last executing test programs: 4.192120856s ago: executing program 4 (id=425): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000001c0)='syz_tun\x00', 0xff7b) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x9, @local}, 0x1c) syz_emit_ethernet(0x6e, &(0x7f0000000a40)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaaaa86dd6000000000033afffe880000000000000000000000000001ff020000000000000000000b00000001"], 0x0) 3.877734842s ago: executing program 4 (id=427): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x7a52, @local, 0x4}, 0x1c) syz_mount_image$ext4(&(0x7f0000000600)='ext4\x00', &(0x7f0000000640)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f00000006c0)={[{@dax_always}, {@dax}, {@nodioread_nolock}, {@test_dummy_encryption}, {@init_itable_val={'init_itable', 0x3d, 0x1}}, {@nodelalloc}, {@minixdf}, {@nolazytime}]}, 0x1, 0xbaf, &(0x7f0000000c00)="$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") r1 = syz_open_dev$loop(&(0x7f00000017c0), 0x7, 0x103482) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001800)='freezer.state\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000001840)={r2, 0x0, {0x2a00, 0x80010000, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0xd, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea89de2b7fb0a0100000000000000000300", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00000014000800000000000000007f"}}) ioctl$LOOP_SET_DIRECT_IO(r1, 0x4c08, 0x591) sendmmsg$inet6(r0, &(0x7f0000000bc0)=[{{&(0x7f0000000180)={0xa, 0x4e22, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c, &(0x7f00000001c0)=[{&(0x7f00000000c0)='x', 0x1}], 0x1}}], 0x1, 0x40c40c0) sendmsg$SOCK_DIAG_BY_FAMILY(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000001400050124bd70007bdbdf250a84312a0900000000004e22"], 0x48}, 0x1, 0x0, 0x0, 0x4004081}, 0x0) r3 = socket$inet(0xa, 0x801, 0x84) connect$inet(r3, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) r4 = socket$inet(0x2, 0x801, 0x0) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000000080)={0x2, 0x4e23, @empty}, 0x10) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000280)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000300)={r5, r5}, 0x4) ioctl$sock_inet_SIOCSIFNETMASK(r2, 0x891c, &(0x7f0000000740)={'pimreg0\x00', {0x2, 0x4e22, @empty}}) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xa, 0x1d, &(0x7f0000000400)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80000000}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r6}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r5}}]}, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r7, 0x0, 0xcc0, 0x0, &(0x7f00000005c0)="f4b84de4115d64244a0e839e86dd", 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendto$inet(r4, &(0x7f0000000140)="ee", 0x1, 0x2604c011, 0x0, 0x0) pipe2(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(r4, 0x0, r8, 0x0, 0x4, 0x9) recvmmsg(0xffffffffffffffff, &(0x7f00000081c0)=[{{0x0, 0x0, 0x0}, 0x2}], 0x1, 0x0, 0x0) 3.559221709s ago: executing program 1 (id=437): write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3) prlimit64(0x0, 0xe, &(0x7f0000000f40)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000f80)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000fc0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000001040)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000010c0), 0x651, 0x0) recvmmsg(r1, &(0x7f0000001100), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000001140)=0x6) socket(0x10, 0x803, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000000000020000000000000000850000001700000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x1f}, 0x94) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8801}, 0x8000) 1.796324798s ago: executing program 1 (id=446): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@delchain={0x64c, 0x65, 0x400, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x1, 0x2}, {0x0, 0x1}, {0x5}}, [@filter_kind_options=@f_bpf={{0x8}, {0x620, 0x2, [@TCA_BPF_ACT={0x61c, 0x1, [@m_bpf={0x130, 0x11, 0x0, 0x0, {{0x8}, {0x38, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_FD={0x8}, @TCA_ACT_BPF_NAME={0x5, 0x6, '\x00'}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0xffffffff, 0x3, 0xffffffffffffffff, 0x10001, 0x6}}]}, {0xd1, 0x6, "a41f25d22b1bae1b6bfb4a42ad5ba9db462fca41280c331f630e2c9f0be1093117392575082305ebc27660464ef802792ce06133244235023f0f4882fc0a47f4d5e499a8857cd81b0e6fda422cbc53ad098872214190756df6bbd0e760248aa97e200702fd569bd27d4a70df1d4a123ffc42d2592c81751e15e260622f14aeaaca5dc8acab93651fdd1d5614d98f28fc76d402e1028d91028270a2722b141a9140c47e37d068e7193d463a6444e424bc792ab1295f79842a501700a5cc2f71eefaf131a98821e712b03d552c87"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_xt={0x144, 0x5, 0x0, 0x0, {{0x7}, {0x30, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0x2a, 0x6, {0x7, 'raw\x00', 0x7, 0x100}}]}, {0xed, 0x6, "a5fd64840366fd7ad44f3f053221ded9ced495590e2bc8690a2765e56ded8425cb3eb0e04bbcfec50e639bf373167e617b24eccd260f28bb850873b1e2154b158987d6e585e10ffeaba32641bae47de041e1169d8e4a65b8ce3633a4469c93c5228320c572237d92a9ae6bbc2d2bd3a2d1e27de283017ecf9fca6b2cd8a119dee59702830717b694625f60f5c81f688775c5e292f76a0ffa39e1d2cabd639d1c111c01e0d2f9faa220154db33399242bca9f4fac65c74cb6264c28ac7a50037564c7b417fb61d617d212ab3243c30e0e82d9a12651b74553d539b991a302489af94626e5aac41c53b2"}, {0xc, 0x7, {0x1, 0xeb0757422c733451}}, {0xc, 0x8, {0x3, 0x3}}}}, @m_bpf={0xfc, 0x8, 0x0, 0x0, {{0x8}, {0x54, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x3}, @TCA_ACT_BPF_OPS={0x14, 0x4, [{0xa3b7, 0x9, 0xb, 0x7}, {0x28a3, 0x4, 0x4, 0xfffffffa}]}, @TCA_ACT_BPF_OPS={0x2c, 0x4, [{0x0, 0x0, 0x9, 0xffff0000}, {0xb, 0xf6, 0x5, 0xfffffffc}, {0x401, 0xb0, 0x32}, {0x6092, 0x70, 0x6, 0x1ff}, {0xfff9, 0x2, 0xf7}]}]}, {0x81, 0x6, "5d3aee85a6264cff4a2163adaec321e008985cfa435b8922eeb16f1932265618158a3fe72c442a68b182e8f673f9251a03dc831c5947be17ca906c3dcb99adb55bc5f0ad8886f235f45d7e29bb727715f2e7a3200ac63eb79f7a023835874514b60b0177c40370157c0c21b37875e7e4a2e75b3cc54be7d719fa695469"}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_tunnel_key={0xb8, 0x18, 0x0, 0x0, {{0xf}, {0x4}, {0x85, 0x6, "51719d53a2b05eda58a80a40d29b01394b8749d7d9ef9f47cce75187b6f333f4bfe797fa4227bf38cf0b71e1b4888d8d1ed410a788c182ba498076ca9ab3d63a8f29175d44a2e8364296c34ac0cdb8972288ecf6515bec4861a53e1e18e54679f5666b0536d0a008aa9b3be1f5e00c4c72460249c372de16eb2cfc15714543d6f3"}, {0xc}, {0xc, 0x8, {0x3, 0xddc47d017e85c037}}}}, @m_xt={0x1f0, 0x13, 0x0, 0x0, {{0x7}, {0x1c8, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0xc9, 0x6, {0x9, 'nat\x00', 0xef, 0x7, "859b467c76be5255b2d4f6101cf6d6cb72c6b46512ecba82df24523b07075e859fd68154d7171a2ca3415ec79cc8ff85b058dae9f1d49e867787957d80637320c0378f6dd94a52c2fc850929bb787aaf6e604a1f57d44fa7775cf7a4a456f808f135c349fb4aefe7e2bc180a4665f5c90321659b9d7722c18c63d8c5ac244a1245b6673adcb794eced4f5288970c153c5b1cd1be29cd924c9446734f9e4568"}}, @TCA_IPT_TABLE={0x24, 0x1, 'security\x00'}, @TCA_IPT_TARG={0xc9, 0x6, {0x8, 'filter\x00', 0xd, 0x6ccd, "51100666dd78f1337c421065ba00caa97aaa8e1aa207a78c6d7e2a3e620334de1a64a8d40af7536c5a07a1997c6fd28e7ed1f866f9454e1014a5129fbeaf1a76cb7b54d80907f7d86c39ff782b12b0422666997d539a25e55b0591b44929ef0dcea5434727f1d8aa8d1ec3a7d56965dae69f90f152f907a0ab28fc8d30bcdb763cd5f45e6a19be6dae4c5659ea76f0641d19c50157b11a5d9f8f9f5d0efd5d"}}, @TCA_IPT_INDEX={0x8, 0x3, 0x2}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3}}}}]}]}}]}, 0x64c}, 0x1, 0x0, 0x0, 0x2404c080}, 0x20000080) r0 = socket(0x10, 0x803, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000005c0)='./file0\x00', 0x1a2) mkdirat(0xffffffffffffff9c, &(0x7f00000006c0)='./file2\x00', 0x107) mount$overlay(0x0, &(0x7f0000000700)='./file0\x00', &(0x7f0000000780), 0x401, &(0x7f0000000880)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}, {@userxattr}], [], 0x2c}) r1 = syz_open_procfs(0x0, &(0x7f00000008c0)='mounts\x00') read$FUSE(r1, &(0x7f0000003800)={0x2020}, 0x2020) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="242735aa3151777a6e93883036f3896d779723dee5cdbef78f6f7067c3ce7fc34469ef5ab262beb8f4fd2adfeba25cbb4e3b", 0x32}], 0x1}, 0x8810) mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000300)='devtmpfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./dev/mapper/control\x00', 0x2, 0x0) ioctl(r2, 0xc138fd09, &(0x7f0000000540)="0400000000000000000000007801000038010000013200000000000000000000000000000000000000000000000000006d70") sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) ioctl$COMEDI_BUFCONFIG(r2, 0x8020640d, &(0x7f0000000580)={0x3, 0x38, 0x56, 0x9}) 1.794083636s ago: executing program 4 (id=448): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)=ANY=[@ANYBLOB="4400000010003b1500"/20, @ANYRES32=0x0, @ANYBLOB="6627c3000000000024001280090001007866726d0000000014000280040003"], 0x44}}, 0x0) 1.670331175s ago: executing program 3 (id=449): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0xc201}) r1 = socket$inet6(0xa, 0x3, 0xff) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000004c0)=@filter={'filter\x00', 0xe, 0x4, 0x340, 0xffffffff, 0x0, 0x1a0, 0x270, 0xffffffff, 0xffffffff, 0xd0, 0x1a0, 0x270, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@empty, @empty, [], [], '\x00', '\x00', {}, {}, 0x6, 0x0, 0x1}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x1, 0x7, 0x5a0}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000880)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000900)=ANY=[@ANYBLOB="001c86dd0700100000004000000060ec97000fc83c00fe8000000000000000000000000000aaff020000000000000000000000004001"], 0xffe) 1.617258286s ago: executing program 0 (id=450): bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001780)={{0x1, 0xffffffffffffffff}, &(0x7f0000001700), &(0x7f0000001740)='%pS \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x13, 0x6, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x80}, [@map_fd={0x18, 0x6, 0x1, 0x0, r0}, @jmp={0x5, 0x0, 0x7, 0xb, 0x8, 0xfffffffffffffffc, 0xfffffffffffffff0}]}, &(0x7f0000001840)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet_tcp(0x2, 0x1, 0x0) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) r2 = fsopen(&(0x7f0000002900)='devpts\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) syz_extract_tcp_res(&(0x7f0000001800)={0x41424344}, 0xe09b, 0xe) r4 = fsopen(&(0x7f00000017c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) (async) r5 = fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000001880)={@fallback=r5, 0xa, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x3f) (async) ioctl$UI_SET_MSCBIT(r5, 0x40045568, 0x6) syz_emit_ethernet(0x66, &(0x7f00000005c0)=ANY=[@ANYBLOB="0180c2000001ffffffffffff88008100232008004540005000000000c0069078ac1e0101ac1414aa0ffd2000", @ANYRES32=0x1, @ANYRES32=r3, @ANYBLOB="f010004090780000fe06e2d4c3d9080a000000020000e7b0131248be668c87c7e265e3d9eea698e372bd040202020000"], 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10) (async, rerun: 32) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='tracefs\x00', 0x1214040, 0x0) (rerun: 32) r6 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r6, &(0x7f00000018c0)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r6, &(0x7f0000001900)={0x2, 0x4e20, @local}, 0x10) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000001940)={0x1b, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], &(0x7f00000027c0)='GPL\x00', 0x4, 0xc4, &(0x7f0000000700)=""/196, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x8, &(0x7f00000028c0)={0x0, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x2000}, 0x94) r8 = socket$kcm(0x29, 0x2, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002a00)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000002a80)="ee2ab8", 0x3}], 0x1}}], 0x1, 0x1) (async) ioctl$sock_kcm_SIOCKCMATTACH(r8, 0x89e0, &(0x7f0000002ac0)={r6, r7}) (async) setfsuid(0xee00) setresuid(0xffffffffffffffff, 0x0, 0x0) (async) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@userxattr}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) (async) mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000640), 0x0, &(0x7f0000000680)={[{@xino_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) (async) recvfrom$unix(r5, &(0x7f0000002b00)=""/239, 0xef, 0x100, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000006c0)='./file0\x00', 0x4, 0x80) 1.560094397s ago: executing program 1 (id=452): socket$inet6_tcp(0xa, 0x1, 0x0) (async, rerun: 32) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000000), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="84010000", @ANYRES16=r1, @ANYBLOB="010000000000ffdbdf250100000004000480080002000100000008000100000000000400088058010c8054000b8008000a008fee0000080009000000000008000a00afc3000008000a000000000008000a0000000000080009003b3ef5120800090090e5262608000a000000000008000a000000000008000a000000000004000b801c000b80080009"], 0x184}, 0x1, 0x0, 0x0, 0x20000010}, 0x0) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) (async) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) (async) bpf$MAP_CREATE(0x1900000000000000, 0x0, 0x48) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async, rerun: 64) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) (async, rerun: 64) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$pppoe(0x18, 0x1, 0x0) ioctl$PPPOEIOCSFWD(r2, 0x80047453, 0xfffffffffffffffe) setns(0xc9, 0x2000000) ioctl$FS_IOC_GETFSLABEL(0xffffffffffffffff, 0x81009431, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x4e0, 0x320, 0x18c, 0x203, 0x0, 0x19030000, 0x410, 0x2e0, 0x2e0, 0x410, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x2d8, 0x320, 0x7000000, {0xf0ffff}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0xb1, 0x0, 0x8, 0x20}, {}, {}, {}, {0x0, 0xfe, 0x0, 0x100}, {0x0, 0x0, 0x4}, {0x0, 0x0, 0x0, 0x5973599c}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x20, 0xcd, 0xe}, {0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x3, 0x3}, {0x2, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x8}, {}, {0x16}, {0x0, 0xff}, {}, {0x7}, {0x0, 0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0x101}, {}, {0x0, 0x0, 0x5, 0x1}, {}, {0x0, 0x0, 0xfd, 0x9}, {0xfffc, 0x0, 0x0, 0x6}, {0x4, 0x0, 0x0, 0x2}, {0xfffe}, {}, {}, {}, {0xfffe, 0xfb}, {}, {0x7a04}, {0x800}, {}, {0x20, 0x6}, {}, {}, {0x0, 0x1}, {0x0, 0x0, 0x0, 0x800}, {}, {0xb8c, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {0x3}, {0x0, 0x4b}, {}, {}, {0x0, 0x0, 0xe2}, {0x4}, {0x0, 0x0, 0x0, 0x1}, {}, {}, {0xfc}, {0x0, 0xfd}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffd}, {0x2}, {0x0, 0xb}, {0x4}]}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x100002, 'syz0\x00', {0x8001}}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x1000b, 'syz0\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x540) (async) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$EBT_SO_SET_ENTRIES(r4, 0x0, 0x80, &(0x7f00000004c0)=@nat={'nat\x00', 0x19, 0x0, 0xc0, [0x20000400, 0x0, 0x0, 0x20000430, 0x20000460], 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff00000000"]}, 0x12a) ioctl$LOOP_GET_STATUS(0xffffffffffffffff, 0x4c03, 0x0) 1.559950396s ago: executing program 4 (id=453): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0xc201}) r1 = socket$inet6(0xa, 0x3, 0xff) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000004c0)=@filter={'filter\x00', 0xe, 0x4, 0x340, 0xffffffff, 0x0, 0x1a0, 0x270, 0xffffffff, 0xffffffff, 0xd0, 0x1a0, 0x270, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@empty, @empty, [], [], '\x00', '\x00', {}, {}, 0x6, 0x0, 0x1}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x1, 0x7, 0x5a0}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000880)={'syzkaller1\x00', @link_local}) sendmsg$kcm(r2, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000cc0)=[{&(0x7f0000000940)="d6474821af3cee364788c0714ab1a7d92f8307", 0x13}], 0x1}, 0x40000) write$tun(r0, &(0x7f0000000900)=ANY=[@ANYBLOB="001c86dd0700100000004000000060ec97000fc83c00fe8000000000000000000000000000aaff02000000008dffffff00000000000106"], 0xffe) 1.501686225s ago: executing program 0 (id=455): setns(0xc9, 0x0) r0 = socket$nl_audit(0x10, 0x3, 0x9) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f00000012c0)=0x8, 0x4) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000001300)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x28040041, &(0x7f0000001340)={0x2, 0x24e23, @loopback}, 0x10) sendmsg$inet(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f0000001400)="17", 0x1}], 0x1}, 0x48c0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000001440)=0x193a, 0x4) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000001480)={&(0x7f00000eb000/0x14000)=nil, 0x14000, 0x0, 0x0, 0x0, &(0x7f00000014c0)=""/84, 0x54, 0x0, 0x0}, &(0x7f0000001540)=0x40) r2 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) ioctl$TCSETS(r3, 0x5402, 0x0) ioctl$TIOCSTI(r3, 0x5412, 0x0) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000001080)={'vcan0\x00', 0x0}) bind$can_j1939(r4, &(0x7f00000010c0)={0x1d, r5, 0x2, {0x2, 0x0, 0x4}, 0xfd}, 0x18) bind$can_j1939(r4, &(0x7f0000001100)={0x1d, r5, 0x0, {0x2, 0xff, 0x6}, 0xfe}, 0x18) r6 = socket(0x10, 0x803, 0x0) r7 = syz_mount_image$fuse(&(0x7f0000001580), &(0x7f00000015c0)='./file0\x00', 0x2004, &(0x7f0000001600)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x1000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@allow_other}, {@max_read={'max_read', 0x3d, 0x1183}}, {@max_read={'max_read', 0x3d, 0x26}}, {@blksize={'blksize', 0x3d, 0x400}}, {@allow_other}, {@blksize={'blksize', 0x3d, 0x400}}, {@allow_other}, {@default_permissions}, {@max_read={'max_read', 0x3d, 0x4}}], [{@dont_measure}, {@fsmagic={'fsmagic', 0x3d, 0x63b4}}]}}, 0x1, 0x0, &(0x7f0000001780)="827cb572c28bbea406fda2e91e6c937d817b525273224055555c4afd666995fa39235fc54c1b3c055b2a04ea1dee24024d676a187739af51e8adbb7448f7812986c698c5983bf78419f8e7aa7833d22ecddaafe9165d1ac268e844f0186bb297371487996b47b6c69f9783497d66877de59c6dacab91a2b0476f78b13868ea5392a7ba8afd727aeb508edad3624ec54ac46f11877f057f1e29837f92d9a795426494b5bea7") fsetxattr(r7, &(0x7f0000002500)=ANY=[@ANYBLOB="7379db139e600830a103a3896f5fb99db3aa7374656d2e24c7f971a59e7779bbe576fc68067cef3f239ee4d9fbc818f922166b1c0bcf8f52910eee4c30d26d0cecb20de9108e86a84e9b87f150fbbc3120336a2f952392e9326b05453e7ca4ea56097374d5e20b846289bf13b81e314d9ef1b96e8beda7d7f55bf1aa9719dd8ce082f5a96d57ccbd9e099b2a08a79509e46ea3da411aec4810038bfc1e510754c2cc7b94fde6a0074fafd838279f299c711b00"/199], &(0x7f0000001880)='vcan0\x00', 0x6, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000001200)={'veth0_to_team\x00', &(0x7f0000001240)=@ethtool_cmd={0x51, 0x6, 0x40004, 0x0, 0x0, 0x3, 0x0, 0x0, 0x2, 0x0, 0x5, 0x0, 0x6, 0xfc, 0x8}}) sendmsg$nl_route_sched(r3, &(0x7f00000011c0)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)=@deltfilter={0x3c, 0x2d, 0x200, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xfff2, 0xfff2}, {0xe, 0xa}, {0x8, 0xf}}, [@TCA_RATE={0x6, 0x5, {0x98, 0x1}}, @TCA_CHAIN={0x8, 0xb, 0xb77}, @TCA_RATE={0x6, 0x5, {0xc0, 0xb}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x11}, 0x40000) recvfrom$llc(r2, &(0x7f0000000000)=""/4096, 0x1000, 0x40000000, &(0x7f0000001000)={0x1a, 0x1b, 0xc, 0x2e, 0x6, 0x6}, 0x10) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_RX_RING(r6, 0x10e, 0x6, &(0x7f0000001280)={0x8001, 0x6, 0x3, 0x9}, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001940), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000001980)={0x0, 0x0, &(0x7f00000019c0)={&(0x7f0000001a00)={0x24, r9, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_4ADDR={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000001a40)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r6, &(0x7f00000024c0)={&(0x7f00000018c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000002480)={&(0x7f0000001a80)={0x9d4, r9, 0x300, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_TX_RATES={0x2b0, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x1c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x17, 0x2, [{0x1, 0xa}, {0x0, 0x7}, {0x5, 0x8}, {0x5, 0x8}, {0x0, 0x2}, {0x2, 0x1}, {0x4, 0x9}, {0x2, 0x7}, {0x4, 0x4}, {0x3, 0xa}, {0x7, 0x7}, {0x4, 0x5}, {0x7, 0x5}, {0x6, 0x1}, {0x2, 0x5}, {0x7, 0x2}, {0x0, 0x8}, {0x0, 0x3}, {0x2, 0x5}]}]}, @NL80211_BAND_5GHZ={0x98, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x21, 0x1, [0xb, 0xc, 0x6c, 0x60, 0x2, 0xb, 0x1b, 0x30, 0x24, 0x6c, 0x36, 0x3, 0x36, 0x4, 0xb, 0x30, 0x2, 0x5, 0x1b, 0x12, 0xc, 0x6, 0x92, 0x48, 0x66, 0x3, 0x5, 0x60, 0x48]}, @NL80211_TXRATE_HT={0x27, 0x2, [{0x6, 0xa}, {0x4, 0x1}, {0x6, 0x9}, {0x2, 0x4}, {0x6, 0x5}, {0x4, 0xa}, {0x4, 0xa}, {0x1, 0x7}, {0x4, 0x5}, {0x4}, {0x3, 0x6}, {0x5, 0x2}, {0x7, 0x8}, {0x1, 0x8}, {0x1, 0x7}, {0x0, 0x2}, {0x4, 0xa}, {0x2, 0x8}, {0x0, 0x7}, {0x3, 0x5}, {0x6, 0x5}, {0x0, 0x6}, {0x7, 0x8}, {0x0, 0x2}, {0x7, 0x9}, {0x7}, {0x7, 0x9}, {0x2, 0xa}, {0x1, 0x5}, {0x4, 0x2}, {0x6, 0x5}, {0x1, 0x8}, {0x1, 0x3}, {0x0, 0x9}, {0x6, 0x5}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x9, 0x9, 0xfff, 0xfff3, 0x38, 0x2, 0x7]}}, @NL80211_TXRATE_HT={0x1a, 0x2, [{0x1, 0x7}, {0x6, 0x8}, {0x5, 0x8}, {0x0, 0x7}, {0x7, 0x1}, {0x4, 0x9}, {0x2, 0x3}, {0x3, 0x2}, {0x0, 0x9}, {0x2, 0x2}, {0x7, 0x7}, {0x3, 0xa}, {0x2, 0x5}, {0x1, 0xa}, {0x1, 0x4}, {0x6, 0x4}, {0x4, 0x2}, {0x7}, {0x3, 0x2}, {0x4}, {0x1, 0xa}, {0x0, 0x6}]}, @NL80211_TXRATE_LEGACY={0x7, 0x1, [0x1b, 0x16, 0x1b]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_2GHZ={0x10, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x9, 0x2, [{0x0, 0x8}, {0x2, 0x6}, {0x1, 0x1}, {0x0, 0xa}, {0x1, 0x9}]}]}, @NL80211_BAND_6GHZ={0x60, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HT={0x4c, 0x2, [{0x2, 0x6}, {0x6, 0x5}, {0x5, 0x4}, {0x6, 0x2}, {0x5, 0x1}, {0x1, 0xa}, {0x7, 0x1}, {0x1, 0x6}, {0x1, 0x7}, {0x5, 0x6}, {0x7, 0x3}, {0x3, 0x4}, {0x4, 0x2}, {0x3, 0x8}, {0x3, 0x3}, {0x2, 0x2}, {0x7, 0x6}, {0x7, 0x9}, {0x6, 0x2}, {0x6, 0x7}, {0x6, 0x1}, {0x5, 0x5}, {0x1, 0xa}, {0x3, 0x8}, {0x3, 0x7}, {0x7, 0x7}, {0x2, 0x3}, {0x6, 0x8}, {0x2, 0x3}, {0x6, 0x4}, {}, {0x2, 0x6}, {0x7, 0x4}, {0x1}, {0x0, 0xa}, {0x0, 0x9}, {0x5, 0x8}, {0x4, 0x8}, {0x6, 0x5}, {0x1, 0x8}, {0x4, 0x2}, {0x7, 0x2}, {0x0, 0x7}, {0x4}, {0x1, 0xa}, {0x4, 0x2}, {0x3, 0x3}, {0x5, 0x9}, {0x4, 0x7}, {0x3, 0x3}, {0x2, 0x5}, {0x2, 0x3}, {0x0, 0x6}, {0x3, 0x2}, {0x5, 0x9}, {0x2, 0x7}, {0x5, 0x9}, {0x5}, {}, {0x0, 0x4}, {0x4, 0x9}, {0x6, 0x7}, {0x3}, {0x1, 0x7}, {0x7, 0x2}, {0x2, 0x5}, {0x5, 0x2}, {0x0, 0x2}, {0x1, 0x6}, {0x6, 0x9}, {0x0, 0x2}, {0x6, 0x4}]}]}, @NL80211_BAND_60GHZ={0x18, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xffff, 0x0, 0x1, 0x7, 0x54, 0x5, 0x0, 0x2]}}]}, @NL80211_BAND_5GHZ={0xa8, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x3c, 0x2, [{0x1}, {0x7, 0x1}, {0x1, 0x2}, {0x2, 0x8}, {0x4, 0x7}, {0x7, 0x7}, {0x5, 0x8}, {0x0, 0xa}, {0x5, 0x1}, {0x6, 0x1}, {0x3, 0x3}, {0x0, 0x4}, {0x4, 0x4}, {0x0, 0x7}, {0x3, 0x7}, {0x5, 0x6}, {0x1, 0xa}, {0x6, 0xa}, {0x4, 0x8}, {0x7, 0x1}, {0x7, 0x2}, {0x0, 0x2}, {0x0, 0x3}, {0x4, 0x4}, {0x1, 0x5}, {0x1, 0x1}, {0x1}, {0x3, 0x4}, {0x0, 0x5}, {0x5, 0x4}, {0x6, 0x3}, {0x1, 0x5}, {0x3, 0x1}, {0x6, 0x7}, {0x2, 0x9}, {0x1, 0x8}, {0x5, 0x9}, {0x0, 0x5}, {0x1, 0x2}, {0x3, 0x6}, {0x0, 0x2}, {0x2}, {0x3, 0x5}, {0x7, 0x5}, {0x3, 0x5}, {0x7, 0x6}, {0x2, 0x1}, {0x5, 0x4}, {0x1}, {0x5, 0x4}, {0x7, 0x7}, {0x6}, {0x2, 0x9}, {0x0, 0x3}, {0x7, 0x8}, {0x5, 0x6}]}, @NL80211_TXRATE_LEGACY={0x7, 0x1, [0x3, 0x1b, 0x1]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xcc2, 0x1, 0x5, 0x9, 0x800, 0x6, 0x2400, 0xe8]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0xba, 0x2, 0x87ff, 0x2, 0x7, 0x5, 0xd407]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x9, 0x4, 0x1b, 0x36, 0x24, 0x3, 0x60, 0x48, 0x48]}]}, @NL80211_BAND_5GHZ={0x2c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x1000, 0x1, 0x6, 0x235, 0x4, 0x51, 0x38c]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x600, 0xd, 0xdf, 0xc, 0x6, 0x29, 0x200, 0x43]}}]}, @NL80211_BAND_2GHZ={0x9c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x8, 0x1, [0x18, 0x6c, 0x12, 0x30]}, @NL80211_TXRATE_HT={0x50, 0x2, [{0x1, 0xa}, {0x5, 0x3}, {0x0, 0xa}, {0x1, 0x5}, {0x3}, {0x6, 0x4}, {0x4, 0xa}, {0x1, 0x7}, {0x1, 0x2}, {0x3, 0x3}, {0x1, 0x5}, {0x1, 0x9}, {}, {0x3, 0x7}, {0x2}, {0x5, 0x4}, {0x5}, {0x3, 0x5}, {0x2, 0x7}, {0x1, 0x3}, {0x3, 0xa}, {0x1}, {0x3}, {0x3, 0xa}, {0x0, 0x3}, {0x7, 0x2}, {0x6, 0x4}, {0x5, 0x4}, {0x4, 0x5}, {0x3, 0x8}, {0x1, 0xa}, {0x4, 0x6}, {0x1, 0xa}, {0x6, 0x8}, {0x5, 0xa}, {0x6, 0x9}, {0x3, 0x1}, {0x5, 0x7}, {0x6, 0x5}, {0x0, 0x8}, {0x6, 0x3}, {0x2, 0x1}, {0x1, 0x7}, {0x7, 0x1}, {0x3, 0x6}, {0x5, 0x2}, {0x0, 0x2}, {0x1, 0x1}, {0x3, 0x5}, {0x1, 0x2}, {0x1, 0x4}, {0x2, 0x8}, {0x6, 0x7}, {0x5, 0x7}, {0x7}, {0x2, 0x5}, {0x4, 0x2}, {0x5, 0x2}, {0x0, 0x5}, {0x6, 0xa}, {0x3, 0x4}, {0x1, 0x5}, {0x7, 0x3}, {0x0, 0xa}, {0x2, 0x4}, {0x5}, {0x5}, {0x4, 0x3}, {0x0, 0x9}, {0x7}, {0x7, 0x5}, {0x3, 0x9}, {0x0, 0xa}, {0x4, 0x9}, {0x0, 0x3}, {0x3, 0x2}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x0, 0x8, 0x1, 0x6000, 0x3, 0x6, 0x80]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x75, 0x1, 0x7fff, 0xf69, 0x7, 0x3, 0x51]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_GI={0x5}]}]}, @NL80211_ATTR_TX_RATES={0x2ec, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x74, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xbf6f, 0x3, 0x7, 0x277c, 0xcc, 0x0, 0xfffc, 0x5]}}, @NL80211_TXRATE_LEGACY={0x1c, 0x1, [0x16, 0x1b, 0x6, 0x12, 0x12, 0x30, 0xb, 0x36, 0x6c, 0x1, 0x24, 0x6, 0x16, 0x4, 0x16, 0x48, 0x16, 0x48, 0x16, 0x30, 0x2, 0x6, 0x12, 0x30]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x6b26, 0xfff, 0x5, 0x3, 0x7ff, 0x6, 0x6]}}, @NL80211_TXRATE_LEGACY={0x23, 0x1, [0x36, 0x12, 0x48, 0x2, 0x18, 0x60, 0x12, 0x4, 0x30, 0x6, 0x48, 0x16, 0x5, 0x3, 0x4, 0x60, 0x48, 0x6, 0x60, 0x2, 0x9, 0x4, 0x18, 0x5, 0x6c, 0x3, 0x5, 0x60, 0xf, 0x48, 0x3]}]}, @NL80211_BAND_60GHZ={0x28, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x8000, 0x0, 0x658, 0x2, 0x8, 0x6c, 0xff4f]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_5GHZ={0x24, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xa, 0x1, [0x1, 0x1b, 0x16, 0x2, 0x3, 0x5]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x53f, 0x7f, 0x200, 0x844, 0x3, 0x2, 0x3, 0x3]}}]}, @NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_60GHZ={0x6c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x300, 0xf, 0x1, 0x7, 0x5, 0x2, 0x0, 0x7]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xfffb, 0x7, 0xc1, 0x5, 0x5, 0x739a, 0x1, 0x1000]}}, @NL80211_TXRATE_LEGACY={0x8, 0x1, [0xc, 0x18, 0x18, 0x18]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x2, 0x5, 0x836, 0x7, 0x3, 0x1, 0x3]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0xe1af, 0xa, 0x3ff, 0x9, 0x188, 0x7, 0x4]}}]}, @NL80211_BAND_2GHZ={0x8c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x24, 0x1, [0x1b, 0xc, 0x16, 0x1b, 0x18, 0x6, 0x6, 0x0, 0x18, 0x12, 0x2, 0x24, 0x3, 0x3, 0x24, 0x6, 0x12, 0x4, 0x9, 0x3, 0x12, 0x4, 0x5a, 0x24, 0x18, 0x5, 0x9, 0x4, 0x1b, 0x48, 0x5, 0x5]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HT={0x43, 0x2, [{0x4, 0x1}, {0x6, 0x7}, {0x4, 0x6}, {0x3, 0x8}, {0x2}, {0x6, 0x8}, {0x5}, {0x0, 0x6}, {0x0, 0xa}, {0x5, 0x1}, {0x7, 0x8}, {0x6, 0x8}, {0x1, 0x2}, {0x3, 0x4}, {0x1}, {0x5, 0x2}, {0x6, 0x5}, {0x5}, {0x4, 0x9}, {0x7, 0x4}, {0x3, 0x4}, {0x1, 0x9}, {0x6, 0xa}, {0x0, 0x1}, {0x4, 0x9}, {0x2}, {0x2, 0x3}, {0x2, 0x5}, {0x3, 0xa}, {0x6, 0x2}, {0x1}, {0x0, 0x8}, {0x3, 0x5}, {0x7, 0x2}, {0x1, 0x4}, {0x4, 0x1}, {0x1, 0xa}, {0x3, 0x1}, {0x5, 0x8}, {0x2, 0x5}, {0x6, 0x6}, {0x4, 0x9}, {0x4, 0x6}, {0x3, 0x6}, {0x2}, {0x0, 0x7}, {0x0, 0x1}, {0x4, 0x4}, {0x1, 0x7}, {0x3, 0x7}, {0x6, 0x3}, {0x5, 0x8}, {}, {0x2, 0x6}, {0x4, 0x1}, {0x4, 0xa}, {0x5, 0x5}, {0x6, 0x2}, {0x0, 0x1}, {0x6, 0x9}, {0x4, 0x1}, {0x0, 0x1}, {}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x9, 0x4, 0xfa, 0x401, 0x0, 0xfff8, 0x3]}}]}, @NL80211_BAND_6GHZ={0x88, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xa, 0x1, [0x30, 0x60, 0x0, 0xc, 0x6c, 0x6c]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0xfff8, 0x0, 0x8, 0x9, 0xa, 0x8, 0x7]}}, @NL80211_TXRATE_HT={0x48, 0x2, [{0x2, 0x3}, {0x4, 0x2}, {0x4, 0xa}, {0x2, 0x3}, {0x4, 0x7}, {0x1, 0x3}, {0x7, 0x8}, {0x7, 0x7}, {0x0, 0x4}, {0x3, 0x7}, {0x4, 0x1}, {0x0, 0x5}, {}, {0x3, 0x9}, {0x7, 0xa}, {0x0, 0x3}, {0x0, 0x2}, {0x7, 0x2}, {0x1, 0xa}, {0x2, 0x5}, {0x2, 0xa}, {0x4}, {0x0, 0x7}, {0x5, 0x2}, {0x6, 0x8}, {0x6, 0x4}, {0x5, 0xa}, {0x6, 0x5}, {0x0, 0x2}, {0x2, 0x1}, {0x1, 0x2}, {0x0, 0x1}, {0x4, 0x3}, {0x0, 0x2}, {0x3, 0xa}, {0x6, 0x4}, {0x3, 0x6}, {0x5, 0x9}, {0x3, 0xa}, {0x7, 0x8}, {0x0, 0x2}, {0x1, 0x9}, {0x5, 0x4}, {0x2, 0x9}, {0x0, 0x2}, {0x0, 0x7}, {0x2, 0x4}, {0x1, 0x8}, {0x0, 0x3}, {0x2}, {0x6, 0x3}, {0x4, 0x4}, {0x3, 0x2}, {0x1, 0x9}, {0x5, 0x3}, {0x6, 0x8}, {0x1, 0x4}, {0x4, 0x8}, {0x7, 0x5}, {0x2, 0x6}, {}, {0x7, 0x8}, {0x4, 0x8}, {0x0, 0x2}, {0x0, 0x9}, {0x6, 0x8}, {0x2}, {0x5, 0x8}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xdb3b, 0x1, 0x4, 0x4ee, 0xc, 0x1, 0x5, 0x83e]}}]}, @NL80211_BAND_5GHZ={0x78, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x24, 0x1, [0xc, 0x16, 0x4, 0xb, 0x36, 0x16, 0x5, 0x45, 0x18, 0x18, 0x24, 0x1, 0x1b, 0x36, 0x5, 0xc, 0x18, 0x4, 0x9, 0xc, 0x4, 0xc, 0x2, 0xc, 0x30, 0x6, 0x16, 0x36, 0x36, 0x60, 0x6, 0xc]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x1c, 0x1, [0x6c, 0x6c, 0x9, 0x5, 0x1b, 0x6, 0x1b, 0x16, 0x1, 0x3, 0x4, 0xc, 0x30, 0x18, 0x6, 0x4, 0x18, 0xbf8fb967e28ac603, 0x4, 0x4, 0xb, 0x4, 0x36, 0x18]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xe23, 0x0, 0x2, 0x4, 0xff, 0x3, 0x8d, 0x2]}}]}]}, @NL80211_ATTR_TX_RATES={0x214, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x50, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x1d, 0x1, [0x6, 0x36, 0x24, 0x3, 0x60, 0x0, 0x1, 0x3, 0x12, 0xc, 0x7f, 0x5, 0x55, 0x3, 0x6c, 0x16, 0x60, 0x36, 0x6, 0xb, 0x48, 0x12, 0x16, 0x16, 0x5]}, @NL80211_TXRATE_LEGACY={0x1a, 0x1, [0x48, 0x12, 0xc, 0x12, 0x36, 0x6c, 0x1, 0x1b, 0x1b, 0x5, 0x6, 0xc, 0x9, 0x9, 0xb, 0xb, 0x9, 0x1, 0x48, 0x60, 0x2, 0x6c]}]}, @NL80211_BAND_60GHZ={0x18, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x11, 0x1, [0x77, 0x6, 0x0, 0x35, 0x9, 0x6c, 0xb, 0x36, 0x9, 0x6c, 0x1b, 0x6c, 0x16]}]}, @NL80211_BAND_6GHZ={0x54, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x18, 0x5, 0x16, 0x1, 0x1, 0xc, 0x36, 0x0, 0x6b]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x200, 0x3, 0xe, 0x8, 0x7, 0x5, 0x8f]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x80}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x0, 0xb, 0xa, 0xc, 0x5f42d04c69a360b8, 0x3]}]}, @NL80211_BAND_6GHZ={0xbc, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x35, 0x2, [{0x3, 0xa}, {0x7, 0x1}, {0x7}, {0x6, 0x7}, {0x1, 0x5}, {0x4, 0x8}, {0x3, 0x9}, {0x2, 0x3}, {0x6, 0x1}, {0x4, 0x1}, {0x1, 0xa}, {0x4, 0x3}, {0x4, 0x5}, {0x0, 0x2}, {0x3, 0x8}, {0x0, 0x5}, {0x4}, {0x6, 0x9}, {0x0, 0x2}, {0x0, 0x8}, {0x5, 0x3}, {0x1, 0x2}, {0x3, 0x5}, {0x1, 0x7}, {0x0, 0x2}, {0x1, 0x6}, {0x0, 0xa}, {0x1, 0x4}, {0x1, 0x6}, {0x6, 0x3}, {0x3}, {0x1, 0x3}, {0x7, 0x5}, {0x2, 0x3}, {0x7}, {0x7, 0x7}, {0x7, 0x3}, {0x6, 0x8}, {0x1, 0x5}, {0x3, 0x1}, {0x1, 0x5}, {0x0, 0x9}, {}, {0x5, 0x1}, {0x4, 0x9}, {0x7, 0x4}, {0x5, 0x4}, {0x1, 0x5}, {0x0, 0x4}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x14, 0xd, 0xff, 0x7ff, 0xeb, 0xc480, 0x1, 0x400]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x3ff, 0x98, 0x2, 0x69, 0xbb4, 0x229c, 0x8]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1ebf, 0xcb0f, 0x8f88, 0x7, 0xafc9, 0xb, 0xff2e, 0x7]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x800, 0xe3, 0x4, 0x1a97, 0x0, 0x1, 0x10, 0x80]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfffa, 0x8, 0xfff9, 0xd7, 0x8b, 0x5, 0x12ec, 0x7ff]}}, @NL80211_TXRATE_LEGACY={0xb, 0x1, [0xc, 0x48, 0x16, 0x12, 0x1, 0x1b, 0x36]}]}, @NL80211_BAND_2GHZ={0x94, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x1, 0x6, 0x4, 0x1, 0x8, 0x9, 0xffff]}}, @NL80211_TXRATE_HT={0x1f, 0x2, [{0x1, 0x4}, {0x4, 0x3}, {0x0, 0x4}, {0x6, 0x9}, {0x2, 0x8}, {0x2, 0x4}, {0x0, 0x7}, {0x4, 0x1}, {0x3, 0x8}, {0x4, 0x3}, {0x3, 0x6}, {0x6, 0x8}, {0x5, 0x1}, {0x1, 0x5}, {0x4, 0x4}, {0x0, 0x7}, {0x6, 0x9}, {0x4, 0x7}, {0x7, 0x7}, {0x5, 0x4}, {0x2, 0x2}, {0x5, 0x2}, {0x2, 0x3}, {0x1, 0x9}, {0x6, 0x2}, {0x4, 0x6}, {0x0, 0x8}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x8, 0x8, 0x0, 0x2c80, 0x4, 0xf74, 0x9]}}, @NL80211_TXRATE_HT={0xb, 0x2, [{0x1, 0x9}, {0x1, 0x9}, {0x6, 0x4}, {0x0, 0x9}, {0x5, 0x3}, {0x0, 0xa}, {0x3, 0x2}]}, @NL80211_TXRATE_LEGACY={0x5, 0x1, [0x41]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x9, 0x278, 0x0, 0x8, 0x5, 0x6, 0x6]}}]}, @NL80211_BAND_6GHZ={0x4}]}, @NL80211_ATTR_TX_RATES={0x204, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x18, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x3, 0xfffb, 0x6, 0x4, 0xa, 0x9, 0xff73]}}]}, @NL80211_BAND_6GHZ={0x54, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7f, 0xff, 0x1d6, 0xaf, 0x6, 0xc0, 0x4000, 0x1]}}, @NL80211_TXRATE_HT={0x18, 0x2, [{0x1, 0x7}, {0x5, 0x5}, {0x0, 0x7}, {0x0, 0x8}, {0x2, 0x4}, {0x1, 0x3}, {0x7, 0x3}, {0x5, 0x3}, {0x5, 0x4}, {0x2, 0x1}, {0x2, 0x6}, {0x4}, {0x1, 0x8}, {0x7, 0x8}, {0x2, 0x7}, {0x3, 0x8}, {0x1, 0x7}, {0x6}, {0x0, 0x6}, {0x4, 0x1}]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x0, 0x4, 0x8, 0x4, 0xd4fd, 0x7, 0x5]}}]}, @NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_60GHZ={0x4c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HT={0x27, 0x2, [{0x2, 0x9}, {0x5, 0x6}, {0x0, 0xa}, {0x7, 0x4}, {0x0, 0x5}, {0x1, 0x6}, {0x2}, {0x3, 0x3}, {0x7, 0x6}, {0x0, 0x7}, {0x0, 0x5}, {0x6, 0x2}, {0x5, 0x8}, {}, {0x1, 0x9}, {0x4, 0x6}, {0x2, 0x4}, {0x1}, {0x0, 0x4}, {0x7, 0xa}, {0x4, 0x9}, {0x3, 0x2}, {0x4, 0x2}, {0x0, 0x1}, {0x2, 0x7}, {0x2, 0x8}, {0x3, 0x7}, {0x6, 0x3}, {0x4, 0x1}, {0x0, 0x1}, {0x5, 0x4}, {0x3, 0x1}, {0x1, 0x7}, {0x2, 0x4}, {0x1, 0x3}]}]}, @NL80211_BAND_60GHZ={0x54, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x7, 0xffff, 0x1ff, 0x8, 0x80, 0x1, 0x4]}}, @NL80211_TXRATE_HT={0x38, 0x2, [{0x0, 0xa}, {0x4, 0x3}, {0x6, 0xa}, {0x0, 0x1}, {0x5, 0x7}, {0x6, 0xa}, {0x7, 0x1}, {0x1, 0x5}, {0x2, 0x5}, {0x7, 0x9}, {0x5, 0x5}, {0x0, 0x7}, {0x6, 0x4}, {0x1, 0x5}, {0x0, 0x9}, {0x0, 0x7}, {0x6, 0x8}, {0x7, 0x4}, {0x0, 0xa}, {0x2, 0x9}, {0x5, 0x5}, {0x4, 0x6}, {0x7, 0x5}, {0x6, 0x2}, {0x0, 0xa}, {0x3, 0xa}, {0x6, 0x1}, {0x2, 0x9}, {0x7, 0x2}, {0x3, 0x7}, {0x7, 0x5}, {0x1, 0x3}, {0x4, 0xa}, {0x4, 0x4}, {0x7, 0x2}, {0x1, 0x9}, {0x1, 0x6}, {0x5, 0x8}, {0x1}, {0x7, 0x4}, {0x3, 0x1}, {0x3, 0x9}, {0x2, 0x7}, {0x0, 0xa}, {0x5, 0x3}, {0x3, 0x2}, {0x0, 0xa}, {0x1, 0x9}, {}, {0x0, 0x4}, {0x2}, {0x5, 0x5}]}, @NL80211_TXRATE_LEGACY={0x4}]}, @NL80211_BAND_6GHZ={0xc, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_2GHZ={0x50, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0xf, 0x2, 0x7, 0x3508, 0x7f, 0x5, 0x4d]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0x9, 0x1, [0xc, 0x1b, 0x1, 0x9, 0x30]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0xaa, 0x5, 0xa36, 0x3, 0x6, 0x607, 0xc000]}}]}, @NL80211_BAND_60GHZ={0x50, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0x81, 0x200, 0x52a, 0x101, 0x0, 0x10, 0x10]}}, @NL80211_TXRATE_LEGACY={0x9, 0x1, [0x16, 0xc, 0x30, 0x60, 0x9]}, @NL80211_TXRATE_LEGACY={0xf, 0x1, [0x5, 0x1, 0x4, 0x6c, 0x60, 0x24, 0x6c, 0x5, 0x60, 0x16, 0x5]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0xffff, 0x8, 0x5, 0xfff8, 0x7, 0x9cb, 0x9]}}]}, @NL80211_BAND_5GHZ={0x3c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0xf, 0x47, 0xf6, 0x3, 0x4b, 0xd, 0x1]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x3, 0x3, 0x6, 0xc28e, 0x9cc, 0x5, 0x5811]}}]}]}, @NL80211_ATTR_TX_RATES={0x4}]}, 0x9d4}, 0x1, 0x0, 0x0, 0x20000085}, 0x8081) sendmsg$NFT_BATCH(r8, &(0x7f000000c0c0)={0x0, 0x0, &(0x7f000000c100)={&(0x7f000000c140)=ANY=[@ANYBLOB="140000001000010000000000000006000000000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000020900030073797a310000000068000000060a010400000000000000000100000008000b4000000000400004802800018007000100637400001c000280080001400000000108000240000000090500030000000000140001800a0001007265646972000000040002800900010073797a30"], 0xdc}, 0x1, 0x0, 0x0, 0x5090}, 0x4000000) 1.499030775s ago: executing program 3 (id=456): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={&(0x7f0000000300)=ANY=[], &(0x7f0000000440)=""/99, 0x1a7, 0x63, 0x0, 0x5}, 0x28) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000800)={'filter\x00', 0x104, 0x4, 0x3c8, 0xe8, 0x1d0, 0x1d0, 0x2e0, 0x2e0, 0x2e0, 0x7fffffe, 0x0, {[{{@arp={@remote, @multicast2, 0x0, 0x0, 0x7, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 'bridge0\x00', 'erspan0\x00'}, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x100}}}, {{@arp={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0xfc, {@empty, {[0xff, 0x0, 0x0, 0x0, 0x0, 0xff]}}, {@mac=@multicast, {[0xff]}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bond_slave_1\x00', 'ipvlan1\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@multicast, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010100, 0x4, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000000)={r0, 0x8, 0xbd, 0x7}) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000080)=0x7) fcntl$setownex(r2, 0xf, &(0x7f0000000140)={0x1, r3}) unshare(0x22020600) r4 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x1, 0x8e) r6 = openat$cgroup_ro(r5, &(0x7f0000000500)='cpu.stat\x00', 0x5000000, 0x0) pread64(r6, &(0x7f0000000c40)=""/226, 0xe2, 0x88) r7 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r7, &(0x7f0000001140)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x1234, @loopback}}, 0x24) listen(r7, 0x5) sendmsg(r7, &(0x7f0000001180)={0x0, 0x0, 0x0, 0x0, &(0x7f00000011c0)=ANY=[@ANYBLOB="1800010000800000000000000100000000bbdc3f4e26787a8900"], 0x28}, 0x0) sendmsg(r7, &(0x7f0000001200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001280)=ANY=[@ANYBLOB="18000001000001ebded4c98e860ec82ddd1c2577f4e55b000000"], 0x18}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1c000000030800000900000008000000008000003eb379b29e17c9c1e31011e7a701000000000000001d0000000000000e9697831e3989840c5fcd578846b89c598752670f249efe82f2e92f5c4314e76a178699", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="010000008000"/20, @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00'], 0x50) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8810}, 0x20004450) sendmsg$NFT_MSG_GETRULE(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000070a010100000006000000000a0063010900010073797a31"], 0x38}, 0x1, 0x0, 0x0, 0x20044050}, 0x44050) r9 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$nfc_llcp(r9, &(0x7f0000000580)={0x27, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x7, "d9298498abdba7feffffffa34c226af5160e961711a03760760beeab91e8ff00550cfb38474b63a70e3bd43a847a1597c8ef03da5be4220000003aa900", 0x23}, 0x60) ppoll(&(0x7f00000006c0)=[{r9}], 0x1, &(0x7f0000000e80)={0x0, 0x3938700}, 0x0, 0x0) 1.432486176s ago: executing program 1 (id=457): r0 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=@newqdisc={0x32c, 0x24, 0xd0f, 0x70bd2a, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0xd}, {0xffff, 0xffff}, {0x4, 0xffff}}, [@TCA_STAB={0xb4, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x7, 0x81, 0xd, 0x101, 0x1, 0x9, 0x10000, 0x5}}, {0xe, 0x2, [0x9, 0xa, 0x9, 0x1, 0x7]}}, {{0x1c, 0x1, {0x1, 0x5, 0xc, 0x2c, 0x2, 0x9, 0x36, 0x9}}, {0x16, 0x2, [0xac, 0x5, 0x1, 0x1, 0x9, 0x4, 0xffff, 0xe3b3, 0xc1]}}, {{0x1c, 0x1, {0x1, 0x5, 0x401, 0x8, 0x1, 0x5b, 0x8, 0x2}}, {0x8, 0x2, [0x4ee, 0x8]}}, {{0x1c, 0x1, {0x4, 0x2, 0x100, 0x8, 0x1, 0x3, 0xc5f5, 0x5}}, {0xe, 0x2, [0x5, 0xa, 0xff, 0x80, 0x3]}}]}, @qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x8}}, @qdisc_kind_options=@q_gred={{0x9}, {0x22c, 0x2, [@TCA_GRED_MAX_P={0x8, 0x4, 0x7fff}, @TCA_GRED_MAX_P={0x8, 0x4, 0x2}, @TCA_GRED_STAB={0x104, 0x2, "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"}, @TCA_GRED_DPS={0x10, 0x3, {0x2, 0xf, 0x0, 0x6}}, @TCA_GRED_STAB={0x104, 0x2, "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"}]}}]}, 0x32c}, 0x1, 0x0, 0x0, 0x1d4}, 0x8c0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a01040000000000000000020000000900010073797a30000000002c000000030a01040000000000000000020000000900010073797a30000000000900030073797a300000000090000000060a01240000000000000000020000000900010073797a30000000000900020073797a300000000064000480600001800b0001007461726765740000500002800e00010049444c4554494d455200000008000240000000013400030064"], 0x104}}, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETFB2(r4, 0xc06864ce, &(0x7f0000000040)={0x0, 0x8, 0x101, 0x6, 0x0, [0x0, 0x0], [0x9, 0x3, 0x59c1, 0x5], [0x9717, 0xffffc8fa, 0x5, 0x4], [0x3, 0x2, 0x4, 0x4]}) ioctl$DRM_IOCTL_MODE_ADDFB2(r4, 0xc06864b8, &(0x7f0000000500)={0x0, 0x3f, 0x3f, 0x30315559, 0x0, [0x0, 0x0, r5], [0x0, 0x2], [0xd1b]}) ioctl$XFS_IOC_START_COMMIT(r0, 0x80585882, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$sock_inet_tcp_SIOCINQ(r6, 0x541b, &(0x7f0000000180)) 1.423725495s ago: executing program 1 (id=458): write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3) prlimit64(0x0, 0xe, &(0x7f0000000f40)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000f80)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000fc0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000001040)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000010c0), 0x651, 0x0) recvmmsg(r1, &(0x7f0000001100), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000001140)=0x6) socket(0x10, 0x803, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000000000020000000000000000850000001700000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x20}, 0x94) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8801}, 0x8000) 1.413897619s ago: executing program 4 (id=459): syz_ublk_setup_io_uring(0x20, &(0x7f0000000540)={0x0, 0x0, 0x100, 0xffeffffd, 0x1e5}, &(0x7f0000000500)=0x0, &(0x7f00000003c0)=0x0, &(0x7f0000000400)=0x0) r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = dup(r4) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000300)=0xffffffffffffffff) ioctl$VIDIOC_S_EXT_CTRLS(r5, 0xc0205648, &(0x7f0000000380)={0x9c0000, 0x9, 0x36978b6d, r6, 0x0, &(0x7f0000000340)={0x9b0903, 0x0, '\x00', @value=0x8}}) setsockopt$inet_int(r4, 0x0, 0x21, &(0x7f00000004c0)=0x800, 0x4) ioctl$vim2m_VIDIOC_G_FMT(r3, 0xc0285628, &(0x7f0000000040)={0x1, @win={{0x8, 0x0, 0x8, 0x2}, 0x0, 0x7, &(0x7f0000000140)={{0x0, 0x4, 0x1, 0xfffffffd}}, 0x1, 0x0}}) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000180)={0x2, @vbi={0x8001, 0x10001, 0x9, 0x30314742, [0x578, 0xf], [0x5, 0xe], 0x108}}) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000280)={0x1, &(0x7f00000002c0)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) ioctl$FIONREAD(r7, 0x541b, 0x0) syz_io_uring_submit(r0, r1, r2, &(0x7f0000000440)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x10, 0x7a2002, 0x12345}) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="0e000000040000000800000007"], 0x50) mknodat$md(0xffffffffffffff9c, &(0x7f0000000840)='./md0\x00', 0x6180, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r8 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r8, 0x0, 0x0) openat$rtc(0xffffffffffffff9c, 0x0, 0x8002, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r9 = openat$md_node(0xffffffffffffff9c, &(0x7f00000008c0)='./md0\x00', 0x2, 0x0) ioctl$BLKPG(r9, 0x1269, &(0x7f0000000900)={0x3, 0x0, 0x98, &(0x7f0000000940)={0x3, 0x2, 0x3}}) ioctl$SET_ARRAY_INFO(r9, 0x40480923, &(0x7f0000000a00)={0x0, 0x5a, 0x0, 0x0, 0x1, 0x800, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x6000}) socket$nl_route(0x10, 0x3, 0x0) ioctl$ADD_NEW_DISK(r9, 0x40140921, &(0x7f0000000a80)={0x0, {0x1, 0x0}, 0x0, 0x40408}) ioctl$ADD_NEW_DISK(r9, 0x40140921, &(0x7f0000000ac0)={0x1, {0x1, 0x1}, 0x1, 0x6}) ioctl$RUN_ARRAY(r9, 0x400c0930, 0x0) syz_genetlink_get_family_id$nfc(0x0, 0xffffffffffffffff) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000b00)) ioctl$STOP_ARRAY_RO(r9, 0x933, 0x0) 1.385982824s ago: executing program 2 (id=460): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000010c0)=ANY=[@ANYBLOB="200000006a0005062cbd7000fc"], 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x880) (async) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000080)={0xc, {"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", 0x1000}}, 0x1006) (async) socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000001100)='ext4\x00', &(0x7f0000001140)='./file0\x00', 0x58e, &(0x7f0000001180)={[{@errors_remount}, {@lazytime}, {@block_validity}, {@test_dummy_encryption}, {@block_validity}, {@quota}, {@jqfmt_vfsv0}]}, 0x1, 0x459, &(0x7f0000001200)="$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") (async) openat(0xffffffffffffff9c, &(0x7f0000001680)='.\x00', 0x0, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f00000016c0)={0x8, 0x88}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000001700)=0x7) (async) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000001740)=0x7) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001780)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000017c0)=@abs, 0x6e) (async) sendmmsg$unix(r3, &(0x7f0000001840), 0x651, 0x0) (async) recvmmsg(r2, &(0x7f0000001880), 0x10106, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) (async) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x48, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000018c0)=0x6) r4 = syz_open_dev$dri(&(0x7f0000001900), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000001940)={0x200, 0x200, 0x20, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_ADDFB2(r4, 0xc04464b8, &(0x7f0000001980)={0x0, 0x200, 0x200, 0x34325258, 0x0, [r5], [0x800]}) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000001a00)={0x1, &(0x7f0000001a40)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r6, 0xffffffffffffffff, 0x0) (async) bpf$MAP_CREATE(0x100000000000000, 0x0, 0x48) (async) ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, &(0x7f0000001a80)={0x80000000, 0x0, 0x0}) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000001ac0)="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", 0x2000, 0x0) (async) syz_pidfd_open(r1, 0x0) (async) setns(0xffffffffffffffff, 0x66020000) (async) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000003ac0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000003b80)={0x130, 0x0, 0xc, {0x6, 0x2, 0x0, '\x00', {0x47d, 0xffffffff, 0xae3, 0x10, 0x0, 0xffffffffffffffff, 0xa000, '\x00', 0x3, 0x7e, 0x1000000000004, 0x4, {0x1, 0xffffffff}, {0x4, 0x42}, {0x5, 0xd}, {0x4, 0x40000008}, 0x4, 0x6, 0x81, 0x5}}}}) (async) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffa) 1.329422948s ago: executing program 3 (id=461): pwrite64(0xffffffffffffffff, &(0x7f0000000140)='2', 0xfdef, 0xc00) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys\x00', 0x15e) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000100)={0x2, 0x0, @loopback}, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) sched_setscheduler(r1, 0x1, &(0x7f00000002c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000340)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000003c0), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000400)=0x2) recvmmsg(r2, &(0x7f0000000440), 0x10106, 0x2, 0x0) socket(0x28, 0x5, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a050000000c0000000000010000000900010073797a300000000040000000030a01020000000000000000010000000900030073797a320000000014000480080002400000000008000140000000000900010073797a300000000054000000060a010400000000000000000100000008000b40000000000900010073797a30000000002c0004802800018008000100666962001c00028008000240000000030800034000000001080001400000001414000000110001"], 0xdc}, 0x1, 0x0, 0x0, 0x40}, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x8, &(0x7f0000000600)=0xfb78, 0x4) sendmsg$rds(r0, &(0x7f0000000640)={&(0x7f0000000680)={0x2, 0x0, @dev}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@mask_cswp={0x58, 0x114, 0x9, {{0x0, 0x10002}, &(0x7f0000000740)=0x7, &(0x7f0000000780)=0x95fd, 0x2, 0x40, 0x23, 0x6, 0x29, 0xaac0}}], 0x58}, 0x0) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/module/nfs/parameters/callback_tcpport\x00', 0x2, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) write(r5, &(0x7f0000000140)='2m', 0x2) 628.818931ms ago: executing program 0 (id=462): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) setuid(0xee01) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="600000001200010300000000000000000200"/56, @ANYRES32=0x0, @ANYBLOB="0000000000f91900ffffffef001400001400010007"], 0x60}}, 0x0) 626.161116ms ago: executing program 4 (id=463): r0 = syz_create_resource$futex(&(0x7f00000004c0)=0x2) futex$unlock_wake_list64(r0, 0xb, 0xfffffff7, 0x0, 0x0, 0x9) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r2) r3 = syz_mount_image$vfat(&(0x7f0000000240), &(0x7f00000002c0)='./file1\x00', 0x1218088, &(0x7f0000000500)=ANY=[@ANYBLOB="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", @ANYRESDEC], 0x4a, 0x2df, &(0x7f00000006c0)="$eJzs3b+LHFUcAPDv7O3NTrTYLaxEyIAprIKXTmz2kATEqwxbRAs9TAJyuwg5OIiKaypbGwsL/wJBsPG/SON/INgKdkYIjMzszO3s3uZ+RPckd59Pc9977/ud997sY2+3mHcfvzbZu5vH/Udf/hZZlkRnGMN4ksQgOtH4OhYMvw0A4EX2pCjiz2KmakhOV1emZeudGgCwJkf+/q/UnYc/n8u0AIA1un3ng/e2d3Zuvp9FFrcm3xyMym/25c9Z//b9+DTGcS/ejH48jag+J9Rf/Mv4VlEU025eGsS1yfRgVFZOPnpcX3/7j4iqfiv6MTgsqz5tVPXv7tzcqsrzXqt+Ws7jpXr8YVl/I/rxymHxQv2NWX3ero9RGm+83pr/9ejHr5/EZzGOu9Uk5vVfbeX5O8V3f33xYTm9sj6ZHox6Vd5csXGerwsAAAAAAAAAAAAAAAAAAAAAABfb9bw5fCe/GtcmZVN9/s7G07TOqVMG86qyfxYdHhfcOh+oNC3ih9mRgpsL483P9+nGq932wYIAAAAAAAAAAAAAAAAAAABwee0//Hxvdzy+9+A/CZKIK82V/74d8bzXGbZarsbxyb16vN3xuFOHCzmP03ZLbDQ5ScSx04huxELL8y/npOBKtjTnJvjxp3KBZ7lg1mp5a/UCN5fWdSS40/u3e6PZA3u7yeqxetG0ZPVd/T6NmOekccqx0md1FdF+vU5acrqyq3/mtacvV8H0mTlFsmKLtoK3f5/11y1JLO26tLqrK0ffrINW+dLeOOEm1OXZrPzoe0VSndbRW8O7EAAAAAAAAAAAAAAAAAAAENXTvM3Tv+Vvvyx2Pjq2tFN4FBgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAC2L/YfP//88QTOviUySn8WD/f14iAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAl8A/AQAA//+0t0sX") r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000009c0)='mountinfo\x00') read$FUSE(r4, &(0x7f0000000cc0)={0x2020}, 0x2020) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='environ\x00') exit(0x7) r5 = syz_open_procfs(0x0, &(0x7f0000000180)='fd/3\x00') getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b80)=ANY=[@ANYRESOCT=r6, @ANYRES8=r3, @ANYBLOB="01000000200000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f00000003c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r9, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000a00)={0x1c, r8, 0x1, 0x70bd22, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x4000804) r11 = openat$dir(0xffffffffffffff9c, &(0x7f0000000a80)='./file1\x00', 0x515200, 0x4) mkdirat(r11, &(0x7f0000000b40)='./file1\x00', 0x40) r12 = socket$netlink(0x10, 0x3, 0x0) r13 = socket(0x10, 0x803, 0x4) sendmsg$IPVS_CMD_SET_INFO(r13, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) ioctl$XFS_IOC_GOINGDOWN(r12, 0x8004587d, &(0x7f0000000a40)=0x7) getsockname$packet(r13, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x66) r14 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r14, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="5000000010001fff000600003b3d90ed91", @ANYRES32=0x0, @ANYBLOB="000300000576010008000a00", @ANYRES8=r5, @ANYBLOB="280012800900010076657468"], 0x50}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x4008040) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350076657468305f746f5f626f6e6400000008000a00", @ANYRES32=r6], 0x3c}, 0x1, 0x0, 0x0, 0x4008800}, 0x8000) sendmsg$nl_route(r1, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c000000130005002cbd70000000000000000000", @ANYRES32=r6], 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x42) 564.710232ms ago: executing program 2 (id=464): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)=ANY=[@ANYBLOB="4400000010003b1500"/20, @ANYRES32=0x0, @ANYBLOB="6627e4000000000024001280090001007866726d0000000014000280040003"], 0x44}}, 0x0) 563.957569ms ago: executing program 0 (id=465): r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000940)='./file0\x00', 0x200) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000f80)=@delchain={0x630, 0x65, 0x400, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x1, 0x2}, {0x0, 0x1}, {0x5}}, [@filter_kind_options=@f_bpf={{0x8}, {0x604, 0x2, [@TCA_BPF_ACT={0x600, 0x1, [@m_bpf={0x130, 0x11, 0x0, 0x0, {{0x8}, {0x38, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x3, 0x4, 0x8, 0x5, 0x2}}, @TCA_ACT_BPF_NAME={0x5, 0x6, '\x00'}, @TCA_ACT_BPF_FD={0x8, 0x5, r0}]}, {0xd1, 0x6, "a41f25d22b1bae1b6bfb4a42ad5ba9db462fca41280c331f630e2c9f0be1093117392575082305ebc27660464ef802792ce06133244235023f0f4882fc0a47f4d5e499a8857cd81b0e6fda422cbc53ad098872214190756df6bbd0e760248aa97e200702fd569bd27d4a70df1d4a123ffc42d2592c81751e15e260622f14aeaaca5dc8acab93651fdd1d5614d98f28fc76d402e1028d91028270a2722b141a9140c47e37d068e7193d463a6444e424bc792ab1295f79842a501700a5cc2f71eefaf131a98821e712b03d552c87"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_xt={0x13c, 0x5, 0x0, 0x0, {{0x7}, {0x28, 0x2, 0x0, 0x1, [@TCA_IPT_TABLE={0x24, 0x1, 'raw\x00'}]}, {0xed, 0x6, "a5fd64840366fd7ad44f3f053221ded9ced495590e2bc8690a2765e56ded8425cb3eb0e04bbcfec50e639bf373167e617b24eccd260f28bb850873b1e2154b158987d6e585e10ffeaba32641bae47de041e1169d8e4a65b8ce3633a4469c93c5228320c572237d92a9ae6bbc2d2bd3a2d1e27de283017ecf9fca6b2cd8a119dee59702830717b694625f60f5c81f688775c5e292f76a0ffa39e1d2cabd639d1c111c01e0d2f9faa220154db33399242bca9f4fac65c74cb6264c28ac7a50037564c7b417fb61d617d212ab3243c30e0e82d9a12651b74553d539b991a302489af94626e5aac41c53b2"}, {0xc, 0x7, {0x1, 0xeb0757422c733451}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_bpf={0x104, 0x8, 0x0, 0x0, {{0x8}, {0x5c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x3}, @TCA_ACT_BPF_OPS={0x14, 0x4, [{0xa3b7, 0x9, 0xb, 0x7}, {0x28a3, 0x4, 0x4, 0xfffffffa}]}, @TCA_ACT_BPF_OPS={0x34, 0x4, [{0x0, 0x0, 0x9, 0xffff0000}, {0xb, 0xf4, 0x5, 0xfffffffc}, {0x401, 0xb0, 0x32}, {0xfff9, 0x2, 0xf7}, {0x6092, 0x70, 0x6, 0x1ff}, {0x9, 0x1a, 0x1, 0x98}]}]}, {0x81, 0x6, "5d3aee85a6264cff4a2163adaec321e008985cfa435b8922eeb16f1932265618158a3fe72c442a68b182e8f673f9251a03dc831c5947be17ca906c3dcb99adb55bc5f0ad8886f235f45d7e29bb727715f2e7a3200ac63eb79f7a023835874514b60b0177c40370157c0c21b37875e7e4a2e75b3cc54be7d719fa695469"}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_tunnel_key={0xb8, 0x18, 0x0, 0x0, {{0xf}, {0x4}, {0x85, 0x6, "51719d53a2b05eda58a80a40d29b01394b8749d7d9ef9f47cce75187b6f333f4bfe797fa4227bf38cf0b71e1b4888d8d1ed410a788c182ba498076ca9ab3d63a8f29175d44a2e8364296c34ac0cdb8972288ecf6515bec4861a53e1e18e54679f5666b0536d0a008aa9b3be1f5e00c4c72460249c372de16eb2cfc15714543d6f3"}, {0xc}, {0xc, 0x8, {0x3, 0xddc47d017e85c037}}}}, @m_xt={0x1d4, 0x13, 0x0, 0x0, {{0x7}, {0x1ac, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0xc9, 0x6, {0x9, 'nat\x00', 0xef, 0x7, "859b467c76be5255b2d4f6101cf6d6cb72c6b46512ecba82df24523b07075e859fd68154d7171a2ca3415ec79cc8ff85b058dae9f1d49e867787957d80637320c0378f6dd94a52c2fc850929bb787aaf6e604a1f57d44fa7775cf7a4a456f808f135c349fb4aefe7e2bc180a4665f5c90321659b9d7722c18c63d8c5ac244a1245b6673adcb794eced4f5288970c153c5b1cd1be29cd924c9446734f9e4568"}}, @TCA_IPT_INDEX={0x8, 0x3, 0x1}, @TCA_IPT_TARG={0xc9, 0x6, {0x8, 'filter\x00', 0xd, 0x6ccd, "51100666dd78f1337c421065ba00caa97aaa8e1aa207a78c6d7e2a3e620334de1a64a8d40af7536c5a07a1997c6fd28e7ed1f866f9454e1014a5129fbeaf1a76cb7b54d80907f7d86c39ff782b12b0422666997d539a25e55b0591b44929ef0dcea5434727f1d8aa8d1ec3a7d56965dae69f90f152f907a0ab28fc8d30bcdb763cd5f45e6a19be6dae4c5659ea76f0641d19c50157b11a5d9f8f9f5d0efd5d"}}, @TCA_IPT_INDEX={0x8, 0x3, 0x2}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2}}}}]}]}}]}, 0x630}, 0x1, 0x0, 0x0, 0x2404c080}, 0x20000080) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000880)=ANY=[@ANYBLOB="140000001000050000000000000000000100000a20000000000a050000000000000000000100fffc0900010073797a300000000040000000030a010100000000000000000100ffff0900030073797a300000000014000480080002400000000008000140000000000900010073797a30000000005f000000060a010400000000000000000100000024000480200001800700010072740000140002800800014000000014080002400000000308000b40000000000900010073797a30"], 0xd4}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r2 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000c40), r0) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000e00), 0x80001, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000e40)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_UNMAP(r3, 0x3b86, &(0x7f0000000e80)={0x18, r4, 0x80, 0xffffffffffffffff}) ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f0000000ec0)={0x18, r4}) sendmsg$SEG6_CMD_GET_TUNSRC(r0, &(0x7f0000000d40)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000d00)={&(0x7f0000000c80)={0x80, r2, 0x400, 0x70bd25, 0x25dfdbfb, {}, [@SEG6_ATTR_DST={0x14, 0x1, @mcast1}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xd1dc}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x81}, @SEG6_ATTR_DST={0x14, 0x1, @empty}, @SEG6_ATTR_DST={0x14, 0x1, @remote}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x5}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x8}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x9}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x3}]}, 0x80}, 0x1, 0x0, 0x0, 0x1}, 0x0) socket$kcm(0x29, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="b40000001800dd8d000000000000000002000000fd000006000000000600150004000000900016808c00088088000180840003"], 0xb4}}, 0x0) r6 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi0\x00', 0x20800, 0x0) ioctl$COMEDI_CMDTEST(r6, 0x8050640a, &(0x7f0000000080)={0x0, 0x20000, 0x6, 0x10000, 0x0, 0x1, 0x4, 0x0, 0x10, 0x3, 0x2, 0xfffffff4, &(0x7f0000000100)=[0xbf], 0x1, 0x0}) r7 = socket(0x10, 0x803, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x1f, 0x4, &(0x7f0000000c00)=ANY=[@ANYBLOB="1800000000000000000000004100000085200000a99e02009500000000000000179bdc8f"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x18, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = syz_open_dev$dvb_dvr(&(0x7f0000000000), 0x2, 0x72901) read(r8, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000dc0)) r9 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x248100, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000700)={r9, &(0x7f0000000540)="02241e741b3db759e9d4b1c8dfc29fdd355dedbb00da9cdca040e46264f5fb04c32d749a04784709cc5753aaa0aac871a7766bc9bcd0e03de8201ac42366abd8c4176fdaf6a16ca69c8bf8ebd8015befd9ff36de5739ed00fc229cd3e3ddd3432bbeda7903081063ddc788d63115193732cb72a109e56abfbec5793446b1ce2f9ba61cf39e6a573907b15461cdd89191f9f9a5d0", &(0x7f00000006c0)=@udp=r7}, 0x20) prctl$PR_SET_MM(0x23, 0x5, &(0x7f0000006000/0x4000)=nil) r10 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000d80)='numa_maps\x00') r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000f40)={&(0x7f0000002600)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) sendmsg$NFT_BATCH(r11, &(0x7f0000002680)={0x0, 0x0, &(0x7f00000026c0)={&(0x7f0000002700)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x88, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x5c, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_DREG={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x4f}, @NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0x37}, @NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x2}]}}}, {0x24, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_QUEUE_SREG_QNUM={0x8, 0x4, 0x1, 0x0, 0xa}, @NFTA_QUEUE_FLAGS={0x6, 0x3, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xb0}, 0x1, 0x0, 0x0, 0x20004000}, 0x24000840) read$FUSE(r10, &(0x7f0000003800)={0x2020}, 0x2020) socket$nl_netfilter(0x10, 0x3, 0xc) sendto(r7, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) 563.866201ms ago: executing program 2 (id=466): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000140)=ANY=[@ANYBLOB="7400000002060104000000000000000006000002050005000200000005000400000000001400078008001240001000000800134000005bad050001000700000005000100070000000900020073"], 0x74}}, 0x4000000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006"], 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="500000000001010400000000141a000002000010240001801400018008000100e000000108000200e00000010c00028005000100000000001800028014000180080001"], 0x50}}, 0x2000000) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a03000000000000060000050000000900010073797a30000000000900030073797a300000000008000c40000000032800048008000240000000120800014000000000140004"], 0xa4}}, 0x0) 542.403241ms ago: executing program 1 (id=467): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) epoll_create1(0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=@ipv6_newrule={0x1c, 0x1a, 0x1, 0x0, 0x0, {0x81, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./proc/net/rpc/auth.rpcsec.context/channel\x00', 0x1, 0x0) write(r5, &(0x7f0000000540)='\\x01000000 2147483647 0 - ', 0x1a) sendmsg$nl_generic(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYRESOCT=r0], 0x28}, 0x1, 0x0, 0x0, 0x4c0c5}, 0xc004) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @empty}, 0x10) sendmmsg$inet(r3, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000680)}], 0x1}}, {{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000440)='q', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000004c0)='\x00\x00', 0x2}], 0x1}}, {{0x0, 0x0, &(0x7f0000000500)}}], 0x4, 0x40488c1) socket(0x28, 0x5, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/sys/net/sctp/intl_enable\x00', 0x1, 0x0) write(r6, &(0x7f0000000140)='1', 0x1) r7 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r7, 0x84, 0x12, 0x0, 0x0) setsockopt(r7, 0x84, 0x7d, 0x0, 0x0) setsockopt$inet_sctp_SCTP_MAXSEG(r7, 0x84, 0xd, 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000040), 0x474, 0xbaa80) 498.274754ms ago: executing program 2 (id=468): r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, &(0x7f0000000040), 0x10) listen(r0, 0x0) r1 = socket(0x28, 0x5, 0x0) syz_emit_ethernet(0x5a, &(0x7f0000000280)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x7, 0x4c, 0xfffe, 0x0, 0x95, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0xe, 0x4, 0xca, 0x0, 0x1000, {[@timestamp={0x8, 0xa, 0x81000001, 0x56}, @timestamp={0x8, 0xa, 0x10000, 0xffffffff}, @window={0x3, 0x3, 0x5}, @sack={0x5, 0xa, [0x1, 0x800005]}]}}}}}}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1, 0xe, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000e00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000e40), 0x8, 0x10, &(0x7f0000000e80), 0x10}, 0x94) connect$vsock_stream(r1, &(0x7f0000000080), 0x10) setsockopt$sock_linger(r1, 0x1, 0x3c, &(0x7f0000000180)={0x1, 0x5}, 0x8) r2 = accept4$vsock_stream(r1, &(0x7f00000000c0), 0x10, 0x800) sendmmsg(r1, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x1, 0x24008094) shutdown(r2, 0x1) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000fc0), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000001240)={'syzkaller0\x00', 0x2}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000001280), 0x0, 0x0) close(r4) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000012c0), r5) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000001380)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f00000013c0)={'syzkaller0\x00', @multicast}) r7 = socket$unix(0x1, 0x2, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000001400)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000001480)={&(0x7f00000014c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x6, 0x472, 0x8, 0x4, 0x7, 0x3, 0x1, 0x2, 0x9}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000080}, 0x48000) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001580)={&(0x7f00000015c0)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfe, {0x0, 0x0, 0x0, r9, {0x0, 0x10}, {0xffe0, 0xb}, {0x7, 0xfff1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x3, 0x1, 0x400, 0x6, 0xfffd, 0x4}, {0x40, 0x2, 0x3, 0x7f, 0x7ff, 0x16800000}, 0x9, 0xfffffffd, 0x1526}}, @TCA_TBF_BURST={0x8, 0x6, 0xad}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x54815}, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000001640)={'syzkaller0\x00', @random="2b0100004ec6"}) r11 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000f00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000f40)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001000)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r13, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x20, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x7fffffff}]}}]}, 0x60}}, 0x44080) 400.284905ms ago: executing program 3 (id=469): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000001740)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000001780)={0x0, 0x0, &(0x7f00000017c0)={&(0x7f0000001800)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000001840)={0x0, 0x0, &(0x7f0000001880)={&(0x7f00000018c0)=@newtfilter={0x80, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0xb, 0x7}, {0xfff1, 0xffff}, {0x300}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4c, 0x2, [@TCA_MATCHALL_ACT={0x48, 0x2, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x0, 0x0, 0x6}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x80}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000001980)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000001ac0)=ANY=[@ANYBLOB="000086dd0000110000080000000060ec979dcd202c00fe8000000000000000000000000000aaff02000000000c000000756fef2000013a"], 0x56) 103.348707ms ago: executing program 0 (id=470): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0xc201}) r1 = socket$inet6(0xa, 0x3, 0xff) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000004c0)=@filter={'filter\x00', 0xe, 0x4, 0x340, 0xffffffff, 0x0, 0x1a0, 0x270, 0xffffffff, 0xffffffff, 0xd0, 0x1a0, 0x270, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@empty, @empty, [], [], '\x00', '\x00', {}, {}, 0x6, 0x0, 0x1}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x1, 0x7, 0x5a0}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000880)={'syzkaller1\x00', @link_local}) sendmsg$kcm(r2, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000cc0)=[{&(0x7f0000000940)="d6474821af3cee364788c0714ab1a7d92f8307", 0x13}], 0x1}, 0x40000) write$tun(r0, &(0x7f0000000900)=ANY=[@ANYBLOB="001c86dd0700100000004000000060ec97000fc83c00fe8000000000000000000000000000aaff02000000000000000040000000000106"], 0xffe) 100.231364ms ago: executing program 2 (id=471): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={&(0x7f0000000300)=ANY=[], &(0x7f0000000440)=""/99, 0x1a7, 0x63, 0x0, 0x5}, 0x28) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000800)={'filter\x00', 0x104, 0x4, 0x3c8, 0xe8, 0x1d0, 0x1d0, 0x2e0, 0x2e0, 0x2e0, 0x7fffffe, 0x0, {[{{@arp={@remote, @multicast2, 0x0, 0x0, 0x7, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 'bridge0\x00', 'erspan0\x00'}, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x100}}}, {{@arp={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0xfc, {@empty, {[0xff, 0x0, 0x0, 0x0, 0x0, 0xff]}}, {@mac=@multicast, {[0xff]}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bond_slave_1\x00', 'ipvlan1\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@multicast, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010100, 0x4, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000000)={r0, 0x8, 0xbd, 0x7}) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000080)=0x7) fcntl$setownex(r2, 0xf, &(0x7f0000000140)={0x1, r3}) unshare(0x22020600) r4 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x1, 0x8e) r6 = openat$cgroup_ro(r5, &(0x7f0000000500)='cpu.stat\x00', 0x5000000, 0x0) pread64(r6, &(0x7f0000000c40)=""/226, 0xe2, 0x88) r7 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r7, &(0x7f0000001140)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x1234, @loopback}}, 0x24) listen(r7, 0x5) sendmsg(r7, &(0x7f0000001180)={0x0, 0x0, 0x0, 0x0, &(0x7f00000011c0)=ANY=[@ANYBLOB="1800010000800000000000000100000000bbdc3f4e26787a8900"], 0x28}, 0x0) sendmsg(r7, &(0x7f0000001200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001280)=ANY=[@ANYBLOB="18000001000001ebded4c98e860ec82ddd1c2577f4e55b000000"], 0x18}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1c000000030800000900000008000000008000003eb379b29e17c9c1e31011e7a701000000000000001d0000000000000e9697831e3989840c5fcd578846b89c598752670f249efe82f2e92f5c4314e76a178699", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="010000008000"/20, @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00'], 0x50) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8810}, 0x20004450) sendmsg$NFT_MSG_GETRULE(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000070a010100000006000000000a0063010900010073797a31"], 0x38}, 0x1, 0x0, 0x0, 0x20044050}, 0x44050) r9 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$nfc_llcp(r9, &(0x7f0000000580)={0x27, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x7, "d9298498abdba7feffffffa34c226af5160e961711a03760760beeab91e8ff00550cfb38474b63a70e3bd43a847a1597c8ef03da5be4220000003aa900", 0x23}, 0x60) ppoll(&(0x7f00000006c0)=[{r9}], 0x1, &(0x7f0000000e80)={0x0, 0x3938700}, 0x0, 0x0) 6.799265ms ago: executing program 3 (id=472): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x488, 0x1b8, 0x12, 0x600, 0x3b8, 0x202, 0x3b8, 0x2e8, 0x2e8, 0x3b8, 0x2c0, 0x4, 0x0, {[{{@uncond, 0x0, 0x190, 0x1b8, 0x4000000, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'fsm\x00', "0000000000000019b5115c2aee68d23a465cd431e150c3234e082555f67222476147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baeb8989f1f34a214e6726401fe4b124e0f7323a587d2a1fcf07000000eca0a7b66c60c527bac2b500", 0x8}}, @common=@inet=@socket2={{0x28}}]}, @common=@unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x1}}}, {{@uncond, 0x0, 0xd8, 0x200, 0x0, {}, [@common=@ah={{0x30}, {[0x4d3, 0x4d3], 0xc9, 0x11, 0x3}}]}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x7ff, 'system_u:object_r:crond_initrc_exec_t:s0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e8) fstat(r0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0}) (async) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000240)=0x0) prlimit64(r2, 0xa, &(0x7f0000000480)={0x4, 0x6}, 0x0) quotactl_fd$Q_GETNEXTQUOTA(0xffffffffffffffff, 0xffffffff80000900, r1, &(0x7f0000000400)) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xa000000}, 0x94) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x16, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x2000000, 0xe, 0x0, &(0x7f0000000340)="c9f7b98600"/14, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) 880.901µs ago: executing program 3 (id=473): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000100)={0x8000141, 0x7, 0x20, 0x7, 0x38, "737b27e90e2947801cf3a246ada40a9fd86000"}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000240)=0xd) recvmmsg(0xffffffffffffffff, &(0x7f0000004100)=[{{&(0x7f0000000000)=@vsock={0x28, 0x0, 0x0, @my}, 0x80, &(0x7f0000002380)=[{&(0x7f0000000080)=""/124, 0x7c}, {&(0x7f0000000140)=""/148, 0x94}, {&(0x7f0000000280)=""/4096, 0x1000}, {&(0x7f0000001280)=""/4096, 0x1000}, {&(0x7f0000002280)=""/227, 0xe3}], 0x5}, 0x20000000}, {{&(0x7f0000002400)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @local}}, 0x80, &(0x7f0000003640)=[{&(0x7f0000002480)=""/4096, 0x1000}, {&(0x7f0000003480)=""/128, 0x80}, {&(0x7f0000003500)=""/149, 0x95}, {&(0x7f00000035c0)=""/30, 0x1e}, {&(0x7f0000003600)=""/33, 0x21}], 0x5, &(0x7f00000036c0)=""/150, 0x96}, 0x200}, {{&(0x7f0000003780)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, 0x80, &(0x7f0000003e00)=[{&(0x7f0000003800)=""/116, 0x74}, {&(0x7f0000003880)=""/22, 0x16}, {&(0x7f00000038c0)=""/207, 0xcf}, {&(0x7f00000039c0)=""/225, 0xe1}, {&(0x7f0000003ac0)=""/11, 0xb}, {&(0x7f0000003b00)=""/104, 0x68}, {&(0x7f0000003b80)=""/149, 0x95}, {&(0x7f0000003c40)=""/70, 0x46}, {&(0x7f0000003cc0)=""/115, 0x73}, {&(0x7f0000003d40)=""/173, 0xad}], 0xa, &(0x7f0000003ec0)=""/112, 0x70}, 0x8}, {{&(0x7f0000003f40)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @local}}, 0x80, &(0x7f0000004080)=[{&(0x7f0000003fc0)=""/59, 0x3b}, {&(0x7f0000004000)=""/90, 0x5a}], 0x2, &(0x7f00000040c0)}, 0xfffffffe}], 0x4, 0x0, &(0x7f0000004200)={0x77359400}) 382.423µs ago: executing program 2 (id=474): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x39, &(0x7f0000000080)=ANY=[@ANYBLOB="3c1204"], 0x98) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000001380)=@newqdisc={0x48, 0x24, 0x3fe3aa0262d8c583, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x10, 0xe}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x1c, 0x2, [@TCA_FQ_RATE_ENABLE={0x8, 0x5, 0x1}, @TCA_FQ_FLOW_REFILL_DELAY={0x8, 0x9, 0x3}, @TCA_FQ_ORPHAN_MASK={0x8, 0xa, 0xaced}]}}]}, 0x48}}, 0x4048000) r3 = socket$phonet_pipe(0x23, 0x5, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x17, 0x4, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, [@kfunc={0x85, 0x0, 0x2, 0xd00, 0x1}]}, &(0x7f0000000280)='GPL\x00', 0xd, 0xfe7, &(0x7f0000000340)=""/4071, 0x40f00}, 0x94) getsockopt$PNPIPE_HANDLE(r3, 0x113, 0x3, 0x0, &(0x7f00000000c0)) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000100)=ANY=[@ANYRES32=r0], 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000300)=[@in6={0xa, 0x4e20, 0x44, @dev={0xfe, 0x80, '\x00', 0x42}, 0x5}]}, &(0x7f0000000140)=0x10) 0s ago: executing program 0 (id=475): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) setuid(0xee01) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="600000001200010300000000000000000200"/56, @ANYRES32=0x0, @ANYBLOB="0000000000f91900ffffffef000000021400010007"], 0x60}}, 0x0) 0s ago: executing program 3 (id=476): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0x5, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x359}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="230000000800000002000000ffff000005"], 0x48) r1 = openat$dm_control(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$DM_DEV_CREATE(r1, 0xc138fd03, &(0x7f00000002c0)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x88001, 0x0, 0x0, {0x0, {'syz', 0x0, '0\x00'}}}) ioctl$DM_TABLE_LOAD(r1, 0xc138fd09, &(0x7f00000008c0)={0x4, 0x0, 0x0, 0x190, 0x138, 0x1, 0x0, 0x0, 0x0, 0x0, @by_dev={r2}, [@snapshot={0x0, 0x1008, 0x0, 0x58, 'snapshot\x00', {@ram={'/dev/ram', 0x0}, 0x20, @ram={'/dev/ram', 0x0}, 0x20, 'P', 0x20, '0', ' 1 discard_zeroes_cow'}}]}) r3 = syz_open_dev$dri(&(0x7f0000000140), 0x0, 0x0) ioctl$DRM_IOCTL_SET_VERSION(r3, 0xc0106407, &(0x7f00000001c0)={0xffffffff, 0x2, 0x1, 0x80000000}) ioctl$DM_TABLE_LOAD(r1, 0xc138fd09, &(0x7f0000000580)={0x4, 0x0, 0x0, 0x168, 0x138, 0x1, 0x0, 0xda01, 0x0, 0x0, @by_name={0x0, {'syz', 0x0, '0\x00'}}, [@error={0x0, 0x2890, 0x0, 0x30}]}) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000040)={r0, &(0x7f0000000080), 0x0}, 0x20) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) kernel console output (not intermixed with test programs): 8.555227][ T4725] cgroup: Unknown subsys name 'net' [ 28.725288][ T4725] cgroup: Unknown subsys name 'cpuset' [ 28.726701][ T4725] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 28.899183][ T4725] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SS [ 29.706418][ T4739] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 29.708383][ T4738] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 29.708693][ T4741] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 29.711619][ T4741] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 29.712732][ T4741] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 29.713431][ T4741] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 29.714301][ T4738] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 29.714358][ T4738] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 29.715005][ T4738] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 29.715216][ T4738] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 29.717396][ T4738] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 29.721551][ T4739] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 29.723881][ T50] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 29.730117][ T4739] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 29.730369][ T4739] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 29.730521][ T4739] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 29.730813][ T4739] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 29.731020][ T4739] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 29.735539][ T4746] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 29.743908][ T4746] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 29.768094][ T4744] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 29.772415][ T4744] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 29.778099][ T4744] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 29.778728][ T4744] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 29.779081][ T4744] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 29.921857][ T4736] rxe_eth0 speed is unknown, defaulting to 1000 [ 29.922122][ T4736] rxe_eth0 speed is unknown, defaulting to 1000 [ 29.922498][ T4736] rxe_eth0 speed is unknown, defaulting to 1000 [ 29.927822][ T4743] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 29.929398][ T4748] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 29.979643][ T4737] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 29.982698][ T4745] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 30.005786][ T4736] infiniband rxe0: set active [ 30.006217][ T24] rxe_eth0 speed is unknown, defaulting to 1000 [ 30.006294][ T4736] infiniband rxe0: added rxe_eth0 [ 30.006969][ T4737] rxe_eth0 speed is unknown, defaulting to 1000 [ 30.038561][ T4736] RDS/IB: rxe0: added [ 30.038630][ T4736] smc: adding ib device rxe0 with port count 1 [ 30.038651][ T4736] smc: ib device rxe0 port 1 has no pnetid [ 30.047981][ T24] rxe_eth0 speed is unknown, defaulting to 1000 [ 30.077735][ T4736] rxe_eth0 speed is unknown, defaulting to 1000 [ 30.142258][ T4736] rxe_eth0 speed is unknown, defaulting to 1000 [ 30.217057][ T4736] rxe_eth0 speed is unknown, defaulting to 1000 [ 30.217169][ T1158] rxe_eth0 speed is unknown, defaulting to 1000 [ 30.229159][ T4748] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.229194][ T4748] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.229260][ T4748] bridge_slave_0: entered allmulticast mode [ 30.238595][ T4748] bridge_slave_0: entered promiscuous mode [ 30.239642][ T4748] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.239663][ T4748] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.239711][ T4748] bridge_slave_1: entered allmulticast mode [ 30.240101][ T4748] bridge_slave_1: entered promiscuous mode [ 30.253242][ T1158] rxe_eth0 speed is unknown, defaulting to 1000 [ 30.277010][ T4743] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.277075][ T4743] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.277136][ T4743] bridge_slave_0: entered allmulticast mode [ 30.277569][ T4743] bridge_slave_0: entered promiscuous mode [ 30.278352][ T4743] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.278372][ T4743] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.278418][ T4743] bridge_slave_1: entered allmulticast mode [ 30.278802][ T4743] bridge_slave_1: entered promiscuous mode [ 30.285380][ T4743] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.286247][ T4743] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.292333][ T4743] team0: Port device team_slave_0 added [ 30.303650][ T4748] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.306454][ T4743] team0: Port device team_slave_1 added [ 30.315936][ T4748] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.320098][ T4736] rxe_eth0 speed is unknown, defaulting to 1000 [ 30.328418][ T4748] team0: Port device team_slave_0 added [ 30.329086][ T4748] team0: Port device team_slave_1 added [ 30.355495][ T4743] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.355506][ T4743] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.355521][ T4743] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.369806][ T4748] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.369814][ T4748] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.369826][ T4748] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.370597][ T4748] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.370603][ T4748] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.370613][ T4748] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.371118][ T4743] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.371126][ T4743] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.371136][ T4743] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.425433][ T4748] hsr_slave_0: entered promiscuous mode [ 30.425782][ T4748] hsr_slave_1: entered promiscuous mode [ 30.428956][ T4745] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.429017][ T4745] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.429071][ T4745] bridge_slave_0: entered allmulticast mode [ 30.429490][ T4745] bridge_slave_0: entered promiscuous mode [ 30.455334][ T4743] hsr_slave_0: entered promiscuous mode [ 30.455610][ T4743] hsr_slave_1: entered promiscuous mode [ 30.455788][ T4743] debugfs: 'hsr0' already exists in 'hsr' [ 30.455827][ T4743] Cannot create hsr debugfs directory [ 30.455955][ T4745] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.455986][ T4745] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.456043][ T4745] bridge_slave_1: entered allmulticast mode [ 30.456445][ T4745] bridge_slave_1: entered promiscuous mode [ 30.479593][ T4745] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.480485][ T4745] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.494586][ T4737] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.494644][ T4737] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.494693][ T4737] bridge_slave_0: entered allmulticast mode [ 30.495107][ T4737] bridge_slave_0: entered promiscuous mode [ 30.510973][ T4745] team0: Port device team_slave_0 added [ 30.513125][ T4745] team0: Port device team_slave_1 added [ 30.519042][ T4737] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.519069][ T4737] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.519126][ T4737] bridge_slave_1: entered allmulticast mode [ 30.519526][ T4737] bridge_slave_1: entered promiscuous mode [ 30.541743][ T4745] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.541756][ T4745] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.541772][ T4745] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.542729][ T4737] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.556406][ T4745] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.556417][ T4745] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.556432][ T4745] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.574595][ T4737] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.587466][ T4745] hsr_slave_0: entered promiscuous mode [ 30.587744][ T4745] hsr_slave_1: entered promiscuous mode [ 30.587921][ T4745] debugfs: 'hsr0' already exists in 'hsr' [ 30.587931][ T4745] Cannot create hsr debugfs directory [ 30.592946][ T4737] team0: Port device team_slave_0 added [ 30.606857][ T4737] team0: Port device team_slave_1 added [ 30.615372][ T4737] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.615381][ T4737] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.615396][ T4737] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.617371][ T4737] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.617378][ T4737] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.617392][ T4737] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.651112][ T4748] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 30.653303][ T4748] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 30.666012][ T4737] hsr_slave_0: entered promiscuous mode [ 30.666279][ T4737] hsr_slave_1: entered promiscuous mode [ 30.666443][ T4737] debugfs: 'hsr0' already exists in 'hsr' [ 30.666458][ T4737] Cannot create hsr debugfs directory [ 30.668187][ T4748] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 30.669363][ T4748] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 30.676036][ T4748] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 30.678671][ T4748] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 30.678963][ T4748] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 30.681231][ T4748] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 30.724688][ T4736] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.724888][ T4736] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.724995][ T4736] bridge_slave_0: entered allmulticast mode [ 30.725469][ T4736] bridge_slave_0: entered promiscuous mode [ 30.726731][ T4736] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.726752][ T4736] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.726833][ T4736] bridge_slave_1: entered allmulticast mode [ 30.727273][ T4736] bridge_slave_1: entered promiscuous mode [ 30.736684][ T4748] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.736717][ T4748] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.736863][ T4748] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.736891][ T4748] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.737847][ T4743] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 30.738842][ T4743] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 30.739118][ T4743] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 30.740106][ T4743] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 30.755079][ T4743] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 30.756731][ T4743] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 30.757034][ T4743] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 30.757927][ T4743] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 30.765028][ T4736] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.775403][ T4736] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.789526][ T4745] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 30.790939][ T4745] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 30.791735][ T4736] team0: Port device team_slave_0 added [ 30.792438][ T4736] team0: Port device team_slave_1 added [ 30.799909][ T4745] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 30.801297][ T4745] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 30.801755][ T4745] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 30.802650][ T4745] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 30.807811][ T4736] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.807819][ T4736] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.807830][ T4736] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.808377][ T4736] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.808383][ T4736] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.808395][ T4736] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.818830][ T4736] hsr_slave_0: entered promiscuous mode [ 30.819117][ T4736] hsr_slave_1: entered promiscuous mode [ 30.819308][ T4736] debugfs: 'hsr0' already exists in 'hsr' [ 30.819319][ T4736] Cannot create hsr debugfs directory [ 30.841750][ T4745] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 30.844845][ T4745] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 30.856731][ T4743] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.856759][ T4743] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.856834][ T4743] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.856862][ T4743] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.895508][ T4737] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 30.896888][ T4737] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 30.897176][ T4737] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 30.898268][ T4737] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 30.899044][ T4737] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 30.900216][ T4737] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 30.900529][ T4737] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 30.901965][ T4737] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 30.903169][ T4745] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.903195][ T4745] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.903263][ T4745] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.903293][ T4745] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.916287][ T4748] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.919755][ T4748] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.935565][ T400] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.935989][ T400] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.938310][ T400] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.938951][ T400] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.947980][ T4745] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.960141][ T4745] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.970083][ T4736] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 30.971613][ T4736] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 30.978310][ T400] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.978342][ T400] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.978779][ T400] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.978801][ T400] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.985122][ T4745] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 30.985135][ T4745] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 30.995521][ T4736] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 30.996847][ T4736] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 30.997151][ T4736] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 30.997972][ T4736] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 31.005475][ T4736] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 31.012179][ T4736] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 31.039135][ T4743] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.071015][ T4743] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.082257][ T40] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.082283][ T40] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.082829][ T40] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.082864][ T40] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.093020][ T4737] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.102520][ T4743] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 31.102533][ T4743] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 31.119502][ T4736] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.122666][ T4736] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.132939][ T4737] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.142506][ T1391] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.142534][ T1391] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.143117][ T1391] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.143136][ T1391] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.155782][ T1391] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.155809][ T1391] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.156311][ T1391] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.156330][ T1391] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.159848][ T4745] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.205924][ T4745] veth0_vlan: entered promiscuous mode [ 31.213433][ T4745] veth1_vlan: entered promiscuous mode [ 31.243637][ T4745] veth0_macvtap: entered promiscuous mode [ 31.250167][ T4745] veth1_macvtap: entered promiscuous mode [ 31.259648][ T4745] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.260676][ T4745] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.266018][ T400] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.266152][ T400] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.266182][ T400] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.266206][ T400] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.281108][ T4748] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.315980][ T1187] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.315991][ T1187] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.349344][ T1391] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.349359][ T1391] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.352544][ T4748] veth0_vlan: entered promiscuous mode [ 31.363393][ T4748] veth1_vlan: entered promiscuous mode [ 31.372257][ T4748] veth0_macvtap: entered promiscuous mode [ 31.377251][ T4748] veth1_macvtap: entered promiscuous mode [ 31.380886][ T4748] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.381988][ T4748] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.418744][ T4743] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.425780][ T400] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.425791][ T400] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.429351][ T4745] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 31.441478][ T4743] veth0_vlan: entered promiscuous mode [ 31.443730][ T4743] veth1_vlan: entered promiscuous mode [ 31.449217][ T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.449252][ T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.449277][ T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.464437][ T4743] veth0_macvtap: entered promiscuous mode [ 31.465740][ T4743] veth1_macvtap: entered promiscuous mode [ 31.478141][ T4743] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.479207][ T4743] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.499699][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.499710][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.506470][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.513990][ T1391] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.514034][ T1391] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.514052][ T1391] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.515419][ T4737] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.536822][ T1391] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.536835][ T1391] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.550114][ T4736] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.557750][ T1391] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.557763][ T1391] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.562684][ T4737] veth0_vlan: entered promiscuous mode [ 31.572893][ T4737] veth1_vlan: entered promiscuous mode [ 31.584717][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.593594][ T4737] veth0_macvtap: entered promiscuous mode [ 31.599176][ T4737] veth1_macvtap: entered promiscuous mode [ 31.606403][ T4737] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.607940][ T4737] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.611334][ T144] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.611541][ T144] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.611608][ T144] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.625605][ T1391] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.642516][ T1391] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.642529][ T1391] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.718590][ T400] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.718606][ T400] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.753365][ T4736] veth0_vlan: entered promiscuous mode [ 31.766053][ T4736] veth1_vlan: entered promiscuous mode [ 31.778607][ T4741] Bluetooth: hci2: command tx timeout [ 31.778789][ T4741] Bluetooth: hci3: command tx timeout [ 31.778982][ T4741] Bluetooth: hci0: command tx timeout [ 31.779124][ T4741] Bluetooth: hci1: command tx timeout [ 31.824329][ T4944] Bluetooth: MGMT ver 1.23 [ 31.873393][ T4944] Zero length message leads to an empty skb [ 31.878460][ T4741] Bluetooth: hci4: command tx timeout [ 32.021182][ T4736] veth0_macvtap: entered promiscuous mode [ 32.023499][ T4736] veth1_macvtap: entered promiscuous mode [ 32.027822][ T4736] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.037786][ T4736] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.041765][ T1391] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.041948][ T1391] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.041981][ T1391] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.041999][ T1391] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.142252][ T1391] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.142267][ T1391] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.158670][ T1391] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.158680][ T1391] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.229829][ T4950] process 'syz.1.2' launched '/dev/fd/9' with NULL argv: empty string added [ 32.540613][ T4955] loop0: detected capacity change from 0 to 1024 [ 32.542267][ T4955] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 32.542284][ T4955] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (30349!=20869) [ 32.543073][ T4955] EXT4-fs (loop0): invalid journal inode [ 32.543116][ T4955] EXT4-fs (loop0): can't get journal size [ 32.552020][ T4955] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 32.659531][ T4958] loop2: detected capacity change from 0 to 512 [ 32.680993][ T4743] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.718756][ T4958] loop2: detected capacity change from 0 to 256 [ 33.278370][ T4966] input: syz0 as /devices/virtual/input/input2 [ 33.853907][ T4744] Bluetooth: hci1: command tx timeout [ 33.853924][ T4741] Bluetooth: hci0: command tx timeout [ 33.853935][ T4739] Bluetooth: hci2: command tx timeout [ 33.935938][ T4744] Bluetooth: hci4: command tx timeout [ 34.275284][ T4982] loop1: detected capacity change from 0 to 1024 [ 34.290113][ T4982] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 34.691285][ T4994] netlink: 580 bytes leftover after parsing attributes in process `syz.3.17'. [ 34.691303][ T4994] netlink: 188 bytes leftover after parsing attributes in process `syz.3.17'. [ 34.691319][ T4994] netlink: 8 bytes leftover after parsing attributes in process `syz.3.17'. [ 34.734476][ T4744] Bluetooth: hci3: command tx timeout [ 34.759340][ T4995] Bluetooth: MGMT ver 1.23 [ 34.760864][ T4995] warning: `syz.3.17' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 35.273148][ T4737] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.651491][ T5022] loop1: detected capacity change from 0 to 1024 [ 35.934007][ T4741] Bluetooth: hci2: command tx timeout [ 35.935048][ T4739] Bluetooth: hci0: command tx timeout [ 35.935346][ T4744] Bluetooth: hci1: command tx timeout [ 35.967537][ T5022] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 35.983500][ T5029] netlink: 12 bytes leftover after parsing attributes in process `syz.4.27'. [ 36.033836][ T4744] Bluetooth: hci4: command tx timeout [ 36.041904][ T5029] xfrm1: entered promiscuous mode [ 36.041919][ T5029] xfrm1: entered allmulticast mode [ 36.423548][ T5039] syz.2.29 uses obsolete (PF_INET,SOCK_PACKET) [ 36.512054][ T5041] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 36.521202][ T5042] loop3: detected capacity change from 0 to 512 [ 36.530339][ T4737] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.551078][ T5042] EXT4-fs error (device loop3): ext4_orphan_get:1403: inode #15: comm syz.3.30: iget: bad i_size value: 38620345925642 [ 36.551162][ T5042] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 36.551741][ T5042] EXT4-fs error (device loop3): ext4_orphan_get:1408: comm syz.3.30: couldn't read orphan inode 15 (err -117) [ 36.551785][ T5042] loop3: lost filesystem error report for type 5 error -117 [ 36.552329][ T5042] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 36.596855][ T5047] netlink: 8 bytes leftover after parsing attributes in process `syz.2.32'. [ 36.601832][ T4745] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.644602][ T5053] loop5: detected capacity change from 0 to 7 [ 36.650060][ T5053] Dev loop5: unable to read RDB block 7 [ 36.650076][ T5053] loop5: AHDI p1 p2 [ 36.650087][ T5053] loop5: partition table partially beyond EOD, truncated [ 36.650184][ T5053] loop5: p1 start 1818582900 is beyond EOD, truncated [ 36.712346][ T5065] loop3: detected capacity change from 0 to 8 [ 36.721730][ T5065] squashfs: SQUASHFS error: Xattrs in filesystem, these will be ignored [ 36.721742][ T5065] unable to read xattr id index table [ 36.727277][ T5065] squashfs image failed sanity check [ 36.943880][ T4744] Bluetooth: hci3: command tx timeout [ 37.066815][ T1200] Bluetooth: hci5: Frame reassembly failed (-84) [ 37.887576][ T5094] FAULT_INJECTION: forcing a failure. [ 37.887576][ T5094] name failslab, interval 1, probability 0, space 0, times 0 [ 37.887596][ T5094] CPU: 1 UID: 0 PID: 5094 Comm: syz.2.45 Tainted: G L syzkaller #0 PREEMPT [ 37.887611][ T5094] Tainted: [L]=SOFTLOCKUP [ 37.887614][ T5094] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 37.887620][ T5094] Call trace: [ 37.887624][ T5094] show_stack+0x2c/0x3c (C) [ 37.887640][ T5094] __dump_stack+0x30/0x40 [ 37.887651][ T5094] dump_stack_lvl+0xd8/0x12c [ 37.887659][ T5094] dump_stack+0x1c/0x28 [ 37.887667][ T5094] should_fail_ex+0x418/0x58c [ 37.887678][ T5094] should_failslab+0xc4/0x120 [ 37.887688][ T5094] __kmalloc_node_track_caller_noprof+0x108/0x6e0 [ 37.887700][ T5094] krealloc_node_align_noprof+0x1b4/0x3d0 [ 37.887711][ T5094] bpf_push_jmp_history+0x23c/0x5a0 [ 37.887722][ T5094] do_check_common+0x1968/0x367c [ 37.887733][ T5094] do_check_main+0x94/0x1b8 [ 37.887741][ T5094] bpf_check+0x1e00/0x2414 [ 37.887750][ T5094] bpf_prog_load+0xf4c/0x1554 [ 37.887761][ T5094] __sys_bpf+0x7d4/0x82c [ 37.887771][ T5094] __arm64_sys_bpf+0xd0/0xec [ 37.887782][ T5094] invoke_syscall+0x98/0x244 [ 37.887790][ T5094] el0_svc_common+0xec/0x23c [ 37.887798][ T5094] do_el0_svc+0x4c/0x5c [ 37.887806][ T5094] el0_svc+0x60/0x1d8 [ 37.887815][ T5094] el0t_64_sync_handler+0x44/0x104 [ 37.887823][ T5094] el0t_64_sync+0x198/0x19c [ 37.943463][ T5098] ======================================================= [ 37.943463][ T5098] WARNING: The mand mount option has been deprecated and [ 37.943463][ T5098] and is ignored by this kernel. Remove the mand [ 37.943463][ T5098] option from the mount to silence this warning. [ 37.943463][ T5098] ======================================================= [ 38.024172][ T4741] Bluetooth: hci0: command tx timeout [ 38.024182][ T4746] Bluetooth: hci2: command tx timeout [ 38.024214][ T4739] Bluetooth: hci1: command tx timeout [ 38.043512][ T5101] nvme_fc: nvme_fc_parse_traddr: bad traddr string [ 38.043667][ T5100] batadv0: entered allmulticast mode [ 38.093897][ T4739] Bluetooth: hci4: command tx timeout [ 38.153951][ T5112] No such timeout policy "syz1" [ 38.226543][ T5115] netlink: 'syz.2.52': attribute type 5 has an invalid length. [ 38.383014][ T5117] loop1: detected capacity change from 0 to 8 [ 38.388152][ T5117] squashfs: SQUASHFS error: Xattrs in filesystem, these will be ignored [ 38.388164][ T5117] unable to read xattr id index table [ 38.388450][ T5117] squashfs image failed sanity check [ 38.470741][ T5120] loop3: detected capacity change from 0 to 1024 [ 38.496240][ T5120] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 39.134455][ T4739] Bluetooth: hci5: command 0x1003 tx timeout [ 39.134679][ T4744] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 39.268363][ T5140] loop0: detected capacity change from 0 to 256 [ 39.271546][ T5140] vfat: Unknown parameter 'shor`name' [ 39.321306][ T5142] syz_tun: entered allmulticast mode [ 39.321778][ T5141] syz_tun: left allmulticast mode [ 39.351751][ T4745] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.598721][ T5144] loop0: detected capacity change from 0 to 128 [ 39.604894][ T5151] binder: 5146:5151 ioctl c00c6211 0 returned -14 [ 39.606848][ T5152] binder: 5146:5152 ioctl c00c6211 0 returned -14 [ 39.622392][ T5144] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 39.688671][ T4743] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 39.721139][ T5167] loop0: detected capacity change from 0 to 1024 [ 39.721577][ T5167] EXT4-fs: Ignoring removed bh option [ 39.740843][ T5167] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 39.756692][ T5170] netlink: 'syz.3.68': attribute type 5 has an invalid length. [ 39.779278][ T5174] loop4: detected capacity change from 0 to 4096 [ 39.796487][ T4743] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.807632][ T5174] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.820564][ T5174] 9p: Bad value for 'rfdno' [ 39.832030][ T5174] EXT4-fs error (device loop4): ext4_do_update_inode:5801: inode #15: comm syz.4.72: corrupted inode contents [ 39.838801][ T5179] loop2: detected capacity change from 0 to 1024 [ 39.839618][ T5174] EXT4-fs error (device loop4): ext4_dirty_inode:6736: inode #15: comm syz.4.72: mark_inode_dirty error [ 39.840985][ T5174] EXT4-fs error (device loop4): ext4_do_update_inode:5801: inode #15: comm syz.4.72: corrupted inode contents [ 39.841757][ T5174] EXT4-fs error (device loop4): __ext4_ext_dirty:207: inode #15: comm syz.4.72: mark_inode_dirty error [ 39.842220][ T5174] EXT4-fs error (device loop4): ext4_do_update_inode:5801: inode #15: comm syz.4.72: corrupted inode contents [ 39.842714][ T5181] loop5: detected capacity change from 0 to 7 [ 39.843149][ T5174] EXT4-fs error (device loop4): __ext4_ext_dirty:207: inode #15: comm syz.4.72: mark_inode_dirty error [ 39.843428][ T5174] EXT4-fs error (device loop4): ext4_do_update_inode:5801: inode #15: comm syz.4.72: corrupted inode contents [ 39.860601][ T5181] Dev loop5: unable to read RDB block 7 [ 39.860619][ T5181] loop5: AHDI p1 p2 [ 39.860629][ T5181] loop5: partition table partially beyond EOD, truncated [ 39.860713][ T5181] loop5: p1 start 1818582900 is beyond EOD, truncated [ 39.863242][ T5174] EXT4-fs error (device loop4): ext4_truncate:4721: inode #15: comm syz.4.72: mark_inode_dirty error [ 39.866610][ T5174] EXT4-fs error (device loop4) in ext4_setattr:6247: Corrupt filesystem [ 39.879242][ T5179] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 39.920694][ T5187] netlink: 12 bytes leftover after parsing attributes in process `syz.0.77'. [ 39.922311][ T5187] xfrm1: entered promiscuous mode [ 39.922322][ T5187] xfrm1: entered allmulticast mode [ 39.942336][ T5189] FAULT_INJECTION: forcing a failure. [ 39.942336][ T5189] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 39.942360][ T5189] CPU: 0 UID: 0 PID: 5189 Comm: syz.0.78 Tainted: G L syzkaller #0 PREEMPT [ 39.942373][ T5189] Tainted: [L]=SOFTLOCKUP [ 39.942377][ T5189] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 39.942382][ T5189] Call trace: [ 39.942385][ T5189] show_stack+0x2c/0x3c (C) [ 39.942407][ T5189] __dump_stack+0x30/0x40 [ 39.942421][ T5189] dump_stack_lvl+0xd8/0x12c [ 39.942430][ T5189] dump_stack+0x1c/0x28 [ 39.942444][ T5189] should_fail_ex+0x418/0x58c [ 39.942455][ T5189] should_fail+0x14/0x24 [ 39.942463][ T5189] should_fail_usercopy+0x20/0x30 [ 39.942472][ T5189] _inline_copy_from_user+0x3c/0x174 [ 39.942482][ T5189] bpf_test_init+0xd8/0x154 [ 39.942490][ T5189] bpf_prog_test_run_flow_dissector+0x1bc/0x500 [ 39.942499][ T5189] bpf_prog_test_run+0x1e0/0x250 [ 39.942509][ T5189] __sys_bpf+0x6bc/0x82c [ 39.942518][ T5189] __arm64_sys_bpf+0xd0/0xec [ 39.942527][ T5189] invoke_syscall+0x98/0x244 [ 39.942535][ T5189] el0_svc_common+0xec/0x23c [ 39.942542][ T5189] do_el0_svc+0x4c/0x5c [ 39.942549][ T5189] el0_svc+0x60/0x1d8 [ 39.942557][ T5189] el0t_64_sync_handler+0x44/0x104 [ 39.942564][ T5189] el0t_64_sync+0x198/0x19c [ 40.306022][ T5197] FAULT_INJECTION: forcing a failure. [ 40.306022][ T5197] name failslab, interval 1, probability 0, space 0, times 0 [ 40.306056][ T5197] CPU: 1 UID: 0 PID: 5197 Comm: syz.0.80 Tainted: G L syzkaller #0 PREEMPT [ 40.306069][ T5197] Tainted: [L]=SOFTLOCKUP [ 40.306073][ T5197] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 40.306079][ T5197] Call trace: [ 40.306082][ T5197] show_stack+0x2c/0x3c (C) [ 40.306097][ T5197] __dump_stack+0x30/0x40 [ 40.306106][ T5197] dump_stack_lvl+0xd8/0x12c [ 40.306114][ T5197] dump_stack+0x1c/0x28 [ 40.306122][ T5197] should_fail_ex+0x418/0x58c [ 40.306133][ T5197] should_failslab+0xc4/0x120 [ 40.306143][ T5197] __kmalloc_node_track_caller_noprof+0x108/0x6e0 [ 40.306154][ T5197] krealloc_node_align_noprof+0x1b4/0x3d0 [ 40.306165][ T5197] bpf_push_jmp_history+0x23c/0x5a0 [ 40.306177][ T5197] check_stack_arg_write+0x2ec/0x420 [ 40.306188][ T5197] check_store_reg+0x338/0x540 [ 40.306197][ T5197] do_check_insn+0x668/0xea48 [ 40.306206][ T5197] do_check_common+0x20f0/0x367c [ 40.306216][ T5197] do_check_main+0x94/0x1b8 [ 40.306224][ T5197] bpf_check+0x1e00/0x2414 [ 40.306233][ T5197] bpf_prog_load+0xf4c/0x1554 [ 40.306244][ T5197] __sys_bpf+0x7d4/0x82c [ 40.306254][ T5197] __arm64_sys_bpf+0xd0/0xec [ 40.306264][ T5197] invoke_syscall+0x98/0x244 [ 40.306273][ T5197] el0_svc_common+0xec/0x23c [ 40.306281][ T5197] do_el0_svc+0x4c/0x5c [ 40.306289][ T5197] el0_svc+0x60/0x1d8 [ 40.306298][ T5197] el0t_64_sync_handler+0x44/0x104 [ 40.306306][ T5197] el0t_64_sync+0x198/0x19c [ 40.308599][ T4736] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.339306][ T5201] loop1: detected capacity change from 0 to 256 [ 40.342099][ T5201] vfat: Unknown parameter 'nnonumtail' [ 40.386336][ T5204] netlink: 'syz.4.82': attribute type 8 has an invalid length. [ 40.478773][ T5214] sctp: [Deprecated]: syz.1.85 (pid 5214) Use of struct sctp_assoc_value in delayed_ack socket option. [ 40.478773][ T5214] Use struct sctp_sack_info instead [ 40.481648][ T5206] loop1: detected capacity change from 0 to 256 [ 40.490222][ T5206] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 40.491727][ T5206] FAT-fs (loop1): error, corrupted file size (i_pos 196, 16779264) [ 40.491740][ T5206] FAT-fs (loop1): Filesystem has been set read-only [ 40.755346][ T5219] atomic_op 00000000c1cab465 conn xmit_atomic 0000000000000000 [ 41.016227][ T4748] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.048912][ T5223] netlink: 24 bytes leftover after parsing attributes in process `syz.2.87'. [ 41.079729][ T5222] netlink: 16 bytes leftover after parsing attributes in process `syz.3.88'. [ 41.203880][ T24] rxe_eth0 speed is unknown, defaulting to 1000 [ 41.207258][ T5233] syz_tun: entered allmulticast mode [ 41.208131][ T5231] syz_tun: left allmulticast mode [ 42.182211][ T5263] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 42.802259][ T5281] FAULT_INJECTION: forcing a failure. [ 42.802259][ T5281] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 42.802280][ T5281] CPU: 1 UID: 0 PID: 5281 Comm: syz.0.103 Tainted: G L syzkaller #0 PREEMPT [ 42.802292][ T5281] Tainted: [L]=SOFTLOCKUP [ 42.802295][ T5281] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 42.802300][ T5281] Call trace: [ 42.802302][ T5281] show_stack+0x2c/0x3c (C) [ 42.802316][ T5281] __dump_stack+0x30/0x40 [ 42.802325][ T5281] dump_stack_lvl+0xd8/0x12c [ 42.802332][ T5281] dump_stack+0x1c/0x28 [ 42.802339][ T5281] should_fail_ex+0x418/0x58c [ 42.802349][ T5281] should_fail+0x14/0x24 [ 42.802356][ T5281] should_fail_usercopy+0x20/0x30 [ 42.802365][ T5281] bpf_test_finish+0x730/0xa70 [ 42.802374][ T5281] bpf_prog_test_run_flow_dissector+0x3f0/0x500 [ 42.802383][ T5281] bpf_prog_test_run+0x1e0/0x250 [ 42.802393][ T5281] __sys_bpf+0x6bc/0x82c [ 42.802402][ T5281] __arm64_sys_bpf+0xd0/0xec [ 42.802411][ T5281] invoke_syscall+0x98/0x244 [ 42.802419][ T5281] el0_svc_common+0xec/0x23c [ 42.802426][ T5281] do_el0_svc+0x4c/0x5c [ 42.802433][ T5281] el0_svc+0x60/0x1d8 [ 42.802441][ T5281] el0t_64_sync_handler+0x44/0x104 [ 42.802455][ T5281] el0t_64_sync+0x198/0x19c [ 42.804582][ T5289] overlayfs: workdir and upperdir must be separate subtrees [ 42.969300][ T4745] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.007424][ T5310] netlink: 68 bytes leftover after parsing attributes in process `syz.0.113'. [ 43.018503][ T5310] FAULT_INJECTION: forcing a failure. [ 43.018503][ T5310] name failslab, interval 1, probability 0, space 0, times 0 [ 43.018527][ T5310] CPU: 1 UID: 0 PID: 5310 Comm: syz.0.113 Tainted: G L syzkaller #0 PREEMPT [ 43.018543][ T5310] Tainted: [L]=SOFTLOCKUP [ 43.018546][ T5310] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 43.018552][ T5310] Call trace: [ 43.018555][ T5310] show_stack+0x2c/0x3c (C) [ 43.018571][ T5310] __dump_stack+0x30/0x40 [ 43.018580][ T5310] dump_stack_lvl+0xd8/0x12c [ 43.018588][ T5310] dump_stack+0x1c/0x28 [ 43.018596][ T5310] should_fail_ex+0x418/0x58c [ 43.018607][ T5310] should_failslab+0xc4/0x120 [ 43.018617][ T5310] kmem_cache_alloc_lru_noprof+0x98/0x5d8 [ 43.018628][ T5310] sock_alloc_inode+0x30/0x180 [ 43.018636][ T5310] alloc_inode+0x68/0x198 [ 43.018649][ T5310] sock_alloc+0x4c/0x204 [ 43.018659][ T5310] __sock_create+0x108/0x670 [ 43.018670][ T5310] __sys_socket_create+0xc0/0x11c [ 43.018681][ T5310] __sys_socket+0x44/0xec [ 43.018691][ T5310] __arm64_sys_socket+0x84/0x9c [ 43.018702][ T5310] invoke_syscall+0x98/0x244 [ 43.018711][ T5310] el0_svc_common+0xec/0x23c [ 43.018719][ T5310] do_el0_svc+0x4c/0x5c [ 43.018727][ T5310] el0_svc+0x60/0x1d8 [ 43.018736][ T5310] el0t_64_sync_handler+0x44/0x104 [ 43.018744][ T5310] el0t_64_sync+0x198/0x19c [ 43.018756][ T5310] socket: no more sockets [ 43.136142][ T5322] FAULT_INJECTION: forcing a failure. [ 43.136142][ T5322] name failslab, interval 1, probability 0, space 0, times 0 [ 43.136164][ T5322] CPU: 0 UID: 0 PID: 5322 Comm: syz.0.116 Tainted: G L syzkaller #0 PREEMPT [ 43.136176][ T5322] Tainted: [L]=SOFTLOCKUP [ 43.136179][ T5322] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 43.136184][ T5322] Call trace: [ 43.136187][ T5322] show_stack+0x2c/0x3c (C) [ 43.136203][ T5322] __dump_stack+0x30/0x40 [ 43.136212][ T5322] dump_stack_lvl+0xd8/0x12c [ 43.136223][ T5322] dump_stack+0x1c/0x28 [ 43.136231][ T5322] should_fail_ex+0x418/0x58c [ 43.136242][ T5322] should_failslab+0xc4/0x120 [ 43.136252][ T5322] __kmalloc_node_track_caller_noprof+0x108/0x6e0 [ 43.136264][ T5322] krealloc_node_align_noprof+0x1b4/0x3d0 [ 43.136275][ T5322] bpf_push_jmp_history+0x23c/0x5a0 [ 43.136287][ T5322] check_stack_write+0x1534/0x1980 [ 43.136299][ T5322] check_mem_access+0xadc/0x1a3c [ 43.136309][ T5322] check_store_reg+0x2dc/0x540 [ 43.136319][ T5322] do_check_insn+0x668/0xea48 [ 43.136328][ T5322] do_check_common+0x20f0/0x367c [ 43.136337][ T5322] do_check_main+0x94/0x1b8 [ 43.136346][ T5322] bpf_check+0x1e00/0x2414 [ 43.136354][ T5322] bpf_prog_load+0xf4c/0x1554 [ 43.136366][ T5322] __sys_bpf+0x7d4/0x82c [ 43.136376][ T5322] __arm64_sys_bpf+0xd0/0xec [ 43.136387][ T5322] invoke_syscall+0x98/0x244 [ 43.136396][ T5322] el0_svc_common+0xec/0x23c [ 43.136404][ T5322] do_el0_svc+0x4c/0x5c [ 43.136412][ T5322] el0_svc+0x60/0x1d8 [ 43.136421][ T5322] el0t_64_sync_handler+0x44/0x104 [ 43.136429][ T5322] el0t_64_sync+0x198/0x19c [ 43.200571][ T5333] syz_tun: entered allmulticast mode [ 43.200900][ T5332] syz_tun: left allmulticast mode [ 43.235081][ T5337] FAULT_INJECTION: forcing a failure. [ 43.235081][ T5337] name failslab, interval 1, probability 0, space 0, times 0 [ 43.235103][ T5337] CPU: 0 UID: 0 PID: 5337 Comm: syz.2.121 Tainted: G L syzkaller #0 PREEMPT [ 43.235116][ T5337] Tainted: [L]=SOFTLOCKUP [ 43.235119][ T5337] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 43.235125][ T5337] Call trace: [ 43.235128][ T5337] show_stack+0x2c/0x3c (C) [ 43.235143][ T5337] __dump_stack+0x30/0x40 [ 43.235152][ T5337] dump_stack_lvl+0xd8/0x12c [ 43.235160][ T5337] dump_stack+0x1c/0x28 [ 43.235168][ T5337] should_fail_ex+0x418/0x58c [ 43.235179][ T5337] should_failslab+0xc4/0x120 [ 43.235189][ T5337] __kmalloc_node_track_caller_noprof+0x108/0x6e0 [ 43.235200][ T5337] krealloc_node_align_noprof+0x1b4/0x3d0 [ 43.235211][ T5337] bpf_push_jmp_history+0x23c/0x5a0 [ 43.235223][ T5337] do_check_common+0x1968/0x367c [ 43.235233][ T5337] do_check_main+0x94/0x1b8 [ 43.235242][ T5337] bpf_check+0x1e00/0x2414 [ 43.235250][ T5337] bpf_prog_load+0xf4c/0x1554 [ 43.235261][ T5337] __sys_bpf+0x7d4/0x82c [ 43.235272][ T5337] __arm64_sys_bpf+0xd0/0xec [ 43.235282][ T5337] invoke_syscall+0x98/0x244 [ 43.235291][ T5337] el0_svc_common+0xec/0x23c [ 43.235299][ T5337] do_el0_svc+0x4c/0x5c [ 43.235307][ T5337] el0_svc+0x60/0x1d8 [ 43.235316][ T5337] el0t_64_sync_handler+0x44/0x104 [ 43.235324][ T5337] el0t_64_sync+0x198/0x19c [ 43.247354][ T5339] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 43.296867][ T5336] netlink: 8 bytes leftover after parsing attributes in process `syz.0.122'. [ 43.296896][ T5336] netlink: 12 bytes leftover after parsing attributes in process `syz.0.122'. [ 43.686355][ T5355] fuse: Unknown parameter 'group[id' [ 43.707806][ T5361] set_capacity_and_notify: 3 callbacks suppressed [ 43.707819][ T5361] loop3: detected capacity change from 0 to 512 [ 43.724202][ T5361] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 43.724222][ T5361] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 43.724227][ T5361] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 43.735945][ T5364] loop2: detected capacity change from 0 to 1024 [ 43.736325][ T5364] ext4: Bad value for 'stripe' [ 43.749732][ T5361] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 43.749879][ T5361] EXT4-fs (loop3): orphan cleanup on readonly fs [ 43.758218][ T5361] Quota error (device loop3): do_check_range: Getting block 196613 out of range 1-5 [ 43.758266][ T5361] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 0 [ 43.758277][ T5361] EXT4-fs error (device loop3): ext4_acquire_dquot:7070: comm syz.3.130: Failed to acquire dquot type 1 [ 43.758289][ T5361] loop3: lost filesystem error report for type 5 error -117 [ 43.758469][ T5361] EXT4-fs (loop3): Remounting filesystem read-only [ 43.759305][ T5361] EXT4-fs (loop3): 1 truncate cleaned up [ 43.761493][ T400] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 43.761509][ T400] Quota error (device loop3): write_blk: dquota write failed [ 43.761520][ T400] Quota error (device loop3): remove_free_dqentry: Can't write block (5) with free entries [ 43.761530][ T400] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 43.761540][ T400] Quota error (device loop3): write_blk: dquota write failed [ 43.761547][ T400] Quota error (device loop3): free_dqentry: Can't move quota data block (5) to free list [ 43.761572][ T400] EXT4-fs (loop3): Quota write (off=8, len=24) cancelled because transaction is not started [ 43.761580][ T400] Quota error (device loop3): v2_write_file_info: Can't write info structure [ 43.763796][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 43.763812][ C0] EXT4-fs (loop3): initial error at time 43: ext4_acquire_dquot:7070 [ 43.763823][ C0] EXT4-fs (loop3): last error at time 43: ext4_acquire_dquot:7070 [ 43.766507][ T5361] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 43.786105][ T5364] loop2: detected capacity change from 0 to 4096 [ 43.788815][ T5364] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 43.789614][ T5364] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=284ec1a8, mo2=0003] [ 43.789646][ T5364] System zones: 0-5 [ 43.798960][ T5364] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.818404][ T5364] EXT4-fs error (device loop2): ext4_validate_block_bitmap:445: comm syz.2.131: bg 0: block 98: padding at end of block bitmap is not set [ 43.818839][ T5364] EXT4-fs (loop2): Remounting filesystem read-only [ 44.021975][ T5370] netlink: 'syz.3.130': attribute type 13 has an invalid length. [ 44.191066][ T4737] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.212196][ T5364] Injecting memory failure for pfn 0x137400 at process virtual address 0x20000000 [ 44.259984][ T5364] Memory failure: 0x137400: Sending SIGBUS to syz.2.131:5364 due to hardware memory corruption [ 44.260061][ T5364] Memory failure: 0x137400: recovery action for dirty LRU page: Recovered [ 44.260098][ T5364] Injecting memory failure for pfn 0x216a31 at process virtual address 0x20200000 [ 44.260351][ T5364] Memory failure: 0x216a31: unhandlable page. [ 44.260359][ T5364] Memory failure: 0x216a31: recovery action for reserved kernel page: Ignored [ 44.312769][ T5374] loop4: detected capacity change from 0 to 4096 [ 44.323039][ T5374] EXT4-fs (loop4): Test dummy encryption mode enabled [ 44.332243][ T4748] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.336273][ T5374] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.337799][ T1391] Quota error (device loop2): dquot_write_dquot: Can't write quota structure (error -30). Quota may get out of sync! [ 44.337820][ T1391] Quota error (device loop2): dquot_write_dquot: Can't write quota structure (error -30). Quota may get out of sync! [ 44.343570][ T5374] fscrypt: AES-256-CBC-CTS using implementation "cts-cbc-aes-ce" [ 44.375627][ T5374] fscrypt: AES-256-XTS using blk-crypto-fallback [ 44.390169][ T4736] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.459603][ T5380] capability: warning: `syz.2.135' uses deprecated v2 capabilities in a way that may be insecure [ 44.498938][ T5383] overlayfs: workdir and upperdir must be separate subtrees [ 44.901296][ T4745] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.945479][ T5399] loop5: detected capacity change from 0 to 7 [ 44.948962][ T5399] Dev loop5: unable to read RDB block 7 [ 44.948979][ T5399] loop5: AHDI p1 p2 [ 44.948989][ T5399] loop5: partition table partially beyond EOD, truncated [ 44.951131][ T5399] loop5: p1 start 1818582900 is beyond EOD, truncated [ 45.002759][ T5401] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 45.318669][ T5417] netlink: 4 bytes leftover after parsing attributes in process `syz.2.148'. [ 45.319919][ T5419] netlink: 20 bytes leftover after parsing attributes in process `syz.2.148'. [ 45.404613][ T5431] loop0: detected capacity change from 0 to 512 [ 45.406562][ T5431] EXT4-fs: Ignoring removed bh option [ 45.406594][ T5431] ext4: Unknown parameter 'subj_user' [ 45.578898][ T5442] atomic_op 0000000040f52aeb conn xmit_atomic 0000000000000000 [ 45.830697][ T5445] loop5: detected capacity change from 0 to 7 [ 45.831066][ T5445] Dev loop5: unable to read RDB block 7 [ 45.831078][ T5445] loop5: AHDI p1 p2 [ 45.831085][ T5445] loop5: partition table partially beyond EOD, truncated [ 45.831148][ T5445] loop5: p1 start 1818582900 is beyond EOD, truncated [ 45.855707][ T5446] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 45.952157][ T5451] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 45.952170][ T5451] IPv6: NLM_F_CREATE should be set when creating new route [ 45.979608][ T5451] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.980012][ T5451] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.315232][ T5451] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 46.319512][ T5451] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 46.514396][ T12] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.514422][ T12] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.514437][ T12] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.514457][ T12] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.522962][ T5478] loop2: detected capacity change from 0 to 256 [ 46.527091][ T5478] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 46.585241][ T5483] FAT-fs (loop2): error, allocated dir entry found after end-of-directory marker (i_pos 1) [ 46.585258][ T5483] FAT-fs (loop2): Filesystem has been set read-only [ 46.598842][ T5485] netlink: 12 bytes leftover after parsing attributes in process `syz.4.171'. [ 46.619858][ T5487] loop4: detected capacity change from 0 to 512 [ 46.625815][ T5487] EXT4-fs error (device loop4): ext4_orphan_get:1429: comm syz.4.172: bad orphan inode 13 [ 46.625837][ T5487] loop4: lost filesystem error report for type 5 error -117 [ 46.626010][ T5487] ext4_test_bit(bit=12, block=4) = 1 [ 46.626018][ T5487] is_bad_inode(inode)=0 [ 46.626022][ T5487] NEXT_ORPHAN(inode)=0 [ 46.626027][ T5487] max_ino=32 [ 46.626031][ T5487] i_nlink=1 [ 46.627495][ T5487] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 46.629884][ T5487] EXT4-fs warning (device loop4): dx_probe:813: inode #2: comm syz.4.172: Hash code is SIPHASH, but hash not in dirent [ 46.629902][ T5487] EXT4-fs warning (device loop4): dx_probe:934: inode #2: comm syz.4.172: Corrupt directory, running e2fsck is recommended [ 46.692311][ T5490] EXT4-fs warning (device loop4): dx_probe:813: inode #2: comm syz.4.172: Hash code is SIPHASH, but hash not in dirent [ 46.692331][ T5490] EXT4-fs warning (device loop4): dx_probe:934: inode #2: comm syz.4.172: Corrupt directory, running e2fsck is recommended [ 46.692352][ T5490] EXT4-fs error (device loop4): ext4_find_dest_de:2052: inode #2: block 13: comm syz.4.172: bad entry in directory: directory entry overrun - offset=24, inode=0, rec_len=131076, size=1024 fake=0 [ 46.693651][ T5490] overlayfs: failed to resolve './file0': -2 [ 47.026713][ T5497] atomic_op 00000000aa46d8b1 conn xmit_atomic 0000000000000000 [ 47.337940][ T5501] loop1: detected capacity change from 0 to 1024 [ 47.338487][ T5501] EXT4-fs: Ignoring removed nobh option [ 47.364515][ T5501] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 47.370069][ T5501] EXT4-fs error (device loop1): ext4_map_blocks:832: inode #15: comm syz.1.175: lblock 0 mapped to illegal pblock 0 (length 6) [ 47.373091][ T5501] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 6 with error 117 [ 47.373114][ T5501] EXT4-fs (loop1): This should not happen!! Data will be lost [ 47.373114][ T5501] [ 47.397453][ T400] EXT4-fs error (device loop1): ext4_validate_block_bitmap:445: comm kworker/u8:5: bg 0: block 112: padding at end of block bitmap is not set [ 47.398696][ T400] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 32 with max blocks 32 with error 28 [ 47.398711][ T400] EXT4-fs (loop1): This should not happen!! Data will be lost [ 47.398711][ T400] [ 47.398718][ T400] EXT4-fs (loop1): Total free blocks count 0 [ 47.398725][ T400] EXT4-fs (loop1): Free/Dirty block details [ 47.398735][ T400] EXT4-fs (loop1): free_blocks=0 [ 47.398745][ T400] EXT4-fs (loop1): dirty_blocks=32 [ 47.398751][ T400] EXT4-fs (loop1): Block reservation details [ 47.479198][ T5512] netlink: 68 bytes leftover after parsing attributes in process `syz.0.179'. [ 47.483394][ T4736] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.492502][ T5512] FAULT_INJECTION: forcing a failure. [ 47.492502][ T5512] name failslab, interval 1, probability 0, space 0, times 0 [ 47.492528][ T5512] CPU: 1 UID: 0 PID: 5512 Comm: syz.0.179 Tainted: G L syzkaller #0 PREEMPT [ 47.492541][ T5512] Tainted: [L]=SOFTLOCKUP [ 47.492544][ T5512] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 47.492550][ T5512] Call trace: [ 47.492553][ T5512] show_stack+0x2c/0x3c (C) [ 47.492570][ T5512] __dump_stack+0x30/0x40 [ 47.492580][ T5512] dump_stack_lvl+0xd8/0x12c [ 47.492589][ T5512] dump_stack+0x1c/0x28 [ 47.492597][ T5512] should_fail_ex+0x418/0x58c [ 47.492608][ T5512] should_failslab+0xc4/0x120 [ 47.492617][ T5512] kmem_cache_alloc_lru_noprof+0x98/0x5d8 [ 47.492628][ T5512] sock_alloc_inode+0x30/0x180 [ 47.492637][ T5512] alloc_inode+0x68/0x198 [ 47.492649][ T5512] sock_alloc+0x4c/0x204 [ 47.492659][ T5512] __sock_create+0x108/0x670 [ 47.492671][ T5512] __sys_socket_create+0xc0/0x11c [ 47.492681][ T5512] __sys_socket+0x44/0xec [ 47.492691][ T5512] __arm64_sys_socket+0x84/0x9c [ 47.492702][ T5512] invoke_syscall+0x98/0x244 [ 47.492711][ T5512] el0_svc_common+0xec/0x23c [ 47.492719][ T5512] do_el0_svc+0x4c/0x5c [ 47.492728][ T5512] el0_svc+0x60/0x1d8 [ 47.492736][ T5512] el0t_64_sync_handler+0x44/0x104 [ 47.492744][ T5512] el0t_64_sync+0x198/0x19c [ 47.492757][ T5512] socket: no more sockets [ 47.746737][ T5534] input: syz0 as /devices/virtual/input/input8 [ 47.962010][ T5544] netlink: 68 bytes leftover after parsing attributes in process `syz.3.192'. [ 47.994265][ T5544] FAULT_INJECTION: forcing a failure. [ 47.994265][ T5544] name failslab, interval 1, probability 0, space 0, times 0 [ 47.994291][ T5544] CPU: 1 UID: 0 PID: 5544 Comm: syz.3.192 Tainted: G L syzkaller #0 PREEMPT [ 47.994306][ T5544] Tainted: [L]=SOFTLOCKUP [ 47.994309][ T5544] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 47.994315][ T5544] Call trace: [ 47.994318][ T5544] show_stack+0x2c/0x3c (C) [ 47.994333][ T5544] __dump_stack+0x30/0x40 [ 47.994341][ T5544] dump_stack_lvl+0xd8/0x12c [ 47.994350][ T5544] dump_stack+0x1c/0x28 [ 47.994357][ T5544] should_fail_ex+0x418/0x58c [ 47.994368][ T5544] should_failslab+0xc4/0x120 [ 47.994378][ T5544] __kmalloc_noprof+0x108/0x6c8 [ 47.994388][ T5544] sk_prot_alloc+0xc4/0x1e8 [ 47.994399][ T5544] sk_alloc+0x44/0x320 [ 47.994407][ T5544] __netlink_create+0x78/0x23c [ 47.994419][ T5544] netlink_create+0x3b4/0x610 [ 47.994430][ T5544] __sock_create+0x31c/0x670 [ 47.994441][ T5544] __sys_socket_create+0xc0/0x11c [ 47.994458][ T5544] __sys_socket+0x44/0xec [ 47.994469][ T5544] __arm64_sys_socket+0x84/0x9c [ 47.994480][ T5544] invoke_syscall+0x98/0x244 [ 47.994489][ T5544] el0_svc_common+0xec/0x23c [ 47.994497][ T5544] do_el0_svc+0x4c/0x5c [ 47.994505][ T5544] el0_svc+0x60/0x1d8 [ 47.994514][ T5544] el0t_64_sync_handler+0x44/0x104 [ 47.994522][ T5544] el0t_64_sync+0x198/0x19c [ 48.040279][ T5554] EXT4-fs: Ignoring removed i_version option [ 48.051400][ T5554] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 48.100895][ T4736] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 48.122106][ T5561] netlink: 12 bytes leftover after parsing attributes in process `syz.3.202'. [ 48.159685][ T5561] xfrm1: entered promiscuous mode [ 48.160236][ T5561] xfrm1: entered allmulticast mode [ 48.181395][ T5563] atomic_op 00000000473471ba conn xmit_atomic 0000000000000000 [ 48.388176][ T5562] FAULT_INJECTION: forcing a failure. [ 48.388176][ T5562] name fail_futex, interval 1, probability 0, space 0, times 1 [ 48.388200][ T5562] CPU: 0 UID: 0 PID: 5562 Comm: syz.4.201 Tainted: G L syzkaller #0 PREEMPT [ 48.388214][ T5562] Tainted: [L]=SOFTLOCKUP [ 48.388218][ T5562] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 48.388224][ T5562] Call trace: [ 48.388227][ T5562] show_stack+0x2c/0x3c (C) [ 48.388243][ T5562] __dump_stack+0x30/0x40 [ 48.388252][ T5562] dump_stack_lvl+0xd8/0x12c [ 48.388260][ T5562] dump_stack+0x1c/0x28 [ 48.388268][ T5562] should_fail_ex+0x418/0x58c [ 48.388279][ T5562] should_fail+0x14/0x24 [ 48.388288][ T5562] get_futex_key+0x1ec/0x12b0 [ 48.388301][ T5562] futex_wait_setup+0x58/0x674 [ 48.388309][ T5562] __futex_wait+0x108/0x25c [ 48.388317][ T5562] futex_wait+0x108/0x2c0 [ 48.388324][ T5562] do_futex+0x320/0x378 [ 48.388336][ T5562] __arm64_sys_futex+0x2e4/0x418 [ 48.388348][ T5562] invoke_syscall+0x98/0x244 [ 48.388357][ T5562] el0_svc_common+0xec/0x23c [ 48.388365][ T5562] do_el0_svc+0x4c/0x5c [ 48.388373][ T5562] el0_svc+0x60/0x1d8 [ 48.388390][ T5562] el0t_64_sync_handler+0x44/0x104 [ 48.388398][ T5562] el0t_64_sync+0x198/0x19c [ 48.448500][ T5569] Bluetooth: MGMT ver 1.23 [ 48.453739][ T5571] Dev loop5: unable to read RDB block 7 [ 48.453918][ T5571] loop5: AHDI p1 p2 [ 48.453928][ T5571] loop5: partition table partially beyond EOD, truncated [ 48.454003][ T5571] loop5: p1 start 1818582900 is beyond EOD, truncated [ 48.540326][ T5577] FAULT_INJECTION: forcing a failure. [ 48.540326][ T5577] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 48.540350][ T5577] CPU: 0 UID: 0 PID: 5577 Comm: syz.1.209 Tainted: G L syzkaller #0 PREEMPT [ 48.540365][ T5577] Tainted: [L]=SOFTLOCKUP [ 48.540369][ T5577] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 48.540382][ T5577] Call trace: [ 48.540386][ T5577] show_stack+0x2c/0x3c (C) [ 48.540403][ T5577] __dump_stack+0x30/0x40 [ 48.540413][ T5577] dump_stack_lvl+0xd8/0x12c [ 48.540421][ T5577] dump_stack+0x1c/0x28 [ 48.540428][ T5577] should_fail_ex+0x418/0x58c [ 48.540443][ T5577] should_fail+0x14/0x24 [ 48.540451][ T5577] should_fail_usercopy+0x20/0x30 [ 48.540460][ T5577] _inline_copy_from_user+0x3c/0x174 [ 48.540471][ T5577] get_timespec64+0x9c/0x188 [ 48.540481][ T5577] __sys_recvmmsg+0xb4/0x270 [ 48.540492][ T5577] __arm64_sys_recvmmsg+0xe0/0x108 [ 48.540502][ T5577] invoke_syscall+0x98/0x244 [ 48.540510][ T5577] el0_svc_common+0xec/0x23c [ 48.540517][ T5577] do_el0_svc+0x4c/0x5c [ 48.540524][ T5577] el0_svc+0x60/0x1d8 [ 48.540532][ T5577] el0t_64_sync_handler+0x44/0x104 [ 48.540539][ T5577] el0t_64_sync+0x198/0x19c [ 48.557804][ T5575] ext4: Unknown parameter 'nouser_xattr' [ 48.607407][ T5579] 8021q: adding VLAN 0 to HW filter on device bond1 [ 48.652525][ T5588] netlink: 68 bytes leftover after parsing attributes in process `syz.0.212'. [ 48.692797][ T5567] loop4: [ICS] p1 p2 p3 p4 [ 48.692940][ T5567] loop4: p1 start 283205 is beyond EOD, truncated [ 48.692951][ T5567] loop4: p2 start 65535 is beyond EOD, truncated [ 48.692960][ T5567] loop4: p3 start 6823984 is beyond EOD, truncated [ 48.692967][ T5567] loop4: p4 start 1667592992 is beyond EOD, truncated [ 48.693279][ T5590] input: syz0 as /devices/virtual/input/input9 [ 48.708664][ T5588] FAULT_INJECTION: forcing a failure. [ 48.708664][ T5588] name failslab, interval 1, probability 0, space 0, times 0 [ 48.708690][ T5588] CPU: 0 UID: 0 PID: 5588 Comm: syz.0.212 Tainted: G L syzkaller #0 PREEMPT [ 48.708704][ T5588] Tainted: [L]=SOFTLOCKUP [ 48.708707][ T5588] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 48.708713][ T5588] Call trace: [ 48.708716][ T5588] show_stack+0x2c/0x3c (C) [ 48.708732][ T5588] __dump_stack+0x30/0x40 [ 48.708742][ T5588] dump_stack_lvl+0xd8/0x12c [ 48.708750][ T5588] dump_stack+0x1c/0x28 [ 48.708758][ T5588] should_fail_ex+0x418/0x58c [ 48.708769][ T5588] should_failslab+0xc4/0x120 [ 48.708779][ T5588] kmem_cache_alloc_lru_noprof+0x98/0x5d8 [ 48.708790][ T5588] sock_alloc_inode+0x30/0x180 [ 48.708798][ T5588] alloc_inode+0x68/0x198 [ 48.708811][ T5588] sock_alloc+0x4c/0x204 [ 48.708821][ T5588] __sock_create+0x108/0x670 [ 48.708832][ T5588] __sys_socket_create+0xc0/0x11c [ 48.708843][ T5588] __sys_socket+0x44/0xec [ 48.708853][ T5588] __arm64_sys_socket+0x84/0x9c [ 48.708864][ T5588] invoke_syscall+0x98/0x244 [ 48.708872][ T5588] el0_svc_common+0xec/0x23c [ 48.708880][ T5588] do_el0_svc+0x4c/0x5c [ 48.708889][ T5588] el0_svc+0x60/0x1d8 [ 48.708897][ T5588] el0t_64_sync_handler+0x44/0x104 [ 48.708905][ T5588] el0t_64_sync+0x198/0x19c [ 48.711294][ T5588] socket: no more sockets [ 49.135681][ T5607] FAULT_INJECTION: forcing a failure. [ 49.135681][ T5607] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 49.135702][ T5607] CPU: 1 UID: 0 PID: 5607 Comm: syz.4.215 Tainted: G L syzkaller #0 PREEMPT [ 49.135714][ T5607] Tainted: [L]=SOFTLOCKUP [ 49.135718][ T5607] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 49.135723][ T5607] Call trace: [ 49.135726][ T5607] show_stack+0x2c/0x3c (C) [ 49.135741][ T5607] __dump_stack+0x30/0x40 [ 49.135749][ T5607] dump_stack_lvl+0xd8/0x12c [ 49.135758][ T5607] dump_stack+0x1c/0x28 [ 49.135766][ T5607] should_fail_ex+0x418/0x58c [ 49.135776][ T5607] should_fail+0x14/0x24 [ 49.135785][ T5607] should_fail_usercopy+0x20/0x30 [ 49.135796][ T5607] bpf_log_attr_finalize+0x12c/0x28c [ 49.135806][ T5607] bpf_check+0x1404/0x2414 [ 49.135815][ T5607] bpf_prog_load+0xf4c/0x1554 [ 49.135827][ T5607] __sys_bpf+0x7d4/0x82c [ 49.135840][ T5607] __arm64_sys_bpf+0xd0/0xec [ 49.135850][ T5607] invoke_syscall+0x98/0x244 [ 49.135860][ T5607] el0_svc_common+0xec/0x23c [ 49.135868][ T5607] do_el0_svc+0x4c/0x5c [ 49.135876][ T5607] el0_svc+0x60/0x1d8 [ 49.135885][ T5607] el0t_64_sync_handler+0x44/0x104 [ 49.135893][ T5607] el0t_64_sync+0x198/0x19c [ 49.226337][ T5616] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 49.550615][ T5631] set_capacity_and_notify: 4 callbacks suppressed [ 49.550628][ T5631] loop5: detected capacity change from 0 to 7 [ 49.551414][ T5631] Dev loop5: unable to read RDB block 7 [ 49.551429][ T5631] loop5: AHDI p1 p2 [ 49.551446][ T5631] loop5: partition table partially beyond EOD, truncated [ 49.551529][ T5631] loop5: p1 start 1818582900 is beyond EOD, truncated [ 49.597724][ T5637] FAULT_INJECTION: forcing a failure. [ 49.597724][ T5637] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 49.597745][ T5637] CPU: 0 UID: 0 PID: 5637 Comm: syz.1.222 Tainted: G L syzkaller #0 PREEMPT [ 49.597757][ T5637] Tainted: [L]=SOFTLOCKUP [ 49.597760][ T5637] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 49.597764][ T5637] Call trace: [ 49.597767][ T5637] show_stack+0x2c/0x3c (C) [ 49.597781][ T5637] __dump_stack+0x30/0x40 [ 49.597789][ T5637] dump_stack_lvl+0xd8/0x12c [ 49.597796][ T5637] dump_stack+0x1c/0x28 [ 49.597803][ T5637] should_fail_ex+0x418/0x58c [ 49.597813][ T5637] should_fail+0x14/0x24 [ 49.597821][ T5637] should_fail_usercopy+0x20/0x30 [ 49.597829][ T5637] _inline_copy_from_user+0x3c/0x174 [ 49.597841][ T5637] copy_msghdr_from_user+0xb8/0x194 [ 49.597848][ T5637] ___sys_recvmsg+0x11c/0x1f4 [ 49.597858][ T5637] do_recvmmsg+0x288/0x7d4 [ 49.597867][ T5637] __sys_recvmmsg+0x200/0x270 [ 49.597877][ T5637] __arm64_sys_recvmmsg+0xe0/0x108 [ 49.597886][ T5637] invoke_syscall+0x98/0x244 [ 49.597894][ T5637] el0_svc_common+0xec/0x23c [ 49.597902][ T5637] do_el0_svc+0x4c/0x5c [ 49.597909][ T5637] el0_svc+0x60/0x1d8 [ 49.597916][ T5637] el0t_64_sync_handler+0x44/0x104 [ 49.597923][ T5637] el0t_64_sync+0x198/0x19c [ 49.658946][ T5643] netlink: 68 bytes leftover after parsing attributes in process `syz.4.224'. [ 49.669671][ T5643] FAULT_INJECTION: forcing a failure. [ 49.669671][ T5643] name failslab, interval 1, probability 0, space 0, times 0 [ 49.669694][ T5643] CPU: 0 UID: 0 PID: 5643 Comm: syz.4.224 Tainted: G L syzkaller #0 PREEMPT [ 49.669710][ T5643] Tainted: [L]=SOFTLOCKUP [ 49.669713][ T5643] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 49.669719][ T5643] Call trace: [ 49.669722][ T5643] show_stack+0x2c/0x3c (C) [ 49.669739][ T5643] __dump_stack+0x30/0x40 [ 49.669748][ T5643] dump_stack_lvl+0xd8/0x12c [ 49.669757][ T5643] dump_stack+0x1c/0x28 [ 49.669764][ T5643] should_fail_ex+0x418/0x58c [ 49.669775][ T5643] should_failslab+0xc4/0x120 [ 49.669785][ T5643] kmem_cache_alloc_lru_noprof+0x98/0x5d8 [ 49.669796][ T5643] sock_alloc_inode+0x30/0x180 [ 49.669808][ T5643] alloc_inode+0x68/0x198 [ 49.669821][ T5643] sock_alloc+0x4c/0x204 [ 49.669832][ T5643] __sock_create+0x108/0x670 [ 49.669843][ T5643] __sys_socket_create+0xc0/0x11c [ 49.669853][ T5643] __sys_socket+0x44/0xec [ 49.669864][ T5643] __arm64_sys_socket+0x84/0x9c [ 49.669874][ T5643] invoke_syscall+0x98/0x244 [ 49.669883][ T5643] el0_svc_common+0xec/0x23c [ 49.669891][ T5643] do_el0_svc+0x4c/0x5c [ 49.669899][ T5643] el0_svc+0x60/0x1d8 [ 49.669908][ T5643] el0t_64_sync_handler+0x44/0x104 [ 49.669916][ T5643] el0t_64_sync+0x198/0x19c [ 49.669940][ T5643] socket: no more sockets [ 49.714551][ T5647] netlink: 24 bytes leftover after parsing attributes in process `syz.4.225'. [ 49.721510][ T5647] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input11 [ 49.737571][ T5650] loop1: detected capacity change from 0 to 2048 [ 49.763163][ T5647] netlink: 'syz.4.225': attribute type 10 has an invalid length. [ 49.773928][ T5650] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 49.775600][ T5647] team0: Port device dummy0 added [ 49.846577][ T4737] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.913048][ T5670] FAULT_INJECTION: forcing a failure. [ 49.913048][ T5670] name fail_futex, interval 1, probability 0, space 0, times 0 [ 49.913074][ T5670] CPU: 0 UID: 0 PID: 5670 Comm: syz.1.227 Tainted: G L syzkaller #0 PREEMPT [ 49.913089][ T5670] Tainted: [L]=SOFTLOCKUP [ 49.913092][ T5670] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 49.913098][ T5670] Call trace: [ 49.913101][ T5670] show_stack+0x2c/0x3c (C) [ 49.913117][ T5670] __dump_stack+0x30/0x40 [ 49.913127][ T5670] dump_stack_lvl+0xd8/0x12c [ 49.913135][ T5670] dump_stack+0x1c/0x28 [ 49.913143][ T5670] should_fail_ex+0x418/0x58c [ 49.913154][ T5670] should_fail+0x14/0x24 [ 49.913163][ T5670] get_futex_key+0x1ec/0x12b0 [ 49.913175][ T5670] futex_wake+0x10c/0x594 [ 49.913183][ T5670] do_futex+0x2c4/0x378 [ 49.913195][ T5670] __arm64_sys_futex+0x2e4/0x418 [ 49.913207][ T5670] invoke_syscall+0x98/0x244 [ 49.913216][ T5670] el0_svc_common+0xec/0x23c [ 49.913224][ T5670] do_el0_svc+0x4c/0x5c [ 49.913232][ T5670] el0_svc+0x60/0x1d8 [ 49.913241][ T5670] el0t_64_sync_handler+0x44/0x104 [ 49.913249][ T5670] el0t_64_sync+0x198/0x19c [ 49.957749][ T5679] loop7: detected capacity change from 0 to 7 [ 49.966963][ T5681] FAULT_INJECTION: forcing a failure. [ 49.966963][ T5681] name failslab, interval 1, probability 0, space 0, times 0 [ 49.966983][ T5681] CPU: 1 UID: 0 PID: 5681 Comm: syz.2.229 Tainted: G L syzkaller #0 PREEMPT [ 49.966996][ T5681] Tainted: [L]=SOFTLOCKUP [ 49.967000][ T5681] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 49.967005][ T5681] Call trace: [ 49.967008][ T5681] show_stack+0x2c/0x3c (C) [ 49.967024][ T5681] __dump_stack+0x30/0x40 [ 49.967033][ T5681] dump_stack_lvl+0xd8/0x12c [ 49.967040][ T5681] dump_stack+0x1c/0x28 [ 49.967048][ T5681] should_fail_ex+0x418/0x58c [ 49.967059][ T5681] should_failslab+0xc4/0x120 [ 49.967069][ T5681] __kmalloc_node_track_caller_noprof+0x108/0x6e0 [ 49.967081][ T5681] kstrdup+0x50/0x104 [ 49.967090][ T5681] kstrdup_const+0x54/0x6c [ 49.967098][ T5681] kvasprintf_const+0x120/0x2e4 [ 49.967107][ T5681] kobject_set_name_vargs+0xd8/0x1c0 [ 49.967117][ T5681] kobject_add_varg+0x58/0xe8 [ 49.967125][ T5681] kobject_init_and_add+0xec/0x13c [ 49.967132][ T5681] bus_add_driver+0x150/0x500 [ 49.967142][ T5681] driver_register+0x220/0x310 [ 49.967149][ T5681] usb_gadget_register_driver_owner+0xf0/0x25c [ 49.967161][ T5681] raw_ioctl+0x10f8/0x356c [ 49.967169][ T5681] __arm64_sys_ioctl+0x154/0x1cc [ 49.967177][ T5681] invoke_syscall+0x98/0x244 [ 49.967185][ T5681] el0_svc_common+0xec/0x23c [ 49.967193][ T5681] do_el0_svc+0x4c/0x5c [ 49.967200][ T5681] el0_svc+0x60/0x1d8 [ 49.967207][ T5681] el0t_64_sync_handler+0x44/0x104 [ 49.967214][ T5681] el0t_64_sync+0x198/0x19c [ 49.967223][ T5681] kobject: can not set name properly! [ 49.967232][ T5681] UDC core: USB Raw Gadget: driver registration failed: -12 [ 49.967240][ T5681] misc raw-gadget: fail, usb_gadget_register_driver returned -12 [ 50.033672][ T5681] FAULT_INJECTION: forcing a failure. [ 50.033672][ T5681] name failslab, interval 1, probability 0, space 0, times 0 [ 50.033693][ T5681] CPU: 0 UID: 0 PID: 5681 Comm: syz.2.229 Tainted: G L syzkaller #0 PREEMPT [ 50.033705][ T5681] Tainted: [L]=SOFTLOCKUP [ 50.033708][ T5681] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 50.033712][ T5681] Call trace: [ 50.033715][ T5681] show_stack+0x2c/0x3c (C) [ 50.033731][ T5681] __dump_stack+0x30/0x40 [ 50.033739][ T5681] dump_stack_lvl+0xd8/0x12c [ 50.033750][ T5681] dump_stack+0x1c/0x28 [ 50.033758][ T5681] should_fail_ex+0x418/0x58c [ 50.033767][ T5681] should_failslab+0xc4/0x120 [ 50.033777][ T5681] __kmalloc_node_track_caller_noprof+0x108/0x6e0 [ 50.033787][ T5681] kstrdup+0x50/0x104 [ 50.033796][ T5681] kstrdup_const+0x54/0x6c [ 50.033804][ T5681] kvasprintf_const+0x120/0x2e4 [ 50.033813][ T5681] kobject_set_name_vargs+0xd8/0x1c0 [ 50.033823][ T5681] kobject_add_varg+0x58/0xe8 [ 50.033830][ T5681] kobject_init_and_add+0xec/0x13c [ 50.033838][ T5681] bus_add_driver+0x150/0x500 [ 50.033848][ T5681] driver_register+0x220/0x310 [ 50.033855][ T5681] usb_gadget_register_driver_owner+0xf0/0x25c [ 50.033866][ T5681] raw_ioctl+0x10f8/0x356c [ 50.033873][ T5681] __arm64_sys_ioctl+0x154/0x1cc [ 50.033882][ T5681] invoke_syscall+0x98/0x244 [ 50.033890][ T5681] el0_svc_common+0xec/0x23c [ 50.033897][ T5681] do_el0_svc+0x4c/0x5c [ 50.033904][ T5681] el0_svc+0x60/0x1d8 [ 50.033911][ T5681] el0t_64_sync_handler+0x44/0x104 [ 50.033918][ T5681] el0t_64_sync+0x198/0x19c [ 50.035153][ T5681] kobject: can not set name properly! [ 50.035161][ T5681] UDC core: USB Raw Gadget: driver registration failed: -12 [ 50.035172][ T5681] misc raw-gadget: fail, usb_gadget_register_driver returned -12 [ 50.075010][ T5679] Dev loop7: unable to read RDB block 7 [ 50.075031][ T5679] loop7: unable to read partition table [ 50.075140][ T5679] loop7: partition table beyond EOD, truncated [ 50.075163][ T5679] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 50.089075][ T5679] loop3: detected capacity change from 0 to 1024 [ 50.092274][ T5679] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 50.092305][ T5679] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 50.093075][ T5679] EXT4-fs (loop3): invalid journal inode [ 50.093109][ T5679] EXT4-fs (loop3): can't get journal size [ 50.099486][ T5679] EXT4-fs (loop3): corrupt root inode, run e2fsck [ 50.099523][ T5679] EXT4-fs (loop3): mount failed [ 50.176947][ T5712] FAULT_INJECTION: forcing a failure. [ 50.176947][ T5712] name failslab, interval 1, probability 0, space 0, times 0 [ 50.176970][ T5712] CPU: 1 UID: 0 PID: 5712 Comm: syz.3.235 Tainted: G L syzkaller #0 PREEMPT [ 50.176982][ T5712] Tainted: [L]=SOFTLOCKUP [ 50.176985][ T5712] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 50.176990][ T5712] Call trace: [ 50.176993][ T5712] show_stack+0x2c/0x3c (C) [ 50.177007][ T5712] __dump_stack+0x30/0x40 [ 50.177015][ T5712] dump_stack_lvl+0xd8/0x12c [ 50.177022][ T5712] dump_stack+0x1c/0x28 [ 50.177029][ T5712] should_fail_ex+0x418/0x58c [ 50.177038][ T5712] should_failslab+0xc4/0x120 [ 50.177047][ T5712] __kmalloc_noprof+0x108/0x6c8 [ 50.177056][ T5712] iovec_from_user+0x88/0x138 [ 50.177066][ T5712] __import_iovec+0xd8/0x574 [ 50.177075][ T5712] import_iovec+0x88/0xa4 [ 50.177084][ T5712] copy_msghdr_from_user+0x128/0x194 [ 50.177092][ T5712] ___sys_recvmsg+0x11c/0x1f4 [ 50.177102][ T5712] do_recvmmsg+0x288/0x7d4 [ 50.177111][ T5712] __sys_recvmmsg+0x200/0x270 [ 50.177121][ T5712] __arm64_sys_recvmmsg+0xe0/0x108 [ 50.177131][ T5712] invoke_syscall+0x98/0x244 [ 50.177138][ T5712] el0_svc_common+0xec/0x23c [ 50.177146][ T5712] do_el0_svc+0x4c/0x5c [ 50.177153][ T5712] el0_svc+0x60/0x1d8 [ 50.177160][ T5712] el0t_64_sync_handler+0x44/0x104 [ 50.177167][ T5712] el0t_64_sync+0x198/0x19c [ 50.200788][ T5714] loop5: detected capacity change from 0 to 7 [ 50.201512][ T5714] Dev loop5: unable to read RDB block 7 [ 50.201525][ T5714] loop5: AHDI p1 p2 [ 50.201533][ T5714] loop5: partition table partially beyond EOD, truncated [ 50.201599][ T5714] loop5: p1 start 1818582900 is beyond EOD, truncated [ 50.207274][ T5717] netlink: 36 bytes leftover after parsing attributes in process `syz.1.236'. [ 50.256709][ T5726] loop3: detected capacity change from 0 to 1024 [ 50.258904][ T5726] ext4: Bad value for 'stripe' [ 50.272627][ T5724] tipc: Enabling of bearer rejected, failed to enable media [ 50.289225][ T5726] loop3: detected capacity change from 0 to 4096 [ 50.297196][ T5726] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 50.300701][ T5726] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=284ec1a8, mo2=0003] [ 50.300743][ T5726] System zones: 0-5 [ 50.301732][ T5726] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.314713][ T5726] EXT4-fs error (device loop3): ext4_validate_block_bitmap:445: comm syz.3.238: bg 0: block 98: padding at end of block bitmap is not set [ 50.314986][ T5726] EXT4-fs (loop3): Remounting filesystem read-only [ 50.336259][ T4745] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.341987][ T54] Quota error (device loop3): dquot_write_dquot: Can't write quota structure (error -30). Quota may get out of sync! [ 50.342009][ T54] Quota error (device loop3): dquot_write_dquot: Can't write quota structure (error -30). Quota may get out of sync! [ 50.387850][ T5740] FAULT_INJECTION: forcing a failure. [ 50.387850][ T5740] name failslab, interval 1, probability 0, space 0, times 0 [ 50.387870][ T5740] CPU: 1 UID: 0 PID: 5740 Comm: syz.3.241 Tainted: G L syzkaller #0 PREEMPT [ 50.387882][ T5740] Tainted: [L]=SOFTLOCKUP [ 50.387885][ T5740] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 50.387890][ T5740] Call trace: [ 50.387893][ T5740] show_stack+0x2c/0x3c (C) [ 50.387908][ T5740] __dump_stack+0x30/0x40 [ 50.387917][ T5740] dump_stack_lvl+0xd8/0x12c [ 50.387925][ T5740] dump_stack+0x1c/0x28 [ 50.387933][ T5740] should_fail_ex+0x418/0x58c [ 50.387944][ T5740] should_failslab+0xc4/0x120 [ 50.387954][ T5740] __kmalloc_node_track_caller_noprof+0x108/0x6e0 [ 50.387965][ T5740] krealloc_node_align_noprof+0x1b4/0x3d0 [ 50.387976][ T5740] copy_array+0x80/0x118 [ 50.387985][ T5740] bpf_copy_verifier_state+0x94/0xde8 [ 50.387993][ T5740] bpf_is_state_visited+0x1f84/0x2bbc [ 50.388005][ T5740] do_check_common+0x1800/0x367c [ 50.388014][ T5740] do_check_main+0x94/0x1b8 [ 50.388023][ T5740] bpf_check+0x1e00/0x2414 [ 50.388031][ T5740] bpf_prog_load+0xf4c/0x1554 [ 50.388042][ T5740] __sys_bpf+0x7d4/0x82c [ 50.388053][ T5740] __arm64_sys_bpf+0xd0/0xec [ 50.388063][ T5740] invoke_syscall+0x98/0x244 [ 50.388072][ T5740] el0_svc_common+0xec/0x23c [ 50.388080][ T5740] do_el0_svc+0x4c/0x5c [ 50.388088][ T5740] el0_svc+0x60/0x1d8 [ 50.388097][ T5740] el0t_64_sync_handler+0x44/0x104 [ 50.388104][ T5740] el0t_64_sync+0x198/0x19c [ 50.393513][ T5742] FAULT_INJECTION: forcing a failure. [ 50.393513][ T5742] name fail_futex, interval 1, probability 0, space 0, times 0 [ 50.393530][ T5742] CPU: 0 UID: 0 PID: 5742 Comm: syz.0.243 Tainted: G L syzkaller #0 PREEMPT [ 50.393544][ T5742] Tainted: [L]=SOFTLOCKUP [ 50.393548][ T5742] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 50.393553][ T5742] Call trace: [ 50.393556][ T5742] show_stack+0x2c/0x3c (C) [ 50.393567][ T5742] __dump_stack+0x30/0x40 [ 50.393576][ T5742] dump_stack_lvl+0xd8/0x12c [ 50.393584][ T5742] dump_stack+0x1c/0x28 [ 50.393592][ T5742] should_fail_ex+0x418/0x58c [ 50.393602][ T5742] should_fail+0x14/0x24 [ 50.393611][ T5742] get_futex_key+0x1ec/0x12b0 [ 50.393623][ T5742] futex_wake+0x10c/0x594 [ 50.393631][ T5742] do_futex+0x2c4/0x378 [ 50.393642][ T5742] __arm64_sys_futex+0x2e4/0x418 [ 50.393654][ T5742] invoke_syscall+0x98/0x244 [ 50.393663][ T5742] el0_svc_common+0xec/0x23c [ 50.393671][ T5742] do_el0_svc+0x4c/0x5c [ 50.393679][ T5742] el0_svc+0x60/0x1d8 [ 50.393687][ T5742] el0t_64_sync_handler+0x44/0x104 [ 50.393695][ T5742] el0t_64_sync+0x198/0x19c [ 50.593650][ T5768] loop4: detected capacity change from 0 to 128 [ 50.598553][ T5766] FAULT_INJECTION: forcing a failure. [ 50.598553][ T5766] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 50.598571][ T5766] CPU: 1 UID: 0 PID: 5766 Comm: syz.0.249 Tainted: G L syzkaller #0 PREEMPT [ 50.598582][ T5766] Tainted: [L]=SOFTLOCKUP [ 50.598585][ T5766] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 50.598590][ T5766] Call trace: [ 50.598593][ T5766] show_stack+0x2c/0x3c (C) [ 50.598607][ T5766] __dump_stack+0x30/0x40 [ 50.598615][ T5766] dump_stack_lvl+0xd8/0x12c [ 50.598622][ T5766] dump_stack+0x1c/0x28 [ 50.598629][ T5766] should_fail_ex+0x418/0x58c [ 50.598638][ T5766] should_fail+0x14/0x24 [ 50.598646][ T5766] should_fail_usercopy+0x20/0x30 [ 50.598654][ T5766] _copy_to_iter+0x424/0x10f8 [ 50.598664][ T5766] simple_copy_to_iter+0x50/0x8c [ 50.598673][ T5766] __skb_datagram_iter+0xd4/0x77c [ 50.598682][ T5766] skb_copy_datagram_iter+0xf4/0x2c4 [ 50.598690][ T5766] netlink_recvmsg+0x244/0x868 [ 50.598701][ T5766] sock_recvmsg+0xd4/0x170 [ 50.598710][ T5766] ____sys_recvmsg+0x1b8/0x608 [ 50.598719][ T5766] ___sys_recvmsg+0x16c/0x1f4 [ 50.598729][ T5766] do_recvmmsg+0x288/0x7d4 [ 50.598738][ T5766] __sys_recvmmsg+0x200/0x270 [ 50.598748][ T5766] __arm64_sys_recvmmsg+0xe0/0x108 [ 50.598757][ T5766] invoke_syscall+0x98/0x244 [ 50.598765][ T5766] el0_svc_common+0xec/0x23c [ 50.598772][ T5766] do_el0_svc+0x4c/0x5c [ 50.598779][ T5766] el0_svc+0x60/0x1d8 [ 50.598787][ T5766] el0t_64_sync_handler+0x44/0x104 [ 50.598794][ T5766] el0t_64_sync+0x198/0x19c [ 50.645003][ T5768] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 ro without journal. Quota mode: none. [ 50.655579][ T5773] netlink: 8 bytes leftover after parsing attributes in process `syz.0.250'. [ 50.655595][ T5773] bond0: Unable to set down delay as MII monitoring is disabled [ 50.662721][ T5777] loop5: detected capacity change from 0 to 7 [ 50.663015][ T5777] Dev loop5: unable to read RDB block 7 [ 50.663026][ T5777] loop5: AHDI p1 p2 [ 50.663033][ T5777] loop5: partition table partially beyond EOD, truncated [ 50.663092][ T5777] loop5: p1 start 1818582900 is beyond EOD, truncated [ 50.687178][ T4736] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 50.720623][ T5786] loop4: detected capacity change from 0 to 1024 [ 50.737699][ T5786] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 50.746093][ T5780] vhci_hcd vhci_hcd.2: Wrong hub descriptor type for USB 3.0 roothub. [ 51.094902][ T5798] EXT4-fs error (device loop4): ext4_free_blocks:6719: comm syz.4.252: Freeing blocks not in datazone - block = 0, count = 16 [ 51.133864][ T4739] Bluetooth: hci0: command 0x0c1a tx timeout [ 51.135125][ T24] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 51.135673][ T24] Bluetooth: hci0: Error when powering off device on rfkill (-110) [ 51.138061][ T5792] EXT4-fs error (device loop4): ext4_readdir:280: inode #2: block 16: comm syz.4.252: path /47/file1: bad entry in directory: directory entry overrun - offset=876, inode=0, rec_len=1024, size=1024 fake=0 [ 51.417801][ T5810] FAULT_INJECTION: forcing a failure. [ 51.417801][ T5810] name failslab, interval 1, probability 0, space 0, times 0 [ 51.417828][ T5810] CPU: 1 UID: 0 PID: 5810 Comm: syz.3.258 Tainted: G L syzkaller #0 PREEMPT [ 51.417842][ T5810] Tainted: [L]=SOFTLOCKUP [ 51.417846][ T5810] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 51.417852][ T5810] Call trace: [ 51.417855][ T5810] show_stack+0x2c/0x3c (C) [ 51.417869][ T5810] __dump_stack+0x30/0x40 [ 51.417878][ T5810] dump_stack_lvl+0xd8/0x12c [ 51.417887][ T5810] dump_stack+0x1c/0x28 [ 51.417895][ T5810] should_fail_ex+0x418/0x58c [ 51.417906][ T5810] should_failslab+0xc4/0x120 [ 51.417916][ T5810] __kmalloc_cache_noprof+0x94/0x5fc [ 51.417927][ T5810] input_allocate_device+0xa8/0x2a0 [ 51.417937][ T5810] uinput_write+0x424/0xb0c [ 51.417948][ T5810] vfs_write+0x2a4/0xa0c [ 51.417957][ T5810] ksys_write+0x12c/0x228 [ 51.417966][ T5810] __arm64_sys_write+0x84/0x98 [ 51.417975][ T5810] invoke_syscall+0x98/0x244 [ 51.417984][ T5810] el0_svc_common+0xec/0x23c [ 51.417993][ T5810] do_el0_svc+0x4c/0x5c [ 51.418001][ T5810] el0_svc+0x60/0x1d8 [ 51.418009][ T5810] el0t_64_sync_handler+0x44/0x104 [ 51.418017][ T5810] el0t_64_sync+0x198/0x19c [ 51.442945][ T5812] FAULT_INJECTION: forcing a failure. [ 51.442945][ T5812] name failslab, interval 1, probability 0, space 0, times 0 [ 51.442965][ T5812] CPU: 0 UID: 0 PID: 5812 Comm: syz.3.259 Tainted: G L syzkaller #0 PREEMPT [ 51.442978][ T5812] Tainted: [L]=SOFTLOCKUP [ 51.442982][ T5812] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 51.442987][ T5812] Call trace: [ 51.442990][ T5812] show_stack+0x2c/0x3c (C) [ 51.443005][ T5812] __dump_stack+0x30/0x40 [ 51.443014][ T5812] dump_stack_lvl+0xd8/0x12c [ 51.443022][ T5812] dump_stack+0x1c/0x28 [ 51.443030][ T5812] should_fail_ex+0x418/0x58c [ 51.443041][ T5812] should_failslab+0xc4/0x120 [ 51.443050][ T5812] __kmalloc_node_track_caller_noprof+0x108/0x6e0 [ 51.443061][ T5812] krealloc_node_align_noprof+0x1b4/0x3d0 [ 51.443072][ T5812] bpf_push_jmp_history+0x23c/0x5a0 [ 51.443084][ T5812] check_stack_write+0x1534/0x1980 [ 51.443095][ T5812] check_mem_access+0xadc/0x1a3c [ 51.443106][ T5812] check_store_reg+0x2dc/0x540 [ 51.443115][ T5812] do_check_insn+0x668/0xea48 [ 51.443124][ T5812] do_check_common+0x20f0/0x367c [ 51.443137][ T5812] do_check_main+0x94/0x1b8 [ 51.443145][ T5812] bpf_check+0x1e00/0x2414 [ 51.443154][ T5812] bpf_prog_load+0xf4c/0x1554 [ 51.443165][ T5812] __sys_bpf+0x7d4/0x82c [ 51.443176][ T5812] __arm64_sys_bpf+0xd0/0xec [ 51.443186][ T5812] invoke_syscall+0x98/0x244 [ 51.443195][ T5812] el0_svc_common+0xec/0x23c [ 51.443203][ T5812] do_el0_svc+0x4c/0x5c [ 51.443210][ T5812] el0_svc+0x60/0x1d8 [ 51.443219][ T5812] el0t_64_sync_handler+0x44/0x104 [ 51.443227][ T5812] el0t_64_sync+0x198/0x19c [ 51.497342][ T5816] faux_driver vkms: [drm] Unknown color mode 6; guessing buffer size. [ 51.596339][ T4736] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 52.382689][ T5842] syz_tun: entered allmulticast mode [ 52.385667][ T5841] syz_tun: left allmulticast mode [ 52.803218][ T5859] FAULT_INJECTION: forcing a failure. [ 52.803218][ T5859] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 52.803243][ T5859] CPU: 1 UID: 0 PID: 5859 Comm: syz.4.278 Tainted: G L syzkaller #0 PREEMPT [ 52.803257][ T5859] Tainted: [L]=SOFTLOCKUP [ 52.803261][ T5859] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 52.803266][ T5859] Call trace: [ 52.803269][ T5859] show_stack+0x2c/0x3c (C) [ 52.803284][ T5859] __dump_stack+0x30/0x40 [ 52.803293][ T5859] dump_stack_lvl+0xd8/0x12c [ 52.803300][ T5859] dump_stack+0x1c/0x28 [ 52.803307][ T5859] should_fail_ex+0x418/0x58c [ 52.803317][ T5859] should_fail+0x14/0x24 [ 52.803325][ T5859] should_fail_usercopy+0x20/0x30 [ 52.803333][ T5859] _copy_to_iter+0x424/0x10f8 [ 52.803343][ T5859] simple_copy_to_iter+0x50/0x8c [ 52.803353][ T5859] __skb_datagram_iter+0xd4/0x77c [ 52.803361][ T5859] skb_copy_datagram_iter+0xf4/0x2c4 [ 52.803370][ T5859] netlink_recvmsg+0x244/0x868 [ 52.803380][ T5859] sock_recvmsg+0xd4/0x170 [ 52.803389][ T5859] ____sys_recvmsg+0x1b8/0x608 [ 52.803399][ T5859] ___sys_recvmsg+0x16c/0x1f4 [ 52.803408][ T5859] do_recvmmsg+0x288/0x7d4 [ 52.803418][ T5859] __sys_recvmmsg+0x200/0x270 [ 52.803427][ T5859] __arm64_sys_recvmmsg+0xe0/0x108 [ 52.803437][ T5859] invoke_syscall+0x98/0x244 [ 52.803453][ T5859] el0_svc_common+0xec/0x23c [ 52.803461][ T5859] do_el0_svc+0x4c/0x5c [ 52.803469][ T5859] el0_svc+0x60/0x1d8 [ 52.803477][ T5859] el0t_64_sync_handler+0x44/0x104 [ 52.803484][ T5859] el0t_64_sync+0x198/0x19c [ 53.309156][ T24] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 53.309175][ T24] Bluetooth: hci1: Error when powering off device on rfkill (-110) [ 53.310629][ T4744] Bluetooth: hci1: command 0x0c1a tx timeout [ 53.359040][ T5866] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 53.789075][ T5876] atomic_op 0000000005cee8d0 conn xmit_atomic 0000000000000000 [ 54.113671][ T5889] FAULT_INJECTION: forcing a failure. [ 54.113671][ T5889] name failslab, interval 1, probability 0, space 0, times 0 [ 54.113695][ T5889] CPU: 1 UID: 0 PID: 5889 Comm: syz.0.285 Tainted: G L syzkaller #0 PREEMPT [ 54.113707][ T5889] Tainted: [L]=SOFTLOCKUP [ 54.113711][ T5889] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 54.113716][ T5889] Call trace: [ 54.113719][ T5889] show_stack+0x2c/0x3c (C) [ 54.113735][ T5889] __dump_stack+0x30/0x40 [ 54.113747][ T5889] dump_stack_lvl+0xd8/0x12c [ 54.113755][ T5889] dump_stack+0x1c/0x28 [ 54.113763][ T5889] should_fail_ex+0x418/0x58c [ 54.113774][ T5889] should_failslab+0xc4/0x120 [ 54.113784][ T5889] __kmalloc_cache_noprof+0x94/0x5fc [ 54.113795][ T5889] input_allocate_device+0x54/0x2a0 [ 54.113806][ T5889] uinput_write+0x424/0xb0c [ 54.113816][ T5889] vfs_write+0x2a4/0xa0c [ 54.113825][ T5889] ksys_write+0x12c/0x228 [ 54.113834][ T5889] __arm64_sys_write+0x84/0x98 [ 54.113843][ T5889] invoke_syscall+0x98/0x244 [ 54.113852][ T5889] el0_svc_common+0xec/0x23c [ 54.113860][ T5889] do_el0_svc+0x4c/0x5c [ 54.113868][ T5889] el0_svc+0x60/0x1d8 [ 54.113877][ T5889] el0t_64_sync_handler+0x44/0x104 [ 54.113885][ T5889] el0t_64_sync+0x198/0x19c [ 54.172099][ T5894] syz_tun: entered allmulticast mode [ 54.195949][ T5894] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 54.198163][ T4745] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.459248][ T5893] syz_tun: left allmulticast mode [ 54.487844][ T4743] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.501259][ T5902] FAULT_INJECTION: forcing a failure. [ 54.501259][ T5902] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 54.501282][ T5902] CPU: 1 UID: 0 PID: 5902 Comm: syz.3.289 Tainted: G L syzkaller #0 PREEMPT [ 54.501296][ T5902] Tainted: [L]=SOFTLOCKUP [ 54.501299][ T5902] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 54.501304][ T5902] Call trace: [ 54.501307][ T5902] show_stack+0x2c/0x3c (C) [ 54.501322][ T5902] __dump_stack+0x30/0x40 [ 54.501330][ T5902] dump_stack_lvl+0xd8/0x12c [ 54.501337][ T5902] dump_stack+0x1c/0x28 [ 54.501344][ T5902] should_fail_ex+0x418/0x58c [ 54.501354][ T5902] should_fail+0x14/0x24 [ 54.501362][ T5902] should_fail_usercopy+0x20/0x30 [ 54.501370][ T5902] _copy_to_iter+0x424/0x10f8 [ 54.501380][ T5902] simple_copy_to_iter+0x50/0x8c [ 54.501389][ T5902] __skb_datagram_iter+0xd4/0x77c [ 54.501398][ T5902] skb_copy_datagram_iter+0xf4/0x2c4 [ 54.501406][ T5902] netlink_recvmsg+0x244/0x868 [ 54.501417][ T5902] sock_recvmsg+0xd4/0x170 [ 54.501426][ T5902] ____sys_recvmsg+0x1b8/0x608 [ 54.501436][ T5902] ___sys_recvmsg+0x16c/0x1f4 [ 54.501445][ T5902] do_recvmmsg+0x288/0x7d4 [ 54.501462][ T5902] __sys_recvmmsg+0x200/0x270 [ 54.501471][ T5902] __arm64_sys_recvmmsg+0xe0/0x108 [ 54.501481][ T5902] invoke_syscall+0x98/0x244 [ 54.501489][ T5902] el0_svc_common+0xec/0x23c [ 54.501496][ T5902] do_el0_svc+0x4c/0x5c [ 54.501503][ T5902] el0_svc+0x60/0x1d8 [ 54.501511][ T5902] el0t_64_sync_handler+0x44/0x104 [ 54.501518][ T5902] el0t_64_sync+0x198/0x19c [ 54.554761][ T5907] netlink: 4 bytes leftover after parsing attributes in process `syz.2.290'. [ 54.572829][ T5909] set_capacity_and_notify: 4 callbacks suppressed [ 54.572841][ T5909] loop0: detected capacity change from 0 to 1024 [ 54.590239][ T5909] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 55.250371][ T30] audit: type=1326 audit(55.220:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5925 comm="syz.4.297" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff8077a228 code=0x0 [ 55.366430][ T5901] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 55.366488][ T5901] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 55.372145][ T5901] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 55.378999][ T5901] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 55.379026][ T5901] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 55.379921][ T5901] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 55.455483][ T5930] netlink: 4 bytes leftover after parsing attributes in process `syz.3.298'. [ 55.472916][ T4743] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.518492][ T5937] netlink: 8 bytes leftover after parsing attributes in process `syz.3.298'. [ 55.518961][ T5937] xt_cgroup: path and classid specified [ 55.577438][ T5944] FAULT_INJECTION: forcing a failure. [ 55.577438][ T5944] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 55.577469][ T5944] CPU: 1 UID: 0 PID: 5944 Comm: syz.1.303 Tainted: G L syzkaller #0 PREEMPT [ 55.577481][ T5944] Tainted: [L]=SOFTLOCKUP [ 55.577484][ T5944] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 55.577488][ T5944] Call trace: [ 55.577491][ T5944] show_stack+0x2c/0x3c (C) [ 55.577505][ T5944] __dump_stack+0x30/0x40 [ 55.577513][ T5944] dump_stack_lvl+0xd8/0x12c [ 55.577521][ T5944] dump_stack+0x1c/0x28 [ 55.577528][ T5944] should_fail_ex+0x418/0x58c [ 55.577538][ T5944] should_fail+0x14/0x24 [ 55.577545][ T5944] should_fail_usercopy+0x20/0x30 [ 55.577554][ T5944] _copy_to_iter+0x424/0x10f8 [ 55.577564][ T5944] simple_copy_to_iter+0x50/0x8c [ 55.577574][ T5944] __skb_datagram_iter+0xd4/0x77c [ 55.577582][ T5944] skb_copy_datagram_iter+0xf4/0x2c4 [ 55.577591][ T5944] netlink_recvmsg+0x244/0x868 [ 55.577601][ T5944] sock_recvmsg+0xd4/0x170 [ 55.577610][ T5944] ____sys_recvmsg+0x1b8/0x608 [ 55.577620][ T5944] ___sys_recvmsg+0x16c/0x1f4 [ 55.577629][ T5944] do_recvmmsg+0x288/0x7d4 [ 55.577639][ T5944] __sys_recvmmsg+0x200/0x270 [ 55.577648][ T5944] __arm64_sys_recvmmsg+0xe0/0x108 [ 55.577658][ T5944] invoke_syscall+0x98/0x244 [ 55.577666][ T5944] el0_svc_common+0xec/0x23c [ 55.577673][ T5944] do_el0_svc+0x4c/0x5c [ 55.577681][ T5944] el0_svc+0x60/0x1d8 [ 55.577689][ T5944] el0t_64_sync_handler+0x44/0x104 [ 55.577696][ T5944] el0t_64_sync+0x198/0x19c [ 55.592499][ T5946] syz_tun: entered allmulticast mode [ 55.592833][ T5945] syz_tun: left allmulticast mode [ 55.696771][ T5949] atomic_op 00000000a62f7ea4 conn xmit_atomic 0000000000000000 [ 55.886106][ T5954] ip_tables: iptables: counters copy to user failed while replacing table [ 55.924204][ T5961] FAULT_INJECTION: forcing a failure. [ 55.924204][ T5961] name failslab, interval 1, probability 0, space 0, times 0 [ 55.924231][ T5961] CPU: 0 UID: 0 PID: 5961 Comm: syz.0.308 Tainted: G L syzkaller #0 PREEMPT [ 55.924244][ T5961] Tainted: [L]=SOFTLOCKUP [ 55.924248][ T5961] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 55.924253][ T5961] Call trace: [ 55.924256][ T5961] show_stack+0x2c/0x3c (C) [ 55.924272][ T5961] __dump_stack+0x30/0x40 [ 55.924281][ T5961] dump_stack_lvl+0xd8/0x12c [ 55.924289][ T5961] dump_stack+0x1c/0x28 [ 55.924297][ T5961] should_fail_ex+0x418/0x58c [ 55.924309][ T5961] should_failslab+0xc4/0x120 [ 55.924319][ T5961] kmem_cache_alloc_noprof+0x94/0x5d4 [ 55.924329][ T5961] alloc_empty_file+0x6c/0x1cc [ 55.924340][ T5961] alloc_file+0x58/0x98 [ 55.924350][ T5961] alloc_file_pseudo+0xe0/0x198 [ 55.924360][ T5961] sock_alloc_file+0xb4/0x1ac [ 55.924372][ T5961] __sys_socket+0x90/0xec [ 55.924382][ T5961] __arm64_sys_socket+0x84/0x9c [ 55.924393][ T5961] invoke_syscall+0x98/0x244 [ 55.924402][ T5961] el0_svc_common+0xec/0x23c [ 55.924410][ T5961] do_el0_svc+0x4c/0x5c [ 55.924418][ T5961] el0_svc+0x60/0x1d8 [ 55.924428][ T5961] el0t_64_sync_handler+0x44/0x104 [ 55.924442][ T5961] el0t_64_sync+0x198/0x19c [ 55.981162][ T5968] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 55.985850][ T5968] netlink: 24 bytes leftover after parsing attributes in process `syz.0.311'. [ 56.103862][ T4744] Bluetooth: hci2: command 0x0c1a tx timeout [ 56.249517][ T24] Bluetooth: hci2: Opcode 0x0c1a failed: -110 [ 56.249536][ T24] Bluetooth: hci2: Error when powering off device on rfkill (-110) [ 56.325419][ T5975] sctp: [Deprecated]: syz.0.313 (pid 5975) Use of int in max_burst socket option. [ 56.325419][ T5975] Use struct sctp_assoc_value instead [ 56.378509][ T5981] FAULT_INJECTION: forcing a failure. [ 56.378509][ T5981] name fail_futex, interval 1, probability 0, space 0, times 0 [ 56.378532][ T5981] CPU: 0 UID: 0 PID: 5981 Comm: syz.2.315 Tainted: G L syzkaller #0 PREEMPT [ 56.378544][ T5981] Tainted: [L]=SOFTLOCKUP [ 56.378547][ T5981] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 56.378553][ T5981] Call trace: [ 56.378556][ T5981] show_stack+0x2c/0x3c (C) [ 56.378571][ T5981] __dump_stack+0x30/0x40 [ 56.378580][ T5981] dump_stack_lvl+0xd8/0x12c [ 56.378588][ T5981] dump_stack+0x1c/0x28 [ 56.378596][ T5981] should_fail_ex+0x418/0x58c [ 56.378607][ T5981] should_fail+0x14/0x24 [ 56.378616][ T5981] get_futex_key+0x1ec/0x12b0 [ 56.378628][ T5981] futex_wait_setup+0x58/0x674 [ 56.378636][ T5981] __futex_wait+0x108/0x25c [ 56.378644][ T5981] futex_wait+0x108/0x2c0 [ 56.378652][ T5981] do_futex+0x320/0x378 [ 56.378663][ T5981] __arm64_sys_futex+0x2e4/0x418 [ 56.378676][ T5981] invoke_syscall+0x98/0x244 [ 56.378684][ T5981] el0_svc_common+0xec/0x23c [ 56.378695][ T5981] do_el0_svc+0x4c/0x5c [ 56.378703][ T5981] el0_svc+0x60/0x1d8 [ 56.378712][ T5981] el0t_64_sync_handler+0x44/0x104 [ 56.378720][ T5981] el0t_64_sync+0x198/0x19c [ 56.535613][ T5985] atomic_op 000000008f730676 conn xmit_atomic 0000000000000000 [ 56.577221][ T4744] Bluetooth: hci3: command 0x0c1a tx timeout [ 56.578957][ T24] Bluetooth: hci3: Opcode 0x0c1a failed: -110 [ 56.578971][ T24] Bluetooth: hci3: Error when powering off device on rfkill (-110) [ 56.774357][ T6001] loop2: detected capacity change from 0 to 1024 [ 56.775232][ T6001] ext4: Bad value for 'stripe' [ 56.788639][ T5999] FAULT_INJECTION: forcing a failure. [ 56.788639][ T5999] name failslab, interval 1, probability 0, space 0, times 0 [ 56.788666][ T5999] CPU: 1 UID: 0 PID: 5999 Comm: syz.1.321 Tainted: G L syzkaller #0 PREEMPT [ 56.788681][ T5999] Tainted: [L]=SOFTLOCKUP [ 56.788684][ T5999] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 56.788690][ T5999] Call trace: [ 56.788693][ T5999] show_stack+0x2c/0x3c (C) [ 56.788709][ T5999] __dump_stack+0x30/0x40 [ 56.788719][ T5999] dump_stack_lvl+0xd8/0x12c [ 56.788728][ T5999] dump_stack+0x1c/0x28 [ 56.788736][ T5999] should_fail_ex+0x418/0x58c [ 56.788746][ T5999] should_failslab+0xc4/0x120 [ 56.788757][ T5999] kmem_cache_alloc_lru_noprof+0x98/0x5d8 [ 56.788767][ T5999] __d_alloc+0x50/0x600 [ 56.788778][ T5999] d_alloc_pseudo+0x2c/0xd8 [ 56.788789][ T5999] alloc_path_pseudo+0xe8/0x1d4 [ 56.788800][ T5999] alloc_file_pseudo+0xb0/0x198 [ 56.788810][ T5999] sock_alloc_file+0xb4/0x1ac [ 56.788821][ T5999] __sys_socket+0x90/0xec [ 56.788832][ T5999] __arm64_sys_socket+0x84/0x9c [ 56.788843][ T5999] invoke_syscall+0x98/0x244 [ 56.788852][ T5999] el0_svc_common+0xec/0x23c [ 56.788860][ T5999] do_el0_svc+0x4c/0x5c [ 56.788868][ T5999] el0_svc+0x60/0x1d8 [ 56.788876][ T5999] el0t_64_sync_handler+0x44/0x104 [ 56.788888][ T5999] el0t_64_sync+0x198/0x19c [ 56.849092][ T6001] loop2: detected capacity change from 0 to 4096 [ 56.866089][ T6001] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 56.872805][ T6009] loop3: detected capacity change from 0 to 1024 [ 56.910909][ T6001] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=284ec1a8, mo2=0003] [ 56.910965][ T6001] System zones: 0-5 [ 56.913198][ T6009] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 56.913336][ T6001] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 56.924336][ T6001] EXT4-fs error (device loop2): ext4_validate_block_bitmap:445: comm syz.2.322: bg 0: block 98: padding at end of block bitmap is not set [ 56.924969][ T6001] EXT4-fs (loop2): Remounting filesystem read-only [ 56.957821][ T6017] loop1: detected capacity change from 0 to 512 [ 56.958129][ T6017] EXT4-fs: Ignoring removed nobh option [ 57.426778][ T6017] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 57.428188][ T4748] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.433164][ T40] Quota error (device loop2): dquot_write_dquot: Can't write quota structure (error -30). Quota may get out of sync! [ 57.433189][ T40] Quota error (device loop2): dquot_write_dquot: Can't write quota structure (error -30). Quota may get out of sync! [ 57.438488][ T6017] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 219 vs 220 free clusters [ 57.445007][ T6017] EXT4-fs (loop1): Remounting filesystem read-only [ 57.446807][ T6017] EXT4-fs (loop1): 1 truncate cleaned up [ 57.447275][ T6017] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 57.449398][ T6017] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.456342][ T4744] Bluetooth: hci4: command 0x0c1a tx timeout [ 57.457083][ T24] Bluetooth: hci4: Opcode 0x0c1a failed: -110 [ 57.457094][ T24] Bluetooth: hci4: Error when powering off device on rfkill (-110) [ 57.480068][ T6024] loop5: detected capacity change from 0 to 7 [ 57.481532][ T6024] Dev loop5: unable to read RDB block 7 [ 57.481549][ T6024] loop5: AHDI p1 p2 [ 57.481562][ T6024] loop5: partition table partially beyond EOD, truncated [ 57.481647][ T6024] loop5: p1 start 1818582900 is beyond EOD, truncated [ 57.551338][ T6032] loop4: detected capacity change from 0 to 512 [ 57.558186][ T6032] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 57.580398][ T4736] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.713110][ T6050] 9p: Bad value for 'rfdno' [ 57.757534][ T6052] loop0: detected capacity change from 0 to 1024 [ 57.757943][ T6052] ext4: Bad value for 'stripe' [ 57.780940][ T4745] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.792360][ T6052] loop0: detected capacity change from 0 to 4096 [ 57.797308][ T6052] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 57.804585][ T6052] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=284ec1a8, mo2=0003] [ 57.804630][ T6052] System zones: 0-5 [ 57.810916][ T6052] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 57.826686][ T6052] EXT4-fs error (device loop0): ext4_validate_block_bitmap:445: comm syz.0.340: bg 0: block 98: padding at end of block bitmap is not set [ 57.826886][ T6052] EXT4-fs (loop0): Remounting filesystem read-only [ 58.072613][ T4743] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.074644][ T1200] Quota error (device loop0): dquot_write_dquot: Can't write quota structure (error -30). Quota may get out of sync! [ 58.074666][ T1200] Quota error (device loop0): dquot_write_dquot: Can't write quota structure (error -30). Quota may get out of sync! [ 58.108006][ T6059] loop4: detected capacity change from 0 to 512 [ 58.108323][ T6059] vfat: Unknown parameter '' [ 58.202118][ T6078] key id 000004d2 not found [ 58.388379][ T6097] ext4: Bad value for 'stripe' [ 58.723682][ T6097] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 58.730087][ T6097] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=284ec1a8, mo2=0003] [ 58.730129][ T6097] System zones: 0-5 [ 58.747285][ T6097] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 58.767922][ T6101] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 58.771607][ T4736] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.920874][ T6113] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 58.998533][ T6129] input: syz0 as /devices/virtual/input/input17 [ 59.000794][ T6129] mac80211_hwsim hwsim8 wlan0: entered promiscuous mode [ 59.037909][ T6126] team0: No ports can be present during mode change [ 59.047943][ T6127] netlink: 'syz.0.363': attribute type 1 has an invalid length. [ 59.049287][ T6126] netlink: 'syz.0.363': attribute type 1 has an invalid length. [ 59.095694][ T6134] EXT4-fs: Ignoring removed i_version option [ 59.095710][ T6134] EXT4-fs: Ignoring removed mblk_io_submit option [ 59.102461][ T6134] EXT4-fs (loop1): Test dummy encryption mode enabled [ 59.109651][ T6134] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 59.176238][ T4737] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.232629][ T6157] ext4: Bad value for 'stripe' [ 59.265892][ T6159] 9p: Bad value for 'rfdno' [ 59.279214][ T6161] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 59.280431][ T6157] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 59.292746][ T6157] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=284ec1a8, mo2=0003] [ 59.292799][ T6157] System zones: 0-5 [ 59.299565][ T6157] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 59.319953][ T4737] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.382345][ T6173] Dev loop5: unable to read RDB block 7 [ 59.382368][ T6173] loop5: AHDI p1 p2 [ 59.382378][ T6173] loop5: partition table partially beyond EOD, truncated [ 59.382506][ T6173] loop5: p1 start 1818582900 is beyond EOD, truncated [ 59.439294][ T6181] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 59.639040][ T6190] netlink: 12 bytes leftover after parsing attributes in process `syz.2.383'. [ 59.642749][ T6190] xfrm1: entered promiscuous mode [ 59.642762][ T6190] xfrm1: entered allmulticast mode [ 59.682195][ T6193] set_capacity_and_notify: 7 callbacks suppressed [ 59.682208][ T6193] loop2: detected capacity change from 0 to 1024 [ 59.714323][ T6193] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 59.723367][ T6193] netlink: 12 bytes leftover after parsing attributes in process `syz.2.384'. [ 59.736747][ T6193] macvlan2: entered promiscuous mode [ 59.736762][ T6193] macvlan2: entered allmulticast mode [ 59.736862][ T6193] bridge1: port 1(macvlan2) entered blocking state [ 59.736934][ T6193] bridge1: port 1(macvlan2) entered disabled state [ 59.769098][ T6204] loop3: detected capacity change from 0 to 512 [ 59.773529][ T6204] EXT4-fs (loop3): Test dummy encryption mode enabled [ 59.779478][ T6204] EXT4-fs error (device loop3): ext4_iget_extra_inode:5210: inode #15: comm syz.3.389: corrupted in-inode xattr: invalid ea_ino [ 59.779501][ T6204] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 59.779757][ T6204] EXT4-fs error (device loop3): ext4_orphan_get:1408: comm syz.3.389: couldn't read orphan inode 15 (err -117) [ 59.779773][ T6204] loop3: lost filesystem error report for type 5 error -117 [ 59.780870][ T6204] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 59.798467][ T6205] FAULT_INJECTION: forcing a failure. [ 59.798467][ T6205] name failslab, interval 1, probability 0, space 0, times 0 [ 59.798490][ T6205] CPU: 0 UID: 0 PID: 6205 Comm: syz.4.388 Tainted: G L syzkaller #0 PREEMPT [ 59.798504][ T6205] Tainted: [L]=SOFTLOCKUP [ 59.798508][ T6205] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 59.798513][ T6205] Call trace: [ 59.798516][ T6205] show_stack+0x2c/0x3c (C) [ 59.798533][ T6205] __dump_stack+0x30/0x40 [ 59.798543][ T6205] dump_stack_lvl+0xd8/0x12c [ 59.798551][ T6205] dump_stack+0x1c/0x28 [ 59.798559][ T6205] should_fail_ex+0x418/0x58c [ 59.798570][ T6205] should_failslab+0xc4/0x120 [ 59.798580][ T6205] kmem_cache_alloc_lru_noprof+0x98/0x5d8 [ 59.798591][ T6205] __d_alloc+0x50/0x600 [ 59.798602][ T6205] d_alloc_pseudo+0x2c/0xd8 [ 59.798612][ T6205] alloc_path_pseudo+0xe8/0x1d4 [ 59.798624][ T6205] alloc_file_pseudo+0xb0/0x198 [ 59.798634][ T6205] sock_alloc_file+0xb4/0x1ac [ 59.798646][ T6205] __sys_socket+0x90/0xec [ 59.798656][ T6205] __arm64_sys_socket+0x84/0x9c [ 59.798667][ T6205] invoke_syscall+0x98/0x244 [ 59.798676][ T6205] el0_svc_common+0xec/0x23c [ 59.798684][ T6205] do_el0_svc+0x4c/0x5c [ 59.798692][ T6205] el0_svc+0x60/0x1d8 [ 59.798702][ T6205] el0t_64_sync_handler+0x44/0x104 [ 59.798710][ T6205] el0t_64_sync+0x198/0x19c [ 59.798999][ T6204] EXT4-fs: Ignoring sb option on remount [ 59.799067][ T6204] EXT4-fs: Remounting file system with no journal so ignoring journalled data option [ 59.827565][ T6204] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 59.952887][ T6217] netlink: 24 bytes leftover after parsing attributes in process `syz.4.393'. [ 60.028802][ T6219] netlink: 12 bytes leftover after parsing attributes in process `syz.2.394'. [ 60.029654][ T6219] tipc: Started in network mode [ 60.029750][ T6219] tipc: Node identity fff50000000000000000000000000001, cluster identity 4711 [ 60.029861][ T6219] tipc: Enabling of bearer rejected, failed to enable media [ 60.289945][ T6226] netlink: 12 bytes leftover after parsing attributes in process `syz.1.397'. [ 60.291678][ T6226] xfrm1: entered promiscuous mode [ 60.291689][ T6226] xfrm1: entered allmulticast mode [ 60.431631][ T6236] FAULT_INJECTION: forcing a failure. [ 60.431631][ T6236] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 60.431656][ T6236] CPU: 1 UID: 0 PID: 6236 Comm: syz.1.401 Tainted: G L syzkaller #0 PREEMPT [ 60.431670][ T6236] Tainted: [L]=SOFTLOCKUP [ 60.431673][ T6236] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 60.431678][ T6236] Call trace: [ 60.431681][ T6236] show_stack+0x2c/0x3c (C) [ 60.431696][ T6236] __dump_stack+0x30/0x40 [ 60.431705][ T6236] dump_stack_lvl+0xd8/0x12c [ 60.431712][ T6236] dump_stack+0x1c/0x28 [ 60.431719][ T6236] should_fail_ex+0x418/0x58c [ 60.431729][ T6236] should_fail_alloc_page+0xec/0x10c [ 60.431738][ T6236] prepare_alloc_pages+0x194/0x484 [ 60.431747][ T6236] __alloc_frozen_pages_noprof+0x180/0x578 [ 60.431756][ T6236] alloc_pages_mpol+0x1fc/0x3d0 [ 60.431766][ T6236] alloc_frozen_pages_noprof+0xc4/0x10c [ 60.431775][ T6236] alloc_pages_noprof+0x30/0x148 [ 60.431784][ T6236] pte_alloc_one_noprof+0x34/0x360 [ 60.431794][ T6236] do_huge_pmd_anonymous_page+0x284/0x9d4 [ 60.431803][ T6236] handle_mm_fault+0xed4/0x2b58 [ 60.431812][ T6236] __get_user_pages+0x82c/0x13b0 [ 60.431821][ T6236] populate_vma_page_range+0x260/0x358 [ 60.431830][ T6236] __mm_populate+0x204/0x328 [ 60.431839][ T6236] do_mlock+0x530/0x638 [ 60.431847][ T6236] __arm64_sys_mlock+0x80/0xb4 [ 60.431856][ T6236] invoke_syscall+0x98/0x244 [ 60.431863][ T6236] el0_svc_common+0xec/0x23c [ 60.431870][ T6236] do_el0_svc+0x4c/0x5c [ 60.431877][ T6236] el0_svc+0x60/0x1d8 [ 60.431886][ T6236] el0t_64_sync_handler+0x44/0x104 [ 60.431893][ T6236] el0t_64_sync+0x198/0x19c [ 60.566128][ T6239] FAULT_INJECTION: forcing a failure. [ 60.566128][ T6239] name failslab, interval 1, probability 0, space 0, times 0 [ 60.566155][ T6239] CPU: 1 UID: 0 PID: 6239 Comm: syz.3.402 Tainted: G L syzkaller #0 PREEMPT [ 60.566170][ T6239] Tainted: [L]=SOFTLOCKUP [ 60.566174][ T6239] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 60.566179][ T6239] Call trace: [ 60.566183][ T6239] show_stack+0x2c/0x3c (C) [ 60.566199][ T6239] __dump_stack+0x30/0x40 [ 60.566208][ T6239] dump_stack_lvl+0xd8/0x12c [ 60.566217][ T6239] dump_stack+0x1c/0x28 [ 60.566224][ T6239] should_fail_ex+0x418/0x58c [ 60.566235][ T6239] should_failslab+0xc4/0x120 [ 60.566245][ T6239] __kmalloc_noprof+0x108/0x6c8 [ 60.566256][ T6239] sk_prot_alloc+0xc4/0x1e8 [ 60.566266][ T6239] sk_alloc+0x44/0x320 [ 60.566274][ T6239] __netlink_create+0x78/0x23c [ 60.566286][ T6239] netlink_create+0x3b4/0x610 [ 60.566297][ T6239] __sock_create+0x31c/0x670 [ 60.566308][ T6239] __sys_socket_create+0xc0/0x11c [ 60.566319][ T6239] __sys_socket+0x44/0xec [ 60.566329][ T6239] __arm64_sys_socket+0x84/0x9c [ 60.566340][ T6239] invoke_syscall+0x98/0x244 [ 60.566353][ T6239] el0_svc_common+0xec/0x23c [ 60.566361][ T6239] do_el0_svc+0x4c/0x5c [ 60.566369][ T6239] el0_svc+0x60/0x1d8 [ 60.566378][ T6239] el0t_64_sync_handler+0x44/0x104 [ 60.566386][ T6239] el0t_64_sync+0x198/0x19c [ 61.056316][ T6257] netlink: 12 bytes leftover after parsing attributes in process `syz.4.410'. [ 61.141016][ T6227] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 61.155591][ T6265] FAULT_INJECTION: forcing a failure. [ 61.155591][ T6265] name failslab, interval 1, probability 0, space 0, times 0 [ 61.155614][ T6265] CPU: 0 UID: 0 PID: 6265 Comm: syz.1.414 Tainted: G L syzkaller #0 PREEMPT [ 61.155627][ T6265] Tainted: [L]=SOFTLOCKUP [ 61.155630][ T6265] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 61.155636][ T6265] Call trace: [ 61.155639][ T6265] show_stack+0x2c/0x3c (C) [ 61.155656][ T6265] __dump_stack+0x30/0x40 [ 61.155666][ T6265] dump_stack_lvl+0xd8/0x12c [ 61.155675][ T6265] dump_stack+0x1c/0x28 [ 61.155683][ T6265] should_fail_ex+0x418/0x58c [ 61.155694][ T6265] should_failslab+0xc4/0x120 [ 61.155704][ T6265] kmem_cache_alloc_lru_noprof+0x98/0x5d8 [ 61.155715][ T6265] __d_alloc+0x50/0x600 [ 61.155725][ T6265] d_alloc_pseudo+0x2c/0xd8 [ 61.155736][ T6265] alloc_path_pseudo+0xe8/0x1d4 [ 61.155747][ T6265] alloc_file_pseudo+0xb0/0x198 [ 61.155758][ T6265] sock_alloc_file+0xb4/0x1ac [ 61.155769][ T6265] __sys_socket+0x90/0xec [ 61.155780][ T6265] __arm64_sys_socket+0x84/0x9c [ 61.155791][ T6265] invoke_syscall+0x98/0x244 [ 61.155800][ T6265] el0_svc_common+0xec/0x23c [ 61.155808][ T6265] do_el0_svc+0x4c/0x5c [ 61.155816][ T6265] el0_svc+0x60/0x1d8 [ 61.155825][ T6265] el0t_64_sync_handler+0x44/0x104 [ 61.155833][ T6265] el0t_64_sync+0x198/0x19c [ 61.184705][ T6268] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 61.293310][ T6280] netlink: 12 bytes leftover after parsing attributes in process `syz.4.421'. [ 61.293366][ T6279] loop1: detected capacity change from 0 to 128 [ 61.293743][ T6279] vfat: Unknown parameter '' [ 61.341977][ T6287] netlink: 12 bytes leftover after parsing attributes in process `syz.4.422'. [ 61.370274][ T6292] netlink: 12 bytes leftover after parsing attributes in process `syz.1.424'. [ 61.383479][ T6292] vivid-000: disconnect [ 61.451714][ T6291] vivid-000: reconnect [ 61.855091][ T6303] FAULT_INJECTION: forcing a failure. [ 61.855091][ T6303] name failslab, interval 1, probability 0, space 0, times 0 [ 61.855117][ T6303] CPU: 1 UID: 0 PID: 6303 Comm: syz.0.428 Tainted: G L syzkaller #0 PREEMPT [ 61.855131][ T6303] Tainted: [L]=SOFTLOCKUP [ 61.855134][ T6303] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 61.855140][ T6303] Call trace: [ 61.855143][ T6303] show_stack+0x2c/0x3c (C) [ 61.855159][ T6303] __dump_stack+0x30/0x40 [ 61.855168][ T6303] dump_stack_lvl+0xd8/0x12c [ 61.855176][ T6303] dump_stack+0x1c/0x28 [ 61.855184][ T6303] should_fail_ex+0x418/0x58c [ 61.855194][ T6303] should_failslab+0xc4/0x120 [ 61.855204][ T6303] kmem_cache_alloc_noprof+0x94/0x5d4 [ 61.855215][ T6303] security_inode_alloc+0x40/0x304 [ 61.855227][ T6303] inode_init_always_gfp+0x704/0xb20 [ 61.855240][ T6303] alloc_inode+0x9c/0x198 [ 61.855252][ T6303] sock_alloc+0x4c/0x204 [ 61.855263][ T6303] __sock_create+0x108/0x670 [ 61.855274][ T6303] __sys_socketpair+0x244/0x528 [ 61.855284][ T6303] __arm64_sys_socketpair+0xa8/0xc4 [ 61.855296][ T6303] invoke_syscall+0x98/0x244 [ 61.855305][ T6303] el0_svc_common+0xec/0x23c [ 61.855313][ T6303] do_el0_svc+0x4c/0x5c [ 61.855321][ T6303] el0_svc+0x60/0x1d8 [ 61.855330][ T6303] el0t_64_sync_handler+0x44/0x104 [ 61.855338][ T6303] el0t_64_sync+0x198/0x19c [ 61.855357][ T6303] socket: no more sockets [ 61.910452][ T6308] loop4: detected capacity change from 0 to 4096 [ 61.915962][ T6308] EXT4-fs (loop4): Test dummy encryption mode enabled [ 61.915980][ T6308] EXT4-fs (loop4): DAX unsupported by block device. [ 61.928635][ T6314] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 62.028914][ T6319] netlink: 12 bytes leftover after parsing attributes in process `syz.0.433'. [ 62.097218][ T6334] Device name cannot be null; rc = [-22] [ 62.497304][ T24] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 62.500882][ T24] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 62.516605][ T6353] FAULT_INJECTION: forcing a failure. [ 62.516605][ T6353] name failslab, interval 1, probability 0, space 0, times 0 [ 62.516628][ T6353] CPU: 1 UID: 0 PID: 6353 Comm: syz.3.442 Tainted: G L syzkaller #0 PREEMPT [ 62.516641][ T6353] Tainted: [L]=SOFTLOCKUP [ 62.516645][ T6353] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 62.516650][ T6353] Call trace: [ 62.516654][ T6353] show_stack+0x2c/0x3c (C) [ 62.516670][ T6353] __dump_stack+0x30/0x40 [ 62.516679][ T6353] dump_stack_lvl+0xd8/0x12c [ 62.516687][ T6353] dump_stack+0x1c/0x28 [ 62.516695][ T6353] should_fail_ex+0x418/0x58c [ 62.516706][ T6353] should_failslab+0xc4/0x120 [ 62.516716][ T6353] kmem_cache_alloc_noprof+0x94/0x5d4 [ 62.516727][ T6353] security_file_alloc+0x3c/0x300 [ 62.516744][ T6353] init_file+0x90/0x28c [ 62.516755][ T6353] alloc_empty_file+0x80/0x1cc [ 62.516765][ T6353] alloc_file+0x58/0x98 [ 62.516776][ T6353] alloc_file_pseudo+0xe0/0x198 [ 62.516786][ T6353] sock_alloc_file+0xb4/0x1ac [ 62.516798][ T6353] __sys_socket+0x90/0xec [ 62.516808][ T6353] __arm64_sys_socket+0x84/0x9c [ 62.516819][ T6353] invoke_syscall+0x98/0x244 [ 62.516828][ T6353] el0_svc_common+0xec/0x23c [ 62.516837][ T6353] do_el0_svc+0x4c/0x5c [ 62.516845][ T6353] el0_svc+0x60/0x1d8 [ 62.516854][ T6353] el0t_64_sync_handler+0x44/0x104 [ 62.516862][ T6353] el0t_64_sync+0x198/0x19c [ 62.829191][ T6378] loop0: detected capacity change from 0 to 256 [ 63.814192][ T6381] atomic_op 000000000fd41e3d conn xmit_atomic 0000000000000000 [ 64.025316][ T6395] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 64.072985][ T6401] syz_tun: entered allmulticast mode [ 64.073249][ T6400] syz_tun: left allmulticast mode [ 64.110010][ T6408] netlink: 224 bytes leftover after parsing attributes in process `syz.1.452'. [ 64.110030][ T6408] netlink: 16 bytes leftover after parsing attributes in process `syz.1.452'. [ 64.129954][ T6412] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 64.162025][ T6421] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 64.187172][ T6421] netlink: 24 bytes leftover after parsing attributes in process `syz.3.456'. [ 64.189811][ T6428] xt_IDLETIMER: label is empty or not nul-terminated [ 64.258767][ T6434] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 64.259041][ T6434] block device autoloading is deprecated and will be removed. [ 64.276847][ T6436] netlink: 8 bytes leftover after parsing attributes in process `syz.2.460'. [ 64.582734][ T26] cfg80211: failed to load regulatory.db [ 64.585650][ T1613] ieee802154 phy0 wpan0: encryption failed: -22 [ 64.587532][ T1613] ieee802154 phy1 wpan1: encryption failed: -22 [ 64.640707][ T6447] atomic_op 00000000a334b7dc conn xmit_atomic 0000000000000000 [ 64.979946][ T6434] md/raid1:md4: active with 1 out of 3 mirrors [ 64.980582][ T6434] md4: detected capacity change from 0 to 4096 [ 64.983547][ T6456] md_update_sb: can't update sb for read-only array md4 [ 65.047043][ T6462] netlink: 12 bytes leftover after parsing attributes in process `syz.2.464'. [ 65.059489][ T6460] loop4: detected capacity change from 0 to 256 [ 65.225778][ T6472] tipc: Enabled bearer , priority 0 [ 65.226055][ T6472] syzkaller0: entered promiscuous mode [ 65.226066][ T6472] syzkaller0: entered allmulticast mode [ 65.468621][ T6472] sch_tbf: burst 173 is lower than device syzkaller0 mtu (1514) ! [ 65.471349][ T6472] tipc: Resetting bearer [ 65.472743][ T6472] sch_tbf: burst 19840 is lower than device lo mtu (65550) ! [ 65.475923][ T6471] tipc: Resetting bearer [ 65.484557][ T6471] tipc: Disabling bearer [ 65.556130][ T6480] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 65.569645][ T6483] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 65.613274][ T6485] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 65.681784][ T6495] ================================================================== [ 65.681796][ T6495] BUG: KASAN: slab-use-after-free in snapshot_ctr+0x4ec/0x1030 [ 65.681810][ T6495] Read of size 8 at addr ffff0000dce90498 by task syz.3.476/6495 [ 65.681818][ T6495] [ 65.681824][ T6495] CPU: 1 UID: 0 PID: 6495 Comm: syz.3.476 Tainted: G L syzkaller #0 PREEMPT [ 65.681836][ T6495] Tainted: [L]=SOFTLOCKUP [ 65.681838][ T6495] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 65.681843][ T6495] Call trace: [ 65.681846][ T6495] show_stack+0x2c/0x3c (C) [ 65.681858][ T6495] __dump_stack+0x30/0x40 [ 65.681867][ T6495] dump_stack_lvl+0xd8/0x12c [ 65.681875][ T6495] print_address_description+0xb0/0x238 [ 65.681887][ T6495] print_report+0x68/0x84 [ 65.681896][ T6495] kasan_report+0x8c/0xc4 [ 65.681910][ T6495] __asan_report_load8_noabort+0x20/0x2c [ 65.681928][ T6495] snapshot_ctr+0x4ec/0x1030 [ 65.681936][ T6495] dm_table_add_target+0x44c/0xb18 [ 65.681945][ T6495] table_load+0x27c/0x764 [ 65.681955][ T6495] dm_ctl_ioctl+0x884/0xbbc [ 65.681965][ T6495] __arm64_sys_ioctl+0x154/0x1cc [ 65.681975][ T6495] invoke_syscall+0x98/0x244 [ 65.681984][ T6495] el0_svc_common+0xec/0x23c [ 65.681992][ T6495] do_el0_svc+0x4c/0x5c [ 65.682000][ T6495] el0_svc+0x60/0x1d8 [ 65.682009][ T6495] el0t_64_sync_handler+0x44/0x104 [ 65.682017][ T6495] el0t_64_sync+0x198/0x19c [ 65.682026][ T6495] [ 65.682028][ T6495] Allocated by task 6495: [ 65.682032][ T6495] kasan_save_track+0x40/0x78 [ 65.682042][ T6495] kasan_save_alloc_info+0x40/0x50 [ 65.682052][ T6495] __kasan_kmalloc+0x9c/0xb4 [ 65.682061][ T6495] __kmalloc_cache_node_noprof+0x39c/0x618 [ 65.682071][ T6495] dm_get_table_device+0x1f0/0x62c [ 65.682081][ T6495] dm_get_device+0x2b0/0x634 [ 65.682087][ T6495] snapshot_ctr+0x258/0x1030 [ 65.682093][ T6495] dm_table_add_target+0x44c/0xb18 [ 65.682099][ T6495] table_load+0x27c/0x764 [ 65.682107][ T6495] dm_ctl_ioctl+0x884/0xbbc [ 65.682115][ T6495] __arm64_sys_ioctl+0x154/0x1cc [ 65.682123][ T6495] invoke_syscall+0x98/0x244 [ 65.682129][ T6495] el0_svc_common+0xec/0x23c [ 65.682136][ T6495] do_el0_svc+0x4c/0x5c [ 65.682142][ T6495] el0_svc+0x60/0x1d8 [ 65.682147][ T6495] el0t_64_sync_handler+0x44/0x104 [ 65.682154][ T6495] el0t_64_sync+0x198/0x19c [ 65.682160][ T6495] [ 65.682161][ T6495] Freed by task 6495: [ 65.682165][ T6495] kasan_save_track+0x40/0x78 [ 65.682173][ T6495] kasan_save_free_info+0x54/0x6c [ 65.682183][ T6495] __kasan_slab_free+0x74/0xa4 [ 65.682192][ T6495] kfree+0x188/0x658 [ 65.682199][ T6495] dm_put_table_device+0x238/0x2a0 [ 65.682208][ T6495] dm_get_device+0x468/0x634 [ 65.682214][ T6495] snapshot_ctr+0x3d0/0x1030 [ 65.682220][ T6495] dm_table_add_target+0x44c/0xb18 [ 65.682226][ T6495] table_load+0x27c/0x764 [ 65.682234][ T6495] dm_ctl_ioctl+0x884/0xbbc [ 65.682242][ T6495] __arm64_sys_ioctl+0x154/0x1cc [ 65.682250][ T6495] invoke_syscall+0x98/0x244 [ 65.682256][ T6495] el0_svc_common+0xec/0x23c [ 65.682262][ T6495] do_el0_svc+0x4c/0x5c [ 65.682268][ T6495] el0_svc+0x60/0x1d8 [ 65.682274][ T6495] el0t_64_sync_handler+0x44/0x104 [ 65.682280][ T6495] el0t_64_sync+0x198/0x19c [ 65.682286][ T6495] [ 65.682288][ T6495] The buggy address belongs to the object at ffff0000dce90480 [ 65.682288][ T6495] which belongs to the cache kmalloc-96 of size 96 [ 65.682294][ T6495] The buggy address is located 24 bytes inside of [ 65.682294][ T6495] freed 96-byte region [ffff0000dce90480, ffff0000dce904e0) [ 65.682302][ T6495] [ 65.682304][ T6495] The buggy address belongs to the physical page: [ 65.682307][ T6495] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x11ce90 [ 65.682315][ T6495] flags: 0x5ffc00000000000(node=0|zone=2|lastcpupid=0x7ff) [ 65.682322][ T6495] page_type: f5(slab) [ 65.682330][ T6495] raw: 05ffc00000000000 ffff0000c0001280 dead000000000100 dead000000000122 [ 65.682337][ T6495] raw: 0000000000000000 0000000000200020 00000000f5000000 0000000000000000 [ 65.682341][ T6495] page dumped because: kasan: bad access detected [ 65.682344][ T6495] [ 65.682346][ T6495] Memory state around the buggy address: [ 65.682350][ T6495] ffff0000dce90380: fa fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc [ 65.682355][ T6495] ffff0000dce90400: 00 00 00 00 00 00 00 00 00 00 00 fc fc fc fc fc [ 65.682361][ T6495] >ffff0000dce90480: fa fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc [ 65.682364][ T6495] ^ [ 65.682369][ T6495] ffff0000dce90500: 00 00 00 00 00 00 00 00 00 fc fc fc fc fc fc fc [ 65.682374][ T6495] ffff0000dce90580: fa fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc [ 65.682378][ T6495] ================================================================== [ 65.682455][ T6495] Disabling lock debugging due to kernel taint [ 65.682463][ T6495] device-mapper: table: 248:0: device 1:6 not in table devices list [ 65.682478][ T6495] device-mapper: table: 248:0: snapshot: COW device cannot be the same as origin device (-EINVAL) [ 65.682486][ T6495] device-mapper: ioctl: error adding target to table [ 65.682494][ T6495] device-mapper: table: 248:0: dm_table_destroy: dm_put_device call missing for 1:6