last executing test programs: 4.550828209s ago: executing program 2 (id=697): listns(0x0, 0x0, 0x0, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000140)=[@in={0x2, 0x4e21, @local}], 0x10) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x9, 0x4) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000001c0)=[@in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x24}}], 0x10) listen(r0, 0x7) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x9, 0xb, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xf}, [@printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7}}]}, &(0x7f0000000280)='GPL\x00', 0xa, 0x1008, &(0x7f0000001cc0)=""/4104, 0x41100, 0xc}, 0x94) 4.550010562s ago: executing program 2 (id=698): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000180)=@raw={'raw\x00', 0x4001, 0x3, 0x200, 0x0, 0x0, 0x148, 0x0, 0x148, 0x1b8, 0x240, 0x240, 0x1b8, 0x240, 0x7fffffe, 0x0, {[{{@ip={@private=0xa010102, @private=0xa010101, 0x0, 0xff000000, 'ip6tnl0\x00', 'wlan1\x00', {}, {0xff}, 0x88, 0x3, 0x10}, 0x0, 0x70, 0xd0}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}, [0xff000000, 0xffffff00, 0x0, 0xffffff00], 0x4e21, 0x4e23, 0x4e20, 0x4e23, 0x8, 0x4, 0x5f4a, 0x100, 0x6}}}, {{@ip={@empty, @empty, 0xff000000, 0xff000000, 'wlan0\x00', 'pimreg1\x00', {0xff}, {0xff}, 0xc, 0x0, 0x60}, 0x0, 0x70, 0x98}, @common=@unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x2}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x260) r1 = socket$inet6(0xa, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={0x0, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) bind$inet6(r1, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r1, 0x29, 0x3, &(0x7f00000004c0)=0x40000006, 0x4) recvmmsg(r1, &(0x7f0000000500), 0x400000000000284, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0x8, &(0x7f0000000540)=0x7f, 0x4) sendto$inet6(r1, 0x0, 0x0, 0x20000001, &(0x7f0000000580)={0xa, 0x4e20, 0xc, @mcast1}, 0x1c) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f0000000100)={[{@grpid}, {@mblk_io_submit}, {@nodioread_nolock}, {@test_dummy_encryption}, {@init_itable_val={'init_itable', 0x3d, 0x1}}, {@nodelalloc}, {@minixdf}, {@nolazytime}]}, 0x1, 0xbaf, &(0x7f0000000940)="$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") syz_mount_image$vfat(&(0x7f0000001500), &(0x7f0000001540)='./file0\x00', 0x0, &(0x7f0000001580)=ANY=[@ANYBLOB="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"], 0x1, 0x11f4, &(0x7f0000001ac0)="$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") ioctl$SIOCSIFHWADDR(r0, 0x89fc, &(0x7f0000000900)={'bond0\x00', @random="0600002000"}) 4.402434868s ago: executing program 2 (id=703): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000001000)={0xc, 0xc, &(0x7f0000000840)=ANY=[@ANYBLOB="70d575e49c5f5ae055a356d46cd33bf28d16a4dcac95c2eed2c58dfbeeeb01566130a8a5525a70178a5002a86c4010c06c904b6636f941d9163e4973090f951882a6d4f02088777d0c6c1a0a228ee084faefac19f39c8bc0264a84e870b24eef256380842c1e14eb2a3076ec270f0cda7ec6a3154c26dae30a0214d984ac90253ad3c8e8a697623025322aa9d0fe7501fae99d31a194b500d73d5c80456167ef81d41caaf3afdf246117ad0f2f69d1d81bca16a8bcfe2b816b961b124e1654b96927fb604871b0402d7efa3fc31097b2d835fb2b3451fcb2d0e9eb23a91b10"], &(0x7f00000011c0)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x7, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000080)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000200), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000240), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000300)=0x6) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x4, &(0x7f0000000340)={0x0, &(0x7f0000000380)}) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/sys/net/ipv4/vs/expire_quiescent_template\x00', 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) symlinkat(&(0x7f0000000400)='./file1/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f0000000500)='./file1\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f0000000580)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8054}}], 0x1, 0x48050) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) syz_emit_vhci(&(0x7f00000005c0)=ANY=[@ANYBLOB="04a0cf53cf5db7935b2c"], 0x8) syz_io_uring_setup(0x3b, &(0x7f0000000600)={0x0, 0x0, 0x400}, 0x0, &(0x7f0000000680), 0x0) connect$inet(0xffffffffffffffff, &(0x7f00000006c0)={0x2, 0x4e20, @loopback}, 0x10) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000700), 0x244000, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r6, 0xc018937b, &(0x7f0000000740)={{0x1, 0x1, 0x18}, './file0\x00'}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000780)={0x0, 0xffffffffffffff6b, &(0x7f00000007c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="240000002100210100000000000000000a00"], 0x24}}, 0x4080880) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) ioctl$TUNSETDEBUG(r4, 0x400454c9, &(0x7f0000000200)=0x6) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={r0, 0x0, 0xe, 0x0, &(0x7f0000002280)="0011223344550011223344560800", 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 3.614791433s ago: executing program 4 (id=719): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000800)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000002a0000000100000000000001040000002000000105000000010000040400000013000000010000000000000017000000020000040800000021000000010000000000000025000000020000002000000000696e74006270665f7370696e5f6c6f636b0076616c006d61705f76616c756500636e74006c"], 0x0, 0x8e}, 0x28) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@base={0x2, 0x4, 0x8, 0x1, 0x0, 0x0, 0x0, '\x00', 0x0, r0, 0x1, 0x3}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x16, 0x10, &(0x7f0000000a00)=ANY=[@ANYBLOB="bfa200000000000007020000fcffffff620200000000000018110000", @ANYRES32=r1, @ANYBLOB="000000000000000085000000010000001500070000000000bf06000000000000bf610000000000000701000004000000850000005d000000bf6100003f0000000701000004000000850000005d000000b70000000000000095"], &(0x7f0000000a80)='GPL\x00', 0x7, 0x0, 0x0, 0x2a079ff5b90a2b9f, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3.575040792s ago: executing program 4 (id=722): setsockopt$MRT6_FLUSH(0xffffffffffffffff, 0x29, 0xd1, 0x0, 0x4) (async) r0 = socket$inet_udp(0x2, 0x2, 0x0) (async, rerun: 64) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 64) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$inet_opts(r2, 0x0, 0x4, &(0x7f00000009c0)="d6b00835bebc2f7dd53b71d77c237283168de796671cca01f989a4e8ae624ce38ad365", 0x23) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) (async, rerun: 32) sendmsg$IPCTNL_MSG_EXP_NEW(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) (async, rerun: 32) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000640), r3) r5 = syz_open_procfs$userns(0xffffffffffffffff, 0x0) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, 0x0) (rerun: 64) r6 = getpid() (async, rerun: 32) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000500)={'wpan0\x00', 0x0}) (async, rerun: 32) ioctl$XFS_IOC_FSGETXATTRA(r5, 0x801c582d, &(0x7f0000000440)) (async) r8 = landlock_create_ruleset(&(0x7f0000000140)={0xc0d8, 0x1, 0x3}, 0x18, 0x0) landlock_restrict_self(r8, 0x0) (async, rerun: 64) r9 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) (rerun: 64) ioctl$TUNATTACHFILTER(r9, 0xc0189436, 0x0) (async, rerun: 64) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000540)={0x4c, r4, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@NL802154_ATTR_NETNS_FD={0x8, 0x1d, r5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_PID={0x8, 0x1c, r6}, @NL802154_ATTR_NETNS_FD={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x20004010) (async, rerun: 64) syz_genetlink_get_family_id$netlbl_cipso(0x0, r3) (async, rerun: 64) r10 = syz_open_dev$dri(&(0x7f0000000100), 0x1ff, 0x80800) (rerun: 64) ioctl$DRM_IOCTL_WAIT_VBLANK(r10, 0xc018643a, 0x0) r11 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r11, 0x10e, 0xc, 0x0, 0x0) (async) ioctl$FITRIM(r1, 0xc0185879, &(0x7f0000000000)={0x5, 0x3, 0x6}) (async) fcntl$getflags(r0, 0x3) r12 = socket$netlink(0x10, 0x3, 0x0) sendmsg$sock(r12, 0x0, 0x0) (async, rerun: 64) sendmsg$kcm(r11, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0) (rerun: 64) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x90900, 0x0) 2.784107225s ago: executing program 2 (id=732): syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./mnt\x00', 0x0, &(0x7f0000000080)={[{@debug}]}, 0x0, 0x236, &(0x7f00000000c0)="$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") mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r1 = landlock_create_ruleset(&(0x7f0000000500)={0x0, 0x3, 0x0, 0x0, 0x2}, 0x30, 0x0) landlock_restrict_self(r1, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000540)='./file0\x00', 0x140, 0x1a0) fcntl$setlease(r2, 0x400, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = accept(0xffffffffffffffff, &(0x7f0000000300)=@xdp, &(0x7f0000000380)=0x80) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x6c, 0x2, 0x6, 0x3, 0x0, 0x0, {0x3}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x3}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x6}, @IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x46}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x7}]}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20044000}, 0x811) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff}) r5 = getpid() sendmsg$unix(r4, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=[@cred={{0x1c, 0x1, 0x2, {r5}}}, @rights={{0x14, 0x1, 0x1, [r4]}}], 0x38}, 0x8841) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r4, 0x80047210, &(0x7f0000000640)) prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x1) prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x6) 2.762198226s ago: executing program 4 (id=733): mknodat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x1000, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=0000000000000000010000', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000005c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000002600)={0x50, 0x0, r1, {0x7, 0x1f, 0xa, 0x40010, 0x2, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000002680)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000fd6b5c1092c5d78a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffffffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea21056000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000efff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b60000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ca8e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000", 0x2000, &(0x7f0000004680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000004740)={0x20, 0xfffffffffffffffe, 0x7ff, {0x0, 0x7f69ff17f1e1ab77}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000004780)='./file0\x00', 0x2c41, 0x0) close_range(r2, 0xffffffffffffffff, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./gadget\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./gadget\x00', &(0x7f0000000080)='gadgetfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./gadget/dummy_udc\x00', 0x2, 0x0) write(r3, &(0x7f0000000100)="0000000009020900010100803212010002000000402505a0a4000100000001", 0x1f) read(r3, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x101140, 0x0) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000380)=0xf) ioctl$TCFLSH(r4, 0x400455c8, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, 0x0, 0x0, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000003e0007010000000005000000047c0000040063800c0009000000000000000000200002"], 0x44}, 0x1, 0x0, 0x0, 0x8044}, 0x4010) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000500)='ext4\x00', &(0x7f0000008a40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000008b40)={[{@discard}, {@dioread_lock}, {@test_dummy_encryption}]}, 0xfe, 0x244, &(0x7f0000008b80)="$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") openat(0xffffffffffffff9c, 0x0, 0x52142, 0x1ad) r6 = add_key(&(0x7f0000000140)='dns_resolver\x00', &(0x7f0000000180)={'syz', 0x0}, &(0x7f00000001c0)='foo#dnserror=1\x00', 0xf, 0xfffffffffffffffe) keyctl$revoke(0x3, r6) r7 = syz_io_uring_setup(0x34b9, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) io_uring_enter(r7, 0x1, 0x1, 0x1, 0x0, 0x0) 2.678912917s ago: executing program 2 (id=736): r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000100)={'ip6_vti0\x00', 0x0}) write(r0, &(0x7f0000000000)="1c0000005e001f3a14584707f9f4e4316e6c338b67d423d3650000004d360150dff3d9e5403c74d650452efe42b0f8376340b2ae49b02619b5679092142aed0c1b864d3a19658aa6c927c384d37233590cfda49eea40bdd12869b41e834a6f646608bf792336b3a00255e0088b85793b5a5586b51027b239dba7276ddb602fe1f3d1b4ac7c41bca753d4ec22bc6cb596fba392dc329fadf9ef2aea4e39cf3a360c7fd22d4ef79a07fe5c72e1e77841245736b7fdc8469f38a97d25403d68e86b706dfe774bfe272559ad64105b0075866efc46af105a76", 0x2c) 2.59114445s ago: executing program 3 (id=739): unshare(0x22020400) (async) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ppoll(&(0x7f00000005c0)=[{r0, 0x41c}], 0x1, 0x0, 0x0, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) (async) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) (async) madvise(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x15) (async) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async) r1 = socket(0x10, 0x80002, 0x0) (async) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x4}, 0x8) (async) sendto$inet6(r2, &(0x7f0000000340)='X', 0x34000, 0xe0, &(0x7f0000000380)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)="24000000180003041dfffd946f610500020100000005fe060c10880008000f00fff3c00e140000", 0x27}], 0x1}, 0x0) (async) syz_mount_image$fuse(&(0x7f00000004c0), &(0x7f0000000500)='./file0\x00', 0x1060000, &(0x7f0000000540)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000010000,user_id=', @ANYRESDEC=0xee00, @ANYBLOB="0500726f75705f69643d", @ANYRESDEC=0xee01, @ANYBLOB=',\x00'], 0x1, 0x0, 0x0) (async) recvmmsg(r1, 0x0, 0x0, 0x40018020, 0x0) (async) sendmsg$NL80211_CMD_DEL_KEY(r1, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x819}, 0x2c064814) rseq(&(0x7f0000000400), 0x20, 0x0, 0x0) (async) io_submit(0x0, 0x2, &(0x7f0000000440)=[0x0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f00000004c0)}]) (async) syz_io_uring_setup(0x5793, 0x0, 0x0, 0x0, 0x0) (async) r3 = socket(0x840000000002, 0x3, 0x100) unshare(0x8040480) (async) sendmmsg$inet(r3, &(0x7f00000000c0), 0x4000095, 0x0) (async) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r3, 0x110, 0x4, &(0x7f0000000100)=0x2, 0x4) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x20008820) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYRES32], 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x20004080) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="5000000009060102000000000000000002eff9840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}}, 0x90) (async) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) 2.222682423s ago: executing program 2 (id=743): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="22000000040000001000000012"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r1}, 0x4) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000200)=0x20000) sendmsg$kcm(r0, &(0x7f0000001240)={0x0, 0xfffffffe, &(0x7f0000001280)=[{&(0x7f00000012c0)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140604000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) r2 = syz_io_uring_setup(0x36a1, &(0x7f0000000080)={0x0, 0x5de4, 0x10000, 0x0, 0x51}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000180)=0x0) r6 = epoll_create1(0x0) syz_io_uring_submit(r3, r4, r5, &(0x7f0000000240)=@IORING_OP_EPOLL_CTL=@mod={0x1d, 0x40, 0x0, r6, r2, &(0x7f00000002c0)={0x10000000}, 0x3, 0x0, 0x1}) io_uring_enter(r2, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) r7 = socket(0x10, 0x3, 0x0) write(r7, &(0x7f0000001340)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24) 2.184012229s ago: executing program 32 (id=743): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="22000000040000001000000012"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r1}, 0x4) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000200)=0x20000) sendmsg$kcm(r0, &(0x7f0000001240)={0x0, 0xfffffffe, &(0x7f0000001280)=[{&(0x7f00000012c0)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140604000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) r2 = syz_io_uring_setup(0x36a1, &(0x7f0000000080)={0x0, 0x5de4, 0x10000, 0x0, 0x51}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000180)=0x0) r6 = epoll_create1(0x0) syz_io_uring_submit(r3, r4, r5, &(0x7f0000000240)=@IORING_OP_EPOLL_CTL=@mod={0x1d, 0x40, 0x0, r6, r2, &(0x7f00000002c0)={0x10000000}, 0x3, 0x0, 0x1}) io_uring_enter(r2, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) r7 = socket(0x10, 0x3, 0x0) write(r7, &(0x7f0000001340)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24) 1.92213813s ago: executing program 1 (id=753): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000800)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000002a0000000100000000000001040000002000000105000000010000040400000013000000010000000000000017000000020000040800000021000000010000000000000025000000020000002000000000696e74006270665f7370696e5f6c6f636b0076616c006d61705f76616c756500636e74006c"], 0x0, 0x8e}, 0x28) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@base={0x2, 0x4, 0x8, 0x1, 0x0, 0x0, 0x0, '\x00', 0x0, r0, 0x1, 0x3}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x16, 0x10, &(0x7f0000000a00)=ANY=[@ANYBLOB="bfa200000000000007020000fcffffff620200000000000018110000", @ANYRES32=r1, @ANYBLOB="000000000000000085000000010000001500070000000000bf06000000000000bf610000000000000701000004000000850000005d000000bf610000640000000701000004000000850000005d000000b70000000000000095"], &(0x7f0000000a80)='GPL\x00', 0x7, 0x0, 0x0, 0x2a079ff5b90a2b9f, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.921363521s ago: executing program 1 (id=754): bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x3, 0x16, &(0x7f0000000200)=ANY=[@ANYBLOB="61154c000000000061138c0000000000bfa00000000000001503000008004e002d35010000000000950041000000000069163e0000000000bf67000000000000350605000fff07206706000005000000160302000ee60060bf500000000000000f650000000000006507f9ff0100000007070000cddfffff1e75000000000000bf54000000000000070400000400f9ff3d4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f1754558f2278af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd3997f9c9c4f6f3be4b369289aa6812b8e007e733a9a4f1b0af3dda82ee45a010fb94fe9de57b9d8a814261bdb94a05000000c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe01c5473d51b546cad3f1d5ab2af27546e7c955ccefa1f6ab689b555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d345dc8da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e88158f0200000000c8fb730a5c1bf2b2bb71a629361997a75fd552bdc2300000008ac86d8a297dff0445a15f21dce4de9f29eff65aadc841848c9b562a31e56723888fb126a163f16f920ae2fb494059bba8e3b680324a188076ebae3f55c4e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20cecac4d03723f1c932c9a6aa57f1ad2e99e0e67ab93716d20000009fbb0f53acbb40b4f8e2739670b31562ed834f2af97787f696649a462e7ee4bcf8b07a10d6735154beb4000000000000000000000000004000bc00f679629709e7e78f4ddc211bc3ebe6bd9d42ca0140a7afaab43176e65ec1118d50d1e827f3472f4445d253880800000000000000690884f800031e03a651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc401000000cc43010000207b40407d000000210000000000000000005f37d83f84e98a523d80bd970d703f37ca364a601ae899a56715a0a62a34c6c94cce6994521629ab028acfc1d926a0f6a5489af8dc2f17923f3c40dfd1970a55c22fe3a5ac000000f4000000000000000000000000c1eb2d91fb79ea00000000000000bb0d00000000000000000000e4007be511fe32fbc90e2364a55e9bb66ac64423d2d00fea2594e190deae46e26c596f84eba9000000000000003cc3aa39ee4b1386bab561cda886fa642994cacd473b543ccb5f0d7b63924f17c67b13631d22a11dc3c6939628950000000000000001c7205a6b068fff496d2da7d632bd1f61b007e1ff5f1be19637302f3b41eae50509fd05d12f6186f117b062df67d3a63f3265dd1410eea68208a3f26b2989b832d8b34a34a4f08b34b30410856e858d27adee7daf32903d3fc78700d429a2d4c8b6d803eb83eecfe4c7ff9e6ab5a52e83d089dad7a8710e0254f1b11cced7bc3c8da0c44d2ebf9f6f3ff3be4d1458077c2253b0c7c7a0a9fdd63bf910dc20e5cb2a88e59febc47f1212a21f631dbaa74f22bad050e9856b48ae3a03a497c37758537650fe6db88aa3c41fdc3d78e046f6160e1741299e8dc29906870e6431ed1eab5d067a183f064b060a8ec12725d42e3a74863d66bee966b1574f8e01b3f34a267ff0afa1e1c758a0079b747067312e9815a21cb3f1f8150d999d788535a4d3114dbc7e2bf2402a75fd7a55733360040855ed5d1c0d634fb9fb38f84d9d87b27f8a5d91217b728f13e3ee20e69e0ffb2780b1a7af137ff7b4ff010404faf0a4da65396174b4563d54b52f06c870edf0c5d744b5272b44c23488b2bdbff947c4dfa108cbb88202ee1192b81f428a5b3c299848649e1a6bff52f657a67463d7dbf85ae9321fc2b517dc4a29b9b5a8ded5de8206c812439ab129ae818837ee1562078fc524a3baf49a0be9bb7d958d5e87c6c09bf71a894bad62934782cc308e936d7637e07c4a2a3bc87b0da23c00d9ef418cf19e7a8c4c328be0ce95798adc2dca871073f6bd61dc18402cde8b0100010000000000abc86b94f8cbde4d470667bee722a6a2af483ad0d3415ed0f9db059acaba9eaea93f811d434e00000000000000000000d154ba10a8e51489a614e69722bac30000000000000000000000000000c5dfd188ff555285b9743d3aac000583f42d168613151d681a2f71373f20d92c9048407c91fabecfe8b3f2d545ffffffff00000000a1cfc4336324c86f3dcb43e9a58208077e90f6ec1c7ac756f61dcc372cdd30b82507489f0bbfbd3c3f21752e81319c0161e154ceb16e00bc7f5a6962dff317f4d014786e432817064874d69a39cb0da31bcc5f81894d8a80756447322207b4007dff12eb95066cc6bc256f0a12282224d718b06ca80b57aa183dd0c3eee45891441f2b89b4c67aa9882281393954972046974f18df232cd7fca610e33f51c2d062020f403d85ff36c26e2f6bd1d82f4d3ceb3472d9a77e0057a3bfe697d9ab7585f4a1b381343d2cf857689232f4fc5135790662dc1419a374be9d7b3e5be2886d23add90d862f1a682ff11c798e338af3e5bb0f9d3952b15bf3e0c618c89d20ca1e18a031397693bf3cfbd8417e5b55e641c898c280356f2da222d5d68919d98158578dcf18efa404e508bcbbb8cfcf70086821ebdf34c9a1dff45af873df904c2bdbef81f246d26f4b40df949e12bdac18533d4e11c608cc31d60cb591c40a7b386fa1c753336d7220a35118d4919b45eff32aab684ee54c0a263c806aabac2f66cb052f847c62c6691de14e97aa7e9dc8ecf0cd50540246d2b746e41e5b4e2c095039dfe0f71db6265f7580d098be40ef36faee5d1695830d4242a23e541e6ce9fa1998d8961ef4fe3c8e8fbb566f148c8befc229614a4b7f80d237b8abc6fc0407de31d6e5532f360d379f20f054692b47207922fe6c14eba96c9a7ae906abc1ae1ae8c4fae92883cfa1978a04bb000000000000000000000000000000884efcecca45ea4ab2ec097668456a6ff12854997f5aed737d5205ace5c0b64f87ef10784d0479cb44ca077e0c4ce6ff880e2ce3de63853a9740e9233683bfc8636bee293aeeb680b399a296e6f44c07b5fc5d9d359af007f23004a7acb6df23664ea209620b4fe0f4df81c33bd8ca2335cb4b50881937379b45a301175c3e8eb32970564ec8e25c46ee3bae079faedaad94276cfa251be8256c4c37fc84a25c3a2feb39e94a5266a10716d4a3cef499fa176018054e9149a1c9d20a809ce3"], &(0x7f0000000b40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000b80), 0xffffffffffffffd2}, 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x3, 0x16, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f0000000b40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000b80), 0xffffffffffffffd2}, 0x48) add_key(&(0x7f0000000040)='blacklist\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) r0 = socket$inet6(0xa, 0x3, 0xff) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000bc0)=@filter={'filter\x00', 0xe, 0x4, 0x340, 0xffffffff, 0x0, 0x1a0, 0x270, 0xffffffff, 0xffffffff, 0xd0, 0x1a0, 0x270, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@empty, @empty, [], [], '\x00', '\x00', {}, {}, 0x6, 0x0, 0x1}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x1, 0x7, 0x5a0}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0) syz_emit_ethernet(0x4a, &(0x7f0000000f80)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd6000002000140640fe8000000000000000000000000000bbfe8000000000000000000000000000aa4e224e22", @ANYRES32=0x1000, @ANYRES32=0x0, @ANYBLOB='P'], 0x0) (async) syz_emit_ethernet(0x4a, &(0x7f0000000f80)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd6000002000140640fe8000000000000000000000000000bbfe8000000000000000000000000000aa4e224e22", @ANYRES32=0x1000, @ANYRES32=0x0, @ANYBLOB='P'], 0x0) syz_mount_image$ext4(&(0x7f0000001000)='ext3\x00', &(0x7f0000001040)='./file1\x00', 0x200000, &(0x7f0000001080)={[{@delalloc}, {}, {@oldalloc}, {@norecovery}, {@dioread_nolock}, {@oldalloc}, {@oldalloc}, {@sysvgroups}, {@norecovery}]}, 0x3, 0x566, &(0x7f0000001100)="$eJzs3V9rW+UfAPDvSdv9//3WwRjqhRR24WQuXVv/TBA2L0WHA72foc3KaLqMJh1rHWy7cDfeyBBEHIgvwHsvh2/AVyHoYMgoeuFN5aQnW9YkTZtlNvN8PnC25znnpN/z5DnPk+/JSUgAuTWR/lOIeDkivkoiDrdsG41s48TGfmuPbsymSxLr65/8kUSSrWvun2T/H8wqL0XEz19EnCy0x62trC6UKpXyUlafrC9enaytrJ66vFiaL8+Xr0zPzJx5a2b63XfeHlhbX7/w17cf3//gzJfH17758cGRu0mci0PZttZ2PINbrZWJmMiek7E4t2nHqQEEGyZJrx06nAPsvpFsnI9FOgccjpFs1AP/fTcjYh3IqcT4h5xq5gHNa/sBXQe/MB6+v3EB1N7+0Y33RmJf49rowFry1JVRer07PoD4aYyffr93N12ix/sQNwcQD6Dp1u2IOD062j7/Jdn817/T23jXb3OMvL3+wG66n+Y/b3TKfwqP85/okP8c7DB2+9F7/BceDCBMV2n+917H/Pfx1DU+ktX+18j5xpJLlyvl0xHx/4g4EWN703q/93Na8790SeM3c8HsOB6M7n36MXOleqnPcG0e3o545Un+m0Tb/L+vketu7v/0+biwzRjHyvde7batd/tbDT4DXv8h4rWO/f/kjlay9f3Jycb5MNk8K9r9eefYL93i76z9g5f2/4Gt2z+etN6vre08xvf7/i5329bv+b8n+bRR3pOtu16q15emIvYkH7Wvn37y2Ga9uX/a/hPHt57/Op3/+yPis222/87R7mnQMPT/3I76f+eFXz/8/Ltu8bfX/282SieyNduZ/7Z7gM/y3AEAAAAAAMCwKUTEoUgKxcflQqFY3Ph8x9E4UKhUa/WTl6rLV+ai8V3Z8RgrNO90H275PMRU9nnYZn16U30mIo5ExNcj+xv14my1MrfbjQcAAAAAAAAAAAAAAAAAAIAhcbDL9/9Tv43s9tEBz52f/Ib86jn+B/FLT8BQ8voP+WX8Q34Z/5Bfxj/kl/EP+WX8Q34Z/5Bfxj8AAAAAAAAAAAAAAAAAAAAAAAAAAAAM1IXz59Nlfe3Rjdm0PndtZXmheu3UXLm2UFxcni3OVpeuFuer1flKuThbXez19yrV6tWp6Vi+Plkv1+qTtZXVi4vV5Sv1i5cXS/Pli+Wxf6VVAAAAAAAAAAAAAAAAAAAA8GKprawulCqV8pJC18LZGIrD6LuQ9Orls9nJ0FeI0d1voMJzKOzyxAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALf4JAAD//5CPL9Y=") openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x189802, 0xdb) bpf$PROG_LOAD(0x5, &(0x7f0000001880)={0x1c, 0x18, &(0x7f0000000080)=@raw=[@generic={0x1d, 0xe, 0x2, 0xffff, 0x3}, @btf_id={0x18, 0x7, 0x3, 0x0, 0x4}, @ringbuf_query, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x30}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x6}, @exit, @ldst={0x3, 0x0, 0x4, 0x3, 0x5, 0x2, 0xffffffffffffffff}], &(0x7f0000001980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x71, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.89621643s ago: executing program 1 (id=755): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x80, @any, 0x0, 0x1}, 0x10) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000000080)=0x1, 0x4) openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x0, &(0x7f0000000280), 0x1, 0x50f, &(0x7f00000002c0)="$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") r1 = fanotify_init(0xf00, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000880)='./file0\x00', 0x2e0603, 0x97) fanotify_mark(r1, 0x4, 0x4800003e, r2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000840)='.\x00', 0x0, 0x0) listen(r0, 0x5) syz_emit_vhci(&(0x7f00000000c0)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0x12}, @l2cap_cid_le_signaling={{0xe}, @l2cap_ecred_conn_req={{0x17, 0x42, 0xa}, {0x80, 0x200, 0x200, 0xa, [0x40]}}}}, 0x17) r3 = accept4(r0, 0x0, 0x0, 0x800) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7fff8000}]}) close_range(r4, 0xffffffffffffffff, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001480), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000014c0)={'wg2\x00'}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000001500)={'batadv_slave_1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000001540)={'ip6tnl0\x00', &(0x7f0000001580)={'ip6_vti0\x00', 0x0, 0x2f, 0xd, 0x8, 0xcdc, 0x0, @rand_addr=' \x01\x00', @mcast2, 0x7800, 0x8, 0xa, 0xffffff4a}}) sendmsg$ETHTOOL_MSG_DEBUG_GET(r5, &(0x7f0000001600)={&(0x7f0000001640)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001680)={&(0x7f00000008c0)=ANY=[@ANYBLOB="9800006708f6fcec10c41ea66bc0dfe8a4ee9f45ab611d19198c9575019f1d809a50b16780ae7dd237499963a7f003e1bf0e56e9253bae37f2ae78c3d105415a8e899a055d50b41d904fef84b19b844c205d36831427502e2b42dd6f14ab", @ANYRES16=r6, @ANYBLOB="080028bd7000ffdbdf25070000004c0001801400020076657468315f766972745f776966690008000100", @ANYRES32=r7, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000300010000001400020076657468305f746f5f62726964676500080003000100000038000180140002006e6963766630000000000000000000000800030001000000080003000300000008000100", @ANYRES32=r8, @ANYBLOB="0800030001000000"], 0x98}, 0x1, 0x0, 0x0, 0x2400c800}, 0x40000) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000001780)={'veth1_virt_wifi\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000017c0)={0x0, 0x0, &(0x7f0000001800)={&(0x7f00000009c0)=@newqdisc={0x80, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x4, {0x0, 0x0, 0x0, r10, {}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x54, 0x2, [@TCA_FQ_FLOW_PLIMIT={0x8, 0x2, 0x6}, @TCA_FQ_LOW_RATE_THRESHOLD={0x8, 0xb, 0x9}, @TCA_FQ_FLOW_MAX_RATE={0x8}, @TCA_FQ_BUCKETS_LOG={0x8, 0x8, 0xd}, @TCA_FQ_BUCKETS_LOG={0x8, 0x8, 0x17}, @TCA_FQ_FLOW_PLIMIT={0x8, 0x2, 0x80}, @TCA_FQ_TIMER_SLACK={0x8, 0xd, 0x8}, @TCA_FQ_RATE_ENABLE={0x8, 0x5, 0x1}, @TCA_FQ_PLIMIT={0x8, 0x1, 0xff}, @TCA_FQ_RATE_ENABLE={0x8, 0x5, 0x1}]}}]}, 0x80}, 0x1, 0x0, 0x0, 0x24000803}, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r3, &(0x7f0000001b80)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001b40)={&(0x7f00000018c0)={0x248, 0x0, 0x100, 0x70bd29, 0x25dfdbff, {}, [@HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x9c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}]}, 0x248}}, 0x1) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0041, 0x0) ioctl$TUNSETIFF(r11, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$TUNSETVNETHDRSZ(r11, 0x400454d8, &(0x7f0000000140)=0x90) 1.686819144s ago: executing program 3 (id=756): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x17, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000d80)=ANY=[@ANYBLOB="09000000040000000400000007"], 0x50) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000006c0)={@map=r1, r0, 0x12, 0x2a, r0}, 0x20) 1.685552899s ago: executing program 3 (id=757): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000280)={0x0, 0xb005}, 0x4) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000240)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f00000002c0)={0x1d, r2}, 0x18) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_inet_tcp_SIOCOUTQNSD(r3, 0x894b, &(0x7f0000000180)) connect$can_j1939(r1, &(0x7f0000000300)={0x1d, r2, 0x0, {0x0, 0x0, 0x1}, 0xfe}, 0x18) writev(r1, &(0x7f0000000340)=[{&(0x7f0000000380)="3874517c2edc", 0xfdef}, {0x0}], 0x2) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f00000003c0)={'vcan0\x00', 0x0}) bind$can_j1939(r4, &(0x7f0000000440)={0x1d, r5}, 0x18) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x1, 0x9, 0x3, 0xc4f, 0x1, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680), &(0x7f00000006c0), 0xffff, r6}, 0x38) connect$can_j1939(r4, &(0x7f0000000480)={0x1d, r5, 0x0, {0x0, 0xf0, 0x2}, 0xfe}, 0x18) sendmsg$can_j1939(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)='.', 0x1a000}}, 0xfe) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000000)=0x0) r9 = syz_open_procfs(r8, &(0x7f0000000040)='projid_map\x00') setsockopt$MRT_DONE(r9, 0x0, 0xc9, 0x0, 0x0) setsockopt$packet_int(r7, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000400)={'sit0\x00', 0x0}) capset(&(0x7f0000000080)={0x20071026}, &(0x7f00000000c0)={0x200000, 0x200000, 0xffffffff, 0x0, 0x401}) r11 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r11, &(0x7f00000001c0)={0x1f, 0x5, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0xe) ioctl$VT_RESIZEX(r9, 0x560a, &(0x7f0000000200)={0x8, 0xfff, 0x2, 0x20, 0x6, 0x4}) sendto$packet(r7, &(0x7f0000000580)="0b031407e0ff640f020047540f68a13bb1000e00080008004803", 0x1a, 0x0, &(0x7f0000000140)={0x11, 0x0, r10}, 0x14) 1.260125969s ago: executing program 1 (id=758): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$XFS_IOC_START_COMMIT(r1, 0x80585882, &(0x7f00000002c0)={0xffffffffffffffff}) ioctl$KDFONTOP_SET_DEF(r1, 0x4b72, &(0x7f0000000340)={0x2, 0x1, 0x36, 0x12, 0x1e2, &(0x7f0000000380)="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"}) ioctl$TIOCL_UNBLANKSCREEN(r2, 0x541c, &(0x7f0000000900)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000200)={0x1, &(0x7f0000000240)=[{0x6, 0x0, 0x6, 0x7fc00100}]}) cachestat(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000800)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, 0x8) fchown(r3, 0xee00, 0xee01) fchown(r3, 0x0, 0x0) ioctl$VIDIOC_QBUF(r2, 0xc058560f, &(0x7f0000000880)=@multiplanar_overlay={0x9, 0xb, 0x4, 0x20, 0xffffffff, {0x0, 0xea60}, {0x4, 0x0, 0xfa, 0x2, 0xc, 0x5, "f05fcf9e"}, 0xffff7990, 0x3, {&(0x7f0000000780)=[{0x1000, 0x0, {}, 0x6}, {0x7128, 0x4, {0xc}}]}, 0x7, 0x0, r3}) close_range(r0, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000940), 0x1, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000980), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f00000009c0)={0x0, &(0x7f0000000a00), 0x0, 0x0, 0x0, 0x1, 0x4b}) ioctl$DRM_IOCTL_MODE_GETCRTC(r5, 0xc06864a1, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r5, 0xc06864ce, &(0x7f0000000ac0)={r6, 0xfffffffd, 0x81, 0x0, 0x3, [0x0], [0x0, 0x0, 0x400, 0x9], [0x0, 0x8, 0xfffffffc], [0x7fff, 0x0, 0xa]}) ioctl$DRM_IOCTL_MODE_ADDFB2(r4, 0xc06864b8, &(0x7f0000000b40)={0x0, 0xc1, 0x80, 0x34325241, 0x3, [0x2, 0x0, 0x0, r7], [0x80ffff], [], [0x400000000000000]}) ioctl$DRM_IOCTL_PANTHOR_BO_SET_LABEL(r3, 0xc010644d, &(0x7f0000000c00)={r7, 0x0, &(0x7f0000000bc0)='GPL\x00'}) r8 = accept4$nfc_llcp(0xffffffffffffffff, &(0x7f0000000100), &(0x7f0000000180)=0x60, 0x80000) r9 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r10 = fcntl$dupfd(r8, 0x406, r9) ppoll(&(0x7f0000000080)=[{0xffffffffffffffff, 0x2004}], 0x1, &(0x7f00000000c0)={0x0, 0xff}, 0x0, 0x0) ioctl$TIOCGSID(r10, 0x5429, &(0x7f0000000040)) r11 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="b40500000002000079109500000080000000000000000000000000000000bac2c3512aeb2d0ab4fcdad76e7dd60000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) close_range(r11, r11, 0x0) 1.166772658s ago: executing program 5 (id=761): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x11, &(0x7f0000000100)={[{@noblock_validity}, {@stripe={'stripe', 0x3d, 0x2}}, {@norecovery}, {@min_batch_time={'min_batch_time', 0x3d, 0x71d}}, {@abort}]}, 0x1, 0x610, &(0x7f0000000a40)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x8100, 0x101) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000040)={0x1, &(0x7f00000000c0)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40000000, 0xfffffffffffffffe) openat$cgroup_ro(r0, &(0x7f0000000080)='memory.swap.current\x00', 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x11, &(0x7f0000000100)={[{@noblock_validity}, {@stripe={'stripe', 0x3d, 0x2}}, {@norecovery}, {@min_batch_time={'min_batch_time', 0x3d, 0x71d}}, {@abort}]}, 0x1, 0x610, &(0x7f0000000a40)="$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") (async) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x8100, 0x101) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000040)={0x1, &(0x7f00000000c0)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) (async) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40000000, 0xfffffffffffffffe) (async) openat$cgroup_ro(r0, &(0x7f0000000080)='memory.swap.current\x00', 0x0, 0x0) (async) 1.026857896s ago: executing program 5 (id=764): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000800)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000002a0000000100000000000001040000002000000105000000010000040400000013000000010000000000000017000000020000040800000021000000010000000000000025000000020000002000000000696e74006270665f7370696e5f6c6f636b0076616c006d61705f76616c756500636e74006c"], 0x0, 0x8e}, 0x28) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@base={0x2, 0x4, 0x8, 0x1, 0x0, 0x0, 0x0, '\x00', 0x0, r0, 0x1, 0x3}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x16, 0x10, &(0x7f0000000a00)=ANY=[@ANYBLOB="bfa200000000000007020000fcffffff620200000000000018110000", @ANYRES32=r1, @ANYBLOB="000000000000000085000000010000001500070000000000bf06000000000000bf610000000000000701000004000000850000005d000000bf610000700000000701000004000000850000005d000000b70000000000000095"], &(0x7f0000000a80)='GPL\x00', 0x7, 0x0, 0x0, 0x2a079ff5b90a2b9f, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.018912747s ago: executing program 5 (id=766): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x17, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000d80)=ANY=[@ANYBLOB="09000000040000000400000007"], 0x50) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000006c0)={@map=r1, r0, 0x12, 0x2a, r0}, 0x20) 1.008523443s ago: executing program 5 (id=767): userfaultfd(0x1) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=[@rights={{0x10}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xc0}, 0x40000180) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() syz_open_dev$tty1(0xc, 0x4, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, 0x0, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe700, 0x8000, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x2, 0x334}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x89a0, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) 571.627039ms ago: executing program 4 (id=779): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x9, 0x10, &(0x7f0000000040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8f}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x2000, 0x900}, {0x85, 0x0, 0x0, 0x86}}, {}, [@jmp={0x5, 0x0, 0x7, 0x9, 0x0, 0xfffffffffffffffe, 0xfffffffffffffff0}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000001c0)='syzkaller\x00', 0x9, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) 526.391202ms ago: executing program 0 (id=780): r0 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x4) sendmsg$nl_route(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv6_getnexthop={0x50, 0x6a, 0x800, 0x70bd27, 0x25dfdbfd, {}, [@NHA_OIF={0x8}, @NHA_ID={0x8, 0x1, 0x2}, @NHA_FDB={0x4}, @NHA_GROUPS={0x4}, @NHA_MASTER={0x8, 0xa, 0x2}, @NHA_OIF={0x8, 0x5, r1}, @NHA_FDB={0x4}, @NHA_FDB={0x4}, @NHA_OIF={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x80c0}, 0x4000085) r2 = accept$unix(0xffffffffffffffff, &(0x7f00000001c0)=@abs, &(0x7f0000000240)=0x6e) accept4$unix(r2, &(0x7f0000000280), &(0x7f0000000300)=0x6e, 0x80000) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000380)={'ipvlan0\x00', &(0x7f0000000340)=@ethtool_cmd={0x23, 0x100, 0x3, 0x2d9, 0x2, 0x4, 0xfa, 0x5a, 0x8, 0x3, 0x3, 0x7, 0xf85, 0x0, 0x8, 0x9}}) r3 = socket$inet_sctp(0x2, 0x5, 0x84) recvfrom$inet(r3, &(0x7f00000003c0)=""/29, 0x1d, 0x40000000, &(0x7f0000000400)={0x2, 0x4e22, @broadcast}, 0x10) openat$nci(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sys/net/ipv4/vs/conn_reuse_mode\x00', 0x2, 0x0) connect$bt_l2cap(r4, &(0x7f00000004c0)={0x1f, 0xab3, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x9}, 0xe) r5 = socket$unix(0x1, 0x2, 0x0) pipe2$watch_queue(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) io_uring_setup(0x167a, &(0x7f0000000540)={0x0, 0xee8d, 0x8, 0x3, 0x326, 0x0, r6}) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF_FLAGS(r4, 0x84, 0x7a, &(0x7f00000005c0)={0x0, 0xffffffffffffffff, 0x800}, &(0x7f0000000600)=0xc) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000640)={'veth1_to_batadv\x00'}) getresuid(&(0x7f00000006c0)=0x0, &(0x7f0000000700)=0x0, &(0x7f0000000740)) quotactl$Q_GETNEXTQUOTA(0xffffffff80000901, &(0x7f0000000680)=@nbd={'/dev/nbd', 0x0}, r8, &(0x7f0000000780)) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r4, 0x84, 0x1e, &(0x7f0000000800), &(0x7f0000000840)=0x4) shmget$private(0x0, 0x3000, 0x78000010, &(0x7f0000ffa000/0x3000)=nil) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r6, 0x84, 0x12, &(0x7f0000000880)=0x4, 0x4) ioctl$DRM_IOCTL_GET_CLIENT(r4, 0xc0286405, &(0x7f00000008c0)={0x0, 0xa, {0x0}, {r9}, 0xffffffffffffffff}) r11 = syz_open_procfs(r10, &(0x7f0000000900)='loginuid\x00') bind$unix(r5, &(0x7f0000000940)=@abs={0x0, 0x0, 0x4e24}, 0x6e) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) shutdown(r12, 0x0) syz_open_dev$dvb_frontend(&(0x7f00000009c0), 0x6, 0x7a1900) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r11, 0xc01064c7, &(0x7f0000000a40)={0x3, 0x0, &(0x7f0000000a00)=[0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r11, 0xc00464c9, &(0x7f0000000a80)={r13}) 462.823544ms ago: executing program 4 (id=781): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000880)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d0019feffe69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb46c4c0a285057e3061b9781e", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000030c0)=[{&(0x7f00000045c0)=""/120, 0x78}, {&(0x7f0000000a00)=""/4132, 0x1024}, {&(0x7f0000000900)=""/225, 0xe1}, {&(0x7f00000031c0)=""/142, 0x8e}, {&(0x7f0000000380)=""/184, 0xb8}, {&(0x7f00000007c0)=""/168, 0xa8}, {&(0x7f0000000200)=""/127, 0x7f}, {&(0x7f00000006c0)=""/162, 0xa2}, {&(0x7f0000001a40)=""/245, 0xf5}, {&(0x7f0000001b40)=""/94, 0x5e}, {&(0x7f0000001bc0)=""/51, 0x33}, {&(0x7f0000003040)=""/94, 0x5e}], 0xc}, 0x10102) r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x3800, 0x0) r2 = syz_open_dev$dri(&(0x7f00000000c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000180)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f0000000280)={0x0, 0xffffffffffffff2b, r3, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB(r2, 0xc01c64ad, &(0x7f0000000300)={r4}) ioctl$DRM_IOCTL_MODE_ADDFB(r1, 0xc01c64ae, &(0x7f0000000340)={r4, 0x6, 0x3ff, 0x3, 0xffff, 0x3ff, 0xc1}) 452.627714ms ago: executing program 0 (id=782): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x17, 0x4, &(0x7f0000000200)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x5}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x8}, 0x94) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000000240), 0xf02, 0xf0, 0x0) sendmmsg$inet(r0, &(0x7f0000000280)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20000000) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000002440)={0x0, 0x0, &(0x7f0000002480)={&(0x7f00000024c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x48811}, 0x4000000) sendmsg$NFT_BATCH(r2, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002580)={&(0x7f00000025c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0x274, 0x6, 0xa, 0x403, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x240, 0x4, 0x0, 0x1, [{0x23c, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x22c, 0x2, 0x0, 0x1, [@NFTA_MATCH_NAME={0xb, 0x1, 'cgroup\x00'}, @NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_MATCH_INFO={0x214, 0x3, "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"}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_USERDATA={0x5, 0x7, 0x1, 0x0, 'b'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x29c}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000100)=0x3) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TUNSETOFFLOAD(r3, 0x4004743d, 0x110e22fff6) close(0x3) write$ppp(r3, &(0x7f00000000c0)="a09e", 0x2) syz_clone3(&(0x7f0000002340)={0x108800000, &(0x7f0000000000), &(0x7f0000000240)=0x0, &(0x7f00000002c0), {0x31}, &(0x7f0000000300)=""/4096, 0x1000, &(0x7f0000001300)=""/4096, &(0x7f0000002300)=[0xffffffffffffffff], 0x1}, 0x58) prlimit64(r4, 0x3, &(0x7f00000023c0)={0x4, 0xffffffffffffffff}, &(0x7f0000002400)) 416.220305ms ago: executing program 4 (id=783): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="240000001000010700000000004000000a000000060001001a00000008000a"], 0x24}, 0x1, 0x0, 0x0, 0x8010}, 0x800) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) prlimit64(r0, 0x7, &(0x7f0000000200)={0x7, 0x6}, &(0x7f0000000240)) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) r5 = syz_open_dev$video(&(0x7f0000000000), 0x101, 0xab02) ioctl$VIDIOC_S_INPUT(r5, 0xc0045627, &(0x7f0000000040)=0x1) ioctl$VIDIOC_S_CROP(r5, 0x4014563c, &(0x7f00000000c0)={0x1, {0xf8000002, 0x8b8, 0xc4f, 0x6}}) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000380)='./sys\x00', &(0x7f00000003c0)='sysfs\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/pci/devices/0000:00:02.0/config\x00', 0x2, 0x0) pwrite64(r6, &(0x7f0000000440)="0200", 0x2, 0x4) r7 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./sys/bus/pci/devices/0000:00:02.0/resource0\x00', 0x2, 0x0) pwrite64(r7, &(0x7f0000000540)="00000080", 0x4, 0x10) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, 0x0, 0x80880) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) 334.620265ms ago: executing program 1 (id=784): userfaultfd(0x1) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=[@rights={{0x10}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xc8}, 0x40000180) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) socketpair$unix(0x1, 0x1, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) syz_ublk_setup_queues(r4, r2, 0x0, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe700, 0x8000, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x2, 0x334}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x89a0, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) 280.799314ms ago: executing program 3 (id=785): sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, 0x0, 0x20040814) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x15, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a000000095"], &(0x7f0000000740)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000780)=0x20, 0x4) setsockopt$sock_attach_bpf(r1, 0x1, 0x34, &(0x7f00000007c0)=r0, 0x4) (async) setsockopt$sock_attach_bpf(r1, 0x1, 0x34, &(0x7f00000007c0)=r0, 0x4) socket$kcm(0x10, 0x7, 0x0) (async) r2 = socket$kcm(0x10, 0x7, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000000440)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000000480)) (async) timer_create(0x0, &(0x7f0000000440)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000000480)=0x0) timer_settime(r4, 0x0, &(0x7f00000004c0)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) (async) timer_settime(r4, 0x0, &(0x7f00000004c0)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r5 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r5, &(0x7f0000000500)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x3}}, 0x10) socket$tipc(0x1e, 0x2, 0x0) (async) r6 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000540)={0x42, 0x0, 0x2, 0xf5ff}, 0x10) (async) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000540)={0x42, 0x0, 0x2, 0xf5ff}, 0x10) sendmsg$tipc(r6, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0) r7 = socket(0x2d, 0x2, 0x0) setsockopt(r7, 0x11d, 0x1, 0x0, 0x0) sendmsg(r7, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$TIPC_GROUP_LEAVE(r6, 0x10f, 0x88) socket(0x1e, 0x4, 0x0) (async) r8 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r8, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0xffffffff}, 0x10) setsockopt$IPT_SO_SET_REPLACE(r8, 0x0, 0x40, &(0x7f0000000100)=@security={'security\x00', 0xe, 0x4, 0x2d8, 0xffffffff, 0x148, 0xb0, 0x0, 0xffffffff, 0xffffffff, 0x240, 0x240, 0x240, 0xffffffff, 0x4, &(0x7f00000000c0), {[{{@ip={@multicast1, @dev={0xac, 0x14, 0x14, 0x39}, 0xffffff00, 0xff000000, 'macvtap0\x00', 'ipvlan1\x00', {0xff}, {0xff}, 0x62, 0x25e0264e780833e9}, 0x0, 0x70, 0xb0}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0xd5, 0x10, "a7669ebc999d26dc3ed95ee829436ea13c615385ed43f38dc2b4f83654a8"}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x1}}}, {{@uncond, 0x0, 0x98, 0xf8, 0x0, {}, [@common=@icmp={{0x28}, {0x10, 'Fd'}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 0x7, 0x8, [0x31, 0x2, 0x7, 0x26, 0x22, 0x2d, 0x34, 0x2c, 0x4, 0x38, 0x2e, 0x3c, 0x8, 0x2c, 0x30, 0x32], 0x0, 0x6, 0x7ff}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x338) (async) setsockopt$IPT_SO_SET_REPLACE(r8, 0x0, 0x40, &(0x7f0000000100)=@security={'security\x00', 0xe, 0x4, 0x2d8, 0xffffffff, 0x148, 0xb0, 0x0, 0xffffffff, 0xffffffff, 0x240, 0x240, 0x240, 0xffffffff, 0x4, &(0x7f00000000c0), {[{{@ip={@multicast1, @dev={0xac, 0x14, 0x14, 0x39}, 0xffffff00, 0xff000000, 'macvtap0\x00', 'ipvlan1\x00', {0xff}, {0xff}, 0x62, 0x25e0264e780833e9}, 0x0, 0x70, 0xb0}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0xd5, 0x10, "a7669ebc999d26dc3ed95ee829436ea13c615385ed43f38dc2b4f83654a8"}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x1}}}, {{@uncond, 0x0, 0x98, 0xf8, 0x0, {}, [@common=@icmp={{0x28}, {0x10, 'Fd'}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 0x7, 0x8, [0x31, 0x2, 0x7, 0x26, 0x22, 0x2d, 0x34, 0x2c, 0x4, 0x38, 0x2e, 0x3c, 0x8, 0x2c, 0x30, 0x32], 0x0, 0x6, 0x7ff}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x338) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f848100000005e140602000000000e000a001000000002800000121f", 0x2e}], 0x1}, 0x0) 238.221442ms ago: executing program 3 (id=786): userfaultfd(0x1) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) recvmsg$unix(r0, 0x0, 0x40000180) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, 0x0, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe700, 0x8000, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x2, 0x334}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x89a0, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) 174.888894ms ago: executing program 0 (id=787): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x9, 0xf, &(0x7f0000000040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8f}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x900}, {0x85, 0x0, 0xc00, 0x86}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000001c0)='syzkaller\x00', 0x9, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) 173.858278ms ago: executing program 0 (id=788): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f00000001c0)={0x0, 0xfffffff5, 0x5, 0xd000, 0xe, "0062ba7d8200000016001b001e00f705096604"}) r1 = syz_open_pts(r0, 0xa0200) r2 = dup3(r1, r0, 0x0) syz_io_uring_setup(0xf00, &(0x7f0000000200)={0x0, 0x0, 0x400, 0x0, 0x40059, 0x0, r2}, 0x0, &(0x7f0000000280), 0x0) write$tcp_congestion(r2, &(0x7f00000002c0)='westwood\x00', 0x9) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x401, &(0x7f00000000c0)={[{@oldalloc}, {@init_itable_val={'init_itable', 0x3d, 0x4}}, {@dioread_lock}, {@minixdf}, {@jqfmt_vfsv0}, {@usrjquota, 0x2e}], [], 0x2e}, 0x84, 0x450, &(0x7f0000000940)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x8000, 0x1) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$EXT4_IOC_GET_ES_CACHE(r3, 0xc020660b, &(0x7f0000000440)={0x44, 0x7d, 0x0, 0x8}) 164.971362ms ago: executing program 0 (id=789): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x17, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000d80)=ANY=[@ANYBLOB="09000000040000000400000007"], 0x50) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000006c0)={@map=r1, r0, 0x12, 0x2a, r0}, 0x20) 107.599679ms ago: executing program 0 (id=790): mknodat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x1000, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=0000000000000000010000', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000005c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000002600)={0x50, 0x0, r1, {0x7, 0x1f, 0xa, 0x40010, 0x2, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000002680)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000fd6b5c1092c5d78a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffffffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea21056000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000efff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b60000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ca8e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000", 0x2000, &(0x7f0000004680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000004740)={0x20, 0xfffffffffffffffe, 0x7ff, {0x0, 0x7f69ff17f1e1ab77}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000004780)='./file0\x00', 0x2c41, 0x0) close_range(r2, 0xffffffffffffffff, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./gadget\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./gadget\x00', &(0x7f0000000080)='gadgetfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./gadget/dummy_udc\x00', 0x2, 0x0) write(r3, &(0x7f0000000100)="0000000009020900010100803212010002000000402505a0a4000100000001", 0x1f) read(r3, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x101140, 0x0) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000380)=0xf) ioctl$TCFLSH(r4, 0x400455c8, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, 0x0, 0x0, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000003e0007010000000005000000047c0000040063800c0009000000000000000000200002"], 0x44}, 0x1, 0x0, 0x0, 0x8044}, 0x4010) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000500)='ext4\x00', &(0x7f0000008a40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000008b40)={[{@discard}, {@dioread_lock}, {@test_dummy_encryption}]}, 0xfe, 0x244, &(0x7f0000008b80)="$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") openat(0xffffffffffffff9c, 0x0, 0x52142, 0x1ad) r6 = add_key(&(0x7f0000000140)='dns_resolver\x00', &(0x7f0000000180)={'syz', 0x0}, &(0x7f00000001c0)='foo#dnserror=1\x00', 0xf, 0xfffffffffffffffe) keyctl$revoke(0x3, r6) r7 = syz_io_uring_setup(0x34b9, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) io_uring_enter(r7, 0x1, 0x1, 0x1, 0x0, 0x0) 64.499337ms ago: executing program 5 (id=791): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys/class/net/veth0/queues/tx-1/xps_cpus\x00', 0x2, 0x0) write$sysctl(r0, &(0x7f0000000200)='2\x00', 0x2) landlock_create_ruleset(&(0x7f0000000180)={0x0, 0x3, 0x0, 0x120}, 0x30, 0x0) openat2(r0, &(0x7f0000000340)='./sys\x00', &(0x7f0000000380)={0x200000, 0x100, 0xe}, 0x18) landlock_restrict_self(r0, 0x4) r1 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc\x00', 0x1ff) write$cgroup_subtree(r0, &(0x7f0000000240)={[{0x6, 'hugetlb'}, {0x0, 'rlimit'}]}, 0x11) lsetxattr$trusted_overlay_upper(&(0x7f0000000280)='./sys/class/net/veth0/queues/tx-1/xps_cpus\x00', &(0x7f00000002c0), &(0x7f0000000300)={0x0, 0xfb, 0x20, 0x2, 0x89, "ee30286304dd00ccfa4d99130fe4326d", "9628571331c98320967ff8"}, 0x20, 0x2) mount(0x0, &(0x7f0000000080)='./proc\x00', 0x0, 0x0, 0x0) 9.146031ms ago: executing program 5 (id=792): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = open(&(0x7f0000000000)='./file0\x00', 0x3, 0x160) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x2c, r3, 0x5, 0x70bd29, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x200048d0}, 0x40000) sendmsg$NL80211_CMD_NEW_MPATH(r1, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x2c, r3, 0x200, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4004011}, 0x1) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r2, &(0x7f0000002a80)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000002a40)={&(0x7f0000000940)={0x20a4, r3, 0x1, 0x70bd27, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x986, 0x13}}}}, [@NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}, @NL80211_ATTR_CSA_IES={0xef4, 0xb9, 0x0, 0x1, [@NL80211_ATTR_CSA_C_OFF_BEACON={0xa, 0xba, [0x8, 0xfc00, 0x81]}, @NL80211_ATTR_CSA_C_OFF_BEACON={0x6, 0xba, [0xbcb]}, @beacon_params=[@NL80211_ATTR_BEACON_TAIL={0x133, 0xf, [@preq={0x82, 0x30, {{}, 0xfe, 0x0, 0xd, @device_a, 0x3, @void, 0x2, 0x4, 0x2, [{{0x1, 0x0, 0x1}, @broadcast, 0xfeb2}, {{0x1}, @broadcast}]}}, @perr={0x84, 0xbb, {0x7, 0xb, [{{}, @device_b, 0x6, @void, 0x3a}, {{0x0, 0x1}, @device_b, 0x3, @value, 0x3b}, {{0x0, 0x1}, @device_b, 0x7f, @value=@device_b, 0x3e}, {{0x0, 0x1}, @device_b, 0x5, @value=@broadcast, 0x6}, {{0x0, 0x1}, @device_a, 0x5a6, @value=@broadcast, 0x1e}, {{0x0, 0x1}, @device_b, 0xfffffffc, @value=@broadcast, 0x24}, {{0x0, 0x1}, @device_a, 0x1, @value=@device_b, 0x19}, {{}, @device_a, 0x8, @void, 0x42}, {{}, @device_b, 0x1, @void, 0x3f}, {{0x0, 0x1}, @device_b, 0xd5, @value=@device_b, 0x1}, {{}, @device_b, 0x2c, @void, 0x3c}]}}, @random_vendor={0xdd, 0x3e, "c5caea2532e971dc6ceb8b515d2f4d481d3f118bf54c792c9a8b169da8b79c497d27310c3f6cbdb6480b3e485885eaa1bca96258ca8b19511bd459aed57a"}]}, @NL80211_ATTR_IE_PROBE_RESP={0xd5, 0x7f, [@challenge={0x10, 0x1, 0x64}, @cf={0x4, 0x6, {0xd0, 0x5, 0x9, 0x4}}, @random_vendor={0xdd, 0xc4, "0722bb66bf090cdb2e26742b10cad44bccfdd47d5d5b03b131a4b6523d1aff13516426182f806c682cd7b24645c98010c3e9f89449fb4e407fb65363f62a9a5b5eb585a8de86b39d0582c33a4050be569d8c359274ce044c91f7a1f0f1edf04d33dcba103ccc43b69d3053d5107775ea38484208dea84772a89d9e940c451268dcf7826bc08820f92ab73d4e0e8da7474b184b95311e4463fe541e4eca088c934b7c6406bcb4ee05c9a7e7768143a7b3fa29d92385a3d9bf2c0f228623bacedf66ac452e"}]}, @NL80211_ATTR_BEACON_TAIL={0x12, 0xf, [@supported_rates={0x1, 0x1, [{0x6c, 0x1}]}, @dsss={0x3, 0x1, 0xae}, @mesh_id={0x72, 0x6}]}, @NL80211_ATTR_IE={0x21d, 0x2a, [@ht={0x2d, 0x1a, {0x2, 0x3, 0x5, 0x0, {0x6, 0x4, 0x0, 0x301, 0x0, 0x0, 0x1}, 0x8, 0x10, 0x9}}, @peer_mgmt={0x75, 0x14, {0x1, 0x9, @void, @void, @val="158b9e588a2fb9d2297208e1d97cace4"}}, @random={0x7, 0xf6, "5989e46f23531778f95d26b772bf6e18612f8ddbce074ec281e4ce6fc2ee6eb0c1097e3b11118f88f0dfd4f67d1f05484b6c78ba44b2cf09a101d1f5132698d4cb0623c19570d8aff0c77e0646a1f793576e02da1fbcc2c145304a6478ce1fb11cb920dbb19e3c32419a9ca1759c68211bc24d93ecbcfa5337bed37699a76381beb802dd3f7d9ec039af15dbba403839f243ef713aba5ccf066e0968b10d02c7e9b0fe729cb0af303d2c2353dea42d75fa54dcfe4fc071b2f7d15a2c672c38fe9d37fda9d70b1acf4528de4eec46ccaf255c33d835c2cff4b91b20d5e130d04afbf4f47890417b1600a260348c418c9d9f6a3984ec4f"}, @supported_rates={0x1, 0x1, [{0x60}]}, @fast_bss_trans={0x37, 0xea, {0x1, 0x6, "5ecb99a5bf49ed7bfe823eed256df08c", "eddf8de8df8038f278d321e96ed63fd3d6d939ffa7793e673a36249d768ee2ee", "73098431865c04f8fb8f6e854d5a74e4a97432755b732b08cec59c3e84c9eae3", [{0x4, 0x1e, "c502fb6c2df5ed1f673b6c8616aa14165fd4b06424a0f6db5f6598f2cbcb"}, {0x2, 0x20, "fe87bea283028b518587750eb69eb8b0ee543811f444587e2bef6db261a17a56"}, {0x2, 0x25, "1dda7fd70eec81d47df515fa4692e543cb34f31c97e747746da39c9bd05399c8634dcc5eef"}, {0x3, 0xa, "8617cf913b9423798eb6"}, {0x1, 0xc, "a440176571e685668e47971c"}, {0x4, 0x13, "128fed8e2d16691636e9cc751732b3bd065c3b"}]}}]}, @NL80211_ATTR_IE_PROBE_RESP={0x10a, 0x7f, [@ht={0x2d, 0x1a, {0x1, 0x3, 0x6, 0x0, {0x6, 0x4, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x8, 0x2, 0xff}}, @preq={0x82, 0x5c, {{0x1, 0x1}, 0x3, 0x8, 0x401, @broadcast, 0x3, @void, 0x8001, 0x0, 0x6, [{{0x1, 0x0, 0x1}, @device_b, 0x2}, {{0x1}, @broadcast, 0x7ff}, {{0x1}, @device_a, 0x73}, {{}, @broadcast, 0xfff}, {{0x1}, @device_b, 0x1}, {{0x1, 0x0, 0x1}, @broadcast, 0x5}]}}, @ht={0x2d, 0x1a, {0x10, 0x0, 0x3, 0x0, {0xf5ee, 0x8, 0x0, 0x3, 0x0, 0x1, 0x0, 0x2, 0x1}, 0x6, 0x9, 0x8}}, @tim={0x5, 0x5a, {0x5, 0x6c, 0x2, "f4b13eb9cdf62b867563f5359ec733bcab13b842500a8aa0fe9e202c5e077fcb999426896f39199fa27f413fa5321020a7a2c01b14bb66974c9d3fea0f803d162a6271f783b7160ae9fed250e869da30c50b92bf504cc4"}}, @link_id={0x65, 0x12}]}, @NL80211_ATTR_IE={0x83, 0x2a, [@prep={0x83, 0x25, {{0x0, 0x1}, 0x5, 0x7f, @device_a, 0xe048, @value=@device_b, 0x5, 0x200, @broadcast, 0x100a8b56}}, @challenge={0x10, 0x1, 0x53}, @perr={0x84, 0x4f, {0x0, 0x5, [{{}, @broadcast, 0x6, @void, 0x30}, {{0x0, 0x1}, @broadcast, 0x8, @value, 0x16}, {{}, @broadcast, 0x1, @void, 0x15}, {{0x0, 0x1}, @device_b, 0x1, @value=@broadcast, 0x24}, {{}, @broadcast, 0x2, @void, 0x28}]}}, @perr={0x84, 0x2, {0x9}}]}, @NL80211_ATTR_BEACON_TAIL={0x12d, 0xf, [@preq={0x82, 0x57, {{0x1, 0x0, 0x1, 0x0, 0x1}, 0x0, 0x40, 0xa2dd, @broadcast, 0xffffffff, @value, 0x5, 0x4, 0x5, [{{0x1, 0x0, 0x1}, @broadcast, 0x1000}, {{0x1, 0x0, 0x1}, @device_b, 0x1}, {{}, @device_a, 0x3}, {{0x1, 0x0, 0x1}, @device_a, 0xfffff9f6}, {{0x1, 0x0, 0x1}, @device_a, 0x5}]}}, @tim={0x5, 0xba, {0x4, 0xc, 0x4, "6423cd7d94b22fd236b97146f64be61730e79003863e4de6f70a4df15b053bae325419f82ab58737da20053edc16d92e1b6535d98d3ed66f80bb9f6cfb764bcfa9fb89a3699dc1d3c3faf2d156cbd25c749b9e28cd5d17b9555f3ee1e1711984aa265295d31ca44d775a59692a5334d630e1cd478e87201dee22370f5ac39ad1657f131f7899fbd01d1ed92c5b5dba0143a57ce6832603657a30ce2ad392dbb3af476c26fd408ac4f545e990f8bbe7c0e169b30f6f9242"}}, @channel_switch={0x25, 0x3, {0x1, 0x4, 0x7f}}, @ibss={0x6, 0x2}, @channel_switch={0x25, 0x3, {0x0, 0x80, 0x7}}, @chsw_timing={0x68, 0x4, {0x5, 0x200}}]}, @NL80211_ATTR_BEACON_TAIL={0x36, 0xf, [@ext_channel_switch={0x3c, 0x4, {0x0, 0x81, 0x1, 0xe}}, @mesh_id={0x72, 0x6}, @gcr_ga={0xbd, 0x6}, @ht={0x2d, 0x1a, {0x8000, 0x1, 0x1, 0x0, {0x8, 0xa92, 0x0, 0x9, 0x0, 0x0, 0x0, 0x2, 0x1}, 0x400, 0xf, 0x9}}]}, @NL80211_ATTR_BEACON_TAIL={0x3ab, 0xf, [@supported_rates={0x1, 0x4, [{0x2, 0x1}, {0x18, 0x1}, {0xc}, {0x1, 0x1}]}, @measure_req={0x26, 0xec, {0x80, 0xb9, 0x9, "4f9090eac21397e61a6a5f2000fdce18b1b4efdee193426cd8dcc87a42424e8603aeb77baed64f5ff42bf00155bdab6012052cf9c06e78ed04d4a736e7258ae00502b678b13ad96f4d6d69feafd8c9523e7d90823f23677270934373d4e5bea9ebfec2bfd20ab8c6a0258ff0f78e51a5c3a95207baa30eea71179234fe48b4638842d937798d53d45658db69510afdb093b04d2099e51df8f60fb118f70bace0a1e11790063f4d39f0d56ed7160cb29d21b6525f593a68e6fdceced381ebb130fbdf1a8147f9decb319ab57041bb55846ece3c56e5917c3071d651a7defdc90db303481ce161937b74"}}, @rann={0x7e, 0x15, {{0x0, 0x3}, 0xcc, 0x9, @device_a, 0x3, 0x2, 0x6cc}}, @mesh_config={0x71, 0x7, {0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1}}, @mesh_id={0x72, 0x6}, @random_vendor={0xdd, 0xe0, "6ad1b88b09f4257a4f738258f84879c8c6b8b11b6ece2500b785a49e97409a67d54f8794051612fb034997fffeaf311d4bd7b770ba59d319e549035fcd0261511fb960b1138bfd9d566e430a431c5f517fabb7a70406e167d196aa6434d4e935a9bceb01e468e371ed1b97503bddef3da71b6a43cc529866f37b21e7cb611060e3c88332563710486e36ddd1e001f8a64fc6a28019e7ae7d2ccc3baf058b661ca6c0686d3bf55c38929032b998fda426de7c8ad927800bff2b8bd78ec26433e454c296ac80c3dd547d5696f591557e9018c36a54bdc516a8b873229566ed34e3"}, @fast_bss_trans={0x37, 0xc4, {0x9, 0x4, "fcea67c21c667b9f0112e312f2f026c4", "4ca22c7088120109fc259a1637e9c767dc5aef82d1122df4a1da9a84103d630b", "a79ac9c387c9cd22be03e24ac81176740815a9189e0e97b4cd8da9da99f6f42a", [{0x3, 0x1f, "d953c1f164a1a99838454440b71542754e9148b258b0855e0057740ae58297"}, {0x1, 0x1f, "8f7b95ece22ba244f7d35ef1606cdf35366c100776a49f2197890b59e2f445"}, {0x1, 0x21, "b22739dd61f859c35213c935cf1712ea34a5153c7f14b16c480e1c0ded3ed1dd6c"}, {0x3, 0xb, "ded26b5865f3be8c903206"}]}}, @measure_req={0x26, 0xd4, {0x8, 0x3, 0xf, "d419eec38c026c8d4aef53063d3edbc1a48d25347474b1505e7de33641864fc0f21c8778f096297966f183a2358a3d8cfdd9410236353eecae5c6f7bc44055dac59a1214cd93b1bbd23a9d415e24d38d2635f17fa7a40cfa7d336abd303242a96f0612e73036a1ada52843b05280e468a0f60f46dc5339e7b6b15c1679d01369f0d14e35dc9091e8d1ea40fbd2794c16b273e3d90b834fe94b92965c6f2fedac912381acfede2eecdbf7d20d227eb8b7eda62669db8f8ae925f7570eba3414ffbfdd9072b73668b60507cdce878a5d0caf"}}, @ssid={0x0, 0x6, @default_ap_ssid}, @channel_switch={0x25, 0x3, {0x0, 0x3, 0x2}}]}], @beacon_params=[@NL80211_ATTR_IE_ASSOC_RESP={0x33, 0x80, [@cf={0x4, 0x6, {0x4, 0x5, 0x2, 0xfffb}}, @prep={0x83, 0x25, {{0x0, 0x1}, 0x10, 0x2, @device_b, 0x2, @value=@device_b, 0xfffffffe, 0x3, @broadcast}}]}, @NL80211_ATTR_FTM_RESPONDER={0x108, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_CIVICLOC={0x4f, 0x3, "cb440783f0c1b450f5b4e7d61adfff23aa5a04df8bb29483a4edc5f9555919441a57d72b764c24de67a18b7542cb97a5a7a71d1415a1f661404fd138d033558c82f9030df50e166ff1cb6f"}, @NL80211_FTM_RESP_ATTR_LCI={0xa1, 0x2, "1ba95c143d004e930b4c994be3415e92ace8b9eccdf5f4395da2a36c420f9d7b4006970f6599b25d090a6585d8054a9fbb35798c880886d2ecfcae54f1c0390529e6eea868deab165bf9b7526c5a430094a5b52c85fafeb75f7e54e58bb480bae649f158d8fc64dd4ae620ec5475b7959f33dc95d3f3db351379b678e04a04b836711e32665d7186a6a114e251424cd12c6411ff6a4a1f2c6f4e4181ca"}, @NL80211_FTM_RESP_ATTR_LCI={0x10, 0x2, "41214123fe9f091cec6e9708"}]}, @NL80211_ATTR_BEACON_HEAD={0x241, 0xe, {{{0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x0, 0x1}, {}, @device_a, @device_b, @random="cfe9272d3233", {0xa, 0x9}}, 0x9, @default, 0x8000, @val={0x0, 0xc, @random="267113fae999376e7408f294"}, @void, @val={0x3, 0x1, 0x1}, @val={0x4, 0x6, {0x9, 0x9, 0x7, 0xac6}}, @void, @val={0x5, 0x7f, {0x9, 0x95, 0x0, "0c5d87ec6b1a3a2e30c9833f7c93bd92b6494b063a27901f8f072dd4cacbbc5d2b92357136461556e43eb331f7a0fc3d276393f1cd4042238ffb3aba150d99e59938419d120b81aeebae4335f76e2fcdf02b211101a91b8b54c89461d528e1101fdd44e49a79b56f51ecfbf6d99e8d7ab340205c2e14a7e3b742062f"}}, @val={0x25, 0x3, {0x1, 0xab, 0x5}}, @val={0x2a, 0x1, {0x0, 0x1}}, @val={0x3c, 0x4, {0x1, 0xa1, 0xb3, 0x7}}, @void, @void, @void, @void, [{0xdd, 0x49, "9907e8178a2452f8bd54dcf2b51b7ed95bebbe69bdda6a1bd95e8b3a19b77fdd903084904b830925e6086ac33348d1f0c9908707d11df1fe920e9f10ecac0ffd4b9b6a231cee530970"}, {0xdd, 0x3c, "056095e17931a91ffc39a31a0f792e2fd2f2a71a7728deb39a54c720ad0c1aefd77aef5e033c0a9042e1569e3ab09ab9686a2b0032daf48098059f3f"}, {0xdd, 0xe6, "85556dbb2a9a130881d7aaf18ae92e69d31a1110ba6a87c6a2afc24bb342822410b383f9112073b427b06a4fdb64530e34998a11b506100cc00229261ca878df04e98c02a8471861f80eb0efd210aaf404b4670b8bcdfc47491b0842008872f93dbea3fc09cd7af2cee02d8b6db6dc1761e96117900f4af5cb30122ec7a747f5a2a3d30fe9b57126d7d80e71aa9c0d4f4fb8d8f56d238294cdeb02f4479df9d2778cd39abd05bafa6a5c6453f24c133b9ea1172269f460a4ba75afe8420202336aec083fd5634b0faf9aac46dc9a976fcec4eefacc50ee3a9cb3fd330282a038e1ce24d1431c"}]}}, @NL80211_ATTR_IE={0x1b, 0x2a, [@supported_rates={0x1, 0x5, [{0x9, 0x1}, {0x30}, {0xc}, {0x3, 0x1}, {0x3}]}, @chsw_timing={0x68, 0x4, {0x4, 0x9}}, @peer_mgmt={0x75, 0x8, {0x0, 0xa, @val=0x1, @val=0x10, @void}}]}, @NL80211_ATTR_IE_ASSOC_RESP={0x5b, 0x80, [@fast_bss_trans={0x37, 0x55, {0x62, 0x1, "0d2af603103b44a75d01de9a1f25c668", "5010de7cde6ae19892d681a33d75be3cccdfc9d6072afb3190578145902b38f2", "606731ef15914ec8b648346f796c5e0f333ed199e88c453c123f9544e6f6fbfb", [{0x3, 0x1, "cb"}]}}]}]]}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0xb7}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x211}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x35}], @NL80211_ATTR_CSA_IES={0x1144, 0xb9, 0x0, 0x1, [@beacon_params=[@NL80211_ATTR_IE_PROBE_RESP={0x34, 0x7f, [@ht={0x2d, 0x1a, {0xa, 0x3, 0x6, 0x0, {0xfc9, 0xf1, 0x0, 0x4, 0x0, 0x1}, 0x6, 0x10000, 0x9}}, @link_id={0x65, 0x12, {@from_mac, @device_a, @broadcast}}]}, @NL80211_ATTR_BEACON_TAIL={0xc2, 0xf, [@ht={0x2d, 0x1a, {0x800, 0x0, 0x6, 0x0, {0x0, 0x5, 0x0, 0xd, 0x0, 0x1, 0x0, 0x1, 0x1}, 0x400, 0x8, 0xd}}, @challenge={0x10, 0x1, 0xdd}, @mesh_config={0x71, 0x7, {0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x9, 0x69}}, @ext_channel_switch={0x3c, 0x4, {0x0, 0x9, 0x78}}, @fast_bss_trans={0x37, 0x72, {0x4, 0x3, "b0ecd74cdc42fa6b65b6063286672533", "6d0b513674bfdddaf94ebb32f6d136208f4921eda240003d0ea2a0e91599b2ac", "7046cb754ab4f7c4139c6e724142ab9c3e3faab4d636577adb77095727e7c701", [{0x3, 0x3, "8961e9"}, {0x3, 0x1, "10"}, {0x2, 0x16, "6b6367db21a95fd7160265047cf2e1b2160c721dcfd5"}]}}, @ht={0x2d, 0x1a, {0x8, 0x3, 0x4, 0x0, {0x50, 0x8, 0x0, 0xe, 0x0, 0x1, 0x0, 0x3}, 0x400, 0x3, 0x9}}]}, @NL80211_ATTR_BEACON_TAIL={0x153, 0xf, [@dsss={0x3, 0x1, 0xad}, @mesh_chsw={0x76, 0x6, {0x7, 0x7f, 0x0, 0xfff}}, @preq={0x82, 0x51, {{0x0, 0x1, 0x1}, 0xe, 0x6, 0x3, @device_a, 0x8, @void, 0xffffffff, 0x9, 0x5, [{{0x1}, @device_a, 0x5}, {{0x1}}, {{0x0, 0x0, 0x1}, @broadcast, 0x400}, {{0x1, 0x0, 0x1}, @broadcast, 0x8}, {{0x1}, @broadcast, 0x2668}]}}, @random_vendor={0xdd, 0xe4, "35e4022894648c7dc3ccb2df25eba60f252318b08cb829c2951141d0f69b055e642998642b4e21ef25edd0380cdbdc396fdf48a9fc6adc592241c411df6a125a4abfcd75ccb3246c60b2b3f9bbfe2b9cda8d48e972decbdf4989e939b363e36f38bf0396f2046f1c43a150bdd1a48fac58947ae7bb9d13e35ebf2826ffba7ec859fe38d7d7beeb4d663ecee28372317031743592bf17de734af149068103e04b1556f6274506dcf8479d5f451f26534efe508d4af80eed9cb62c4c993d8634fd108a651a9505eb26553a433879214abd3d58575b7db215d6c1b7c8ca735edc348d1f0e54"}, @sec_chan_ofs={0x3e, 0x1, 0x3}, @mesh_id={0x72, 0x6}]}, @NL80211_ATTR_IE_PROBE_RESP={0x1e3, 0x7f, [@ssid={0x0, 0x12, @random="e05e500909612d13295198f3e7f39461866f"}, @ibss={0x6, 0x2, 0x4}, @random={0x1, 0xe9, "a01a313ff422d088e44fcfd8eee7e43205399e6869b8bd9c2261b21329704273f918b5773121d9ef76b56df8883f977b114be6d766e5deb01ca92d2a31dca7d4cecb38c9b65ec07b1e7e8da4555b8faea15db855468cef3068ce7960c332b0f5d92fff7d25ff36e3ee58621f88e037ccc81d43b2e8024c6940698631d694be1decc73ec85432651ff1278e7b62a96d29e6894636afe91e126f2ebe42515108cec9eb1bfb9f578265355c6801c534f9d8b22ea1e65412a5e7b6253d930a8b08a1ca64eaec43efdb54b9a4548981f943b4681235ac9b98ba3628681d78cee681321709226f963e31c209"}, @dsss={0x3, 0x1, 0x24}, @rann={0x7e, 0x15, {{0x1, 0x78}, 0x5, 0xf, @device_a, 0x4, 0xa100, 0x6}}, @mesh_chsw={0x76, 0x6, {0x0, 0x0, 0xf, 0x5743}}, @tim={0x5, 0xb8, {0xe, 0x15, 0x1, "417cdce601ab56bf956825979a7e18eea104cfa041963d310d855243b29f894be1924d959267de8c1254a01bc700378901dc6f52cea00b1bf3bd91ef09e254925214a6b4ff36fcfd8ab92b7e9f7a3784535e02fa7e6f77ed40754d73707280ea13cc8e4b2f31543556c025126b3cd9cd43e62ebecad64fbc6347dc377157c8e50f906e40b55d146bc97656080932cd70b6214b852ddae64998d8b6fe5a5b3c2d9f79064b7f5f44bdd5c27a79b468678fbc917fc059"}}]}, @NL80211_ATTR_IE={0x51, 0x2a, [@ht={0x2d, 0x1a, {0x1000, 0x2, 0x1, 0x0, {0x3, 0x8, 0x0, 0xcb, 0x0, 0x0, 0x0, 0x1}, 0x1, 0x5, 0xff}}, @channel_switch={0x25, 0x3, {0x1, 0xb4, 0x4}}, @chsw_timing={0x68, 0x4, {0x1798, 0x5}}, @chsw_timing={0x68, 0x4, {0xffc0, 0x2}}, @peer_mgmt={0x75, 0x16, {0x1, 0x8, @val=0x200, @void, @val="854db8d03e315963f05324bfc6294bb3"}}, @cf={0x4, 0x6, {0xc, 0x0, 0x6, 0x4}}]}, @NL80211_ATTR_BEACON_HEAD={0x452, 0xe, {{{0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1}, {0x9}, @device_b, @broadcast, @initial, {0x2, 0x100}}, 0x385, @random=0x9, 0x90, @void, @val={0x1, 0x3, [{0x24, 0x1}, {0x16, 0x1}, {0xb, 0x1}]}, @void, @void, @void, @val={0x5, 0xa0, {0x3, 0x7b, 0x4, "6ca327b4a49c3aa91021b754f4e2bead9d9f6494e170865593f99cda19d69817d027193d60483827fed754d4abe567774d810fc8ae2780680b44ef14701544239c3505a5fea87e36639faee7a117ebb9ef864d219a0096b16c25ba4ab52595e9396e9ffe7d90b3b0e885db075466e5fa8461bb00ce6fa1c3f16290050fa502bcc0637aebc189b54dea32fb39eafd41caf52174cf57d29a136ebf17c554"}}, @val={0x25, 0x3, {0x0, 0x40, 0x6}}, @val={0x2a, 0x1}, @void, @void, @void, @void, @void, [{0xdd, 0x9a, "55da5fd9d091e38a967d0503362fb1c57b1ef2dafd17655ef60856ebb6f7a26f7d4ba540e092b279172e15ab6e26c4000b423ebbf8bbc6da292280b77a76d6f4245abe862e3dfb9e9d8dbb75acf7faa0c281e98ca11258e198ef981391858f80cc1cd9b8e858dbeeaa09e7a40e8c60ab707f77c3f036936e6b40b7825f6396b20553fffb992d1297639b4c78e8d7cb25edb96b2731ce71ab619a"}, {0xdd, 0xc6, "0739a905e28514b4e0e1accdeca1d506e2c6c73abfdbfc4e4309ef314bb51b4c802e15abd17b396dd28df36d35bc4a0abefae70916fb8432ded99deb6a11e25c15e554f61b1754d7206e56f2ea8c283e37a086a3d5540998396b5077b9c2bd63f5f82408299610280ffb759c881ce94b1c6ac8149aa9dc5a58b4a85e146c1caf61f569d255622737c2a75ae5dc54f040c9df044881727bc7017c12a90c5e25a5e84b04cb3ebb0f92bfa2fa835209e3d5c1485df4fb31d0f942e6372e53507ab4f28906c60e33"}, {0xdd, 0x17, "d40a775e9324792636963ede3fa19411b3a5bd7a409b11"}, {0xdd, 0xf4, "59be377d2cb6f4ec79ccb2242686183a4e3ffc101c5181077a2248e9174d6cad95740ffe20cea98b81fab1afdaf94499f13e0983eb08b58d913464ee5716aa75eeba27e6413e577905766e515052262cbe2908ded81cb92f0b58efabd058df94e7a0c868aaed288ec380534b51fc1363e4aacb00dab227c2bcd8e5118af9386ef64599456c283e7af57a758321dde0baadbe7680432348e573de52110ac0ecc29aafad179b721e097ab6e49ee6f9170703727d3beffb66c362c061bb5295135267fff4eb1fee2e816597927e3d80b70296aa16e8e0a08385b8e5a76ee56e3f9d3853d40261dccc7db5345786a965b70524b8e830"}, {0xdd, 0xe5, "cb13cd494a1b1b96b3e2e41e1f33478acbd4d325aec2d548bed498792f39f3901d0ef9842c9afc7a3c950cc52a4d18ef1f953597f5e112ee2f2e7e01b01179b0417a190d4235697911b6cbf6f2dbc7f75f9778d8737bb7c11bf4657e181dd4adc3babcf9cdb5e6042c7fbe24a10bebb41dca57d0d8839c7dcd4e53c7fa361b988a28a23433528aa5194569be80e0bc5ff4af5dadebf450c0732dd142e888751770c6ab95c2044ff38b8c28f7e453d116b51b2f295dd004a7f5d89633e0f6740f09738b9940b3cc4e0d221bc7555c5d5259aeefe9a0f3f31bb627bc098c258b3fa53a2854f6"}, {0xdd, 0x1f, "c02b2cbb3ef7dc161f0ed4cef38b50375437e12f2f5a16852a91215106e89f"}]}}, @NL80211_ATTR_PROBE_RESP={0x283, 0x91, "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"}, @NL80211_ATTR_PROBE_RESP={0xdd, 0x91, "865d753f437c3df01350a9011f6d1421f08e13c85cdae0056948e59fc22e711986f3795f99d0d0da4459df35cfb87dec41f505df94e6f8583be619fa3316baff5780ee6cc2763e1b29a0aee469dfbac7094fe144be45344663169f7f2e06c8cd27c0997a39c38a21f791a857a1e3b9e481948a0acde59bc1cf6adaeabc01dd9b87da417a95128246870dd19a03e89522726677e9048b6714930f42840c596265f43b3481c5b8096736a34e7ce696d40d4443654cd936455c6cc91049161c929735785e438dde4a79b3af274c91cf61a2bf8a24d1849d6ebedd"}, @NL80211_ATTR_BEACON_HEAD={0x4e9, 0xe, {{{0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1}, {0x2}, @broadcast, @device_a, @random="b7156cf309d3", {0x1, 0xff8}, @value=@ver_80211n={0x0, 0x1, 0x2, 0x1, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1}}, 0x5, @default, 0x2010, @val={0x0, 0x6, @default_ibss_ssid}, @val, @void, @val={0x4, 0x6, {0x6, 0x6, 0x7fff, 0x4}}, @val={0x6, 0x2, 0xfa39}, @void, @void, @void, @void, @val={0x2d, 0x1a, {0x300, 0x1, 0x1, 0x0, {0x4aff0d69, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x1, 0x3, 0x10}}, @val={0x72, 0x6}, @void, @val={0x76, 0x6, {0xb, 0x9, 0x3b, 0xe133}}, [{0xdd, 0x49, "f52f17dfd048399edc2acb90425cfd58dcbf03654a492ba40506b88d178019f80f3abc635efd8e1e08abc0715ae0205f6840ebd2a74bcf9523239e0b39c7cc6f178ea435dd84de7dee"}, {0xdd, 0xf0, "4925067a2fa74e4d964bce50c7ad36c482cf3634957df48c68d1adb246d4f8bc2b6752b9ca1583c8f3e55a23517a471ff21f7d646794f79d1dc0d996e6963f995d384558cad3ef468c0c830eb6d216b634929166ce2109e530ab1d0e6ca35e60d86cd5e5cb35b606bbdf8d7cfaee24daa943bf2e0345ad6249ad73ad56423f8fac76a624e32a18d28e57339e429a7e9c5b11560cf4b3298b7236b020a07ccda9d5449ae9a2a400a98ab3ac79e674c2977c4c7450566ca85d1e966ef6be02a1aa975e5caab0dacbd9af3b22245ade0766181d9d78eeee414aec581ac5a7ee9bda007ef703fc9ba1d0f76e40132a610d25"}, {0xdd, 0xd8, "a224204a52094a994b7bb9f8ac4f7c2d18494dd301a2a79527930a634733c28349070df1c70045731be1970ed9830cf307b933ecb36a0446cef800bad48e7e06a5e06e9da02ad405a928b29c0bb185c1c821e60b7267a542c32583bbf6afc92b4f2cc5fbd5524a65b57c6f41d3ede8709a681f6685717eadcc63577ccc33686b261b4ea2d0f58ad80a11a675ef9530561c2aab2b1e0f1d61956b2582933bef58cbb7ca6c2eca296e1db78a49b4b8829dfad8e9d084007f83e769df64ab6cf2b3f5bfa4f6975167ec6c2ca79712dd4bb6e82ede71fcf0971d"}, {0xdd, 0x66, "6d224adcada1ca2a2d3cf35349a6e8f7e298ceb84fda635e37d74c298fb7d88abb9094a56256cf5fc23fddf126ae0df4b599003cb3bdbf61474f18a767b73341cfc27eef5f2248602da449dc4571515e9ba6a3311b5f090a723c112cea79219a2426599d0402"}, {0xdd, 0xed, "4bb0f9224f79b97114b5afde6fe6cb4144ebf96929cdc7bed6d37df5d856c61ce9f745223095d581051cb6445bf67a129120219b2c62b334c3a3231c05175dabce571f30f4a05b13a8338521353b9e1796b64fad2a8558c6680e1395beb0214949dee8b3472baabee0cb8047229ea711f93b4d3824efce417e4749e86c1be2ce012f1e8df08ac8403d1841d87e2a75abb276dfe4e75a518141559d79b92edb41bbaa6445733bf6f21999f00191cce2fdbb9326f18c4167943ea925c5438d8deaaa0efd4a3033a63490d42e8f04fad0084cf38a6b0d23cf8c32e5748c092a68be66e6879d25bad5eb6721db9910"}, {0xdd, 0x59, "dddf6c00a05059c5b3c341aa0a4e4b555f942bf19167bc7524a450a1009de3468eb9f00c4db087dfd7aac951038f301e4a8f8544e4e3c6730d5300963e262ac7be908c6db63bf91cb5c89fff4b68e74213d7943c7dc4718cb8"}, {0xdd, 0x6, "d638041015d3"}, {0xdd, 0x47, "f45b30a1263a2b01a4d93f416abcf9d6dd226477edcfdbb6a5bc93b1ee21acd8cae7a16ea9f7cf74e89a7d6343a003b49431a12e66b7e3508b82673f7fddeaf047079473a58368"}, {0xdd, 0x5f, "45a03d4fe9f58dcf401772acb9a36559f950d80bf9b099bd8a2d08f2bbb95b3911c7e50144a9168a1b4cc1471f9e2c5d11ea2992e4b40f9852a08388244ea8f1675ab4dff698b5bbe16a7d9c5dbae89c64affd037f548827f83544cf7d633b"}]}}], @NL80211_ATTR_CSA_C_OFF_PRESP={0x16, 0xbb, [0x6, 0x8, 0x5, 0x6, 0x40, 0xe, 0x8000, 0xd5d8, 0xac1]}]}, @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x86}, @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x4}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0xfd}]}, 0x20a4}, 0x1, 0x0, 0x0, 0x44082}, 0x8000) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @broadcast}, @in={0x2, 0x4e20, @broadcast}], 0x20) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000080)=0x8, 0x4) sendto$inet6(r0, &(0x7f0000000040)="e4", 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback, 0x5}, 0x1c) recvmmsg(r0, &(0x7f0000007f80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000005180)=""/31, 0x1f}, 0x10000}], 0x1, 0x40000023, 0x0) write$binfmt_script(r1, &(0x7f00000000c0)={'#! ', './file0', [], 0xa, "21f6e073de"}, 0x10) 5.571108ms ago: executing program 3 (id=793): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x5) accept4$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @dev}, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000000200)='X', 0x150, 0x0, &(0x7f0000000240)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000003e00070100001a000500f2ff037c0000040049800c000180060006000806"], 0x28}, 0x1, 0x0, 0x0, 0x8044}, 0x4010) syz_mount_image$ext4(&(0x7f00000000c0)='ext3\x00', &(0x7f0000000140)='./file0\x00', 0x0, &(0x7f00000001c0), 0x1, 0x668, &(0x7f0000000e00)="$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") 0s ago: executing program 1 (id=794): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$SEG6(&(0x7f0000000140), r0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f00000001c0)={0x1f, 0xffff, 0x3}, 0x6) write(r1, &(0x7f0000000200)="040000000000", 0x6) write(r1, &(0x7f00000004c0)="09000000010001", 0x7) mkdirat(0xffffffffffffff9c, &(0x7f0000000600)='./file1\x00', 0xc4) r2 = landlock_create_ruleset(&(0x7f0000000640)={0x2000}, 0x18, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000680)='./file1\x00', 0x34b400, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r2, 0x1, &(0x7f00000006c0)={0x2000, r3}, 0x0) landlock_restrict_self(r2, 0x0) linkat(0xffffffffffffff9c, &(0x7f0000000700)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000740)='./file1/file0\x00', 0x400) syz_emit_vhci(&(0x7f0000000500)=ANY=[@ANYBLOB="041817aaaaaaaaaa10112233445566778899aabbccddeeff0005"], 0x1a) syz_emit_vhci(&(0x7f0000000540)=ANY=[@ANYBLOB="04080400c80002"], 0x7) syz_emit_vhci(&(0x7f0000000580)=ANY=[@ANYBLOB="040e0701081400c80010"], 0xa) syz_emit_vhci(&(0x7f00000005c0)=ANY=[@ANYBLOB="02c8000b000700070001030029100101"], 0x10) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xc201}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)={0x64, r6, 0x917, 0x1000, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={'\x00', '\xff\xff', @remote}}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e23}]}, 0x64}}, 0x0) r7 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) r8 = socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}, {0x0, 0xffe0}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=@newtfilter={0x80, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xb, 0x7}, {0xfff1, 0xffff}, {0x300}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4c, 0x2, [@TCA_MATCHALL_ACT={0x48, 0x2, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x0, 0x0, 0x3}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x80}}, 0x0) write$tun(r4, &(0x7f0000000480)=ANY=[@ANYBLOB="034886dd010000000000140000006000000003082f00fe88a43de1a400000000000000007d01ff020000000000000000000000000001"], 0xfdef) kernel console output (not intermixed with test programs): .041547][ T4717] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.045687][ T4717] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.059656][ T4713] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.072307][ T4706] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 31.072325][ T4706] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 31.076166][ T14] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.076195][ T14] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.076776][ T14] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.076795][ T14] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.100830][ T4713] veth0_vlan: entered promiscuous mode [ 31.103272][ T4708] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.104159][ T4713] veth1_vlan: entered promiscuous mode [ 31.107092][ T4708] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.134296][ T4713] veth0_macvtap: entered promiscuous mode [ 31.144077][ T2768] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.144108][ T2768] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.151933][ T4713] veth1_macvtap: entered promiscuous mode [ 31.153214][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.153238][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.174650][ T4713] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.176149][ T4713] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.208745][ T104] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.209034][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.211571][ T4708] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 31.230211][ T14] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.256323][ T4707] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.270542][ T104] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.270555][ T104] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.299912][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.299928][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.331075][ T2768] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.360263][ T4713] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 31.376105][ T4717] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.420198][ T4717] veth0_vlan: entered promiscuous mode [ 31.422107][ T4717] veth1_vlan: entered promiscuous mode [ 31.449287][ T4707] veth0_vlan: entered promiscuous mode [ 31.451221][ T4707] veth1_vlan: entered promiscuous mode [ 31.461616][ T4707] veth0_macvtap: entered promiscuous mode [ 31.472103][ T4706] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.481943][ T4708] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.486296][ T4706] veth0_vlan: entered promiscuous mode [ 31.489644][ T4717] veth0_macvtap: entered promiscuous mode [ 31.490743][ T4717] veth1_macvtap: entered promiscuous mode [ 31.494706][ T4717] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.494854][ T4706] veth1_vlan: entered promiscuous mode [ 31.496072][ T4717] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.513953][ T4707] veth1_macvtap: entered promiscuous mode [ 31.518608][ T49] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.519030][ T49] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.519135][ T49] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.519258][ T49] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.523302][ T4706] veth0_macvtap: entered promiscuous mode [ 31.751553][ T51] Bluetooth: hci4: command tx timeout [ 31.751836][ T51] Bluetooth: hci2: command tx timeout [ 31.770679][ T4707] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.771367][ T4706] veth1_macvtap: entered promiscuous mode [ 31.774528][ T4708] veth0_vlan: entered promiscuous mode [ 31.776171][ T4707] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.777600][ T4716] Bluetooth: hci3: command tx timeout [ 31.777766][ T4716] Bluetooth: hci1: command tx timeout [ 31.777841][ T4716] Bluetooth: hci0: command tx timeout [ 31.790031][ T4708] veth1_vlan: entered promiscuous mode [ 31.801175][ T4706] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.811288][ T4706] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.822042][ T14] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.822060][ T14] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.828335][ T14] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.828364][ T14] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.828381][ T14] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.828397][ T14] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.838259][ T4708] veth0_macvtap: entered promiscuous mode [ 31.839985][ T4708] veth1_macvtap: entered promiscuous mode [ 31.858708][ T49] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.858859][ T49] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.859031][ T49] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.861550][ T4708] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.872497][ T4708] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.885339][ T14] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.885355][ T14] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.909840][ T2768] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.909853][ T2768] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.914273][ T2768] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.914289][ T2768] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.929571][ T1161] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.929586][ T1161] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.952089][ T14] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.952105][ T14] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.974292][ T1161] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.974307][ T1161] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.975572][ T14] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.975586][ T14] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.979820][ T1161] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.988948][ T2768] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.991185][ T2768] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.991211][ T2768] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.991229][ T2768] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.084901][ T1161] IPVS: starting estimator thread 0... [ 32.123821][ T4907] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4'. [ 32.180738][ T4904] IPVS: using max 60 ests per chain, 144000 per kthread [ 32.874144][ T4918] process 'syz.0.8' launched '/dev/fd/3' with NULL argv: empty string added [ 33.005656][ T4920] loop2: detected capacity change from 0 to 256 [ 33.018212][ T4925] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 33.775338][ T2768] IPVS: starting estimator thread 0... [ 33.787452][ T4716] Bluetooth: hci4: command tx timeout [ 33.787502][ T51] Bluetooth: hci2: command tx timeout [ 33.857600][ T4716] Bluetooth: hci1: command tx timeout [ 33.857625][ T4716] Bluetooth: hci3: command tx timeout [ 33.857623][ T4941] IPVS: using max 50 ests per chain, 120000 per kthread [ 33.857669][ T51] Bluetooth: hci0: command tx timeout [ 34.061301][ T4952] mmap: syz.0.17 (4952): VmData 37552128 exceed data ulimit 2. Update limits or use boot option ignore_rlimit_data. [ 35.573885][ T4998] loop4: detected capacity change from 0 to 512 [ 35.644449][ T4999] loop0: detected capacity change from 0 to 256 [ 35.644831][ T4998] EXT4-fs: Ignoring removed mblk_io_submit option [ 35.674643][ T4998] EXT4-fs error (device loop4): ext4_iget_extra_inode:5210: inode #15: comm syz.4.31: corrupted in-inode xattr: e_value size too large [ 35.674719][ T4998] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 35.676699][ T4998] EXT4-fs error (device loop4): ext4_orphan_get:1408: comm syz.4.31: couldn't read orphan inode 15 (err -117) [ 35.676747][ T4998] loop4: lost filesystem error report for type 5 error -117 [ 35.678120][ T4998] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 35.756353][ T4707] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.773307][ T5013] netlink: 'syz.0.36': attribute type 4 has an invalid length. [ 35.773327][ T5013] netlink: 152 bytes leftover after parsing attributes in process `syz.0.36'. [ 35.783459][ T5013] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 35.798846][ T5013] loop0: detected capacity change from 0 to 512 [ 35.804027][ T5013] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 35.804048][ T5013] EXT4-fs (loop0): invalid inodes per group: 4072 [ 35.831231][ T5013] fuse: Bad value for 'user_id' [ 35.831245][ T5013] fuse: Bad value for 'user_id' [ 35.834105][ T5013] Illegal XDP return value 1457145943 on prog (id 3) dev N/A, expect packet loss! [ 35.858376][ T51] Bluetooth: hci2: command tx timeout [ 35.858408][ T51] Bluetooth: hci4: command tx timeout [ 35.904615][ T5017] FAULT_INJECTION: forcing a failure. [ 35.904615][ T5017] name fail_futex, interval 1, probability 0, space 0, times 1 [ 35.904635][ T5017] CPU: 1 UID: 0 PID: 5017 Comm: syz.0.36 Not tainted syzkaller #0 PREEMPT [ 35.904646][ T5017] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 35.904651][ T5017] Call trace: [ 35.904654][ T5017] show_stack+0x2c/0x3c (C) [ 35.904675][ T5017] __dump_stack+0x30/0x40 [ 35.904687][ T5017] dump_stack_lvl+0xd8/0x12c [ 35.904699][ T5017] dump_stack+0x1c/0x28 [ 35.904710][ T5017] should_fail_ex+0x418/0x58c [ 35.904723][ T5017] should_fail+0x14/0x24 [ 35.904734][ T5017] get_futex_key+0x1ec/0x12b0 [ 35.904746][ T5017] futex_wake+0x10c/0x594 [ 35.904757][ T5017] do_futex+0x2c4/0x378 [ 35.904767][ T5017] __arm64_sys_futex+0x2e4/0x418 [ 35.904777][ T5017] invoke_syscall+0x98/0x244 [ 35.904789][ T5017] el0_svc_common+0xec/0x23c [ 35.904801][ T5017] do_el0_svc+0x4c/0x5c [ 35.904812][ T5017] el0_svc+0x60/0x1d8 [ 35.904824][ T5017] el0t_64_sync_handler+0x44/0x104 [ 35.904836][ T5017] el0t_64_sync+0x198/0x19c [ 35.938215][ T4711] Bluetooth: hci3: command tx timeout [ 35.947381][ T4711] Bluetooth: hci0: command tx timeout [ 35.947408][ T4711] Bluetooth: hci1: command tx timeout [ 36.501271][ T5026] loop1: detected capacity change from 0 to 256 [ 36.585034][ T5032] FAULT_INJECTION: forcing a failure. [ 36.585034][ T5032] name failslab, interval 1, probability 0, space 0, times 1 [ 36.585056][ T5032] CPU: 0 UID: 0 PID: 5032 Comm: syz.1.41 Not tainted syzkaller #0 PREEMPT [ 36.585068][ T5032] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 36.585074][ T5032] Call trace: [ 36.585077][ T5032] show_stack+0x2c/0x3c (C) [ 36.585096][ T5032] __dump_stack+0x30/0x40 [ 36.585107][ T5032] dump_stack_lvl+0xd8/0x12c [ 36.585117][ T5032] dump_stack+0x1c/0x28 [ 36.585126][ T5032] should_fail_ex+0x418/0x58c [ 36.585138][ T5032] should_failslab+0xc4/0x120 [ 36.585149][ T5032] kmem_cache_alloc_noprof+0x94/0x5d4 [ 36.585157][ T5032] __kernfs_new_node+0xf0/0x7d8 [ 36.585166][ T5032] kernfs_new_node+0xe8/0x130 [ 36.585175][ T5032] __kernfs_create_file+0x60/0x2e0 [ 36.585184][ T5032] sysfs_add_file_mode_ns+0x1e8/0x2a4 [ 36.585193][ T5032] internal_create_group+0x550/0xb30 [ 36.585203][ T5032] internal_create_groups+0x64/0x138 [ 36.585213][ T5032] sysfs_create_groups+0x2c/0x3c [ 36.585223][ T5032] device_add_attrs+0xdc/0x4e4 [ 36.585232][ T5032] device_add+0x420/0x9e0 [ 36.585239][ T5032] netdev_register_kobject+0x184/0x328 [ 36.585251][ T5032] register_netdevice+0xd74/0x14c0 [ 36.585261][ T5032] ieee802154_if_add+0x84c/0xc90 [ 36.585271][ T5032] ieee802154_add_iface_deprecated+0x4c/0x74 [ 36.585279][ T5032] ieee802154_add_iface+0x38c/0x6a0 [ 36.585290][ T5032] genl_family_rcv_msg_doit+0x1e4/0x2d4 [ 36.585301][ T5032] genl_rcv_msg+0x43c/0x620 [ 36.585311][ T5032] netlink_rcv_skb+0x238/0x414 [ 36.585320][ T5032] genl_rcv+0x38/0x50 [ 36.585329][ T5032] netlink_unicast+0x600/0x7f8 [ 36.585337][ T5032] netlink_sendmsg+0x648/0x948 [ 36.585346][ T5032] __sock_sendmsg+0xc8/0x17c [ 36.585354][ T5032] ____sys_sendmsg+0x3d0/0x6c8 [ 36.585364][ T5032] ___sys_sendmsg+0x198/0x224 [ 36.585372][ T5032] __sys_sendmsg+0x158/0x204 [ 36.585381][ T5032] __arm64_sys_sendmsg+0x88/0x9c [ 36.585390][ T5032] invoke_syscall+0x98/0x244 [ 36.585401][ T5032] el0_svc_common+0xec/0x23c [ 36.585410][ T5032] do_el0_svc+0x4c/0x5c [ 36.585420][ T5032] el0_svc+0x60/0x1d8 [ 36.585430][ T5032] el0t_64_sync_handler+0x44/0x104 [ 36.585439][ T5032] el0t_64_sync+0x198/0x19c [ 37.431602][ T5050] Zero length message leads to an empty skb [ 37.823086][ T5075] loop4: detected capacity change from 0 to 256 [ 37.937479][ T51] Bluetooth: hci4: command tx timeout [ 37.937507][ T51] Bluetooth: hci2: command tx timeout [ 37.963785][ T5089] input: syz0 as /devices/virtual/input/input2 [ 38.017374][ T4711] Bluetooth: hci1: command tx timeout [ 38.017414][ T4711] Bluetooth: hci0: command tx timeout [ 38.017432][ T4711] Bluetooth: hci3: command tx timeout [ 38.123445][ T5100] loop4: detected capacity change from 0 to 1024 [ 38.125961][ T5100] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 38.125979][ T5100] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 38.129524][ T5100] JBD2: no valid journal superblock found [ 38.133707][ T5100] EXT4-fs (loop4): Could not load journal inode [ 38.276697][ T5108] loop2: detected capacity change from 0 to 128 [ 38.280138][ T5108] EXT4-fs (loop2): VFS: Found ext4 filesystem with invalid superblock checksum. Run e2fsck? [ 38.289619][ T4700] udevd[4700]: incorrect ext4 checksum on /dev/loop2 [ 38.306744][ T5108] loop2: detected capacity change from 0 to 4096 [ 38.315507][ T5108] EXT4-fs: Ignoring removed nomblk_io_submit option [ 38.321753][ T5108] EXT4-fs (loop2): Test dummy encryption mode enabled [ 38.334452][ T5108] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 38.334538][ T5108] System zones: 0-5 [ 38.335776][ T5110] syzkaller0: entered promiscuous mode [ 38.335793][ T5110] syzkaller0: entered allmulticast mode [ 38.343174][ T5108] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.476650][ T5120] capability: warning: `syz.2.62' uses deprecated v2 capabilities in a way that may be insecure [ 38.703147][ T5126] binder: 5125:5126 got reply transaction with no transaction stack [ 38.703183][ T5126] binder: 5125:5126 transaction reply to 0:0 failed 1/29201/-71, code 0 size 0-24 line 3155 [ 38.706228][ T5127] binder: 5125:5127 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 38.706246][ T5127] binder: 5127 RLIMIT_NICE not set [ 38.706294][ T5127] binder: 5125:5127 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 38.706303][ T5127] binder: 5127 RLIMIT_NICE not set [ 38.711756][ T5128] netlink: 36 bytes leftover after parsing attributes in process `syz.4.67'. [ 38.711771][ T5128] netlink: 8 bytes leftover after parsing attributes in process `syz.4.67'. [ 38.988418][ T5137] loop3: detected capacity change from 0 to 1024 [ 38.988796][ T5137] EXT4-fs: Ignoring removed nomblk_io_submit option [ 38.988823][ T5137] EXT4-fs: mb_optimize_scan should be set to 0 or 1. [ 39.093713][ T4717] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.152235][ T5146] FAULT_INJECTION: forcing a failure. [ 39.152235][ T5146] name failslab, interval 1, probability 0, space 0, times 0 [ 39.152255][ T5146] CPU: 0 UID: 0 PID: 5146 Comm: syz.2.72 Not tainted syzkaller #0 PREEMPT [ 39.152266][ T5146] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 39.152271][ T5146] Call trace: [ 39.152274][ T5146] show_stack+0x2c/0x3c (C) [ 39.152294][ T5146] __dump_stack+0x30/0x40 [ 39.152310][ T5146] dump_stack_lvl+0xd8/0x12c [ 39.152323][ T5146] dump_stack+0x1c/0x28 [ 39.152335][ T5146] should_fail_ex+0x418/0x58c [ 39.152348][ T5146] should_failslab+0xc4/0x120 [ 39.152362][ T5146] kmem_cache_alloc_noprof+0x94/0x5d4 [ 39.152370][ T5146] alloc_vfsmnt+0x34/0x3cc [ 39.152380][ T5146] vfs_create_mount+0x68/0x140 [ 39.152390][ T5146] fc_mount+0x98/0xac [ 39.152399][ T5146] fc_mount_longterm+0x20/0x74 [ 39.152409][ T5146] mq_init_ns+0x3c8/0x638 [ 39.152422][ T5146] copy_ipcs+0x3c8/0x63c [ 39.152434][ T5146] create_new_namespaces+0x1a8/0x50c [ 39.152445][ T5146] unshare_nsproxy_namespaces+0x120/0x170 [ 39.152456][ T5146] ksys_unshare+0x438/0x6cc [ 39.152466][ T5146] __arm64_sys_unshare+0x40/0x54 [ 39.152475][ T5146] invoke_syscall+0x98/0x244 [ 39.152488][ T5146] el0_svc_common+0xec/0x23c [ 39.152500][ T5146] do_el0_svc+0x4c/0x5c [ 39.152511][ T5146] el0_svc+0x60/0x1d8 [ 39.152524][ T5146] el0t_64_sync_handler+0x44/0x104 [ 39.152536][ T5146] el0t_64_sync+0x198/0x19c [ 39.429476][ T5165] loop1: detected capacity change from 0 to 512 [ 39.435659][ T5165] EXT4-fs error (device loop1): ext4_orphan_get:1403: inode #15: comm syz.1.77: inode has both inline data and extents flags [ 39.435677][ T5165] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 39.435810][ T5165] EXT4-fs error (device loop1): ext4_orphan_get:1408: comm syz.1.77: couldn't read orphan inode 15 (err -117) [ 39.435822][ T5165] loop1: lost filesystem error report for type 5 error -117 [ 39.437820][ T5165] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.472673][ T4713] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.500079][ T5170] netlink: 'syz.1.79': attribute type 1 has an invalid length. [ 39.501430][ T5170] ip_tables: iptables: counters copy to user failed while replacing table [ 39.526043][ T5172] loop1: detected capacity change from 0 to 512 [ 39.536951][ T5127] binder: 5125:5127 ioctl c0306201 20002fc0 returned -14 [ 39.538738][ T4895] binder: undelivered TRANSACTION_ERROR: 29201 [ 39.542285][ T5174] autofs: Unknown parameter '/dev/usbmon#' [ 39.551155][ T5172] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.576216][ T4713] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.592736][ T5180] Bluetooth: MGMT ver 1.23 [ 39.688441][ T5189] Cannot find add_set index 0 as target [ 39.738333][ T5181] netlink: 44 bytes leftover after parsing attributes in process `syz.2.81'. [ 39.841878][ T5203] Soft offlining pfn 0x216be0 at process virtual address 0x20000000 [ 39.846225][ T5203] Memory failure: 0x216be0: unhandlable page. [ 39.900838][ T461] IPVS: starting estimator thread 0... [ 40.008015][ T5209] IPVS: using max 60 ests per chain, 144000 per kthread [ 40.512104][ T5247] loop1: detected capacity change from 0 to 512 [ 40.514846][ T5247] EXT4-fs (loop1): Test dummy encryption mode enabled [ 40.528131][ T5247] EXT4-fs error (device loop1): ext4_orphan_get:1403: inode #15: comm syz.1.103: inode has both inline data and extents flags [ 40.528160][ T5247] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 40.528366][ T5247] EXT4-fs error (device loop1): ext4_orphan_get:1408: comm syz.1.103: couldn't read orphan inode 15 (err -117) [ 40.528381][ T5247] loop1: lost filesystem error report for type 5 error -117 [ 40.528914][ T5247] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.556510][ T4713] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.594254][ T5258] fuse: Unknown parameter 'group_id00000000000000000000' [ 40.602682][ T5258] gadgetfs: bound to dummy_udc driver [ 40.630604][ T1161] Bluetooth: hci5: Frame reassembly failed (-84) [ 40.633395][ T5258] openvswitch: netlink: Flow key attribute not present in set flow. [ 40.634777][ T5258] loop1: detected capacity change from 0 to 128 [ 40.636688][ T5258] EXT4-fs (loop1): Test dummy encryption mode enabled [ 40.644670][ T5258] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 40.745334][ T5274] netlink: 12 bytes leftover after parsing attributes in process `syz.4.110'. [ 40.745424][ T5274] netlink: 12 bytes leftover after parsing attributes in process `syz.4.110'. [ 40.745480][ T5274] netlink: 12 bytes leftover after parsing attributes in process `syz.4.110'. [ 40.745530][ T5274] netlink: 12 bytes leftover after parsing attributes in process `syz.4.110'. [ 40.745578][ T5274] netlink: 12 bytes leftover after parsing attributes in process `syz.4.110'. [ 40.745623][ T5274] netlink: 12 bytes leftover after parsing attributes in process `syz.4.110'. [ 40.745667][ T5274] netlink: 12 bytes leftover after parsing attributes in process `syz.4.110'. [ 40.784106][ T5284] binder_alloc: binder_alloc_mmap_handler: 5279 20ffd000-21000000 already mapped failed -16 [ 40.784251][ T5284] binder_alloc: binder_alloc_mmap_handler: 5279 20ffd000-21000000 already mapped failed -16 [ 40.784304][ T5284] binder_alloc: binder_alloc_mmap_handler: 5279 20ffd000-21000000 already mapped failed -16 [ 40.784354][ T5284] binder_alloc: binder_alloc_mmap_handler: 5279 20ffd000-21000000 already mapped failed -16 [ 40.784403][ T5284] binder_alloc: binder_alloc_mmap_handler: 5279 20ffd000-21000000 already mapped failed -16 [ 40.784451][ T5284] binder_alloc: binder_alloc_mmap_handler: 5279 20ffd000-21000000 already mapped failed -16 [ 40.784499][ T5284] binder_alloc: binder_alloc_mmap_handler: 5279 20ffd000-21000000 already mapped failed -16 [ 40.784547][ T5284] binder_alloc: binder_alloc_mmap_handler: 5279 20ffd000-21000000 already mapped failed -16 [ 40.784595][ T5284] binder_alloc: binder_alloc_mmap_handler: 5279 20ffd000-21000000 already mapped failed -16 [ 40.784642][ T5284] binder_alloc: binder_alloc_mmap_handler: 5279 20ffd000-21000000 already mapped failed -16 [ 40.784951][ T5285] binder: BINDER_SET_CONTEXT_MGR already set [ 40.784958][ T5285] binder: 5279:5285 ioctl 4018620d 200001c0 returned -16 [ 40.784985][ T5285] binder: BINDER_SET_CONTEXT_MGR already set [ 40.784988][ T5285] binder: 5279:5285 ioctl 4018620d 200001c0 returned -16 [ 40.785012][ T5285] binder: BINDER_SET_CONTEXT_MGR already set [ 40.785016][ T5285] binder: 5279:5285 ioctl 4018620d 200001c0 returned -16 [ 40.785051][ T5285] binder: BINDER_SET_CONTEXT_MGR already set [ 40.785054][ T5285] binder: 5279:5285 ioctl 4018620d 200001c0 returned -16 [ 40.785083][ T5285] binder: BINDER_SET_CONTEXT_MGR already set [ 40.785086][ T5285] binder: 5279:5285 ioctl 4018620d 200001c0 returned -16 [ 40.785109][ T5285] binder: BINDER_SET_CONTEXT_MGR already set [ 40.785112][ T5285] binder: 5279:5285 ioctl 4018620d 200001c0 returned -16 [ 40.785135][ T5285] binder: BINDER_SET_CONTEXT_MGR already set [ 40.785138][ T5285] binder: 5279:5285 ioctl 4018620d 200001c0 returned -16 [ 40.785161][ T5285] binder: BINDER_SET_CONTEXT_MGR already set [ 40.785164][ T5285] binder: 5279:5285 ioctl 4018620d 200001c0 returned -16 [ 40.785272][ T5285] binder: BINDER_SET_CONTEXT_MGR already set [ 40.785275][ T5285] binder: 5279:5285 ioctl 4018620d 200001c0 returned -16 [ 40.785302][ T5285] binder: BINDER_SET_CONTEXT_MGR already set [ 40.785306][ T5285] binder: 5279:5285 ioctl 4018620d 200001c0 returned -16 [ 40.785331][ T5285] binder: BINDER_SET_CONTEXT_MGR already set [ 40.785334][ T5285] binder: 5279:5285 ioctl 4018620d 200001c0 returned -16 [ 40.785358][ T5285] binder: BINDER_SET_CONTEXT_MGR already set [ 40.785362][ T5285] binder: 5279:5285 ioctl 4018620d 200001c0 returned -16 [ 40.785387][ T5285] binder: BINDER_SET_CONTEXT_MGR already set [ 40.785390][ T5285] binder: 5279:5285 ioctl 4018620d 200001c0 returned -16 [ 40.785412][ T5285] binder: BINDER_SET_CONTEXT_MGR already set [ 40.785416][ T5285] binder: 5279:5285 ioctl 4018620d 200001c0 returned -16 [ 40.785438][ T5285] binder: BINDER_SET_CONTEXT_MGR already set [ 40.785442][ T5285] binder: 5279:5285 ioctl 4018620d 200001c0 returned -16 [ 40.785464][ T5285] binder: BINDER_SET_CONTEXT_MGR already set [ 40.785467][ T5285] binder: 5279:5285 ioctl 4018620d 200001c0 returned -16 [ 40.785491][ T5285] binder: BINDER_SET_CONTEXT_MGR already set [ 40.785494][ T5285] binder: 5279:5285 ioctl 4018620d 200001c0 returned -16 [ 40.785519][ T5285] binder: BINDER_SET_CONTEXT_MGR already set [ 40.785522][ T5285] binder: 5279:5285 ioctl 4018620d 200001c0 returned -16 [ 40.785545][ T5285] binder: BINDER_SET_CONTEXT_MGR already set [ 40.785548][ T5285] binder: 5279:5285 ioctl 4018620d 200001c0 returned -16 [ 40.785570][ T5285] binder: BINDER_SET_CONTEXT_MGR already set [ 40.785573][ T5285] binder: 5279:5285 ioctl 4018620d 200001c0 returned -16 [ 40.785598][ T5285] binder: BINDER_SET_CONTEXT_MGR already set [ 40.785601][ T5285] binder: 5279:5285 ioctl 4018620d 200001c0 returned -16 [ 40.785624][ T5285] binder: BINDER_SET_CONTEXT_MGR already set [ 40.785627][ T5285] binder: 5279:5285 ioctl 4018620d 200001c0 returned -16 [ 40.785650][ T5285] binder: BINDER_SET_CONTEXT_MGR already set [ 40.785653][ T5285] binder: 5279:5285 ioctl 4018620d 200001c0 returned -16 [ 40.785686][ T5285] binder: BINDER_SET_CONTEXT_MGR already set [ 40.785689][ T5285] binder: 5279:5285 ioctl 4018620d 200001c0 returned -16 [ 40.785715][ T5285] binder: BINDER_SET_CONTEXT_MGR already set [ 40.785718][ T5285] binder: 5279:5285 ioctl 4018620d 200001c0 returned -16 [ 40.785741][ T5285] binder: BINDER_SET_CONTEXT_MGR already set [ 40.785744][ T5285] binder: 5279:5285 ioctl 4018620d 200001c0 returned -16 [ 40.785767][ T5285] binder: BINDER_SET_CONTEXT_MGR already set [ 40.785770][ T5285] binder: 5279:5285 ioctl 4018620d 200001c0 returned -16 [ 40.785792][ T5285] binder: BINDER_SET_CONTEXT_MGR already set [ 40.785796][ T5285] binder: 5279:5285 ioctl 4018620d 200001c0 returned -16 [ 40.785819][ T5285] binder: BINDER_SET_CONTEXT_MGR already set [ 40.785823][ T5285] binder: 5279:5285 ioctl 4018620d 200001c0 returned -16 [ 40.785845][ T5285] binder: BINDER_SET_CONTEXT_MGR already set [ 40.785848][ T5285] binder: 5279:5285 ioctl 4018620d 200001c0 returned -16 [ 40.785870][ T5285] binder: BINDER_SET_CONTEXT_MGR already set [ 40.785874][ T5285] binder: 5279:5285 ioctl 4018620d 200001c0 returned -16 [ 40.785896][ T5285] binder: BINDER_SET_CONTEXT_MGR already set [ 40.785899][ T5285] binder: 5279:5285 ioctl 4018620d 200001c0 returned -16 [ 40.786057][ T5284] binder: 5279:5284 tried to acquire reference to desc 0, got 1 instead [ 40.786315][ T5284] binder_alloc: 5279: binder_alloc_buf, no vma [ 40.786322][ T5284] binder: cannot allocate buffer: vma cleared, target dead or dying [ 40.786341][ T5284] binder: 5279:5284 transaction call to 5279:0 failed 6/29189/-3, code 0 size 72-24 line 3408 [ 40.847800][ T4895] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 40.848385][ C0] gadgetfs: connected [ 40.865545][ T24] rxe_eth0 speed is unknown, defaulting to 1000 [ 40.877464][ T4799] binder: undelivered TRANSACTION_ERROR: 29189 [ 40.908294][ T4895] gadgetfs: disconnected [ 40.979108][ T30] audit: type=1326 audit(40.960:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5287 comm="syz.2.114" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff80178be8 code=0x0 [ 41.208994][ C0] gadgetfs: connected [ 41.211219][ T4895] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice= 1.00 [ 41.211689][ T4895] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 41.211715][ T4895] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 41.216921][ C0] gadgetfs: configuration #1 [ 41.621971][ T5315] loop0: detected capacity change from 0 to 1024 [ 41.626521][ T5315] EXT4-fs: Ignoring removed nomblk_io_submit option [ 41.626544][ T5315] EXT4-fs: mb_optimize_scan should be set to 0 or 1. [ 41.686988][ T5319] tipc: Started in network mode [ 41.687015][ T5319] tipc: Node identity ac14140e, cluster identity 4711 [ 41.688289][ T5319] tipc: New replicast peer: 255.255.255.255 [ 41.688568][ T5319] tipc: Enabled bearer , priority 10 [ 41.690665][ T5319] loop2: detected capacity change from 0 to 512 [ 41.693460][ T5319] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 41.693469][ T5319] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 41.701427][ T5319] EXT4-fs (loop2): 1 truncate cleaned up [ 41.702698][ T5319] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 41.737459][ T5328] warning: `syz.0.121' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 41.780455][ T30] audit: type=1400 audit(41.760:3): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="*" object="_" requested=w pid=5329 comm="syz.3.122" src=65532 dest=20002 netif=wpan0 [ 41.824685][ T5335] synth uevent: /bus/virtio/drivers/virtio_net: unknown uevent action string [ 41.841487][ T5336] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 41.854906][ T5336] EXT4-fs (loop0): 1 truncate cleaned up [ 41.855371][ T5336] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.866543][ T5339] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 41.870885][ T5336] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2863: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 42.263836][ T4717] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.444091][ T5350] FAULT_INJECTION: forcing a failure. [ 42.444091][ T5350] name failslab, interval 1, probability 0, space 0, times 0 [ 42.444113][ T5350] CPU: 1 UID: 0 PID: 5350 Comm: syz.4.128 Not tainted syzkaller #0 PREEMPT [ 42.444123][ T5350] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 42.444128][ T5350] Call trace: [ 42.444131][ T5350] show_stack+0x2c/0x3c (C) [ 42.444150][ T5350] __dump_stack+0x30/0x40 [ 42.444162][ T5350] dump_stack_lvl+0xd8/0x12c [ 42.444174][ T5350] dump_stack+0x1c/0x28 [ 42.444185][ T5350] should_fail_ex+0x418/0x58c [ 42.444198][ T5350] should_failslab+0xc4/0x120 [ 42.444211][ T5350] kmem_cache_alloc_noprof+0x94/0x5d4 [ 42.444220][ T5350] __kernfs_new_node+0xf0/0x7d8 [ 42.444230][ T5350] kernfs_new_node+0xe8/0x130 [ 42.444240][ T5350] __kernfs_create_file+0x60/0x2e0 [ 42.444251][ T5350] sysfs_add_file_mode_ns+0x1e8/0x2a4 [ 42.444262][ T5350] internal_create_group+0x550/0xb30 [ 42.444274][ T5350] internal_create_groups+0x64/0x138 [ 42.444287][ T5350] sysfs_create_groups+0x2c/0x3c [ 42.444298][ T5350] device_add_attrs+0x17c/0x4e4 [ 42.444309][ T5350] device_add+0x420/0x9e0 [ 42.444318][ T5350] netdev_register_kobject+0x184/0x328 [ 42.444331][ T5350] register_netdevice+0xd74/0x14c0 [ 42.444344][ T5350] ip6gre_tunnel_locate+0x260/0x350 [ 42.444357][ T5350] ip6gre_tunnel_siocdevprivate+0x508/0x6e0 [ 42.444370][ T5350] dev_ifsioc+0x654/0xc34 [ 42.444382][ T5350] dev_ioctl+0x560/0xc88 [ 42.444393][ T5350] sock_ioctl+0x734/0x7ec [ 42.444405][ T5350] __arm64_sys_ioctl+0x154/0x1cc [ 42.444418][ T5350] invoke_syscall+0x98/0x244 [ 42.444430][ T5350] el0_svc_common+0xec/0x23c [ 42.444442][ T5350] do_el0_svc+0x4c/0x5c [ 42.444453][ T5350] el0_svc+0x60/0x1d8 [ 42.444465][ T5350] el0t_64_sync_handler+0x44/0x104 [ 42.444477][ T5350] el0t_64_sync+0x198/0x19c [ 42.657372][ T51] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 42.726250][ T5258] gadgetfs: suspended from state 3 [ 42.729461][ T4895] usb 1-1: USB disconnect, device number 2 [ 42.738653][ T4706] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.738965][ T5258] gadgetfs: disconnected [ 42.810061][ T4860] tipc: Node number set to 2886997006 [ 42.856181][ T4713] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 42.892291][ T5363] EXT4-fs: Ignoring removed oldalloc option [ 42.914118][ T5363] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 42.954497][ T4706] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.290915][ T5386] set_capacity_and_notify: 4 callbacks suppressed [ 43.290929][ T5386] loop0: detected capacity change from 0 to 1024 [ 43.293212][ T5386] EXT4-fs: Ignoring removed nomblk_io_submit option [ 43.293233][ T5386] EXT4-fs: mb_optimize_scan should be set to 0 or 1. [ 43.346671][ T5391] IPv6: Can't replace route, no match found [ 43.393068][ T5397] fuse: Unknown parameter 'group_id00000000000000000000' [ 43.395175][ T5397] gadgetfs: bound to dummy_udc driver [ 43.440326][ T5397] openvswitch: netlink: Flow key attribute not present in set flow. [ 43.442604][ T5397] loop0: detected capacity change from 0 to 128 [ 43.450217][ T5397] EXT4-fs (loop0): Test dummy encryption mode enabled [ 43.454665][ T461] Bluetooth: hci5: Frame reassembly failed (-84) [ 43.455128][ T461] Bluetooth: hci5: Frame reassembly failed (-84) [ 43.455492][ T5397] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 43.594751][ T5413] loop2: detected capacity change from 0 to 8192 [ 43.627505][ T4795] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 43.627972][ C1] gadgetfs: connected [ 43.628471][ T4795] gadgetfs: disconnected [ 43.642857][ T5413] loop2: p2 p3 p4 [ 43.642973][ T5413] loop2: p2 size 64053 extends beyond EOD, truncated [ 43.644771][ T5413] loop2: p3 start 65280 is beyond EOD, truncated [ 43.644786][ T5413] loop2: p4 size 50331904 extends beyond EOD, truncated [ 43.760431][ T5416] __nla_validate_parse: 61 callbacks suppressed [ 43.760447][ T5416] netlink: 200 bytes leftover after parsing attributes in process `syz.3.149'. [ 43.777656][ C1] gadgetfs: connected [ 43.778291][ T4795] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice= 1.00 [ 43.778599][ T4795] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 43.778619][ T4795] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 43.782104][ C1] gadgetfs: configuration #1 [ 44.176286][ T5425] loop1: detected capacity change from 0 to 1024 [ 44.190566][ T5425] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.200624][ T5425] EXT4-fs (loop1): shut down requested (1) [ 44.204764][ T5425] netlink: 12 bytes leftover after parsing attributes in process `syz.1.152'. [ 44.266639][ T4713] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.333404][ T5432] loop1: detected capacity change from 0 to 1024 [ 44.333780][ T5432] EXT4-fs: Ignoring removed nomblk_io_submit option [ 44.333800][ T5432] EXT4-fs: mb_optimize_scan should be set to 0 or 1. [ 44.575717][ T5456] loop2: detected capacity change from 0 to 256 [ 44.718431][ T5471] loop4: detected capacity change from 0 to 4096 [ 44.760594][ T5477] loop1: detected capacity change from 0 to 1024 [ 44.769560][ T5477] EXT4-fs: Ignoring removed nomblk_io_submit option [ 44.769585][ T5477] EXT4-fs: mb_optimize_scan should be set to 0 or 1. [ 44.855513][ T5483] ip_tables: iptables: counters copy to user failed while replacing table [ 44.968579][ T5505] tipc: Started in network mode [ 44.968602][ T5505] tipc: Node identity 7f000001, cluster identity 4711 [ 44.968971][ T5505] tipc: Enabled bearer , priority 10 [ 45.031241][ T5513] fuse: Unknown parameter 'G쏽mŠLM [ 45.031241][ T5513] Y`O - S0x0000000000000004' [ 45.457288][ T51] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 45.480449][ T5397] gadgetfs: suspended from state 3 [ 45.480887][ T4895] usb 1-1: USB disconnect, device number 3 [ 45.483447][ T5397] gadgetfs: disconnected [ 45.493051][ T4706] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 45.549576][ T5525] netlink: 'syz.4.183': attribute type 11 has an invalid length. [ 45.589084][ T5530] FAULT_INJECTION: forcing a failure. [ 45.589084][ T5530] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 45.589109][ T5530] CPU: 1 UID: 0 PID: 5530 Comm: syz.4.185 Not tainted syzkaller #0 PREEMPT [ 45.589120][ T5530] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 45.589125][ T5530] Call trace: [ 45.589128][ T5530] show_stack+0x2c/0x3c (C) [ 45.589150][ T5530] __dump_stack+0x30/0x40 [ 45.589160][ T5530] dump_stack_lvl+0xd8/0x12c [ 45.589170][ T5530] dump_stack+0x1c/0x28 [ 45.589180][ T5530] should_fail_ex+0x418/0x58c [ 45.589191][ T5530] should_fail+0x14/0x24 [ 45.589200][ T5530] should_fail_usercopy+0x20/0x30 [ 45.589211][ T5530] copy_folio_from_iter_atomic+0x384/0x1518 [ 45.589219][ T5530] generic_perform_write+0x4bc/0x7a4 [ 45.589230][ T5530] shmem_file_write_iter+0x10c/0x134 [ 45.589241][ T5530] vfs_write+0x51c/0xa0c [ 45.589254][ T5530] ksys_pwrite64+0x118/0x1ac [ 45.589264][ T5530] __arm64_sys_pwrite64+0xa8/0xc0 [ 45.589275][ T5530] invoke_syscall+0x98/0x244 [ 45.589287][ T5530] el0_svc_common+0xec/0x23c [ 45.589297][ T5530] do_el0_svc+0x4c/0x5c [ 45.589306][ T5530] el0_svc+0x60/0x1d8 [ 45.589317][ T5530] el0t_64_sync_handler+0x44/0x104 [ 45.589326][ T5530] el0t_64_sync+0x198/0x19c [ 45.596403][ T5531] loop4: detected capacity change from 0 to 4096 [ 45.632635][ T5531] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.660936][ T4707] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.696879][ T5542] syzkaller0: entered promiscuous mode [ 45.696895][ T5542] syzkaller0: entered allmulticast mode [ 45.702000][ T5542] tipc: Started in network mode [ 45.702026][ T5542] tipc: Node identity 5eaadbadbae8, cluster identity 4711 [ 45.702602][ T5542] tipc: Enabled bearer , priority 0 [ 45.703295][ T5541] tipc: Resetting bearer [ 45.724692][ T5541] tipc: Disabling bearer [ 45.738985][ T5545] loop2: detected capacity change from 0 to 512 [ 45.743149][ T5545] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 45.763322][ T5545] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.780900][ T5545] EXT4-fs error (device loop2): ext4_validate_block_bitmap:445: comm syz.2.189: bg 0: block 217: padding at end of block bitmap is not set [ 45.795793][ T5558] netlink: 68 bytes leftover after parsing attributes in process `syz.4.191'. [ 45.808050][ T4717] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.868148][ T5558] FAULT_INJECTION: forcing a failure. [ 45.868148][ T5558] name failslab, interval 1, probability 0, space 0, times 0 [ 45.868171][ T5558] CPU: 0 UID: 0 PID: 5558 Comm: syz.4.191 Not tainted syzkaller #0 PREEMPT [ 45.868181][ T5558] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 45.868186][ T5558] Call trace: [ 45.868189][ T5558] show_stack+0x2c/0x3c (C) [ 45.868209][ T5558] __dump_stack+0x30/0x40 [ 45.868220][ T5558] dump_stack_lvl+0xd8/0x12c [ 45.868229][ T5558] dump_stack+0x1c/0x28 [ 45.868239][ T5558] should_fail_ex+0x418/0x58c [ 45.868250][ T5558] should_failslab+0xc4/0x120 [ 45.868261][ T5558] __kmalloc_noprof+0x108/0x6c8 [ 45.868269][ T5558] nft_set_elem_init+0xac/0x528 [ 45.868277][ T5558] nf_tables_newsetelem+0x1ad4/0x31fc [ 45.868285][ T5558] nfnetlink_rcv+0xc8c/0x16ec [ 45.868293][ T5558] netlink_unicast+0x600/0x7f8 [ 45.868302][ T5558] netlink_sendmsg+0x648/0x948 [ 45.868311][ T5558] __sock_sendmsg+0xc8/0x17c [ 45.868319][ T5558] ____sys_sendmsg+0x3d0/0x6c8 [ 45.868328][ T5558] ___sys_sendmsg+0x198/0x224 [ 45.868337][ T5558] __sys_sendmsg+0x158/0x204 [ 45.868346][ T5558] __arm64_sys_sendmsg+0x88/0x9c [ 45.868355][ T5558] invoke_syscall+0x98/0x244 [ 45.868365][ T5558] el0_svc_common+0xec/0x23c [ 45.868374][ T5558] do_el0_svc+0x4c/0x5c [ 45.868384][ T5558] el0_svc+0x60/0x1d8 [ 45.868394][ T5558] el0t_64_sync_handler+0x44/0x104 [ 45.868404][ T5558] el0t_64_sync+0x198/0x19c [ 45.892379][ T5568] fuse: Unknown parameter 'group_id00000000000000000000' [ 45.906555][ T5568] gadgetfs: bound to dummy_udc driver [ 45.929733][ T5469] Bluetooth: hci5: Frame reassembly failed (-84) [ 45.936806][ T5568] openvswitch: netlink: Flow key attribute not present in set flow. [ 45.948128][ T5568] EXT4-fs (loop2): Test dummy encryption mode enabled [ 45.965160][ T5568] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 46.017362][ T5577] syz.4.197 uses obsolete (PF_INET,SOCK_PACKET) [ 46.066841][ T5573] mmap: syz.1.196 (5573) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 46.147447][ T4895] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 46.147634][ C0] gadgetfs: connected [ 46.148060][ T4895] gadgetfs: disconnected [ 46.225792][ T5595] fuse: Bad value for 'fd' [ 46.269712][ T5598] netlink: 12 bytes leftover after parsing attributes in process `syz.1.201'. [ 46.298809][ C0] gadgetfs: connected [ 46.299453][ T4895] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice= 1.00 [ 46.299660][ T4895] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 46.299675][ T4895] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 46.335888][ C0] gadgetfs: configuration #1 [ 46.604698][ T4795] tipc: Node number set to 2130706433 [ 46.799082][ T5623] ======================================================= [ 46.799082][ T5623] WARNING: The mand mount option has been deprecated and [ 46.799082][ T5623] and is ignored by this kernel. Remove the mand [ 46.799082][ T5623] option from the mount to silence this warning. [ 46.799082][ T5623] ======================================================= [ 46.799128][ T5623] EXT4-fs: Ignoring removed mblk_io_submit option [ 46.799139][ T5623] EXT4-fs: Ignoring removed oldalloc option [ 46.812318][ T5623] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 46.830104][ T5623] EXT4-fs error (device loop0): ext4_validate_block_bitmap:445: comm syz.0.208: bg 0: block 112: padding at end of block bitmap is not set [ 46.833973][ T5623] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 52 with error 28 [ 46.833994][ T5623] EXT4-fs (loop0): This should not happen!! Data will be lost [ 46.833994][ T5623] [ 46.834002][ T5623] EXT4-fs (loop0): Total free blocks count 0 [ 46.834014][ T5623] EXT4-fs (loop0): Free/Dirty block details [ 46.834045][ T5623] EXT4-fs (loop0): free_blocks=0 [ 46.834061][ T5623] EXT4-fs (loop0): dirty_blocks=64 [ 46.834068][ T5623] EXT4-fs (loop0): Block reservation details [ 46.834074][ T5623] EXT4-fs (loop0): i_reserved_data_blocks=4 [ 46.836874][ T5623] fuse: Unknown parameter 'defau' [ 46.860378][ T4706] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 47.112472][ T5628] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 47.182338][ T4706] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.213237][ T5638] fuse: Bad value for 'fd' [ 47.259672][ T5643] netlink: 'syz.3.214': attribute type 10 has an invalid length. [ 47.260699][ T5649] netlink: 9 bytes leftover after parsing attributes in process `syz.3.214'. [ 47.262637][ T5643] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 47.269188][ T5647] FAULT_INJECTION: forcing a failure. [ 47.269188][ T5647] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 47.269206][ T5647] CPU: 1 UID: 0 PID: 5647 Comm: syz.1.215 Not tainted syzkaller #0 PREEMPT [ 47.269216][ T5647] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 47.269221][ T5647] Call trace: [ 47.269224][ T5647] show_stack+0x2c/0x3c (C) [ 47.269244][ T5647] __dump_stack+0x30/0x40 [ 47.269256][ T5647] dump_stack_lvl+0xd8/0x12c [ 47.269271][ T5647] dump_stack+0x1c/0x28 [ 47.269282][ T5647] should_fail_ex+0x418/0x58c [ 47.269296][ T5647] should_fail+0x14/0x24 [ 47.269307][ T5647] should_fail_usercopy+0x20/0x30 [ 47.269320][ T5647] _inline_copy_from_user+0x3c/0x174 [ 47.269331][ T5647] generic_map_update_batch+0x6bc/0x9a4 [ 47.269339][ T5647] bpf_map_do_batch+0x2f0/0x4d0 [ 47.269349][ T5647] __sys_bpf+0x7b4/0x82c [ 47.269358][ T5647] __arm64_sys_bpf+0xd0/0xec [ 47.269367][ T5647] invoke_syscall+0x98/0x244 [ 47.269380][ T5647] el0_svc_common+0xec/0x23c [ 47.269391][ T5647] do_el0_svc+0x4c/0x5c [ 47.269403][ T5647] el0_svc+0x60/0x1d8 [ 47.269416][ T5647] el0t_64_sync_handler+0x44/0x104 [ 47.269428][ T5647] el0t_64_sync+0x198/0x19c [ 47.279283][ T5649] netlink: 9 bytes leftover after parsing attributes in process `syz.3.214'. [ 47.295665][ T5647] Quota error (device loop1): find_tree_dqentry: Cycle in quota tree detected: block 4 index 0 [ 47.295735][ T5647] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 0 [ 47.295744][ T5647] EXT4-fs error (device loop1): ext4_acquire_dquot:7069: comm syz.1.215: Failed to acquire dquot type 0 [ 47.295756][ T5647] loop1: lost filesystem error report for type 5 error -5 [ 47.298500][ T5647] EXT4-fs (loop1): 1 truncate cleaned up [ 47.298976][ T5647] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.318680][ T4713] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.345702][ T5656] EXT4-fs error (device loop1): ext4_iget_extra_inode:5210: inode #15: comm syz.1.216: corrupted in-inode xattr: e_name out of bounds [ 47.345722][ T5656] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 47.345911][ T5656] EXT4-fs error (device loop1): ext4_orphan_get:1408: comm syz.1.216: couldn't read orphan inode 15 (err -117) [ 47.345927][ T5656] loop1: lost filesystem error report for type 5 error -117 [ 47.346612][ T5656] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 47.370072][ T5656] EXT4-fs error (device loop1): ext4_map_blocks:790: inode #2: block 3: comm syz.1.216: lblock 0 mapped to illegal pblock 3 (length 1) [ 47.370736][ T5656] EXT4-fs warning (device loop1): dx_probe:791: inode #2: lblock 0: comm syz.1.216: error -EUCLEAN reading directory block [ 47.937439][ T4711] Bluetooth: hci5: command 0x1003 tx timeout [ 47.937559][ T51] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 47.961768][ T5568] gadgetfs: suspended from state 3 [ 47.962051][ T9] usb 1-1: USB disconnect, device number 4 [ 47.962195][ T5568] gadgetfs: disconnected [ 47.969086][ T4717] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 47.996701][ T5665] EXT4-fs: Ignoring removed nomblk_io_submit option [ 47.996731][ T5665] EXT4-fs: mb_optimize_scan should be set to 0 or 1. [ 47.999829][ T5665] netlink: 8 bytes leftover after parsing attributes in process `syz.2.218'. [ 48.125844][ T5673] EXT4-fs (loop0): Test dummy encryption mode enabled [ 48.125866][ T5673] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 48.193648][ T5677] netlink: 8 bytes leftover after parsing attributes in process `syz.0.221'. [ 48.193666][ T5677] netlink: 12 bytes leftover after parsing attributes in process `syz.0.221'. [ 48.213205][ T4713] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.227457][ T14] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 48.227492][ T14] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 48.227508][ T14] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 48.227523][ T14] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 48.262296][ T5683] netlink: 24 bytes leftover after parsing attributes in process `syz.3.223'. [ 48.363104][ T5687] Bluetooth: ISO socket layer initialized [ 48.577906][ T5703] set_capacity_and_notify: 9 callbacks suppressed [ 48.577924][ T5703] loop2: detected capacity change from 0 to 1024 [ 48.578329][ T5703] EXT4-fs: Ignoring removed nomblk_io_submit option [ 48.578348][ T5703] EXT4-fs: mb_optimize_scan should be set to 0 or 1. [ 48.596035][ T5709] bond0: (slave netdevsim0): Error: Device can not be enslaved while up [ 48.696573][ T5717] loop4: detected capacity change from 0 to 2048 [ 48.741432][ T5717] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 48.784245][ T5720] Injecting memory failure for pfn 0x13de00 at process virtual address 0x20000000 [ 48.803378][ T4707] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.849651][ T5720] Memory failure: 0x13de00: recovery action for dirty LRU page: Recovered [ 48.882265][ T5735] loop4: detected capacity change from 0 to 2048 [ 48.884492][ T5735] EXT4-fs: Ignoring removed nomblk_io_submit option [ 48.905803][ T5735] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.919381][ T5746] EXT4-fs (loop4): shut down requested (2) [ 48.936941][ T5737] 8021q: adding VLAN 0 to HW filter on device bond1 [ 48.937585][ T4707] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.947055][ T5737] bond1: (slave geneve2): making interface the new active one [ 48.951337][ T5737] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 49.080470][ T5755] __nla_validate_parse: 1 callbacks suppressed [ 49.080486][ T5755] netlink: 20 bytes leftover after parsing attributes in process `syz.3.241'. [ 49.096614][ T5757] loop0: detected capacity change from 0 to 1024 [ 49.102321][ T5755] netlink: 4 bytes leftover after parsing attributes in process `syz.3.241'. [ 49.102341][ T5755] openvswitch: netlink: nsh attribute has 220 unknown bytes. [ 49.115786][ T5757] EXT4-fs: Ignoring removed nomblk_io_submit option [ 49.115818][ T5757] EXT4-fs: mb_optimize_scan should be set to 0 or 1. [ 49.127098][ T5761] loop4: detected capacity change from 0 to 1024 [ 49.129807][ T5762] loop1: detected capacity change from 0 to 512 [ 49.133152][ T5762] EXT4-fs: Ignoring removed oldalloc option [ 49.133976][ T5762] EXT4-fs (loop1): can't mount with journal_checksum, fs mounted w/o journal [ 49.135661][ T5761] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (38034!=20869) [ 49.137190][ T5761] JBD2: no valid journal superblock found [ 49.144893][ T5761] EXT4-fs (loop4): Could not load journal inode [ 49.236360][ T5769] loop1: detected capacity change from 0 to 512 [ 49.237946][ T5769] EXT4-fs: Ignoring removed oldalloc option [ 49.329213][ T5769] EXT4-fs (loop1): can't mount with journal_checksum, fs mounted w/o journal [ 49.842158][ T5792] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 49.842192][ T5792] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 50.162726][ T5799] loop4: detected capacity change from 0 to 1024 [ 50.164622][ T5799] EXT4-fs: Ignoring removed nomblk_io_submit option [ 50.164644][ T5799] EXT4-fs: mb_optimize_scan should be set to 0 or 1. [ 50.315031][ T5811] overlayfs: failed to clone upperpath [ 50.489105][ T5824] random: crng reseeded on system resumption [ 50.553962][ T5833] nfs4: Bad value for 'source' [ 50.566740][ T5834] 0x000000000003-0x000000010001 : "" [ 50.572429][ T5834] ftl_cs: FTL header corrupt! [ 50.578344][ T5834] FAULT_INJECTION: forcing a failure. [ 50.578344][ T5834] name failslab, interval 1, probability 0, space 0, times 0 [ 50.578362][ T5834] CPU: 0 UID: 0 PID: 5834 Comm: syz.2.268 Not tainted syzkaller #0 PREEMPT [ 50.578374][ T5834] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 50.578380][ T5834] Call trace: [ 50.578383][ T5834] show_stack+0x2c/0x3c (C) [ 50.578402][ T5834] __dump_stack+0x30/0x40 [ 50.578413][ T5834] dump_stack_lvl+0xd8/0x12c [ 50.578423][ T5834] dump_stack+0x1c/0x28 [ 50.578432][ T5834] should_fail_ex+0x418/0x58c [ 50.578443][ T5834] should_failslab+0xc4/0x120 [ 50.578454][ T5834] kmem_cache_alloc_lru_noprof+0x98/0x5d8 [ 50.578462][ T5834] __d_alloc+0x50/0x600 [ 50.578470][ T5834] d_alloc+0x54/0x17c [ 50.578477][ T5834] lookup_one_qstr_excl+0x9c/0x200 [ 50.578487][ T5834] __start_dirop+0xb8/0xf4 [ 50.578494][ T5834] start_dirop+0x38/0x4c [ 50.578501][ T5834] simple_start_creating+0xcc/0x114 [ 50.578511][ T5834] debugfs_start_creating+0xd8/0x1bc [ 50.578522][ T5834] __debugfs_create_file+0x7c/0x36c [ 50.578532][ T5834] debugfs_create_file_full+0x58/0x70 [ 50.578542][ T5834] debugfs_create_files+0x1a4/0x2a4 [ 50.578551][ T5834] blk_mq_debugfs_register+0x5c/0x154 [ 50.578559][ T5834] blk_register_queue+0x194/0x3d4 [ 50.578567][ T5834] __add_disk+0x5c8/0xbdc [ 50.578576][ T5834] add_disk_fwnode+0xd4/0x340 [ 50.578586][ T5834] device_add_disk+0x38/0x4c [ 50.578595][ T5834] add_mtd_blktrans_dev+0xb28/0x107c [ 50.578607][ T5834] mtdblock_add_mtd+0x158/0x218 [ 50.578614][ T5834] blktrans_notify_add+0xa8/0xf8 [ 50.578621][ T5834] add_mtd_device+0xedc/0x1504 [ 50.578629][ T5834] mtd_add_partition+0x318/0x438 [ 50.578638][ T5834] mtdchar_blkpg_ioctl+0x224/0x248 [ 50.578648][ T5834] mtdchar_ioctl+0x1218/0x1a7c [ 50.578658][ T5834] mtdchar_unlocked_ioctl+0xb0/0xd8 [ 50.578668][ T5834] __arm64_sys_ioctl+0x154/0x1cc [ 50.578678][ T5834] invoke_syscall+0x98/0x244 [ 50.578688][ T5834] el0_svc_common+0xec/0x23c [ 50.578698][ T5834] do_el0_svc+0x4c/0x5c [ 50.578707][ T5834] el0_svc+0x60/0x1d8 [ 50.578717][ T5834] el0t_64_sync_handler+0x44/0x104 [ 50.578727][ T5834] el0t_64_sync+0x198/0x19c [ 50.606223][ T5834] 0x000000000003-0x000000010001 : "" [ 50.609667][ T5834] ftl_cs: FTL header corrupt! [ 50.671903][ T5832] netlink: 9 bytes leftover after parsing attributes in process `syz.2.268'. [ 50.687128][ T5842] loop1: detected capacity change from 0 to 1024 [ 50.695379][ T5842] EXT4-fs: Ignoring removed nomblk_io_submit option [ 50.695405][ T5842] EXT4-fs: mb_optimize_scan should be set to 0 or 1. [ 50.697872][ T5834] 0x000000000003-0x000000010001 : "" [ 50.700398][ T5834] ftl_cs: FTL header corrupt! [ 50.704887][ T5842] netlink: 8 bytes leftover after parsing attributes in process `syz.1.270'. [ 50.721333][ T5834] 0x000000000003-0x000000010001 : "" [ 50.724134][ T5834] ftl_cs: FTL header corrupt! [ 50.763893][ T5834] 0x000000000003-0x000000010001 : "" [ 50.766281][ T5834] ftl_cs: FTL header corrupt! [ 50.775447][ T5834] 0x000000000003-0x000000010001 : "" [ 50.787051][ T5834] ftl_cs: FTL header corrupt! [ 50.828253][ T5834] 0x000000000003-0x000000010001 : "" [ 50.833741][ T5834] ftl_cs: FTL header corrupt! [ 50.855998][ T5834] 0x000000000003-0x000000010001 : "" [ 50.871554][ T5834] ftl_cs: FTL header corrupt! [ 50.897371][ T5834] 0x000000000003-0x000000010001 : "" [ 50.901564][ T5834] ftl_cs: FTL header corrupt! [ 50.923087][ T5834] 0x000000000003-0x000000010001 : "" [ 50.927972][ T5834] ftl_cs: FTL header corrupt! [ 50.958310][ T5834] 0x000000000003-0x000000010001 : "" [ 50.975046][ T5834] ftl_cs: FTL header corrupt! [ 50.992089][ T5834] 0x000000000003-0x000000010001 : "" [ 50.995526][ T5834] ftl_cs: FTL header corrupt! [ 51.014978][ T5834] 0x000000000003-0x000000010001 : "" [ 51.020235][ T5834] ftl_cs: FTL header corrupt! [ 51.033640][ T5834] 0x000000000003-0x000000010001 : "" [ 51.037742][ T5834] ftl_cs: FTL header corrupt! [ 51.053293][ T5834] 0x000000000003-0x000000010001 : "" [ 51.056592][ T5834] ftl_cs: FTL header corrupt! [ 51.070166][ T5834] 0x000000000003-0x000000010001 : "" [ 51.092304][ T5834] ftl_cs: FTL header corrupt! [ 51.108257][ T5874] loop0: detected capacity change from 0 to 512 [ 51.133737][ T5882] random: crng reseeded on system resumption [ 51.162105][ T5834] 0x000000000003-0x000000010001 : "" [ 51.165575][ T5834] ftl_cs: FTL header corrupt! [ 51.210093][ T5881] netlink: 4 bytes leftover after parsing attributes in process `syz.1.277'. [ 51.230467][ T5834] 0x000000000003-0x000000010001 : "" [ 51.270140][ T5834] ftl_cs: FTL header corrupt! [ 51.285565][ T5834] 0x000000000003-0x000000010001 : "" [ 51.301071][ T5834] ftl_cs: FTL header corrupt! [ 51.362916][ T5834] 0x000000000003-0x000000010001 : "" [ 51.403443][ T5834] ftl_cs: FTL header corrupt! [ 51.425196][ T5892] netlink: 144 bytes leftover after parsing attributes in process `syz.3.278'. [ 51.596530][ T5899] fuse: Bad value for 'fd' [ 51.606234][ T5899] overlay: Unknown parameter '\' [ 51.614839][ T5899] fuse: Bad value for 'fd' [ 51.616133][ T5902] overlay: Unknown parameter '\' [ 51.774820][ T5910] EXT4-fs: Ignoring removed nomblk_io_submit option [ 51.774856][ T5910] EXT4-fs: mb_optimize_scan should be set to 0 or 1. [ 51.813900][ T5910] netlink: 8 bytes leftover after parsing attributes in process `syz.2.281'. [ 52.053190][ T5930] openvswitch: netlink: IP tunnel dst address not specified [ 52.074774][ T5934] netlink: 36 bytes leftover after parsing attributes in process `syz.4.294'. [ 52.074796][ T5934] netlink: 'syz.4.294': attribute type 1 has an invalid length. [ 52.074805][ T5934] netlink: 56 bytes leftover after parsing attributes in process `syz.4.294'. [ 52.075184][ T5934] netlink: 8 bytes leftover after parsing attributes in process `syz.4.294'. [ 52.085807][ T5935] netlink: 'syz.0.290': attribute type 15 has an invalid length. [ 52.120449][ T5940] EXT4-fs: Ignoring removed nomblk_io_submit option [ 52.120475][ T5940] EXT4-fs: mb_optimize_scan should be set to 0 or 1. [ 52.136390][ T5944] cgroup: No subsys list or none specified [ 52.270751][ T5963] vivid-000: disconnect [ 52.631848][ T5992] netlink: 'syz.3.311': attribute type 22 has an invalid length. [ 52.631873][ T5992] bond0: option ad_select: unable to set because the bond device is up [ 52.793853][ T6010] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 52.793873][ T6010] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 52.805824][ T6008] bridge1: port 1(veth0_to_bond) entered blocking state [ 52.805862][ T6008] bridge1: port 1(veth0_to_bond) entered disabled state [ 52.805952][ T6008] veth0_to_bond: entered allmulticast mode [ 52.806645][ T6008] veth0_to_bond: entered promiscuous mode [ 52.853279][ T5925] vivid-000: reconnect [ 52.909676][ T51] Bluetooth: Frame is too long (len 40, expected len 4) [ 52.913052][ T6016] ieee802154 phy0 wpan0: encryption failed: -22 [ 52.916715][ T6016] ima: Unable to open file: /e (-2) [ 52.916915][ T6016] ima: policy update failed [ 52.917363][ T30] audit: type=1802 audit(52.890:4): pid=6016 uid=0 auid=4294967295 ses=4294967295 subj=_ op=policy_update cause=failed comm="syz.2.320" res=0 errno=0 [ 52.939880][ T6016] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 52.962720][ T6022] netlink: 'syz.0.323': attribute type 22 has an invalid length. [ 52.962744][ T6022] bond0: option ad_select: unable to set because the bond device is up [ 53.145142][ T6046] FAULT_INJECTION: forcing a failure. [ 53.145142][ T6046] name fail_futex, interval 1, probability 0, space 0, times 0 [ 53.145162][ T6046] CPU: 1 UID: 0 PID: 6046 Comm: syz.4.330 Not tainted syzkaller #0 PREEMPT [ 53.145172][ T6046] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 53.145176][ T6046] Call trace: [ 53.145179][ T6046] show_stack+0x2c/0x3c (C) [ 53.145198][ T6046] __dump_stack+0x30/0x40 [ 53.145209][ T6046] dump_stack_lvl+0xd8/0x12c [ 53.145219][ T6046] dump_stack+0x1c/0x28 [ 53.145228][ T6046] should_fail_ex+0x418/0x58c [ 53.145240][ T6046] should_fail+0x14/0x24 [ 53.145249][ T6046] get_futex_key+0x1ec/0x12b0 [ 53.145259][ T6046] futex_wait_setup+0x58/0x674 [ 53.145268][ T6046] __futex_wait+0x108/0x25c [ 53.145277][ T6046] futex_wait+0x108/0x2c0 [ 53.145286][ T6046] do_futex+0x320/0x378 [ 53.145294][ T6046] __arm64_sys_futex+0x2e4/0x418 [ 53.145303][ T6046] invoke_syscall+0x98/0x244 [ 53.145313][ T6046] el0_svc_common+0xec/0x23c [ 53.145323][ T6046] do_el0_svc+0x4c/0x5c [ 53.145332][ T6046] el0_svc+0x60/0x1d8 [ 53.145343][ T6046] el0t_64_sync_handler+0x44/0x104 [ 53.145352][ T6046] el0t_64_sync+0x198/0x19c [ 53.146567][ T6046] tmpfs: Bad value for 'mpol' [ 53.297615][ T6060] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 53.318159][ T6060] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 53.318457][ T6060] ext2 filesystem being mounted at /75/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 53.363332][ T51] Bluetooth: Frame is too long (len 18, expected len 4) [ 53.363622][ T6074] Injecting memory failure for pfn 0x11f598 at process virtual address 0x20000000 [ 53.369582][ T6074] Memory failure: 0x11f598: Sending SIGBUS to syz.3.339:6074 due to hardware memory corruption [ 53.369778][ T6074] Memory failure: 0x11f598: recovery action for dirty LRU page: Recovered [ 53.369793][ T6074] Injecting memory failure for pfn 0x13556d at process virtual address 0x20001000 [ 53.369849][ T6074] Memory failure: 0x13556d: Sending SIGBUS to syz.3.339:6074 due to hardware memory corruption [ 53.369869][ T6074] Memory failure: 0x13556d: recovery action for dirty LRU page: Recovered [ 53.369892][ T6074] Injecting memory failure for pfn 0x216be0 at process virtual address 0x20002000 [ 53.369902][ T6074] Memory failure: 0x216be0: unhandlable page. [ 53.369908][ T6074] Memory failure: 0x216be0: recovery action for reserved kernel page: Ignored [ 53.873661][ T6083] netlink: 'syz.1.342': attribute type 1 has an invalid length. [ 53.878337][ T6083] 8021q: adding VLAN 0 to HW filter on device bond1 [ 53.899682][ T6086] ip_tables: iptables: counters copy to user failed while replacing table [ 54.041213][ T4707] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 54.058944][ T6107] set_capacity_and_notify: 3 callbacks suppressed [ 54.058956][ T6107] loop2: detected capacity change from 0 to 8 [ 54.069253][ T6107] squashfs: SQUASHFS error: Xattrs in filesystem, these will be ignored [ 54.069267][ T6107] unable to read xattr id index table [ 54.069980][ T6107] SQUASHFS error: zlib decompression failed, data probably corrupt [ 54.069995][ T6107] SQUASHFS error: Failed to read block 0x9b: -5 [ 54.070002][ T6107] SQUASHFS error: Unable to read metadata cache entry [99] [ 54.070018][ T6107] SQUASHFS error: Unable to read inode 0x127 [ 54.140800][ T6117] loop4: detected capacity change from 0 to 8192 [ 54.145291][ T6117] vfat filesystem being mounted at /78/file2 supports timestamps until 2107-12-31 (0x10391447e) [ 54.247020][ T6119] netlink: 'syz.4.356': attribute type 2 has an invalid length. [ 54.247036][ T6119] __nla_validate_parse: 12 callbacks suppressed [ 54.247043][ T6119] netlink: 424 bytes leftover after parsing attributes in process `syz.4.356'. [ 54.277388][ T6121] loop4: detected capacity change from 0 to 512 [ 54.384644][ T6130] netlink: 12 bytes leftover after parsing attributes in process `syz.0.360'. [ 54.671126][ T6142] netlink: 'syz.0.364': attribute type 29 has an invalid length. [ 54.671652][ T6142] netlink: 'syz.0.364': attribute type 29 has an invalid length. [ 55.060448][ T6169] overlayfs: failed to resolve './file0': -2 [ 55.159272][ T6182] loop1: detected capacity change from 0 to 4096 [ 55.183415][ T6182] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 55.240687][ T4713] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.125943][ T6245] 9p: Bad value for 'rfdno' [ 56.140846][ T6247] netlink: 'syz.0.389': attribute type 32 has an invalid length. [ 56.140863][ T6247] netlink: 8 bytes leftover after parsing attributes in process `syz.0.389'. [ 56.146593][ T6247] bond1: Setting coupled_control to off (0) [ 56.491768][ T6265] netlink: 43 bytes leftover after parsing attributes in process `syz.3.393'. [ 56.491784][ T6265] netlink: 28 bytes leftover after parsing attributes in process `syz.3.393'. [ 56.503639][ T6268] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.603891][ T6268] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.739564][ T6268] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.876690][ T6268] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.882484][ T6281] netlink: 'syz.1.397': attribute type 10 has an invalid length. [ 56.884789][ T6281] geneve1: entered promiscuous mode [ 56.891652][ T6281] bond0: (slave geneve1): Enslaving as an active interface with an up link [ 56.974221][ T6285] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 56.976035][ T6285] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 56.982328][ T6285] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 56.983592][ T6285] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 56.985264][ T6285] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 56.986683][ T6285] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 57.073948][ T6294] loop4: detected capacity change from 0 to 512 [ 57.091700][ T6294] EXT4-fs error (device loop4): ext4_orphan_get:1403: inode #15: comm syz.4.401: inode has both inline data and extents flags [ 57.091728][ T6294] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 57.091892][ T6294] EXT4-fs error (device loop4): ext4_orphan_get:1408: comm syz.4.401: couldn't read orphan inode 15 (err -117) [ 57.091911][ T6294] loop4: lost filesystem error report for type 5 error -117 [ 57.094353][ T6294] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 57.171437][ T6298] kernel read not supported for file /!selingxwk1m9ɞ*T#jYmVvm(p-QZ#{ (pid: 6298 comm: syz.2.402) [ 57.197018][ T4707] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.246652][ T6309] netlink: 'syz.2.404': attribute type 39 has an invalid length. [ 57.246865][ T6309] hsr_slave_0: left promiscuous mode [ 57.249268][ T6309] hsr_slave_1: left promiscuous mode [ 57.311743][ T6308] netlink: 'syz.3.407': attribute type 1 has an invalid length. [ 57.316037][ T6308] bond2: option mode: invalid value (7) [ 57.317123][ T6308] bond2 (unregistering): Released all slaves [ 57.570130][ T6317] loop2: detected capacity change from 0 to 512 [ 57.585993][ T6317] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 57.601308][ T4717] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.621865][ T6320] openvswitch: netlink: Key 4 has unexpected len 4 expected 12 [ 57.622364][ T6320] netlink: 28 bytes leftover after parsing attributes in process `syz.3.409'. [ 57.649071][ T6323] can0: slcan on ptm0. [ 57.711336][ T6322] can0 (unregistered): slcan off ptm0. [ 57.823208][ T6353] batadv0: mtu less than device minimum [ 57.875915][ T6365] trusted_key: encrypted_key: insufficient parameters specified [ 57.947197][ T6373] netlink: 8 bytes leftover after parsing attributes in process `syz.2.420'. [ 58.133415][ T6387] ptrace attach of "ci-upstream-gce-arm64/syz-executor exec"[4708] was attempted by "ci-upstream-gce-arm64/syz-executor exec"[6387] [ 58.415302][ T6403] ecryptfs_validate_options: eCryptfs doesn't support cipher: aes [ 58.415329][ T6403] Error validating options; rc = [-22] [ 59.190837][ T6409] netlink: 60 bytes leftover after parsing attributes in process `syz.4.428'. [ 59.292495][ T6416] netlink: 'syz.0.430': attribute type 1 has an invalid length. [ 59.300157][ T6418] 9p: Bad value for 'rfdno' [ 59.302131][ T6418] netlink: 4 bytes leftover after parsing attributes in process `syz.2.432'. [ 59.374460][ T6424] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.765681][ T6444] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 59.765709][ T6444] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.870191][ T6457] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 59.870362][ T6457] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 59.899547][ T6444] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 59.900281][ T6444] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.995819][ T6444] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 59.995904][ T6444] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.055085][ T6481] syz.1.446: vmalloc error: size 2199023255701, exceeds total pages, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=/,mems_allowed=0 [ 60.055159][ T6481] CPU: 1 UID: 0 PID: 6481 Comm: syz.1.446 Not tainted syzkaller #0 PREEMPT [ 60.055171][ T6481] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 60.055176][ T6481] Call trace: [ 60.055179][ T6481] show_stack+0x2c/0x3c (C) [ 60.055199][ T6481] __dump_stack+0x30/0x40 [ 60.055214][ T6481] dump_stack_lvl+0xd8/0x12c [ 60.055226][ T6481] dump_stack+0x1c/0x28 [ 60.055237][ T6481] warn_alloc+0x1c4/0x1d8 [ 60.055247][ T6481] __vmalloc_node_range_noprof+0x110/0xe9c [ 60.055258][ T6481] __vmalloc_node_noprof+0xec/0x14c [ 60.055268][ T6481] vmalloc_noprof+0x3c/0x4c [ 60.055278][ T6481] dvb_dvr_do_ioctl+0x120/0x1f8 [ 60.055291][ T6481] dvb_usercopy+0x2a4/0x4d4 [ 60.055302][ T6481] dvb_dvr_ioctl+0x3c/0x54 [ 60.055313][ T6481] __arm64_sys_ioctl+0x154/0x1cc [ 60.055327][ T6481] invoke_syscall+0x98/0x244 [ 60.055340][ T6481] el0_svc_common+0xec/0x23c [ 60.055352][ T6481] do_el0_svc+0x4c/0x5c [ 60.055363][ T6481] el0_svc+0x60/0x1d8 [ 60.055375][ T6481] el0t_64_sync_handler+0x44/0x104 [ 60.055387][ T6481] el0t_64_sync+0x198/0x19c [ 60.055398][ T6481] Mem-Info: [ 60.055402][ T6481] active_anon:25 inactive_anon:11583 isolated_anon:0 [ 60.055402][ T6481] active_file:2519 inactive_file:14350 isolated_file:0 [ 60.055402][ T6481] unevictable:768 dirty:307 writeback:0 [ 60.055402][ T6481] slab_reclaimable:11411 slab_unreclaimable:90319 [ 60.055402][ T6481] mapped:36009 shmem:6668 pagetables:1304 [ 60.055402][ T6481] sec_pagetables:0 bounce:0 [ 60.055402][ T6481] kernel_misc_reclaimable:0 [ 60.055402][ T6481] free:1451368 free_pcp:23922 free_cma:7616 [ 60.055424][ T6481] Node 0 active_anon:100kB inactive_anon:46332kB active_file:10076kB inactive_file:57400kB unevictable:3072kB isolated(anon):0kB isolated(file):0kB mapped:144036kB dirty:1228kB writeback:0kB shmem:26672kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:9708kB pagetables:5216kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 60.055446][ T6481] Node 0 DMA free:3077888kB boost:0kB min:20400kB low:25500kB high:30600kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3145728kB managed:3080192kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:30464kB [ 60.055470][ T6481] lowmem_reserve[]: 0 0 3637 3637 3637 [ 60.055488][ T6481] Node 0 Normal free:2727584kB boost:0kB min:24652kB low:30812kB high:36972kB reserved_highatomic:0kB free_highatomic:0kB active_anon:100kB inactive_anon:46332kB active_file:10076kB inactive_file:57400kB unevictable:3072kB writepending:1228kB zspages:0kB present:5242880kB managed:3724820kB mlocked:0kB bounce:0kB free_pcp:95688kB local_pcp:8368kB free_cma:0kB [ 60.055512][ T6481] lowmem_reserve[]: 0 0 0 0 0 [ 60.055530][ T6481] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 1*256kB (C) 1*512kB (C) 1*1024kB (C) 0*2048kB 751*4096kB (MC) = 3077888kB [ 60.055592][ T6481] Node 0 Normal: 212*4kB (UE) 786*8kB (UME) 742*16kB (UME) 549*32kB (UME) 117*64kB (UME) 23*128kB (UME) 15*256kB (UME) 12*512kB (UM) 8*1024kB (UM) 8*2048kB (UME) 646*4096kB (UM) = 2727584kB [ 60.055672][ T6481] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 60.055680][ T6481] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=32768kB [ 60.055686][ T6481] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 60.055693][ T6481] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=64kB [ 60.055699][ T6481] 23523 total pagecache pages [ 60.055703][ T6481] 0 pages in swap cache [ 60.055707][ T6481] Free swap = 124996kB [ 60.055710][ T6481] Total swap = 124996kB [ 60.055714][ T6481] 2097152 pages RAM [ 60.055717][ T6481] 0 pages HighMem/MovableOnly [ 60.055721][ T6481] 395899 pages reserved [ 60.055724][ T6481] 8192 pages cma reserved [ 60.055727][ T6481] 4 pages hwpoisoned [ 60.064963][ T30] audit: type=1326 audit(7381979774.301:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6480 comm="syz.1.446" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff98b78be8 code=0x0 [ 60.119402][ T6444] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 60.119428][ T6444] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.277454][ T2768] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 60.277484][ T2768] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.277503][ T2768] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 60.277513][ T2768] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.277527][ T2768] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 60.277536][ T2768] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.277550][ T2768] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 60.277559][ T2768] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.321620][ T6492] netlink: 8 bytes leftover after parsing attributes in process `syz.0.450'. [ 60.321646][ T6492] netlink: 'syz.0.450': attribute type 5 has an invalid length. [ 60.321655][ T6492] netlink: 16 bytes leftover after parsing attributes in process `syz.0.450'. [ 60.338499][ T6494] bond1: entered promiscuous mode [ 60.338648][ T6494] 8021q: adding VLAN 0 to HW filter on device bond1 [ 60.351671][ T6497] overlayfs: failed to clone upperpath [ 60.523130][ T6516] loop2: detected capacity change from 0 to 2048 [ 60.570116][ T6526] xt_l2tp: v2 tid > 0xffff: 37482740 [ 60.581991][ T6524] netlink: 112 bytes leftover after parsing attributes in process `syz.0.463'. [ 60.671660][ T6537] netlink: 27 bytes leftover after parsing attributes in process `syz.0.467'. [ 60.675285][ T6538] 9pnet_virtio: no channels available for device ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 60.676718][ T6539] loop2: detected capacity change from 0 to 128 [ 60.713512][ T6539] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 60.713768][ T6539] ext4 filesystem being mounted at /90/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 60.943142][ T6538] @0: renamed from bond_slave_1 (while UP) [ 61.012668][ T4717] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 61.075449][ T6551] No such timeout policy "syz1" [ 61.136470][ T6568] netlink: 4 bytes leftover after parsing attributes in process `syz.2.478'. [ 61.199877][ T6576] ip_tables: iptables: counters copy to user failed while replacing table [ 61.304998][ T6585] fuse: Bad value for 'fd' [ 61.306699][ T6585] gadgetfs: bound to dummy_udc driver [ 61.321336][ T2768] Bluetooth: hci5: Frame reassembly failed (-84) [ 61.321398][ T6278] Bluetooth: hci5: Frame reassembly failed (-84) [ 61.322291][ T6585] openvswitch: netlink: Flow key attribute not present in set flow. [ 61.324560][ T6585] loop2: detected capacity change from 0 to 128 [ 61.325787][ T6585] EXT4-fs (loop2): Test dummy encryption mode enabled [ 61.405416][ T30] audit: type=1326 audit(7381980799.629:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6579 comm="syz.3.482" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8fb78be8 code=0x7ffc0000 [ 61.405524][ T30] audit: type=1326 audit(7381980799.629:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6579 comm="syz.3.482" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=56 compat=0 ip=0xffff8fb78be8 code=0x7ffc0000 [ 61.405590][ T30] audit: type=1326 audit(7381980799.629:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6579 comm="syz.3.482" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8fb78be8 code=0x7ffc0000 [ 61.405739][ T30] audit: type=1326 audit(7381980799.629:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6579 comm="syz.3.482" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffff8fb78be8 code=0x7ffc0000 [ 61.405806][ T30] audit: type=1326 audit(7381980799.629:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6579 comm="syz.3.482" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8fb78be8 code=0x7ffc0000 [ 61.405871][ T30] audit: type=1326 audit(7381980799.629:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6579 comm="syz.3.482" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=29 compat=0 ip=0xffff8fb78be8 code=0x7ffc0000 [ 61.405925][ T30] audit: type=1326 audit(7381980799.629:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6579 comm="syz.3.482" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8fb78be8 code=0x7ffc0000 [ 61.405989][ T30] audit: type=1326 audit(7381980799.629:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6579 comm="syz.3.482" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffff8fb78be8 code=0x7ffc0000 [ 61.406055][ T30] audit: type=1326 audit(7381980799.629:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6579 comm="syz.3.482" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8fb78be8 code=0x7ffc0000 [ 61.548536][ T6585] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 61.549525][ T6585] ext4 filesystem being mounted at /97/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 61.667342][ T4860] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 61.667519][ C0] gadgetfs: connected [ 61.667773][ T4860] gadgetfs: disconnected [ 61.818823][ C0] gadgetfs: connected [ 61.819481][ T4860] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice= 1.00 [ 61.819690][ T4860] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 61.819705][ T4860] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 61.822687][ C0] gadgetfs: configuration #1 [ 62.035039][ T6622] loop1: detected capacity change from 0 to 512 [ 62.297206][ T6634] netlink: 24 bytes leftover after parsing attributes in process `syz.3.498'. [ 62.996121][ T6642] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 63.016672][ T6642] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 63.029326][ T6642] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 63.059383][ T6642] bond0 (unregistering): Released all slaves [ 63.092400][ T6653] netlink: 8 bytes leftover after parsing attributes in process `syz.4.505'. [ 63.092657][ T6653] binder: 6652:6653 ioctl 40046210 ffffffffffffffff returned -14 [ 63.377609][ T51] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 63.493246][ T6585] gadgetfs: suspended from state 3 [ 63.493510][ T4860] usb 1-1: USB disconnect, device number 5 [ 63.494287][ T6585] gadgetfs: disconnected [ 63.508013][ T4717] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 63.824963][ T6695] syz.2.512 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 63.866973][ T6703] 9p: Bad value for 'rfdno' [ 63.946820][ T6715] loop1: detected capacity change from 0 to 1024 [ 63.951262][ T6715] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 63.953474][ T6715] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 63.953570][ T6715] EXT4-fs (loop1): orphan cleanup on readonly fs [ 63.953577][ T6715] EXT4-fs error (device loop1): ext4_quota_enable:7256: comm syz.1.519: Bad quota inum: 1, type: 0 [ 63.953589][ T6715] loop1: lost filesystem error report for type 5 error -117 [ 63.954097][ T6715] EXT4-fs warning (device loop1): ext4_enable_quotas:7304: Failed to enable quota tracking (type=0, err=-117, ino=1). Please run e2fsck to fix. [ 63.954116][ T6715] EXT4-fs (loop1): Cannot turn on quotas: error -117 [ 63.989906][ T6715] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 64.055742][ T4713] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.065172][ T6726] nfs: Unknown parameter 'smackfsfloor' [ 64.067728][ T6727] nfs: Unknown parameter 'smackfsfloor' [ 64.139079][ T6743] 9p: Bad value for 'rfdno' [ 64.139458][ T6741] rxe_eth0 speed is unknown, defaulting to 1000 [ 64.183331][ T6747] loop1: detected capacity change from 0 to 512 [ 64.186692][ T6747] EXT4-fs (loop1): Cannot use DAX on a filesystem that may contain inline data [ 64.359386][ T6772] netlink: 'syz.0.537': attribute type 1 has an invalid length. [ 64.537805][ T1593] ieee802154 phy0 wpan0: encryption failed: -22 [ 64.537866][ T1593] ieee802154 phy1 wpan1: encryption failed: -22 [ 64.597634][ T6772] 8021q: adding VLAN 0 to HW filter on device bond3 [ 64.599548][ T866] cfg80211: failed to load regulatory.db [ 64.604978][ T6772] netlink: 'syz.0.537': attribute type 10 has an invalid length. [ 64.604995][ T6772] netlink: 40 bytes leftover after parsing attributes in process `syz.0.537'. [ 65.065919][ T6792] tipc: Started in network mode [ 65.065941][ T6792] tipc: Node identity 00000000000000000000ffffac1414bb, cluster identity 4711 [ 65.065963][ T6792] tipc: Enabling of bearer rejected, failed to enable media [ 65.069533][ T6794] netlink: 'syz.1.542': attribute type 1 has an invalid length. [ 65.070286][ T6793] 9p: Bad value for 'rfdno' [ 65.082046][ T6794] veth3: entered allmulticast mode [ 65.084367][ T6794] bond2: (slave veth3): Enslaving as an active interface with a down link [ 65.084651][ T6794] veth0_to_bond: left allmulticast mode [ 65.084663][ T6794] veth0_to_bond: left promiscuous mode [ 65.084746][ T6794] bridge1: port 1(veth0_to_bond) entered disabled state [ 65.126250][ T6794] bond2: (slave veth0_to_bond): making interface the new active one [ 65.126575][ T6794] bond2: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 65.133299][ T6797] macvlan2: entered promiscuous mode [ 65.133313][ T6797] macvlan2: entered allmulticast mode [ 65.133531][ T6797] bond2: entered promiscuous mode [ 65.133539][ T6797] veth0_to_bond: entered promiscuous mode [ 65.136133][ T6807] loop4: detected capacity change from 0 to 256 [ 65.138730][ T6807] vfat filesystem being mounted at /117/file1 supports timestamps until 2107-12-31 (0x10391447e) [ 65.148737][ T6807] syz.4.545: attempt to access beyond end of device [ 65.148737][ T6807] loop4: rw=8388608, sector=1768, nr_sectors = 4 limit=256 [ 65.154627][ T6807] FAT-fs (loop4): error, fat_free: invalid cluster chain (i_pos 324) [ 65.154648][ T6807] FAT-fs (loop4): Filesystem has been set read-only [ 65.154676][ T6807] FAT-fs (loop4): error, fat_free: invalid cluster chain (i_pos 324) [ 65.155683][ T6797] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 65.156009][ T6797] bond2: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 65.156270][ T6797] bond2: left promiscuous mode [ 65.156280][ T6797] veth0_to_bond: left promiscuous mode [ 65.156497][ T6807] syz.4.545: attempt to access beyond end of device [ 65.156497][ T6807] loop4: rw=8388608, sector=1768, nr_sectors = 4 limit=256 [ 65.359352][ T6831] fuse: fd is not a fuse device [ 65.743035][ T6851] loop1: detected capacity change from 0 to 4096 [ 65.743438][ T6851] EXT4-fs: Ignoring removed mblk_io_submit option [ 65.747597][ T6851] EXT4-fs (loop1): Test dummy encryption mode enabled [ 65.762114][ T6851] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 65.816246][ T6849] fscrypt: AES-256-XTS using blk-crypto-fallback [ 65.838699][ T4713] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.886799][ T6858] netlink: 'syz.1.561': attribute type 2 has an invalid length. [ 65.892537][ T6858] : entered promiscuous mode [ 65.896199][ T6858] loop1: detected capacity change from 0 to 512 [ 65.928431][ T6860] capability: warning: `syz.1.562' uses 32-bit capabilities (legacy support in use) [ 65.951554][ T6861] FAULT_INJECTION: forcing a failure. [ 65.951554][ T6861] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 65.951573][ T6861] CPU: 0 UID: 0 PID: 6861 Comm: syz.1.562 Not tainted syzkaller #0 PREEMPT [ 65.951583][ T6861] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 65.951588][ T6861] Call trace: [ 65.951591][ T6861] show_stack+0x2c/0x3c (C) [ 65.951610][ T6861] __dump_stack+0x30/0x40 [ 65.951621][ T6861] dump_stack_lvl+0xd8/0x12c [ 65.951631][ T6861] dump_stack+0x1c/0x28 [ 65.951640][ T6861] should_fail_ex+0x418/0x58c [ 65.951651][ T6861] should_fail_alloc_page+0xec/0x10c [ 65.951663][ T6861] prepare_alloc_pages+0x194/0x484 [ 65.951670][ T6861] __alloc_frozen_pages_noprof+0x180/0x578 [ 65.951678][ T6861] alloc_pages_mpol+0x1fc/0x3d0 [ 65.951686][ T6861] alloc_frozen_pages_noprof+0xc4/0x10c [ 65.951694][ T6861] alloc_pages_noprof+0x30/0x148 [ 65.951702][ T6861] get_free_pages_noprof+0x1c/0xbc [ 65.951709][ T6861] __kasan_populate_vmalloc+0x48/0x1d0 [ 65.951718][ T6861] alloc_vmap_area+0xcd8/0x12ec [ 65.951726][ T6861] __get_vm_area_node+0x210/0x32c [ 65.951734][ T6861] __vmalloc_node_range_noprof+0x2a0/0xe9c [ 65.951743][ T6861] __vmalloc_node_noprof+0xec/0x14c [ 65.951751][ T6861] __vmalloc_noprof+0x64/0x8c [ 65.951759][ T6861] bpf_check+0xd44/0x2428 [ 65.951769][ T6861] bpf_prog_load+0xf4c/0x1554 [ 65.951777][ T6861] __sys_bpf+0x7d4/0x82c [ 65.951785][ T6861] __arm64_sys_bpf+0xd0/0xec [ 65.951792][ T6861] invoke_syscall+0x98/0x244 [ 65.951802][ T6861] el0_svc_common+0xec/0x23c [ 65.951812][ T6861] do_el0_svc+0x4c/0x5c [ 65.951821][ T6861] el0_svc+0x60/0x1d8 [ 65.951832][ T6861] el0t_64_sync_handler+0x44/0x104 [ 65.951842][ T6861] el0t_64_sync+0x198/0x19c [ 66.008586][ T6867] ip_tables: iptables: counters copy to user failed while replacing table [ 66.008679][ T6867] ip_tables: iptables: counters copy to user failed while replacing table [ 66.008770][ T6867] ip_tables: iptables: counters copy to user failed while replacing table [ 66.008839][ T6867] ip_tables: iptables: counters copy to user failed while replacing table [ 66.008907][ T6867] ip_tables: iptables: counters copy to user failed while replacing table [ 66.008971][ T6867] ip_tables: iptables: counters copy to user failed while replacing table [ 66.009045][ T6867] ip_tables: iptables: counters copy to user failed while replacing table [ 66.009117][ T6867] ip_tables: iptables: counters copy to user failed while replacing table [ 66.009181][ T6867] ip_tables: iptables: counters copy to user failed while replacing table [ 66.009247][ T6867] ip_tables: iptables: counters copy to user failed while replacing table [ 66.011858][ T6868] syz_tun: entered allmulticast mode [ 66.014566][ T6273] IPVS: starting estimator thread 0... [ 66.018520][ T6867] netlink: 28 bytes leftover after parsing attributes in process `syz.1.564'. [ 66.058451][ T6874] netlink: 32 bytes leftover after parsing attributes in process `syz.2.565'. [ 66.097431][ T6872] IPVS: using max 59 ests per chain, 141600 per kthread [ 66.097659][ T6882] fuse: Bad value for 'fd' [ 66.145147][ T51] Bluetooth: hci4: unknown advertising packet type: 0x63 [ 66.145166][ T51] Bluetooth: hci4: unknown advertising packet type: 0x70 [ 66.186528][ T6887] netlink: 'syz.4.570': attribute type 1 has an invalid length. [ 66.195641][ T6887] 8021q: adding VLAN 0 to HW filter on device bond2 [ 66.214376][ T6887] bond2: (slave dummy0): making interface the new active one [ 66.214689][ T6887] bond2: (slave dummy0): Enslaving as an active interface with an up link [ 66.221339][ T6887] netlink: 'syz.4.570': attribute type 10 has an invalid length. [ 66.221356][ T6887] netlink: 40 bytes leftover after parsing attributes in process `syz.4.570'. [ 66.221390][ T6887] dummy0: entered promiscuous mode [ 66.222088][ T6887] bond2: (slave dummy0): Releasing active interface [ 66.304704][ T6898] loop4: detected capacity change from 0 to 128 [ 66.336859][ T6898] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 66.337008][ T6898] ext4 filesystem being mounted at /124/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 66.382998][ T4707] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 66.469500][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 66.469523][ T30] audit: type=1326 audit(7381980804.689:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6891 comm="syz.0.572" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb0578be8 code=0x7ffc0000 [ 66.469612][ T30] audit: type=1326 audit(7381980804.689:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6891 comm="syz.0.572" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=56 compat=0 ip=0xffffb0578be8 code=0x7ffc0000 [ 66.469667][ T30] audit: type=1326 audit(7381980804.689:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6891 comm="syz.0.572" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb0578be8 code=0x7ffc0000 [ 66.469731][ T30] audit: type=1326 audit(7381980804.689:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6891 comm="syz.0.572" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffffb0578be8 code=0x7ffc0000 [ 66.469785][ T30] audit: type=1326 audit(7381980804.689:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6891 comm="syz.0.572" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb0578be8 code=0x7ffc0000 [ 66.469914][ T30] audit: type=1326 audit(7381980804.689:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6891 comm="syz.0.572" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=29 compat=0 ip=0xffffb0578be8 code=0x7ffc0000 [ 66.470100][ T30] audit: type=1326 audit(7381980804.689:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6891 comm="syz.0.572" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb0578be8 code=0x7ffc0000 [ 66.470368][ T30] audit: type=1326 audit(7381980804.699:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6891 comm="syz.0.572" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffffb0578be8 code=0x7ffc0000 [ 66.470688][ T30] audit: type=1326 audit(7381980804.699:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6891 comm="syz.0.572" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb0578be8 code=0x7ffc0000 [ 66.470990][ T30] audit: type=1326 audit(7381980804.699:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6891 comm="syz.0.572" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=211 compat=0 ip=0xffffb0578be8 code=0x7ffc0000 [ 66.689605][ T6910] loop4: detected capacity change from 0 to 8 [ 66.698988][ T6910] squashfs: SQUASHFS error: Xattrs in filesystem, these will be ignored [ 66.699001][ T6910] unable to read xattr id index table [ 66.700378][ T6910] SQUASHFS error: zlib decompression failed, data probably corrupt [ 66.700391][ T6910] SQUASHFS error: Failed to read block 0x9b: -5 [ 66.700397][ T6910] SQUASHFS error: Unable to read metadata cache entry [99] [ 66.700403][ T6910] SQUASHFS error: Unable to read inode 0x127 [ 67.079324][ T6931] netlink: 'syz.3.583': attribute type 1 has an invalid length. [ 67.084365][ T6931] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.101690][ T6931] bond0: (slave dummy0): making interface the new active one [ 67.101974][ T6931] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 67.106041][ T6931] netlink: 'syz.3.583': attribute type 10 has an invalid length. [ 67.106057][ T6931] netlink: 40 bytes leftover after parsing attributes in process `syz.3.583'. [ 67.106105][ T6931] dummy0: entered promiscuous mode [ 67.106774][ T6931] bond0: (slave dummy0): Releasing active interface [ 67.290114][ T6956] fuse: Bad value for 'fd' [ 67.291230][ T6956] overlayfs: failed to clone upperpath [ 67.647896][ T6976] netlink: 12 bytes leftover after parsing attributes in process `syz.4.601'. [ 67.651224][ T6976] ipvlan3: entered allmulticast mode [ 67.651238][ T6976] syz_tun: entered allmulticast mode [ 67.671502][ T6978] loop2: detected capacity change from 0 to 4096 [ 67.672455][ T6978] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 67.672466][ T6978] EXT4-fs (loop2): Test dummy encryption mode enabled [ 67.673315][ T6978] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=280ec1a8, mo2=0002] [ 67.673348][ T6978] System zones: 0-5 [ 67.676887][ T6978] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 67.684745][ T6978] fscrypt: AES-256-CBC-CTS using implementation "cts-cbc-aes-ce" [ 67.756747][ T4717] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.872247][ T6996] fuse: fd is not a fuse device [ 67.959484][ T7003] loop4: detected capacity change from 0 to 4096 [ 67.959841][ T7003] EXT4-fs: Ignoring removed mblk_io_submit option [ 67.961106][ T7003] EXT4-fs (loop4): Test dummy encryption mode enabled [ 67.970433][ T7003] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 67.982441][ T7007] fuse: fd is not a fuse device [ 67.983133][ T7007] overlayfs: failed to resolve './cgroup': -2 [ 68.006791][ T7008] syzkaller1: entered promiscuous mode [ 68.006807][ T7008] syzkaller1: entered allmulticast mode [ 68.055503][ T4707] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.110887][ T7016] loop4: detected capacity change from 0 to 1024 [ 68.115111][ T7016] EXT4-fs: Ignoring removed nomblk_io_submit option [ 68.115132][ T7016] EXT4-fs: Ignoring removed nomblk_io_submit option [ 68.115145][ T7016] EXT4-fs: Ignoring removed nobh option [ 68.141865][ T7016] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 68.141913][ T7016] ext4 filesystem being mounted at /132/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 68.153588][ T7016] EXT4-fs error (device loop4): ext4_validate_block_bitmap:445: comm syz.4.613: bg 0: block 112: padding at end of block bitmap is not set [ 68.155258][ T7016] EXT4-fs (loop4): Remounting filesystem read-only [ 68.155989][ T40] EXT4-fs warning (device loop4): ext4_convert_unwritten_extents:5172: inode #15: block 3: len 3: ext4_map_blocks returned -30 [ 68.166147][ T4707] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 68.220939][ T7025] dlm: plock device version mismatch: kernel (1.2.0), user (1869670251.552346378.528026997) [ 68.221960][ T7025] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 68.626106][ T7032] loop1: detected capacity change from 0 to 8192 [ 69.093864][ T7064] xt_IDLETIMER: timeout value is zero [ 69.310930][ T7077] netlink: 'syz.2.633': attribute type 1 has an invalid length. [ 69.409069][ T7079] netlink: 'syz.1.634': attribute type 1 has an invalid length. [ 69.523981][ T7087] netlink: 16 bytes leftover after parsing attributes in process `syz.1.637'. [ 69.524359][ T7087] netlink: 'syz.1.637': attribute type 10 has an invalid length. [ 69.524559][ T7087] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.524741][ T7087] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.530457][ T7087] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.530508][ T7087] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.530628][ T7087] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.530661][ T7087] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.532006][ T7087] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 69.533933][ T7087] netlink: 'syz.1.637': attribute type 10 has an invalid length. [ 69.536357][ T7087] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.537181][ T7087] bond0: (slave team0): Enslaving as an active interface with an up link [ 69.544159][ T7087] rxe_eth0 speed is unknown, defaulting to 1000 [ 69.766118][ T7090] loop1: detected capacity change from 0 to 4096 [ 69.767679][ T7090] EXT4-fs: Ignoring removed mblk_io_submit option [ 69.772035][ T7090] EXT4-fs (loop1): Test dummy encryption mode enabled [ 69.781219][ T7090] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 69.784781][ T7092] loop4: detected capacity change from 0 to 1024 [ 69.785228][ T7092] EXT4-fs: Ignoring removed bh option [ 69.815453][ T7092] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 69.877120][ T4707] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.885761][ T7101] netlink: 'syz.0.642': attribute type 1 has an invalid length. [ 69.902975][ T4713] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.916873][ T7101] 8021q: adding VLAN 0 to HW filter on device bond4 [ 69.934860][ T7101] bond4: (slave veth3): Enslaving as an active interface with a down link [ 70.135628][ T7117] Format for deleting device is "id" (uint). [ 70.177727][ T7117] vfat filesystem being mounted at /118/w5T)`)YFnA@T<3ڂ$rcnHwC" -8 supports timestamps until 2107-12-31 (0x10391447e) [ 70.416732][ T7116] Injecting memory failure for pfn 0x13fe00 at process virtual address 0x20000000 [ 70.431984][ T7116] Memory failure: 0x13fe00: recovery action for dirty LRU page: Recovered [ 70.478503][ T7129] IPv6: NLM_F_CREATE should be specified when creating new route [ 70.478569][ T7129] IPv6: Can't replace route, no match found [ 70.518762][ T7134] netlink: 28 bytes leftover after parsing attributes in process `syz.3.653'. [ 70.541434][ T7139] fuse: fd is not a fuse device [ 70.591032][ T7142] netlink: 24 bytes leftover after parsing attributes in process `syz.4.649'. [ 70.937815][ T7139] overlay: ./file0 is not a directory [ 71.139688][ T7166] netlink: 8 bytes leftover after parsing attributes in process `syz.0.664'. [ 71.212615][ T7173] fuse: fd is not a fuse device [ 71.220582][ T7173] net_ratelimit: 56 callbacks suppressed [ 71.220596][ T7173] openvswitch: netlink: Flow key attribute not present in set flow. [ 71.232657][ T7175] netlink: 'syz.0.669': attribute type 21 has an invalid length. [ 71.232749][ T7175] netlink: 132 bytes leftover after parsing attributes in process `syz.0.669'. [ 71.388624][ T51] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 71.388939][ T51] Bluetooth: hci0: Injecting HCI hardware error event [ 71.389619][ T4711] Bluetooth: hci0: hardware error 0x00 [ 72.075605][ T7210] set_capacity_and_notify: 1 callbacks suppressed [ 72.075619][ T7210] loop1: detected capacity change from 0 to 512 [ 72.076440][ T7210] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 72.089169][ T7210] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e02c, mo2=0002] [ 72.089277][ T7210] EXT4-fs (loop1): orphan cleanup on readonly fs [ 72.089286][ T7210] EXT4-fs error (device loop1): ext4_orphan_get:1429: comm syz.1.672: bad orphan inode 3 [ 72.089298][ T7210] loop1: lost filesystem error report for type 5 error -117 [ 72.092835][ T7210] EXT4-fs (loop1): Remounting filesystem read-only [ 72.093305][ T7210] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 72.181321][ T4713] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 72.183584][ T7215] loop2: detected capacity change from 0 to 512 [ 72.186239][ T7215] EXT4-fs: Ignoring removed oldalloc option [ 72.187125][ T7215] EXT4-fs (loop2): Test dummy encryption mode enabled [ 72.187139][ T7215] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 72.196135][ T7215] EXT4-fs (loop2): can't mount with journal_async_commit, fs mounted w/o journal [ 72.271571][ T7215] loop2: detected capacity change from 0 to 2048 [ 72.307901][ T7215] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 72.307957][ T7215] ext4 filesystem being mounted at /126/bus/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 72.337454][ T51] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 72.339524][ T51] Bluetooth: hci2: Injecting HCI hardware error event [ 72.340222][ T51] Bluetooth: hci2: hardware error 0x00 [ 72.815633][ T7241] loop4: detected capacity change from 0 to 4096 [ 72.819258][ T7241] EXT4-fs: Ignoring removed mblk_io_submit option [ 72.825335][ T7241] EXT4-fs (loop4): Test dummy encryption mode enabled [ 72.832026][ T7241] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 72.968540][ T4707] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.015771][ T4717] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.102457][ T7260] loop4: detected capacity change from 0 to 512 [ 73.110571][ T7260] EXT4-fs error (device loop4): ext4_validate_block_bitmap:436: comm syz.4.692: bg 0: block 4: invalid block bitmap [ 73.110593][ T7260] loop4: lost filesystem error report for type 5 error -117 [ 73.114395][ T7263] netlink: 76 bytes leftover after parsing attributes in process `syz.2.693'. [ 73.114722][ T7260] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6680: Corrupt filesystem [ 73.114735][ T7260] loop4: lost filesystem error report for type 5 error -117 [ 73.117295][ C1] EXT4-fs (loop4): error count since last fsck: 2 [ 73.117312][ C1] EXT4-fs (loop4): initial error at time 7381980811: ext4_validate_block_bitmap:436 [ 73.117325][ C1] EXT4-fs (loop4): last error at time 7381980811: ext4_mb_clear_bb:6680 [ 73.124741][ T7260] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.692: invalid indirect mapped block 1 (level 1) [ 73.124765][ T7260] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 73.141015][ T7260] EXT4-fs (loop4): 1 truncate cleaned up [ 73.143916][ T7260] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 73.221736][ T7273] netlink: 76 bytes leftover after parsing attributes in process `syz.2.693'. [ 73.227464][ T4716] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 73.227500][ T4716] Bluetooth: hci1: Injecting HCI hardware error event [ 73.228957][ T4716] Bluetooth: hci1: hardware error 0x00 [ 73.285041][ T7282] usb3503 0-0008: unknown mode is requested [ 73.285057][ T7282] usb3503 0-0008: usb3503_probe: probed in standby mode [ 73.285516][ T7286] netlink: 'syz.3.696': attribute type 10 has an invalid length. [ 73.285873][ T7282] i2c i2c-0: new_device: Instantiated device usb3503 at 0x08 [ 73.286066][ T7286] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.286221][ T7286] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.315817][ T7286] netlink: 4 bytes leftover after parsing attributes in process `syz.3.696'. [ 73.315867][ T7286] bridge_slave_1: left allmulticast mode [ 73.315881][ T7286] bridge_slave_1: left promiscuous mode [ 73.315985][ T7286] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.319540][ T7286] bridge_slave_0: left allmulticast mode [ 73.319556][ T7286] bridge_slave_0: left promiscuous mode [ 73.319657][ T7286] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.416264][ T7292] loop2: detected capacity change from 0 to 4096 [ 73.416660][ T7292] EXT4-fs: Ignoring removed mblk_io_submit option [ 73.424706][ T7292] EXT4-fs (loop2): Test dummy encryption mode enabled [ 73.436586][ T7292] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.502085][ T4717] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.719256][ T7320] netlink: 8 bytes leftover after parsing attributes in process `syz.2.703'. [ 73.789354][ T4711] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 73.952224][ T7323] openvswitch: netlink: Port -2145517564 exceeds max allowable 65535 [ 73.989720][ T4707] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.029671][ T7335] netlink: 'syz.3.717': attribute type 10 has an invalid length. [ 74.032991][ T7335] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 74.039207][ T7335] team0: Port device netdevsim1 added [ 74.086724][ T7340] netlink: 'syz.1.710': attribute type 10 has an invalid length. [ 74.109958][ T7340] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.110043][ T7340] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.133165][ T7340] netlink: 4 bytes leftover after parsing attributes in process `syz.1.710'. [ 74.133344][ T7340] bridge_slave_1: left allmulticast mode [ 74.133358][ T7340] bridge_slave_1: left promiscuous mode [ 74.133458][ T7340] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.135359][ T7340] bridge_slave_0: left allmulticast mode [ 74.135372][ T7340] bridge_slave_0: left promiscuous mode [ 74.135453][ T7340] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.158845][ T7340] bond0: (slave bridge0): Releasing backup interface [ 74.258565][ T7356] loop1: detected capacity change from 0 to 1024 [ 74.258914][ T7356] EXT4-fs: Ignoring removed mblk_io_submit option [ 74.261830][ T7356] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 74.272890][ T7356] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 74.289781][ T7356] EXT4-fs error (device loop1): ext4_ext_check_inode:521: inode #11: comm syz.1.718: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 74.289817][ T7356] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 74.291935][ T7356] EXT4-fs error (device loop1): ext4_orphan_get:1408: comm syz.1.718: couldn't read orphan inode 11 (err -117) [ 74.291959][ T7356] loop1: lost filesystem error report for type 5 error -117 [ 74.292487][ T7356] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.322276][ T7356] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:487: comm syz.1.718: Invalid block bitmap block 0 in block_group 0 [ 74.335959][ T7356] __quota_error: 8 callbacks suppressed [ 74.335972][ T7356] Quota error (device loop1): write_blk: dquota write failed [ 74.335991][ T7356] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 74.336033][ T7356] EXT4-fs error (device loop1): ext4_acquire_dquot:7069: comm syz.1.718: Failed to acquire dquot type 0 [ 74.366846][ T4713] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.535049][ T7380] loop1: detected capacity change from 0 to 32768 [ 74.555848][ T7390] fuse: fd is not a fuse device [ 74.577536][ T51] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 74.579323][ T7380] loop1: p1 p9 p11 [ 74.637940][ T5893] udevd[5893]: inotify_add_watch(7, /dev/loop1p9, 10) failed: No such file or directory [ 74.638289][ T5839] udevd[5839]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 74.639877][ T4700] udevd[4700]: inotify_add_watch(7, /dev/loop1p11, 10) failed: No such file or directory [ 75.166973][ T7407] loop2: detected capacity change from 0 to 128 [ 75.179728][ T7407] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a842c018, mo2=0002] [ 75.179774][ T7407] System zones: 1-3, 19-19, 35-36 [ 75.184194][ T7407] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 75.186516][ T7411] fuse: Bad value for 'rootmode' [ 75.196697][ T7407] ext4 filesystem being mounted at /134/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 75.199355][ T7411] gadgetfs: bound to dummy_udc driver [ 75.214392][ T7412] netlink: 8 bytes leftover after parsing attributes in process `syz.3.734'. [ 75.226576][ T7411] openvswitch: netlink: Flow key attribute not present in set flow. [ 75.228572][ T7411] loop4: detected capacity change from 0 to 128 [ 75.236000][ T7411] EXT4-fs (loop4): Test dummy encryption mode enabled [ 75.236757][ T6271] Bluetooth: hci5: Frame reassembly failed (-84) [ 75.244985][ T7411] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 75.247066][ T7411] ext4 filesystem being mounted at /156/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 75.389653][ T4716] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 75.437713][ T24] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 75.437894][ C1] gadgetfs: connected [ 75.438192][ T24] gadgetfs: disconnected [ 75.558741][ T7415] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 75.611395][ C1] gadgetfs: connected [ 75.618546][ T24] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice= 1.00 [ 75.618806][ T24] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 75.618827][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 75.630059][ C1] gadgetfs: configuration #1 [ 75.781250][ T4711] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 75.785911][ T4711] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 75.786518][ T4711] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 75.794185][ T4711] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 75.794440][ T4711] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 75.813447][ T7463] __nla_validate_parse: 1 callbacks suppressed [ 75.813462][ T7463] netlink: 16 bytes leftover after parsing attributes in process `syz.1.748'. [ 75.815560][ T7463] netlink: 'syz.1.748': attribute type 1 has an invalid length. [ 75.816351][ T7463] netlink: 4 bytes leftover after parsing attributes in process `syz.1.748'. [ 75.891431][ T7456] rxe_eth0 speed is unknown, defaulting to 1000 [ 75.993647][ T7489] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 76.001457][ T7490] EXT4-fs: Ignoring removed oldalloc option [ 76.001472][ T7490] EXT4-fs: Ignoring removed oldalloc option [ 76.001479][ T7490] EXT4-fs: Ignoring removed oldalloc option [ 76.003818][ T7490] EXT4-fs: Mount option(s) incompatible with ext3 [ 76.044873][ T7456] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.044938][ T7456] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.044996][ T7456] bridge_slave_0: entered allmulticast mode [ 76.046016][ T7456] bridge_slave_0: entered promiscuous mode [ 76.053076][ T7456] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.053138][ T7456] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.053199][ T7456] bridge_slave_1: entered allmulticast mode [ 76.053733][ T7456] bridge_slave_1: entered promiscuous mode [ 76.060288][ T7497] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 76.060351][ T7497] ext4 filesystem being mounted at /133/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 76.063324][ T7497] EXT4-fs error (device loop1): ext4_lookup:1787: inode #12: comm syz.1.755: iget: bad i_size value: 2533274857506816 [ 76.078077][ T7456] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.080045][ T7456] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.093892][ T7456] team0: Port device team_slave_0 added [ 76.094694][ T7456] team0: Port device team_slave_1 added [ 76.103841][ T7456] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 76.103851][ T7456] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 76.103863][ T7456] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 76.104355][ T7456] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 76.104362][ T7456] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 76.104377][ T7456] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 76.134125][ T7456] hsr_slave_0: entered promiscuous mode [ 76.134419][ T7456] hsr_slave_1: entered promiscuous mode [ 76.134636][ T7456] debugfs: 'hsr0' already exists in 'hsr' [ 76.134648][ T7456] Cannot create hsr debugfs directory [ 76.185810][ T7456] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 76.189689][ T7456] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 76.190129][ T7456] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 76.191669][ T7456] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 76.192030][ T7456] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 76.192935][ T7456] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 76.193281][ T7456] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 76.195151][ T7456] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 76.212676][ T7456] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.212705][ T7456] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.212779][ T7456] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.212808][ T7456] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.235105][ T7456] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.241187][ T6273] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.241456][ T6273] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.244348][ T7456] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.247759][ T6271] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.247784][ T6271] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.260204][ T6273] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.260236][ T6273] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.364726][ T7456] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.424975][ T7456] veth0_vlan: entered promiscuous mode [ 76.427004][ T7456] veth1_vlan: entered promiscuous mode [ 76.442718][ T7456] veth0_macvtap: entered promiscuous mode [ 76.444000][ T7456] veth1_macvtap: entered promiscuous mode [ 76.450123][ T7456] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.452581][ T7456] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.483089][ T6271] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.483105][ T6271] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.495133][ T6271] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.495149][ T6271] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.508719][ T40] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.509545][ T40] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.509569][ T40] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.509587][ T40] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.591073][ T7531] FAULT_INJECTION: forcing a failure. [ 76.591073][ T7531] name failslab, interval 1, probability 0, space 0, times 0 [ 76.591096][ T7531] CPU: 0 UID: 0 PID: 7531 Comm: syz.5.744 Not tainted syzkaller #0 PREEMPT [ 76.591108][ T7531] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 76.591113][ T7531] Call trace: [ 76.591116][ T7531] show_stack+0x2c/0x3c (C) [ 76.591135][ T7531] __dump_stack+0x30/0x40 [ 76.591145][ T7531] dump_stack_lvl+0xd8/0x12c [ 76.591155][ T7531] dump_stack+0x1c/0x28 [ 76.591165][ T7531] should_fail_ex+0x418/0x58c [ 76.591176][ T7531] should_failslab+0xc4/0x120 [ 76.591187][ T7531] kmem_cache_alloc_lru_noprof+0x98/0x5d8 [ 76.591195][ T7531] sock_alloc_inode+0x30/0x180 [ 76.591206][ T7531] alloc_inode+0x68/0x198 [ 76.591215][ T7531] sock_alloc+0x4c/0x204 [ 76.591223][ T7531] __sock_create+0x108/0x670 [ 76.591231][ T7531] __sys_socket_create+0xc0/0x11c [ 76.591240][ T7531] __sys_socket+0x44/0xec [ 76.591248][ T7531] __arm64_sys_socket+0x84/0x9c [ 76.591256][ T7531] invoke_syscall+0x98/0x244 [ 76.591266][ T7531] el0_svc_common+0xec/0x23c [ 76.591276][ T7531] do_el0_svc+0x4c/0x5c [ 76.591285][ T7531] el0_svc+0x60/0x1d8 [ 76.591296][ T7531] el0t_64_sync_handler+0x44/0x104 [ 76.591305][ T7531] el0t_64_sync+0x198/0x19c [ 76.591316][ T7531] socket: no more sockets [ 76.650939][ T4713] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.765872][ T7540] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 76.765891][ T7540] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 76.765929][ T7540] EXT4-fs (loop5): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 76.767065][ T7540] EXT4-fs error (device loop5): ext4_get_journal_inode:5927: inode #5: comm syz.5.761: unexpected bad inode w/o EXT4_IGET_BAD [ 76.767087][ T7540] loop5: lost file I/O error report for ino 5 type 5 pos 0x0 len 0x0 error -117 [ 76.767265][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 76.767276][ C1] EXT4-fs (loop5): initial error at time 7381980814: ext4_get_journal_inode:5927: inode 5 [ 76.767293][ C1] EXT4-fs (loop5): last error at time 7381980814: ext4_get_journal_inode:5927: inode 5 [ 76.771079][ T7540] EXT4-fs (loop5): no journal found [ 76.771109][ T7540] EXT4-fs (loop5): can't get journal size [ 76.782160][ T7542] netlink: 64 bytes leftover after parsing attributes in process `syz.0.762'. [ 76.782175][ T7542] netlink: 64 bytes leftover after parsing attributes in process `syz.0.762'. [ 76.782183][ T7542] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Mapping Error Msg ret = -22) [ 76.793363][ T7540] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 76.800059][ T30] audit: type=1326 audit(7381980815.029:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7532 comm="syz.1.758" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff98b78be8 code=0x7fc00000 [ 76.800099][ T30] audit: type=1326 audit(7381980815.029:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7532 comm="syz.1.758" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=451 compat=0 ip=0xffff98b78be8 code=0x7fc00000 [ 76.800116][ T30] audit: type=1326 audit(7381980815.029:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7532 comm="syz.1.758" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff98b78be8 code=0x7fc00000 [ 76.800132][ T30] audit: type=1326 audit(7381980815.029:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7532 comm="syz.1.758" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff98b78be8 code=0x7fc00000 [ 76.800146][ T30] audit: type=1326 audit(7381980815.029:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7532 comm="syz.1.758" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff98b78be8 code=0x7fc00000 [ 76.800161][ T30] audit: type=1326 audit(7381980815.029:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7532 comm="syz.1.758" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff98b78be8 code=0x7fc00000 [ 76.800176][ T30] audit: type=1326 audit(7381980815.029:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7532 comm="syz.1.758" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff98b78be8 code=0x7fc00000 [ 76.800191][ T30] audit: type=1326 audit(7381980815.029:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7532 comm="syz.1.758" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff98b78be8 code=0x7fc00000 [ 76.840706][ T7456] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.194681][ T7575] netlink: 12 bytes leftover after parsing attributes in process `syz.0.774'. [ 77.297469][ T4716] Bluetooth: hci5: command 0x1003 tx timeout [ 77.297540][ T51] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 77.323532][ T7411] gadgetfs: suspended from state 3 [ 77.323796][ T4795] usb 1-1: USB disconnect, device number 6 [ 77.325765][ T7411] gadgetfs: disconnected [ 77.340034][ T4707] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 77.359351][ T7583] fuse: fd is not a fuse device [ 77.435581][ T7590] netlink: 'syz.4.781': attribute type 29 has an invalid length. [ 77.440180][ T7590] netlink: 'syz.4.781': attribute type 29 has an invalid length. [ 77.468835][ C0] vcan0: j1939_tp_rxtimer: 0x00000000bd1af8b1: rx timeout, send abort [ 77.469997][ C0] vcan0: j1939_xtp_rx_abort_one: 0x00000000bd1af8b1: 0x10000: (3) A timeout occurred and this is the connection abort to close the session. [ 77.823859][ T7611] fuse: fd is not a fuse device [ 77.830776][ T7611] openvswitch: netlink: Flow key attribute not present in set flow. [ 77.874624][ T51] Bluetooth: hci4: command tx timeout [ 77.924385][ T51] [ 77.924891][ T51] ====================================================== [ 77.926096][ T51] WARNING: possible circular locking dependency detected [ 77.927285][ T51] syzkaller #0 Not tainted [ 77.928112][ T51] ------------------------------------------------------ [ 77.929430][ T51] kworker/u9:0/51 is trying to acquire lock: [ 77.930562][ T51] ffff80008abf1620 (rfcomm_mutex){+.+.}-{4:4}, at: rfcomm_security_cfm+0x54/0x4c8 [ 77.932404][ T51] [ 77.932404][ T51] but task is already holding lock: [ 77.933627][ T51] ffff80008abce820 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_encrypt_cfm+0x2ac/0x44c [ 77.935533][ T51] [ 77.935533][ T51] which lock already depends on the new lock. [ 77.935533][ T51] [ 77.937486][ T51] [ 77.937486][ T51] the existing dependency chain (in reverse order) is: [ 77.939150][ T51] [ 77.939150][ T51] -> #2 (hci_cb_list_lock){+.+.}-{4:4}: [ 77.939303][ T7622] set_capacity_and_notify: 3 callbacks suppressed [ 77.939313][ T7622] loop5: detected capacity change from 0 to 256 [ 77.942531][ T51] __mutex_lock+0x164/0x1078 [ 77.943336][ T51] mutex_lock_nested+0x24/0x30 [ 77.944220][ T51] hci_remote_features_evt+0x284/0x5e0 [ 77.945304][ T51] hci_event_packet+0x4e0/0x9c8 [ 77.946319][ T51] hci_rx_work+0x2f4/0xd78 [ 77.947191][ T51] process_scheduled_works+0x91c/0x1250 [ 77.948220][ T51] worker_thread+0x798/0xbd0 [ 77.949057][ T51] kthread+0x304/0x3d4 [ 77.949798][ T51] ret_from_fork+0x10/0x20 [ 77.950606][ T51] [ 77.950606][ T51] -> #1 (&hdev->lock){+.+.}-{4:4}: [ 77.951869][ T51] __mutex_lock+0x164/0x1078 [ 77.952725][ T51] mutex_lock_nested+0x24/0x30 [ 77.953656][ T51] l2cap_chan_connect+0x84/0xe94 [ 77.954627][ T51] l2cap_sock_connect+0x44c/0x654 [ 77.955754][ T51] kernel_connect+0x12c/0x1a0 [ 77.956231][ T7623] vcan0: tx drop: invalid sa for name 0xfffffffffffffffc [ 77.958185][ T51] rfcomm_dlc_open+0x574/0x8b0 [ 77.959212][ T51] rfcomm_sock_connect+0x278/0x598 [ 77.960229][ T51] __sys_connect_file+0x13c/0x184 [ 77.961211][ T51] __sys_connect+0x114/0x194 [ 77.962052][ T51] __arm64_sys_connect+0x84/0x9c [ 77.962957][ T51] invoke_syscall+0x98/0x244 [ 77.963844][ T51] el0_svc_common+0xec/0x23c [ 77.964787][ T51] do_el0_svc+0x4c/0x5c [ 77.965677][ T51] el0_svc+0x60/0x1d8 [ 77.966548][ T51] el0t_64_sync_handler+0x44/0x104 [ 77.967746][ T51] el0t_64_sync+0x198/0x19c [ 77.968757][ T51] [ 77.968757][ T51] -> #0 (rfcomm_mutex){+.+.}-{4:4}: [ 77.970099][ T51] __lock_acquire+0x1660/0x2b08 [ 77.971044][ T51] lock_acquire+0x13c/0x320 [ 77.971859][ T51] __mutex_lock+0x164/0x1078 [ 77.972680][ T51] mutex_lock_nested+0x24/0x30 [ 77.973502][ T51] rfcomm_security_cfm+0x54/0x4c8 [ 77.974443][ T51] hci_encrypt_cfm+0x30c/0x44c [ 77.975323][ T51] hci_encrypt_change_evt+0x54c/0xb48 [ 77.976232][ T51] hci_event_packet+0x4e0/0x9c8 [ 77.977123][ T51] hci_rx_work+0x2f4/0xd78 [ 77.977953][ T51] process_scheduled_works+0x91c/0x1250 [ 77.978939][ T51] worker_thread+0x798/0xbd0 [ 77.979774][ T51] kthread+0x304/0x3d4 [ 77.980493][ T51] ret_from_fork+0x10/0x20 [ 77.981253][ T51] [ 77.981253][ T51] other info that might help us debug this: [ 77.981253][ T51] [ 77.982858][ T51] Chain exists of: [ 77.982858][ T51] rfcomm_mutex --> &hdev->lock --> hci_cb_list_lock [ 77.982858][ T51] [ 77.985150][ T51] Possible unsafe locking scenario: [ 77.985150][ T51] [ 77.986479][ T51] CPU0 CPU1 [ 77.987485][ T51] ---- ---- [ 77.988358][ T51] lock(hci_cb_list_lock); [ 77.989088][ T51] lock(&hdev->lock); [ 77.990150][ T51] lock(hci_cb_list_lock); [ 77.991231][ T51] lock(rfcomm_mutex); [ 77.991912][ T51] [ 77.991912][ T51] *** DEADLOCK *** [ 77.991912][ T51] [ 77.993245][ T51] locks held by kworker/u9:0/51: 4, last CPU#0: [ 77.994308][ T51] #0: ffff0000d28f5940 ((wq_completion)hci3#2){+.+.}-{0:0}, at: process_scheduled_works+0x8c8/0x1250 [ 77.996387][ T51] #1: ffff80008ff87c20 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x8d0/0x1250 [ 77.998506][ T51] #2: ffff0000c71000b8 (&hdev->lock){+.+.}-{4:4}, at: hci_encrypt_change_evt+0x94/0xb48 [ 78.000138][ T51] #3: ffff80008abce820 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_encrypt_cfm+0x2ac/0x44c [ 78.001815][ T51] [ 78.001815][ T51] stack backtrace: [ 78.002794][ T51] CPU: 0 UID: 0 PID: 51 Comm: kworker/u9:0 Tainted: G L syzkaller #0 PREEMPT [ 78.004510][ T51] Tainted: [L]=SOFTLOCKUP [ 78.005197][ T51] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 78.006871][ T51] Workqueue: hci3 hci_rx_work [ 78.007680][ T51] Call trace: [ 78.008207][ T51] show_stack+0x2c/0x3c (C) [ 78.008936][ T51] __dump_stack+0x30/0x40 [ 78.009646][ T51] dump_stack_lvl+0xd8/0x12c [ 78.010438][ T51] dump_stack+0x1c/0x28 [ 78.011189][ T51] print_circular_bug+0x328/0x330 [ 78.012102][ T51] check_noncircular+0x158/0x174 [ 78.012913][ T51] __lock_acquire+0x1660/0x2b08 [ 78.013766][ T51] lock_acquire+0x13c/0x320 [ 78.014653][ T51] __mutex_lock+0x164/0x1078 [ 78.015500][ T51] mutex_lock_nested+0x24/0x30 [ 78.016529][ T51] rfcomm_security_cfm+0x54/0x4c8 [ 78.017591][ T51] hci_encrypt_cfm+0x30c/0x44c [ 78.018492][ T51] hci_encrypt_change_evt+0x54c/0xb48 [ 78.019485][ T51] hci_event_packet+0x4e0/0x9c8 [ 78.020373][ T51] hci_rx_work+0x2f4/0xd78 [ 78.021165][ T51] process_scheduled_works+0x91c/0x1250 [ 78.022172][ T51] worker_thread+0x798/0xbd0 [ 78.022992][ T51] kthread+0x304/0x3d4 [ 78.023738][ T51] ret_from_fork+0x10/0x20 [ 78.034947][ T7618] netlink: 4 bytes leftover after parsing attributes in process `syz.3.793'. [ 78.034971][ T7618] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 79.947396][ T51] Bluetooth: hci4: command tx timeout [ 82.017600][ T4716] Bluetooth: hci4: command tx timeout [ 82.177787][ T4716] Bluetooth: hci3: command 0x0406 tx timeout [ 84.107345][ T4716] Bluetooth: hci4: command tx timeout [ 84.257268][ T4716] Bluetooth: hci3: command 0x0406 tx timeout