2a6f787901e250b9d520ddb31af00f2418db7dfb11dfd39f52082d62ce0ec1fbc578eb5540250db8b35acb6b3b4af9d242978c23265134e1dc29bb598577f2c8ae15be97fccf74dddc505c9b5ffd0b71874609036ae39628bb15659171549b3260ce954c9de4b059ccd64d86273dbd9f2f6688c48f33ae24d2c159a5da8f6df2eadff00b68e1fa8eae7441e"}, @NL80211_ATTR_FILS_ERP_USERNAME={0xa, 0xf9, "d98c352b7dbb"}, @NL80211_ATTR_FILS_ERP_RRK={0x79, 0xfc, "4ea2084de78c537962925c1b3e552f480edef1d2e681f9e1e62827552c587f052637843b0657f141265460f88e4578dda81d4ce89058a00c3359eea51ae546cf32b4e1d07fa764ec4b6d6e79df3910e5995aa3410f0649afbbf88e8ff6ed5ad3e213b10455499a6627fafbcff312fb3b20dd5a28bd"}], @NL80211_ATTR_IE={0x207, 0x2a, [@mic={0x8c, 0x18, {0xcd1, "4a394c5fd495", @long="db0a2140c898e0ee4d2ba27fc95e1909"}}, @ht={0x2d, 0x1a, {0x4000, 0x2, 0x2, 0x0, {0xc14, 0x1, 0x0, 0xa}, 0x1, 0x8000, 0x6}}, @fast_bss_trans={0x37, 0x119, {0x2, 0x8, "35608896a55423e49073a0e07ed25cbf", "52ca4d1f090f3e2312cdf25f07624ea413a92512a3366f6a0bd6302e4123d0cc", "c44adf618941a3c786d27f692e17ea287302961da62d10a99f69994a566fe1fd", [{0x4, 0x28, "1c87b6ac466760a12d103e9fda40a63499f73c25f95d022a252de41115f1c5090c66a79933d0aefb"}, {0x3, 0xa, "53ed121c0aa6faa5e44d"}, {0x4, 0x17, "3ab6513e3de1e11449517d1196aac6e0e6cb040eb83aef"}, {0x1, 0x16, "226c6ae9e53d45012bb6ca5a19c2c25d6931636be84b"}, {0x3, 0x1d, "c9893e02cdf45564e73e0a909a31f4551d7e83475e95247fbd4811a7be"}, {0x4, 0x22, "8c845c8ce0b42187af0d645c6aeebe43d72575d57ac96a3fadb03fbd78859e7f49b8"}, {0x4, 0x18, "a7a49407a496aba5b0e4c25192d29b6b8ecfdd203027600e"}, {0x2, 0x1, "f7"}]}}, @random_vendor={0xdd, 0x8e, "62b6077c83a32278425194c3a6088ed7fd054f4eb4482e8089a131375be489c8404b03ea30e9ab1f0ecb3a3c46f2618b6cced1b70bb4525bf4916594e3c74db130953068f2375245f1814538ca25367e4261a31c87d1e6a1ce2c82b7ca5c4ba690603b8a0d131501e9abeaa6423c93b1e4fa52e04f77b6054f0c3740d11fc9c5953a9f1d86273a727eb31aa4b4c0"}, @rann={0x7e, 0x15, {{0x1, 0xd}, 0x5, 0x1, @device_b, 0x7, 0x86, 0x2}}, @mesh_chsw={0x76, 0x6, {0x86, 0x9, 0x9, 0x9}}, @sec_chan_ofs={0x3e, 0x1, 0x1}]}, @fils_params=[@NL80211_ATTR_FILS_ERP_RRK={0x94, 0xfc, "5da75b2c4041d2e303fdf50f5d4708a96babb608420b02989f30252aab75cf5b8e5174a8415d5d931281b8be05636a7db8e85a06bb2174b7c46826402d04278592e2458b1044f3ca085733eba72b61f2eab7988b60d160787eb456862ea6c8350f4b3461b293c00fc65b90a357f744b9a2d2f989043b05fd7c11a3211193fafe354f261e0cf1d437e6aded2a88c804be"}, @NL80211_ATTR_FILS_ERP_REALM={0x70, 0xfa, "28eb635488cc89bd3db43341f913ff9dafaf4ea33a4b17ca00dcb92a211683f671490b72b6d8b14446172b0b885ec8d825f5ec335c8951663d1dc1ccaa615092314a130ceb100dd8038516800b19649596c8942287fff6541100dd71406eb1785aaf4d5904e52ff690fcbe68"}, @NL80211_ATTR_FILS_ERP_REALM={0xb6, 0xfa, "94620e67b97f2407932b9cb1912880dd749e2ee9647bc58bf1c941da87ff53133f5d0944e2d5beb004bf63a49ca9e9e2ef9f616cdf8c1378e1155248c4fff89a2c99e2efaa6cb2d8c54f5acb298f8dabea7fef8b255d3bc85ffe7208330566671d145ffc3713691ac8e2e7a0f08170e13fedbb9ee9f01fb973c71048a1fc29c3136a745a298e169d20ad9278b2cf97dcc6beabf27ad77d4cec346bc673e0c80d752c94d3cf74ed27605350c54d3ce4a110d9"}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x50}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0xe7a}]]}, 0x6dc}, 0x1, 0x0, 0x0, 0x1}, 0x4040015) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000300)='./file0\x00', 0x80a, &(0x7f0000000740), 0x1, 0x7bf, &(0x7f0000000d00)="$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") r11 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x0) lseek(r11, 0x7, 0x3) sendmsg$NFC_CMD_DEV_DOWN(r5, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x54, r6, 0x500, 0x70bd28, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x54}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) read$FUSE(0xffffffffffffffff, &(0x7f0000000d40)={0x2020, 0x0, 0x0, 0x0}, 0x2020) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000002d80)={{0x1, 0x1, 0x18, r8, {0xee01, 0xffffffffffffffff}}, './file0\x00'}) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000002dc0)={0x0, 0x0, 0x0}, &(0x7f0000002e00)=0xc) fsetxattr$system_posix_acl(r7, &(0x7f0000000340)='system.posix_acl_access\x00', &(0x7f0000002e40)={{}, {0x1, 0x1}, [{0x2, 0x2, r12}], {0x4, 0x1}, [{0x8, 0x0, r13}, {0x8, 0x1, r14}, {0x8, 0x4, 0xee00}], {0x10, 0x2}}, 0x44, 0x1) 1.231907103s ago: executing program 8 (id=3767): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x1c, 0x8, 0x6, 0x801, 0x0, 0x0, {0xa, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5a}, 0x48) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="18020000f6ffffff00000000fcffffff8500000030000000180100002020642500000000002020207b1af8ff00000000bfa110000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000380)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYBLOB='/\x00'/12, @ANYRES32, @ANYBLOB="02aa317c498ed22c3225b92eb5a0d647d22198328a0f35ea3d86593b35016f8a25d0a2224b1ddddfb0aba4fd5a7ea1e6c6ec0fae399bcf88f427da1387c30febe2a2d5c4d266d6bd46679f78cc87c08198e6fa7790f7971604eea0b97d5c0546fbf01def7a527de852248966eb33c213a654fb6ca95148e7df69c631fa7abbfa4a7e02039af500000100a9da52742b517508", @ANYRES64=0x0], 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000010c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0x24, 0x4a, &(0x7f0000000680)="b9ff03076804268c989e14f088a847e089021416e0885a0400000000000081009fa79900", 0x0, 0x400, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}, 0x3d) landlock_restrict_self(0xffffffffffffffff, 0x8) r4 = openat$cgroup_subtree(r2, &(0x7f0000000140), 0x2, 0x0) fsync(r4) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff8000}]}) close_range(r5, 0xffffffffffffffff, 0x0) 1.192246604s ago: executing program 8 (id=3768): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_buf(r0, 0x6, 0xd, &(0x7f00000002c0), 0x0) setsockopt$inet6_int(r0, 0x29, 0x3c, 0x0, 0x0) unshare(0x20400) r1 = socket$vsock_stream(0x28, 0x1, 0x0) r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$XFS_IOC_START_COMMIT(r2, 0x80585882, &(0x7f00000001c0)) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) r4 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000400)={'vcan0\x00'}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x1c}}, 0x0) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="5c00000002060108000000000000000000000101050005000a000000050001000700000005000400000000000900020073797a310000000016000300686173683a6e65742c706f72742c6e65740000000c00078008000640"], 0x5c}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000300000000aa1800148014000240fc000000000000000000000000000000060004404e1f00000500070084000000060005"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x20000040) r5 = socket$netlink(0x10, 0x3, 0xc) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(r1, 0x28, 0x6, &(0x7f0000000180), 0x10) close(0x3) 1.141438666s ago: executing program 7 (id=3769): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r4}, &(0x7f0000000040), &(0x7f0000000180)=r1}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000200)=r5, 0x4) sendmsg$inet(r3, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r9}, &(0x7f0000000280), &(0x7f0000000240)=r6}, 0x20) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r9], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r7, 0x1, 0x32, &(0x7f00000000c0)=r10, 0x4) sendmsg$inet(r8, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x4000) 1.121580128s ago: executing program 8 (id=3770): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@getqdisc={0x24, 0x26, 0x200, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x3, 0x10}, {0x8, 0xf}, {0xf, 0xffe0}}}, 0x24}}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[], 0x90}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[], 0xa4}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="3400000013000100000000000000000007000000", @ANYRES32=r1, @ANYBLOB="00000000000000001400"], 0x34}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.107190966s ago: executing program 7 (id=3771): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xfff3}, {0xfff1, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@newtfilter={0x34, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x24004800}, 0x0) write$tun(r0, &(0x7f0000000740)=ANY=[@ANYBLOB="0a003000bbbbbbbbbbbbaaaaaaaaaaaa86dd6a008993000829"], 0x42) 1.068620119s ago: executing program 8 (id=3772): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x1800000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x0, 0x0) r1 = dup(r0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x21081e, &(0x7f00000000c0)={[{@grpquota}, {@nogrpid}, {@quota}, {@debug}]}, 0x1, 0x500, &(0x7f0000001140)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42042, 0x1cb) fallocate(r2, 0x10, 0x800, 0x8000) r3 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x48842, 0x8e) fallocate(r3, 0x0, 0x6, 0x10001) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/wireless\x00') mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="747261554e15eebd6b63c0e9a30717", @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r4, @ANYBLOB=',\x00']) 908.42448ms ago: executing program 6 (id=3773): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@getqdisc={0x24, 0x26, 0x200, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x3, 0x10}, {0x8, 0xf}, {0xf, 0xffe0}}}, 0x24}}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="900000001000030500"/18, @ANYRES32=0x0, @ANYBLOB="996e06004d4c070054001280080001006873720048000280"], 0x90}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="3400000013000100000000000000000007000000", @ANYRES32=r1, @ANYBLOB="000000000000000014001a80100004800c"], 0x34}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 907.914621ms ago: executing program 7 (id=3774): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback, 0x4}, 0x1c) listen(r0, 0x5) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f0000847fff)='X', 0x1, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback, 0x4000}, 0x1c) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f00000001c0)={0x0, 0x1ff, 0xf806, 0x5, 0x0, 0x1}, 0x14) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r4, &(0x7f00000003c0)='\x00', 0x1, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x20, @loopback, 0x1}, 0x1c) 891.478347ms ago: executing program 8 (id=3775): r0 = syz_clone(0x2a102211, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) setpgid(r0, r0) setpgid(0x0, r0) wait4(r0, 0x0, 0x2, 0x0) ptrace(0x4208, r0) r1 = socket$key(0xf, 0x3, 0x2) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="4c000000100001060000000000000000000000000000000000000000000000010b00033264756d6d7930000008001f0004000000180012000a00010064756d6d79"], 0x4c}], 0x1, 0x0, 0x0, 0x4040001}, 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r5 = getpid() r6 = syz_pidfd_open(r5, 0x0) setns(r6, 0x24020000) r7 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r8 = syz_pidfd_open(r7, 0x0) setns(r8, 0x24020000) capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffffb, 0x3}) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='\x00', 0x175) sendmsg$key(0xffffffffffffffff, 0x0, 0x40) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) sendmmsg(r1, 0x0, 0x0, 0x0) sendmsg$key(r1, &(0x7f0000000000)={0x9, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB="0209000902"], 0x10}}, 0x0) 880.590766ms ago: executing program 6 (id=3776): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@getqdisc={0x24, 0x26, 0x200, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x3, 0x10}, {0x8, 0xf}, {0xf, 0xffe0}}}, 0x24}}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c070054001280080001006873"], 0x90}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="3400000013000100000000000000000007000000", @ANYRES32=r1, @ANYBLOB="000000000000000014001a8010000480"], 0x34}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, 0x0, 0x0, 0x0) 802.750054ms ago: executing program 6 (id=3777): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x3, 0x5, &(0x7f0000000200)=@framed={{0x18, 0x2, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1b}, [@call={0x85, 0x0, 0x0, 0x2f}, @call={0x85, 0x0, 0x0, 0x2a}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x0, 0xe, 0x0, &(0x7f0000000140)="5bd6bc1996ff006859a121fc0e0d", 0x0, 0x0, 0x700, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 802.295913ms ago: executing program 6 (id=3778): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40000c0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x4c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x20, 0x3, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\v'}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x7}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000400)=ANY=[@ANYBLOB="50000000100003050000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x50}, 0x1, 0x0, 0x0, 0x20000080}, 0x20000090) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 716.525553ms ago: executing program 6 (id=3779): openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x400000000a882, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28011, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x7) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') read$FUSE(r0, &(0x7f0000000040)={0x2020}, 0x2020) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001880), 0xffffffffffffffff) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) getpid() (async) add_key(&(0x7f0000000080)='.request_key_auth\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffb) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) (async) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) pipe2$9p(0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000002280)={'vxcan0\x00', 0x0}) sendmsg$GTP_CMD_DELPDP(r0, &(0x7f0000002380)={&(0x7f0000002200)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000002340)={&(0x7f00000022c0)={0x50, 0x0, 0x300, 0x70bd28, 0x25dfdbfc, {}, [@GTPA_LINK={0x8, 0x1, r6}, @GTPA_MS_ADDRESS={0x8, 0x5, @multicast2}, @GTPA_PEER_ADDR6={0x14, 0xb, @rand_addr=' \x01\x00'}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x0, 0x0}}, @GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_PEER_ADDRESS={0x8, 0x4, @empty}]}, 0x50}, 0x1, 0x0, 0x0, 0x4008090}, 0x4048800) sendmsg$NL80211_CMD_START_AP(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000002080)=ANY=[@ANYBLOB="30010000223ec328ebb0abfb906a9749d38f12173739831f", @ANYRES16=r3, @ANYBLOB="a18329fd7000000000000500000008000300", @ANYRES32=0x0, @ANYBLOB="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"], 0x130}, 0x1, 0x0, 0x0, 0x2004c815}, 0x24040000) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x100, 0x0) ioctl$TIOCSPTLCK(r7, 0x40045431, &(0x7f0000000000)) r8 = ioctl$TIOCGPTPEER(r7, 0x5441, 0x3) ioctl$TIOCGWINSZ(r8, 0x5413, &(0x7f0000000100)) (async) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x60, 0x10, 0x401, 0x0, 0x3, {0x0, 0x0, 0x0, 0x0, 0xe59bca127d81b0ea, 0xc574450d1af3b5bd}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0x14, 0x5, 0x0, 0x1, [@IFLA_BRPORT_MCAST_FLOOD={0x5}, @IFLA_BRPORT_MCAST_TO_UCAST={0x5, 0x1c, 0x1}]}}}, @IFLA_IFNAME={0x14, 0x3, 'bridge_slave_0\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x24044854}, 0x4040) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) ioctl$NS_GET_NSTYPE(r0, 0xb703, 0x0) (async) write$tcp_congestion(0xffffffffffffffff, &(0x7f0000000080)='hybla\x00', 0x6) 640.288035ms ago: executing program 1 (id=3780): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_buf(r0, 0x6, 0xd, &(0x7f00000002c0), 0x0) setsockopt$inet6_int(r0, 0x29, 0x3c, 0x0, 0x0) unshare(0x20400) r1 = socket$vsock_stream(0x28, 0x1, 0x0) r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$XFS_IOC_START_COMMIT(r2, 0x80585882, &(0x7f00000001c0)) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) r4 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000400)={'vcan0\x00'}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x1c}}, 0x0) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="5c00000002060108000000000000000000000101050005000a000000050001000700000005000400000000000900020073797a310000000016000300686173683a6e65742c706f72742c6e65740000000c00078008000640"], 0x5c}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000300000000aa1800148014000240fc000000000000000000000000000000060004404e1f00000500070084000000060005"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x20000040) r5 = socket$netlink(0x10, 0x3, 0xc) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(r1, 0x28, 0x6, &(0x7f0000000180), 0x10) close(0x3) 566.72282ms ago: executing program 9 (id=3781): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r4}, &(0x7f0000000040), &(0x7f0000000180)=r1}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000200)=r5, 0x4) sendmsg$inet(r3, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r9}, &(0x7f0000000280), &(0x7f0000000240)=r6}, 0x20) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r9], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r7, 0x1, 0x32, &(0x7f00000000c0)=r10, 0x4) sendmsg$inet(r8, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x4000) 469.214991ms ago: executing program 1 (id=3782): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newnexthop={0x28, 0x68, 0x1, 0x2, 0x7ffffffc, {0x0, 0x0, 0x4}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x5}]}, @NHA_RES_GROUP={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) socket$tipc(0x1e, 0x2, 0x0) socket$tipc(0x1e, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) getpid() sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x50}, 0x80) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x50}}}, &(0x7f0000000300)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, 0x0, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x800, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x801f70, 0x2, 0x40040001, 0x334}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) 452.528614ms ago: executing program 9 (id=3783): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@getqdisc={0x24, 0x26, 0x200, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x3, 0x10}, {0x8, 0xf}, {0xf, 0xffe0}}}, 0x24}}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[], 0x90}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[], 0xa4}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="3400000013000100000000000000000007000000", @ANYRES32=r1, @ANYBLOB="00000000000000001400"], 0x34}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 327.524933ms ago: executing program 9 (id=3784): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1d}}, 0x1}, 0x1c) r1 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000500)=""/45, 0x2d) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000003c0)=@gcm_128={{0x303}, "77b40400", "bb6710bc8150e4a1a117d7b27caf00", "8c76287d", "3d8efa05fdffffff"}, 0x28) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000180), &(0x7f00000001c0)=0x4) recvmmsg(r0, &(0x7f0000000a00)=[{{0x0, 0x0, &(0x7f0000002980)=[{&(0x7f0000001580)=""/4096, 0x1000}], 0x1}, 0x5}], 0x1, 0x23, 0x0) writev(r0, &(0x7f0000001540)=[{&(0x7f0000000300)='.', 0x1}], 0x1) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f00000000c0)=0xffff1884, 0x4) ioctl$KDGKBMETA(r1, 0x4b62, &(0x7f0000000000)) mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000140)={{}, {0x0, 0x989680}}, 0x0) unshare(0x20400) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x1, 0x0, 0x800, 0x0, 0x100001, 0x3}, 0x0, &(0x7f0000000240)={0x1f, 0x2, 0xffff, 0x3, 0x40004, 0x80000000000000, 0x6a9}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) 136.343152ms ago: executing program 9 (id=3785): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1d}}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000003c0)=@gcm_128={{0x303}, "77b40400", "bb6710bc8150e4a1a117d7b27caf00", "8c76287d", "3d8efa05fdffffff"}, 0x28) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28) recvmmsg(r0, &(0x7f0000000a00)=[{{0x0, 0x0, &(0x7f0000002980)=[{&(0x7f0000001580)=""/4096, 0x1000}], 0x1}, 0x5}], 0x1, 0x23, 0x0) writev(r0, &(0x7f0000001540)=[{&(0x7f0000000300)='.', 0x1}], 0x1) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f00000000c0)=0xffff1884, 0x4) unshare(0x20400) pselect6(0x40, &(0x7f0000000100)={0x3000000, 0x0, 0x1, 0x0, 0x800, 0x0, 0x100001, 0x3}, 0x0, &(0x7f0000000240)={0x1f, 0x2, 0xffff, 0x3, 0x40004, 0x80000000000000, 0x6a9}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) 39.792732ms ago: executing program 9 (id=3786): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000001c000000000000000000000104000000200000000500000001000004040000000100000001000000000000001800000002000004080000001300000002000000000000000100000001000000200000000076616c006270665f7370696e5f6c6f636b006c6f636b0066"], 0x0, 0x80, 0x0, 0x0, 0x9}, 0x28) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={0xffffffffffffffff, 0xe0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x9, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xcd, &(0x7f00000001c0)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000240), &(0x7f0000000280), 0x8, 0x7, 0x8, 0x8, &(0x7f00000002c0)}}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xf, 0x3, &(0x7f0000000500)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, r0, 0x0, 0x0, 0x63, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x804}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000380)={@fallback, r2, 0x6, 0x3c, r2, @void, @void, @void, @value=0xffffffffffffffff}, 0x20) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="230000000400000008000000010900001d000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB="010000000300000000"], 0x50) 0s ago: executing program 8 (id=3787): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@getqdisc={0x24, 0x26, 0x200, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x3, 0x10}, {0x8, 0xf}, {0xf, 0xffe0}}}, 0x24}}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c070054001280080001006873"], 0x90}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="3400000013000100000000000000000007000000", @ANYRES32=r1, @ANYBLOB="000000000000000014001a8010000480"], 0x34}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): ][T13473] bridge_slave_0: entered allmulticast mode [ 184.018637][T13473] bridge_slave_0: entered promiscuous mode [ 184.019622][T13473] bridge0: port 2(bridge_slave_1) entered blocking state [ 184.019652][T13473] bridge0: port 2(bridge_slave_1) entered disabled state [ 184.019718][T13473] bridge_slave_1: entered allmulticast mode [ 184.020154][T13473] bridge_slave_1: entered promiscuous mode [ 184.047993][T13473] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 184.095378][ T6747] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.101838][T13473] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 184.115391][T13473] team0: Port device team_slave_0 added [ 184.116610][T13518] syzkaller0: entered promiscuous mode [ 184.116643][T13518] syzkaller0: entered allmulticast mode [ 184.120100][T13473] team0: Port device team_slave_1 added [ 184.130853][T13473] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 184.133725][T13473] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 184.133767][T13473] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 184.134405][T13473] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 184.134419][T13473] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 184.134439][T13473] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 184.193528][T13473] hsr_slave_0: entered promiscuous mode [ 184.195239][T13473] hsr_slave_1: entered promiscuous mode [ 184.209550][ T6747] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.414477][ T6747] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.488078][T13536] FAULT_INJECTION: forcing a failure. [ 184.488078][T13536] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 184.489119][T13536] CPU: 1 UID: 0 PID: 13536 Comm: syz.2.3057 Tainted: G L syzkaller #0 PREEMPT [ 184.489139][T13536] Tainted: [L]=SOFTLOCKUP [ 184.489144][T13536] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 184.489149][T13536] Call trace: [ 184.489152][T13536] show_stack+0x2c/0x3c (C) [ 184.489173][T13536] __dump_stack+0x30/0x40 [ 184.489184][T13536] dump_stack_lvl+0xd8/0x12c [ 184.489194][T13536] dump_stack+0x1c/0x28 [ 184.489203][T13536] should_fail_ex+0x41c/0x590 [ 184.489212][T13536] should_fail+0x14/0x24 [ 184.489218][T13536] should_fail_usercopy+0x20/0x30 [ 184.489225][T13536] _copy_from_iter+0x188/0x1064 [ 184.489234][T13536] skb_copy_datagram_from_iter+0xe8/0x5c8 [ 184.489244][T13536] tun_get_user+0xa14/0x364c [ 184.489252][T13536] tun_chr_write_iter+0xfc/0x168 [ 184.489263][T13536] vfs_write+0x51c/0xa0c [ 184.489270][T13536] ksys_write+0x12c/0x228 [ 184.489277][T13536] __arm64_sys_write+0x84/0x98 [ 184.489284][T13536] invoke_syscall+0x98/0x244 [ 184.489300][T13536] el0_svc_common+0xec/0x23c [ 184.489310][T13536] do_el0_svc+0x4c/0x5c [ 184.489320][T13536] el0_svc+0x64/0x260 [ 184.489329][T13536] el0t_64_sync_handler+0x44/0x104 [ 184.489338][T13536] el0t_64_sync+0x198/0x19c [ 184.535571][ T6747] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.668088][ T6747] bridge_slave_1: left allmulticast mode [ 184.671187][ T6747] bridge_slave_1: left promiscuous mode [ 184.672395][ T6747] bridge0: port 2(bridge_slave_1) entered disabled state [ 184.676078][ T6747] ¾x9ÿ: left allmulticast mode [ 184.677165][ T6747] ¾x9ÿ: left promiscuous mode [ 184.678199][ T6747] bridge0: port 1(1¾x9ÿ) entered disabled state [ 184.702319][T13545] FAULT_INJECTION: forcing a failure. [ 184.702319][T13545] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 184.702359][T13545] CPU: 1 UID: 0 PID: 13545 Comm: syz.2.3059 Tainted: G L syzkaller #0 PREEMPT [ 184.702378][T13545] Tainted: [L]=SOFTLOCKUP [ 184.702382][T13545] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 184.702388][T13545] Call trace: [ 184.702391][T13545] show_stack+0x2c/0x3c (C) [ 184.702412][T13545] __dump_stack+0x30/0x40 [ 184.702423][T13545] dump_stack_lvl+0xd8/0x12c [ 184.702432][T13545] dump_stack+0x1c/0x28 [ 184.702442][T13545] should_fail_ex+0x41c/0x590 [ 184.702450][T13545] should_fail+0x14/0x24 [ 184.702456][T13545] should_fail_usercopy+0x20/0x30 [ 184.702464][T13545] _inline_copy_from_user+0x3c/0x188 [ 184.702473][T13545] core_sys_select+0x578/0x9e4 [ 184.702480][T13545] __arm64_sys_pselect6+0x2f0/0x39c [ 184.702487][T13545] invoke_syscall+0x98/0x244 [ 184.702497][T13545] el0_svc_common+0xec/0x23c [ 184.702507][T13545] do_el0_svc+0x4c/0x5c [ 184.702516][T13545] el0_svc+0x64/0x260 [ 184.702526][T13545] el0t_64_sync_handler+0x44/0x104 [ 184.702534][T13545] el0t_64_sync+0x198/0x19c [ 184.807756][ T6747] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 184.842134][ T6747] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 184.859163][ T6747] bond0 (unregistering): Released all slaves [ 184.862884][ T6747] bond1 (unregistering): Released all slaves [ 184.879550][T13549] tipc: Started in network mode [ 184.879592][T13549] tipc: Node identity daed18c6fdb7, cluster identity 4711 [ 184.879655][T13549] tipc: Enabled bearer , priority 0 [ 184.907456][T13553] syzkaller0: entered promiscuous mode [ 184.908759][T13553] syzkaller0: entered allmulticast mode [ 184.921955][T13547] tipc: Resetting bearer [ 184.926951][T13546] tipc: Disabling bearer [ 184.934445][ T6747] tipc: Left network mode [ 184.974733][ T6747] IPVS: stopping master sync thread 6390 ... [ 185.552005][ T4403] 8021q: adding VLAN 0 to HW filter on device eth8 [ 185.593419][T13585] loop1: detected capacity change from 0 to 2048 [ 185.763999][ T6747] hsr_slave_0: left promiscuous mode [ 185.765160][ T6747] hsr_slave_1: left promiscuous mode [ 185.767891][ T6747] veth1_macvtap: left promiscuous mode [ 185.767933][ T6747] veth0_macvtap: left promiscuous mode [ 185.767980][ T6747] veth1_vlan: left promiscuous mode [ 185.768012][ T6747] veth0_vlan: left promiscuous mode [ 185.830017][ T4722] Bluetooth: hci2: command tx timeout [ 186.038546][T13621] loop2: detected capacity change from 0 to 2048 [ 186.187844][T13473] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 186.198631][T13473] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 186.198983][T13473] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 186.213152][T13473] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 186.221739][T13473] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 186.229100][T13473] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 186.229976][T13473] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 186.230392][T13639] loop1: detected capacity change from 0 to 512 [ 186.234840][T13473] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 186.240058][T13639] EXT4-fs error (device loop1): ext4_do_update_inode:5742: inode #15: comm syz.1.3081: corrupted inode contents [ 186.242400][T13639] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 186.251016][T13639] EXT4-fs error (device loop1) in ext4_orphan_del:303: Corrupt filesystem [ 186.251056][T13639] loop1: lost filesystem error report for type 5 error -117 [ 186.254947][ C0] EXT4-fs (loop1): error count since last fsck: 2 [ 186.254963][ C0] EXT4-fs (loop1): initial error at time 186: ext4_do_update_inode:5742: inode 15 [ 186.254982][ C0] EXT4-fs (loop1): last error at time 186: ext4_orphan_del:303 [ 186.265670][T13639] EXT4-fs error (device loop1): ext4_do_update_inode:5742: inode #15: comm syz.1.3081: corrupted inode contents [ 186.265714][T13639] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 186.268188][T13639] EXT4-fs error (device loop1): ext4_evict_inode:315: inode #15: comm syz.1.3081: mark_inode_dirty error [ 186.268228][T13639] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 186.272387][T13639] EXT4-fs (loop1): 1 orphan inode deleted [ 186.272890][T13639] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 186.295330][T12973] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 186.363629][T13473] 8021q: adding VLAN 0 to HW filter on device bond0 [ 186.374166][T13665] syzkaller0: entered promiscuous mode [ 186.375276][T13665] syzkaller0: entered allmulticast mode [ 186.388335][T13473] 8021q: adding VLAN 0 to HW filter on device team0 [ 186.490976][ T6744] bridge0: port 1(bridge_slave_0) entered blocking state [ 186.491037][ T6744] bridge0: port 1(bridge_slave_0) entered forwarding state [ 186.491878][ T6744] bridge0: port 2(bridge_slave_1) entered blocking state [ 186.491902][ T6744] bridge0: port 2(bridge_slave_1) entered forwarding state [ 186.496116][ T6747] IPVS: stop unused estimator thread 0... [ 186.599907][T13691] FAULT_INJECTION: forcing a failure. [ 186.599907][T13691] name failslab, interval 1, probability 0, space 0, times 0 [ 186.599949][T13691] CPU: 1 UID: 0 PID: 13691 Comm: syz.2.3092 Tainted: G L syzkaller #0 PREEMPT [ 186.599964][T13691] Tainted: [L]=SOFTLOCKUP [ 186.599968][T13691] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 186.599973][T13691] Call trace: [ 186.599975][T13691] show_stack+0x2c/0x3c (C) [ 186.599994][T13691] __dump_stack+0x30/0x40 [ 186.600004][T13691] dump_stack_lvl+0xd8/0x12c [ 186.600014][T13691] dump_stack+0x1c/0x28 [ 186.600024][T13691] should_fail_ex+0x41c/0x590 [ 186.600032][T13691] should_failslab+0xc4/0x120 [ 186.600040][T13691] __kmalloc_cache_noprof+0x94/0x5ec [ 186.600049][T13691] tcf_chain_create+0xc0/0x294 [ 186.600058][T13691] __tcf_chain_get+0x98/0x1b0 [ 186.600065][T13691] tc_new_tfilter+0x5cc/0x132c [ 186.600072][T13691] rtnetlink_rcv_msg+0x66c/0x9bc [ 186.600081][T13691] netlink_rcv_skb+0x238/0x414 [ 186.600091][T13691] rtnetlink_rcv+0x28/0x38 [ 186.600098][T13691] netlink_unicast+0x600/0x7f8 [ 186.600107][T13691] netlink_sendmsg+0x648/0x948 [ 186.600115][T13691] __sock_sendmsg+0xc8/0x17c [ 186.600124][T13691] ____sys_sendmsg+0x3d0/0x6c8 [ 186.600133][T13691] ___sys_sendmsg+0x198/0x224 [ 186.600142][T13691] __sys_sendmsg+0x158/0x204 [ 186.600152][T13691] __arm64_sys_sendmsg+0x88/0x9c [ 186.600161][T13691] invoke_syscall+0x98/0x244 [ 186.600171][T13691] el0_svc_common+0xec/0x23c [ 186.600180][T13691] do_el0_svc+0x4c/0x5c [ 186.600190][T13691] el0_svc+0x64/0x260 [ 186.600199][T13691] el0t_64_sync_handler+0x44/0x104 [ 186.600207][T13691] el0t_64_sync+0x198/0x19c [ 187.671215][ T1598] ieee802154 phy0 wpan0: encryption failed: -22 [ 187.671266][ T1598] ieee802154 phy1 wpan1: encryption failed: -22 [ 187.764705][T13473] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 187.865374][T13738] set_capacity_and_notify: 1 callbacks suppressed [ 187.865417][T13738] loop6: detected capacity change from 0 to 2048 [ 187.941503][T13473] veth0_vlan: entered promiscuous mode [ 187.948306][T13473] veth1_vlan: entered promiscuous mode [ 187.957325][T13473] veth0_macvtap: entered promiscuous mode [ 187.958453][T13473] veth1_macvtap: entered promiscuous mode [ 187.962246][T13473] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 187.963982][T13473] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 187.991862][ T6754] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.991909][ T6754] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.991930][ T6754] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.991946][ T6754] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.994382][T13755] syzkaller0: entered promiscuous mode [ 187.994394][T13755] syzkaller0: entered allmulticast mode [ 188.045269][ T4722] Bluetooth: hci2: command tx timeout [ 188.116685][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 188.116716][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 188.123878][T13761] netlink: 'syz.1.3104': attribute type 1 has an invalid length. [ 188.151656][ T6747] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 188.151693][ T6747] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 188.212895][T13788] loop1: detected capacity change from 0 to 2048 [ 188.333089][T13803] fuse: Bad value for 'fd' [ 188.532735][T13829] loop1: detected capacity change from 0 to 2048 [ 188.540485][T13830] FAULT_INJECTION: forcing a failure. [ 188.540485][T13830] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 188.540523][T13830] CPU: 0 UID: 0 PID: 13830 Comm: syz.5.3125 Tainted: G L syzkaller #0 PREEMPT [ 188.540540][T13830] Tainted: [L]=SOFTLOCKUP [ 188.540545][T13830] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 188.540551][T13830] Call trace: [ 188.540555][T13830] show_stack+0x2c/0x3c (C) [ 188.540576][T13830] __dump_stack+0x30/0x40 [ 188.540587][T13830] dump_stack_lvl+0xd8/0x12c [ 188.540597][T13830] dump_stack+0x1c/0x28 [ 188.540607][T13830] should_fail_ex+0x41c/0x590 [ 188.540615][T13830] should_fail+0x14/0x24 [ 188.540622][T13830] should_fail_usercopy+0x20/0x30 [ 188.540629][T13830] _inline_copy_from_user+0x3c/0x174 [ 188.540641][T13830] copy_msghdr_from_user+0xb8/0x194 [ 188.540651][T13830] ___sys_sendmsg+0x14c/0x224 [ 188.540660][T13830] __sys_sendmsg+0x158/0x204 [ 188.540669][T13830] __arm64_sys_sendmsg+0x88/0x9c [ 188.540678][T13830] invoke_syscall+0x98/0x244 [ 188.540689][T13830] el0_svc_common+0xec/0x23c [ 188.540698][T13830] do_el0_svc+0x4c/0x5c [ 188.540708][T13830] el0_svc+0x64/0x260 [ 188.540717][T13830] el0t_64_sync_handler+0x44/0x104 [ 188.540726][T13830] el0t_64_sync+0x198/0x19c [ 188.675900][T13841] FAULT_INJECTION: forcing a failure. [ 188.675900][T13841] name failslab, interval 1, probability 0, space 0, times 0 [ 188.675940][T13841] CPU: 1 UID: 0 PID: 13841 Comm: syz.6.3131 Tainted: G L syzkaller #0 PREEMPT [ 188.675957][T13841] Tainted: [L]=SOFTLOCKUP [ 188.675962][T13841] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 188.675968][T13841] Call trace: [ 188.675972][T13841] show_stack+0x2c/0x3c (C) [ 188.675993][T13841] __dump_stack+0x30/0x40 [ 188.676004][T13841] dump_stack_lvl+0xd8/0x12c [ 188.676014][T13841] dump_stack+0x1c/0x28 [ 188.676024][T13841] should_fail_ex+0x41c/0x590 [ 188.676032][T13841] should_failslab+0xc4/0x120 [ 188.676040][T13841] __kmalloc_cache_noprof+0x94/0x5ec [ 188.676050][T13841] rtnl_newlink+0x110/0x1144 [ 188.676059][T13841] rtnetlink_rcv_msg+0x66c/0x9bc [ 188.676067][T13841] netlink_rcv_skb+0x238/0x414 [ 188.676077][T13841] rtnetlink_rcv+0x28/0x38 [ 188.676085][T13841] netlink_unicast+0x600/0x7f8 [ 188.676093][T13841] netlink_sendmsg+0x648/0x948 [ 188.676102][T13841] __sock_sendmsg+0xc8/0x17c [ 188.676111][T13841] __sys_sendto+0x250/0x328 [ 188.676119][T13841] __arm64_sys_sendto+0xec/0x10c [ 188.676129][T13841] invoke_syscall+0x98/0x244 [ 188.676139][T13841] el0_svc_common+0xec/0x23c [ 188.676149][T13841] do_el0_svc+0x4c/0x5c [ 188.676158][T13841] el0_svc+0x64/0x260 [ 188.676167][T13841] el0t_64_sync_handler+0x44/0x104 [ 188.676176][T13841] el0t_64_sync+0x198/0x19c [ 188.682075][T13843] syzkaller0: entered promiscuous mode [ 188.682116][T13843] syzkaller0: entered allmulticast mode [ 188.740795][T13847] syzkaller0: entered promiscuous mode [ 188.740833][T13847] syzkaller0: entered allmulticast mode [ 188.899768][T13864] syzkaller1: entered allmulticast mode [ 188.900837][T13864] FAULT_INJECTION: forcing a failure. [ 188.900837][T13864] name failslab, interval 1, probability 0, space 0, times 0 [ 188.900857][T13864] CPU: 0 UID: 0 PID: 13864 Comm: syz.1.3142 Tainted: G L syzkaller #0 PREEMPT [ 188.900868][T13864] Tainted: [L]=SOFTLOCKUP [ 188.900872][T13864] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 188.900876][T13864] Call trace: [ 188.900879][T13864] show_stack+0x2c/0x3c (C) [ 188.900899][T13864] __dump_stack+0x30/0x40 [ 188.900910][T13864] dump_stack_lvl+0xd8/0x12c [ 188.900920][T13864] dump_stack+0x1c/0x28 [ 188.900930][T13864] should_fail_ex+0x41c/0x590 [ 188.900938][T13864] should_failslab+0xc4/0x120 [ 188.900946][T13864] kmem_cache_alloc_noprof+0x94/0x5d8 [ 188.900955][T13864] skb_clone+0x1ac/0x320 [ 188.900966][T13864] packet_rcv_spkt+0x124/0x53c [ 188.900975][T13864] deliver_skb+0x150/0x21c [ 188.900983][T13864] __netif_receive_skb_core+0x2198/0x2b60 [ 188.900991][T13864] __netif_receive_skb_one_core+0x70/0x110 [ 188.901000][T13864] __netif_receive_skb+0x34/0x128 [ 188.901007][T13864] netif_receive_skb+0x1e0/0xad0 [ 188.901015][T13864] tun_rx_batched+0x180/0x620 [ 188.901023][T13864] tun_get_user+0x2318/0x364c [ 188.901031][T13864] tun_chr_write_iter+0xfc/0x168 [ 188.901041][T13864] vfs_write+0x51c/0xa0c [ 188.901048][T13864] ksys_write+0x12c/0x228 [ 188.901055][T13864] __arm64_sys_write+0x84/0x98 [ 188.901062][T13864] invoke_syscall+0x98/0x244 [ 188.901072][T13864] el0_svc_common+0xec/0x23c [ 188.901082][T13864] do_el0_svc+0x4c/0x5c [ 188.901091][T13864] el0_svc+0x64/0x260 [ 188.901101][T13864] el0t_64_sync_handler+0x44/0x104 [ 188.901109][T13864] el0t_64_sync+0x198/0x19c [ 188.918773][T13868] loop2: detected capacity change from 0 to 2048 [ 188.935534][T13870] FAULT_INJECTION: forcing a failure. [ 188.935534][T13870] name failslab, interval 1, probability 0, space 0, times 0 [ 188.935556][T13870] CPU: 0 UID: 0 PID: 13870 Comm: syz.6.3143 Tainted: G L syzkaller #0 PREEMPT [ 188.935568][T13870] Tainted: [L]=SOFTLOCKUP [ 188.935571][T13870] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 188.935576][T13870] Call trace: [ 188.935579][T13870] show_stack+0x2c/0x3c (C) [ 188.935599][T13870] __dump_stack+0x30/0x40 [ 188.935610][T13870] dump_stack_lvl+0xd8/0x12c [ 188.935619][T13870] dump_stack+0x1c/0x28 [ 188.935629][T13870] should_fail_ex+0x41c/0x590 [ 188.935637][T13870] should_failslab+0xc4/0x120 [ 188.935646][T13870] kmem_cache_alloc_noprof+0x94/0x5d8 [ 188.935655][T13870] skb_clone+0x1ac/0x320 [ 188.935666][T13870] __netlink_deliver_tap+0x364/0x6f4 [ 188.935676][T13870] netlink_deliver_tap+0x1d8/0x1dc [ 188.935685][T13870] netlink_unicast+0x5dc/0x7f8 [ 188.935693][T13870] netlink_sendmsg+0x648/0x948 [ 188.935702][T13870] __sock_sendmsg+0xc8/0x17c [ 188.935710][T13870] ____sys_sendmsg+0x3f8/0x6c8 [ 188.935719][T13870] ___sys_sendmsg+0x198/0x224 [ 188.935729][T13870] __sys_sendmmsg+0x204/0x580 [ 188.935738][T13870] __arm64_sys_sendmmsg+0xac/0xc8 [ 188.935747][T13870] invoke_syscall+0x98/0x244 [ 188.935758][T13870] el0_svc_common+0xec/0x23c [ 188.935767][T13870] do_el0_svc+0x4c/0x5c [ 188.935777][T13870] el0_svc+0x64/0x260 [ 188.935786][T13870] el0t_64_sync_handler+0x44/0x104 [ 188.935794][T13870] el0t_64_sync+0x198/0x19c [ 189.052213][T13876] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3146'. [ 189.132076][T13889] syzkaller0: entered promiscuous mode [ 189.132116][T13889] syzkaller0: entered allmulticast mode [ 189.189288][T13896] loop1: detected capacity change from 0 to 512 [ 189.200469][T13896] EXT4-fs (loop1): couldn't mount as ext2 due to feature incompatibilities [ 189.206366][T13896] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3154'. [ 189.206755][T13896] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3154'. [ 189.206766][T13896] FAULT_INJECTION: forcing a failure. [ 189.206766][T13896] name failslab, interval 1, probability 0, space 0, times 0 [ 189.206783][T13896] CPU: 0 UID: 0 PID: 13896 Comm: syz.1.3154 Tainted: G L syzkaller #0 PREEMPT [ 189.206797][T13896] Tainted: [L]=SOFTLOCKUP [ 189.206800][T13896] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 189.206805][T13896] Call trace: [ 189.206809][T13896] show_stack+0x2c/0x3c (C) [ 189.206829][T13896] __dump_stack+0x30/0x40 [ 189.206842][T13896] dump_stack_lvl+0xd8/0x12c [ 189.206852][T13896] dump_stack+0x1c/0x28 [ 189.206862][T13896] should_fail_ex+0x41c/0x590 [ 189.206870][T13896] should_failslab+0xc4/0x120 [ 189.206879][T13896] kmem_cache_alloc_node_noprof+0x98/0x5f8 [ 189.206888][T13896] __alloc_skb+0x1f0/0x610 [ 189.206898][T13896] netlink_ack+0x11c/0x890 [ 189.206907][T13896] netlink_rcv_skb+0x21c/0x414 [ 189.206916][T13896] rtnetlink_rcv+0x28/0x38 [ 189.206924][T13896] netlink_unicast+0x600/0x7f8 [ 189.206932][T13896] netlink_sendmsg+0x648/0x948 [ 189.206941][T13896] __sock_sendmsg+0xc8/0x17c [ 189.206950][T13896] ____sys_sendmsg+0x3f8/0x6c8 [ 189.206959][T13896] ___sys_sendmsg+0x198/0x224 [ 189.206969][T13896] __sys_sendmmsg+0x204/0x580 [ 189.206978][T13896] __arm64_sys_sendmmsg+0xac/0xc8 [ 189.206987][T13896] invoke_syscall+0x98/0x244 [ 189.206997][T13896] el0_svc_common+0xec/0x23c [ 189.207007][T13896] do_el0_svc+0x4c/0x5c [ 189.207016][T13896] el0_svc+0x64/0x260 [ 189.207026][T13896] el0t_64_sync_handler+0x44/0x104 [ 189.207034][T13896] el0t_64_sync+0x198/0x19c [ 189.323801][T13901] loop2: detected capacity change from 0 to 8192 [ 189.427316][T13901] macsec1: entered allmulticast mode [ 189.427355][T13901] bond0: entered allmulticast mode [ 189.427380][T13901] bond_slave_0: entered allmulticast mode [ 189.427398][T13901] bond_slave_1: entered allmulticast mode [ 189.427467][T13901] bond_slave_0: entered promiscuous mode [ 189.427486][T13901] bond_slave_1: entered promiscuous mode [ 189.429714][T13901] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 189.470513][T13907] loop7: detected capacity change from 0 to 2048 [ 189.603639][T13927] syzkaller1: entered allmulticast mode [ 190.300446][ T4722] Bluetooth: hci2: command tx timeout [ 190.541699][T13936] netlink: 'syz.5.3168': attribute type 12 has an invalid length. [ 190.543208][T13936] netlink: 'syz.5.3168': attribute type 10 has an invalid length. [ 190.545033][T13936] netlink: 148 bytes leftover after parsing attributes in process `syz.5.3168'. [ 190.780636][T13965] syzkaller0: entered promiscuous mode [ 190.780673][T13965] syzkaller0: entered allmulticast mode [ 190.829373][T13970] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3183'. [ 191.079686][T13995] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3191'. [ 191.082522][T13995] veth0_macvtap: left promiscuous mode [ 191.299511][T14001] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3194'. [ 191.347695][T14003] syzkaller0: entered promiscuous mode [ 191.347727][T14003] syzkaller0: entered allmulticast mode [ 191.469948][T14005] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3196'. [ 191.470364][T14005] netlink: 132 bytes leftover after parsing attributes in process `syz.7.3196'. [ 191.471130][T14005] netlink: 'syz.7.3196': attribute type 10 has an invalid length. [ 191.471985][T14005] syz_tun: entered promiscuous mode [ 191.477528][T14005] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 191.595682][T14007] FAULT_INJECTION: forcing a failure. [ 191.595682][T14007] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 191.595723][T14007] CPU: 0 UID: 0 PID: 14007 Comm: syz.7.3197 Tainted: G L syzkaller #0 PREEMPT [ 191.595740][T14007] Tainted: [L]=SOFTLOCKUP [ 191.595744][T14007] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 191.595749][T14007] Call trace: [ 191.595752][T14007] show_stack+0x2c/0x3c (C) [ 191.595773][T14007] __dump_stack+0x30/0x40 [ 191.595786][T14007] dump_stack_lvl+0xd8/0x12c [ 191.595796][T14007] dump_stack+0x1c/0x28 [ 191.595805][T14007] should_fail_ex+0x41c/0x590 [ 191.595817][T14007] should_fail+0x14/0x24 [ 191.595824][T14007] should_fail_usercopy+0x20/0x30 [ 191.595832][T14007] bpf_test_finish+0x194/0xa70 [ 191.595842][T14007] bpf_prog_test_run_skb+0x100c/0x1ed0 [ 191.595849][T14007] bpf_prog_test_run+0x1e0/0x250 [ 191.595858][T14007] __sys_bpf+0x6bc/0x82c [ 191.595865][T14007] __arm64_sys_bpf+0xd0/0xec [ 191.595872][T14007] invoke_syscall+0x98/0x244 [ 191.595882][T14007] el0_svc_common+0xec/0x23c [ 191.595892][T14007] do_el0_svc+0x4c/0x5c [ 191.595901][T14007] el0_svc+0x64/0x260 [ 191.595910][T14007] el0t_64_sync_handler+0x44/0x104 [ 191.595919][T14007] el0t_64_sync+0x198/0x19c [ 191.684040][T14010] FAULT_INJECTION: forcing a failure. [ 191.684040][T14010] name failslab, interval 1, probability 0, space 0, times 0 [ 191.684081][T14010] CPU: 1 UID: 0 PID: 14010 Comm: syz.7.3199 Tainted: G L syzkaller #0 PREEMPT [ 191.684096][T14010] Tainted: [L]=SOFTLOCKUP [ 191.684100][T14010] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 191.684105][T14010] Call trace: [ 191.684109][T14010] show_stack+0x2c/0x3c (C) [ 191.684130][T14010] __dump_stack+0x30/0x40 [ 191.684140][T14010] dump_stack_lvl+0xd8/0x12c [ 191.684150][T14010] dump_stack+0x1c/0x28 [ 191.684160][T14010] should_fail_ex+0x41c/0x590 [ 191.684168][T14010] should_failslab+0xc4/0x120 [ 191.684177][T14010] kmem_cache_alloc_node_noprof+0x98/0x5f8 [ 191.684186][T14010] __alloc_skb+0x1f0/0x610 [ 191.684196][T14010] netlink_ack+0x11c/0x890 [ 191.684206][T14010] netlink_rcv_skb+0x21c/0x414 [ 191.684215][T14010] genl_rcv+0x38/0x50 [ 191.684224][T14010] netlink_unicast+0x600/0x7f8 [ 191.684233][T14010] netlink_sendmsg+0x648/0x948 [ 191.684241][T14010] __sock_sendmsg+0xc8/0x17c [ 191.684250][T14010] ____sys_sendmsg+0x3d0/0x6c8 [ 191.684259][T14010] ___sys_sendmsg+0x198/0x224 [ 191.684269][T14010] __sys_sendmsg+0x158/0x204 [ 191.684277][T14010] __arm64_sys_sendmsg+0x88/0x9c [ 191.684287][T14010] invoke_syscall+0x98/0x244 [ 191.684303][T14010] el0_svc_common+0xec/0x23c [ 191.684312][T14010] do_el0_svc+0x4c/0x5c [ 191.684322][T14010] el0_svc+0x64/0x260 [ 191.684331][T14010] el0t_64_sync_handler+0x44/0x104 [ 191.684340][T14010] el0t_64_sync+0x198/0x19c [ 191.706027][T14011] loop2: detected capacity change from 0 to 2048 [ 191.914814][T14023] process 'syz.7.3200' launched './file2' with NULL argv: empty string added [ 192.128199][T14028] syzkaller0: entered promiscuous mode [ 192.129536][T14028] syzkaller0: entered allmulticast mode [ 192.234245][T14036] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3210'. [ 192.370554][T14049] 9pnet_fd: Insufficient options for proto=fd [ 192.477381][ T4388] block nbd4: Possible stuck request 0000000000dee376: control (read@0,4096B). Runtime 120 seconds [ 192.532920][ T4722] Bluetooth: hci2: command tx timeout [ 192.589471][ T4813] kernel write not supported for file /input/mice (pid: 4813 comm: kworker/0:4) [ 192.596937][T14057] FAULT_INJECTION: forcing a failure. [ 192.596937][T14057] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 192.596971][T14057] CPU: 0 UID: 0 PID: 14057 Comm: syz.2.3219 Tainted: G L syzkaller #0 PREEMPT [ 192.596986][T14057] Tainted: [L]=SOFTLOCKUP [ 192.596990][T14057] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 192.596996][T14057] Call trace: [ 192.596999][T14057] show_stack+0x2c/0x3c (C) [ 192.597021][T14057] __dump_stack+0x30/0x40 [ 192.597034][T14057] dump_stack_lvl+0xd8/0x12c [ 192.597046][T14057] dump_stack+0x1c/0x28 [ 192.597057][T14057] should_fail_ex+0x41c/0x590 [ 192.597066][T14057] should_fail+0x14/0x24 [ 192.597073][T14057] should_fail_usercopy+0x20/0x30 [ 192.597082][T14057] strncpy_from_user+0x48/0x388 [ 192.597092][T14057] __arm64_sys_add_key+0x150/0x43c [ 192.597101][T14057] invoke_syscall+0x98/0x244 [ 192.597113][T14057] el0_svc_common+0xec/0x23c [ 192.597125][T14057] do_el0_svc+0x4c/0x5c [ 192.597137][T14057] el0_svc+0x64/0x260 [ 192.597148][T14057] el0t_64_sync_handler+0x44/0x104 [ 192.597158][T14057] el0t_64_sync+0x198/0x19c [ 192.672269][T14063] syzkaller0: entered promiscuous mode [ 192.673512][T14063] syzkaller0: entered allmulticast mode [ 192.746630][T14066] FAULT_INJECTION: forcing a failure. [ 192.746630][T14066] name failslab, interval 1, probability 0, space 0, times 0 [ 192.746669][T14066] CPU: 1 UID: 0 PID: 14066 Comm: syz.1.3224 Tainted: G L syzkaller #0 PREEMPT [ 192.746687][T14066] Tainted: [L]=SOFTLOCKUP [ 192.746691][T14066] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 192.746697][T14066] Call trace: [ 192.746700][T14066] show_stack+0x2c/0x3c (C) [ 192.746718][T14066] __dump_stack+0x30/0x40 [ 192.746729][T14066] dump_stack_lvl+0xd8/0x12c [ 192.746739][T14066] dump_stack+0x1c/0x28 [ 192.746748][T14066] should_fail_ex+0x41c/0x590 [ 192.746757][T14066] should_failslab+0xc4/0x120 [ 192.746765][T14066] kmem_cache_alloc_noprof+0x94/0x5d8 [ 192.746774][T14066] dst_alloc+0xf4/0x15c [ 192.746784][T14066] ip6_dst_alloc+0x38/0xc8 [ 192.746792][T14066] ip6_pol_route+0x79c/0xf50 [ 192.746800][T14066] ip6_pol_route_input+0x74/0x98 [ 192.746808][T14066] fib6_rule_lookup+0x280/0x474 [ 192.746818][T14066] ip6_route_input_lookup+0xa8/0xdc [ 192.746826][T14066] ip6_route_input+0x56c/0x854 [ 192.746834][T14066] ip6_rcv_finish_core+0x200/0x3a4 [ 192.746843][T14066] ip6_sublist_rcv+0x56c/0xb6c [ 192.746852][T14066] ipv6_list_rcv+0x370/0x3cc [ 192.746860][T14066] __netif_receive_skb_list_core+0x4f0/0x67c [ 192.746868][T14066] netif_receive_skb_list_internal+0x748/0xa0c [ 192.746878][T14066] napi_complete_done+0x24c/0x62c [ 192.746886][T14066] tun_get_user+0x21dc/0x364c [ 192.746895][T14066] tun_chr_write_iter+0xfc/0x168 [ 192.746905][T14066] vfs_write+0x51c/0xa0c [ 192.746912][T14066] ksys_write+0x12c/0x228 [ 192.746919][T14066] __arm64_sys_write+0x84/0x98 [ 192.746926][T14066] invoke_syscall+0x98/0x244 [ 192.746936][T14066] el0_svc_common+0xec/0x23c [ 192.746945][T14066] do_el0_svc+0x4c/0x5c [ 192.746955][T14066] el0_svc+0x64/0x260 [ 192.746964][T14066] el0t_64_sync_handler+0x44/0x104 [ 192.746972][T14066] el0t_64_sync+0x198/0x19c [ 192.962273][T14079] pimreg: entered allmulticast mode [ 193.067271][T14085] FAULT_INJECTION: forcing a failure. [ 193.067271][T14085] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 193.067319][T14085] CPU: 0 UID: 0 PID: 14085 Comm: syz.1.3232 Tainted: G L syzkaller #0 PREEMPT [ 193.067339][T14085] Tainted: [L]=SOFTLOCKUP [ 193.067343][T14085] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 193.067350][T14085] Call trace: [ 193.067354][T14085] show_stack+0x2c/0x3c (C) [ 193.067375][T14085] __dump_stack+0x30/0x40 [ 193.067386][T14085] dump_stack_lvl+0xd8/0x12c [ 193.067396][T14085] dump_stack+0x1c/0x28 [ 193.067406][T14085] should_fail_ex+0x41c/0x590 [ 193.067414][T14085] should_fail+0x14/0x24 [ 193.067421][T14085] should_fail_usercopy+0x20/0x30 [ 193.067428][T14085] core_sys_select+0x750/0x9e4 [ 193.067436][T14085] __arm64_sys_pselect6+0x2f0/0x39c [ 193.067443][T14085] invoke_syscall+0x98/0x244 [ 193.067454][T14085] el0_svc_common+0xec/0x23c [ 193.067463][T14085] do_el0_svc+0x4c/0x5c [ 193.067473][T14085] el0_svc+0x64/0x260 [ 193.067482][T14085] el0t_64_sync_handler+0x44/0x104 [ 193.067491][T14085] el0t_64_sync+0x198/0x19c [ 193.236808][ T39] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.320797][T14095] FAULT_INJECTION: forcing a failure. [ 193.320797][T14095] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 193.320857][T14095] CPU: 0 UID: 0 PID: 14095 Comm: syz.1.3235 Tainted: G L syzkaller #0 PREEMPT [ 193.320872][T14095] Tainted: [L]=SOFTLOCKUP [ 193.320876][T14095] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 193.320881][T14095] Call trace: [ 193.320884][T14095] show_stack+0x2c/0x3c (C) [ 193.320905][T14095] __dump_stack+0x30/0x40 [ 193.320916][T14095] dump_stack_lvl+0xd8/0x12c [ 193.320925][T14095] dump_stack+0x1c/0x28 [ 193.320935][T14095] should_fail_ex+0x41c/0x590 [ 193.320943][T14095] should_fail+0x14/0x24 [ 193.320949][T14095] should_fail_usercopy+0x20/0x30 [ 193.320956][T14095] _inline_copy_from_user+0x3c/0x174 [ 193.320968][T14095] copy_msghdr_from_user+0xb8/0x194 [ 193.320978][T14095] ___sys_recvmsg+0x11c/0x1f4 [ 193.320987][T14095] do_recvmmsg+0x288/0x7d4 [ 193.320996][T14095] __sys_recvmmsg+0x1e0/0x270 [ 193.321005][T14095] __arm64_sys_recvmmsg+0xe0/0x108 [ 193.321015][T14095] invoke_syscall+0x98/0x244 [ 193.321025][T14095] el0_svc_common+0xec/0x23c [ 193.321034][T14095] do_el0_svc+0x4c/0x5c [ 193.321044][T14095] el0_svc+0x64/0x260 [ 193.321053][T14095] el0t_64_sync_handler+0x44/0x104 [ 193.321061][T14095] el0t_64_sync+0x198/0x19c [ 193.365695][ T4725] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 193.374022][ T4725] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 193.374508][ T4725] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 193.374906][ T4725] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 193.378813][ T4725] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 193.402675][ T39] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.466913][T14094] faux_driver vgem: [drm] Unknown color mode 11173; guessing buffer size. [ 193.508345][ T39] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.668035][ T39] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.736622][T14116] FAULT_INJECTION: forcing a failure. [ 193.736622][T14116] name failslab, interval 1, probability 0, space 0, times 0 [ 193.741791][T14116] CPU: 1 UID: 0 PID: 14116 Comm: syz.6.3240 Tainted: G L syzkaller #0 PREEMPT [ 193.741816][T14116] Tainted: [L]=SOFTLOCKUP [ 193.741820][T14116] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 193.741826][T14116] Call trace: [ 193.741829][T14116] show_stack+0x2c/0x3c (C) [ 193.741854][T14116] __dump_stack+0x30/0x40 [ 193.741866][T14116] dump_stack_lvl+0xd8/0x12c [ 193.741876][T14116] dump_stack+0x1c/0x28 [ 193.741886][T14116] should_fail_ex+0x41c/0x590 [ 193.741894][T14116] should_failslab+0xc4/0x120 [ 193.741903][T14116] kmem_cache_alloc_lru_noprof+0x98/0x5dc [ 193.741912][T14116] sock_alloc_inode+0x30/0x180 [ 193.741923][T14116] alloc_inode+0x68/0x198 [ 193.741932][T14116] sock_alloc+0x4c/0x204 [ 193.741940][T14116] do_accept+0x108/0x438 [ 193.741949][T14116] __sys_accept4+0x11c/0x1f8 [ 193.741958][T14116] __arm64_sys_accept4+0xa8/0xc4 [ 193.741966][T14116] invoke_syscall+0x98/0x244 [ 193.741977][T14116] el0_svc_common+0xec/0x23c [ 193.741986][T14116] do_el0_svc+0x4c/0x5c [ 193.741996][T14116] el0_svc+0x64/0x260 [ 193.742005][T14116] el0t_64_sync_handler+0x44/0x104 [ 193.742014][T14116] el0t_64_sync+0x198/0x19c [ 193.744557][T14073] pimreg: left allmulticast mode [ 193.928657][ T39] bridge_slave_1: left allmulticast mode [ 193.928694][ T39] bridge_slave_1: left promiscuous mode [ 193.928785][ T39] bridge0: port 2(bridge_slave_1) entered disabled state [ 193.933373][ T39] bridge_slave_0: left allmulticast mode [ 193.933788][ T39] bridge_slave_0: left promiscuous mode [ 193.933859][ T39] bridge0: port 1(bridge_slave_0) entered disabled state [ 193.983045][ T39] bond_slave_0: left promiscuous mode [ 193.983092][ T39] bond_slave_1: left promiscuous mode [ 194.094731][ T39] bond0 (unregistering): left allmulticast mode [ 194.094763][ T39] bond_slave_0: left allmulticast mode [ 194.095054][ T39] bond_slave_1: left allmulticast mode [ 194.102490][ T39] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 194.143031][ T39] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 194.163738][ T39] bond0 (unregistering): Released all slaves [ 194.193326][T14139] FAULT_INJECTION: forcing a failure. [ 194.193326][T14139] name failslab, interval 1, probability 0, space 0, times 0 [ 194.193374][T14139] CPU: 1 UID: 0 PID: 14139 Comm: syz.6.3245 Tainted: G L syzkaller #0 PREEMPT [ 194.193388][T14139] Tainted: [L]=SOFTLOCKUP [ 194.193393][T14139] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 194.193398][T14139] Call trace: [ 194.193401][T14139] show_stack+0x2c/0x3c (C) [ 194.193421][T14139] __dump_stack+0x30/0x40 [ 194.193432][T14139] dump_stack_lvl+0xd8/0x12c [ 194.193442][T14139] dump_stack+0x1c/0x28 [ 194.193452][T14139] should_fail_ex+0x41c/0x590 [ 194.193460][T14139] should_failslab+0xc4/0x120 [ 194.193468][T14139] kmem_cache_alloc_noprof+0x94/0x5d8 [ 194.193477][T14139] skb_clone+0x1ac/0x320 [ 194.193488][T14139] __netlink_deliver_tap+0x364/0x6f4 [ 194.193498][T14139] netlink_deliver_tap+0x1d8/0x1dc [ 194.193507][T14139] __netlink_sendskb+0x78/0xd0 [ 194.193515][T14139] netlink_sendskb+0x2c/0xdc [ 194.193524][T14139] netlink_unicast+0x2c0/0x7f8 [ 194.193532][T14139] netlink_ack+0x570/0x890 [ 194.193540][T14139] netlink_rcv_skb+0x21c/0x414 [ 194.193549][T14139] rtnetlink_rcv+0x28/0x38 [ 194.193557][T14139] netlink_unicast+0x600/0x7f8 [ 194.193566][T14139] netlink_sendmsg+0x648/0x948 [ 194.193574][T14139] __sock_sendmsg+0xc8/0x17c [ 194.193583][T14139] ____sys_sendmsg+0x3d0/0x6c8 [ 194.193592][T14139] ___sys_sendmsg+0x198/0x224 [ 194.193601][T14139] __sys_sendmsg+0x158/0x204 [ 194.193610][T14139] __arm64_sys_sendmsg+0x88/0x9c [ 194.193620][T14139] invoke_syscall+0x98/0x244 [ 194.193629][T14139] el0_svc_common+0xec/0x23c [ 194.193639][T14139] do_el0_svc+0x4c/0x5c [ 194.193649][T14139] el0_svc+0x64/0x260 [ 194.193658][T14139] el0t_64_sync_handler+0x44/0x104 [ 194.193666][T14139] el0t_64_sync+0x198/0x19c [ 194.255453][T14097] bridge0: port 1(bridge_slave_0) entered blocking state [ 194.255543][T14097] bridge0: port 1(bridge_slave_0) entered disabled state [ 194.255620][T14097] bridge_slave_0: entered allmulticast mode [ 194.256082][T14097] bridge_slave_0: entered promiscuous mode [ 194.258106][T14097] bridge0: port 2(bridge_slave_1) entered blocking state [ 194.258670][T14097] bridge0: port 2(bridge_slave_1) entered disabled state [ 194.258736][T14097] bridge_slave_1: entered allmulticast mode [ 194.259144][T14097] bridge_slave_1: entered promiscuous mode [ 194.274723][T14147] syzkaller0: entered promiscuous mode [ 194.274758][T14147] syzkaller0: entered allmulticast mode [ 194.291550][T14097] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 194.294382][T14097] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 194.379973][T14097] team0: Port device team_slave_0 added [ 194.384474][T14097] team0: Port device team_slave_1 added [ 194.403028][T14159] loop6: detected capacity change from 0 to 512 [ 194.414583][T14159] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 194.434626][T14159] EXT4-fs (loop6): 1 truncate cleaned up [ 194.435116][T14159] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 194.498022][T14097] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 194.498051][T14097] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 194.498078][T14097] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 194.498712][T14097] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 194.498726][T14097] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 194.499168][T14097] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 194.509250][T14097] hsr_slave_0: entered promiscuous mode [ 194.510023][T14097] hsr_slave_1: entered promiscuous mode [ 194.510220][T14097] debugfs: 'hsr0' already exists in 'hsr' [ 194.510230][T14097] Cannot create hsr debugfs directory [ 194.524829][ T4403] 8021q: adding VLAN 0 to HW filter on device eth8 [ 194.540800][T14162] __nla_validate_parse: 6 callbacks suppressed [ 194.540849][T14162] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3251'. [ 194.546226][T14162] veth0_macvtap: left promiscuous mode [ 194.868832][T14097] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 194.872949][T14097] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 194.873707][T14097] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 194.875358][T14097] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 194.916517][T14097] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 194.919534][T14097] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 194.922976][T14097] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 194.925530][T14097] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 194.935990][ T39] hsr_slave_0: left promiscuous mode [ 194.937194][ T39] hsr_slave_1: left promiscuous mode [ 194.937480][ T39] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 194.937492][ T39] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 194.938556][ T39] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 194.938567][ T39] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 194.946548][ T39] veth1_macvtap: left promiscuous mode [ 194.946594][ T39] veth0_macvtap: left promiscuous mode [ 194.946907][ T39] veth1_vlan: left promiscuous mode [ 194.946950][ T39] veth0_vlan: left promiscuous mode [ 195.149210][ T39] team0 (unregistering): Port device team_slave_1 removed [ 195.154826][ T39] team0 (unregistering): Port device team_slave_0 removed [ 195.216956][ T4403] 8021q: adding VLAN 0 to HW filter on device eth9 [ 195.294718][T14097] 8021q: adding VLAN 0 to HW filter on device bond0 [ 195.319321][T14097] 8021q: adding VLAN 0 to HW filter on device team0 [ 195.322969][T14210] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3257'. [ 195.334666][ T8689] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 195.354590][ T6754] bridge0: port 1(bridge_slave_0) entered blocking state [ 195.354643][ T6754] bridge0: port 1(bridge_slave_0) entered forwarding state [ 195.355191][ T6754] bridge0: port 2(bridge_slave_1) entered blocking state [ 195.355212][ T6754] bridge0: port 2(bridge_slave_1) entered forwarding state [ 195.373478][T14097] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 195.373518][T14097] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 195.424265][T14223] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3262'. [ 195.426069][T14223] netlink: 72 bytes leftover after parsing attributes in process `syz.7.3262'. [ 195.532579][T14242] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3274'. [ 195.532618][T14242] netlink: 72 bytes leftover after parsing attributes in process `syz.5.3274'. [ 195.537623][T14237] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3263'. [ 195.539540][T14237] loop6: detected capacity change from 0 to 512 [ 195.557262][T14237] EXT4-fs: Mount option(s) incompatible with ext2 [ 195.574164][T14246] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3264'. [ 195.586277][T14246] veth0_macvtap: left promiscuous mode [ 195.633989][ T4722] Bluetooth: hci4: command tx timeout [ 195.641527][T14252] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3267'. [ 195.728715][ T4403] 8021q: adding VLAN 0 to HW filter on device eth10 [ 195.740054][T14264] FAULT_INJECTION: forcing a failure. [ 195.740054][T14264] name failslab, interval 1, probability 0, space 0, times 0 [ 195.740097][T14264] CPU: 1 UID: 0 PID: 14264 Comm: syz.5.3269 Tainted: G L syzkaller #0 PREEMPT [ 195.740112][T14264] Tainted: [L]=SOFTLOCKUP [ 195.740117][T14264] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 195.740124][T14264] Call trace: [ 195.740127][T14264] show_stack+0x2c/0x3c (C) [ 195.740145][T14264] __dump_stack+0x30/0x40 [ 195.740156][T14264] dump_stack_lvl+0xd8/0x12c [ 195.740166][T14264] dump_stack+0x1c/0x28 [ 195.740176][T14264] should_fail_ex+0x41c/0x590 [ 195.740184][T14264] should_failslab+0xc4/0x120 [ 195.740192][T14264] __kmalloc_cache_noprof+0x94/0x5ec [ 195.740202][T14264] tcf_proto_create+0x78/0x2e8 [ 195.740211][T14264] tc_new_tfilter+0xc74/0x132c [ 195.740219][T14264] rtnetlink_rcv_msg+0x66c/0x9bc [ 195.740228][T14264] netlink_rcv_skb+0x238/0x414 [ 195.740237][T14264] rtnetlink_rcv+0x28/0x38 [ 195.740245][T14264] netlink_unicast+0x600/0x7f8 [ 195.740253][T14264] netlink_sendmsg+0x648/0x948 [ 195.740262][T14264] __sock_sendmsg+0xc8/0x17c [ 195.740271][T14264] ____sys_sendmsg+0x3d0/0x6c8 [ 195.740280][T14264] ___sys_sendmsg+0x198/0x224 [ 195.740289][T14264] __sys_sendmsg+0x158/0x204 [ 195.740304][T14264] __arm64_sys_sendmsg+0x88/0x9c [ 195.740314][T14264] invoke_syscall+0x98/0x244 [ 195.740325][T14264] el0_svc_common+0xec/0x23c [ 195.740334][T14264] do_el0_svc+0x4c/0x5c [ 195.740344][T14264] el0_svc+0x64/0x260 [ 195.740354][T14264] el0t_64_sync_handler+0x44/0x104 [ 195.740362][T14264] el0t_64_sync+0x198/0x19c [ 195.786119][T14268] loop1: detected capacity change from 0 to 512 [ 195.829662][T14097] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 195.853972][T14268] EXT4-fs (loop1): failed to open journal device unknown-block(0,0) -ENXIO [ 195.982479][T14097] veth0_vlan: entered promiscuous mode [ 195.985214][T14097] veth1_vlan: entered promiscuous mode [ 195.997005][T14097] veth0_macvtap: entered promiscuous mode [ 195.999290][T14097] veth1_macvtap: entered promiscuous mode [ 196.021420][T14097] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 196.041692][T14097] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 196.063505][T14297] syzkaller0: entered promiscuous mode [ 196.064695][T14297] syzkaller0: entered allmulticast mode [ 196.089355][ T13] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.089402][ T13] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.089421][ T13] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.114629][ T4403] 8021q: adding VLAN 0 to HW filter on device eth11 [ 196.117019][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 196.117455][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 196.144021][ T6754] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.146646][ T1353] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 196.146669][ T1353] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 196.203931][T14310] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3278'. [ 196.249739][T14316] FAULT_INJECTION: forcing a failure. [ 196.249739][T14316] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 196.249778][T14316] CPU: 1 UID: 0 PID: 14316 Comm: syz.1.3280 Tainted: G L syzkaller #0 PREEMPT [ 196.249791][T14316] Tainted: [L]=SOFTLOCKUP [ 196.249795][T14316] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 196.249802][T14316] Call trace: [ 196.249805][T14316] show_stack+0x2c/0x3c (C) [ 196.249824][T14316] __dump_stack+0x30/0x40 [ 196.249836][T14316] dump_stack_lvl+0xd8/0x12c [ 196.249846][T14316] dump_stack+0x1c/0x28 [ 196.249856][T14316] should_fail_ex+0x41c/0x590 [ 196.249864][T14316] should_fail+0x14/0x24 [ 196.249871][T14316] should_fail_usercopy+0x20/0x30 [ 196.249878][T14316] _inline_copy_from_user+0x3c/0x174 [ 196.249888][T14316] bpf_test_init+0xd8/0x154 [ 196.249895][T14316] bpf_prog_test_run_xdp+0x408/0xe0c [ 196.249902][T14316] bpf_prog_test_run+0x1e0/0x250 [ 196.249911][T14316] __sys_bpf+0x6bc/0x82c [ 196.249918][T14316] __arm64_sys_bpf+0xd0/0xec [ 196.249924][T14316] invoke_syscall+0x98/0x244 [ 196.249935][T14316] el0_svc_common+0xec/0x23c [ 196.249944][T14316] do_el0_svc+0x4c/0x5c [ 196.249953][T14316] el0_svc+0x64/0x260 [ 196.249963][T14316] el0t_64_sync_handler+0x44/0x104 [ 196.249971][T14316] el0t_64_sync+0x198/0x19c [ 196.417803][T14334] syzkaller0: entered promiscuous mode [ 196.417838][T14334] syzkaller0: entered allmulticast mode [ 196.519658][T14340] bridge0: port 2(bridge_slave_1) entered disabled state [ 196.520281][T14340] bridge0: port 1(bridge_slave_0) entered disabled state [ 196.528120][T14342] netlink: 'syz.7.3291': attribute type 1 has an invalid length. [ 196.549546][T14356] netlink: 'syz.5.3294': attribute type 1 has an invalid length. [ 196.734368][T14380] syzkaller0: entered promiscuous mode [ 196.735767][T14380] syzkaller0: entered allmulticast mode [ 196.843631][T14400] FAULT_INJECTION: forcing a failure. [ 196.843631][T14400] name failslab, interval 1, probability 0, space 0, times 0 [ 196.843674][T14400] CPU: 1 UID: 0 PID: 14400 Comm: syz.5.3313 Tainted: G L syzkaller #0 PREEMPT [ 196.843688][T14400] Tainted: [L]=SOFTLOCKUP [ 196.843692][T14400] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 196.843698][T14400] Call trace: [ 196.843702][T14400] show_stack+0x2c/0x3c (C) [ 196.843722][T14400] __dump_stack+0x30/0x40 [ 196.843734][T14400] dump_stack_lvl+0xd8/0x12c [ 196.843744][T14400] dump_stack+0x1c/0x28 [ 196.843753][T14400] should_fail_ex+0x41c/0x590 [ 196.843761][T14400] should_failslab+0xc4/0x120 [ 196.843770][T14400] kmem_cache_alloc_node_noprof+0x98/0x5f8 [ 196.843781][T14400] __alloc_skb+0x1f0/0x610 [ 196.843792][T14400] pfkey_sendmsg+0x158/0xdf8 [ 196.843802][T14400] __sock_sendmsg+0xc8/0x17c [ 196.843811][T14400] ____sys_sendmsg+0x3d0/0x6c8 [ 196.843820][T14400] ___sys_sendmsg+0x198/0x224 [ 196.843829][T14400] __sys_sendmsg+0x158/0x204 [ 196.843838][T14400] __arm64_sys_sendmsg+0x88/0x9c [ 196.843848][T14400] invoke_syscall+0x98/0x244 [ 196.843858][T14400] el0_svc_common+0xec/0x23c [ 196.843868][T14400] do_el0_svc+0x4c/0x5c [ 196.843877][T14400] el0_svc+0x64/0x260 [ 196.843887][T14400] el0t_64_sync_handler+0x44/0x104 [ 196.843895][T14400] el0t_64_sync+0x198/0x19c [ 196.958176][T14411] FAULT_INJECTION: forcing a failure. [ 196.958176][T14411] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 196.960817][T14411] CPU: 0 UID: 0 PID: 14411 Comm: syz.6.3318 Tainted: G L syzkaller #0 PREEMPT [ 196.960844][T14411] Tainted: [L]=SOFTLOCKUP [ 196.960849][T14411] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 196.960855][T14411] Call trace: [ 196.960859][T14411] show_stack+0x2c/0x3c (C) [ 196.960883][T14411] __dump_stack+0x30/0x40 [ 196.960894][T14411] dump_stack_lvl+0xd8/0x12c [ 196.960904][T14411] dump_stack+0x1c/0x28 [ 196.960914][T14411] should_fail_ex+0x41c/0x590 [ 196.960922][T14411] should_fail+0x14/0x24 [ 196.960929][T14411] should_fail_usercopy+0x20/0x30 [ 196.960936][T14411] _inline_copy_from_user+0x3c/0x174 [ 196.960947][T14411] move_addr_to_kernel+0x88/0x168 [ 196.960956][T14411] __sys_sendto+0x1b0/0x328 [ 196.960965][T14411] __arm64_sys_sendto+0xec/0x10c [ 196.960974][T14411] invoke_syscall+0x98/0x244 [ 196.960984][T14411] el0_svc_common+0xec/0x23c [ 196.960994][T14411] do_el0_svc+0x4c/0x5c [ 196.961003][T14411] el0_svc+0x64/0x260 [ 196.961013][T14411] el0t_64_sync_handler+0x44/0x104 [ 196.961021][T14411] el0t_64_sync+0x198/0x19c [ 197.108435][T14421] team0: entered promiscuous mode [ 197.108471][T14421] team_slave_0: entered promiscuous mode [ 197.108535][T14421] team_slave_1: entered promiscuous mode [ 197.113983][T14421] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 197.121686][T14421] loop1: detected capacity change from 0 to 512 [ 197.123162][T14421] EXT4-fs (loop1): Test dummy encryption mode enabled [ 197.131353][T14421] EXT4-fs (loop1): 1 truncate cleaned up [ 197.131825][T14421] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 197.151685][T12973] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 197.161514][ C0] vcan0: j1939_tp_rxtimer: 0x00000000462635c3: rx timeout, send abort [ 197.222863][T14439] FAULT_INJECTION: forcing a failure. [ 197.222863][T14439] name failslab, interval 1, probability 0, space 0, times 0 [ 197.222903][T14439] CPU: 1 UID: 0 PID: 14439 Comm: syz.1.3326 Tainted: G L syzkaller #0 PREEMPT [ 197.222918][T14439] Tainted: [L]=SOFTLOCKUP [ 197.222922][T14439] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 197.222927][T14439] Call trace: [ 197.222930][T14439] show_stack+0x2c/0x3c (C) [ 197.222950][T14439] __dump_stack+0x30/0x40 [ 197.222961][T14439] dump_stack_lvl+0xd8/0x12c [ 197.222970][T14439] dump_stack+0x1c/0x28 [ 197.222980][T14439] should_fail_ex+0x41c/0x590 [ 197.222988][T14439] should_failslab+0xc4/0x120 [ 197.222996][T14439] __kmalloc_cache_noprof+0x94/0x5ec [ 197.223006][T14439] rtnl_newlink+0x110/0x1144 [ 197.223015][T14439] rtnetlink_rcv_msg+0x66c/0x9bc [ 197.223023][T14439] netlink_rcv_skb+0x238/0x414 [ 197.223033][T14439] rtnetlink_rcv+0x28/0x38 [ 197.223040][T14439] netlink_unicast+0x600/0x7f8 [ 197.223049][T14439] netlink_sendmsg+0x648/0x948 [ 197.223057][T14439] __sock_sendmsg+0xc8/0x17c [ 197.223066][T14439] __sys_sendto+0x250/0x328 [ 197.223075][T14439] __arm64_sys_sendto+0xec/0x10c [ 197.223084][T14439] invoke_syscall+0x98/0x244 [ 197.223094][T14439] el0_svc_common+0xec/0x23c [ 197.223103][T14439] do_el0_svc+0x4c/0x5c [ 197.223113][T14439] el0_svc+0x64/0x260 [ 197.223122][T14439] el0t_64_sync_handler+0x44/0x104 [ 197.223130][T14439] el0t_64_sync+0x198/0x19c [ 197.535804][T14478] FAULT_INJECTION: forcing a failure. [ 197.535804][T14478] name failslab, interval 1, probability 0, space 0, times 0 [ 197.535850][T14478] CPU: 1 UID: 0 PID: 14478 Comm: syz.8.3346 Tainted: G L syzkaller #0 PREEMPT [ 197.535866][T14478] Tainted: [L]=SOFTLOCKUP [ 197.535869][T14478] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 197.535874][T14478] Call trace: [ 197.535877][T14478] show_stack+0x2c/0x3c (C) [ 197.535896][T14478] __dump_stack+0x30/0x40 [ 197.535906][T14478] dump_stack_lvl+0xd8/0x12c [ 197.535916][T14478] dump_stack+0x1c/0x28 [ 197.535926][T14478] should_fail_ex+0x41c/0x590 [ 197.535934][T14478] should_failslab+0xc4/0x120 [ 197.535942][T14478] kmem_cache_alloc_node_noprof+0x98/0x5f8 [ 197.535951][T14478] __alloc_skb+0x1f0/0x610 [ 197.535962][T14478] netlink_ack+0x11c/0x890 [ 197.535971][T14478] netlink_rcv_skb+0x21c/0x414 [ 197.535980][T14478] rtnetlink_rcv+0x28/0x38 [ 197.535988][T14478] netlink_unicast+0x600/0x7f8 [ 197.535996][T14478] netlink_sendmsg+0x648/0x948 [ 197.536005][T14478] __sock_sendmsg+0xc8/0x17c [ 197.536013][T14478] ____sys_sendmsg+0x3f8/0x6c8 [ 197.536022][T14478] ___sys_sendmsg+0x198/0x224 [ 197.536032][T14478] __sys_sendmmsg+0x204/0x580 [ 197.536040][T14478] __arm64_sys_sendmmsg+0xac/0xc8 [ 197.536050][T14478] invoke_syscall+0x98/0x244 [ 197.536060][T14478] el0_svc_common+0xec/0x23c [ 197.536069][T14478] do_el0_svc+0x4c/0x5c [ 197.536079][T14478] el0_svc+0x64/0x260 [ 197.536088][T14478] el0t_64_sync_handler+0x44/0x104 [ 197.536097][T14478] el0t_64_sync+0x198/0x19c [ 197.576897][T14481] syzkaller0: entered promiscuous mode [ 197.578157][T14481] syzkaller0: entered allmulticast mode [ 197.610079][T14483] sctp: [Deprecated]: syz.6.3348 (pid 14483) Use of int in maxseg socket option. [ 197.610079][T14483] Use struct sctp_assoc_value instead [ 197.672777][T14489] syzkaller1: entered allmulticast mode [ 197.675099][T14489] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 197.702905][ C0] vcan0: j1939_tp_rxtimer: 0x00000000462635c3: abort rx timeout. Force session deactivation [ 197.702998][ C0] vcan0: j1939_tp_rxtimer: 0x0000000061f14e0d: rx timeout, send abort [ 197.711187][T14491] loop1: detected capacity change from 0 to 2048 [ 197.715511][T14491] ext2: Unknown parameter 'uid' [ 197.782270][T14494] syzkaller0: left promiscuous mode [ 197.783510][T14494] syzkaller0: left allmulticast mode [ 197.807304][T14500] FAULT_INJECTION: forcing a failure. [ 197.807304][T14500] name failslab, interval 1, probability 0, space 0, times 0 [ 197.810697][T14500] CPU: 0 UID: 0 PID: 14500 Comm: syz.1.3354 Tainted: G L syzkaller #0 PREEMPT [ 197.810723][T14500] Tainted: [L]=SOFTLOCKUP [ 197.810727][T14500] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 197.810732][T14500] Call trace: [ 197.810735][T14500] show_stack+0x2c/0x3c (C) [ 197.810755][T14500] __dump_stack+0x30/0x40 [ 197.810766][T14500] dump_stack_lvl+0xd8/0x12c [ 197.810776][T14500] dump_stack+0x1c/0x28 [ 197.810785][T14500] should_fail_ex+0x41c/0x590 [ 197.810794][T14500] should_failslab+0xc4/0x120 [ 197.810802][T14500] kmem_cache_alloc_node_noprof+0x98/0x5f8 [ 197.810810][T14500] __alloc_skb+0x1f0/0x610 [ 197.810820][T14500] netlink_ack+0x11c/0x890 [ 197.810830][T14500] netlink_rcv_skb+0x21c/0x414 [ 197.810839][T14500] rtnetlink_rcv+0x28/0x38 [ 197.810847][T14500] netlink_unicast+0x600/0x7f8 [ 197.810855][T14500] netlink_sendmsg+0x648/0x948 [ 197.810864][T14500] __sock_sendmsg+0xc8/0x17c [ 197.810873][T14500] ____sys_sendmsg+0x3f8/0x6c8 [ 197.810881][T14500] ___sys_sendmsg+0x198/0x224 [ 197.810890][T14500] __sys_sendmmsg+0x204/0x580 [ 197.810900][T14500] __arm64_sys_sendmmsg+0xac/0xc8 [ 197.810909][T14500] invoke_syscall+0x98/0x244 [ 197.810919][T14500] el0_svc_common+0xec/0x23c [ 197.810929][T14500] do_el0_svc+0x4c/0x5c [ 197.810938][T14500] el0_svc+0x64/0x260 [ 197.810947][T14500] el0t_64_sync_handler+0x44/0x104 [ 197.810956][T14500] el0t_64_sync+0x198/0x19c [ 197.883626][T14509] loop5: detected capacity change from 0 to 512 [ 197.886154][ T4722] Bluetooth: hci4: command tx timeout [ 197.897559][T14509] EXT4-fs (loop5): couldn't mount as ext2 due to feature incompatibilities [ 197.900997][T14509] FAULT_INJECTION: forcing a failure. [ 197.900997][T14509] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 197.901038][T14509] CPU: 1 UID: 0 PID: 14509 Comm: syz.5.3357 Tainted: G L syzkaller #0 PREEMPT [ 197.901053][T14509] Tainted: [L]=SOFTLOCKUP [ 197.901058][T14509] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 197.901063][T14509] Call trace: [ 197.901066][T14509] show_stack+0x2c/0x3c (C) [ 197.901087][T14509] __dump_stack+0x30/0x40 [ 197.901098][T14509] dump_stack_lvl+0xd8/0x12c [ 197.901108][T14509] dump_stack+0x1c/0x28 [ 197.901118][T14509] should_fail_ex+0x41c/0x590 [ 197.901126][T14509] should_fail+0x14/0x24 [ 197.901133][T14509] should_fail_usercopy+0x20/0x30 [ 197.901140][T14509] _inline_copy_from_user+0x3c/0x174 [ 197.901151][T14509] copy_msghdr_from_user+0xb8/0x194 [ 197.901161][T14509] ___sys_sendmsg+0x14c/0x224 [ 197.901171][T14509] __sys_sendmmsg+0x204/0x580 [ 197.901180][T14509] __arm64_sys_sendmmsg+0xac/0xc8 [ 197.901189][T14509] invoke_syscall+0x98/0x244 [ 197.901199][T14509] el0_svc_common+0xec/0x23c [ 197.901209][T14509] do_el0_svc+0x4c/0x5c [ 197.901218][T14509] el0_svc+0x64/0x260 [ 197.901228][T14509] el0t_64_sync_handler+0x44/0x104 [ 197.901236][T14509] el0t_64_sync+0x198/0x19c [ 197.996304][T14526] netlink: 'syz.7.3364': attribute type 11 has an invalid length. [ 197.996343][T14526] netlink: 'syz.7.3364': attribute type 4 has an invalid length. [ 198.002204][T14526] loop7: detected capacity change from 0 to 256 [ 198.071763][T14533] loop7: detected capacity change from 0 to 2048 [ 198.133019][T14537] loop7: detected capacity change from 0 to 2048 [ 198.216620][ C0] vcan0: j1939_tp_rxtimer: 0x00000000fc54cb67: rx timeout, send abort [ 198.244428][ C0] vcan0: j1939_tp_rxtimer: 0x0000000061f14e0d: abort rx timeout. Force session deactivation [ 198.758135][ C0] vcan0: j1939_tp_rxtimer: 0x00000000bc9d2021: rx timeout, send abort [ 198.758197][ C0] vcan0: j1939_tp_rxtimer: 0x00000000fc54cb67: abort rx timeout. Force session deactivation [ 198.760306][T14502] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 198.760361][T14502] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 198.765419][T14502] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 198.765460][T14502] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 198.768100][T14502] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 198.770338][T14502] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 198.772019][T14502] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 198.775193][T14502] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 198.776919][T14502] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 198.776952][T14502] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 198.790920][T14502] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 198.792936][T14502] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 198.792973][T14502] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 198.796431][T14502] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 198.798546][T14502] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 198.798625][T14502] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 198.801662][T14502] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 198.923768][T14555] FAULT_INJECTION: forcing a failure. [ 198.923768][T14555] name failslab, interval 1, probability 0, space 0, times 0 [ 198.923811][T14555] CPU: 1 UID: 0 PID: 14555 Comm: syz.5.3376 Tainted: G L syzkaller #0 PREEMPT [ 198.923827][T14555] Tainted: [L]=SOFTLOCKUP [ 198.923831][T14555] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 198.923837][T14555] Call trace: [ 198.923840][T14555] show_stack+0x2c/0x3c (C) [ 198.923858][T14555] __dump_stack+0x30/0x40 [ 198.923870][T14555] dump_stack_lvl+0xd8/0x12c [ 198.923879][T14555] dump_stack+0x1c/0x28 [ 198.923889][T14555] should_fail_ex+0x41c/0x590 [ 198.923897][T14555] should_failslab+0xc4/0x120 [ 198.923906][T14555] __kmalloc_noprof+0x108/0x6b8 [ 198.923916][T14555] genl_family_rcv_msg_attrs_parse+0xcc/0x27c [ 198.923928][T14555] genl_family_rcv_msg_doit+0xd8/0x2d4 [ 198.923938][T14555] genl_rcv_msg+0x43c/0x620 [ 198.923947][T14555] netlink_rcv_skb+0x238/0x414 [ 198.923956][T14555] genl_rcv+0x38/0x50 [ 198.923965][T14555] netlink_unicast+0x600/0x7f8 [ 198.923974][T14555] netlink_sendmsg+0x648/0x948 [ 198.923982][T14555] __sock_sendmsg+0xc8/0x17c [ 198.923992][T14555] ____sys_sendmsg+0x3d0/0x6c8 [ 198.924001][T14555] ___sys_sendmsg+0x198/0x224 [ 198.924010][T14555] __sys_sendmsg+0x158/0x204 [ 198.924019][T14555] __arm64_sys_sendmsg+0x88/0x9c [ 198.924032][T14555] invoke_syscall+0x98/0x244 [ 198.924043][T14555] el0_svc_common+0xec/0x23c [ 198.924053][T14555] do_el0_svc+0x4c/0x5c [ 198.924063][T14555] el0_svc+0x64/0x260 [ 198.924072][T14555] el0t_64_sync_handler+0x44/0x104 [ 198.924081][T14555] el0t_64_sync+0x198/0x19c [ 199.170260][T14566] FAULT_INJECTION: forcing a failure. [ 199.170260][T14566] name failslab, interval 1, probability 0, space 0, times 0 [ 199.170306][T14566] CPU: 0 UID: 0 PID: 14566 Comm: syz.5.3380 Tainted: G L syzkaller #0 PREEMPT [ 199.170322][T14566] Tainted: [L]=SOFTLOCKUP [ 199.170326][T14566] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 199.170332][T14566] Call trace: [ 199.170336][T14566] show_stack+0x2c/0x3c (C) [ 199.170357][T14566] __dump_stack+0x30/0x40 [ 199.170369][T14566] dump_stack_lvl+0xd8/0x12c [ 199.170379][T14566] dump_stack+0x1c/0x28 [ 199.170389][T14566] should_fail_ex+0x41c/0x590 [ 199.170398][T14566] should_failslab+0xc4/0x120 [ 199.170407][T14566] kmem_cache_alloc_noprof+0x94/0x5d8 [ 199.170416][T14566] skb_clone+0x1ac/0x320 [ 199.170427][T14566] pfkey_broadcast_one+0x90/0x2cc [ 199.170436][T14566] pfkey_broadcast+0x384/0x3c4 [ 199.170445][T14566] unicast_flush_resp+0xd8/0x14c [ 199.170454][T14566] pfkey_flush+0x120/0x2f4 [ 199.170462][T14566] pfkey_sendmsg+0x9f4/0xdf8 [ 199.170471][T14566] __sock_sendmsg+0xc8/0x17c [ 199.170479][T14566] ____sys_sendmsg+0x3d0/0x6c8 [ 199.170489][T14566] ___sys_sendmsg+0x198/0x224 [ 199.170498][T14566] __sys_sendmsg+0x158/0x204 [ 199.170507][T14566] __arm64_sys_sendmsg+0x88/0x9c [ 199.170516][T14566] invoke_syscall+0x98/0x244 [ 199.170526][T14566] el0_svc_common+0xec/0x23c [ 199.170536][T14566] do_el0_svc+0x4c/0x5c [ 199.170545][T14566] el0_svc+0x64/0x260 [ 199.170555][T14566] el0t_64_sync_handler+0x44/0x104 [ 199.170563][T14566] el0t_64_sync+0x198/0x19c [ 199.299709][ C0] vcan0: j1939_tp_rxtimer: 0x00000000bc9d2021: abort rx timeout. Force session deactivation [ 199.316910][T14577] syzkaller1: entered allmulticast mode [ 199.605825][T14591] syzkaller0: entered promiscuous mode [ 199.608347][T14591] syzkaller0: entered allmulticast mode [ 199.615915][ C0] vcan0: j1939_tp_rxtimer: 0x00000000cebebae3: rx timeout, send abort [ 199.631343][T14593] loop5: detected capacity change from 0 to 4096 [ 199.632070][T14593] EXT4-fs: inline encryption not supported [ 199.634119][T14593] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 199.636207][T14593] EXT4-fs (loop5): Test dummy encryption mode enabled [ 199.641211][T14593] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 199.641276][T14593] System zones: 0-5 [ 199.647178][T14593] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 199.728382][T13473] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 199.835224][T14603] sctp: [Deprecated]: syz.1.3393 (pid 14603) Use of int in max_burst socket option deprecated. [ 199.835224][T14603] Use struct sctp_assoc_value instead [ 199.979164][T14622] bridge0: port 1(bridge_slave_0) entered disabled state [ 200.028410][T14630] loop1: detected capacity change from 0 to 512 [ 200.047953][T14632] loop6: detected capacity change from 0 to 2048 [ 200.050433][T14635] FAULT_INJECTION: forcing a failure. [ 200.050433][T14635] name failslab, interval 1, probability 0, space 0, times 0 [ 200.054518][T14635] CPU: 0 UID: 0 PID: 14635 Comm: syz.5.3407 Tainted: G L syzkaller #0 PREEMPT [ 200.054550][T14635] Tainted: [L]=SOFTLOCKUP [ 200.054555][T14635] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 200.054563][T14635] Call trace: [ 200.054567][T14635] show_stack+0x2c/0x3c (C) [ 200.054588][T14635] __dump_stack+0x30/0x40 [ 200.054599][T14635] dump_stack_lvl+0xd8/0x12c [ 200.054609][T14635] dump_stack+0x1c/0x28 [ 200.054619][T14635] should_fail_ex+0x41c/0x590 [ 200.054627][T14635] should_failslab+0xc4/0x120 [ 200.054636][T14635] __kmalloc_noprof+0x108/0x6b8 [ 200.054645][T14635] bpf_test_init+0xa8/0x154 [ 200.054653][T14635] bpf_prog_test_run_skb+0x2a0/0x1ed0 [ 200.054660][T14635] bpf_prog_test_run+0x1e0/0x250 [ 200.054669][T14635] __sys_bpf+0x6bc/0x82c [ 200.054675][T14635] __arm64_sys_bpf+0xd0/0xec [ 200.054682][T14635] invoke_syscall+0x98/0x244 [ 200.054692][T14635] el0_svc_common+0xec/0x23c [ 200.054702][T14635] do_el0_svc+0x4c/0x5c [ 200.054711][T14635] el0_svc+0x64/0x260 [ 200.054721][T14635] el0t_64_sync_handler+0x44/0x104 [ 200.054729][T14635] el0t_64_sync+0x198/0x19c [ 200.137843][ T4722] Bluetooth: hci1: command 0x0406 tx timeout [ 200.151386][T14632] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 200.157541][ C0] vcan0: j1939_tp_rxtimer: 0x00000000adcece8f: rx timeout, send abort [ 200.157619][ C0] vcan0: j1939_tp_rxtimer: 0x00000000cebebae3: abort rx timeout. Force session deactivation [ 200.201563][T14643] FAULT_INJECTION: forcing a failure. [ 200.201563][T14643] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 200.201609][T14643] CPU: 1 UID: 0 PID: 14643 Comm: syz.1.3409 Tainted: G L syzkaller #0 PREEMPT [ 200.201626][T14643] Tainted: [L]=SOFTLOCKUP [ 200.201630][T14643] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 200.201636][T14643] Call trace: [ 200.201639][T14643] show_stack+0x2c/0x3c (C) [ 200.201660][T14643] __dump_stack+0x30/0x40 [ 200.201671][T14643] dump_stack_lvl+0xd8/0x12c [ 200.201681][T14643] dump_stack+0x1c/0x28 [ 200.201690][T14643] should_fail_ex+0x41c/0x590 [ 200.201698][T14643] should_fail+0x14/0x24 [ 200.201705][T14643] should_fail_usercopy+0x20/0x30 [ 200.201712][T14643] bpf_test_finish+0x730/0xa70 [ 200.201721][T14643] bpf_prog_test_run_skb+0x100c/0x1ed0 [ 200.201728][T14643] bpf_prog_test_run+0x1e0/0x250 [ 200.201737][T14643] __sys_bpf+0x6bc/0x82c [ 200.201744][T14643] __arm64_sys_bpf+0xd0/0xec [ 200.201750][T14643] invoke_syscall+0x98/0x244 [ 200.201760][T14643] el0_svc_common+0xec/0x23c [ 200.201770][T14643] do_el0_svc+0x4c/0x5c [ 200.201779][T14643] el0_svc+0x64/0x260 [ 200.201789][T14643] el0t_64_sync_handler+0x44/0x104 [ 200.201797][T14643] el0t_64_sync+0x198/0x19c [ 200.286068][T14650] __nla_validate_parse: 21 callbacks suppressed [ 200.287558][T14650] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3411'. [ 200.294751][T14649] Unsupported ieee802154 address type: 0 [ 200.411230][T14657] input: syz1 as /devices/virtual/input/input4 [ 200.469373][T14659] syzkaller0: entered promiscuous mode [ 200.469438][T14659] syzkaller0: entered allmulticast mode [ 200.625663][T14675] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3423'. [ 200.699249][ C0] vcan0: j1939_tp_rxtimer: 0x00000000adcece8f: abort rx timeout. Force session deactivation [ 200.807532][T14692] syzkaller0: entered promiscuous mode [ 200.808630][T14692] syzkaller0: entered allmulticast mode [ 200.889593][ C0] vcan0: j1939_tp_rxtimer: 0x00000000e23d65ba: rx timeout, send abort [ 200.952985][T14696] syzkaller0: entered promiscuous mode [ 200.954381][T14696] syzkaller0: entered allmulticast mode [ 201.004565][ T4722] Bluetooth: hci4: command 0x0419 tx timeout [ 201.004626][ T4722] Bluetooth: hci2: command 0x0c1a tx timeout [ 201.004666][ T4722] Bluetooth: hci0: command 0x0c1a tx timeout [ 201.004689][ T4722] Bluetooth: hci5: command 0x0c1a tx timeout [ 201.004712][ T4722] Bluetooth: hci3: command 0x0c1a tx timeout [ 201.037971][ T8689] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 201.094465][T14702] loop1: detected capacity change from 0 to 4096 [ 201.108341][ T1520] IPVS: starting estimator thread 0... [ 201.114155][T14710] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3436'. [ 201.135432][T14702] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 201.199436][T14711] IPVS: using max 65 ests per chain, 156000 per kthread [ 201.203080][T12973] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 201.214640][T14716] FAULT_INJECTION: forcing a failure. [ 201.214640][T14716] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 201.215844][T14716] CPU: 1 UID: 0 PID: 14716 Comm: syz.6.3440 Tainted: G L syzkaller #0 PREEMPT [ 201.215865][T14716] Tainted: [L]=SOFTLOCKUP [ 201.215869][T14716] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 201.215874][T14716] Call trace: [ 201.215877][T14716] show_stack+0x2c/0x3c (C) [ 201.215899][T14716] __dump_stack+0x30/0x40 [ 201.215911][T14716] dump_stack_lvl+0xd8/0x12c [ 201.215921][T14716] dump_stack+0x1c/0x28 [ 201.215931][T14716] should_fail_ex+0x41c/0x590 [ 201.215939][T14716] should_fail+0x14/0x24 [ 201.215945][T14716] should_fail_usercopy+0x20/0x30 [ 201.215952][T14716] _inline_copy_from_user+0x3c/0x174 [ 201.215961][T14716] kstrtouint_from_user+0xcc/0x174 [ 201.215969][T14716] proc_fail_nth_write+0x9c/0x234 [ 201.215978][T14716] vfs_write+0x2a4/0xa0c [ 201.215985][T14716] ksys_write+0x12c/0x228 [ 201.215992][T14716] __arm64_sys_write+0x84/0x98 [ 201.215999][T14716] invoke_syscall+0x98/0x244 [ 201.216009][T14716] el0_svc_common+0xec/0x23c [ 201.216019][T14716] do_el0_svc+0x4c/0x5c [ 201.216028][T14716] el0_svc+0x64/0x260 [ 201.216038][T14716] el0t_64_sync_handler+0x44/0x104 [ 201.216046][T14716] el0t_64_sync+0x198/0x19c [ 201.339413][T14720] FAULT_INJECTION: forcing a failure. [ 201.339413][T14720] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 201.339459][T14720] CPU: 0 UID: 0 PID: 14720 Comm: syz.8.3443 Tainted: G L syzkaller #0 PREEMPT [ 201.339481][T14720] Tainted: [L]=SOFTLOCKUP [ 201.339485][T14720] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 201.339490][T14720] Call trace: [ 201.339494][T14720] show_stack+0x2c/0x3c (C) [ 201.339513][T14720] __dump_stack+0x30/0x40 [ 201.339524][T14720] dump_stack_lvl+0xd8/0x12c [ 201.339535][T14720] dump_stack+0x1c/0x28 [ 201.339545][T14720] should_fail_ex+0x41c/0x590 [ 201.339553][T14720] should_fail+0x14/0x24 [ 201.339560][T14720] should_fail_usercopy+0x20/0x30 [ 201.339567][T14720] set_fd_set+0x48/0xb8 [ 201.339575][T14720] core_sys_select+0x824/0x9e4 [ 201.339582][T14720] __arm64_sys_pselect6+0x2f0/0x39c [ 201.339589][T14720] invoke_syscall+0x98/0x244 [ 201.339599][T14720] el0_svc_common+0xec/0x23c [ 201.339609][T14720] do_el0_svc+0x4c/0x5c [ 201.339618][T14720] el0_svc+0x64/0x260 [ 201.339628][T14720] el0t_64_sync_handler+0x44/0x104 [ 201.339636][T14720] el0t_64_sync+0x198/0x19c [ 201.369466][T14737] FAULT_INJECTION: forcing a failure. [ 201.369466][T14737] name failslab, interval 1, probability 0, space 0, times 0 [ 201.376697][T14737] CPU: 1 UID: 0 PID: 14737 Comm: syz.6.3447 Tainted: G L syzkaller #0 PREEMPT [ 201.376719][T14737] Tainted: [L]=SOFTLOCKUP [ 201.376723][T14737] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 201.376728][T14737] Call trace: [ 201.376731][T14737] show_stack+0x2c/0x3c (C) [ 201.376750][T14737] __dump_stack+0x30/0x40 [ 201.376760][T14737] dump_stack_lvl+0xd8/0x12c [ 201.376770][T14737] dump_stack+0x1c/0x28 [ 201.376779][T14737] should_fail_ex+0x41c/0x590 [ 201.376787][T14737] should_failslab+0xc4/0x120 [ 201.376796][T14737] kmem_cache_alloc_noprof+0x94/0x5d8 [ 201.376804][T14737] skb_clone+0x1ac/0x320 [ 201.376815][T14737] __netlink_deliver_tap+0x364/0x6f4 [ 201.376825][T14737] netlink_deliver_tap+0x1d8/0x1dc [ 201.376834][T14737] __netlink_sendskb+0x78/0xd0 [ 201.376842][T14737] netlink_dump+0x7a4/0xb6c [ 201.376851][T14737] __netlink_dump_start+0x4c4/0x6f8 [ 201.376859][T14737] rtnetlink_rcv_msg+0x830/0x9bc [ 201.376868][T14737] netlink_rcv_skb+0x238/0x414 [ 201.376876][T14737] rtnetlink_rcv+0x28/0x38 [ 201.376884][T14737] netlink_unicast+0x600/0x7f8 [ 201.376892][T14737] netlink_sendmsg+0x648/0x948 [ 201.376901][T14737] __sock_sendmsg+0xc8/0x17c [ 201.376910][T14737] ____sys_sendmsg+0x3d0/0x6c8 [ 201.376919][T14737] ___sys_sendmsg+0x198/0x224 [ 201.376928][T14737] __sys_sendmsg+0x158/0x204 [ 201.376937][T14737] __arm64_sys_sendmsg+0x88/0x9c [ 201.376946][T14737] invoke_syscall+0x98/0x244 [ 201.376956][T14737] el0_svc_common+0xec/0x23c [ 201.376966][T14737] do_el0_svc+0x4c/0x5c [ 201.376975][T14737] el0_svc+0x64/0x260 [ 201.376985][T14737] el0t_64_sync_handler+0x44/0x104 [ 201.376993][T14737] el0t_64_sync+0x198/0x19c [ 201.426446][T14742] syzkaller0: entered promiscuous mode [ 201.426480][T14742] syzkaller0: entered allmulticast mode [ 201.431311][ C0] vcan0: j1939_tp_rxtimer: 0x000000003d9bbb4c: rx timeout, send abort [ 201.431357][ C0] vcan0: j1939_tp_rxtimer: 0x00000000e23d65ba: abort rx timeout. Force session deactivation [ 201.540814][T14756] loop5: detected capacity change from 0 to 512 [ 201.557907][T14759] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3451'. [ 201.572323][T14756] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 201.574620][T14756] EXT4-fs (loop5): shut down requested (2) [ 201.593803][T14753] FAULT_INJECTION: forcing a failure. [ 201.593803][T14753] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 201.593843][T14753] CPU: 0 UID: 0 PID: 14753 Comm: syz.6.3452 Tainted: G L syzkaller #0 PREEMPT [ 201.593860][T14753] Tainted: [L]=SOFTLOCKUP [ 201.593864][T14753] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 201.593869][T14753] Call trace: [ 201.593872][T14753] show_stack+0x2c/0x3c (C) [ 201.593891][T14753] __dump_stack+0x30/0x40 [ 201.593902][T14753] dump_stack_lvl+0xd8/0x12c [ 201.593912][T14753] dump_stack+0x1c/0x28 [ 201.593921][T14753] should_fail_ex+0x41c/0x590 [ 201.593929][T14753] should_fail+0x14/0x24 [ 201.593936][T14753] should_fail_usercopy+0x20/0x30 [ 201.593943][T14753] _inline_copy_from_user+0x3c/0x174 [ 201.593955][T14753] copy_msghdr_from_user+0xb8/0x194 [ 201.593965][T14753] ___sys_recvmsg+0x11c/0x1f4 [ 201.593974][T14753] do_recvmmsg+0x288/0x7d4 [ 201.593983][T14753] __sys_recvmmsg+0x1e0/0x270 [ 201.593992][T14753] __arm64_sys_recvmmsg+0xe0/0x108 [ 201.594002][T14753] invoke_syscall+0x98/0x244 [ 201.594012][T14753] el0_svc_common+0xec/0x23c [ 201.594021][T14753] do_el0_svc+0x4c/0x5c [ 201.594031][T14753] el0_svc+0x64/0x260 [ 201.594040][T14753] el0t_64_sync_handler+0x44/0x104 [ 201.594049][T14753] el0t_64_sync+0x198/0x19c [ 201.631933][T13473] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 201.674451][T14777] syzkaller0: entered promiscuous mode [ 201.675792][T14777] syzkaller0: entered allmulticast mode [ 201.692359][T14780] FAULT_INJECTION: forcing a failure. [ 201.692359][T14780] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 201.692402][T14780] CPU: 1 UID: 0 PID: 14780 Comm: syz.6.3458 Tainted: G L syzkaller #0 PREEMPT [ 201.692417][T14780] Tainted: [L]=SOFTLOCKUP [ 201.692421][T14780] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 201.692426][T14780] Call trace: [ 201.692429][T14780] show_stack+0x2c/0x3c (C) [ 201.692450][T14780] __dump_stack+0x30/0x40 [ 201.692461][T14780] dump_stack_lvl+0xd8/0x12c [ 201.692471][T14780] dump_stack+0x1c/0x28 [ 201.692480][T14780] should_fail_ex+0x41c/0x590 [ 201.692488][T14780] should_fail+0x14/0x24 [ 201.692495][T14780] should_fail_usercopy+0x20/0x30 [ 201.692502][T14780] _inline_copy_from_user+0x3c/0x174 [ 201.692513][T14780] copy_msghdr_from_user+0xb8/0x194 [ 201.692523][T14780] ___sys_sendmsg+0x14c/0x224 [ 201.692532][T14780] __sys_sendmsg+0x158/0x204 [ 201.692541][T14780] __arm64_sys_sendmsg+0x88/0x9c [ 201.692551][T14780] invoke_syscall+0x98/0x244 [ 201.692561][T14780] el0_svc_common+0xec/0x23c [ 201.692570][T14780] do_el0_svc+0x4c/0x5c [ 201.692580][T14780] el0_svc+0x64/0x260 [ 201.692590][T14780] el0t_64_sync_handler+0x44/0x104 [ 201.692598][T14780] el0t_64_sync+0x198/0x19c [ 201.773701][ T12] netdevsim netdevsim10 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.945456][T14816] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3465'. [ 201.973071][ C0] vcan0: j1939_tp_rxtimer: 0x000000003d9bbb4c: abort rx timeout. Force session deactivation [ 202.278976][T14865] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3476'. [ 202.308900][T14867] syzkaller0: entered promiscuous mode [ 202.310208][T14867] syzkaller0: entered allmulticast mode [ 202.391068][T14873] team0: left promiscuous mode [ 202.392233][ T4725] Bluetooth: hci1: command 0x0406 tx timeout [ 202.393976][T14873] team_slave_0: left promiscuous mode [ 202.394049][T14873] team_slave_1: left promiscuous mode [ 202.394420][T14873] 8021q: adding VLAN 0 to HW filter on device team0 [ 202.399111][T14873] bridge0: port 1(bridge_slave_0) entered blocking state [ 202.399192][T14873] bridge0: port 1(bridge_slave_0) entered forwarding state [ 202.431176][T14873] syzkaller0: left promiscuous mode [ 202.610277][T14889] FAULT_INJECTION: forcing a failure. [ 202.610277][T14889] name failslab, interval 1, probability 0, space 0, times 0 [ 202.610319][T14889] CPU: 1 UID: 0 PID: 14889 Comm: syz.7.3486 Tainted: G L syzkaller #0 PREEMPT [ 202.610336][T14889] Tainted: [L]=SOFTLOCKUP [ 202.610340][T14889] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 202.610345][T14889] Call trace: [ 202.610349][T14889] show_stack+0x2c/0x3c (C) [ 202.610369][T14889] __dump_stack+0x30/0x40 [ 202.610380][T14889] dump_stack_lvl+0xd8/0x12c [ 202.610391][T14889] dump_stack+0x1c/0x28 [ 202.610400][T14889] should_fail_ex+0x41c/0x590 [ 202.610408][T14889] should_failslab+0xc4/0x120 [ 202.610417][T14889] kmem_cache_alloc_node_noprof+0x98/0x5f8 [ 202.610426][T14889] __alloc_skb+0x1f0/0x610 [ 202.610436][T14889] netlink_alloc_large_skb+0xd4/0x114 [ 202.610446][T14889] netlink_sendmsg+0x4c4/0x948 [ 202.610455][T14889] __sock_sendmsg+0xc8/0x17c [ 202.610464][T14889] ____sys_sendmsg+0x3d0/0x6c8 [ 202.610473][T14889] ___sys_sendmsg+0x198/0x224 [ 202.610482][T14889] __sys_sendmsg+0x158/0x204 [ 202.610491][T14889] __arm64_sys_sendmsg+0x88/0x9c [ 202.610501][T14889] invoke_syscall+0x98/0x244 [ 202.610511][T14889] el0_svc_common+0xec/0x23c [ 202.610520][T14889] do_el0_svc+0x4c/0x5c [ 202.610530][T14889] el0_svc+0x64/0x260 [ 202.610539][T14889] el0t_64_sync_handler+0x44/0x104 [ 202.610547][T14889] el0t_64_sync+0x198/0x19c [ 202.645246][T14892] sctp: [Deprecated]: syz.1.3487 (pid 14892) Use of int in max_burst socket option. [ 202.645246][T14892] Use struct sctp_assoc_value instead [ 202.699282][T14901] loop7: detected capacity change from 0 to 256 [ 202.721843][T14901] FAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 202.800759][T14909] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3493'. [ 202.802317][T14910] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3493'. [ 202.802335][T14910] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3493'. [ 202.808873][T14910] geneve2: entered promiscuous mode [ 202.808902][T14910] geneve2: entered allmulticast mode [ 202.839482][T14902] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 202.839517][T14902] FAT-fs (loop7): Filesystem has been set read-only [ 202.840211][T14902] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 202.986814][T14932] loop7: detected capacity change from 0 to 512 [ 202.989291][T14932] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 203.007724][T14932] EXT4-fs (loop7): 1 truncate cleaned up [ 203.011400][T14932] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 203.016204][T14932] EXT4-fs (loop7): shut down requested (2) [ 203.029728][T11607] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 203.050374][T14935] loop5: detected capacity change from 0 to 512 [ 203.054915][T14937] syzkaller0: entered promiscuous mode [ 203.056254][T14937] syzkaller0: entered allmulticast mode [ 203.106713][T14935] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 203.109461][T14935] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 203.132424][T13473] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 203.185083][T14950] FAULT_INJECTION: forcing a failure. [ 203.185083][T14950] name failslab, interval 1, probability 0, space 0, times 0 [ 203.187849][T14950] CPU: 0 UID: 0 PID: 14950 Comm: syz.7.3510 Tainted: G L syzkaller #0 PREEMPT [ 203.187869][T14950] Tainted: [L]=SOFTLOCKUP [ 203.187873][T14950] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 203.187878][T14950] Call trace: [ 203.187882][T14950] show_stack+0x2c/0x3c (C) [ 203.187907][T14950] __dump_stack+0x30/0x40 [ 203.187919][T14950] dump_stack_lvl+0xd8/0x12c [ 203.187929][T14950] dump_stack+0x1c/0x28 [ 203.187939][T14950] should_fail_ex+0x41c/0x590 [ 203.187947][T14950] should_failslab+0xc4/0x120 [ 203.187955][T14950] __kmalloc_cache_node_noprof+0x98/0x60c [ 203.187965][T14950] page_pool_create_percpu+0x90/0xb10 [ 203.187975][T14950] page_pool_create+0x24/0x34 [ 203.187983][T14950] bpf_test_run_xdp_live+0x1a8/0x1770 [ 203.187992][T14950] bpf_prog_test_run_xdp+0x634/0xe0c [ 203.187999][T14950] bpf_prog_test_run+0x1e0/0x250 [ 203.188008][T14950] __sys_bpf+0x6bc/0x82c [ 203.188015][T14950] __arm64_sys_bpf+0xd0/0xec [ 203.188021][T14950] invoke_syscall+0x98/0x244 [ 203.188031][T14950] el0_svc_common+0xec/0x23c [ 203.188041][T14950] do_el0_svc+0x4c/0x5c [ 203.188050][T14950] el0_svc+0x64/0x260 [ 203.188059][T14950] el0t_64_sync_handler+0x44/0x104 [ 203.188068][T14950] el0t_64_sync+0x198/0x19c [ 203.208683][T14951] FAULT_INJECTION: forcing a failure. [ 203.208683][T14951] name failslab, interval 1, probability 0, space 0, times 0 [ 203.208705][T14951] CPU: 1 UID: 0 PID: 14951 Comm: syz.5.3507 Tainted: G L syzkaller #0 PREEMPT [ 203.208716][T14951] Tainted: [L]=SOFTLOCKUP [ 203.208719][T14951] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 203.208724][T14951] Call trace: [ 203.208727][T14951] show_stack+0x2c/0x3c (C) [ 203.208746][T14951] __dump_stack+0x30/0x40 [ 203.208757][T14951] dump_stack_lvl+0xd8/0x12c [ 203.208766][T14951] dump_stack+0x1c/0x28 [ 203.208776][T14951] should_fail_ex+0x41c/0x590 [ 203.208784][T14951] should_failslab+0xc4/0x120 [ 203.208792][T14951] __kmalloc_cache_noprof+0x94/0x5ec [ 203.208801][T14951] route4_init+0x54/0x94 [ 203.208810][T14951] tcf_proto_create+0x1f8/0x2e8 [ 203.208820][T14951] tc_new_tfilter+0xc74/0x132c [ 203.208828][T14951] rtnetlink_rcv_msg+0x66c/0x9bc [ 203.208837][T14951] netlink_rcv_skb+0x238/0x414 [ 203.208846][T14951] rtnetlink_rcv+0x28/0x38 [ 203.208853][T14951] netlink_unicast+0x600/0x7f8 [ 203.208861][T14951] netlink_sendmsg+0x648/0x948 [ 203.208870][T14951] __sock_sendmsg+0xc8/0x17c [ 203.208879][T14951] ____sys_sendmsg+0x3d0/0x6c8 [ 203.208888][T14951] ___sys_sendmsg+0x198/0x224 [ 203.208897][T14951] __sys_sendmsg+0x158/0x204 [ 203.208906][T14951] __arm64_sys_sendmsg+0x88/0x9c [ 203.208915][T14951] invoke_syscall+0x98/0x244 [ 203.208926][T14951] el0_svc_common+0xec/0x23c [ 203.208935][T14951] do_el0_svc+0x4c/0x5c [ 203.208945][T14951] el0_svc+0x64/0x260 [ 203.208954][T14951] el0t_64_sync_handler+0x44/0x104 [ 203.208962][T14951] el0t_64_sync+0x198/0x19c [ 203.237660][T14953] bridge0: port 3(veth1_virt_wifi) entered blocking state [ 203.237742][T14953] bridge0: port 3(veth1_virt_wifi) entered disabled state [ 203.237830][T14953] veth1_virt_wifi: entered allmulticast mode [ 203.238601][T14953] veth1_virt_wifi: left allmulticast mode [ 203.240805][T14953] loop6: detected capacity change from 0 to 8 [ 203.252634][T14953] squashfs: SQUASHFS error: Xattrs in filesystem, these will be ignored [ 203.252645][T14953] unable to read xattr id index table [ 203.253030][T14953] SQUASHFS error: zlib decompression failed, data probably corrupt [ 203.253043][T14953] SQUASHFS error: Failed to read block 0x9b: -5 [ 203.253050][T14953] SQUASHFS error: Unable to read metadata cache entry [99] [ 203.253056][T14953] SQUASHFS error: Unable to read inode 0x127 [ 203.258064][ T4725] Bluetooth: hci3: command 0x0c1a tx timeout [ 203.258085][ T4725] Bluetooth: hci5: command 0x0c1a tx timeout [ 203.258103][ T4725] Bluetooth: hci0: command 0x0c1a tx timeout [ 203.258118][ T4725] Bluetooth: hci2: command 0x0c1a tx timeout [ 203.258133][ T4725] Bluetooth: hci4: command 0x0419 tx timeout [ 203.325360][T14957] x_tables: duplicate underflow at hook 1 [ 203.334568][T14963] syzkaller0: entered promiscuous mode [ 203.334596][T14963] syzkaller0: entered allmulticast mode [ 203.372443][T14967] netlink: 'syz.5.3517': attribute type 1 has an invalid length. [ 203.374266][T14967] netlink: 'syz.5.3517': attribute type 2 has an invalid length. [ 203.387515][T14969] netlink: 'syz.7.3518': attribute type 1 has an invalid length. [ 203.449111][T14974] loop5: detected capacity change from 0 to 1024 [ 203.467721][T14974] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 203.474421][T14974] EXT4-fs error (device loop5): ext4_map_blocks:833: inode #15: comm syz.5.3520: lblock 0 mapped to illegal pblock 0 (length 1) [ 203.481299][T14974] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 203.481332][T14974] EXT4-fs (loop5): This should not happen!! Data will be lost [ 203.481332][T14974] [ 203.493265][T14980] syzkaller0: entered promiscuous mode [ 203.494548][T14980] syzkaller0: entered allmulticast mode [ 203.697593][T14984] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3523'. [ 203.845321][T13473] EXT4-fs warning (device loop5): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 203.848716][T13473] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 203.900320][T14987] FAULT_INJECTION: forcing a failure. [ 203.900320][T14987] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 203.905118][T14987] CPU: 1 UID: 0 PID: 14987 Comm: syz.1.3525 Tainted: G L syzkaller #0 PREEMPT [ 203.905160][T14987] Tainted: [L]=SOFTLOCKUP [ 203.905164][T14987] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 203.905170][T14987] Call trace: [ 203.905174][T14987] show_stack+0x2c/0x3c (C) [ 203.905199][T14987] __dump_stack+0x30/0x40 [ 203.905211][T14987] dump_stack_lvl+0xd8/0x12c [ 203.905222][T14987] dump_stack+0x1c/0x28 [ 203.905232][T14987] should_fail_ex+0x41c/0x590 [ 203.905240][T14987] should_fail+0x14/0x24 [ 203.905248][T14987] should_fail_usercopy+0x20/0x30 [ 203.905255][T14987] _copy_from_iter+0x188/0x1064 [ 203.905264][T14987] netlink_sendmsg+0x570/0x948 [ 203.905275][T14987] __sock_sendmsg+0xc8/0x17c [ 203.905285][T14987] ____sys_sendmsg+0x3d0/0x6c8 [ 203.905301][T14987] ___sys_sendmsg+0x198/0x224 [ 203.905310][T14987] __sys_sendmsg+0x158/0x204 [ 203.905320][T14987] __arm64_sys_sendmsg+0x88/0x9c [ 203.905330][T14987] invoke_syscall+0x98/0x244 [ 203.905340][T14987] el0_svc_common+0xec/0x23c [ 203.905350][T14987] do_el0_svc+0x4c/0x5c [ 203.905359][T14987] el0_svc+0x64/0x260 [ 203.905369][T14987] el0t_64_sync_handler+0x44/0x104 [ 203.905378][T14987] el0t_64_sync+0x198/0x19c [ 203.997748][T15001] syzkaller0: entered promiscuous mode [ 203.997779][T15001] syzkaller0: entered allmulticast mode [ 204.091326][ T30] audit: type=1326 audit(202.587:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15007 comm="syz.1.3534" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff9af792a8 code=0x0 [ 204.202261][T15009] loop1: detected capacity change from 0 to 512 [ 204.364383][ T6744] Bluetooth: Error in BCSP hdr checksum [ 204.656340][ T6747] Bluetooth: Error in BCSP hdr checksum [ 204.949559][ T6747] Bluetooth: Error in BCSP hdr checksum [ 205.016618][T15041] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 205.040960][T14097] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 205.511891][ T4722] Bluetooth: hci2: command 0x0c1a tx timeout [ 205.511918][ T4727] Bluetooth: hci5: command 0x0c1a tx timeout [ 205.511934][ T4722] Bluetooth: hci3: command 0x0c1a tx timeout [ 205.511972][ T50] Bluetooth: hci0: command 0x0c1a tx timeout [ 205.969485][T15049] syzkaller0: entered promiscuous mode [ 205.969522][T15049] syzkaller0: entered allmulticast mode [ 205.992312][T15051] syzkaller0: entered promiscuous mode [ 205.992345][T15051] syzkaller0: entered allmulticast mode [ 206.091993][T15059] __nla_validate_parse: 1 callbacks suppressed [ 206.092033][T15059] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3552'. [ 206.138300][T15063] FAULT_INJECTION: forcing a failure. [ 206.138300][T15063] name failslab, interval 1, probability 0, space 0, times 0 [ 206.138338][T15063] CPU: 0 UID: 0 PID: 15063 Comm: syz.8.3554 Tainted: G L syzkaller #0 PREEMPT [ 206.138355][T15063] Tainted: [L]=SOFTLOCKUP [ 206.138359][T15063] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 206.138364][T15063] Call trace: [ 206.138367][T15063] show_stack+0x2c/0x3c (C) [ 206.138385][T15063] __dump_stack+0x30/0x40 [ 206.138396][T15063] dump_stack_lvl+0xd8/0x12c [ 206.138406][T15063] dump_stack+0x1c/0x28 [ 206.138415][T15063] should_fail_ex+0x41c/0x590 [ 206.138424][T15063] should_failslab+0xc4/0x120 [ 206.138432][T15063] kmem_cache_alloc_node_noprof+0x98/0x5f8 [ 206.138442][T15063] __alloc_skb+0x1f0/0x610 [ 206.138453][T15063] netlink_ack+0x11c/0x890 [ 206.138462][T15063] netlink_rcv_skb+0x21c/0x414 [ 206.138471][T15063] rtnetlink_rcv+0x28/0x38 [ 206.138479][T15063] netlink_unicast+0x600/0x7f8 [ 206.138487][T15063] netlink_sendmsg+0x648/0x948 [ 206.138496][T15063] __sock_sendmsg+0xc8/0x17c [ 206.138505][T15063] __sys_sendto+0x250/0x328 [ 206.138513][T15063] __arm64_sys_sendto+0xec/0x10c [ 206.138522][T15063] invoke_syscall+0x98/0x244 [ 206.138532][T15063] el0_svc_common+0xec/0x23c [ 206.138542][T15063] do_el0_svc+0x4c/0x5c [ 206.138551][T15063] el0_svc+0x64/0x260 [ 206.138561][T15063] el0t_64_sync_handler+0x44/0x104 [ 206.138569][T15063] el0t_64_sync+0x198/0x19c [ 206.292333][ T4725] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 206.378607][ C0] vcan0: j1939_tp_rxtimer: 0x00000000806c7c6d: rx timeout, send abort [ 206.920523][ C0] vcan0: j1939_tp_rxtimer: 0x00000000806c7c6d: abort rx timeout. Force session deactivation [ 206.920640][ C0] vcan0: j1939_tp_rxtimer: 0x00000000995bf3ca: rx timeout, send abort [ 207.245573][T15103] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3564'. [ 207.378376][T15122] 9pnet_fd: Insufficient options for proto=fd [ 207.462530][ C0] vcan0: j1939_tp_rxtimer: 0x00000000995bf3ca: abort rx timeout. Force session deactivation [ 207.559103][T15019] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 207.559134][T15019] nci: nci_start_poll: failed to set local general bytes [ 207.562838][T15014] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 207.696865][ C0] vcan0: j1939_tp_rxtimer: 0x0000000068d68a85: rx timeout, send abort [ 207.959403][T15167] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3584'. [ 207.992132][T15169] set_capacity_and_notify: 1 callbacks suppressed [ 207.992406][T15169] loop5: detected capacity change from 0 to 2048 [ 208.175454][T15183] overlayfs: overlapping lowerdir path [ 208.180494][T15183] netlink: 'syz.5.3591': attribute type 3 has an invalid length. [ 208.238481][ C0] vcan0: j1939_tp_rxtimer: 0x000000009fc5bc8f: rx timeout, send abort [ 208.238773][ C0] vcan0: j1939_tp_rxtimer: 0x0000000068d68a85: abort rx timeout. Force session deactivation [ 208.337854][T15195] loop8: detected capacity change from 0 to 2048 [ 208.342445][T15197] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3596'. [ 208.509080][T15207] nci: nci_start_poll: failed to set local general bytes [ 208.780387][ C0] vcan0: j1939_tp_rxtimer: 0x000000009fc5bc8f: abort rx timeout. Force session deactivation [ 209.414531][T15258] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3608'. [ 209.498603][T15262] syzkaller0: entered promiscuous mode [ 209.498646][T15262] syzkaller0: entered allmulticast mode [ 209.511890][ C1] vcan0: j1939_tp_rxtimer: 0x00000000302a59fd: rx timeout, send abort [ 209.580154][T15266] syzkaller0: entered promiscuous mode [ 209.580195][T15266] syzkaller0: entered allmulticast mode [ 209.617085][T15270] loop6: detected capacity change from 0 to 1024 [ 209.625554][T15270] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 209.638032][T15270] EXT4-fs error (device loop6): ext4_map_blocks:833: inode #3: block 1: comm syz.6.3614: lblock 1 mapped to illegal pblock 1 (length 1) [ 209.638070][T15270] loop6: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 209.644142][T15270] Quota error (device loop6): write_blk: dquota write failed [ 209.644178][T15270] Quota error (device loop6): qtree_write_dquot: Error -117 occurred while creating quota [ 209.644225][T15270] EXT4-fs error (device loop6): ext4_acquire_dquot:7041: comm syz.6.3614: Failed to acquire dquot type 0 [ 209.644245][T15270] loop6: lost filesystem error report for type 5 error -117 [ 209.651585][ C1] EXT4-fs (loop6): error count since last fsck: 2 [ 209.651598][ C1] EXT4-fs (loop6): initial error at time 207: ext4_map_blocks:833: inode 3: block 1 [ 209.651616][ C1] EXT4-fs (loop6): last error at time 207: ext4_acquire_dquot:7041 [ 209.658790][T15270] EXT4-fs error (device loop6): ext4_free_blocks:6718: comm syz.6.3614: Freeing blocks not in datazone - block = 0, count = 4096 [ 209.662539][T15270] loop6: lost filesystem error report for type 5 error -117 [ 209.671042][T15270] EXT4-fs error (device loop6): ext4_read_inode_bitmap:141: comm syz.6.3614: Invalid inode bitmap blk 0 in block_group 0 [ 209.674344][T15270] loop6: lost filesystem error report for type 5 error -117 [ 209.674525][T15270] EXT4-fs error (device loop6) in ext4_free_inode:363: Corrupt filesystem [ 209.674539][T15270] loop6: lost filesystem error report for type 5 error -117 [ 209.674633][T15270] EXT4-fs (loop6): 1 orphan inode deleted [ 209.675107][T15270] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 209.678443][ T6754] EXT4-fs error (device loop6): ext4_map_blocks:791: inode #3: block 1: comm kworker/u8:12: lblock 1 mapped to illegal pblock 1 (length 1) [ 209.683935][ T6754] Quota error (device loop6): remove_tree: Can't read quota data block 1 [ 209.683959][ T6754] EXT4-fs error (device loop6): ext4_release_dquot:7077: comm kworker/u8:12: Failed to release dquot type 0 [ 209.727865][T15273] FAULT_INJECTION: forcing a failure. [ 209.727865][T15273] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 209.729668][T15273] CPU: 0 UID: 0 PID: 15273 Comm: syz.7.3615 Tainted: G L syzkaller #0 PREEMPT [ 209.729690][T15273] Tainted: [L]=SOFTLOCKUP [ 209.729694][T15273] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 209.729700][T15273] Call trace: [ 209.729703][T15273] show_stack+0x2c/0x3c (C) [ 209.729725][T15273] __dump_stack+0x30/0x40 [ 209.729736][T15273] dump_stack_lvl+0xd8/0x12c [ 209.729745][T15273] dump_stack+0x1c/0x28 [ 209.729755][T15273] should_fail_ex+0x41c/0x590 [ 209.729763][T15273] should_fail+0x14/0x24 [ 209.729769][T15273] should_fail_usercopy+0x20/0x30 [ 209.729776][T15273] _inline_copy_from_user+0x3c/0x174 [ 209.729788][T15273] copy_msghdr_from_user+0xb8/0x194 [ 209.729798][T15273] ___sys_sendmsg+0x14c/0x224 [ 209.729807][T15273] __sys_sendmmsg+0x204/0x580 [ 209.729816][T15273] __arm64_sys_sendmmsg+0xac/0xc8 [ 209.729826][T15273] invoke_syscall+0x98/0x244 [ 209.729836][T15273] el0_svc_common+0xec/0x23c [ 209.729846][T15273] do_el0_svc+0x4c/0x5c [ 209.729855][T15273] el0_svc+0x64/0x260 [ 209.729865][T15273] el0t_64_sync_handler+0x44/0x104 [ 209.729873][T15273] el0t_64_sync+0x198/0x19c [ 209.762257][T15044] EXT4-fs error (device loop6): ext4_read_block_bitmap_nowait:483: comm ext4lazyinit: Invalid block bitmap block 0 in block_group 0 [ 209.770816][T15044] EXT4-fs error (device loop6): ext4_read_block_bitmap_nowait:483: comm ext4lazyinit: Invalid block bitmap block 0 in block_group 0 [ 209.786239][ T8689] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 209.823468][T15281] loop8: detected capacity change from 0 to 512 [ 209.828159][T15281] EXT4-fs (loop8): couldn't mount as ext2 due to feature incompatibilities [ 209.832499][T15281] netlink: 36 bytes leftover after parsing attributes in process `syz.8.3619'. [ 209.836239][T15281] netlink: 36 bytes leftover after parsing attributes in process `syz.8.3619'. [ 209.838112][T15281] FAULT_INJECTION: forcing a failure. [ 209.838112][T15281] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 209.841991][T15281] CPU: 1 UID: 0 PID: 15281 Comm: syz.8.3619 Tainted: G L syzkaller #0 PREEMPT [ 209.842025][T15281] Tainted: [L]=SOFTLOCKUP [ 209.842029][T15281] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 209.842036][T15281] Call trace: [ 209.842040][T15281] show_stack+0x2c/0x3c (C) [ 209.842064][T15281] __dump_stack+0x30/0x40 [ 209.842077][T15281] dump_stack_lvl+0xd8/0x12c [ 209.842087][T15281] dump_stack+0x1c/0x28 [ 209.842097][T15281] should_fail_ex+0x41c/0x590 [ 209.842105][T15281] should_fail+0x14/0x24 [ 209.842112][T15281] should_fail_usercopy+0x20/0x30 [ 209.842119][T15281] simple_read_from_buffer+0xc4/0x238 [ 209.842130][T15281] proc_fail_nth_read+0x1a8/0x248 [ 209.842139][T15281] vfs_read+0x230/0x8c8 [ 209.842146][T15281] ksys_read+0x12c/0x228 [ 209.842153][T15281] __arm64_sys_read+0x84/0x98 [ 209.842160][T15281] invoke_syscall+0x98/0x244 [ 209.842170][T15281] el0_svc_common+0xec/0x23c [ 209.842180][T15281] do_el0_svc+0x4c/0x5c [ 209.842190][T15281] el0_svc+0x64/0x260 [ 209.842199][T15281] el0t_64_sync_handler+0x44/0x104 [ 209.842208][T15281] el0t_64_sync+0x198/0x19c [ 209.879773][T15284] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3621'. [ 209.993173][T15300] netlink: 48 bytes leftover after parsing attributes in process `syz.8.3628'. [ 210.051171][T15303] netlink: 48 bytes leftover after parsing attributes in process `syz.6.3629'. [ 210.053802][ C1] vcan0: j1939_tp_rxtimer: 0x000000003c860ea1: rx timeout, send abort [ 210.053869][ C1] vcan0: j1939_tp_rxtimer: 0x00000000302a59fd: abort rx timeout. Force session deactivation [ 210.110357][T15306] loop6: detected capacity change from 0 to 2048 [ 210.122523][T15306] Injecting memory failure for pfn 0x1488ff at process virtual address 0x20000000 [ 210.133968][T15306] Memory failure: 0x1488ff: Sending SIGBUS to syz.6.3631:15306 due to hardware memory corruption [ 210.134195][T15306] Memory failure: 0x1488ff: recovery action for dirty LRU page: Recovered [ 210.239048][T15322] syzkaller0: entered promiscuous mode [ 210.239084][T15322] syzkaller0: entered allmulticast mode [ 210.252935][T15320] loop8: detected capacity change from 0 to 2048 [ 210.340945][T15324] loop6: detected capacity change from 0 to 4096 [ 210.362352][T15324] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 210.415745][ T8689] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 210.553214][T15346] bridge0: port 1(bridge_slave_0) entered disabled state [ 210.592969][T15351] syzkaller0: entered promiscuous mode [ 210.594052][T15351] syzkaller0: entered allmulticast mode [ 210.595774][ C1] vcan0: j1939_tp_rxtimer: 0x000000003c860ea1: abort rx timeout. Force session deactivation [ 210.600342][T15352] tipc: Enabled bearer , priority 0 [ 210.612542][ C0] vcan0: j1939_tp_rxtimer: 0x000000009adce31b: rx timeout, send abort [ 210.648003][T15359] netlink: 'syz.6.3653': attribute type 1 has an invalid length. [ 210.699117][T15368] syzkaller0: entered promiscuous mode [ 210.700371][T15368] syzkaller0: entered allmulticast mode [ 210.702821][T15368] FAULT_INJECTION: forcing a failure. [ 210.702821][T15368] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 210.705234][T15368] CPU: 1 UID: 0 PID: 15368 Comm: syz.7.3655 Tainted: G L syzkaller #0 PREEMPT [ 210.705260][T15368] Tainted: [L]=SOFTLOCKUP [ 210.705263][T15368] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 210.705269][T15368] Call trace: [ 210.705273][T15368] show_stack+0x2c/0x3c (C) [ 210.705299][T15368] __dump_stack+0x30/0x40 [ 210.705312][T15368] dump_stack_lvl+0xd8/0x12c [ 210.705324][T15368] dump_stack+0x1c/0x28 [ 210.705334][T15368] should_fail_ex+0x41c/0x590 [ 210.705342][T15368] should_fail+0x14/0x24 [ 210.705348][T15368] should_fail_usercopy+0x20/0x30 [ 210.705356][T15368] _inline_copy_from_user+0x3c/0x174 [ 210.705367][T15368] copy_msghdr_from_user+0xb8/0x194 [ 210.705377][T15368] ___sys_sendmsg+0x14c/0x224 [ 210.705386][T15368] __sys_sendmsg+0x158/0x204 [ 210.705395][T15368] __arm64_sys_sendmsg+0x88/0x9c [ 210.705405][T15368] invoke_syscall+0x98/0x244 [ 210.705415][T15368] el0_svc_common+0xec/0x23c [ 210.705425][T15368] do_el0_svc+0x4c/0x5c [ 210.705434][T15368] el0_svc+0x64/0x260 [ 210.705444][T15368] el0t_64_sync_handler+0x44/0x104 [ 210.705452][T15368] el0t_64_sync+0x198/0x19c [ 210.864852][T15387] syzkaller0: entered promiscuous mode [ 210.866206][T15387] syzkaller0: entered allmulticast mode [ 210.930054][T15390] syzkaller0: entered promiscuous mode [ 210.930091][T15390] syzkaller0: entered allmulticast mode [ 210.934765][T15376] tipc: Started in network mode [ 210.934796][T15376] tipc: Node identity a2bd18a5f737, cluster identity 4711 [ 210.935161][T15376] tipc: Enabled bearer , priority 0 [ 211.154470][ C0] vcan0: j1939_tp_rxtimer: 0x000000002610db44: rx timeout, send abort [ 211.154523][ C0] vcan0: j1939_tp_rxtimer: 0x000000009adce31b: abort rx timeout. Force session deactivation [ 211.341482][T15404] loop5: detected capacity change from 0 to 512 [ 211.341968][T15404] EXT4-fs: Ignoring removed nobh option [ 211.368226][T15404] EXT4-fs error (device loop5): ext4_do_update_inode:5742: inode #3: comm syz.5.3671: corrupted inode contents [ 211.368266][T15404] loop5: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 211.370346][T15404] EXT4-fs error (device loop5): ext4_dirty_inode:6639: inode #3: comm syz.5.3671: mark_inode_dirty error [ 211.370364][T15404] loop5: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 211.372343][T15404] EXT4-fs error (device loop5): ext4_do_update_inode:5742: inode #3: comm syz.5.3671: corrupted inode contents [ 211.372360][T15404] loop5: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 211.372514][T15404] EXT4-fs error (device loop5): __ext4_ext_dirty:207: inode #3: comm syz.5.3671: mark_inode_dirty error [ 211.372526][T15404] loop5: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 211.372657][T15404] Quota error (device loop5): write_blk: dquota write failed [ 211.372698][T15404] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 211.372714][T15404] EXT4-fs error (device loop5): ext4_acquire_dquot:7041: comm syz.5.3671: Failed to acquire dquot type 0 [ 211.372725][T15404] loop5: lost filesystem error report for type 5 error -117 [ 211.377006][T15404] EXT4-fs error (device loop5): ext4_do_update_inode:5742: inode #16: comm syz.5.3671: corrupted inode contents [ 211.377027][T15404] loop5: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 211.378090][T15404] EXT4-fs error (device loop5): ext4_dirty_inode:6639: inode #16: comm syz.5.3671: mark_inode_dirty error [ 211.378111][T15404] loop5: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 211.378269][T15404] EXT4-fs error (device loop5): ext4_do_update_inode:5742: inode #16: comm syz.5.3671: corrupted inode contents [ 211.378282][T15404] loop5: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 211.378415][T15404] EXT4-fs error (device loop5): __ext4_ext_dirty:207: inode #16: comm syz.5.3671: mark_inode_dirty error [ 211.378427][T15404] loop5: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 211.378615][T15404] EXT4-fs error (device loop5): ext4_do_update_inode:5742: inode #16: comm syz.5.3671: corrupted inode contents [ 211.378626][T15404] loop5: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 211.378753][T15404] EXT4-fs error (device loop5) in ext4_orphan_del:303: Corrupt filesystem [ 211.378763][T15404] loop5: lost filesystem error report for type 5 error -117 [ 211.378875][T15404] EXT4-fs error (device loop5): ext4_do_update_inode:5742: inode #16: comm syz.5.3671: corrupted inode contents [ 211.378987][T15404] EXT4-fs error (device loop5): ext4_truncate:4691: inode #16: comm syz.5.3671: mark_inode_dirty error [ 211.379097][T15404] EXT4-fs error (device loop5) in ext4_process_orphan:345: Corrupt filesystem [ 211.379116][T15404] loop5: lost filesystem error report for type 5 error -117 [ 211.380892][T15404] EXT4-fs (loop5): 1 truncate cleaned up [ 211.381364][T15404] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 211.383707][T15404] EXT4-fs (loop5): shut down requested (1) [ 211.452814][T15408] syzkaller1: entered allmulticast mode [ 211.630504][T15198] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 211.686183][T15375] tipc: Resetting bearer [ 211.696156][T15375] tipc: Disabling bearer [ 211.697444][ C0] vcan0: j1939_tp_rxtimer: 0x000000002610db44: abort rx timeout. Force session deactivation [ 211.713698][T15407] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 211.788626][ T6744] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.820620][ T4817] tipc: Node number set to 720666730 [ 211.865113][T15421] __nla_validate_parse: 10 callbacks suppressed [ 211.865160][T15421] netlink: 16 bytes leftover after parsing attributes in process `syz.8.3680'. [ 211.869026][ T4722] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 211.871107][ T4722] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 211.872760][ T4722] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 211.880343][ T4722] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 211.880702][ T4722] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 211.890795][T15425] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3681'. [ 211.944894][ T6744] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.018852][T15454] FAULT_INJECTION: forcing a failure. [ 212.018852][T15454] name failslab, interval 1, probability 0, space 0, times 0 [ 212.018899][T15454] CPU: 1 UID: 0 PID: 15454 Comm: syz.6.3689 Tainted: G L syzkaller #0 PREEMPT [ 212.018916][T15454] Tainted: [L]=SOFTLOCKUP [ 212.018921][T15454] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 212.018927][T15454] Call trace: [ 212.018931][T15454] show_stack+0x2c/0x3c (C) [ 212.018950][T15454] __dump_stack+0x30/0x40 [ 212.018960][T15454] dump_stack_lvl+0xd8/0x12c [ 212.018970][T15454] dump_stack+0x1c/0x28 [ 212.018980][T15454] should_fail_ex+0x41c/0x590 [ 212.018988][T15454] should_failslab+0xc4/0x120 [ 212.018996][T15454] kmem_cache_alloc_noprof+0x94/0x5d8 [ 212.019005][T15454] skb_clone+0x1ac/0x320 [ 212.019016][T15454] pfkey_broadcast_one+0x90/0x2cc [ 212.019025][T15454] pfkey_broadcast+0x204/0x3c4 [ 212.019033][T15454] pfkey_send_notify+0x5f0/0xbb8 [ 212.019041][T15454] km_state_notify+0x124/0x218 [ 212.019050][T15454] pfkey_flush+0x1b0/0x2f4 [ 212.019058][T15454] pfkey_sendmsg+0x9f4/0xdf8 [ 212.019067][T15454] __sock_sendmsg+0xc8/0x17c [ 212.019075][T15454] ____sys_sendmsg+0x3d0/0x6c8 [ 212.019085][T15454] ___sys_sendmsg+0x198/0x224 [ 212.019094][T15454] __sys_sendmsg+0x158/0x204 [ 212.019103][T15454] __arm64_sys_sendmsg+0x88/0x9c [ 212.019112][T15454] invoke_syscall+0x98/0x244 [ 212.019122][T15454] el0_svc_common+0xec/0x23c [ 212.019132][T15454] do_el0_svc+0x4c/0x5c [ 212.019141][T15454] el0_svc+0x64/0x260 [ 212.019150][T15454] el0t_64_sync_handler+0x44/0x104 [ 212.019158][T15454] el0t_64_sync+0x198/0x19c [ 212.071767][ T6744] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.185342][ T6744] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.206610][T15470] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3693'. [ 212.221583][T15472] netlink: 16 bytes leftover after parsing attributes in process `syz.8.3694'. [ 212.248691][T15422] bridge0: port 1(bridge_slave_0) entered blocking state [ 212.248782][T15422] bridge0: port 1(bridge_slave_0) entered disabled state [ 212.248849][T15422] bridge_slave_0: entered allmulticast mode [ 212.249316][T15422] bridge_slave_0: entered promiscuous mode [ 212.250446][T15422] bridge0: port 2(bridge_slave_1) entered blocking state [ 212.250495][T15422] bridge0: port 2(bridge_slave_1) entered disabled state [ 212.250559][T15422] bridge_slave_1: entered allmulticast mode [ 212.250984][T15422] bridge_slave_1: entered promiscuous mode [ 212.260223][T15422] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 212.261407][T15422] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 212.279314][T15422] team0: Port device team_slave_0 added [ 212.286467][T15422] team0: Port device team_slave_1 added [ 212.303474][T15422] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 212.303502][T15422] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 212.303517][T15422] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 212.310806][T15422] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 212.310818][T15422] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 212.310834][T15422] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 212.348375][T15422] hsr_slave_0: entered promiscuous mode [ 212.350759][T15422] hsr_slave_1: entered promiscuous mode [ 212.351002][T15422] debugfs: 'hsr0' already exists in 'hsr' [ 212.351015][T15422] Cannot create hsr debugfs directory [ 212.359903][ T6744] netdevsim netdevsim10 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.429991][T15422] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 212.432666][T15422] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 212.444203][T15422] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 212.448770][T15422] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 212.450708][ T6744] bridge_slave_1: left allmulticast mode [ 212.450735][ T6744] bridge_slave_1: left promiscuous mode [ 212.450830][ T6744] bridge0: port 2(bridge_slave_1) entered disabled state [ 212.455913][ T6744] bridge_slave_0: left allmulticast mode [ 212.457127][ T6744] bridge_slave_0: left promiscuous mode [ 212.458430][ T6744] bridge0: port 1(bridge_slave_0) entered disabled state [ 212.532763][ T6744] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 212.536776][T15503] binder: 15501:15503 ioctl c0306201 0 returned -14 [ 212.537252][T15503] binder: 15501:15503 unknown command 0 [ 212.537261][T15503] binder: 15501:15503 ioctl c0306201 20004a40 returned -22 [ 212.539091][T15503] Unable to locate "_" for $SUBSYSTEM_PLUGIN_$HOST_ID [ 212.553752][ T6744] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 212.576842][T15507] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3702'. [ 212.589730][ T6744] bond0 (unregistering): Released all slaves [ 212.593180][T15422] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 212.596511][T15422] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 212.607901][T15422] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 212.615139][T15422] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 212.647626][ T4403] 8021q: adding VLAN 0 to HW filter on device eth13 [ 212.674678][T15422] 8021q: adding VLAN 0 to HW filter on device bond0 [ 212.680215][T15422] 8021q: adding VLAN 0 to HW filter on device team0 [ 212.682421][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 212.682473][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 212.685216][ T39] bridge0: port 2(bridge_slave_1) entered blocking state [ 212.685262][ T39] bridge0: port 2(bridge_slave_1) entered forwarding state [ 212.901077][ T6744] hsr_slave_0: left promiscuous mode [ 212.902664][ T6744] hsr_slave_1: left promiscuous mode [ 212.904538][ T6744] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 212.904560][ T6744] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 212.910128][ T6744] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 212.910152][ T6744] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 212.921344][ T6744] veth1_macvtap: left promiscuous mode [ 212.922983][ T6744] veth1_vlan: left promiscuous mode [ 212.926905][ T6744] veth0_vlan: left promiscuous mode [ 213.059992][ T6744] team0 (unregistering): Port device team_slave_1 removed [ 213.066392][ T6744] team0 (unregistering): Port device team_slave_0 removed [ 213.123938][ T4403] 8021q: adding VLAN 0 to HW filter on device eth14 [ 213.127452][T15422] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 213.192648][T15557] syzkaller1: entered allmulticast mode [ 213.409300][T15422] veth0_vlan: entered promiscuous mode [ 213.411353][T15422] veth1_vlan: entered promiscuous mode [ 213.418616][T15422] veth0_macvtap: entered promiscuous mode [ 213.419831][T15422] veth1_macvtap: entered promiscuous mode [ 213.424017][T15422] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 213.425166][T15422] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 213.455860][ T39] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.455909][ T39] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.455945][ T39] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.455970][ T39] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.095033][ T4722] Bluetooth: hci2: command tx timeout [ 214.586639][T15578] netlink: 20 bytes leftover after parsing attributes in process `syz.8.3712'. [ 215.897240][T15521] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 215.897284][T15521] nci: nci_start_poll: failed to set local general bytes [ 215.898796][T15516] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 215.974866][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 215.974901][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 215.990198][ T6754] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 215.990234][ T6754] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 216.073076][T15599] loop6: detected capacity change from 0 to 2048 [ 216.151351][T15606] capability: warning: `syz.9.3677' uses 32-bit capabilities (legacy support in use) [ 216.168840][T15606] typec_fusb302 0-0022: I2C/SMBus block functionality not supported! [ 216.170767][T15606] i2c i2c-0: new_device: Instantiated device typec_fusb302 at 0x22 [ 216.181495][ T4403] 8021q: adding VLAN 0 to HW filter on device eth12 [ 216.309568][T15633] loop6: detected capacity change from 0 to 512 [ 216.319768][T15633] EXT4-fs (loop6): couldn't mount as ext2 due to feature incompatibilities [ 216.349701][ T4722] Bluetooth: hci2: command tx timeout [ 216.487187][ C0] vcan0: j1939_tp_rxtimer: 0x0000000051f09c33: rx timeout, send abort [ 216.547759][ T4403] 8021q: adding VLAN 0 to HW filter on device eth15 [ 216.722847][ T1483] Bluetooth: hci6: Frame reassembly failed (-84) [ 216.874319][ T4403] 8021q: adding VLAN 0 to HW filter on device eth16 [ 216.887696][T15688] FAULT_INJECTION: forcing a failure. [ 216.887696][T15688] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 216.887743][T15688] CPU: 1 UID: 0 PID: 15688 Comm: syz.6.3737 Tainted: G L syzkaller #0 PREEMPT [ 216.887762][T15688] Tainted: [L]=SOFTLOCKUP [ 216.887766][T15688] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 216.887772][T15688] Call trace: [ 216.887775][T15688] show_stack+0x2c/0x3c (C) [ 216.887795][T15688] __dump_stack+0x30/0x40 [ 216.887806][T15688] dump_stack_lvl+0xd8/0x12c [ 216.887816][T15688] dump_stack+0x1c/0x28 [ 216.887826][T15688] should_fail_ex+0x41c/0x590 [ 216.887834][T15688] should_fail+0x14/0x24 [ 216.887840][T15688] should_fail_usercopy+0x20/0x30 [ 216.887848][T15688] bpf_test_finish+0x834/0xa70 [ 216.887856][T15688] bpf_prog_test_run_skb+0x100c/0x1ed0 [ 216.887863][T15688] bpf_prog_test_run+0x1e0/0x250 [ 216.887872][T15688] __sys_bpf+0x6bc/0x82c [ 216.887879][T15688] __arm64_sys_bpf+0xd0/0xec [ 216.887886][T15688] invoke_syscall+0x98/0x244 [ 216.887896][T15688] el0_svc_common+0xec/0x23c [ 216.887906][T15688] do_el0_svc+0x4c/0x5c [ 216.887915][T15688] el0_svc+0x64/0x260 [ 216.887925][T15688] el0t_64_sync_handler+0x44/0x104 [ 216.887933][T15688] el0t_64_sync+0x198/0x19c [ 216.914536][T15685] FAULT_INJECTION: forcing a failure. [ 216.914536][T15685] name failslab, interval 1, probability 0, space 0, times 0 [ 216.918428][T15685] CPU: 0 UID: 0 PID: 15685 Comm: syz.9.3738 Tainted: G L syzkaller #0 PREEMPT [ 216.918454][T15685] Tainted: [L]=SOFTLOCKUP [ 216.918459][T15685] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 216.918465][T15685] Call trace: [ 216.918469][T15685] show_stack+0x2c/0x3c (C) [ 216.918498][T15685] __dump_stack+0x30/0x40 [ 216.918510][T15685] dump_stack_lvl+0xd8/0x12c [ 216.918521][T15685] dump_stack+0x1c/0x28 [ 216.918531][T15685] should_fail_ex+0x41c/0x590 [ 216.918540][T15685] should_failslab+0xc4/0x120 [ 216.918549][T15685] kmem_cache_alloc_noprof+0x94/0x5d8 [ 216.918557][T15685] skb_clone+0x1ac/0x320 [ 216.918568][T15685] __netlink_deliver_tap+0x364/0x6f4 [ 216.918579][T15685] netlink_deliver_tap+0x1d8/0x1dc [ 216.918588][T15685] __netlink_sendskb+0x78/0xd0 [ 216.918596][T15685] netlink_sendskb+0x2c/0xdc [ 216.918605][T15685] netlink_unicast+0x2c0/0x7f8 [ 216.918613][T15685] netlink_ack+0x570/0x890 [ 216.918622][T15685] netlink_rcv_skb+0x21c/0x414 [ 216.918630][T15685] genl_rcv+0x38/0x50 [ 216.918640][T15685] netlink_unicast+0x600/0x7f8 [ 216.918648][T15685] netlink_sendmsg+0x648/0x948 [ 216.918657][T15685] __sock_sendmsg+0xc8/0x17c [ 216.918666][T15685] ____sys_sendmsg+0x3d0/0x6c8 [ 216.918675][T15685] ___sys_sendmsg+0x198/0x224 [ 216.918684][T15685] __sys_sendmsg+0x158/0x204 [ 216.918694][T15685] __arm64_sys_sendmsg+0x88/0x9c [ 216.918703][T15685] invoke_syscall+0x98/0x244 [ 216.918713][T15685] el0_svc_common+0xec/0x23c [ 216.918723][T15685] do_el0_svc+0x4c/0x5c [ 216.918733][T15685] el0_svc+0x64/0x260 [ 216.918742][T15685] el0t_64_sync_handler+0x44/0x104 [ 216.918751][T15685] el0t_64_sync+0x198/0x19c [ 217.029114][ C0] vcan0: j1939_tp_rxtimer: 0x00000000b7c57f16: rx timeout, send abort [ 217.029188][ C0] vcan0: j1939_tp_rxtimer: 0x0000000051f09c33: abort rx timeout. Force session deactivation [ 217.274606][T15706] loop1: detected capacity change from 0 to 512 [ 217.509684][T15706] EXT4-fs: Ignoring removed orlov option [ 217.518398][T15706] EXT4-fs error (device loop1): ext4_xattr_inode_iget:437: comm syz.1.3746: Parent and EA inode have the same ino 15 [ 217.521240][T15706] loop1: lost filesystem error report for type 5 error -117 [ 217.521473][T15706] EXT4-fs (loop1): Remounting filesystem read-only [ 217.524117][T15706] EXT4-fs warning (device loop1): ext4_evict_inode:287: xattr delete (err -30) [ 217.524173][T15706] EXT4-fs (loop1): 1 orphan inode deleted [ 217.524629][T15706] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 217.527459][T15719] veth0: entered promiscuous mode [ 217.544738][T15718] veth0: left promiscuous mode [ 217.571051][ C0] vcan0: j1939_tp_rxtimer: 0x00000000b7c57f16: abort rx timeout. Force session deactivation [ 217.589194][T12973] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 218.552450][T15770] batadv_slave_1: entered promiscuous mode [ 218.579870][T15762] loop6: detected capacity change from 0 to 2048 [ 218.602882][T15762] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 218.603960][T15762] EXT4-fs error (device loop6): ext4_find_extent:939: inode #2: comm syz.6.3764: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 218.605639][ T4725] Bluetooth: hci2: command tx timeout [ 218.608107][T15761] batadv_slave_1: left promiscuous mode [ 218.707496][T15784] loop8: detected capacity change from 0 to 512 [ 218.746148][T15784] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a85ec018, mo2=0002] [ 218.747791][T15784] System zones: 0-2, 18-18, 34-35 [ 218.751630][T15784] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 218.784096][ T8689] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 218.825821][T14097] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 218.950537][ T4725] Bluetooth: hci6: command 0x1003 tx timeout [ 218.953356][ T4722] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 219.080576][T15808] bridge0: port 1(bridge_slave_0) entered disabled state [ 219.117110][T15797] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3775'. [ 220.085693][T15851] loop6: detected capacity change from 0 to 256 [ 220.858615][ T4725] Bluetooth: hci2: command tx timeout [ 224.206963][ T4347] udevd[4347]: worker [4740] /devices/virtual/block/nbd4 is taking a long time [ 225.030356][ T4388] block nbd4: Possible stuck request 0000000000dee376: control (read@0,4096B). Runtime 150 seconds [ 236.821748][ T31] INFO: task ** replaying previous printk message ** [ 236.821748][ T31] INFO: task udevd:4740 blocked in I/O wait for more than 143 seconds. [ 236.821782][ T31] Tainted: G L syzkaller #0 [ 236.821799][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 236.821808][ T31] task:udevd state:D stack:0 pid:4740 tgid:4740 ppid:4347 task_flags:0x400140 flags:0x00800000 [ 236.821831][ T31] Call trace: [ 236.821838][ T31] __switch_to+0x2b4/0x6e4 (T) [ 236.821857][ T31] __schedule+0x1370/0x2d80 [ 236.821870][ T31] schedule+0x13c/0x20c [ 236.821881][ T31] io_schedule+0x1c/0xe0 [ 236.821892][ T31] folio_wait_bit_common+0x6b8/0xa30 [ 236.821908][ T31] do_read_cache_folio+0x23c/0x5a8 [ 236.821920][ T31] read_cache_folio+0x68/0x88 [ 236.821931][ T31] read_part_sector+0xcc/0x708 [ 236.821945][ T31] adfspart_check_ICS+0xa4/0x720 [ 236.821959][ T31] bdev_disk_changed+0x6e4/0x1224 [ 236.821969][ T31] blkdev_get_whole+0x15c/0x240 [ 236.821979][ T31] bdev_open+0x2b4/0x880 [ 236.821987][ T31] blkdev_open+0x2d4/0x408 [ 236.821996][ T31] do_dentry_open+0x5c4/0xfc0 [ 236.822007][ T31] vfs_open+0x44/0x2dc [ 236.822017][ T31] path_openat+0x21fc/0x2a60 [ 236.822026][ T31] do_file_open+0x1c8/0x2e8 [ 236.822035][ T31] do_sys_openat2+0x114/0x1e8 [ 236.822046][ T31] do_sys_open+0xb0/0xe0 [ 236.822056][ T31] __arm64_sys_openat+0xa8/0xc4 [ 236.822066][ T31] invoke_syscall+0x98/0x244 [ 236.822078][ T31] el0_svc_common+0xec/0x23c [ 236.822088][ T31] do_el0_svc+0x4c/0x5c [ 236.822099][ T31] el0_svc+0x64/0x260 [ 236.822107][ T31] el0t_64_sync_handler+0x44/0x104 [ 236.822116][ T31] el0t_64_sync+0x198/0x19c [ 236.822136][ T31] INFO: task syz.4.964:7492 blocked in I/O wait for more than 143 seconds. [ 236.822142][ T31] Tainted: G L syzkaller #0 [ 236.822147][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 236.822151][ T31] task:syz.4.964 state:D stack:0 pid:7492 tgid:7485 ppid:4712 task_flags:0x400040 flags:0x00800001 [ 236.822162][ T31] Call trace: [ 236.822165][ T31] __switch_to+0x2b4/0x6e4 (T) [ 236.822174][ T31] __schedule+0x1370/0x2d80 [ 236.822181][ T31] schedule+0x13c/0x20c [ 236.822189][ T31] io_schedule+0x1c/0xe0 [ 236.822197][ T31] bit_wait_io+0x1c/0xac [ 236.822204][ T31] __wait_on_bit+0xb8/0x178 [ 236.822212][ T31] out_of_line_wait_on_bit+0x130/0x184 [ 236.822220][ T31] __wait_on_buffer+0x6c/0x7c [ 236.822231][ T31] __block_write_begin_int+0x11e8/0x13dc [ 236.822241][ T31] iomap_write_begin+0xc3c/0xf98 [ 236.822252][ T31] iomap_file_buffered_write+0x394/0x7e4 [ 236.822262][ T31] blkdev_write_iter+0x474/0x630 [ 236.822272][ T31] vfs_write+0x51c/0xa0c [ 236.822279][ T31] ksys_write+0x12c/0x228 [ 236.822286][ T31] __arm64_sys_write+0x84/0x98 [ 236.822296][ T31] invoke_syscall+0x98/0x244 [ 236.822307][ T31] el0_svc_common+0xec/0x23c [ 236.822317][ T31] do_el0_svc+0x4c/0x5c [ 236.822327][ T31] el0_svc+0x64/0x260 [ 236.822336][ T31] el0t_64_sync_handler+0x44/0x104 [ 236.822345][ T31] el0t_64_sync+0x198/0x19c [ 236.822388][ T31] [ 236.822388][ T31] Showing all locks held in the system: [ 236.822395][ T31] 1 lock held by khungtaskd/31: [ 236.822400][ T31] #0: ffff800088d271a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x4c/0x188 [ 236.822428][ T31] 2 locks held by pr/ttyAMA-1/41: [ 236.822444][ T31] 2 locks held by getty/4495: [ 236.822449][ T31] #0: ffff0000ce0d40a0 (&tty->ldisc_sem){++++}-{0:0}, at: ldsem_down_read+0x3c/0x4c [ 236.822471][ T31] #1: ffff80009250b2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x348/0xf78 [ 236.822497][ T31] 1 lock held by udevd/4740: [ 236.822501][ T31] #0: ffff0000c754b350 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xc4/0x880 [ 236.822524][ T31] 1 lock held by syz.4.964/7492: [ 236.822529][ T31] #0: ffff0000c1557af8 (&sb->s_type->i_mutex_key#9){++++}-{4:4}, at: blkdev_write_iter+0x458/0x630 [ 236.822559][ T31] [ 236.822561][ T31] ============================================= [ 236.822561][ T31] [ 236.822567][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 236.892129][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT [ 236.893938][ T31] Tainted: [L]=SOFTLOCKUP [ 236.894696][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 236.896486][ T31] Call trace: [ 236.897088][ T31] show_stack+0x2c/0x3c (C) [ 236.897944][ T31] __dump_stack+0x30/0x40 [ 236.898761][ T31] dump_stack_lvl+0x30/0x12c [ 236.899650][ T31] dump_stack+0x1c/0x28 [ 236.900463][ T31] vpanic+0x594/0xaf8 [ 236.901209][ T31] vpanic+0x0/0xaf8 [ 236.901900][ T31] hung_task_panic+0x0/0x2c [ 236.902743][ T31] kthread+0x304/0x3d4 [ 236.903494][ T31] ret_from_fork+0x10/0x20 [ 236.904275][ T31] SMP: stopping secondary CPUs [ 236.905128][ T31] Kernel Offset: disabled [ 236.905890][ T31] CPU features: 0x14000000,003c0008,27020a02,a84ff6a7 [ 236.907096][ T31] Memory Limit: none [ 237.311755][ T31] Rebooting in 86400 seconds..