last executing test programs: 24.356560072s ago: executing program 1 (id=187): r0 = socket$packet(0x11, 0x3, 0x300) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) (async) ioprio_set$uid(0x3, 0x0, 0x0) r3 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000100), 0x80000, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) (async) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x73, &(0x7f00000010c0)={0x0, 0x6, 0x0, 0x2, 0x188f}, &(0x7f0000001100)=0x18) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000001140)={r4, 0x4}, &(0x7f0000001180)=0x8) close(r3) (async) r5 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="ae", 0x1, 0xffffffffffffffff) keyctl$read(0x2, r5, &(0x7f00000000c0)=""/4096, 0x1000) (async) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r6, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000580)=@newqdisc={0x54, 0x24, 0xe0b, 0xfffffffe, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0x9}, {0xffff, 0xffff}, {0xe, 0xb}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x24, 0x2, {{0x1ff, 0x4, 0xfffffffc, 0x0, 0xfffffffd, 0x8}, [@TCA_NETEM_ECN={0x8, 0x7, 0x1}]}}}]}, 0x54}, 0x1, 0x0, 0x0, 0x810}, 0x0) sendto$packet(r0, &(0x7f00000002c0)="44c33b69ebc9e05e9bdec0c288a8", 0x12, 0x830, &(0x7f0000000440)={0x11, 0x8100, r6, 0x1, 0x2, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xe}}, 0x14) 24.336982586s ago: executing program 1 (id=188): syz_genetlink_get_family_id$fou(&(0x7f0000000380), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000b, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) listen(r3, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000040)={r2, 0xec, 0x27, 0x7dbd}) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_GET(r4, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x42910500}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x34, r5, 0x10, 0x9, 0x25dfdbfd, {}, [@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x8080}, 0x10) prctl$PR_SET_MM(0x23, 0x5, &(0x7f00002e4000/0x4000)=nil) r6 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r6, &(0x7f0000000080)=[{&(0x7f0000000200)="a10100001400add427323b470c45b45602067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x1a1}], 0x1) socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv4_newrule={0x24, 0x20, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x10}, [@FRA_GENERIC_POLICY=@FRA_IP_PROTO={0x5, 0x19, 0x33}]}, 0x24}}, 0x48850) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000540)={'wlan1\x00'}) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)={0x0}, 0x1, 0x0, 0x0, 0x24048800}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x2, &(0x7f0000000180)={[{@usrquota}, {@min_batch_time}, {@nombcache}]}, 0x1, 0x4c0, &(0x7f0000000ac0)="$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") r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='freezer.self_freezing\x00', 0x275a, 0x0) ioctl$FS_IOC_FIEMAP(r8, 0xc020660b, &(0x7f0000000280)=ANY=[@ANYBLOB="00fcffffff01000001"]) 23.458183873s ago: executing program 1 (id=204): r0 = syz_open_dev$vim2m(&(0x7f0000000300), 0x2, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0xd, 0x1, 0x1, 0x0, 0x7}) close(r0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0xfffffffd, 0x80004005, 0x1, {0x1, @win={{0x0, 0xfff}, 0x0, 0xfffffff9, 0x0, 0x0, 0x0}}}) r1 = landlock_create_ruleset(&(0x7f0000000000)={0x0, 0x1}, 0x18, 0x0) (async) r2 = socket$packet(0x11, 0x2, 0x300) sendmmsg$sock(r2, &(0x7f0000003680)=[{{&(0x7f0000000500)=@ieee802154={0x24, @long={0x3, 0xffff, {0xaaaaaaaaaaaa0102}}}, 0x80, 0x0, 0x0, &(0x7f0000000040)=[@txtime={{0x18, 0x1, 0x51, 0x1000000000003}}], 0x28}}], 0x1, 0x8840) landlock_restrict_self(r1, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x61) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) (async) r3 = landlock_create_ruleset(&(0x7f0000000040)={0x1c015, 0x0, 0x1}, 0x30, 0x2) (async) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x20000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r3, 0x1, &(0x7f0000000340)={0x2000, r4}, 0x0) (async) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0xa0000, 0x0) ioctl$TCFLSH(r5, 0x540b, 0x0) landlock_restrict_self(r3, 0x0) (async) syz_clone(0x400, &(0x7f0000000180)="5cfb8a180d34b832914d4dd9f3aa3da7f19450f50cd1107888c72404bc204538ea4ad97d660a9728515ecbd6b2e2ed9e573deea86dfad567398c1f1d84f2444931f22e795ec6991bc727b7c5ccdada569597447d179d4052894c53c3af0f93e6", 0x60, &(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000640)="30409ccc1103aba4f71dbd9e610ebbd5525de07d14c51a67bd9045b4b08c115600b68ae785ad0068411ec3a40f3a32611b43685c802b19a9427453196dec7ab8fa2687e2e82fdc9afb4c6cde1e66ece7c0a9f7e7d4cc95428b3aa50169bcbe1e162b7b893e641ee5aadb4a9d20012e50920f63a8cf35b4bed2c1088e345a08825193b0abd232e6019f78f7a6b716f1ca67ede487ee9b5109bd67a0ed1c40084b2223afe6ceb2d21318c8bef96123d65dfc2dec0e4bfa9308cb6c941147755bd4f58f9ca95b13f9560d8713353ef1aaa2fef796f4f937dc2fac") mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file4\x00', 0x1c0) renameat2(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file1/file4\x00', 0x2) (async) r6 = syz_usbip_server_init(0x4) write$usbip_server(r6, &(0x7f0000000000)=@ret_unlink={{0x4, 0x3, 0x0, 0x1, 0x4}, {0x31}}, 0x30) 22.221596042s ago: executing program 1 (id=208): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000200)='./bus\x00', 0x1400c, &(0x7f0000000040)={[{@test_dummy_encryption}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x2}}, {@norecovery}]}, 0x3, 0x470, &(0x7f0000000dc0)="$eJzs3M1vG0UbAPBn13H65k0hoZSvlo9AQVQIkqYt0AMHQCBxKBISHOBoJaEqTQtqgkSrSKQcygkhJO6II/8CJ7ggxAmJK9xRpQr1QsvJaL27iZ3YTtPYcYt/P8ntM/vhmce7Y8/u2AlgaE1l/yQReyPi94iYyIutG0zl/12/tjJ349rKXBL1+tt/JY3t/r62MlduWu433lyIJA62qXfpwsUztcXFhfNFeWb57EczSxcuPnf6bO3UwqmFc0dPnDh+bPbFF44+35M8xyMtojfe++rNk1+05L8hjx6Z6rbyqXq9x9UN1l1N8cgA28H2VIrjVW30/4moNB29iXj9s7XCpwNqINA39Xq9Pt559Wod+A9LorWsy8OwKD/oy+vfdtfBL/dt9DF4V1/JL4CyvK8Xj3zNyNodg+qG69temoqId1f/+SZ7RH/uQwAAtPghG/88m412Vuayscf6+CON+5u2u7uYG5qMiHsiYl9E3BvnYn9E3BfR2PaBiHhwm/U3TZI0hpmbxz/plVtO7iZk47+Xirmt1vFfOfqLyUqjdCEvRDV5//TiwpHiNTkc1T1ZebZLHT++9tuXndY1j/+yR1Z/ORYs2nFlZE/rPvO15dqtZ9zq6qWIAyPt8k/WZgKSiHgoIg60e4J06zpOP/Pdw53WbZ1/Fz2YaKp/G/F0fvxXY0P+paT7/OTM/2Jx4chMeVZs9suvl9/qVP+O8u+B7Pj/v+35v5b/ZNI8X7u0/Tou//F5x2uaqWoRbOP8X60t10aTdxrxaLHsk9ry8vnZiNHkZN7o5uVH1/cty+X2Wf6HD7Xv//ti/ZU4GBHZSfxIRDwaEY8Vx+7xiHgiIg51yf/nV5/8YOOysTL/2+D4z2/r+K8Ho9G6JG2zTRZUzvz0fUulk+thkf+N7u9/xxvR4WLJzbz/bW5F+2Cnrx8AAADcCdKI2BtJOr0Wp+n0dP4d/v351Hfm43Pz+W8EJqOalne6Jpruh84Wl/V5+VJE5F8tKNcfi7Rx3/jrylijPD334eL8QDMHxjv0/8yflUG3Dug7P9iC4aX/w/Dq2v+ru9cOYPdt6v9d+/yevrYF2F1tPv/HBtEOYPe1G//7ez8wHDb0f9N+METc/4fhpf/D8NL/YSgtjcXWP5LvGpTPdIu7bxVMROy0hYMJonpbNKNvQaR9r2K0v6dW34LkDmzzpmBw70kAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC99G8AAAD//1KFzjw=") mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file2\x00', 0x207) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(0xffffffffffffffff, 0x40086602, 0x0) fstat(0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000003c0)="d80000001c0081064e81f782db44b9040a1d3100000002a1180015000600142603600e1224000f0000810401a8001600200001400300000007391bd06b3c700ab35d620c95b01e10e14ffdc8ac7c15386ce70a215813b0461f63a7f6fd95c623e3d212a042d88f3d0ac26b877e51b5dab9cad4f096912ea264237b58eef1b95990846e51dae0a584bff8450e27411e8f3e9b81f30a3709958e3b47c8daa389aef7fd27f4b3f71262a6c586fdc3d2bca9da6c9d7d9d31ddf3db50c0af86646e28d1877c10b895b5b90d66a7ba0900000000000000c2fe8561", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) getdents64(r0, &(0x7f0000000400)=""/4096, 0xc00) 22.122583806s ago: executing program 1 (id=213): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = syz_clone3(&(0x7f0000001880)={0x100000200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r1 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000080)={0x18}) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f0000000f00)=[{{&(0x7f00000000c0)=@pptp={0x18, 0x2, {0x0, @remote}}, 0x80, &(0x7f0000000a80)=[{&(0x7f0000000180)=""/38, 0x26}, {&(0x7f00000006c0)=""/143, 0x8f}, {&(0x7f0000000780)=""/2, 0x2}, {&(0x7f0000000f80)=""/144, 0x90}, {&(0x7f0000000880)=""/48, 0x30}, {&(0x7f0000000cc0)=""/218, 0xda}, {&(0x7f00000009c0)=""/166, 0xa6}], 0x7, &(0x7f0000000b00)=""/163, 0xa3}, 0x80}, {{&(0x7f00000007c0)=@rc={0x1f, @fixed}, 0x80, &(0x7f0000000ec0)=[{&(0x7f00000008c0)=""/94, 0x5e}, {&(0x7f0000000bc0)=""/214, 0xd6}], 0x2}, 0x2577}], 0x2, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = socket$nl_generic(0x10, 0x3, 0x10) personality(0xfc6703a0ffffffff) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000940)=ANY=[@ANYBLOB="010324410200005baa73d6b02f6ef6448352273966dbc7a5627598e15fcf2aaf4dbff46efa814e296f091558a3351752c608012c05ea7ade265571f81868a138a6b807b389e36e9765"], 0x14}}, 0x0) r7 = socket(0x10, 0x400000000080803, 0x0) ioctl$sock_SIOCETHTOOL(r7, 0x89f0, &(0x7f0000000040)={'bridge0\x00', 0x0}) socket$nl_netfilter(0x10, 0x3, 0xc) writev(0xffffffffffffffff, 0x0, 0x0) r8 = fsmount(r1, 0x1, 0x4) fchdir(r8) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x101500c, &(0x7f0000000080)={[{@nodiscard}, {@block_validity}, {@inlinecrypt}]}, 0x3, 0x470, &(0x7f0000000240)="$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") tgkill(r0, r0, 0x21) 21.3883204s ago: executing program 1 (id=227): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r1 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) (async) r2 = fsmount(r1, 0x0, 0x80) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r0, r2, 0x16, 0x0, @void}, 0x10) (async) setsockopt$MRT6_ASSERT(r2, 0x29, 0xcf, &(0x7f00000001c0)=0x1, 0x4) (async) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000780)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x1}}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0xeb0}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@lazytime}, {@errors_continue}, {@noload}, {@noquota}]}, 0x3, 0x447, &(0x7f0000000840)="$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") (async, rerun: 64) quotactl$Q_QUOTAON(0xffffffff80000200, &(0x7f0000000000)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000040)='./file0/file0\x00') (rerun: 64) 21.325341748s ago: executing program 32 (id=227): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r1 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) (async) r2 = fsmount(r1, 0x0, 0x80) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r0, r2, 0x16, 0x0, @void}, 0x10) (async) setsockopt$MRT6_ASSERT(r2, 0x29, 0xcf, &(0x7f00000001c0)=0x1, 0x4) (async) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000780)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x1}}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0xeb0}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@lazytime}, {@errors_continue}, {@noload}, {@noquota}]}, 0x3, 0x447, &(0x7f0000000840)="$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") (async, rerun: 64) quotactl$Q_QUOTAON(0xffffffff80000200, &(0x7f0000000000)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000040)='./file0/file0\x00') (rerun: 64) 20.861183879s ago: executing program 2 (id=235): r0 = socket(0x11, 0x3, 0x0) ioctl$F2FS_IOC_FLUSH_DEVICE(r0, 0x4008f50a, &(0x7f0000000080)={0x8, 0x6}) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0xdf6, 0x4) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000002c0)={&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000180)=""/244, 0xf4, 0x0, &(0x7f00000000c0)=""/48, 0x30}, &(0x7f0000000300)=0x40) sendmmsg(r0, &(0x7f0000000bc0)=[{{&(0x7f0000000400)=@qipcrtr={0x2a, 0x3, 0x4001}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000040)="d47918", 0x3}], 0x1}}], 0x1, 0x24044045) socket(0x11, 0x3, 0x0) (async) ioctl$F2FS_IOC_FLUSH_DEVICE(r0, 0x4008f50a, &(0x7f0000000080)={0x8, 0x6}) (async) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0xdf6, 0x4) (async) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000002c0)={&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000180)=""/244, 0xf4, 0x0, &(0x7f00000000c0)=""/48, 0x30}, &(0x7f0000000300)=0x40) (async) sendmmsg(r0, &(0x7f0000000bc0)=[{{&(0x7f0000000400)=@qipcrtr={0x2a, 0x3, 0x4001}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000040)="d47918", 0x3}], 0x1}}], 0x1, 0x24044045) (async) 20.700520458s ago: executing program 2 (id=236): fanotify_init(0x8, 0x0) mq_notify(0xffffffffffffffff, 0xffffffffffffffff) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0xa}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r3 = dup3(r2, r1, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) r6 = syz_mount_image$fuse(&(0x7f0000000240), &(0x7f0000000300)='./file0\x00', 0x8000, &(0x7f00000005c0)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000001140)='./file0\x00', &(0x7f0000001180)=ANY=[], 0x0, 0x400) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x10000000000) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000580)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08a0ab73ffcf5ad07693727980eea946e6cba1723e81bfa5c3688803c8a124dcb27df7938e7ddfdd52"}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000004a40)={0xa6, 0x0, &(0x7f0000000740)=[@reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)={@flat=@weak_binder={0x77622a85, 0xa, 0x2}, @ptr={0x70742a85, 0x0, &(0x7f00000007c0)=""/133, 0x0, 0x1, 0x4}, @fd={0x66642a85, 0x0, r4}}, &(0x7f0000000500)}, 0x400}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r4, 0x40046208, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000700)={0x0, 0x0, 0x0, 0xa4, 0x0, &(0x7f0000000600)="d483fbb8f98b47b37af6aa94981c7bbd31a022a229fe0106a6d880160d75aaaffc0176736698e19edebe4f1fa87d061d6a900fd356a56eb2c0619cd2aef8834df4b849a21b3bce71e67402a896694b5bbb6e3561476a6155e00a92d086fdc503c1a40785828cd0fe50e47640aceb1b1572d91bc0caa15d1e8c198e8e92d91f77a2df574d3e85d41de27e4400c6fbe93cf2d602aaad7e44c38c32bdacccaae19f5d432234"}) ioctl$BINDER_THREAD_EXIT(r3, 0x40046208, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000000b00010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x19c}, 0x1, 0x0, 0x0, 0x2000085}, 0x4008085) fsetxattr$security_capability(0xffffffffffffffff, &(0x7f0000000280), &(0x7f00000002c0)=@v1={0x1000000, [{0x3, 0xd}]}, 0xc, 0x3) ioctl$TCSETSW2(r3, 0x402c542c, &(0x7f0000000240)={0xfff, 0xf363, 0x10000, 0x3, 0x4, "e2fa743d477b74504e3eef542f8946747deeef", 0x1, 0xfff}) close(r6) sendmsg$NFT_BATCH(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000005e40)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x201}], {0x14}}, 0x3c}, 0x1, 0x0, 0x0, 0x4008004}, 0x4000000) syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') 19.845968956s ago: executing program 2 (id=241): r0 = socket$inet(0xa, 0x801, 0x84) rseq(&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, 0xffffffffffffff17, 0x0, 0x0) syz_clone(0x4400, 0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x512b, &(0x7f0000000180)={0x0, 0x6f04, 0x130c8, 0x10, 0x2a4}, 0x0, 0x0, 0x0) madvise(&(0x7f00004fa000/0x3000)=nil, 0x3000, 0xf) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x4e21, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) write(r1, &(0x7f0000000000)="ea", 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000040)={0x1000, 0x10ffff, 0xfffffffd}) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000a80)=@raw={'raw\x00', 0x8, 0x3, 0x4d8, 0x340, 0x11, 0x148, 0x340, 0x0, 0x440, 0x2a8, 0x2a8, 0x440, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x0, 0x0, 0x3f, 0x0, 0x20000000, 0x3, 0x7}}}, @common=@unspec=@bpf1={{0x230}, @pinned={0x1, 0x0, 0x0, './file0\x00'}}]}, @unspec=@CT0={0x48}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00'}, 0x0, 0xd0, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@quota={{0x38}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x538) r3 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/sys/net/sctp/udp_port\x00', 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000200)="8c75890648bca9b37e4b56fb89ad0c7bd29521a3594dd5cd306b1a0cac4e404673e1f34fd96e5dc7601314dc9461a623f1923d8932583bd7f28f87851b0240f0671e6d33194d0383fb5a81bc9ed473c00b89a0b5d08d45efa83571d58d8ba9a016809d1b508d1d3bf77fc430f375c0d784bc1a52a4c3cdd47005f0ba0a66ccb1be8408fb6ef4cb7f9b394f244db9880e5189078e29365de641f31e24678c7c6d31d3b11f8ceba40460b7a6b28d1be61cd09d01db1e955ee40f7e8af8a0", 0xbd, 0x4000, 0x0, 0x0) write(r4, 0x0, 0x0) ioctl$VIDIOC_QUERYBUF(r3, 0xc0585609, &(0x7f00000003c0)=@multiplanar_userptr={0x80, 0x8, 0x4, 0x2, 0x7, {0x0, 0xea60}, {0x5, 0x1, 0x44, 0xd0, 0xc2, 0x2f, "001dc400"}, 0x401, 0x2, {0x0}, 0x5}) write(r1, &(0x7f00000002c0)="04", 0x1) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000100)={0x1, 0x0, 0x100002, 0xfbffffff}, 0x10) r5 = syz_open_dev$evdev(&(0x7f0000000300), 0x0, 0x80000) ioctl$EVIOCSREP(r5, 0x40084503, 0x0) writev(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='w', 0x1}], 0x1) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x1}, 0x8) close(r1) 18.861769334s ago: executing program 2 (id=255): r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x48002) r2 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000040), 0x8002) write$binfmt_aout(r2, &(0x7f0000000380)=ANY=[@ANYBLOB="03070000b5"], 0xc8) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv2(r3, &(0x7f0000001540)=[{0x0}, {&(0x7f0000001380)=""/129, 0x7ffff000}], 0x2, 0x0, 0x0, 0x0) write$binfmt_aout(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="000e000000ea96ca59de8fe3fa00feff"], 0xc8) r4 = dup3(r2, r1, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r4, 0xc0189373, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r1}, './file2\x00'}) ioctl$XFS_IOC_FSGROWFSLOG(r5, 0x4008586f, &(0x7f0000000100)={0xc, 0xffff}) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x408e, &(0x7f0000000240)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@dax_never}, {@nobh}, {@stripe={'stripe', 0x3d, 0x4000}}, {@errors_remount}, {@max_batch_time={'max_batch_time', 0x3d, 0x4}}]}, 0x3, 0x446, &(0x7f0000000940)="$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") r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r5) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r5, &(0x7f0000005700)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000056c0)={&(0x7f0000003800)={0x1e30, r6, 0x200, 0x70bd25, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0xffff, 0x35}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xa}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xffffffc4}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2f2}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x5}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xe}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x3b3}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}], @NL80211_ATTR_CSA_IES={0x1dbc, 0xb9, 0x0, 0x1, [@NL80211_ATTR_CSA_C_OFF_PRESP={0xc, 0xbb, [0x8ff, 0x3, 0x2000, 0x8]}, @NL80211_ATTR_CSA_C_OFF_BEACON={0x6, 0xba, [0x2]}, @beacon_params=[@NL80211_ATTR_IE_PROBE_RESP={0x4}, @NL80211_ATTR_PROBE_RESP={0x1cd, 0x91, "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"}], @NL80211_ATTR_CSA_C_OFF_BEACON={0x10, 0xba, [0x1, 0x0, 0x6, 0x9, 0x5, 0xfffd]}, @beacon_params=[@NL80211_ATTR_IE={0x135, 0x2a, [@dsss={0x3, 0x1, 0xb5}, @erp={0x2a, 0x1, {0x0, 0x1}}, @peer_mgmt={0x75, 0x16, {0x1, 0x0, @val=0x7, @void, @val="e50195a28ff204752f4d6328d1ff67d2"}}, @ssid={0x0, 0x6, @default_ibss_ssid}, @cf={0x4, 0x6, {0xa2, 0x7, 0x4, 0x9}}, @cf={0x4, 0x6, {0x14, 0xf3, 0xc3a6, 0x81}}, @ssid={0x0, 0x6, @default_ibss_ssid}, @fast_bss_trans={0x37, 0xd7, {0xe, 0x7, "75842ba4ecbe29af4a62a41118b8a7ac", "e6d043fe1b955e2ee56a754b11ff4259fc6c8c0567b6e216239999ce01574ed6", "bf864d9c48be66e0d9e68c339dc3e72c6a104005ba7de2edd67e5fcc75ce50a1", [{0x1, 0x22, "7bc2b65ac92197092b00a6188280c34aac170d858211ca85abfd3dc76b0584355f9f"}, {0x4, 0x2, "fd2f"}, {0x3, 0x1b, "ba53793c09c382f08991b88dd9b6f914d088e9b1ce3ad8ed95d86d"}, {0x1, 0x5, "b29227a641"}, {0x2, 0x16, "6c2614f5b946a856317122e09687f34b0c142b598a6e"}, {0x4, 0x12, "2a9c588ca84df078bc533b24cb4fc157bc97"}, {0x3, 0xb, "9c84717147b217172d8396"}]}}, @sec_chan_ofs={0x3e, 0x1, 0x3}, @random={0x0, 0x15, "b15f85a2141ee3749c9e71e7a3f04a5b60581fcffb"}]}, @NL80211_ATTR_IE_PROBE_RESP={0x31f, 0x7f, [@erp={0x2a, 0x1, {0x1, 0x0, 0x1}}, @perr={0x84, 0x102, {0xa0, 0x10, [{{0x0, 0x1}, @device_a, 0xa, @value=@device_b, 0x6}, {{0x0, 0x1}, @broadcast, 0x5, @value, 0x2e}, {{0x0, 0x1}, @device_a, 0x3, @value=@device_b, 0x2f}, {{0x0, 0x1}, @device_a, 0x7, @value=@device_b, 0x15}, {{}, @device_a, 0x1, @void, 0x3a}, {{}, @device_a, 0x9, @void, 0x13}, {{}, @device_b, 0x3, @void, 0x3d}, {{0x0, 0x1}, @device_a, 0x80000001, @value=@device_b, 0x2d}, {{0x0, 0x1}, @device_a, 0xb, @value=@broadcast, 0x42}, {{}, @device_a, 0x7ff, @void, 0x31}, {{}, @device_a, 0x6, @void, 0x11}, {{0x0, 0x1}, @device_a, 0x7fff, @value=@device_b, 0x34}, {{}, @device_a, 0xfffff283, @void, 0x40}, {{}, @device_b, 0x9, @void, 0x9}, {{0x0, 0x1}, @broadcast, 0x100, @value=@device_b, 0x31}, {{}, @broadcast, 0x1ff, @void, 0x2}]}}, @link_id={0x65, 0x12, {@from_mac=@broadcast, @broadcast, @device_b}}, @peer_mgmt={0x75, 0x18, {0x1, 0x0, @val=0xff, @val=0x39, @val="aac96863fc47a3c45a2353a5cefc45f6"}}, @chsw_timing={0x68, 0x4, {0x2, 0xf}}, @channel_switch={0x25, 0x3, {0x0, 0x84, 0x5}}, @measure_req={0x26, 0xce, {0x5, 0x8, 0x6, "093d961c0d550f10d0fc675d5edb4c2ebde7885d7412ccb8d44ff915377403bdccc6a49c87af091ee4b29c11728e2071dc0272b4a3e5ffe45e2b92504f04f1108f495dc9c090f94274939b7dc25f17483e933e454d46fb56996362b685f77622062a0492f74dc837ecd3265f4a3b4cec8de87c16641713f0616072ae3d7e7d9e7bcbbab0e443b679cbb904c9522e3a792afe0164d6fe54f28767de023b65c106d93f6b19c39a7fa141a555743196248e9ffc0d7ce09ebeef5b75cd2574e2d861ed79a839fa84344ff3d263"}}, @perr={0x84, 0xf4, {0x96, 0xe, [{{0x0, 0x1}, @device_b, 0x6, @value=@device_b, 0x22}, {{}, @device_a, 0x2b44c00d, @void, 0x3}, {{0x0, 0x1}, @device_b, 0x14, @value=@broadcast, 0x33}, {{0x0, 0x1}, @broadcast, 0xaf90, @value=@broadcast, 0x19}, {{}, @broadcast, 0xe}, {{0x0, 0x1}, @device_a, 0x9, @value, 0x35}, {{0x0, 0x1}, @broadcast, 0xf, @value, 0x2d}, {{0x0, 0x1}, @device_b, 0xf, @value, 0x24}, {{0x0, 0x1}, @device_b, 0x8, @value=@device_b, 0x3a}, {{0x0, 0x1}, @device_a, 0x4, @value=@device_b, 0x17}, {{}, @device_b, 0x80000001, @void, 0x35}, {{0x0, 0x1}, @broadcast, 0x3, @value=@device_b, 0x21}, {{}, @broadcast, 0x800, @void, 0x3b}, {{0x0, 0x1}, @broadcast, 0xfc, @value=@broadcast, 0x31}]}}, @ibss={0x6, 0x2, 0x3}, @perr={0x84, 0xf, {0x0, 0x1, [{{}, @broadcast, 0x80000001, @void, 0x3b}]}}]}, @NL80211_ATTR_IE_PROBE_RESP={0x109, 0x7f, [@mesh_config={0x71, 0x7, {0x0, 0x1, 0xffffffffffffffff, 0x1, 0x0, 0x91, 0x1}}, @ibss={0x6, 0x2, 0x80}, @sec_chan_ofs={0x3e, 0x1, 0x1}, @chsw_timing={0x68, 0x4, {0xa9, 0x8}}, @sec_chan_ofs={0x3e, 0x1, 0x2}, @mesh_id={0x72, 0x6}, @measure_req={0x26, 0x22, {0x4, 0xd, 0x2, "1260120311e313fa2bfdccc49e8239b3c60a36836eee9accac9009df1574f9"}}, @rann={0x7e, 0x15, {{0x0, 0x41}, 0x8, 0x6, @device_a, 0x8, 0xa, 0x6b5c911a}}, @random_vendor={0xdd, 0xa4, "55e215327720eaca35eb09b54d18ef3896e67f08ac24100f23852e9b3f682824362a0221562be2ffe563c184d68ee6607066fb971568993aee87f14dad0ce5b92f1cf1e4b2ed8bfe0b604352e1bdbe1e199a37cf50b9ec417d0020c70d4dd1aa3e8b852e019fadd1344b6b99da311289a06bfc38d8ea6069ab9b09a364bb497edb6c90fc9c1c3b4e0e74a3b14e0997545b750ea6f3e643102569759d04c36ba4638423fa"}, @sec_chan_ofs={0x3e, 0x1, 0x3}]}, @NL80211_ATTR_PROBE_RESP={0x1f, 0x91, "eb15dfb240b5e338bd297d12f7dea8d857aff403f9451b116987b0"}, @NL80211_ATTR_FTM_RESPONDER={0x218, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_LCI={0x48, 0x2, "051ce12d2abf6dd010c607e1e981b8c28166c92b1427a1e4ce854c0c5ae78e360561d6b58d18ce5261d48d2489b006fb71cefde445e545faaa0314f95e6c6d2b680cfb52"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x5b, 0x3, "ab276d82660c19aedf988ad5ec6a18b9ea02f904917d833fc133bb77a64b389cbbc1e12bcfcf81985b25fb56c32ccd75c1cf599c3d40860e55fa7fed2e34f19ba10d2377d31769a968e457fcbbbe647da8cf82393ea286"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0xe6, 0x3, "45b36afa3dc7c1735fa551ed6bd66c1d663dce4e1414d5f607c7fca55d36cfd69ff151cec462779575c2f485b07841300d6f034f80948d82033e6ef4d802d14ce400b6e4d0e8bbbc0a6145fd1d9a33d7130b6a42d15314126275b03e5fbf31252666b6fe8294b7bceb630477b814ffa2b3c0952a5c187c5db088fad9b1467fd4a078e05673b7a01eb5aed2c00f5137970cf07c7e19f2afc60afc770a7e80f5835ef23f082a7de2b088222db19e20d6a387f02bb690a6b9820171d962ed097304413c9a832fc11297a0ae25b197cad245e520f917d72a0fe748d5d4260617021f8ffd"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x79, 0x3, "4c9b0a416bcbbf0f39fba02225027f5e699aaf09827ca446036ec433e785ef482d6d00bdc725302a6e44bfca3e90a87f327dbfeb253a27260aa7bacf6fdb2123c7b106872a8b386f8471259c395d3da9a7ff636082e9502c90771b9e5823f849cb821adb85d49eee87320f2b878236c4545ebdba0b"}]}], @beacon_params=[@NL80211_ATTR_FTM_RESPONDER={0x24, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_LCI={0x4}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_LCI={0x18, 0x2, "d0663e57823e3af4ae8dc99f476a11fcb41ada05"}]}, @NL80211_ATTR_IE_PROBE_RESP={0x209, 0x7f, [@random={0x1, 0x94, "c2c2638e14fd25a68d83d6616ae64f0293ecabaab5f02f0206100c6664694aa4937ac934fe446cbeb1029c00a11037773a38a2968bd2949d6e11534ac29d9c20f4ae7b10b88be0cafc2cd1897b55733de022583588a97418a96547a463db58b5b821045695fca3145a0d28fb84efe71eeecbb5371bec4fa761efa8671b18fdef9919ec2187ee9a11348c0de945bc7204cd4120b9"}, @ht={0x2d, 0x1a, {0x20, 0x2, 0x5, 0x0, {0x8, 0x36a, 0x0, 0x280, 0x0, 0x0, 0x1, 0x0, 0x1}, 0x1, 0x5, 0x1}}, @prep={0x83, 0x1f, {{}, 0x8, 0x8, @device_a, 0x9, @void, 0x0, 0x8, @broadcast, 0x1000}}, @ext_channel_switch={0x3c, 0x4, {0x1, 0x7, 0xc, 0x20}}, @random_vendor={0xdd, 0x5e, "676777e197e8c3e0968e61531ed1d11ba72d859bc7c852c76ec25da77a6ce8bed9961bca7ef9b0290a102881b8773604b2eb1126b171ff716f5c2f45e6121ca8075fe4eedb979478cc7ebc6117dc947ae97d422648f82d86080953d8f7a7"}, @preq={0x82, 0x36, {{0x1, 0x0, 0x1, 0x0, 0x1}, 0xc, 0x4, 0xfffffff2, @device_a, 0x8, @value=@broadcast, 0x8, 0x684, 0x2, [{{0x1, 0x0, 0x1}, @device_b, 0x3}, {{0x0, 0x0, 0x1}, @device_a, 0x80000001}]}}, @supported_rates={0x1, 0x7, [{0xb, 0x1}, {0x5}, {0x2, 0x1}, {}, {0x576eb7a584a595f0, 0x1}, {0x48}, {0x5}]}, @preq={0x82, 0x4c, {{0x0, 0x1, 0x0, 0x0, 0x1}, 0x6, 0x1, 0xe, @device_b, 0x1, @value=@device_b, 0x9, 0x7, 0x4, [{{}, @broadcast, 0xe4}, {{0x0, 0x0, 0x1}, @device_a, 0x400}, {{0x1}, @device_b, 0x1}, {{0x1}, @device_a, 0x67}]}}, @tim={0x5, 0x3b, {0xd0, 0x5e, 0x7, "ba336c0382ae8ec98b0df5f5e4296cc4dda4ea325d0274a4bde772e4dfb9e8184aa55871ba631acbe8be2b515d0032b5cda3e9ba428ad245"}}]}, @NL80211_ATTR_IE={0x88, 0x2a, [@cf={0x4, 0x6, {0x4, 0x40, 0x3, 0x81}}, @mesh_chsw={0x76, 0x6, {0x7, 0x7, 0x1d, 0x5}}, @dsss={0x3, 0x1, 0xd}, @mesh_config={0x71, 0x7, {0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x1}}, @gcr_ga={0xbd, 0x6}, @mesh_config={0x71, 0x7, {0x1, 0x1, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x1, 0x60}}, @rann={0x7e, 0x15, {{0x1, 0x4}, 0x9, 0x60, @device_a, 0xfffffbff, 0x6, 0x1}}, @ht={0x2d, 0x1a, {0x2, 0x2, 0x1, 0x0, {0x4, 0x5, 0x0, 0x8, 0x0, 0x0, 0x1, 0x1, 0x1}, 0x1, 0xf, 0x2}}, @cf={0x4, 0x6, {0xa, 0x1, 0xfffd, 0x7}}, @ht={0x2d, 0x1a, {0x40, 0x1, 0x4, 0x0, {0x4, 0x893, 0x0, 0x3fb, 0x0, 0x1, 0x0, 0x1}, 0x1, 0xc, 0x2}}]}, @NL80211_ATTR_IE_PROBE_RESP={0x35, 0x7f, [@mic={0x8c, 0x18, {0x84, "b72e6077a9b3", @long="c59fd5aecba9c405b956c222469b1737"}}, @ext_channel_switch={0x3c, 0x4, {0x1, 0x9, 0x30, 0x9}}, @mesh_id={0x72, 0x6}, @mesh_config={0x71, 0x7, {0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x7, 0x1}}]}, @NL80211_ATTR_FTM_RESPONDER={0x105c, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_LCI={0x53, 0x2, "f44bc94c3fd334d016fa93a8058020ad4c3e25d39c5929112401ce600d778f7dde9e0c71c3c2c8bd05525bd76872325aa0301efb111f762b25a388d0ac23fcea0a280182fc105e9ab8251bed9f67a2"}, @NL80211_FTM_RESP_ATTR_LCI={0x1004, 0x2, "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"}]}, @NL80211_ATTR_IE_PROBE_RESP={0xaf, 0x7f, [@dsss={0x3, 0x1, 0x6}, @mesh_config={0x71, 0x7, {0xffffffffffffffff, 0x0, 0x0, 0x1, 0x2, 0x6, 0x20}}, @ssid={0x0, 0x6, @default_ibss_ssid}, @preq={0x82, 0x3b, {{0x1}, 0x5, 0x9, 0x3, @device_a, 0xa2, @void, 0xceb, 0x8, 0x3, [{{0x1}, @device_a, 0x3}, {{0x1}, @device_b}, {{0x1, 0x0, 0x1}, @device_a, 0x3ff}]}}, @ssid={0x0, 0x3, @random="09e2f2"}, @random_vendor={0xdd, 0x50, "2f00d3d429a726dfc705e7de770b5fd97ff8b171717de4a078b4b8a6c6be0f7950a8f48e6396991e939d4807b126d94f29ffc1c9e4b93bd44fdafabee748d0d190705a6047d5d9c40cca26e5eae52ec9"}, @supported_rates={0x1, 0x1, [{0x18, 0x1}]}]}], @NL80211_ATTR_CSA_C_OFF_BEACON={0x6, 0xba, [0x400]}, @NL80211_ATTR_CSA_C_OFF_PRESP={0x12, 0xbb, [0x1, 0x0, 0x5d, 0x2, 0x6, 0x6, 0xfff]}, @NL80211_ATTR_CSA_C_OFF_BEACON={0xa, 0xba, [0xff, 0xcfa, 0x0]}]}, @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}]}, 0x1e30}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) syslog(0xa, 0x0, 0x0) mount$bpf(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000001c0), 0x2000800, &(0x7f0000000500)={[{@mode={'mode', 0x3d, 0x33f4}}]}) 17.542374981s ago: executing program 2 (id=258): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x20000406, &(0x7f0000001d40)={[{@dioread_lock}, {@noblock_validity}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x4}}, {@jqfmt_vfsold}, {@nolazytime}, {@grpjquota, 0x2e}, {@dax}, {@resuid}, {@lazytime}, {@grpid}], [], 0x2c}, 0x84, 0x4f5, &(0x7f0000001340)="$eJzs3Mtv3NQaAPDPTvPoM2lvde/t494GCiKikDRpgS5YAAKpGxASLMoypKEqTVvUBIlWFU0RKsuKvwBYIiGxggVsQAIEbACxhT1CqlA3LSChIM/YySSZmTiTNiGd309yco59/PiOfTz2HI8DaFv9EXE1IrZExE8R0RsRycIC/dV/N69fHPv9+sWxJGZmnvstqZS7cf3iWFG0mG9znhlII9I3k9hTZ72T5y+cGp2YGD+X54emTr8yNHn+woMnT4+eGD8xfmbkyJHDh4YfeXjkoVJxXFpiehbXjd2vn9276+gLbz89NhMvfvNBkscdC+Ko6iu13mb6oz9mcnNjuyp/713x0v9ZtkZEd55ONqzxxlBaR0Rku6uz0v57oyPmdl5vPPXGbOaLNdpA4LbJPpu2Lxrbkf9PZz+/gDtRoo1Dmyo+8bP732JYzeuPtXbt8ezveCX+m/nw3TPVukmze9m+6h17R4P5/11nXM9ccqZ3ifVviYhj03+8kw1R93uIJpLSJQEAZn2WXf88UO/6L513bbMt70Ppi4gDEbEjIv4VETsjnS3zn4j47zLX378gv/j654eNy1zksmTXf4/mfVvFUJ1SxJXM5rZW4u9MXjo5MX4wr5OB6OzO8sNN1vH5kz9ebTStv+b6Lxuy9RfXgvl2/Lqhe/48x0enRlcQ8jzXLkcSG+rFn8z2BGQ1sCsidrew/KzOTt7//t4svW3z4ulLx9/ELehnmnkv4r7q/p+OBfEXkuqaGvVPDvXExPjBoeKoWOzb7688W5vvrEnPi7+nXEw9rQZbx7XLEZvqHv95/EUzKPprJ/P8l1tKr+PKz281vKdZvP+TODZdWyI//jfOVVt2/Hclz1fSXfm410anps4NR3yaj5g3fmRuaUW+KJ/FP7B/fvzV++I0O8f99W4+356IyA7i/0XE/yNiX77td0XE3RGxv0n8Xz9xz8vNa6jF4/8WyOI/3mz/R/Qltf31LSQ6Tn31SaP1lzv/Ha6kBvIxtee/rgbLLbuBK60/AAAAWA/SSh90kg7WPL9d2Bmb0omzk1MH+uPVM8erfdV90ZkW33T11nwfOpx/N1zkRxbkD0XE9sqTRhsr+cGxsxNb1yhmoGpzTfuvngvSdHCwOu2XRg+9AHeOZfWj1T509uFHt35jgFXl95rQvrR/aF/aP7Qv7R/aV732fyni5hpsCrDKWv38X/jAALAO1b6fcp6Py//KC1iX3P9D+9L+oS0t/kl8/rqV7JzQ+k/+J3YcXckbA25/Yqa39dmj8aTp5S+wo1zh4u0XpZdcrnASUYSTNomrTiLSuTF/5m+TrIzprJbpKr+pq59Ilyzz2FK10bmsd2L01KmNfXmiOyLKLufSqtVqcYZIvGUSAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABY1/4OAAD//0r/6kY=") r0 = syz_io_uring_setup(0x56a0, &(0x7f0000000140)={0x0, 0x5961, 0x10000, 0x0, 0x4e}, &(0x7f0000000100), &(0x7f0000000000), &(0x7f0000000080)) io_uring_enter(r0, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000c40), r2) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r2, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x4c, r3, 0x1, 0x0, 0x1000000, {0x6, 0x0, 0x900}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @loopback={0x100000000000000}}, @NLBL_UNLABEL_A_SECCTX={0xf, 0x7, 'unconfined\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @mcast1}]}, 0x4c}, 0x2, 0x34005}, 0x0) r4 = syz_genetlink_get_family_id$nfc(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000001c0)=0x0) r6 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r6, 0x0, &(0x7f00000000c0)=0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="b40000001900010000000000000000001d0109004d0011806f9886ff8308eb1d7c03414adb7f8452b536ad5db2784a6945a7a1c790a421ea2a089f6ab00ada4e5605b2e7262aed82ccf355b3cc4c48e609000cf5329cb7f1821ec7ecca1db0eb2d"], 0xb4}, 0x1, 0x0, 0x0, 0x8000}, 0x20040020) r10 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r8) sendmsg$NFC_CMD_DEV_UP(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000001c0)={0x1c, r10, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r7}]}, 0x1c}}, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000200)=0x0) sendmsg$NFC_CMD_DISABLE_SE(r2, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x44, r4, 0x4, 0x70bd25, 0x25dfdbff, {}, [@NFC_ATTR_SE_INDEX={0x8}, @NFC_ATTR_SE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r5}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r7}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r11}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040}, 0x80c1) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, r1) 17.251847721s ago: executing program 3 (id=265): r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x5, 0x101400) fcntl$getown(r0, 0x9) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x402002, 0x0) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000080)={'team_slave_0\x00', 0x200}) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0), 0x103803, 0x0) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x70, r3, 0x8, 0x70bd27, 0x25dfdbfc, {}, [@L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x8}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e23}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0xfa}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'caif0\x00'}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @empty}, @L2TP_ATTR_PEER_SESSION_ID={0x8}]}, 0x70}}, 0x2000000) ioctl$DRM_IOCTL_GET_MAP(r2, 0xc0286404, &(0x7f0000000280)={&(0x7f0000ffc000/0x3000)=nil}) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000002c0)={0xc}) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000340), r2) sendmsg$IPVS_CMD_GET_CONFIG(r2, &(0x7f00000004c0)={&(0x7f0000000300), 0xc, &(0x7f0000000480)={&(0x7f0000000380)={0xcc, r4, 0x200, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x77f0e011}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfff}, @IPVS_CMD_ATTR_DAEMON={0x70, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @broadcast}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x81}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_to_bond\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private0}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x1}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0xffff}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x5}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}]}]}, 0xcc}, 0x1, 0x0, 0x0, 0x44}, 0x20008040) setsockopt$PNPIPE_HANDLE(r2, 0x113, 0x3, &(0x7f0000000500)=0x6, 0x4) r5 = syz_io_uring_setup(0x228b, &(0x7f0000000540)={0x0, 0xd2ad, 0x400, 0x3, 0x1c5, 0x0, r2}, &(0x7f00000005c0), &(0x7f0000000600), &(0x7f0000000640)) io_uring_register$IORING_REGISTER_NAPI(r5, 0x1b, &(0x7f0000000680)={0x4, 0x0, 0x1, '\x00', 0x10001}, 0x1) ioctl$PTP_SYS_OFFSET(r2, 0x43403d05, &(0x7f00000006c0)={0x2}) sendmsg$IPVS_CMD_SET_CONFIG(r2, &(0x7f0000000bc0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000a40)={0x110, r4, 0x2, 0x70bd2c, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x2}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x4}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xbd5}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'lc\x00'}]}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x9}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x40}]}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x7}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x3}]}, @IPVS_CMD_ATTR_DAEMON={0x8c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x7f}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_to_bond\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9413}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xfffffffe}]}, 0x110}, 0x1, 0x0, 0x0, 0x40c0}, 0x4004) ioctl$VT_OPENQRY(r2, 0x5600, &(0x7f0000000c00)) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000c80), r2) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000cc0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_STOP_P2P_DEVICE(r2, &(0x7f0000000d80)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000d40)={&(0x7f0000000d00)={0x1c, r6, 0x400, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r7}, @void}}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20040810}, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000dc0), r2) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000e00), r2) connect$phonet_pipe(r0, &(0x7f0000000e40)={0x23, 0xbf, 0x8, 0x2}, 0x10) sendmsg$NL80211_CMD_GET_WOWLAN(r2, &(0x7f0000000f40)={&(0x7f0000000e80), 0xc, &(0x7f0000000f00)={&(0x7f0000000ec0)={0x14, r6, 0x4, 0x70bd2d, 0x25dfdbff, {{}, {@void, @void, @void}}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x101}, 0x88004) sendmsg$NL80211_CMD_ABORT_SCAN(r2, &(0x7f0000001040)={&(0x7f0000000f80)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001000)={&(0x7f0000000fc0)={0x20, r6, 0x4, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x43, 0x3b}}}}, ["", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r9, &(0x7f0000001140)={&(0x7f0000001080), 0xc, &(0x7f0000001100)={&(0x7f00000010c0)={0x1c, r8, 0x2, 0x70bd2b, 0x25dfdbff, {}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000c1}, 0xc004884) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(r2, 0x28, 0x6, &(0x7f0000001180)={0x0, 0x2710}, 0x10) sendmsg$nl_route(r2, &(0x7f00000012c0)={&(0x7f00000011c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001280)={&(0x7f0000001200)=@ipv4_newroute={0x44, 0x18, 0x1, 0x70bd26, 0x25dfdbfd, {0x2, 0x20, 0x0, 0x10, 0xff, 0x4, 0xff, 0x7, 0x2800}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x4}, @RTA_FLOW={0x8, 0xb, 0x3}, @RTA_SRC={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x40}}, @RTA_SPORT={0x6, 0x1c, 0x4e23}, @RTA_PRIORITY={0x8, 0x6, 0xf}]}, 0x44}, 0x1, 0x0, 0x0, 0x14}, 0x4) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x17) 17.147578983s ago: executing program 3 (id=269): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000c00), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_ABORT_SCAN(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)={0x1c, r3, 0xd9b2794f6a139537, 0x0, 0xe7030000, {{}, {@val={0x8, 0x3, r6}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_UPDATE_FT_IES(r1, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x90, r0, 0x2, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IE={0x73, 0x2a, [@challenge={0x10, 0x1, 0xdb}, @mic={0x8c, 0x10, {0x2e1, "870e75b6eff7", @short="1d665da62abd6f13"}}, @prep={0x83, 0x25, {{0x0, 0x1}, 0x5, 0x2, @device_a, 0x4, @value=@device_b, 0x4, 0x40000009, @broadcast, 0x8}}, @random_vendor={0xdd, 0x12, "daeae6f958e98db902cce231f944a42349c9"}, @dsss={0x3, 0x1, 0x40}, @ht={0x2d, 0x1a, {0x20, 0x2, 0x1, 0x0, {0x8, 0x9, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1}, 0x1, 0x6, 0x2}}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x40}, 0x4000) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) r7 = socket$igmp6(0xa, 0x3, 0x2) r8 = socket$inet_udp(0x2, 0x2, 0x0) nanosleep(&(0x7f0000000440)={0x0, 0x989680}, &(0x7f00000004c0)) setsockopt$SO_TIMESTAMPING(r8, 0x1, 0x25, &(0x7f0000000200)=0x748, 0x4) bind$inet(r8, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r8, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r8, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$inet_int(r8, 0x0, 0xc, &(0x7f0000000040)=0xfffffffc, 0x4) setsockopt$inet_int(r8, 0x0, 0xd, &(0x7f0000000000)=0x101, 0x4) recvmmsg(r8, &(0x7f0000000340)=[{{0x0, 0x0, 0x0}, 0x4}], 0x1, 0x45833af92e4b38ff, 0x0) setsockopt$MRT6_DEL_MFC_PROXY(r7, 0x29, 0xd3, &(0x7f0000000100)={{0xa, 0x4e21, 0xda22, @private1={0xfc, 0x1, '\x00', 0x1}, 0x1}, {0xa, 0x4e22, 0x5d9, @remote, 0x7}, 0x1, {[0x0, 0x3, 0x63e, 0x3, 0x1000, 0xf, 0xf7, 0x3]}}, 0x22) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r9 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r10, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, 0x4, 0x1, 0x101, 0x0, 0x0, {0x3, 0x0, 0x9}}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x4000044) recvmmsg(r10, &(0x7f0000000980)=[{{0x0, 0x0, 0x0}, 0x16a}], 0x1, 0x40000000, 0x0) mq_timedsend(r9, 0x0, 0x0, 0x1ff, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r11, 0x10e, 0xb, &(0x7f0000000000)=0x40b, 0x4) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) 17.047636721s ago: executing program 2 (id=271): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000950000ff0000003250376e370356620397844906c5a004280bf28af4ca22a7d9ec2c39550b0000000000000000000000005c00"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) 16.93079084s ago: executing program 33 (id=271): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000950000ff0000003250376e370356620397844906c5a004280bf28af4ca22a7d9ec2c39550b0000000000000000000000005c00"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) 16.888631013s ago: executing program 3 (id=273): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async) r4 = socket$unix(0x1, 0x2, 0x0) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x1, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) (async) sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000006c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56441, 0x70b925, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, {}, {0x2, 0xb}, {0x9, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x10, 0x2, [@TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x5}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x2000c061}, 0x200c000) (async) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 16.854681985s ago: executing program 0 (id=274): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) r1 = syz_io_uring_setup(0x34b8, &(0x7f0000000540)={0x0, 0xc3b1, 0x800, 0x1, 0x82, 0x0, 0x0}, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$llc(0xffffffffffffffff, &(0x7f0000000000)={0x1a, 0x5, 0x1, 0x7, 0x1, 0x42, @remote}, 0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r5, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) r7 = open(&(0x7f0000000200)='./file0\x00', 0x400a80, 0x138) sendfile(r1, r7, &(0x7f0000000240)=0x5, 0x9) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000040)={r6, 0x3}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000040)=@IORING_OP_CLOSE={0x13, 0x48, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r1, 0x1, 0x1, 0x1, 0x0, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000040)={0x12, 0x2}) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="180200000200000000000000000000008500000041000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000008000000850000000e00000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 16.756677287s ago: executing program 0 (id=275): openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x62c40, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) (async) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='fdinfo\x00') exit(0xc) (async) fchdir(r1) (async) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0x8, 0xffffffffd24b2432, 0x83, 0xffff, 0x0, 0xabe6, 0x0, 0x0, 0x80, 0x8001}}, 0x50) (async) syz_fuse_handle_req(r0, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000340)={0x200000, 0x200000, 0x0, 0x0, 0x5989}) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x60a03, 0x0) (async) umount2(&(0x7f00000002c0)='./file0\x00', 0xb) 16.640882061s ago: executing program 4 (id=276): syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) sendmsg$NL80211_CMD_JOIN_MESH(r0, 0x0, 0x0) 16.639754765s ago: executing program 0 (id=277): mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./mysys\x00', 0x1ff) mount(&(0x7f0000000000)=@filename='sysfs\x00', &(0x7f0000000100)='./mysys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0x15, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./mysys/bus/pci/devices/0000:00:02.0/resource\x00', 0x0, 0x0) r1 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x0, 0x2}, 0x18, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NFT_BATCH(r0, &(0x7f00000009c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000980)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a200000000b0a010800000000000000000a0000060900020073797a31000000002c000000180a01010000000000000000030000020c00054000000000000000050c000540000000000000000300020000060a03000000000000000000000000080c00034000000000000000050900020073797a32000000000c00034000000000000000030900010073797a31000000000800094000000000d90007409f63426c00d4f180945a6d1eef772e63f65ec9efeb1b5befd163ccc04806cbd1ef1a0e2b2a570ac11117dffc4e70710c4ccf7b03f66544a7a89e1ce14623844bcd601d2ffa1930194c970ca6025075bb739b4af0eee8c7c3a279a4e3f5e8966f76ee3456345fc0ef558edcd36475610753dda41446e4095ca6c93a3336baf73a940f1782feee18c390dac68b6a3a393012c6bed5601268495d5990711aef9944ae5ab29255ddf6802b4933982f7e0f893a2a39e86fac1062d3d9eb9700ca9a9914d87de3508a90fee4087efec97a8e922d76c798cc000000a3000740bf502c93978308a2774b81a4fdff0e3d05c98a6e8ee560f8bb1a5345df19277beec95ffa8c53ddddfa0c74ee9887373567690dbcb6b0ae5c66b2afb02876b071e895a8ce22208266639023725e751bfdbeec02b7490c923124a06ebf6764b16b64f04045c301c1bbfa168be50263fc8b5ae3c02024ffa4627c20e69c95673a5acd9fa424eb76be691d66c61cde6be458942e17e95811423edeaccccb1260a90034000580080001400000000808000140000000000800014000000008080001061ac93ba84000000062080001400000006c080001400000000010010000000a01010000000000000000000000060c0004400000000000000002ed000600f41d467e3d9865133d33a469b0d4df5ad21df69da9cfb87cc57384b8aea7f742272189b1f7654c9001567bbe8a77bf7160f7c6a8ecf443855e335d8a33bec9723d7a05e77fb6486bf9d7ddf484a958490f2e92cf2a2c281fb64e5b94de3100c83d326564ec4f753134b289b4076ef0cad65f55ea50c6aea799e04bc0c07dd5e16a1cddda2fa889f269016fdc5f83666ca4376da17af603852ad2fc029a83b466aa857855977faa2b2d5f60000704663c6c95e96edee3f25cf8cde54523c59217e707c0f5c30eb58fadccc7ca1bbdd6273ddaba2a3e6559ee97677305b6d4fb218fab26114610bc15f3000000b0000000050a010300000000000000000a0000086f000c004d638d4400000000000000bbe9eb8eeb90e235090f185ff07d776cd57c7692b5bae5853ffa02602996b50cc866095a899805170adc4199e5bf7f6604f8b5b1a7e00c08297bc6dfda8529cef69e0b3cadc3020004cb8846463474657022fb71f115e0408687d5f21bde077b00180004801400030069705f767469300000000000000000000c00048008000140000000020800054000000000140000001100010000000000000000"], 0x434}, 0x1, 0x0, 0x0, 0x24040010}, 0x0) recvmmsg(r2, &(0x7f0000001440)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) setsockopt$sock_int(r2, 0x1, 0x2e, &(0x7f0000000080)=0x55b6, 0x4) landlock_restrict_self(r1, 0xe) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000140)={0x0, 0x0, r0}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind(r4, &(0x7f0000000100)=@ll={0x11, 0xf7, 0x0, 0x1, 0x8, 0x6, @local}, 0x80) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x3c1, 0x3, 0x370, 0x170, 0x6c, 0x0, 0x170, 0x0, 0x2a0, 0x258, 0x258, 0x2a0, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @private0, [], [], 'wlan1\x00', '\x00', {}, {}, 0x11}, 0x0, 0x128, 0x170, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x3, 0x0, 0x7}}, @common=@inet=@multiport={{0x50}, {0x0, 0xfd, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4e21, 0x4e23]}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x5, 0x3, 0x7}}}, {{@ipv6={@private0, @empty, [0x0, 0x0, 0xff], [], 'lo\x00', 'erspan0\x00', {}, {}, 0x0, 0x0, 0x6, 0x4a}, 0x0, 0xf8, 0x130, 0x0, {}, [@common=@hl={{0x28}}, @inet=@rpfilter={{0x28}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x0, 0x6}, {0x2}}}}], {{'\x00', 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x2001}}, {0x28}}}}, 0x3d0) read(r0, &(0x7f0000000400), 0x3e8) 16.528925895s ago: executing program 4 (id=278): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc000}, 0xc010) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010002000000000000001200000018000180140002006e657464657673696d30000000000000080006"], 0x34}, 0x1, 0x0, 0x0, 0x2000c055}, 0x0) 16.451963085s ago: executing program 4 (id=279): unshare(0x400) (async) unshare(0x400) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x40, 0x0) file_getattr(r0, 0x0, &(0x7f0000000040), 0x64, 0x1000) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r1, &(0x7f0000000380)={0xa, 0x4e21, 0x1, @loopback, 0x400014}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4) (async) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000300)=@gcm_128={{0x303}, "fc895d8eb00066c2", "c5998c867c22b401046a89606ffcf92e", "2c5be7ad", "a0ca05c0707e52f4"}, 0x28) recvfrom$inet6(r1, &(0x7f00000000c0)=""/3, 0x3, 0x300, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) (async) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_open_dev$evdev(&(0x7f00000001c0), 0x0, 0x0) (async) r2 = syz_open_dev$evdev(&(0x7f00000001c0), 0x0, 0x0) io_uring_register$IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, &(0x7f00000004c0)=[@ioring_restriction_register_op={0x0, 0x18}], 0x1) prctl$PR_GET_NO_NEW_PRIVS(0x27) io_uring_register$IORING_REGISTER_SYNC_CANCEL(0xffffffffffffffff, 0x25, 0x0, 0x1) (async) io_uring_register$IORING_REGISTER_SYNC_CANCEL(0xffffffffffffffff, 0x25, 0x0, 0x1) ioctl$EVIOCSKEYCODE_V2(r2, 0x80104592, &(0x7f0000000040)={0x0, 0x0, 0x4, 0xf773, "00207d2000000000201b14700c1e0ac74f000000001200000000000900"}) 16.340643255s ago: executing program 4 (id=280): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x840, &(0x7f0000000140)={[{@test_dummy_encryption_v1}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x2}}]}, 0x1, 0x241, &(0x7f0000000540)="$eJzs3U9oFFccB/DfzO42TbKUtL0UCm2hlNIGQnor9JJeWgiUEEoptIUUES9KIsQEb4knLx70rJKTlyDejB4ll+BFETxFzSFeBA0eDB70sDI7iUSz/oGJO+J8PjC7M7vvze8Ns983exkmgMoaiIiRiKhFxGBENCIi2dngm3wZ2Npc6F2ZiGi1/nyYtNvl27ntfv0RMR8RP0fEcprEwXrE7NK/649Xf//+xEzju3NL//R29SC3bKyv/bF5duz4xdGfZq/fvD+WxEg0XziuvZd0+KyeRHz2Loq9J5J62SPgbYwfvXAry/3nEfFtO/+NSCM/eSenP1puxI9nXtX31IMbX3ZzrMDea7Ua2TVwvgVUThoRzUjSoYjI19N0aCj/D3+71pcempo+MnhgamZyf9kzFbBXmhFrv13uudT/Uv7v1fL8Ax+uLP9/jS/eydY3a2WPBuimLP+D/8/9EPIPlSP/UF3yD9Ul/1Bdr8t/WtKYgO5w/Yfqkn+oLvmH6pJ/qC75h+ramX8AoFpaPWXfgQyUpez5BwAAAAAAAAAAAAAAAAAA2G2hd2Vie+lWzaunIzZ+jYh6p/q1recQfNx+7XuUZM2eS/Juhfz3dcEdFHS+5LuvP7lbbv1rX5Vbf24yYv5YRAzX67t/f0nh52B8+obvG/sKFijol7/Lrf90sdz6o6sRV7L5Z7jT/JPGF+33zvNPMzt/BesfflJwBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHTNswAAAP//ceptKw==") write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x80100, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/sys/net/mpls/conf/lo/input\x00', 0x1, 0x0) write$binfmt_register(r0, &(0x7f00000000c0)={0x3a, 'syz2', 0x3a, 'M', 0x3a, 0x3fc93b38, 0x3a, ':\\', 0x3a, 'proc\x00', 0x3a, '.'}, 0x28) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x11, &(0x7f0000000180)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000140)=0x1, 0x4) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1}}, 0x80001}, 0x1c) connect$pptp(0xffffffffffffffff, &(0x7f00000001c0)={0x18, 0x2, {0x2, @empty}}, 0x1e) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x1d, 0x4e20, @loopback}, 0x10) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000002c0), 0x3) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cpuacct.usage_sys\x00', 0x275a, 0x13) write$binfmt_script(r5, &(0x7f000000e0c0), 0x10010) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r6, 0x84, 0x7, &(0x7f0000005240), &(0x7f0000005280)=0x4) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f0000000b00)=@ccm_128={{0x303}, "0000090800000003", "73b59657269ef929ee540a8a0a86c5d0", "6362dfd5", "21be0dd9f7f3c312"}, 0x28) 16.336032218s ago: executing program 3 (id=281): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51) r1 = syz_open_dev$video(&(0x7f00000000c0), 0x17b4b522, 0x0) ioctl$VIDIOC_G_OUTPUT(r1, 0x8004562e, &(0x7f0000000000)) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x8}) r2 = socket(0x2, 0x80805, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010101}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x7a, &(0x7f0000000340)={r4, @in={{0x2, 0x4e21, @rand_addr=0x64010102}}}, &(0x7f0000000040)=0x84) cachestat(r2, &(0x7f0000000000)={0xfffffffffffff29d}, &(0x7f00000000c0), 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000000980)={r4, 0x5, 0x30, 0x1, 0x1c0f16}, &(0x7f00000009c0)=0x18) sendmmsg$inet_sctp(r2, &(0x7f0000000ac0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}, {&(0x7f0000000100)=@in6={0xa, 0x4e24, 0x8, @private1, 0x2}, 0x1c, &(0x7f00000008c0)=[{&(0x7f00000004c0)="0c40adb5ccd4d085635297341d1617512f992e87c958efaf3ecd10a8c117661f36031e24894a88249d4e042151a48a7f6ec6def12d34d655a5ebd6629e75e2b9e75aa21291a950de1f6aba534f7ecc88d5eec3542298067cd376ffee87f6d88eddecebf9f46a648b0570f32e8e7121b4324e47b77a9351d8f21f8494b1a96fceb4ab467a98c96661746e7d4a989c0590b99ced20d415f6a1bdd289f0a35670c235787fa44f68934ad72167088b4427511812086333b3153c82c3dd0dddf7f6177d13fc92c85e84b197dc0b09c2c675e0ebeca616717af7f89dcb2c157dcbbf804afbb37120c17337f6766611709f0d6e", 0xf0}, {&(0x7f00000005c0)}, {&(0x7f0000000600)="29abf6520cd4492594", 0x9}, {&(0x7f0000000640)="592a3bc2219ba99ee576677048a6ba64c35c23236ef845ad71e17bab8d8b9899d3c47c8638aa3d464d26b4e09db58e01983188d4d14018bbc03aedf40470f3c0b99a595cac8340476687c06a6b0b602cbfc67865f0fdc29de52f2adb0f2d25091656d995481e31be9ac407c76b9e6b0a58019cf8c615743fa0b42ccfb73b3282e949d1d83ca8ac4172f7ac843f91f939f6961e06d06883f071ac23dca1ad2864ada001b3d4bf9f42885940db", 0xac}, {&(0x7f0000000740)='z', 0x1}, {&(0x7f0000000780)="eb288af25632209e07442ecb90453b4c615224c97e6ceeae645a405efeb1354e7feab3a7543774733ec18ffd9a52b7840929af302022a8221f88d99fd5a87a34b53d64b762013d184ddb85f40c3c947edbd7a70f54440492b445e3e6d882c248dcc0f358d1066f7d64c9d70e0f6b9e", 0x6f}, {&(0x7f0000000800)="18fb5bb99918e4f8517b1652", 0xc}, {&(0x7f0000000840)="4cb283436f827c13c9530bc2c35d7cd1e809a509d279d147087c0d15813caf47e9fb3b7ee009fbf45b774c0e", 0x2c}, {&(0x7f0000000880)}], 0x9, &(0x7f0000000a00)=[@sndinfo={0x20, 0x84, 0x2, {0x1, 0x4, 0x2, 0x4, r4}}, @dstaddrv4={0x18, 0x84, 0x7, @multicast1}, @authinfo={0x18, 0x84, 0x6, {0x400}}, @dstaddrv4={0x18, 0x84, 0x7, @loopback}, @sndinfo={0x20, 0x84, 0x2, {0x44, 0x200, 0xfffff06f, 0x2, r5}}, @dstaddrv6={0x20, 0x84, 0x8, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}], 0xa8, 0x200c4}], 0x2, 0x8801) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f0000000240)={r4, 0x3b}, &(0x7f0000000280)=0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file4\x00', 0x1c0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file4\x00', 0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x4) 16.196760194s ago: executing program 3 (id=283): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000002001000001"], 0x50) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x18, &(0x7f0000000140)={[{@uni_xlate}, {@shortname_win95}, {@rodir}, {}, {@utf8}, {@rodir}, {@numtail}, {@fat=@nfs_stale_rw}, {@fat=@showexec}, {@shortname_mixed}, {@fat=@check_strict}, {@shortname_winnt}, {@utf8no}, {@iocharset={'iocharset', 0x3d, 'maccroatian'}}, {@fat=@gid}, {@utf8}, {@shortname_mixed}]}, 0x7, 0x2a6, &(0x7f0000000240)="$eJzs3c2KI1UUAOBT+ekkukgWrkSYAl24GqZ9gm5kBLVBULJQF9o4GZBUGOhAIK0YZ+UT+AQ+jxtx6cYHUNw5C7GkUpWYzFR6TDvTPTTft+nDuffU/amia1U3n782Gd97ML3/8Otfo9tNonEUR/EoiUE0YuXbqPXz7/V5AOAF9yjP44+81ClT8+0e7R2VrcZznxwA8Fxsvv+3GrzdAeDG+ujjT94/Pjm5+2GadiMm382GSZR/y/bj+/FlZDGKO9GPvyLytTJ+592Tu9FKC4N4Y7KYDYvKyWc/Vtc//i1iWX8Y/RjU1x+mpY36xWzYjpeq8Y+yGH3wQ/TjlaLml/dWc1/Vv1VTH8ODePP1jfnfjn789EU8iCzuPVb/zWGavp1//+dXnxbZoj5ZzIaddb+qd/Oq7gkAAAAAAAAAAAAAAAAAAAAAADff7XRtsH3+zurg/wvanzwfqLc64Gexcb7PnTRN86Ts/299K15tRes61w4AAAAAAAAAAAAAAAAAAAAviun8fHya9SJiGWSjszKTzSNiO7NHsPqsv6Yp/t7OdCLiMkOUwa19q6JZTS1LiiW347+Xt6OzrHx65+aeqyi2PxudJa247IY/GSTrTK8MohFxNr0V5VhFplcGG5n/PXo3yrEq49PkaTe3W/eQPIMgr3n8mjurDh7P9KoV1HTuXTD6wcuXmnPe39GURER7vZkXX6f9bPfw6v4HAQAAAAAAAAAAAAAAAAAApen8fNxYfvRb0/jwGiYEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANdgOj8fny5//3+PYFEV7+qTN4ugFVWmZtiDK14mAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAN9w/AQAA//8XQlpx") r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) ioctl$UBLK_U_CMD_END_USER_RECOVERY(0xffffffffffffffff, 0xc0207511, &(0x7f0000000500)={0x0, 0xffff, 0x0, 0x0, 0x0}) prlimit64(r2, 0x8, &(0x7f0000000140)={0x7, 0x103}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeee, 0x8031, 0xffffffffffffffff, 0xffffc000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f848350000005e140602000000000e000a00100000000a8000001294", 0x2e}], 0x1}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x8, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3fffffc, 0x0, 0x0, 0x0, 0x200000}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}]}, &(0x7f0000000280)='GPL\x00', 0xc, 0xd2, &(0x7f00000002c0)=""/210, 0x0, 0x14}, 0x94) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x41100, 0x5}, 0x94) 15.743857824s ago: executing program 0 (id=284): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) socket$packet(0x11, 0x3, 0x300) write$tun(r0, &(0x7f0000000dc0)={@val={0x0, 0x88e7}, @val={0x0, 0x1, 0x11, 0x4, 0x0, 0xca6}, @ipv4=@gre={{0x9, 0x4, 0x2, 0x30, 0x1d8, 0x68, 0x0, 0xfc, 0x2f, 0x0, @remote, @multicast1, {[@generic={0x7, 0x5, "17aa7e"}, @noop, @noop, @cipso={0x86, 0x6, 0xfffffffffffffffe}]}}, {{0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x880b, 0x1f, 0x0, [0x3], "e9dcb014eee4e48754d6429137f3896723c80e7a67da3cf81ab9bba3adcfc0"}, {0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800, [0x3], "a5bc8e0672bc9f2102bdf2581a732c34a128a5d92378978258b0981bc0869d864f56eb13105600fab0cbe7a380574487de8a1f81675ccb377ab7bb74c8271be5f42e4b3cea6b274610db09cb4ad3bfe74589a4697757fc2a2d48adaadb3cd7b3b4e563e0de2431df03c74f50ce48d02c841e70442fb67f079435f69fcc25110814e637e304c0dc5e5c472d0e92573310cc30feaa99b6272023a412820b89811b004daefbfcbea4ff67b21c0fa8"}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd, [], "f0d588570e0c59b448f0882775eb7adc601dc0aa8248b64c58a1ccb112a8fb8d532a4e602e5c4b5f14e28c7f091f9096cd94c37891fd4a9b9a6d96b5a32dd9cb124bb60a23f1"}, {0x8, 0x88be, 0x3, {{0x5, 0x1, 0x3, 0x2, 0x0, 0x2, 0x7, 0x9}, 0x1, {0x2}}}, {0x8, 0x22eb, 0x4, {{0x1, 0x2, 0x9, 0x3, 0x1, 0x1, 0x3, 0x1}, 0x2, {0x9, 0x3, 0x3, 0x2, 0x1, 0x1, 0x1, 0x1, 0x1}}}, {0x8, 0x6558, 0x4, "865e2f3c562f3db82aed02b3667902785b2a96f956c4b67d6e5a291fa9767abc8805e2faf5bad5ac9907fc09d9e21969d1d0eb7299298a39c3414716e0c7f1cf47ce7d2dea10e58d5b4daac0f4939f16bfc088a32fac7414de25"}}}}, 0x1e6) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x408e, &(0x7f0000000240)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@dax_never}, {@nobh}, {@stripe={'stripe', 0x3d, 0x4000}}, {@errors_remount}, {@max_batch_time={'max_batch_time', 0x3d, 0x4}}]}, 0x3, 0x446, &(0x7f0000000940)="$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") mount$bpf(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000001c0), 0x2000800, &(0x7f0000000500)={[{@mode={'mode', 0x3d, 0x33f4}}]}) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) socket$kcm(0x2, 0x3, 0x2) (async) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) (async) socket$packet(0x11, 0x3, 0x300) (async) write$tun(r0, &(0x7f0000000dc0)={@val={0x0, 0x88e7}, @val={0x0, 0x1, 0x11, 0x4, 0x0, 0xca6}, @ipv4=@gre={{0x9, 0x4, 0x2, 0x30, 0x1d8, 0x68, 0x0, 0xfc, 0x2f, 0x0, @remote, @multicast1, {[@generic={0x7, 0x5, "17aa7e"}, @noop, @noop, @cipso={0x86, 0x6, 0xfffffffffffffffe}]}}, {{0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x880b, 0x1f, 0x0, [0x3], "e9dcb014eee4e48754d6429137f3896723c80e7a67da3cf81ab9bba3adcfc0"}, {0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800, [0x3], "a5bc8e0672bc9f2102bdf2581a732c34a128a5d92378978258b0981bc0869d864f56eb13105600fab0cbe7a380574487de8a1f81675ccb377ab7bb74c8271be5f42e4b3cea6b274610db09cb4ad3bfe74589a4697757fc2a2d48adaadb3cd7b3b4e563e0de2431df03c74f50ce48d02c841e70442fb67f079435f69fcc25110814e637e304c0dc5e5c472d0e92573310cc30feaa99b6272023a412820b89811b004daefbfcbea4ff67b21c0fa8"}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd, [], "f0d588570e0c59b448f0882775eb7adc601dc0aa8248b64c58a1ccb112a8fb8d532a4e602e5c4b5f14e28c7f091f9096cd94c37891fd4a9b9a6d96b5a32dd9cb124bb60a23f1"}, {0x8, 0x88be, 0x3, {{0x5, 0x1, 0x3, 0x2, 0x0, 0x2, 0x7, 0x9}, 0x1, {0x2}}}, {0x8, 0x22eb, 0x4, {{0x1, 0x2, 0x9, 0x3, 0x1, 0x1, 0x3, 0x1}, 0x2, {0x9, 0x3, 0x3, 0x2, 0x1, 0x1, 0x1, 0x1, 0x1}}}, {0x8, 0x6558, 0x4, "865e2f3c562f3db82aed02b3667902785b2a96f956c4b67d6e5a291fa9767abc8805e2faf5bad5ac9907fc09d9e21969d1d0eb7299298a39c3414716e0c7f1cf47ce7d2dea10e58d5b4daac0f4939f16bfc088a32fac7414de25"}}}}, 0x1e6) (async) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x408e, &(0x7f0000000240)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@dax_never}, {@nobh}, {@stripe={'stripe', 0x3d, 0x4000}}, {@errors_remount}, {@max_batch_time={'max_batch_time', 0x3d, 0x4}}]}, 0x3, 0x446, &(0x7f0000000940)="$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") (async) mount$bpf(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000001c0), 0x2000800, &(0x7f0000000500)={[{@mode={'mode', 0x3d, 0x33f4}}]}) (async) 15.508954062s ago: executing program 3 (id=286): syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) sendmsg$NL80211_CMD_JOIN_MESH(r0, 0x0, 0x0) 15.492953426s ago: executing program 34 (id=286): syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) sendmsg$NL80211_CMD_JOIN_MESH(r0, 0x0, 0x0) 15.461000427s ago: executing program 0 (id=288): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffdd, 0xa}, [@ldst={0x3, 0x0, 0x3, 0x1c10a1, 0x0, 0x1c}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xb5}, 0x48) (async) mprotect(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1) 15.450317432s ago: executing program 4 (id=289): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x3c, r1, 0x205, 0xfffffffc, 0x25dfdbfd, {}, [@ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0x8000}, @ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}]}, @ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8}]}, 0x3c}}, 0x0) 15.133023411s ago: executing program 0 (id=290): r0 = openat$smackfs_ptrace(0xffffffffffffff9c, &(0x7f0000003580), 0x2, 0x0) preadv2(r0, &(0x7f0000003800)=[{&(0x7f00000035c0)=""/77, 0x4d}, {0x0}], 0x2, 0x0, 0x4, 0x0) syz_emit_ethernet(0x4e, &(0x7f00000000c0)={@broadcast, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x7, 0x6, "001b01", 0x18, 0x3a, 0xff, @initdev={0xfe, 0x88, '\x00', 0x2, 0x0}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0xff, 0x2, 0x3, 0x1, 0xfffffff6, [{0x5, 0x1, "c80800000000"}]}}}}}}, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x180048a, &(0x7f0000000080)={[{@jqfmt_vfsold}, {@usrjquota, 0x22}, {@noacl}, {@noload}, {@data_err_ignore}, {@usrjquota, 0x22}, {@minixdf}, {@dax_never}, {@noblock_validity}]}, 0x1, 0x44e, &(0x7f0000000900)="$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") syz_emit_ethernet(0x4e, &(0x7f0000000080)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "61c58c", 0x18, 0x6, 0x1, @local, @local, {[], {{0xfffe, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, {[@generic={0x3, 0x2}]}}}}}}}}, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/mdstat\x00', 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000002c0)='.\x00', &(0x7f0000000040), 0x8000, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r1}}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$fou(&(0x7f0000000b80), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000340)={0x1c, r3, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40040021}, 0x40080) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000006c0)={'ip6_vti0\x00', &(0x7f0000000640)={'syztnl0\x00', 0x0, 0x4, 0x0, 0x9, 0xe, 0x1e, @empty, @mcast1, 0x8, 0x40, 0x0, 0x6}}) r5 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCVHANGUP(r5, 0x5437, 0x0) ioctl$TCSETSF2(r5, 0x402c542d, &(0x7f00000007c0)={0xe0b, 0x6, 0x8, 0x5, 0x8, "cf2a8af192fcd3ca65b27b07e407ad528d8449", 0xd982, 0x1}) sendmsg$FOU_CMD_DEL(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x2c, r3, 0x8, 0x70bd2d, 0x25dfdbff, {}, [@FOU_ATTR_IFINDEX={0x8, 0xb, r4}, @FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e24}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8040}, 0x40) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_wakeup_irq', 0x101800, 0xa) sendmsg$nl_route(r6, &(0x7f00000005c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)=@ipv4_newrule={0x40, 0x20, 0x400, 0x70bd28, 0x25dfdbfc, {0x2, 0x14, 0x20, 0x6, 0x1, 0x0, 0x0, 0x1, 0x8}, [@FRA_TUN_ID={0xc, 0xc, 0x1, 0x0, 0x77}, @FRA_FLOW={0x8, 0xb, 0x6}, @FRA_FLOW={0x8, 0xb, 0x81}, @FRA_GENERIC_POLICY=@FRA_SUPPRESS_PREFIXLEN={0x8, 0xe, 0x7}]}, 0x40}, 0x1, 0x0, 0x0, 0x20008020}, 0x4004880) ioctl$KDFONTOP_GET(r6, 0x4b72, &(0x7f0000000500)={0x1, 0x1, 0x18, 0x3, 0x1d4, &(0x7f0000000100)}) openat$smackfs_ptrace(0xffffffffffffff9c, &(0x7f0000003580), 0x2, 0x0) (async) preadv2(r0, &(0x7f0000003800)=[{&(0x7f00000035c0)=""/77, 0x4d}, {0x0}], 0x2, 0x0, 0x4, 0x0) (async) syz_emit_ethernet(0x4e, &(0x7f00000000c0)={@broadcast, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x7, 0x6, "001b01", 0x18, 0x3a, 0xff, @initdev={0xfe, 0x88, '\x00', 0x2, 0x0}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0xff, 0x2, 0x3, 0x1, 0xfffffff6, [{0x5, 0x1, "c80800000000"}]}}}}}}, 0x0) (async) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x180048a, &(0x7f0000000080)={[{@jqfmt_vfsold}, {@usrjquota, 0x22}, {@noacl}, {@noload}, {@data_err_ignore}, {@usrjquota, 0x22}, {@minixdf}, {@dax_never}, {@noblock_validity}]}, 0x1, 0x44e, &(0x7f0000000900)="$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") (async) syz_emit_ethernet(0x4e, &(0x7f0000000080)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "61c58c", 0x18, 0x6, 0x1, @local, @local, {[], {{0xfffe, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, {[@generic={0x3, 0x2}]}}}}}}}}, 0x0) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/mdstat\x00', 0x0, 0x0) (async) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') (async) mount$9p_fd(0x0, &(0x7f00000002c0)='.\x00', &(0x7f0000000040), 0x8000, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r1}}) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$fou(&(0x7f0000000b80), 0xffffffffffffffff) (async) sendmsg$FOU_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000340)={0x1c, r3, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40040021}, 0x40080) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000006c0)={'ip6_vti0\x00', &(0x7f0000000640)={'syztnl0\x00', 0x0, 0x4, 0x0, 0x9, 0xe, 0x1e, @empty, @mcast1, 0x8, 0x40, 0x0, 0x6}}) (async) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$TIOCVHANGUP(r5, 0x5437, 0x0) (async) ioctl$TCSETSF2(r5, 0x402c542d, &(0x7f00000007c0)={0xe0b, 0x6, 0x8, 0x5, 0x8, "cf2a8af192fcd3ca65b27b07e407ad528d8449", 0xd982, 0x1}) (async) sendmsg$FOU_CMD_DEL(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x2c, r3, 0x8, 0x70bd2d, 0x25dfdbff, {}, [@FOU_ATTR_IFINDEX={0x8, 0xb, r4}, @FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e24}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8040}, 0x40) (async) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_wakeup_irq', 0x101800, 0xa) (async) sendmsg$nl_route(r6, &(0x7f00000005c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)=@ipv4_newrule={0x40, 0x20, 0x400, 0x70bd28, 0x25dfdbfc, {0x2, 0x14, 0x20, 0x6, 0x1, 0x0, 0x0, 0x1, 0x8}, [@FRA_TUN_ID={0xc, 0xc, 0x1, 0x0, 0x77}, @FRA_FLOW={0x8, 0xb, 0x6}, @FRA_FLOW={0x8, 0xb, 0x81}, @FRA_GENERIC_POLICY=@FRA_SUPPRESS_PREFIXLEN={0x8, 0xe, 0x7}]}, 0x40}, 0x1, 0x0, 0x0, 0x20008020}, 0x4004880) (async) ioctl$KDFONTOP_GET(r6, 0x4b72, &(0x7f0000000500)={0x1, 0x1, 0x18, 0x3, 0x1d4, &(0x7f0000000100)}) (async) 15.082705124s ago: executing program 35 (id=290): r0 = openat$smackfs_ptrace(0xffffffffffffff9c, &(0x7f0000003580), 0x2, 0x0) preadv2(r0, &(0x7f0000003800)=[{&(0x7f00000035c0)=""/77, 0x4d}, {0x0}], 0x2, 0x0, 0x4, 0x0) syz_emit_ethernet(0x4e, &(0x7f00000000c0)={@broadcast, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x7, 0x6, "001b01", 0x18, 0x3a, 0xff, @initdev={0xfe, 0x88, '\x00', 0x2, 0x0}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0xff, 0x2, 0x3, 0x1, 0xfffffff6, [{0x5, 0x1, "c80800000000"}]}}}}}}, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x180048a, &(0x7f0000000080)={[{@jqfmt_vfsold}, {@usrjquota, 0x22}, {@noacl}, {@noload}, {@data_err_ignore}, {@usrjquota, 0x22}, {@minixdf}, {@dax_never}, {@noblock_validity}]}, 0x1, 0x44e, &(0x7f0000000900)="$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") syz_emit_ethernet(0x4e, &(0x7f0000000080)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "61c58c", 0x18, 0x6, 0x1, @local, @local, {[], {{0xfffe, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, {[@generic={0x3, 0x2}]}}}}}}}}, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/mdstat\x00', 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000002c0)='.\x00', &(0x7f0000000040), 0x8000, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r1}}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$fou(&(0x7f0000000b80), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000340)={0x1c, r3, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40040021}, 0x40080) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000006c0)={'ip6_vti0\x00', &(0x7f0000000640)={'syztnl0\x00', 0x0, 0x4, 0x0, 0x9, 0xe, 0x1e, @empty, @mcast1, 0x8, 0x40, 0x0, 0x6}}) r5 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCVHANGUP(r5, 0x5437, 0x0) ioctl$TCSETSF2(r5, 0x402c542d, &(0x7f00000007c0)={0xe0b, 0x6, 0x8, 0x5, 0x8, "cf2a8af192fcd3ca65b27b07e407ad528d8449", 0xd982, 0x1}) sendmsg$FOU_CMD_DEL(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x2c, r3, 0x8, 0x70bd2d, 0x25dfdbff, {}, [@FOU_ATTR_IFINDEX={0x8, 0xb, r4}, @FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e24}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8040}, 0x40) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_wakeup_irq', 0x101800, 0xa) sendmsg$nl_route(r6, &(0x7f00000005c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)=@ipv4_newrule={0x40, 0x20, 0x400, 0x70bd28, 0x25dfdbfc, {0x2, 0x14, 0x20, 0x6, 0x1, 0x0, 0x0, 0x1, 0x8}, [@FRA_TUN_ID={0xc, 0xc, 0x1, 0x0, 0x77}, @FRA_FLOW={0x8, 0xb, 0x6}, @FRA_FLOW={0x8, 0xb, 0x81}, @FRA_GENERIC_POLICY=@FRA_SUPPRESS_PREFIXLEN={0x8, 0xe, 0x7}]}, 0x40}, 0x1, 0x0, 0x0, 0x20008020}, 0x4004880) ioctl$KDFONTOP_GET(r6, 0x4b72, &(0x7f0000000500)={0x1, 0x1, 0x18, 0x3, 0x1d4, &(0x7f0000000100)}) openat$smackfs_ptrace(0xffffffffffffff9c, &(0x7f0000003580), 0x2, 0x0) (async) preadv2(r0, &(0x7f0000003800)=[{&(0x7f00000035c0)=""/77, 0x4d}, {0x0}], 0x2, 0x0, 0x4, 0x0) (async) syz_emit_ethernet(0x4e, &(0x7f00000000c0)={@broadcast, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x7, 0x6, "001b01", 0x18, 0x3a, 0xff, @initdev={0xfe, 0x88, '\x00', 0x2, 0x0}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0xff, 0x2, 0x3, 0x1, 0xfffffff6, [{0x5, 0x1, "c80800000000"}]}}}}}}, 0x0) (async) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x180048a, &(0x7f0000000080)={[{@jqfmt_vfsold}, {@usrjquota, 0x22}, {@noacl}, {@noload}, {@data_err_ignore}, {@usrjquota, 0x22}, {@minixdf}, {@dax_never}, {@noblock_validity}]}, 0x1, 0x44e, &(0x7f0000000900)="$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") (async) syz_emit_ethernet(0x4e, &(0x7f0000000080)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "61c58c", 0x18, 0x6, 0x1, @local, @local, {[], {{0xfffe, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, {[@generic={0x3, 0x2}]}}}}}}}}, 0x0) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/mdstat\x00', 0x0, 0x0) (async) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') (async) mount$9p_fd(0x0, &(0x7f00000002c0)='.\x00', &(0x7f0000000040), 0x8000, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r1}}) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$fou(&(0x7f0000000b80), 0xffffffffffffffff) (async) sendmsg$FOU_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000340)={0x1c, r3, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40040021}, 0x40080) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000006c0)={'ip6_vti0\x00', &(0x7f0000000640)={'syztnl0\x00', 0x0, 0x4, 0x0, 0x9, 0xe, 0x1e, @empty, @mcast1, 0x8, 0x40, 0x0, 0x6}}) (async) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$TIOCVHANGUP(r5, 0x5437, 0x0) (async) ioctl$TCSETSF2(r5, 0x402c542d, &(0x7f00000007c0)={0xe0b, 0x6, 0x8, 0x5, 0x8, "cf2a8af192fcd3ca65b27b07e407ad528d8449", 0xd982, 0x1}) (async) sendmsg$FOU_CMD_DEL(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x2c, r3, 0x8, 0x70bd2d, 0x25dfdbff, {}, [@FOU_ATTR_IFINDEX={0x8, 0xb, r4}, @FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e24}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8040}, 0x40) (async) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_wakeup_irq', 0x101800, 0xa) (async) sendmsg$nl_route(r6, &(0x7f00000005c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)=@ipv4_newrule={0x40, 0x20, 0x400, 0x70bd28, 0x25dfdbfc, {0x2, 0x14, 0x20, 0x6, 0x1, 0x0, 0x0, 0x1, 0x8}, [@FRA_TUN_ID={0xc, 0xc, 0x1, 0x0, 0x77}, @FRA_FLOW={0x8, 0xb, 0x6}, @FRA_FLOW={0x8, 0xb, 0x81}, @FRA_GENERIC_POLICY=@FRA_SUPPRESS_PREFIXLEN={0x8, 0xe, 0x7}]}, 0x40}, 0x1, 0x0, 0x0, 0x20008020}, 0x4004880) (async) ioctl$KDFONTOP_GET(r6, 0x4b72, &(0x7f0000000500)={0x1, 0x1, 0x18, 0x3, 0x1d4, &(0x7f0000000100)}) (async) 14.910825117s ago: executing program 4 (id=292): symlinkat(&(0x7f00000000c0)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r0 = socket$nl_netfilter(0x10, 0x3, 0xc) fcntl$setlease(r0, 0x400, 0x2) (async, rerun: 64) r1 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0), 0x502, 0x0) (rerun: 64) read$rfkill(r1, &(0x7f0000000080), 0xffffff1c) connect$unix(r1, &(0x7f00000001c0)=@file={0x0, './file1\x00'}, 0x6e) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)={0x50, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x50}}, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000090607000000000000000000050000400900020073797a3100000000050001000700000038000780060004404e21000005000700ff0000000c00018008000140e00040000c00028008000140e00000020c00148008000140ffffff"], 0x60}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) (async) socket$packet(0x11, 0x3, 0x300) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {0x7, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80) (async) socket$nl_xfrm(0x10, 0x3, 0x6) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$UI_DEV_CREATE(r4, 0x5501) (async) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000900)={0x1, &(0x7f00000008c0)=[{0x6, 0x0, 0x0, 0x6}]}) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) close_range(r5, 0xffffffffffffffff, 0x0) 14.757680644s ago: executing program 36 (id=292): symlinkat(&(0x7f00000000c0)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r0 = socket$nl_netfilter(0x10, 0x3, 0xc) fcntl$setlease(r0, 0x400, 0x2) (async, rerun: 64) r1 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0), 0x502, 0x0) (rerun: 64) read$rfkill(r1, &(0x7f0000000080), 0xffffff1c) connect$unix(r1, &(0x7f00000001c0)=@file={0x0, './file1\x00'}, 0x6e) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)={0x50, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x50}}, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000090607000000000000000000050000400900020073797a3100000000050001000700000038000780060004404e21000005000700ff0000000c00018008000140e00040000c00028008000140e00000020c00148008000140ffffff"], 0x60}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) (async) socket$packet(0x11, 0x3, 0x300) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {0x7, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80) (async) socket$nl_xfrm(0x10, 0x3, 0x6) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$UI_DEV_CREATE(r4, 0x5501) (async) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000900)={0x1, &(0x7f00000008c0)=[{0x6, 0x0, 0x0, 0x6}]}) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) close_range(r5, 0xffffffffffffffff, 0x0) 1.109002115s ago: executing program 9 (id=576): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000400)={'sit0\x00', &(0x7f0000000340)={'tunl0\x00', 0x0, 0x20, 0x80, 0x3, 0xff, {{0x5, 0x4, 0x0, 0x9, 0x14, 0x68, 0x0, 0xee, 0x4, 0x0, @broadcast, @multicast2}}}}) 1.093115983s ago: executing program 5 (id=577): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="b408e80000080089820e39fb78e5a1008510000002000000b7000100000000009500c2000000006f8d95d792794500ea"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb}, 0x70) 1.060928294s ago: executing program 9 (id=578): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, &(0x7f0000002080)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0xf, &(0x7f00000002c0)=0x14, 0x4) 1.012739983s ago: executing program 5 (id=580): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000000)=0x86, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0xa, 0x4e1f, 0xffffffff, @loopback, 0xbe}, 0x1c) recvmmsg(r0, &(0x7f0000000140)=[{{0x0, 0x0, 0x0}, 0x7ffffffe}], 0x1, 0x40002000, 0x0) ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000000180)) 987.417372ms ago: executing program 9 (id=581): r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) r1 = gettid() timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r1}, &(0x7f0000000180)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) keyctl$chown(0x4, r0, 0x0, 0x0) 964.325171ms ago: executing program 9 (id=582): syz_emit_ethernet(0x3e, &(0x7f0000000080)=ANY=[@ANYBLOB="bbbbbbbbbbbb0180c200000386dd60f4adf700082c00fe800000000000000000000000000021ff02000000000000000000000000000181009078"], 0x0) 900.919702ms ago: executing program 5 (id=583): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x6, 0x1, 0x7, 0x7fffffff}]}) waitid$P_PIDFD(0x3, 0xffffffffffffffff, 0x0, 0x1, 0x0) 900.810693ms ago: executing program 9 (id=584): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d0918108ac051582588f0000000109022d00010000000009040000030b08000009058d67c8002a000009050502000000000009058b6ead"], 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) syz_usb_ep_write(r0, 0x8d, 0x7, &(0x7f00000001c0)="d0be166e5e8b26") 865.167728ms ago: executing program 5 (id=587): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x1018e58, &(0x7f0000000640)={[{@debug}, {@noblock_validity}, {@nolazytime}, {@max_batch_time={'max_batch_time', 0x3d, 0x7}}, {@nodiscard}, {@nouid32}, {@noauto_da_alloc}]}, 0x4, 0x61f, &(0x7f0000000b00)="$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") syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') r0 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000180)=0x13) pselect6(0x40, &(0x7f0000000100)={0x0, 0x3, 0x0, 0xfffffffffffffffd, 0x9, 0x4}, 0x0, &(0x7f0000000240)={0x1f, 0xb4f, 0x56d92c8a, 0x0, 0xfffffffffffffffc, 0x10000, 0x10}, 0x0, 0x0) mount(0x0, &(0x7f0000000240)='.\x00', 0x0, 0x2390024, 0x0) 704.292279ms ago: executing program 5 (id=591): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)='ns/pid\x00') setns(r0, 0x40000000) 582.798339ms ago: executing program 5 (id=596): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x6f, @loopback}, 0x10) r1 = fsopen(&(0x7f0000000100)='nfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000140)='addr\x00', &(0x7f0000000180)='127.0.0.1\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f00000001c0)='source\x00', &(0x7f0000000200)='127.0.0.1:/export\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000240)='vers\x00', &(0x7f0000000280)='3\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000340)='mountproto\x00', &(0x7f0000000380)='udp\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) (async) 435.910904ms ago: executing program 6 (id=604): syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='nonumtail=0,shortname=lower,shortname=mixed,utf8=1,iocharset=cp1251,nonumtail=0,rodir,shortname=win95,iocharset=utf8,check=relaxed,shortname=mixed,shortname=win95,errors=remount-ro,shortname=winnt,shortname=win95,uni_xlate=0,nonumtail=0,discard,nnonumtail=1,codepage=865,nonumtail=0,shortname=winnt,shortname=win95,Cscontext=unconfined_u,\x00'], 0x1, 0x36b, &(0x7f0000000a00)="$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") 409.629775ms ago: executing program 7 (id=605): r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000140)=ANY=[], 0x1c) 360.953394ms ago: executing program 8 (id=606): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = io_uring_setup(0x3450, &(0x7f0000000080)={0x0, 0x1539, 0x0, 0x2}) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f00000002c0), 0x0) wait4(r0, 0x0, 0x8, 0x0) syz_emit_vhci(0x0, 0xf) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/bus/input/devices\x00', 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) getrusage(0xffffffffffffffff, &(0x7f0000019300)) 339.591027ms ago: executing program 7 (id=607): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x200000, &(0x7f0000000180)={[{@init_itable_val={'init_itable', 0x3d, 0x6}}, {}, {@nojournal_checksum}, {@norecovery}, {@dioread_nolock}, {@grpjquota}, {@noauto_da_alloc}, {@acl}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x343}}]}, 0xfd, 0x585, &(0x7f0000000580)="$eJzs3V9rU+cfAPDvSRur1t+vFUS2XQzBiznE1Lb742CguxybTNjuXWhjkaZGmlRsJ0wv5s1uhgzGmDD2Ana/S9kb2KsQNkGGlO1iDDpOelJjmzRpTW1sPx847fPknOQ53zznec7znJOQAPatE+mfXMSrEfFNEjHStG4wspUnVrdbfnJrKl2SWFn59M8kzq97rST7P5xlXomIX7+KOJ3bWG51cWm2WC6X5rP8WG3u+lh1cenM1bniTGmmdG1icvLc25MT7737Ts9iffPS399/8uDDc1+fXP7u50dH7yVxIY5k69K4elDE7ebMieK/WSofF9ZtON6DwvpJsts7wLYMZO08H2kfMBIDWasH9r4vI2IF2KeSje1/qN22OX0F7CGNcUBjbt+jefBL4/EHqxOgjfEPrl4biYP1udHh5eSZmVE63x3tQflpGb/8cf9eusTm1yEOdcgDbMntOxFxdnBwY/+XZP3f9p2tXzze3Poy9tv5B3bTg3T8k9yOWGv/A9ma3Nr4J1qMf4ZbtN3t6Nz+c496UExb6fjv/Zbj37Wua3Qgy/2vPubLJ1eulktnI+L/EXEq8kNpfrP7OeeWH660W9c8/kuXtPzGWDDbj0eDQ88+Z7pYKz5PzM0e34l4reX4N1mr/6RF/afvx6Uuyzheuv96u3Wd499ZKz9FvNGy/p/e0Uo2vz85Vj8exhpHxUZ/3T3+W7vydzv+tP4Pbx7/aNJ8v7a69TJ+PPhPqd267R7/B5LP6ukD2WM3i7Xa/HjEgeTjweH1j088fW4j39g+jf/Uydbtf7PjP518fd5l/HeP3W27aT/U//SW6n/riYcfffFDu/K7q/+36qlT2SPd9H/d7uDzvHcAAAAAAADQb3IRcSSSXGEtncsVCquf7zgWh3PlSrV2+kpl4dp01L8rOxr5XONO90jT5yHGs8/DNvIT6/KTEXE0Ir4dOFTPF6Yq5endDh4AAAAAAAAAAAAAAAAAAAD6xHCb7/+nfh/Y7b0Ddlz9hw2GOm+nP4C9p+NP/vfil56AvtSx/QN71tbbv5kA7BXO/7B/dd3+u7hGCLxcnP9h/+q2/edHdnhHgBfO+R/2L+0fAAAAAAAAAAAAAAAAAAAAAAAAAAAAeurSxYvpsrL85NZUmp++sbgwW7lxZrpUnS3MLUwVpirz1wszlcpMuVSYqsx1er1ypXJ9fCIWbo7VStXaWHVx6fJcZeFa7fLVueJM6XIp/0KiAgAAAAAAAAAAAAAAAAAAgJdLdXFptlgul+Yl2ibOR1/sxk4GuGpbTx/slygkeprY5Y4JAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJr8FwAA//8U8S+G") preadv(0xffffffffffffffff, 0x0, 0x0, 0xe, 0x81) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff2, 0x4012011, r0, 0x0) r1 = open(&(0x7f0000000300)='./file1\x00', 0x8937e, 0xc1) fallocate(r1, 0x0, 0x0, 0x1001f0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) fdatasync(r2) 338.374069ms ago: executing program 9 (id=608): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="120100000cb768405e0483020b990102030109022400010000000009040000025c291d000905090000", @ANYRESDEC], 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) 289.545604ms ago: executing program 6 (id=609): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000003a80)={'batadv_slave_1\x00', &(0x7f0000003980)=@ethtool_regs={0x4, 0xa}}) 188.858149ms ago: executing program 6 (id=610): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x2a0471a, &(0x7f0000000280)={[{}]}, 0x82, 0x499, &(0x7f0000000840)="$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") close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) lseek(r0, 0x5960, 0x3) 188.684518ms ago: executing program 7 (id=611): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) fcntl$setsig(r0, 0xa, 0x16) 166.788896ms ago: executing program 6 (id=612): openat(0xffffffffffffff9c, 0x0, 0x101042, 0x15) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xe, 0x4, 0x4, 0xb9, 0x1000, 0x1}, 0x50) 150.696248ms ago: executing program 7 (id=613): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x1c917, &(0x7f0000000140)={[{}, {@noblock_validity}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2}}, {@barrier_val}, {@nogrpid}, {@resgid={'resgid', 0x3d, 0xee01}}, {@noinit_itable}, {@noinit_itable}, {@journal_dev={'journal_dev', 0x3d, 0x7}, 0x32}]}, 0x9b, 0x4f2, &(0x7f0000000a40)="$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") openat(0xffffffffffffff9c, 0x0, 0x100, 0x0) 96.945157ms ago: executing program 8 (id=614): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000480)=ANY=[@ANYBLOB="020300030c00000000070000feffffff020013000800000027bd70000b35000003000600000000000200100000000000000000000000000002000100000000000000060d0000000003001700008000000a"], 0x60}, 0x1, 0x7}, 0x0) 96.813542ms ago: executing program 6 (id=615): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, 0x0, 0x100000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000fc0)={0x2, 0x0, [{0x56000, 0x35, &(0x7f0000000080)=""/53}, {0x0, 0x32, &(0x7f0000000200)=""/50}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0xfffffffe) 90.109943ms ago: executing program 7 (id=616): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000004f80)='/sys/firmware/fdt', 0x40481, 0x104) write$FUSE_DIRENT(r0, &(0x7f0000004fc0)={0x10}, 0x10) 84.525893ms ago: executing program 8 (id=617): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x62, 0x5, 0x1390, 0x1100, 0x12f8, 0xffffffff, 0x1100, 0x11a8, 0x12f8, 0x12f8, 0xffffffff, 0x12f8, 0x12f8, 0x5, 0x0, {[{{@ip={@local, @dev={0xac, 0x14, 0x14, 0x29}, 0x0, 0x0, 'veth0_to_bond\x00', 'wg1\x00', {0xff}}, 0x0, 0x10a0, 0x1100, 0x0, {0x22e}, [@common=@unspec=@cgroup1={{0x1030}, {0x0, 0x1, 0x0, 0x0, './cgroup.net/syz0\x00', 0x9, {0xfffffffe}}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x3, [0x6, 0x0, 0x4], 0x2}, {0x4, [0x2, 0x7, 0x5, 0x1, 0x1, 0x4], 0x5}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x3dc, {0x8, @rand_addr=0x64010102, @remote, @port=0x4e21, @gre_key}}}}, {{@ip={@rand_addr=0x64010101, @rand_addr=0x64010100, 0xff000000, 0x0, 'veth1_to_team\x00', 'syzkaller1\x00'}, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x0, @private, @multicast2, @gre_key, @icmp_id}}}}, {{@ip={@remote, @local, 0x0, 0x0, 'pimreg1\x00', 'netdevsim0\x00'}, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @dev={0xac, 0x14, 0x14, 0x33}, @broadcast, @icmp_id=0x65}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x13f0) 16.905125ms ago: executing program 8 (id=618): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockname(r0, 0x0, &(0x7f0000000240)) 16.743439ms ago: executing program 8 (id=619): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0xd}, @hci_ev_le_ltk_req={{}, {0xc9, 0xf, 0x8000}}}}, 0x10) 16.611632ms ago: executing program 7 (id=620): syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0xf1, 0xcd, 0x69, 0x10, 0x1199, 0x683a, 0x7772, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x5a, 0x7, 0x0, 0x7f, "", [{{0x9, 0x4, 0xea, 0x2, 0x0, 0xd3, 0x68, 0xc6, 0x4}}]}}]}}, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/stat\x00', 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000280), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 6.710716ms ago: executing program 8 (id=621): fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000040)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xeaEb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D\xde\x1e-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\x98\xf2\x1e\xe4\'U\xb3\xf8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\r\x00\x00\x00\x86N\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xff\x01\x00\x00\x00\x00\x00\x00\x96t\\\x0f\x12C\xf0\xe5C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\x8e\xa8\x10\x94JmDv\xcc^\xf1\xc4g\xd6,\x1e\xa0\xcc\xbf\xfd\x97\v\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1\tf>>\xb5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x97\xc0\xf6\x0e\x00\x00\x00\x00\x00\x00\x00\xf9\xdcaA\x95\x9fUjHo\x93\xa0jh:\xe3\xa9\xd0:&\f\xb2VK=c&!92\xb8@A\x9eb\xab\xbd\xf8#,\x8e\x86T_\xc4\x88\x9b\x11vC\x14\x99j\x01R \xeb\xaaa\xaab\xe4B\x88jST\xfbt \x85\x13\xc73', 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040e04023c20"], 0x7) 0s ago: executing program 6 (id=622): syz_usb_connect(0x2, 0x1b, &(0x7f0000000100)={{0x12, 0x1, 0x250, 0x7d, 0x9f, 0x95, 0x40, 0x1bbb, 0xb7, 0x9d90, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9, 0x0, 0xe, 0xe, 0xa0, 0x32}}]}}, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x4, &(0x7f0000000000)=@lang_id={0x4, 0x3, 0xc04}}, {0xaa, &(0x7f0000000240)=@string={0xaa, 0x3, "213a0f7364d04baf69316d654f2e0400a24b4a97f6b58f7a3b4a73e2e229f31171d0b00432fd2800d930463ae080e9c3141faad6e3258266542fec5f17fc28f45faa8388a3ef507cbeb891ca764785897f94e3b018804e557e21e2433369fee4a086581797a1bf68b3b7297a422f194fe7670f0d09bc83cb2d05c43334f8da1746acc10ddc52b6d7dc95e51c0ded74fe2c692204cba27b93ad71fa38628f00825afdeaded3df0000"}}]}) kernel console output (not intermixed with test programs): 98][ T5070] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 37.205801][ T5070] Call trace: [ 37.205803][ T5070] show_stack+0x2c/0x3c (C) [ 37.205813][ T5070] __dump_stack+0x30/0x40 [ 37.205822][ T5070] dump_stack_lvl+0xd8/0x12c [ 37.205831][ T5070] dump_stack+0x1c/0x28 [ 37.205841][ T5070] should_fail_ex+0x41c/0x590 [ 37.205850][ T5070] should_failslab+0xc4/0x120 [ 37.205857][ T5070] kmem_cache_alloc_noprof+0x94/0x5d8 [ 37.205865][ T5070] pagetable_pte_ctor+0x7c/0x268 [ 37.205872][ T5070] do_pte_missing+0xed0/0x2a24 [ 37.205879][ T5070] handle_mm_fault+0x15a4/0x253c [ 37.205886][ T5070] do_page_fault+0x77c/0xb88 [ 37.205895][ T5070] do_translation_fault+0xc4/0x114 [ 37.205904][ T5070] do_mem_abort+0x70/0x194 [ 37.205913][ T5070] el0_da+0x78/0x254 [ 37.205921][ T5070] el0t_64_sync_handler+0x10c/0x148 [ 37.205931][ T5070] el0t_64_sync+0x198/0x19c [ 37.205949][ T5070] FAULT_INJECTION: forcing a failure. [ 37.205949][ T5070] name failslab, interval 1, probability 100, space 0, times 45 [ 37.205956][ T5070] CPU: 0 UID: 0 PID: 5070 Comm: syz.2.45 Not tainted syzkaller #0 PREEMPT [ 37.205963][ T5070] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 37.205966][ T5070] Call trace: [ 37.205968][ T5070] show_stack+0x2c/0x3c (C) [ 37.205978][ T5070] __dump_stack+0x30/0x40 [ 37.205987][ T5070] dump_stack_lvl+0xd8/0x12c [ 37.205997][ T5070] dump_stack+0x1c/0x28 [ 37.206006][ T5070] should_fail_ex+0x41c/0x590 [ 37.206015][ T5070] should_failslab+0xc4/0x120 [ 37.206022][ T5070] kmem_cache_alloc_noprof+0x94/0x5d8 [ 37.206030][ T5070] pagetable_pte_ctor+0x7c/0x268 [ 37.206037][ T5070] do_pte_missing+0xed0/0x2a24 [ 37.206044][ T5070] handle_mm_fault+0x15a4/0x253c [ 37.206051][ T5070] do_page_fault+0x77c/0xb88 [ 37.206060][ T5070] do_translation_fault+0xc4/0x114 [ 37.206069][ T5070] do_mem_abort+0x70/0x194 [ 37.206078][ T5070] el0_da+0x78/0x254 [ 37.206087][ T5070] el0t_64_sync_handler+0x10c/0x148 [ 37.206096][ T5070] el0t_64_sync+0x198/0x19c [ 37.206114][ T5070] FAULT_INJECTION: forcing a failure. [ 37.206114][ T5070] name failslab, interval 1, probability 100, space 0, times 44 [ 37.206121][ T5070] CPU: 0 UID: 0 PID: 5070 Comm: syz.2.45 Not tainted syzkaller #0 PREEMPT [ 37.206128][ T5070] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 37.206132][ T5070] Call trace: [ 37.206134][ T5070] show_stack+0x2c/0x3c (C) [ 37.206143][ T5070] __dump_stack+0x30/0x40 [ 37.206152][ T5070] dump_stack_lvl+0xd8/0x12c [ 37.206162][ T5070] dump_stack+0x1c/0x28 [ 37.206171][ T5070] should_fail_ex+0x41c/0x590 [ 37.206180][ T5070] should_failslab+0xc4/0x120 [ 37.206187][ T5070] kmem_cache_alloc_noprof+0x94/0x5d8 [ 37.206195][ T5070] pagetable_pte_ctor+0x7c/0x268 [ 37.206202][ T5070] do_pte_missing+0xed0/0x2a24 [ 37.206210][ T5070] handle_mm_fault+0x15a4/0x253c [ 37.206217][ T5070] do_page_fault+0x77c/0xb88 [ 37.206226][ T5070] do_translation_fault+0xc4/0x114 [ 37.206235][ T5070] do_mem_abort+0x70/0x194 [ 37.206243][ T5070] el0_da+0x78/0x254 [ 37.206252][ T5070] el0t_64_sync_handler+0x10c/0x148 [ 37.206261][ T5070] el0t_64_sync+0x198/0x19c [ 37.206279][ T5070] FAULT_INJECTION: forcing a failure. [ 37.206279][ T5070] name failslab, interval 1, probability 100, space 0, times 43 [ 37.206286][ T5070] CPU: 0 UID: 0 PID: 5070 Comm: syz.2.45 Not tainted syzkaller #0 PREEMPT [ 37.206293][ T5070] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 37.206297][ T5070] Call trace: [ 37.206299][ T5070] show_stack+0x2c/0x3c (C) [ 37.206308][ T5070] __dump_stack+0x30/0x40 [ 37.206317][ T5070] dump_stack_lvl+0xd8/0x12c [ 37.206327][ T5070] dump_stack+0x1c/0x28 [ 37.206336][ T5070] should_fail_ex+0x41c/0x590 [ 37.206345][ T5070] should_failslab+0xc4/0x120 [ 37.206352][ T5070] kmem_cache_alloc_noprof+0x94/0x5d8 [ 37.206360][ T5070] pagetable_pte_ctor+0x7c/0x268 [ 37.206367][ T5070] do_pte_missing+0xed0/0x2a24 [ 37.206375][ T5070] handle_mm_fault+0x15a4/0x253c [ 37.206382][ T5070] do_page_fault+0x77c/0xb88 [ 37.206391][ T5070] do_translation_fault+0xc4/0x114 [ 37.206400][ T5070] do_mem_abort+0x70/0x194 [ 37.206408][ T5070] el0_da+0x78/0x254 [ 37.206417][ T5070] el0t_64_sync_handler+0x10c/0x148 [ 37.206426][ T5070] el0t_64_sync+0x198/0x19c [ 37.206444][ T5070] FAULT_INJECTION: forcing a failure. [ 37.206444][ T5070] name failslab, interval 1, probability 100, space 0, times 42 [ 37.206452][ T5070] CPU: 0 UID: 0 PID: 5070 Comm: syz.2.45 Not tainted syzkaller #0 PREEMPT [ 37.206459][ T5070] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 37.206462][ T5070] Call trace: [ 37.206464][ T5070] show_stack+0x2c/0x3c (C) [ 37.206474][ T5070] __dump_stack+0x30/0x40 [ 37.206483][ T5070] dump_stack_lvl+0xd8/0x12c [ 37.206492][ T5070] dump_stack+0x1c/0x28 [ 37.206501][ T5070] should_fail_ex+0x41c/0x590 [ 37.206511][ T5070] should_failslab+0xc4/0x120 [ 37.206517][ T5070] kmem_cache_alloc_noprof+0x94/0x5d8 [ 37.206525][ T5070] pagetable_pte_ctor+0x7c/0x268 [ 37.206532][ T5070] do_pte_missing+0xed0/0x2a24 [ 37.206540][ T5070] handle_mm_fault+0x15a4/0x253c [ 37.206547][ T5070] do_page_fault+0x77c/0xb88 [ 37.206556][ T5070] do_translation_fault+0xc4/0x114 [ 37.206565][ T5070] do_mem_abort+0x70/0x194 [ 37.206573][ T5070] el0_da+0x78/0x254 [ 37.206582][ T5070] el0t_64_sync_handler+0x10c/0x148 [ 37.206591][ T5070] el0t_64_sync+0x198/0x19c [ 37.206609][ T5070] FAULT_INJECTION: forcing a failure. [ 37.206609][ T5070] name failslab, interval 1, probability 100, space 0, times 41 [ 37.206617][ T5070] CPU: 0 UID: 0 PID: 5070 Comm: syz.2.45 Not tainted syzkaller #0 PREEMPT [ 37.206624][ T5070] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 37.206627][ T5070] Call trace: [ 37.206629][ T5070] show_stack+0x2c/0x3c (C) [ 37.206638][ T5070] __dump_stack+0x30/0x40 [ 37.206648][ T5070] dump_stack_lvl+0xd8/0x12c [ 37.206657][ T5070] dump_stack+0x1c/0x28 [ 37.206666][ T5070] should_fail_ex+0x41c/0x590 [ 37.206676][ T5070] should_failslab+0xc4/0x120 [ 37.206682][ T5070] kmem_cache_alloc_noprof+0x94/0x5d8 [ 37.206690][ T5070] pagetable_pte_ctor+0x7c/0x268 [ 37.206697][ T5070] do_pte_missing+0xed0/0x2a24 [ 37.206705][ T5070] handle_mm_fault+0x15a4/0x253c [ 37.206712][ T5070] do_page_fault+0x77c/0xb88 [ 37.206721][ T5070] do_translation_fault+0xc4/0x114 [ 37.206730][ T5070] do_mem_abort+0x70/0x194 [ 37.206738][ T5070] el0_da+0x78/0x254 [ 37.206749][ T5070] el0t_64_sync_handler+0x10c/0x148 [ 37.206759][ T5070] el0t_64_sync+0x198/0x19c [ 37.206777][ T5070] FAULT_INJECTION: forcing a failure. [ 37.206777][ T5070] name failslab, interval 1, probability 100, space 0, times 40 [ 37.206784][ T5070] CPU: 0 UID: 0 PID: 5070 Comm: syz.2.45 Not tainted syzkaller #0 PREEMPT [ 37.206791][ T5070] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 37.206795][ T5070] Call trace: [ 37.206797][ T5070] show_stack+0x2c/0x3c (C) [ 37.206806][ T5070] __dump_stack+0x30/0x40 [ 37.206815][ T5070] dump_stack_lvl+0xd8/0x12c [ 37.206825][ T5070] dump_stack+0x1c/0x28 [ 37.206834][ T5070] should_fail_ex+0x41c/0x590 [ 37.206843][ T5070] should_failslab+0xc4/0x120 [ 37.206850][ T5070] kmem_cache_alloc_noprof+0x94/0x5d8 [ 37.206858][ T5070] pagetable_pte_ctor+0x7c/0x268 [ 37.206865][ T5070] do_pte_missing+0xed0/0x2a24 [ 37.206873][ T5070] handle_mm_fault+0x15a4/0x253c [ 37.206880][ T5070] do_page_fault+0x77c/0xb88 [ 37.206889][ T5070] do_translation_fault+0xc4/0x114 [ 37.206897][ T5070] do_mem_abort+0x70/0x194 [ 37.206906][ T5070] el0_da+0x78/0x254 [ 37.206915][ T5070] el0t_64_sync_handler+0x10c/0x148 [ 37.206924][ T5070] el0t_64_sync+0x198/0x19c [ 37.206942][ T5070] FAULT_INJECTION: forcing a failure. [ 37.206942][ T5070] name failslab, interval 1, probability 100, space 0, times 39 [ 37.206949][ T5070] CPU: 0 UID: 0 PID: 5070 Comm: syz.2.45 Not tainted syzkaller #0 PREEMPT [ 37.206956][ T5070] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 37.206960][ T5070] Call trace: [ 37.206962][ T5070] show_stack+0x2c/0x3c (C) [ 37.206971][ T5070] __dump_stack+0x30/0x40 [ 37.206981][ T5070] dump_stack_lvl+0xd8/0x12c [ 37.206990][ T5070] dump_stack+0x1c/0x28 [ 37.206999][ T5070] should_fail_ex+0x41c/0x590 [ 37.207009][ T5070] should_failslab+0xc4/0x120 [ 37.207015][ T5070] kmem_cache_alloc_noprof+0x94/0x5d8 [ 37.207023][ T5070] pagetable_pte_ctor+0x7c/0x268 [ 37.207030][ T5070] do_pte_missing+0xed0/0x2a24 [ 37.207038][ T5070] handle_mm_fault+0x15a4/0x253c [ 37.207045][ T5070] do_page_fault+0x77c/0xb88 [ 37.207054][ T5070] do_translation_fault+0xc4/0x114 [ 37.207063][ T5070] do_mem_abort+0x70/0x194 [ 37.207071][ T5070] el0_da+0x78/0x254 [ 37.207080][ T5070] el0t_64_sync_handler+0x10c/0x148 [ 37.207089][ T5070] el0t_64_sync+0x198/0x19c [ 37.207107][ T5070] FAULT_INJECTION: forcing a failure. [ 37.207107][ T5070] name failslab, interval 1, probability 100, space 0, times 38 [ 37.207114][ T5070] CPU: 0 UID: 0 PID: 5070 Comm: syz.2.45 Not tainted syzkaller #0 PREEMPT [ 37.207121][ T5070] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 37.207125][ T5070] Call trace: [ 37.207127][ T5070] show_stack+0x2c/0x3c (C) [ 37.207136][ T5070] __dump_stack+0x30/0x40 [ 37.207146][ T5070] dump_stack_lvl+0xd8/0x12c [ 37.207155][ T5070] dump_stack+0x1c/0x28 [ 37.207164][ T5070] should_fail_ex+0x41c/0x590 [ 37.207174][ T5070] should_failslab+0xc4/0x120 [ 37.207180][ T5070] kmem_cache_alloc_noprof+0x94/0x5d8 [ 37.207188][ T5070] pagetable_pte_ctor+0x7c/0x268 [ 37.207195][ T5070] do_pte_missing+0xed0/0x2a24 [ 37.207203][ T5070] handle_mm_fault+0x15a4/0x253c [ 37.207210][ T5070] do_page_fault+0x77c/0xb88 [ 37.207219][ T5070] do_translation_fault+0xc4/0x114 [ 37.207228][ T5070] do_mem_abort+0x70/0x194 [ 37.207236][ T5070] el0_da+0x78/0x254 [ 37.207245][ T5070] el0t_64_sync_handler+0x10c/0x148 [ 37.207254][ T5070] el0t_64_sync+0x198/0x19c [ 37.207272][ T5070] FAULT_INJECTION: forcing a failure. [ 37.207272][ T5070] name failslab, interval 1, probability 100, space 0, times 37 [ 37.207279][ T5070] CPU: 0 UID: 0 PID: 5070 Comm: syz.2.45 Not tainted syzkaller #0 PREEMPT [ 37.207286][ T5070] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 37.207290][ T5070] Call trace: [ 37.207292][ T5070] show_stack+0x2c/0x3c (C) [ 37.207301][ T5070] __dump_stack+0x30/0x40 [ 37.207311][ T5070] dump_stack_lvl+0xd8/0x12c [ 37.207320][ T5070] dump_stack+0x1c/0x28 [ 37.207329][ T5070] should_fail_ex+0x41c/0x590 [ 37.207338][ T5070] should_failslab+0xc4/0x120 [ 37.207345][ T5070] kmem_cache_alloc_noprof+0x94/0x5d8 [ 37.207353][ T5070] pagetable_pte_ctor+0x7c/0x268 [ 37.207360][ T5070] do_pte_missing+0xed0/0x2a24 [ 37.207368][ T5070] handle_mm_fault+0x15a4/0x253c [ 37.207375][ T5070] do_page_fault+0x77c/0xb88 [ 37.207384][ T5070] do_translation_fault+0xc4/0x114 [ 37.207392][ T5070] do_mem_abort+0x70/0x194 [ 37.207401][ T5070] el0_da+0x78/0x254 [ 37.207410][ T5070] el0t_64_sync_handler+0x10c/0x148 [ 37.207419][ T5070] el0t_64_sync+0x198/0x19c [ 37.207437][ T5070] FAULT_INJECTION: forcing a failure. [ 37.207437][ T5070] name failslab, interval 1, probability 100, space 0, times 36 [ 37.207444][ T5070] CPU: 0 UID: 0 PID: 5070 Comm: syz.2.45 Not tainted syzkaller #0 PREEMPT [ 37.207451][ T5070] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 37.207455][ T5070] Call trace: [ 37.207457][ T5070] show_stack+0x2c/0x3c (C) [ 37.207466][ T5070] __dump_stack+0x30/0x40 [ 37.207475][ T5070] dump_stack_lvl+0xd8/0x12c [ 37.207485][ T5070] dump_stack+0x1c/0x28 [ 37.207494][ T5070] should_fail_ex+0x41c/0x590 [ 37.207503][ T5070] should_failslab+0xc4/0x120 [ 37.207510][ T5070] kmem_cache_alloc_noprof+0x94/0x5d8 [ 37.207518][ T5070] pagetable_pte_ctor+0x7c/0x268 [ 37.207525][ T5070] do_pte_missing+0xed0/0x2a24 [ 37.207533][ T5070] handle_mm_fault+0x15a4/0x253c [ 37.207540][ T5070] do_page_fault+0x77c/0xb88 [ 37.207548][ T5070] do_translation_fault+0xc4/0x114 [ 37.207558][ T5070] do_mem_abort+0x70/0x194 [ 37.207566][ T5070] el0_da+0x78/0x254 [ 37.207575][ T5070] el0t_64_sync_handler+0x10c/0x148 [ 37.207584][ T5070] el0t_64_sync+0x198/0x19c [ 37.207602][ T5070] FAULT_INJECTION: forcing a failure. [ 37.207602][ T5070] name failslab, interval 1, probability 100, space 0, times 35 [ 37.207609][ T5070] CPU: 0 UID: 0 PID: 5070 Comm: syz.2.45 Not tainted syzkaller #0 PREEMPT [ 37.207616][ T5070] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 37.207620][ T5070] Call trace: [ 37.207622][ T5070] show_stack+0x2c/0x3c (C) [ 37.207631][ T5070] __dump_stack+0x30/0x40 [ 37.207641][ T5070] dump_stack_lvl+0xd8/0x12c [ 37.207650][ T5070] dump_stack+0x1c/0x28 [ 37.207659][ T5070] should_fail_ex+0x41c/0x590 [ 37.207669][ T5070] should_failslab+0xc4/0x120 [ 37.207675][ T5070] kmem_cache_alloc_noprof+0x94/0x5d8 [ 37.207683][ T5070] pagetable_pte_ctor+0x7c/0x268 [ 37.207690][ T5070] do_pte_missing+0xed0/0x2a24 [ 37.207698][ T5070] handle_mm_fault+0x15a4/0x253c [ 37.207705][ T5070] do_page_fault+0x77c/0xb88 [ 37.207714][ T5070] do_translation_fault+0xc4/0x114 [ 37.207723][ T5070] do_mem_abort+0x70/0x194 [ 37.207731][ T5070] el0_da+0x78/0x254 [ 37.207740][ T5070] el0t_64_sync_handler+0x10c/0x148 [ 37.207752][ T5070] el0t_64_sync+0x198/0x19c [ 37.207770][ T5070] FAULT_INJECTION: forcing a failure. [ 37.207770][ T5070] name failslab, interval 1, probability 100, space 0, times 34 [ 37.207777][ T5070] CPU: 0 UID: 0 PID: 5070 Comm: syz.2.45 Not tainted syzkaller #0 PREEMPT [ 37.207784][ T5070] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 37.207788][ T5070] Call trace: [ 37.207790][ T5070] show_stack+0x2c/0x3c (C) [ 37.207799][ T5070] __dump_stack+0x30/0x40 [ 37.207808][ T5070] dump_stack_lvl+0xd8/0x12c [ 37.207818][ T5070] dump_stack+0x1c/0x28 [ 37.207827][ T5070] should_fail_ex+0x41c/0x590 [ 37.207836][ T5070] should_failslab+0xc4/0x120 [ 37.207843][ T5070] kmem_cache_alloc_noprof+0x94/0x5d8 [ 37.207851][ T5070] pagetable_pte_ctor+0x7c/0x268 [ 37.207858][ T5070] do_pte_missing+0xed0/0x2a24 [ 37.207866][ T5070] handle_mm_fault+0x15a4/0x253c [ 37.207873][ T5070] do_page_fault+0x77c/0xb88 [ 37.207881][ T5070] do_translation_fault+0xc4/0x114 [ 37.207890][ T5070] do_mem_abort+0x70/0x194 [ 37.207899][ T5070] el0_da+0x78/0x254 [ 37.207908][ T5070] el0t_64_sync_handler+0x10c/0x148 [ 37.207917][ T5070] el0t_64_sync+0x198/0x19c [ 37.207935][ T5070] FAULT_INJECTION: forcing a failure. [ 37.207935][ T5070] name failslab, interval 1, probability 100, space 0, times 33 [ 37.207942][ T5070] CPU: 0 UID: 0 PID: 5070 Comm: syz.2.45 Not tainted syzkaller #0 PREEMPT [ 37.207949][ T5070] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 37.207953][ T5070] Call trace: [ 37.207955][ T5070] show_stack+0x2c/0x3c (C) [ 37.207964][ T5070] __dump_stack+0x30/0x40 [ 37.207974][ T5070] dump_stack_lvl+0xd8/0x12c [ 37.207983][ T5070] dump_stack+0x1c/0x28 [ 37.207992][ T5070] should_fail_ex+0x41c/0x590 [ 37.208002][ T5070] should_failslab+0xc4/0x120 [ 37.208009][ T5070] kmem_cache_alloc_noprof+0x94/0x5d8 [ 37.208016][ T5070] pagetable_pte_ctor+0x7c/0x268 [ 37.208023][ T5070] do_pte_missing+0xed0/0x2a24 [ 37.208031][ T5070] handle_mm_fault+0x15a4/0x253c [ 37.208038][ T5070] do_page_fault+0x77c/0xb88 [ 37.208047][ T5070] do_translation_fault+0xc4/0x114 [ 37.208056][ T5070] do_mem_abort+0x70/0x194 [ 37.208064][ T5070] el0_da+0x78/0x254 [ 37.208073][ T5070] el0t_64_sync_handler+0x10c/0x148 [ 37.208082][ T5070] el0t_64_sync+0x198/0x19c [ 37.208100][ T5070] FAULT_INJECTION: forcing a failure. [ 37.208100][ T5070] name failslab, interval 1, probability 100, space 0, times 32 [ 37.208108][ T5070] CPU: 0 UID: 0 PID: 5070 Comm: syz.2.45 Not tainted syzkaller #0 PREEMPT [ 37.208115][ T5070] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 37.208118][ T5070] Call trace: [ 37.208120][ T5070] show_stack+0x2c/0x3c (C) [ 37.208130][ T5070] __dump_stack+0x30/0x40 [ 37.208139][ T5070] dump_stack_lvl+0xd8/0x12c [ 37.208148][ T5070] dump_stack+0x1c/0x28 [ 37.208158][ T5070] should_fail_ex+0x41c/0x590 [ 37.208167][ T5070] should_failslab+0xc4/0x120 [ 37.208174][ T5070] kmem_cache_alloc_noprof+0x94/0x5d8 [ 37.208181][ T5070] pagetable_pte_ctor+0x7c/0x268 [ 37.208189][ T5070] do_pte_missing+0xed0/0x2a24 [ 37.208196][ T5070] handle_mm_fault+0x15a4/0x253c [ 37.208203][ T5070] do_page_fault+0x77c/0xb88 [ 37.208212][ T5070] do_translation_fault+0xc4/0x114 [ 37.208221][ T5070] do_mem_abort+0x70/0x194 [ 37.208230][ T5070] el0_da+0x78/0x254 [ 37.208238][ T5070] el0t_64_sync_handler+0x10c/0x148 [ 37.208248][ T5070] el0t_64_sync+0x198/0x19c [ 37.208266][ T5070] FAULT_INJECTION: forcing a failure. [ 37.208266][ T5070] name failslab, interval 1, probability 100, space 0, times 31 [ 37.208273][ T5070] CPU: 0 UID: 0 PID: 5070 Comm: syz.2.45 Not tainted syzkaller #0 PREEMPT [ 37.208280][ T5070] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 37.208283][ T5070] Call trace: [ 37.208285][ T5070] show_stack+0x2c/0x3c (C) [ 37.208295][ T5070] __dump_stack+0x30/0x40 [ 37.208304][ T5070] dump_stack_lvl+0xd8/0x12c [ 37.208314][ T5070] dump_stack+0x1c/0x28 [ 37.208323][ T5070] should_fail_ex+0x41c/0x590 [ 37.208332][ T5070] should_failslab+0xc4/0x120 [ 37.208339][ T5070] kmem_cache_alloc_noprof+0x94/0x5d8 [ 37.208347][ T5070] pagetable_pte_ctor+0x7c/0x268 [ 37.208354][ T5070] do_pte_missing+0xed0/0x2a24 [ 37.208362][ T5070] handle_mm_fault+0x15a4/0x253c [ 37.208369][ T5070] do_page_fault+0x77c/0xb88 [ 37.208377][ T5070] do_translation_fault+0xc4/0x114 [ 37.208387][ T5070] do_mem_abort+0x70/0x194 [ 37.208395][ T5070] el0_da+0x78/0x254 [ 37.208404][ T5070] el0t_64_sync_handler+0x10c/0x148 [ 37.208413][ T5070] el0t_64_sync+0x198/0x19c [ 37.208431][ T5070] FAULT_INJECTION: forcing a failure. [ 37.208431][ T5070] name failslab, interval 1, probability 100, space 0, times 30 [ 37.208438][ T5070] CPU: 0 UID: 0 PID: 5070 Comm: syz.2.45 Not tainted syzkaller #0 PREEMPT [ 37.208445][ T5070] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 37.208449][ T5070] Call trace: [ 37.208451][ T5070] show_stack+0x2c/0x3c (C) [ 37.208460][ T5070] __dump_stack+0x30/0x40 [ 37.208470][ T5070] dump_stack_lvl+0xd8/0x12c [ 37.208479][ T5070] dump_stack+0x1c/0x28 [ 37.208490][ T5070] should_fail_ex+0x41c/0x590 [ 37.208499][ T5070] should_failslab+0xc4/0x120 [ 37.208506][ T5070] kmem_cache_alloc_noprof+0x94/0x5d8 [ 37.208514][ T5070] pagetable_pte_ctor+0x7c/0x268 [ 37.208521][ T5070] do_pte_missing+0xed0/0x2a24 [ 37.208529][ T5070] handle_mm_fault+0x15a4/0x253c [ 37.208536][ T5070] do_page_fault+0x77c/0xb88 [ 37.208545][ T5070] do_translation_fault+0xc4/0x114 [ 37.208554][ T5070] do_mem_abort+0x70/0x194 [ 37.208563][ T5070] el0_da+0x78/0x254 [ 37.208571][ T5070] el0t_64_sync_handler+0x10c/0x148 [ 37.208580][ T5070] el0t_64_sync+0x198/0x19c [ 37.208675][ T5058] FAULT_INJECTION: forcing a failure. [ 37.208675][ T5058] name failslab, interval 1, probability 100, space 0, times 30 [ 37.208690][ T5058] CPU: 0 UID: 0 PID: 5058 Comm: syz.3.41 Not tainted syzkaller #0 PREEMPT [ 37.208699][ T5058] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 37.208703][ T5058] Call trace: [ 37.208705][ T5058] show_stack+0x2c/0x3c (C) [ 37.208716][ T5058] __dump_stack+0x30/0x40 [ 37.208726][ T5058] dump_stack_lvl+0xd8/0x12c [ 37.208735][ T5058] dump_stack+0x1c/0x28 [ 37.208748][ T5058] should_fail_ex+0x41c/0x590 [ 37.208760][ T5058] should_failslab+0xc4/0x120 [ 37.208767][ T5058] kmem_cache_alloc_noprof+0x94/0x5d8 [ 37.208775][ T5058] taskstats_exit+0x30c/0x89c [ 37.208785][ T5058] do_exit+0x50c/0x1a74 [ 37.208795][ T5058] do_group_exit+0x198/0x238 [ 37.208806][ T5058] pid_child_should_wake+0x0/0x104 [ 37.208816][ T5058] invoke_syscall+0x98/0x244 [ 37.208825][ T5058] el0_svc_common+0xec/0x23c [ 37.208835][ T5058] do_el0_svc+0x4c/0x5c [ 37.208844][ T5058] el0_svc+0x64/0x260 [ 37.208853][ T5058] el0t_64_sync_handler+0x48/0x148 [ 37.208862][ T5058] el0t_64_sync+0x198/0x19c [ 37.209054][ T5061] FAULT_INJECTION: forcing a failure. [ 37.209054][ T5061] name failslab, interval 1, probability 100, space 0, times 29 [ 37.209065][ T5061] CPU: 0 UID: 0 PID: 5061 Comm: syz.3.41 Not tainted syzkaller #0 PREEMPT [ 37.209076][ T5061] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 37.209081][ T5061] Call trace: [ 37.209084][ T5061] show_stack+0x2c/0x3c (C) [ 37.209094][ T5061] __dump_stack+0x30/0x40 [ 37.209103][ T5061] dump_stack_lvl+0xd8/0x12c [ 37.209112][ T5061] dump_stack+0x1c/0x28 [ 37.209121][ T5061] should_fail_ex+0x41c/0x590 [ 37.209131][ T5061] should_failslab+0xc4/0x120 [ 37.209138][ T5061] kmem_cache_alloc_noprof+0x94/0x5d8 [ 37.209145][ T5061] taskstats_exit+0x30c/0x89c [ 37.209153][ T5061] do_exit+0x50c/0x1a74 [ 37.209163][ T5061] do_group_exit+0x198/0x238 [ 37.209173][ T5061] get_signal+0xfb0/0x1094 [ 37.209180][ T5061] arch_do_signal_or_restart+0x288/0x444c [ 37.209190][ T5061] exit_to_user_mode_loop+0x70/0x17c [ 37.209199][ T5061] el0_svc+0x18c/0x260 [ 37.209208][ T5061] el0t_64_sync_handler+0x48/0x148 [ 37.209217][ T5061] el0t_64_sync+0x198/0x19c [ 37.209478][ T5069] FAULT_INJECTION: forcing a failure. [ 37.209478][ T5069] name failslab, interval 1, probability 100, space 0, times 28 [ 37.209501][ T5069] CPU: 1 UID: 0 PID: 5069 Comm: syz.1.43 Not tainted syzkaller #0 PREEMPT [ 37.209511][ T5069] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 37.209516][ T5069] Call trace: [ 37.209519][ T5069] show_stack+0x2c/0x3c (C) [ 37.209532][ T5069] __dump_stack+0x30/0x40 [ 37.209544][ T5069] dump_stack_lvl+0xd8/0x12c [ 37.209556][ T5069] dump_stack+0x1c/0x28 [ 37.209567][ T5069] should_fail_ex+0x41c/0x590 [ 37.209579][ T5069] should_failslab+0xc4/0x120 [ 37.209587][ T5069] kmem_cache_alloc_lru_noprof+0x98/0x5dc [ 37.209597][ T5069] sock_alloc_inode+0x30/0x180 [ 37.209608][ T5069] alloc_inode+0x68/0x198 [ 37.209618][ T5069] sock_alloc+0x4c/0x204 [ 37.209627][ T5069] __sock_create+0x108/0x670 [ 37.209636][ T5069] __sys_socket_create+0xc0/0x11c [ 37.209645][ T5069] __sys_socket+0x44/0xec [ 37.209654][ T5069] __arm64_sys_socket+0x7c/0x94 [ 37.209663][ T5069] invoke_syscall+0x98/0x244 [ 37.209675][ T5069] el0_svc_common+0xec/0x23c [ 37.209687][ T5069] do_el0_svc+0x4c/0x5c [ 37.209698][ T5069] el0_svc+0x64/0x260 [ 37.209709][ T5069] el0t_64_sync_handler+0x48/0x148 [ 37.209720][ T5069] el0t_64_sync+0x198/0x19c [ 37.257234][ T4720] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.259498][ T5073] loop2: detected capacity change from 0 to 512 [ 37.260268][ T5073] ======================================================= [ 37.260268][ T5073] WARNING: The mand mount option has been deprecated and [ 37.260268][ T5073] and is ignored by this kernel. Remove the mand [ 37.260268][ T5073] option from the mount to silence this warning. [ 37.260268][ T5073] ======================================================= [ 37.260394][ T5073] /dev/loop2: Can't open blockdev [ 37.295505][ T5075] loop1: detected capacity change from 0 to 4096 [ 37.301167][ T5075] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 37.301183][ T5075] EXT4-fs (loop1): Test dummy encryption mode enabled [ 37.372019][ T5075] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 37.374195][ T4714] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.375629][ T5075] fscrypt: AES-256-CBC-CTS using implementation "cts-cbc-aes-ce" [ 37.379433][ T5075] fscrypt: AES-256-XTS using implementation "xts-aes-ce" [ 37.486196][ T5088] EXT4-fs error (device loop4): ext4_iget_extra_inode:5180: inode #15: comm syz.4.49: corrupted in-inode xattr: invalid ea_ino [ 37.486217][ T5088] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 37.486847][ T5088] EXT4-fs error (device loop4): ext4_orphan_get:1404: comm syz.4.49: couldn't read orphan inode 15 (err -117) [ 37.486863][ T5088] loop4: lost filesystem error report for type 5 error -117 [ 37.487422][ T5088] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 37.561387][ T5088] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 37.642528][ T5094] geneve2: entered promiscuous mode [ 37.642543][ T5094] geneve2: entered allmulticast mode [ 37.665119][ T5096] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 37.747353][ T4720] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.090221][ T5112] sctp: [Deprecated]: syz.2.53 (pid 5112) Use of struct sctp_assoc_value in delayed_ack socket option. [ 38.090221][ T5112] Use struct sctp_sack_info instead [ 38.118456][ T5116] FAULT_INJECTION: forcing a failure. [ 38.118456][ T5116] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 38.118477][ T5116] CPU: 0 UID: 0 PID: 5116 Comm: syz.4.55 Not tainted syzkaller #0 PREEMPT [ 38.118489][ T5116] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 38.118495][ T5116] Call trace: [ 38.118498][ T5116] show_stack+0x2c/0x3c (C) [ 38.118518][ T5116] __dump_stack+0x30/0x40 [ 38.118528][ T5116] dump_stack_lvl+0xd8/0x12c [ 38.118538][ T5116] dump_stack+0x1c/0x28 [ 38.118552][ T5116] should_fail_ex+0x41c/0x590 [ 38.118564][ T5116] should_fail+0x14/0x24 [ 38.118574][ T5116] should_fail_usercopy+0x20/0x30 [ 38.118584][ T5116] simple_read_from_buffer+0xc4/0x238 [ 38.118595][ T5116] proc_fail_nth_read+0x1a8/0x248 [ 38.118604][ T5116] vfs_read+0x230/0x8c8 [ 38.118614][ T5116] ksys_read+0x12c/0x228 [ 38.118624][ T5116] __arm64_sys_read+0x7c/0x90 [ 38.118630][ T5116] invoke_syscall+0x98/0x244 [ 38.118640][ T5116] el0_svc_common+0xec/0x23c [ 38.118650][ T5116] do_el0_svc+0x4c/0x5c [ 38.118659][ T5116] el0_svc+0x64/0x260 [ 38.118669][ T5116] el0t_64_sync_handler+0x48/0x148 [ 38.118679][ T5116] el0t_64_sync+0x198/0x19c [ 38.157273][ T4712] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.249889][ T5124] bond1: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 38.271943][ T5124] bond1 (unregistering): Released all slaves [ 38.415993][ T5139] netlink: 'syz.3.59': attribute type 9 has an invalid length. [ 38.416011][ T5139] netlink: 232 bytes leftover after parsing attributes in process `syz.3.59'. [ 38.423613][ T5140] capability: warning: `syz.2.60' uses 32-bit capabilities (legacy support in use) [ 38.576823][ T5143] netlink: 20 bytes leftover after parsing attributes in process `syz.4.61'. [ 38.604414][ T5136] ucsi_ccg 0-0008: ucsi_ccg_init failed - -110 [ 38.604730][ T5136] ucsi_ccg 0-0008: probe with driver ucsi_ccg failed with error -110 [ 38.615146][ T5136] i2c i2c-0: new_device: Instantiated device ccgx-ucsi at 0x08 [ 38.682434][ T5149] netlink: 28 bytes leftover after parsing attributes in process `syz.2.62'. [ 38.682464][ T5149] netlink: 28 bytes leftover after parsing attributes in process `syz.2.62'. [ 38.812880][ T4717] Bluetooth: hci4: command tx timeout [ 38.812908][ T4717] Bluetooth: hci3: command tx timeout [ 38.812924][ T4717] Bluetooth: hci2: command tx timeout [ 38.812939][ T4717] Bluetooth: hci1: command tx timeout [ 38.889125][ T4726] Bluetooth: hci0: command tx timeout [ 38.916754][ T5158] netlink: 4 bytes leftover after parsing attributes in process `syz.3.66'. [ 38.918983][ T5158] net_ratelimit: 26 callbacks suppressed [ 38.920101][ T5158] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 38.928642][ T4711] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 39.126489][ T5179] netlink: 'syz.4.64': attribute type 3 has an invalid length. [ 39.225557][ T5185] set_capacity_and_notify: 3 callbacks suppressed [ 39.244734][ T5185] loop3: detected capacity change from 0 to 512 [ 39.481002][ T5203] loop0: detected capacity change from 0 to 512 [ 40.336373][ T5203] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.349866][ T5185] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.369611][ T5208] loop1: detected capacity change from 0 to 512 [ 40.422489][ T5208] EXT4-fs (loop1): orphan cleanup on readonly fs [ 40.422521][ T5208] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -13 [ 40.426244][ T5208] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 40.430325][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 40.430341][ C0] EXT4-fs (loop1): initial error at time 41: ext4_mb_generate_buddy:1317 [ 40.430353][ C0] EXT4-fs (loop1): last error at time 41: ext4_mb_generate_buddy:1317 [ 40.436715][ T5208] EXT4-fs error (device loop1): ext4_clear_blocks:876: inode #13: comm syz.1.76: attempt to clear invalid blocks 2 len 1 [ 40.436762][ T5208] loop1: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 40.448039][ T5208] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.76: invalid indirect mapped block 1819239214 (level 0) [ 40.448085][ T5208] loop1: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 40.453117][ T5208] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.76: invalid indirect mapped block 1819239214 (level 1) [ 40.453162][ T5208] loop1: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 40.460055][ T5208] EXT4-fs (loop1): 1 truncate cleaned up [ 40.460569][ T5208] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 40.494041][ T5208] EXT4-fs: Ignoring removed oldalloc option [ 40.496175][ T5208] EXT4-fs: user quota file already specified [ 40.528196][ T5185] netlink: 12 bytes leftover after parsing attributes in process `syz.3.72'. [ 40.533321][ T4712] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.577499][ T4711] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.587208][ T5216] loop1: detected capacity change from 0 to 512 [ 40.589622][ T5216] ext4: Unknown parameter '' [ 40.614076][ T4714] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.685951][ T5226] netlink: 'syz.4.80': attribute type 1 has an invalid length. [ 40.704570][ T5227] vlan2: entered allmulticast mode [ 40.704613][ T5227] geneve0: entered allmulticast mode [ 40.707636][ T5224] configfs-gadget.g1 gadget.0: HOST MAC 7a:0b:52:19:b4:c2 [ 40.707676][ T5224] configfs-gadget.g1 gadget.0: MAC ee:be:80:42:ff:54 [ 40.819111][ T5244] loop3: detected capacity change from 0 to 128 [ 40.832747][ T5244] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 40.897333][ T5254] netlink: 84 bytes leftover after parsing attributes in process `syz.0.84'. [ 40.924486][ T5258] loop1: detected capacity change from 0 to 512 [ 40.954825][ T4797] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 40.954967][ T5258] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.011277][ T4712] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.056118][ T5265] overlayfs: missing 'workdir' [ 41.077977][ T5265] loop0: detected capacity change from 0 to 2048 [ 41.083685][ T5279] loop1: detected capacity change from 0 to 1024 [ 41.085525][ T5279] EXT4-fs: inline encryption not supported [ 41.086778][ T5279] EXT4-fs: Ignoring removed bh option [ 41.089612][ T5279] EXT4-fs (loop1): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 41.100943][ T4797] usb 1-1: Dual-Role OTG device on HNP port [ 41.101888][ T5279] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 41.104473][ T4797] usb 1-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 7.02 [ 41.104499][ T4797] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 41.125709][ T4797] cdc_eem 1-1:1.0 usb1: register 'cdc_eem' at usb-dummy_hcd.0-1, CDC EEM Device, b2:fb:76:50:f0:7c [ 41.137150][ T5265] GPT:first_usable_lbas don't match. [ 41.137175][ T5265] GPT:34 != 290 [ 41.137188][ T5265] GPT: Use GNU Parted to correct GPT errors. [ 41.137237][ T5265] loop0: p1 p2 p3 [ 41.231891][ T5289] loop4: detected capacity change from 0 to 512 [ 41.239041][ T5265] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 41.239070][ T5265] overlayfs: missing 'lowerdir' [ 41.305696][ T5296] ptrace attach of "ci-upstream-gce-arm64/syz-executor exec"[4712] was attempted by " [ 41.587165][ T4714] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 41.811263][ T5317] input: syz1 as /devices/virtual/input/input4 [ 41.963352][ T4712] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.073350][ T4701] udevd[4701]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 42.110194][ T4705] udevd[4705]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 42.114268][ T5114] udevd[5114]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 42.380159][ T5378] netlink: 24 bytes leftover after parsing attributes in process `syz.3.106'. [ 42.450817][ T5396] netlink: 12 bytes leftover after parsing attributes in process `syz.3.108'. [ 42.527429][ T5398] loop3: detected capacity change from 0 to 8192 [ 42.571919][ T5398] loop3: AHDI p1 p3 p4 [ 42.572049][ T5398] loop3: p3 start 1671679 is beyond EOD, truncated [ 42.572069][ T5398] loop3: p4 size 2147155716 extends beyond EOD, truncated [ 42.650711][ T5412] EXT4-fs: Ignoring removed orlov option [ 42.653410][ T5412] /dev/loop1: Can't open blockdev [ 42.740134][ T30] audit: type=1326 audit(43.704:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5424 comm="syz.1.118" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff86979028 code=0x7ffc0000 [ 42.740525][ T30] audit: type=1326 audit(43.704:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5424 comm="syz.1.118" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff86979028 code=0x7ffc0000 [ 42.740556][ T30] audit: type=1326 audit(43.704:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5424 comm="syz.1.118" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff86979028 code=0x7ffc0000 [ 42.740580][ T30] audit: type=1326 audit(43.704:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5424 comm="syz.1.118" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=218 compat=0 ip=0xffff86979028 code=0x7ffc0000 [ 42.740602][ T30] audit: type=1326 audit(43.704:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5424 comm="syz.1.118" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff86979028 code=0x7ffc0000 [ 42.740622][ T30] audit: type=1326 audit(43.704:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5424 comm="syz.1.118" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff86979028 code=0x7ffc0000 [ 42.740640][ T30] audit: type=1326 audit(43.704:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5424 comm="syz.1.118" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff86979028 code=0x7ffc0000 [ 42.740658][ T30] audit: type=1326 audit(43.704:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5424 comm="syz.1.118" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff86979028 code=0x7ffc0000 [ 42.740676][ T30] audit: type=1326 audit(43.704:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5424 comm="syz.1.118" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=279 compat=0 ip=0xffff86979028 code=0x7ffc0000 [ 42.740693][ T30] audit: type=1326 audit(43.704:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5424 comm="syz.1.118" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=222 compat=0 ip=0xffff86978d20 code=0x7ffc0000 [ 42.786511][ T5427] netlink: 24 bytes leftover after parsing attributes in process `syz.0.119'. [ 42.800680][ T5425] ext4: Unknown parameter 'pcr' [ 42.802292][ T4701] udevd[4701]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 42.844568][ T5430] syz.2.120 uses obsolete (PF_INET,SOCK_PACKET) [ 42.859915][ T5437] netlink: 'syz.4.122': attribute type 1 has an invalid length. [ 42.924948][ T5425] vfat: Unknown parameter 'unÜVãÖ¾i_xla' [ 44.111458][ T5450] netlink: 'syz.1.118': attribute type 39 has an invalid length. [ 44.192802][ T5455] input: syz0 as /devices/virtual/input/input5 [ 44.264409][ T5452] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 44.503109][ T5475] No such timeout policy "syz1" [ 44.543854][ T5482] fuse: Bad value for 'fd' [ 44.550008][ T5478] set_capacity_and_notify: 5 callbacks suppressed [ 44.550653][ T5480] loop1: detected capacity change from 0 to 512 [ 44.552545][ T5478] loop4: detected capacity change from 0 to 2048 [ 44.554149][ T5478] EXT4-fs: Ignoring removed i_version option [ 44.580473][ T5478] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 44.585589][ T5485] loop0: detected capacity change from 0 to 4096 [ 44.585993][ T5485] EXT4-fs: inline encryption not supported [ 44.593769][ T5485] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 44.593813][ T5485] EXT4-fs (loop0): Test dummy encryption mode enabled [ 44.597919][ T5485] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c1a8, mo2=0002] [ 44.597964][ T5485] System zones: 0-5 [ 44.601518][ T5485] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.646691][ T4720] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.710789][ T5501] ëi“sg(: renamed from bridge_slave_1 (while UP) [ 44.717796][ T5501] loop1: detected capacity change from 0 to 128 [ 44.747323][ T4711] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.785344][ T5508] nbd: must specify an index to disconnect [ 44.813537][ T5518] loop4: detected capacity change from 0 to 512 [ 44.815576][ T5518] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 44.829940][ T5518] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.853878][ T4798] IPVS: starting estimator thread 0... [ 44.854455][ T5523] loop0: detected capacity change from 0 to 256 [ 44.854914][ T5523] vfat: Unknown parameter 'nnonumtail' [ 44.902757][ T4720] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.948679][ T5525] IPVS: using max 60 ests per chain, 144000 per kthread [ 44.967689][ T5535] __nla_validate_parse: 2 callbacks suppressed [ 44.967725][ T5535] netlink: 4 bytes leftover after parsing attributes in process `syz.4.146'. [ 45.041730][ T5539] netlink: 8 bytes leftover after parsing attributes in process `syz.4.150'. [ 45.041788][ T5539] netlink: 'syz.4.150': attribute type 8 has an invalid length. [ 45.055007][ T5539] geneve2: entered promiscuous mode [ 45.055048][ T5539] geneve2: entered allmulticast mode [ 45.129304][ T5551] loop0: detected capacity change from 0 to 8 [ 45.132709][ T5551] squashfs: SQUASHFS error: Xattrs in filesystem, these will be ignored [ 45.132761][ T5551] unable to read xattr id index table [ 45.137059][ T5551] SQUASHFS error: zlib decompression failed, data probably corrupt [ 45.137101][ T5551] SQUASHFS error: Failed to read block 0x9b: -5 [ 45.137115][ T5551] SQUASHFS error: Unable to read metadata cache entry [99] [ 45.137129][ T5551] SQUASHFS error: Unable to read inode 0x127 [ 45.294064][ T5560] loop4: detected capacity change from 0 to 4096 [ 45.297126][ T5560] EXT4-fs: inline encryption not supported [ 45.306840][ T5560] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 45.312514][ T5560] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=84ec018, mo2=0003] [ 45.315279][ T5560] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.423053][ T5568] loop1: detected capacity change from 0 to 512 [ 45.431997][ T4720] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.435094][ T5568] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 45.446566][ T5568] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c01c, mo2=0002] [ 45.446622][ T5568] System zones: 0-2, 18-18, 34-34 [ 45.450601][ T5568] EXT4-fs error (device loop1): ext4_orphan_get:1425: comm syz.1.157: bad orphan inode 15 [ 45.450629][ T5568] loop1: lost filesystem error report for type 5 error -117 [ 45.452489][ T5568] ext4_test_bit(bit=14, block=18) = 1 [ 45.452507][ T5568] is_bad_inode(inode)=0 [ 45.452518][ T5568] NEXT_ORPHAN(inode)=2264924160 [ 45.452530][ T5568] max_ino=32 [ 45.452539][ T5568] i_nlink=0 [ 45.458106][ T5568] EXT4-fs error (device loop1): ext4_do_update_inode:5742: inode #15: comm syz.1.157: corrupted inode contents [ 45.460548][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 45.460568][ C1] EXT4-fs (loop1): initial error at time 46: ext4_orphan_get:1425 [ 45.460581][ C1] EXT4-fs (loop1): last error at time 46: ext4_orphan_get:1425 [ 45.467335][ T5568] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 45.467838][ T5568] EXT4-fs error (device loop1): ext4_dirty_inode:6639: inode #15: comm syz.1.157: mark_inode_dirty error [ 45.467866][ T5568] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 45.476514][ T5568] EXT4-fs error (device loop1): ext4_do_update_inode:5742: inode #15: comm syz.1.157: corrupted inode contents [ 45.476555][ T5568] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 45.482060][ T5571] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(4) [ 45.482082][ T5571] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 45.488773][ T5571] vhci_hcd vhci_hcd.0: Device attached [ 45.491397][ T5568] EXT4-fs error (device loop1): ext4_xattr_delete_inode:3001: inode #15: comm syz.1.157: mark_inode_dirty error [ 45.491481][ T5568] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 45.494645][ T5574] vhci_hcd: connection closed [ 45.495330][ T5568] EXT4-fs error (device loop1): ext4_xattr_delete_inode:3004: inode #15: comm syz.1.157: mark inode dirty (error -117) [ 45.495356][ T5568] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 45.503893][ T12] vhci_hcd vhci_hcd.3: stop threads [ 45.504561][ T5568] EXT4-fs warning (device loop1): ext4_evict_inode:287: xattr delete (err -117) [ 45.507418][ T5568] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 45.511623][ T12] vhci_hcd vhci_hcd.3: release socket [ 45.512668][ T12] vhci_hcd vhci_hcd.3: disconnect device [ 45.580247][ T5568] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.621250][ T5579] netlink: 'syz.4.163': attribute type 8 has an invalid length. [ 45.621284][ T5579] netlink: 'syz.4.163': attribute type 2 has an invalid length. [ 45.621298][ T5579] netlink: 197860 bytes leftover after parsing attributes in process `syz.4.163'. [ 45.684723][ T5583] team0 (unregistering): Port device team_slave_0 removed [ 45.690524][ T5583] team0 (unregistering): Port device team_slave_1 removed [ 45.848232][ T5595] loop1: detected capacity change from 0 to 2048 [ 45.882986][ T5595] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.906709][ T5595] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.169: bg 0: block 345: padding at end of block bitmap is not set [ 45.909716][ T5595] EXT4-fs (loop1): Remounting filesystem read-only [ 45.925831][ T4712] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.022426][ T12] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 46.022551][ T12] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 46.022579][ T12] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 46.022610][ T12] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 46.056539][ T5613] EXT4-fs: Invalid want_extra_isize 7 [ 46.057695][ T5611] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.064827][ T5611] EXT4-fs error (device loop0): ext4_xattr_block_get:597: inode #15: comm syz.0.174: corrupted xattr block 33: invalid header [ 46.070375][ T5607] bond0: (slave erspan0): Opening slave failed [ 46.073221][ T5611] EXT4-fs error (device loop0): ext4_xattr_block_get:597: inode #15: comm syz.0.174: corrupted xattr block 33: invalid header [ 46.078042][ T5611] EXT4-fs error (device loop0): ext4_xattr_block_get:597: inode #15: comm syz.0.174: corrupted xattr block 33: invalid header [ 46.179425][ T5611] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 46.194100][ T5611] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 31 with error 28 [ 46.194142][ T5611] EXT4-fs (loop0): This should not happen!! Data will be lost [ 46.194142][ T5611] [ 46.194160][ T5611] EXT4-fs (loop0): Total free blocks count 0 [ 46.194177][ T5611] EXT4-fs (loop0): Free/Dirty block details [ 46.194200][ T5611] EXT4-fs (loop0): free_blocks=65280 [ 46.194217][ T5611] EXT4-fs (loop0): dirty_blocks=63 [ 46.194229][ T5611] EXT4-fs (loop0): Block reservation details [ 46.194239][ T5611] EXT4-fs (loop0): i_reserved_data_blocks=63 [ 46.238293][ T5637] vfat: Bad value for 'utf8' [ 46.240440][ T40] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 160 with max blocks 32 with error 28 [ 46.241355][ T4711] EXT4-fs warning (device loop0): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 46.405178][ T5629] syzkaller1: entered promiscuous mode [ 46.407141][ T5629] syzkaller1: entered allmulticast mode [ 46.588712][ T5646] syzkaller0: entered promiscuous mode [ 46.588742][ T5646] syzkaller0: entered allmulticast mode [ 46.593752][ T5646] tipc: Started in network mode [ 46.593787][ T5646] tipc: Node identity 3ea6d9df9105, cluster identity 4711 [ 46.594751][ T5646] tipc: Enabled bearer , priority 0 [ 47.127259][ T5659] netlink: 12 bytes leftover after parsing attributes in process `syz.1.187'. [ 47.429507][ T5671] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.461892][ T5645] tipc: Resetting bearer [ 47.468113][ T5645] tipc: Disabling bearer [ 47.623716][ T5680] fuse: Bad value for 'fd' [ 47.748323][ T1001] hid-generic 0005:15C2:0000.0001: item fetching failed at offset 12/26 [ 47.751648][ T1001] hid-generic 0005:15C2:0000.0001: probe with driver hid-generic failed with error -22 [ 47.751677][ T5684] fuse: Bad value for 'user_id' [ 47.751687][ T5684] fuse: Bad value for 'user_id' [ 47.753512][ T5683] fuse: Bad value for 'user_id' [ 47.753519][ T5683] fuse: Bad value for 'user_id' [ 47.785002][ T5692] bridge2: entered promiscuous mode [ 47.786151][ T5692] bridge2: entered allmulticast mode [ 47.793065][ T5693] bridge3: entered promiscuous mode [ 47.794316][ T5693] bridge3: entered allmulticast mode [ 47.821365][ T5697] syzkaller0: entered promiscuous mode [ 47.821399][ T5697] syzkaller0: entered allmulticast mode [ 47.976818][ T5707] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 47.981436][ T5712] input: syz0 as /devices/virtual/input/input7 [ 47.983827][ T5707] EXT4-fs error (device loop4): ext4_lookup:1785: inode #15: comm syz.4.201: iget: bogus i_mode (0) [ 47.988152][ T5707] EXT4-fs error (device loop4): ext4_lookup:1785: inode #15: comm syz.4.201: iget: bogus i_mode (0) [ 47.993621][ T5711] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 48.002720][ T5712] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 48.003215][ T5711] sch_tbf: burst 6281 is lower than device lo mtu (65550) ! [ 48.008900][ T4720] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 48.051154][ T4712] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.067709][ T5714] netlink: 8 bytes leftover after parsing attributes in process `syz.4.203'. [ 48.123286][ T5718] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 48.123312][ T5718] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 48.126712][ T5718] vhci_hcd vhci_hcd.0: Device attached [ 48.128273][ T5721] vhci_hcd: cannot find the pending unlink 3 [ 48.128310][ T5721] vhci_hcd: connection closed [ 48.129370][ T39] vhci_hcd vhci_hcd.1: stop threads [ 48.129389][ T39] vhci_hcd vhci_hcd.1: release socket [ 48.129403][ T39] vhci_hcd vhci_hcd.1: disconnect device [ 48.136062][ T5724] FAT-fs (loop3): data area starts beyond volume (36 > 6) [ 48.136096][ T5724] FAT-fs (loop3): Can't find a valid FAT filesystem [ 48.177885][ T5726] netlink: 8 bytes leftover after parsing attributes in process `syz.4.206'. [ 49.307422][ T5736] EXT4-fs (loop1): Test dummy encryption mode enabled [ 49.307458][ T5736] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 49.313745][ T5736] EXT4-fs error (device loop1): ext4_orphan_get:1425: comm syz.1.208: bad orphan inode 131083 [ 49.313786][ T5736] loop1: lost filesystem error report for type 5 error -117 [ 49.315480][ T5736] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 49.351610][ T5736] overlayfs: upper fs needs to support d_type. [ 49.354784][ T5736] netlink: 'syz.1.208': attribute type 15 has an invalid length. [ 49.393140][ T5744] vfat: Unknown parameter '^ß÷‰‚U2ì' [ 49.407428][ T5746] netlink: 'syz.3.214': attribute type 20 has an invalid length. [ 49.407459][ T5746] netlink: 4 bytes leftover after parsing attributes in process `syz.3.214'. [ 49.428481][ T5746] netlink: 'syz.3.214': attribute type 20 has an invalid length. [ 49.428518][ T5746] netlink: 4 bytes leftover after parsing attributes in process `syz.3.214'. [ 49.430330][ T40] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 49.430582][ T3612] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 49.430607][ T3612] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 49.430624][ T3612] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 49.430657][ T5744] warning: `syz.4.212' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 49.471184][ T5746] EXT4-fs error (device loop3): ext4_ext_check_inode:521: inode #2: comm syz.3.214: pblk 0 bad header/extent: eh_entries is 0 but eh_depth is > 0 - magic f30a, entries 0, max 4(4), depth 5(5) [ 49.471224][ T5746] loop3: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117 [ 49.471420][ T5746] EXT4-fs (loop3): get root inode failed [ 49.471427][ T5746] EXT4-fs (loop3): mount failed [ 49.511356][ T5744] Alternate GPT is invalid, using primary GPT. [ 49.511411][ T5744] loop4: p1 p2 p3 [ 49.619905][ T5757] workqueue: Failed to create a rescuer kthread for wq "ext4-rsv-conversion": -EINTR [ 49.620187][ T5757] EXT4-fs: failed to create workqueue [ 49.620200][ T5757] EXT4-fs (loop3): mount failed [ 49.888741][ T4726] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 49.936531][ T5768] netlink: 48 bytes leftover after parsing attributes in process `syz.3.218'. [ 50.000839][ T5777] netlink: 72 bytes leftover after parsing attributes in process `syz.4.221'. [ 50.072140][ T5785] set_capacity_and_notify: 13 callbacks suppressed [ 50.072177][ T5785] loop4: detected capacity change from 0 to 512 [ 50.072802][ T5785] EXT4-fs: inline encryption not supported [ 50.079418][ T5785] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 50.088171][ T5785] EXT4-fs error (device loop4): ext4_iget_extra_inode:5180: inode #15: comm syz.4.224: corrupted in-inode xattr: e_value size too large [ 50.090614][ T5624] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.095615][ T5785] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 50.099271][ T5785] EXT4-fs error (device loop4): ext4_orphan_get:1404: comm syz.4.224: couldn't read orphan inode 15 (err -117) [ 50.099306][ T5785] loop4: lost filesystem error report for type 5 error -117 [ 50.105266][ T5785] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 50.112128][ T5793] nfs4: Unknown parameter 'rþó¸‹m»0„’ ' [ 50.118397][ T5793] vxcan0: tx address claim with different name [ 50.183340][ T40] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 50.186702][ T40] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.273992][ T40] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 50.276354][ T40] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.348163][ T4726] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 50.352128][ T4726] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 50.354224][ T4726] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 50.359038][ T4726] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 50.360956][ T4726] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 50.553489][ T40] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 50.553528][ T40] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.605639][ T5816] mmap: syz.2.234 (5816) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 50.723538][ T40] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 50.727453][ T40] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.804836][ T5826] binder: 5825:5826 tried to acquire reference to desc 0, got 1 instead [ 50.862736][ T5827] binder: 5825:5827 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 50.865363][ T5827] binder: 5827 RLIMIT_NICE not set [ 50.866464][ T5827] binder: 5827 RLIMIT_NICE not set [ 50.867772][ T5827] binder: 5827 RLIMIT_NICE not set [ 50.868966][ T5827] binder: 5825:5827 unknown command 0 [ 50.869948][ T5827] binder: 5825:5827 ioctl c0306201 20004a40 returned -22 [ 50.871437][ T5827] binder: undelivered TRANSACTION_COMPLETE [ 50.872864][ T5827] binder: 5825:5827 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 50.875480][ T5827] binder: 5827 RLIMIT_NICE not set [ 50.879904][ T5827] binder: 5825:5827 ioctl 402c542c 20000240 returned -22 [ 50.940410][ T5785] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.997481][ T40] ëi“sg(: left allmulticast mode [ 50.997536][ T40] ëi“sg(: left promiscuous mode [ 50.997888][ T40] bridge0: port 2(ëi“sg() entered disabled state [ 51.134635][ T5834] netlink: 4 bytes leftover after parsing attributes in process `syz.3.233'. [ 51.251345][ T40] bridge_slave_0: left allmulticast mode [ 51.252736][ T40] bridge_slave_0: left promiscuous mode [ 51.253953][ T40] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.340356][ T5844] netlink: 36 bytes leftover after parsing attributes in process `syz.4.238'. [ 51.436864][ T40] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 51.482364][ T40] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 51.520434][ T40] bond0 (unregistering): Released all slaves [ 51.557530][ T5834] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 51.557566][ T5834] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 51.563666][ T5834] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 51.563699][ T5834] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 51.565736][ T5857] ubi0: attaching mtd0 [ 51.566421][ T5857] ubi0: scanning is finished [ 51.566429][ T5857] ubi0: empty MTD device detected [ 51.584314][ T4399] 8021q: adding VLAN 0 to HW filter on device eth0 [ 51.625376][ T5801] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.625450][ T5801] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.625678][ T5801] bridge_slave_0: entered allmulticast mode [ 51.631770][ T5801] bridge_slave_0: entered promiscuous mode [ 51.636809][ T5801] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.636870][ T5801] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.640205][ T5801] bridge_slave_1: entered allmulticast mode [ 51.640931][ T5801] bridge_slave_1: entered promiscuous mode [ 51.653726][ T1502] binder: undelivered TRANSACTION_COMPLETE [ 51.653761][ T1502] binder: undelivered transaction 14, process died. [ 51.686391][ T5801] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 51.691588][ T5801] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 51.775472][ T5857] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 51.775516][ T5857] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 51.775531][ T5857] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 51.775543][ T5857] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 51.775554][ T5857] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 51.775564][ T5857] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 51.775574][ T5857] ubi0: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 3186946236 [ 51.775586][ T5857] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 51.775921][ T5878] ubi0: background thread "ubi_bgt0d" started, PID 5878 [ 51.800533][ T5879] xt_hashlimit: max too large, truncated to 1048576 [ 51.818087][ T5801] team0: Port device team_slave_0 added [ 51.827031][ T5877] sit1: entered allmulticast mode [ 51.858358][ T5801] team0: Port device team_slave_1 added [ 51.932045][ T4399] 8021q: adding VLAN 0 to HW filter on device eth2 [ 51.974468][ T5801] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 51.974499][ T5801] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 51.974514][ T5801] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 51.977434][ T5801] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 51.977446][ T5801] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 51.977496][ T5801] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 52.025230][ T5801] hsr_slave_0: entered promiscuous mode [ 52.025718][ T5801] hsr_slave_1: entered promiscuous mode [ 52.026067][ T5801] debugfs: 'hsr0' already exists in 'hsr' [ 52.026125][ T5801] Cannot create hsr debugfs directory [ 52.092218][ T40] hsr_slave_0: left promiscuous mode [ 52.093926][ T40] hsr_slave_1: left promiscuous mode [ 52.095469][ T40] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 52.096976][ T40] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 52.100471][ T40] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 52.101976][ T40] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 52.113979][ T40] veth1_macvtap: left promiscuous mode [ 52.114040][ T40] veth0_macvtap: left promiscuous mode [ 52.114133][ T40] veth1_vlan: left promiscuous mode [ 52.114189][ T40] veth0_vlan: left promiscuous mode [ 52.144316][ T5900] usb usb1: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 52.144350][ T5900] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 52.418843][ T50] Bluetooth: hci1: command tx timeout [ 52.500622][ T4399] 8021q: adding VLAN 0 to HW filter on device eth1 [ 52.501713][ T5926] loop0: detected capacity change from 0 to 512 [ 52.524301][ T5926] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 52.545965][ T5926] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:483: comm syz.0.251: Invalid block bitmap block 0 in block_group 0 [ 52.546007][ T5926] loop0: lost filesystem error report for type 5 error -117 [ 52.548526][ T5926] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 52.548587][ T5926] loop0: lost filesystem error report for type 5 error -117 [ 52.548889][ T5926] EXT4-fs error (device loop0): ext4_clear_blocks:876: inode #11: comm syz.0.251: attempt to clear invalid blocks 983261 len 1 [ 52.548909][ T5926] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 52.557254][ T5926] EXT4-fs error (device loop0): __ext4_get_inode_loc:4886: comm syz.0.251: Invalid inode table block 0 in block_group 0 [ 52.557298][ T5926] loop0: lost filesystem error report for type 5 error -117 [ 52.558573][ C0] EXT4-fs (loop0): error count since last fsck: 4 [ 52.558588][ C0] EXT4-fs (loop0): initial error at time 53: ext4_read_block_bitmap_nowait:483 [ 52.558604][ C0] EXT4-fs (loop0): last error at time 53: __ext4_get_inode_loc:4886 [ 52.563388][ T5926] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6435: Corrupt filesystem [ 52.563404][ T5926] loop0: lost filesystem error report for type 5 error -117 [ 52.563612][ T5926] EXT4-fs error (device loop0) in ext4_orphan_del:303: Corrupt filesystem [ 52.563623][ T5926] loop0: lost filesystem error report for type 5 error -117 [ 52.563777][ T5926] EXT4-fs error (device loop0): __ext4_get_inode_loc:4886: comm syz.0.251: Invalid inode table block 0 in block_group 0 [ 52.563792][ T5926] loop0: lost filesystem error report for type 5 error -117 [ 52.563927][ T5926] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6435: Corrupt filesystem [ 52.563936][ T5926] loop0: lost filesystem error report for type 5 error -117 [ 52.564058][ T5926] EXT4-fs error (device loop0): ext4_truncate:4691: inode #11: comm syz.0.251: mark_inode_dirty error [ 52.564070][ T5926] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 52.564195][ T5926] EXT4-fs error (device loop0) in ext4_process_orphan:345: Corrupt filesystem [ 52.564205][ T5926] loop0: lost filesystem error report for type 5 error -117 [ 52.564334][ T5926] EXT4-fs error (device loop0): __ext4_get_inode_loc:4886: comm syz.0.251: Invalid inode table block 0 in block_group 0 [ 52.564345][ T5926] loop0: lost filesystem error report for type 5 error -117 [ 52.564518][ T5926] EXT4-fs (loop0): 1 truncate cleaned up [ 52.565039][ T5926] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 52.568612][ T5926] EXT4-fs error (device loop0): __ext4_get_inode_loc:4886: comm syz.0.251: Invalid inode table block 0 in block_group 0 [ 52.613452][ T4711] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.715273][ T5943] loop0: detected capacity change from 0 to 128 [ 52.761343][ T5801] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 52.770927][ T5801] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 52.774486][ T5801] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 52.778400][ T5801] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 52.780985][ T5801] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 52.786434][ T5801] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 52.788330][ T5801] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 52.791797][ T5801] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 52.808711][ T5954] qrtr: Invalid version 0 [ 52.846678][ T5801] 8021q: adding VLAN 0 to HW filter on device bond0 [ 52.858124][ T5954] loop2: detected capacity change from 0 to 512 [ 52.859015][ T5954] EXT4-fs: Ignoring removed nobh option [ 52.863433][ T5954] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 52.869194][ T5801] 8021q: adding VLAN 0 to HW filter on device team0 [ 52.888919][ T5801] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 52.888954][ T5801] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 52.948487][ T5954] EXT4-fs (loop2): 1 truncate cleaned up [ 52.953306][ T5954] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 52.961889][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.961940][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 52.962575][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.962599][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.068282][ T5970] loop0: detected capacity change from 0 to 512 [ 53.073961][ T5970] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 53.205920][ T5970] FAT-fs (loop0): error, fat_free_clusters: deleting FAT entry beyond EOF [ 53.231005][ T5970] overlayfs: missing 'lowerdir' [ 53.269321][ T5970] netlink: 600 bytes leftover after parsing attributes in process `syz.0.256'. [ 53.295055][ T5970] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.297391][ T5970] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 53.860474][ T5934] fuse: Bad value for 'group_id' [ 53.861825][ T5934] fuse: Bad value for 'group_id' [ 53.923056][ T4399] 8021q: adding VLAN 0 to HW filter on device eth3 [ 53.948293][ T4713] EXT4-fs error (device loop2): ext4_lookup:1785: inode #11: comm syz-executor: iget: bad extra_isize 46 (inode size 256) [ 53.991408][ T4713] EXT4-fs (loop2): Remounting filesystem read-only [ 54.021014][ T5982] capability: warning: `syz.3.259' uses deprecated v2 capabilities in a way that may be insecure [ 54.028884][ T5981] loop0: detected capacity change from 0 to 1024 [ 54.066058][ T5981] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 54.070315][ T5991] loop4: detected capacity change from 0 to 256 [ 54.072376][ T4924] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.132032][ T5801] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 54.137221][ T4711] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.304645][ T6020] vlan3: entered allmulticast mode [ 54.304682][ T6020] veth0_to_bond: entered allmulticast mode [ 54.424064][ T5801] veth0_vlan: entered promiscuous mode [ 54.430705][ T5801] veth1_vlan: entered promiscuous mode [ 54.465601][ T6043] loop4: detected capacity change from 0 to 512 [ 54.492155][ T50] Bluetooth: hci1: command tx timeout [ 54.509445][ T5801] veth0_macvtap: entered promiscuous mode [ 54.593628][ T5801] veth1_macvtap: entered promiscuous mode [ 54.645226][ T40] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.684776][ T6052] tipc: Enabled bearer , priority 0 [ 54.712910][ T5801] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 54.731678][ T5801] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 54.744441][ T4726] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 54.753637][ T4726] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 54.755764][ T4726] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 54.757464][ T4726] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 54.765222][ T4726] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 54.785036][ T40] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.813503][ T3612] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.813579][ T3612] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.813596][ T3612] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.813612][ T3612] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.833090][ T6052] tipc: Resetting bearer [ 54.941777][ T40] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.963545][ T3683] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 54.963586][ T3683] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.031000][ T40] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.040516][ T15] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.040550][ T15] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.066440][ T6049] tipc: Disabling bearer [ 55.150472][ T6097] loop4: detected capacity change from 0 to 128 [ 55.152414][ T6097] EXT4-fs (loop4): Test dummy encryption mode enabled [ 55.176444][ T6097] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 55.270320][ T40] bridge_slave_1: left allmulticast mode [ 55.270388][ T40] bridge_slave_1: left promiscuous mode [ 55.270811][ T40] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.277496][ T40] bridge_slave_0: left allmulticast mode [ 55.277553][ T40] bridge_slave_0: left promiscuous mode [ 55.277630][ T40] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.293974][ T6111] loop5: detected capacity change from 0 to 512 [ 55.308159][ T6111] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 55.538741][ T6111] EXT4-fs (loop5): invalid journal inode [ 55.538841][ T6111] EXT4-fs (loop5): can't get journal size [ 55.556434][ T6111] EXT4-fs (loop5): 1 truncate cleaned up [ 55.558223][ T6111] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 55.583126][ T6111] netlink: 'syz.5.282': attribute type 34 has an invalid length. [ 55.716239][ T40] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 55.744381][ T40] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 55.782283][ T40] bond0 (unregistering): Released all slaves [ 55.814480][ T6131] syzkaller1: entered promiscuous mode [ 55.814523][ T6131] syzkaller1: entered allmulticast mode [ 55.827884][ T6131] loop0: detected capacity change from 0 to 512 [ 55.829817][ T6131] EXT4-fs: Ignoring removed nobh option [ 55.835220][ T6131] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 55.843724][ T6131] EXT4-fs (loop0): 1 truncate cleaned up [ 55.844163][ T6131] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 55.898367][ T5801] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.955532][ T6144] netlink: 8 bytes leftover after parsing attributes in process `syz.5.285'. [ 56.022141][ T4720] EXT4-fs error (device loop4): ext4_readdir:225: inode #11: comm syz-executor: path /79/mnt/lost+found: directory fails checksum at offset 6144 [ 56.022188][ T4711] EXT4-fs error (device loop0): ext4_lookup:1785: inode #11: comm syz-executor: iget: bad extra_isize 46 (inode size 256) [ 56.030040][ T4720] EXT4-fs error (device loop4): ext4_empty_dir:3114: inode #11: block 6: comm syz-executor: Directory block failed checksum [ 56.034259][ T4711] EXT4-fs (loop0): Remounting filesystem read-only [ 56.036097][ T4720] EXT4-fs error (device loop4): ext4_readdir:225: inode #11: comm syz-executor: path /79/mnt/lost+found: directory fails checksum at offset 6144 [ 56.040586][ T4720] EXT4-fs error (device loop4): ext4_empty_dir:3114: inode #11: block 6: comm syz-executor: Directory block failed checksum [ 56.044293][ T4720] EXT4-fs error (device loop4): ext4_readdir:225: inode #11: comm syz-executor: path /79/mnt/lost+found: directory fails checksum at offset 6144 [ 56.047715][ T4720] EXT4-fs error (device loop4): ext4_empty_dir:3114: inode #11: block 6: comm syz-executor: Directory block failed checksum [ 56.054521][ T4720] EXT4-fs error (device loop4): ext4_readdir:225: inode #11: comm syz-executor: path /79/mnt/lost+found: directory fails checksum at offset 6144 [ 56.057689][ T4720] EXT4-fs error (device loop4): ext4_empty_dir:3114: inode #11: block 6: comm syz-executor: Directory block failed checksum [ 56.061056][ T4720] EXT4-fs error (device loop4): ext4_readdir:225: inode #11: comm syz-executor: path /79/mnt/lost+found: directory fails checksum at offset 6144 [ 56.063992][ T4720] EXT4-fs error (device loop4): ext4_empty_dir:3114: inode #11: block 6: comm syz-executor: Directory block failed checksum [ 56.106983][ T4726] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 56.109281][ T4726] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 56.110882][ T4726] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 56.113233][ T4726] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 56.114780][ T4726] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 56.192532][ T40] hsr_slave_0: left promiscuous mode [ 56.193902][ T40] hsr_slave_1: left promiscuous mode [ 56.194162][ T40] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 56.194181][ T40] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 56.198408][ T40] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 56.198430][ T40] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 56.210195][ T40] veth1_macvtap: left promiscuous mode [ 56.211363][ T40] veth0_macvtap: left promiscuous mode [ 56.212453][ T40] veth1_vlan: left promiscuous mode [ 56.213427][ T40] veth0_vlan: left promiscuous mode [ 56.336288][ T40] team0 (unregistering): Port device team_slave_1 removed [ 56.358114][ T40] team0 (unregistering): Port device team_slave_0 removed [ 56.362759][ T4711] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.424979][ T4399] 8021q: adding VLAN 0 to HW filter on device eth7 [ 56.474969][ T6059] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.475062][ T6059] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.475151][ T6059] bridge_slave_0: entered allmulticast mode [ 56.475803][ T6059] bridge_slave_0: entered promiscuous mode [ 56.477314][ T6059] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.477336][ T6059] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.477431][ T6059] bridge_slave_1: entered allmulticast mode [ 56.478029][ T6059] bridge_slave_1: entered promiscuous mode [ 56.495146][ T50] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 56.495681][ T6059] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 56.496997][ T6059] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 56.501742][ T50] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 56.503637][ T50] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 56.505203][ T50] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 56.506770][ T50] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 56.506974][ T6059] team0: Port device team_slave_0 added [ 56.508059][ T6059] team0: Port device team_slave_1 added [ 56.543083][ T6059] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 56.543190][ T6059] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 56.543210][ T6059] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 56.544870][ T6059] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 56.544880][ T6059] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 56.544894][ T6059] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 56.568747][ T50] Bluetooth: hci1: command tx timeout [ 56.577438][ T4720] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 56.581774][ T6059] hsr_slave_0: entered promiscuous mode [ 56.583413][ T6059] hsr_slave_1: entered promiscuous mode [ 56.584857][ T6059] debugfs: 'hsr0' already exists in 'hsr' [ 56.586112][ T6059] Cannot create hsr debugfs directory [ 56.691508][ T6059] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 56.694295][ T6059] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 56.696033][ T6059] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 56.702909][ T6059] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 56.706163][ T6059] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 56.710771][ T6059] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 56.714044][ T6059] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 56.717497][ T6059] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 56.805287][ T4726] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 56.807482][ T4726] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 56.809815][ T4726] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 56.811494][ T4726] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 56.813198][ T4726] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 56.819140][ T4726] Bluetooth: hci2: command tx timeout [ 56.881767][ T40] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.889654][ T6059] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.889702][ T6059] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.889795][ T6059] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.889831][ T6059] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.921834][ T6216] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.938052][ T143] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.939881][ T143] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.979167][ T6229] netlink: 12 bytes leftover after parsing attributes in process `syz.5.297'. [ 57.032077][ T40] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.051022][ T6059] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.056610][ T6059] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.058404][ T143] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.058447][ T143] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.063114][ T3792] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.063154][ T3792] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.093889][ T6059] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 57.093954][ T6059] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 57.123324][ T6249] netlink: 56 bytes leftover after parsing attributes in process `syz.5.300'. [ 57.131083][ T40] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.264093][ T40] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.269611][ T6154] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.271061][ T6154] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.272466][ T6154] bridge_slave_0: entered allmulticast mode [ 57.274007][ T6154] bridge_slave_0: entered promiscuous mode [ 57.275989][ T6169] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.277486][ T6169] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.278932][ T6169] bridge_slave_0: entered allmulticast mode [ 57.280546][ T6169] bridge_slave_0: entered promiscuous mode [ 57.289273][ T6154] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.290675][ T6154] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.292003][ T6154] bridge_slave_1: entered allmulticast mode [ 57.293586][ T6154] bridge_slave_1: entered promiscuous mode [ 57.298694][ T6169] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.300097][ T6169] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.301468][ T6169] bridge_slave_1: entered allmulticast mode [ 57.303047][ T6169] bridge_slave_1: entered promiscuous mode [ 57.313546][ T6169] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 57.316804][ T6169] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 57.325580][ T6169] team0: Port device team_slave_0 added [ 57.327488][ T6169] team0: Port device team_slave_1 added [ 57.360585][ T6169] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 57.362187][ T6169] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 57.367291][ T6169] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 57.373405][ T6169] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 57.375656][ T6169] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 57.380151][ T6169] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 57.384435][ T4399] 8021q: adding VLAN 0 to HW filter on device eth5 [ 57.386903][ T6154] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 57.392276][ T6154] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 57.406259][ T6288] binder: 6287:6288 unknown command 49 [ 57.406291][ T6288] binder: 6287:6288 ioctl c0306201 200001c0 returned -22 [ 57.425692][ T6169] hsr_slave_0: entered promiscuous mode [ 57.427253][ T6169] hsr_slave_1: entered promiscuous mode [ 57.428530][ T6169] debugfs: 'hsr0' already exists in 'hsr' [ 57.431021][ T6169] Cannot create hsr debugfs directory [ 57.452494][ T6154] team0: Port device team_slave_0 added [ 57.457064][ T6154] team0: Port device team_slave_1 added [ 57.491347][ T6154] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 57.492708][ T6154] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 57.494128][ T6154] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 57.509792][ T6154] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 57.509846][ T6154] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 57.509864][ T6154] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 57.540143][ T6059] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.564712][ T6154] hsr_slave_0: entered promiscuous mode [ 57.566618][ T6154] hsr_slave_1: entered promiscuous mode [ 57.568316][ T6154] debugfs: 'hsr0' already exists in 'hsr' [ 57.569745][ T6154] Cannot create hsr debugfs directory [ 57.579637][ T40] bridge_slave_1: left allmulticast mode [ 57.581035][ T40] bridge_slave_1: left promiscuous mode [ 57.582165][ T40] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.584778][ T40] bridge_slave_0: left allmulticast mode [ 57.585799][ T40] bridge_slave_0: left promiscuous mode [ 57.586851][ T40] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.712808][ T40] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 57.739943][ T40] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 57.819831][ T40] bond0 (unregistering): Released all slaves [ 57.887337][ T4399] 8021q: adding VLAN 0 to HW filter on device eth4 [ 58.003086][ T6202] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.004750][ T6202] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.006347][ T6202] bridge_slave_0: entered allmulticast mode [ 58.008048][ T6202] bridge_slave_0: entered promiscuous mode [ 58.012565][ T6202] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.014055][ T6202] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.015567][ T6202] bridge_slave_1: entered allmulticast mode [ 58.017258][ T6202] bridge_slave_1: entered promiscuous mode [ 58.178632][ T50] Bluetooth: hci3: command tx timeout [ 58.206720][ T6202] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 58.288498][ T6202] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 58.473552][ T6202] team0: Port device team_slave_0 added [ 58.501789][ T40] hsr_slave_0: left promiscuous mode [ 58.503932][ T40] hsr_slave_1: left promiscuous mode [ 58.504190][ T40] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 58.504208][ T40] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 58.508257][ T40] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 58.510901][ T40] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 58.523207][ T40] veth1_macvtap: left promiscuous mode [ 58.525420][ T40] veth0_macvtap: left promiscuous mode [ 58.525496][ T40] veth1_vlan: left promiscuous mode [ 58.525542][ T40] veth0_vlan: left promiscuous mode [ 58.534615][ T867] cfg80211: failed to load regulatory.db [ 58.569485][ T50] Bluetooth: hci0: command tx timeout [ 58.653030][ T50] Bluetooth: hci1: command tx timeout [ 58.720890][ T40] team0 (unregistering): Port device team_slave_1 removed [ 58.727040][ T40] team0 (unregistering): Port device team_slave_0 removed [ 58.740696][ T50] Bluetooth: hci1: adv larger than maximum supported [ 58.742493][ T50] Bluetooth: hci1: Malformed LE Event: 0x0d [ 58.745321][ T6350] futex_wake_op: syz.5.310 tries to shift op by -1; fix this program [ 58.748144][ T6351] efivarfs: Bad value for 'gid' [ 58.748165][ T6351] efivarfs: Bad value for 'gid' [ 58.779851][ T6202] team0: Port device team_slave_1 added [ 58.791792][ T6169] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 58.795966][ T6169] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 58.796952][ T4399] 8021q: adding VLAN 0 to HW filter on device eth6 [ 58.797371][ T6169] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 58.799343][ T6169] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 58.803519][ T6202] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 58.803548][ T6202] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 58.803561][ T6202] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 58.823301][ T6202] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 58.823999][ T6202] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 58.824016][ T6202] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 58.827454][ T6169] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 58.835806][ T6169] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 58.837728][ T6169] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 58.841166][ T6169] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 58.861773][ T6059] veth0_vlan: entered promiscuous mode [ 58.874832][ T6154] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 58.879911][ T6154] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 58.881919][ T6154] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 58.884558][ T6154] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 58.886495][ T6154] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 58.888734][ T50] Bluetooth: hci2: command tx timeout [ 58.888787][ T50] Bluetooth: hci4: command tx timeout [ 58.893052][ T6154] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 58.895457][ T6154] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 58.898265][ T6154] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 58.906921][ T6202] hsr_slave_0: entered promiscuous mode [ 58.908673][ T6202] hsr_slave_1: entered promiscuous mode [ 58.910129][ T6202] debugfs: 'hsr0' already exists in 'hsr' [ 58.911332][ T6202] Cannot create hsr debugfs directory [ 58.932965][ T6059] veth1_vlan: entered promiscuous mode [ 58.991191][ T6059] veth0_macvtap: entered promiscuous mode [ 59.010489][ T6059] veth1_macvtap: entered promiscuous mode [ 59.036032][ T6059] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.039894][ T6059] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 59.065117][ T4399] 8021q: adding VLAN 0 to HW filter on device eth8 [ 59.066143][ T15] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.066186][ T15] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.066207][ T15] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.066227][ T15] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.070015][ T6169] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.073384][ T6169] 8021q: adding VLAN 0 to HW filter on device team0 [ 59.076839][ T3683] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.076887][ T3683] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.077402][ T3683] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.077421][ T3683] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.138128][ T6154] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.151335][ T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.151368][ T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.157623][ T6202] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 59.163869][ T6202] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 59.164264][ T6202] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 59.166268][ T6202] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 59.171771][ T6202] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 59.176219][ T6202] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 59.176606][ T6202] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 59.179333][ T6202] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 59.181124][ T6169] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 59.183342][ T6154] 8021q: adding VLAN 0 to HW filter on device team0 [ 59.190158][ T40] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.190208][ T40] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.190767][ T40] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.190791][ T40] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.246630][ T3683] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.246662][ T3683] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.329949][ T6202] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.333060][ T6202] 8021q: adding VLAN 0 to HW filter on device team0 [ 59.337741][ T40] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.337815][ T40] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.339634][ T40] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.339657][ T40] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.486336][ T6169] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 59.597676][ T6169] veth0_vlan: entered promiscuous mode [ 59.611212][ T6154] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 59.614182][ T6169] veth1_vlan: entered promiscuous mode [ 59.621766][ T4399] 8021q: adding VLAN 0 to HW filter on device eth9 [ 59.633283][ T6169] veth0_macvtap: entered promiscuous mode [ 59.636706][ T6169] veth1_macvtap: entered promiscuous mode [ 59.641822][ T6202] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 59.666631][ T6169] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.675970][ T6169] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 59.689349][ T40] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.690856][ T40] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.691282][ T40] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.714629][ T15] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.739297][ T143] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.739334][ T143] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.757112][ T143] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.757146][ T143] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.834450][ T6202] veth0_vlan: entered promiscuous mode [ 59.843165][ T6202] veth1_vlan: entered promiscuous mode [ 59.848181][ T6154] veth0_vlan: entered promiscuous mode [ 59.909483][ T4399] 8021q: adding VLAN 0 to HW filter on device eth10 [ 59.937056][ T6154] veth1_vlan: entered promiscuous mode [ 59.950676][ T6202] veth0_macvtap: entered promiscuous mode [ 59.953812][ T6202] veth1_macvtap: entered promiscuous mode [ 59.970979][ T6202] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.972592][ T6154] veth0_macvtap: entered promiscuous mode [ 59.976816][ T6202] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 60.060434][ T6492] loop8: detected capacity change from 0 to 512 [ 60.064208][ T6492] EXT4-fs: inline encryption not supported [ 60.213725][ T6492] EXT4-fs (loop8): Cannot turn on journaled quota: type 0: error -2 [ 60.215900][ T6492] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #13: comm syz.8.291: invalid indirect mapped block 2683928664 (level 1) [ 60.215947][ T6492] loop8: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 60.217169][ T6492] EXT4-fs (loop8): 1 truncate cleaned up [ 60.217676][ T6492] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 60.220867][ T6154] veth1_macvtap: entered promiscuous mode [ 60.226693][ T3612] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.226748][ T3612] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.226779][ T3612] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.226805][ T3612] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.249778][ T4726] Bluetooth: hci3: command tx timeout [ 60.257737][ T6154] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 60.286040][ T6154] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 60.335286][ T3612] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.335349][ T3612] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.335379][ T3612] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.335402][ T3612] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.417300][ T4399] 8021q: adding VLAN 0 to HW filter on device eth11 [ 60.422707][ T3683] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.422738][ T3683] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.433739][ T3683] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.433776][ T3683] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.481503][ T143] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.481538][ T143] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.503697][ T4726] Bluetooth: Unknown BR/EDR signaling command 0x0c [ 60.505221][ T4726] Bluetooth: Wrong link type (-22) [ 60.516481][ T3683] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.516518][ T3683] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.544487][ T6522] loop9: detected capacity change from 0 to 512 [ 60.595718][ T6522] __quota_error: 352 callbacks suppressed [ 60.595760][ T6522] Quota error (device loop9): do_check_range: Getting dqdh_entries 1536 out of range 0-14 [ 60.595807][ T6522] Quota error (device loop9): qtree_write_dquot: Error -117 occurred while creating quota [ 60.595836][ T6522] EXT4-fs error (device loop9): ext4_acquire_dquot:7041: comm syz.9.293: Failed to acquire dquot type 1 [ 60.595849][ T6522] loop9: lost filesystem error report for type 5 error -117 [ 60.605836][ T6522] EXT4-fs (loop9): 1 truncate cleaned up [ 60.606611][ T6522] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 60.649558][ T4726] Bluetooth: hci0: command tx timeout [ 60.919482][ T6535] input: syz0 as /devices/virtual/input/input10 [ 60.974127][ T50] Bluetooth: hci2: command tx timeout [ 60.976456][ T4726] Bluetooth: hci4: command tx timeout [ 61.061283][ T6541] loop8: detected capacity change from 0 to 1024 [ 61.203260][ T6554] netlink: 'syz.8.320': attribute type 83 has an invalid length. [ 61.239076][ T6557] loop8: detected capacity change from 0 to 2048 [ 61.261664][ T6557] loop8: p1 p2 p3 [ 61.261664][ T6557] p1: [ 61.266060][ T6557] loop8: p1 size 16779263 extends beyond EOD, truncated [ 61.268021][ T6557] loop8: p2 size 458752 extends beyond EOD, truncated [ 61.269923][ T6557] loop8: p3 start 3036741376 is beyond EOD, truncated [ 61.344575][ T30] audit: type=1326 audit(62.314:364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6561 comm="syz.6.322" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffa1d79028 code=0x0 [ 62.353746][ T4726] Bluetooth: hci3: command tx timeout [ 62.615310][ T6604] binder: 6603 BINDER_GET_NODE_INFO_FOR_REF: only handle may be non-zero. [ 62.615356][ T6604] binder: 6603:6604 ioctl c018620c 20000000 returned -22 [ 62.729020][ T4726] Bluetooth: hci0: command tx timeout [ 62.815040][ T4726] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201' [ 62.816930][ T4726] CPU: 0 UID: 0 PID: 4726 Comm: kworker/u9:6 Tainted: G L syzkaller #0 PREEMPT [ 62.816951][ T4726] Tainted: [L]=SOFTLOCKUP [ 62.816955][ T4726] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 62.816962][ T4726] Workqueue: hci1 hci_rx_work [ 62.816987][ T4726] Call trace: [ 62.816990][ T4726] show_stack+0x2c/0x3c (C) [ 62.817006][ T4726] __dump_stack+0x30/0x40 [ 62.817019][ T4726] dump_stack_lvl+0xd8/0x12c [ 62.817032][ T4726] dump_stack+0x1c/0x28 [ 62.817044][ T4726] sysfs_warn_dup+0x9c/0xb8 [ 62.817057][ T4726] sysfs_create_dir_ns+0x190/0x1f4 [ 62.817069][ T4726] kobject_add_internal+0x290/0x6f0 [ 62.817079][ T4726] kobject_add_varg+0x9c/0xe8 [ 62.817091][ T4726] kobject_add+0x110/0x1c8 [ 62.817103][ T4726] device_add+0x394/0x9e0 [ 62.817116][ T4726] hci_conn_add_sysfs+0xbc/0x1e8 [ 62.817127][ T4726] le_conn_complete_evt+0xc68/0x10f8 [ 62.817137][ T4726] hci_le_conn_complete_evt+0x114/0x3d8 [ 62.817146][ T4726] hci_le_meta_evt+0x2b0/0x46c [ 62.817157][ T4726] hci_event_packet+0x4c0/0x9c8 [ 62.817167][ T4726] hci_rx_work+0x2f4/0xd78 [ 62.817179][ T4726] process_scheduled_works+0x788/0x10b8 [ 62.817190][ T4726] worker_thread+0x798/0xbd0 [ 62.817200][ T4726] kthread+0x304/0x3d4 [ 62.817208][ T4726] ret_from_fork+0x10/0x20 [ 62.817249][ T4726] kobject: kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 62.817272][ T4726] Bluetooth: hci1: failed to register connection device [ 63.049894][ T4726] Bluetooth: hci4: command tx timeout [ 63.049947][ T4726] Bluetooth: hci2: command tx timeout [ 63.104966][ T6642] syz.6.349 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 63.233674][ T6660] loop7: detected capacity change from 0 to 512 [ 63.280520][ T6665] ip_tables: iptables: counters copy to user failed while replacing table [ 63.390935][ T6681] loop7: detected capacity change from 0 to 512 [ 63.409970][ T6681] EXT4-fs error (device loop7): ext4_orphan_get:1425: comm syz.7.367: bad orphan inode 17 [ 63.410013][ T6681] loop7: lost filesystem error report for type 5 error -117 [ 63.410135][ T6681] ext4_test_bit(bit=16, block=4) = 1 [ 63.410150][ T6681] is_bad_inode(inode)=0 [ 63.410161][ T6681] NEXT_ORPHAN(inode)=0 [ 63.410172][ T6681] max_ino=32 [ 63.410182][ T6681] i_nlink=1 [ 63.457800][ T6677] loop9: detected capacity change from 0 to 1024 [ 63.461739][ T6677] EXT4-fs (loop9): ext4_check_descriptors: Checksum for group 0 failed (7780!=20869) [ 63.463836][ T6677] EXT4-fs (loop9): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 63.466505][ T6677] EXT4-fs (loop9): invalid journal inode [ 63.467868][ T6677] EXT4-fs (loop9): can't get journal size [ 63.474783][ T6677] EXT4-fs error (device loop9): ext4_map_blocks:791: inode #3: block 17104912: comm syz.9.366: lblock 2 mapped to illegal pblock 17104912 (length 1) [ 63.481126][ T6677] loop9: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 63.482292][ T6677] EXT4-fs (loop9): failed to initialize system zone (-117) [ 63.485968][ T6677] EXT4-fs (loop9): mount failed [ 63.490737][ C0] EXT4-fs (loop9): error count since last fsck: 1 [ 63.490771][ C0] EXT4-fs (loop9): initial error at time 64: ext4_map_blocks:791: inode 3: block 17104912 [ 63.490808][ C0] EXT4-fs (loop9): last error at time 64: ext4_map_blocks:791: inode 3: block 17104912 [ 63.687121][ T6705] loop5: detected capacity change from 0 to 512 [ 63.688298][ T6705] EXT4-fs: Ignoring removed bh option [ 63.701924][ T6705] EXT4-fs error (device loop5): ext4_iget_extra_inode:5180: inode #15: comm syz.5.376: corrupted in-inode xattr: e_value size too large [ 63.701964][ T6705] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 63.704906][ T6705] EXT4-fs error (device loop5): ext4_orphan_get:1404: comm syz.5.376: couldn't read orphan inode 15 (err -117) [ 63.704954][ T6705] loop5: lost filesystem error report for type 5 error -117 [ 63.709014][ C0] EXT4-fs (loop5): error count since last fsck: 2 [ 63.709027][ C0] EXT4-fs (loop5): initial error at time 64: ext4_iget_extra_inode:5180: inode 15 [ 63.709043][ C0] EXT4-fs (loop5): last error at time 64: ext4_orphan_get:1404 [ 63.730763][ T6705] EXT4-fs warning (device loop5): dx_probe:801: inode #2: comm syz.5.376: Unrecognised inode hash code 4 [ 63.733731][ T6705] EXT4-fs warning (device loop5): dx_probe:934: inode #2: comm syz.5.376: Corrupt directory, running e2fsck is recommended [ 63.736418][ T6705] EXT4-fs warning (device loop5): dx_probe:801: inode #2: comm syz.5.376: Unrecognised inode hash code 4 [ 63.740228][ T6705] EXT4-fs warning (device loop5): dx_probe:934: inode #2: comm syz.5.376: Corrupt directory, running e2fsck is recommended [ 63.793103][ T6716] loop5: detected capacity change from 0 to 256 [ 63.795552][ T6716] FAT-fs (loop5): data area starts beyond volume (32 > 0) [ 63.797463][ T6716] FAT-fs (loop5): Can't find a valid FAT filesystem [ 63.945448][ T6732] loop9: detected capacity change from 0 to 8 [ 63.948029][ T6732] Filesystem uses "lzo" compression. This is not supported [ 64.368249][ T6759] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 64.368506][ T6759] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 64.418720][ T50] Bluetooth: hci3: command tx timeout [ 64.492467][ T1594] ieee802154 phy0 wpan0: encryption failed: -22 [ 64.492528][ T1594] ieee802154 phy1 wpan1: encryption failed: -22 [ 64.757982][ T6782] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 64.758210][ T6782] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 64.781099][ T30] audit: type=1326 audit(65.754:365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6783 comm="syz.8.413" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa6579028 code=0x7ffc0000 [ 64.781219][ T30] audit: type=1326 audit(65.754:366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6783 comm="syz.8.413" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa6579028 code=0x7ffc0000 [ 64.782144][ T30] audit: type=1326 audit(65.754:367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6783 comm="syz.8.413" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa6579028 code=0x7ffc0000 [ 64.782222][ T30] audit: type=1326 audit(65.754:368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6783 comm="syz.8.413" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=107 compat=0 ip=0xffffa6579028 code=0x7ffc0000 [ 64.782307][ T30] audit: type=1326 audit(65.754:369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6783 comm="syz.8.413" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa6579028 code=0x7ffc0000 [ 64.782449][ T30] audit: type=1326 audit(65.754:370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6783 comm="syz.8.413" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa6579028 code=0x7ffc0000 [ 64.782524][ T30] audit: type=1326 audit(65.754:371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6783 comm="syz.8.413" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa6579028 code=0x7ffc0000 [ 64.810347][ T50] Bluetooth: hci0: command tx timeout [ 65.009341][ T50] Bluetooth: hci2: unexpected cc 0x2039 length: 9 > 1 [ 65.102514][ T6824] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 65.104885][ T6824] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 65.141561][ T6827] loop5: detected capacity change from 0 to 4096 [ 65.146549][ T50] Bluetooth: hci4: command tx timeout [ 65.193336][ T6827] EXT4-fs mount: 8 callbacks suppressed [ 65.193383][ T6827] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 65.206006][ T5801] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.545460][ T6845] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 65.545679][ T6845] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 65.606204][ T6848] loop5: detected capacity change from 0 to 4096 [ 65.607971][ T6848] EXT4-fs: Ignoring removed mblk_io_submit option [ 65.621498][ T6848] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 65.729753][ T5801] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.763979][ T6859] Bluetooth: MGMT ver 1.23 [ 65.765437][ T6860] loop5: detected capacity change from 0 to 128 [ 65.782343][ T6860] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 65.848475][ T5801] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 66.290920][ T6879] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 66.291136][ T6879] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 66.332856][ T6887] loop6: detected capacity change from 0 to 128 [ 66.475817][ T6906] bpf getsockopt: ignoring program buffer with optlen=1869768547 (max_optlen=4096) [ 66.641266][ T6925] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 66.641266][ T6925] The task syz.8.465 (6925) triggered the difference, watch for misbehavior. [ 66.714124][ T6927] tmpfs: Unknown parameter 'hu' [ 66.905992][ T6946] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 66.906198][ T6946] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 67.064236][ T6962] loop9: detected capacity change from 0 to 128 [ 67.071393][ T6962] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 67.148517][ T6202] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 67.205813][ T6967] loop9: detected capacity change from 0 to 512 [ 67.218736][ T50] Bluetooth: hci4: command tx timeout [ 67.237683][ T6967] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 67.251207][ T6971] loop6: detected capacity change from 0 to 512 [ 67.257535][ T6971] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 67.285765][ T6059] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.389621][ T6202] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.463560][ T6990] netlink: 8 bytes leftover after parsing attributes in process `syz.5.488'. [ 67.745876][ T7016] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 67.747806][ T7016] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 67.981444][ T7040] loop9: detected capacity change from 0 to 4096 [ 67.987197][ T7040] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 68.276236][ T7053] netlink: 240 bytes leftover after parsing attributes in process `syz.7.509'. [ 68.306299][ T7059] loop7: detected capacity change from 0 to 512 [ 68.306989][ T7059] EXT4-fs: Ignoring removed oldalloc option [ 68.308892][ T7059] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 68.322139][ T7059] EXT4-fs (loop7): 1 truncate cleaned up [ 68.322620][ T7059] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 68.371808][ T6154] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.416238][ T7065] loop7: detected capacity change from 0 to 2048 [ 68.437424][ T7065] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 68.452329][ T6154] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.512946][ T7071] dummy_hcd dummy_hcd.0: remove, state 1 [ 68.513698][ T7071] usb usb1: USB disconnect, device number 1 [ 68.513738][ T7071] usb 1-1: USB disconnect, device number 2 [ 68.516202][ T7071] cdc_eem 1-1:1.0 usb1: unregister 'cdc_eem' usb-dummy_hcd.0-1, CDC EEM Device [ 68.516614][ C0] dummy_hcd dummy_hcd.0: timer fired with no URBs pending? [ 68.622396][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 68.622431][ T30] audit: type=1326 audit(69.594:379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7085 comm="syz.8.517" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa6579028 code=0x7ffc0000 [ 68.622458][ T30] audit: type=1326 audit(69.594:380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7085 comm="syz.8.517" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa6579028 code=0x7ffc0000 [ 68.622478][ T30] audit: type=1326 audit(69.594:381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7085 comm="syz.8.517" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa6579028 code=0x7ffc0000 [ 68.622497][ T30] audit: type=1326 audit(69.594:382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7085 comm="syz.8.517" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa6579028 code=0x7ffc0000 [ 68.622776][ T30] audit: type=1326 audit(69.594:383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7085 comm="syz.8.517" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=172 compat=0 ip=0xffffa6579028 code=0x7ffc0000 [ 68.622800][ T30] audit: type=1326 audit(69.594:384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7085 comm="syz.8.517" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa6579028 code=0x7ffc0000 [ 68.622819][ T30] audit: type=1326 audit(69.594:385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7085 comm="syz.8.517" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa6579028 code=0x7ffc0000 [ 68.640892][ T30] audit: type=1326 audit(69.614:386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7085 comm="syz.8.517" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa6579028 code=0x7ffc0000 [ 68.640922][ T30] audit: type=1326 audit(69.614:387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7085 comm="syz.8.517" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa6579028 code=0x7ffc0000 [ 68.640938][ T30] audit: type=1326 audit(69.614:388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7085 comm="syz.8.517" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=434 compat=0 ip=0xffffa6579028 code=0x7ffc0000 [ 68.678796][ T6202] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.734279][ T7096] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 68.744900][ T7096] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 68.786188][ T7071] dummy_hcd dummy_hcd.0: stopped [ 68.786225][ T7071] dummy_hcd dummy_hcd.0: USB bus 1 deregistered [ 69.173354][ T7156] loop5: detected capacity change from 0 to 2048 [ 69.195967][ T7156] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 69.200286][ T7156] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 69.234339][ T5801] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.242129][ T7167] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 69.242337][ T7167] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 69.555556][ T7218] EXT4-fs (loop7): blocks per group (4096) and clusters per group (2304) inconsistent [ 69.558275][ T7218] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 69.558455][ T7218] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 69.826559][ T7247] binder: 7246:7247 tried to acquire reference to desc 0, got 1 instead [ 69.858098][ T7242] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 69.868142][ T7242] EXT4-fs (loop5): shut down requested (1) [ 69.904120][ T5801] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.072962][ T7281] sock: sock_timestamping_bind_phc: sock not bind to device [ 70.280999][ T7301] EXT4-fs (loop9): Test dummy encryption mode enabled [ 70.295574][ T7301] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 70.366681][ T6202] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.382241][ T7318] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 70.511616][ T7340] EXT4-fs (loop6): mounting ext2 file system using the ext4 subsystem [ 70.529239][ T7340] EXT4-fs (loop6): 1 truncate cleaned up [ 70.529934][ T7340] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 70.616082][ T6059] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.623997][ T7356] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 70.624201][ T7356] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 70.651739][ T7362] set_capacity_and_notify: 5 callbacks suppressed [ 70.653243][ T7362] loop5: detected capacity change from 0 to 1024 [ 70.667085][ T7364] loop6: detected capacity change from 0 to 2048 [ 70.667088][ T7362] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 70.673096][ T7362] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=8841e018, mo2=0000] [ 70.676570][ T7362] EXT4-fs error (device loop5): ext4_map_blocks:791: inode #3: block 2: comm syz.5.587: lblock 2 mapped to illegal pblock 2 (length 1) [ 70.676614][ T7362] loop5: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 70.677148][ T7362] EXT4-fs error (device loop5): ext4_map_blocks:791: inode #3: block 48: comm syz.5.587: lblock 0 mapped to illegal pblock 48 (length 1) [ 70.677169][ T7362] loop5: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 70.677242][ T7362] EXT4-fs error (device loop5): ext4_acquire_dquot:7041: comm syz.5.587: Failed to acquire dquot type 0 [ 70.677254][ T7362] loop5: lost filesystem error report for type 5 error -117 [ 70.677385][ T7362] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6435: Corrupt filesystem [ 70.677394][ T7362] loop5: lost filesystem error report for type 5 error -117 [ 70.677473][ T7362] EXT4-fs error (device loop5): ext4_evict_inode:267: inode #11: comm syz.5.587: mark_inode_dirty error [ 70.677484][ T7362] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 70.677555][ T7362] EXT4-fs warning (device loop5): ext4_evict_inode:270: couldn't mark inode dirty (err -117) [ 70.677596][ T7362] EXT4-fs (loop5): 1 orphan inode deleted [ 70.678058][ T7362] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 70.692696][ T40] EXT4-fs error (device loop5): ext4_map_blocks:791: inode #3: block 1: comm kworker/u8:3: lblock 1 mapped to illegal pblock 1 (length 1) [ 70.697174][ T40] EXT4-fs error (device loop5): ext4_release_dquot:7077: comm kworker/u8:3: Failed to release dquot type 0 [ 70.735985][ T7364] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 70.746994][ T7361] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 70.750763][ T7361] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 70.753885][ T7361] EXT4-fs (loop6): This should not happen!! Data will be lost [ 70.753885][ T7361] [ 70.755772][ T7361] EXT4-fs (loop6): Total free blocks count 0 [ 70.756871][ T7361] EXT4-fs (loop6): Free/Dirty block details [ 70.758120][ T7361] EXT4-fs (loop6): free_blocks=4096 [ 70.759202][ T7361] EXT4-fs (loop6): dirty_blocks=16 [ 70.760132][ T7361] EXT4-fs (loop6): Block reservation details [ 70.761185][ T7361] EXT4-fs (loop6): i_reserved_data_blocks=1 [ 70.766569][ T7364] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 6 with error 28 [ 70.780118][ T7374] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000. [ 70.812894][ T5801] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.817651][ T5801] EXT4-fs error (device loop5): __ext4_get_inode_loc:4886: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 70.817696][ T5801] loop5: lost filesystem error report for type 5 error -117 [ 70.823701][ T5801] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6435: Corrupt filesystem [ 70.823747][ T5801] loop5: lost filesystem error report for type 5 error -117 [ 70.823888][ T5801] EXT4-fs error (device loop5): ext4_quota_off:7325: inode #3: comm syz-executor: mark_inode_dirty error [ 70.823901][ T5801] loop5: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 70.844350][ T6059] EXT4-fs warning (device loop6): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 70.917132][ T7393] netlink: 'syz.8.594': attribute type 32 has an invalid length. [ 70.917166][ T7393] netlink: 28 bytes leftover after parsing attributes in process `syz.8.594'. [ 70.923135][ T6154] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.985675][ T7402] loop7: detected capacity change from 0 to 1024 [ 70.987219][ T7402] EXT4-fs: inline encryption not supported [ 70.991345][ T7402] EXT4-fs (loop7): can't mount with both data=journal and delalloc [ 71.013471][ T7405] loop6: detected capacity change from 0 to 128 [ 71.027882][ T7405] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 71.112996][ T6059] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 71.144705][ T7428] loop6: detected capacity change from 0 to 512 [ 71.146549][ T7428] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 71.204791][ T7433] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 71.207131][ T7433] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 71.219643][ T7435] loop7: detected capacity change from 0 to 1024 [ 71.256258][ T7435] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 71.297997][ T7448] loop6: detected capacity change from 0 to 512 [ 71.303001][ T6154] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.321241][ T7448] EXT4-fs (loop6): 1 truncate cleaned up [ 71.321709][ T7448] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 71.340980][ T6059] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.381252][ T7455] loop7: detected capacity change from 0 to 512 [ 71.387474][ T7455] EXT4-fs (loop7): feature flags set on rev 0 fs, running e2fsck is recommended [ 71.387510][ T7455] EXT4-fs (loop7): blocks per group (64) and clusters per group (32768) inconsistent [ 71.434488][ T7466] Cannot find add_set index 3 as target [ 71.511267][ T7478] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 71.511472][ T7478] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 71.540418][ T7482] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 71.542844][ T7482] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 71.572568][ T5360] Unable to handle kernel paging request at virtual address dfff80000000000c [ 71.572604][ T5360] KASAN: null-ptr-deref in range [0x0000000000000060-0x0000000000000067] [ 71.572621][ T5360] Mem abort info: [ 71.572630][ T5360] ESR = 0x0000000096000005 [ 71.572640][ T5360] EC = 0x25: DABT (current EL), IL = 32 bits [ 71.572650][ T5360] SET = 0, FnV = 0 [ 71.572657][ T5360] EA = 0, S1PTW = 0 [ 71.572665][ T5360] FSC = 0x05: level 1 translation fault [ 71.572673][ T5360] Data abort info: [ 71.572679][ T5360] ISV = 0, ISS = 0x00000005, ISS2 = 0x00000000 [ 71.572687][ T5360] CM = 0, WnR = 0, TnD = 0, TagAccess = 0 [ 71.572695][ T5360] GCS = 0, Overlay = 0, DirtyBit = 0 [ 71.572704][ T5360] [dfff80000000000c] address between user and kernel address ranges [ 71.572825][ T5360] Internal error: Oops: 0000000096000005 [#1] SMP [ 71.584277][ C1] Unknown status report in ack skb [ 71.587601][ T5360] Modules linked in: [ 71.588256][ T5360] CPU: 0 UID: 100 PID: 5360 Comm: dhcpcd Tainted: G L syzkaller #0 PREEMPT [ 71.589823][ T5360] Tainted: [L]=SOFTLOCKUP [ 71.590533][ T5360] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 71.592159][ T5360] pstate: 83400005 (Nzcv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 71.593468][ T5360] pc : dummy_queue+0x16c/0x6e4 [ 71.594221][ T5360] lr : dummy_queue+0x138/0x6e4 [ 71.595046][ T5360] sp : ffff800094176ed0 [ 71.595772][ T5360] x29: ffff800094176f00 x28: 1fffe00018ee701b x27: ffff0000c7738c00 [ 71.597057][ T5360] x26: ffff0000f3346800 x25: dfff800000000000 x24: ffff0000c77380d8 [ 71.598427][ T5360] x23: dfff800000000000 x22: 1fffe0001e668d00 x21: 0000000000000060 [ 71.599794][ T5360] x20: ffff0000c77380e0 x19: ffff0000f3346810 x18: 0000000000000000 [ 71.601384][ T5360] x17: 0000000000020010 x16: 0024000800000000 x15: 0000000000000000 [ 71.602832][ T5360] x14: 00000000868e0060 x13: 0000000000000001 x12: 0000000000000000 [ 71.604244][ T5360] x11: ffff80008a590e28 x10: 0000000000000203 x9 : 00000000000006a8 [ 71.605654][ T5360] x8 : 000000000000000c x7 : 0000000000000000 x6 : 0000000000000000 [ 71.607050][ T5360] x5 : 0000000000000001 x4 : 0000000000000008 x3 : ffff8000835b74fc [ 71.608469][ T5360] x2 : 0000000000000003 x1 : ffff0000cd700000 x0 : 0000000000000000 [ 71.609847][ T5360] Call trace: [ 71.610404][ T5360] dummy_queue+0x16c/0x6e4 (P) [ 71.611213][ T5360] usb_ep_queue+0xe4/0x578 [ 71.611966][ T5360] eth_start_xmit+0x78c/0xe14 [ 71.612733][ T5360] dev_hard_start_xmit+0x1dc/0x9d4 [ 71.613600][ T5360] sch_direct_xmit+0x1ac/0x3b0 [ 71.614387][ T5360] __dev_queue_xmit+0x1130/0x2bc0 [ 71.615273][ T5360] packet_xmit+0x6c/0x314 [ 71.616022][ T5360] packet_sendmsg+0x319c/0x4110 [ 71.616874][ T5360] __sock_sendmsg+0xc8/0x17c [ 71.617655][ T5360] sock_write_iter+0x220/0x310 [ 71.618485][ T5360] do_iter_readv_writev+0x48c/0x6f8 [ 71.619361][ T5360] vfs_writev+0x2a8/0x630 [ 71.620129][ T5360] do_writev+0x134/0x2a8 [ 71.620832][ T5360] __arm64_sys_writev+0x80/0x94 [ 71.621640][ T5360] invoke_syscall+0x98/0x244 [ 71.622577][ T5360] el0_svc_common+0x19c/0x23c [ 71.623412][ T5360] do_el0_svc+0x4c/0x5c [ 71.624107][ T5360] el0_svc+0x64/0x260 [ 71.624785][ T5360] el0t_64_sync_handler+0x48/0x148 [ 71.625658][ T5360] el0t_64_sync+0x198/0x19c [ 71.626454][ T5360] Code: 97579421 f94002a8 91018115 d343fea8 (38f96908) [ 71.627748][ T5360] ---[ end trace 0000000000000000 ]--- [ 72.020044][ T5360] Kernel panic - not syncing: Oops: Fatal exception in interrupt [ 72.021430][ T5360] SMP: stopping secondary CPUs [ 72.022269][ T5360] Kernel Offset: disabled [ 72.023023][ T5360] CPU features: 0x14000000,003c0008,27020501,5427fea7 [ 72.024155][ T5360] Memory Limit: none [ 72.402738][ T5360] Rebooting in 86400 seconds..