last executing test programs: 11.231585512s ago: executing program 0 (id=211): r0 = socket(0x10, 0x2, 0x0) (async) r1 = syz_io_uring_setup(0x5f38, &(0x7f0000000080)={0x0, 0x2, 0x800, 0x3, 0x3}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f00000001c0)=@IORING_OP_TIMEOUT={0xb, 0x50, 0x0, 0x0, 0x800000000000002, &(0x7f0000000240)={0x0, 0x989680}, 0x1, 0x0, 0x1}) (async) io_uring_enter(r1, 0x6516, 0x6d93, 0x8, 0x0, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r1, 0x18, &(0x7f00000002c0)={0x1, 0xffffffffffffffff, 0x19, {0x3, 0xc82}, 0xb}, 0x1) (async) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x6}, 0x10) write(r0, &(0x7f0000000280)="1c0000001a009b8a14e5f4070009042400000000ff02000000000000", 0x1e5) (async) recvmmsg$unix(r0, &(0x7f0000006440)=[{{0x0, 0x0, 0x0}}], 0x11, 0x10002, 0x0) 11.183343445s ago: executing program 0 (id=214): r0 = socket$tipc(0x1e, 0x2, 0x0) syz_emit_ethernet(0x5e, &(0x7f0000003500)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa88a800008100000086dd6076cd8a0020000020010000000000000000000000b31e29a72047d63d0000000000000000000000210300000000000007100000000002008d710400000000000000000100010100"], 0x0) (async) r1 = socket$netlink(0x10, 0x3, 0x0) (async) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000003580)={0xa, 0x0, &(0x7f00000035c0)={&(0x7f0000003600)={0x2, 0x2, 0x0, 0x2, 0xb, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x4e23, @rand_addr=0x64010101}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0xfb}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x4e1f, @dev={0xac, 0x14, 0x14, 0x44}}}, @sadb_key={0x1, 0x8}]}, 0x58}, 0x1, 0x7}, 0xd0) (async) bind$netlink(r1, &(0x7f00000003c0)={0x10, 0x0, 0x25dfdbfb, 0x4000000}, 0xc) (async) getsockopt$netlink(r1, 0x10e, 0x9, &(0x7f0000000a80)=""/4096, &(0x7f0000001a80)=0x1000) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000400)={0x2, &(0x7f0000001d80)=[{0x20, 0x2, 0x81, 0xfffff030}, {0x6}]}, 0x10) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000003380)={0x0, 0x0, &(0x7f00000033c0)={&(0x7f0000003400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd50200000009"], 0x7c}}, 0x8095) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000003440)={0x0, 0x0, &(0x7f0000003480)={&(0x7f00000034c0)=ANY=[@ANYBLOB="080100003e0007010000000005000000047c000004004980ec000180060006003b000000e0001c"], 0x108}, 0x1, 0x0, 0x0, 0x8044}, 0x4010) (async) write$UHID_CREATE2(r2, &(0x7f0000003680)={0xb, {'syz0\x00', 'syz1\x00', 'syz0\x00', 0xb9, 0x5, 0x604, 0xa2, 0x7, 0x2, "7407ea7a625612d8abd1e636a9b4f2ded269afbd605df59f9feab630656c584605869f7962de959622b5f51c05254cfc2441b7b9c6799b8b0796434593378b1e7151997eb5a6cf6a467ed17d6fc9ef4f660cd966653e5c73c292adfa1f147b236cad26bfb69d189509ae87b46555b3ae4995597e8ae50b2b5df96a6194c21c4fa4899f0b2ea9cc925da6bbf24c39977b1ba8bd773ed593d39f0500ea0fbe7675a1161681d8f15db650d952e566f203a05e93852c62f8902143"}}, 0x1d1) (async) sendmsg$tipc(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000000)="c459d2d8a32caeb083e831f0a6b2594ca563fe833a0901b0197ce1e377f80481aa695a1f53f11edab2f7a381cd91b82a0b235ea4aec06a584798c832d791c92ac8a24bd9186b7a1bcf4c126f141a3b72125b10b0ec6e83a8a2", 0x59}, {&(0x7f0000000080)="dba9b4a9f8bfedaba5c2c768b156b0e8d4af8a370ea894c0b45ea48236398a82b77bedf11af46945e3183a8f9a9d9ce34e6b4513818c0548fa393868f22afd24c2c259af45544cc0b7bd14d56006bdf29a1ee56473e6c269a3f00c9af0fb93a9b8d8f43c36b863da63a870d89b988ace8ed59a873c2cffb91d70e2ae8f5ce636ee3c0fc572c12d49546ce906e53fb2b366e2fd2385ea76ac800d45f9e240508d74bc9ba7b96b77b7b95c28a5a135a18b0c362e6f2b14b7a7e2f5791138cd", 0xbe}, {&(0x7f0000000140)="5d8646dccdfcbc40410db225c2eac9a18ea96ea9f7a4de92af413f8eb745c875224157aa9cd219ace8490984014f9775915041cc82f0c4021c83ba2324cad5a724e6582fc3d8ee76796211a0833d3ab256795ecd94eeecb54a606250f9e7950d50bb56cd3d5fde90162e08d8952a89907bb26245d45b", 0x76}, {&(0x7f0000000200)="05adbcc4dfa836a6e57e2bb32daa3b2fd09c585e12c7bf6a892dadb2ce44e390bc6dca8013b5640dec97de06b5fdb9797f51642007544a89005501bc4daf35f2fd0f562fd30c71c0c0ad6b0cb2c3d61b366358c5b23a6f45fb73d1e04ce18a6b3a0258b99d53bbc604a5d363f9f94aafa184db", 0x73}, {&(0x7f0000000280)="f862f93af31bf837d3cb3873bb7bf86aa4931131", 0x14}, {&(0x7f0000000300)="be33915bd3f2b515dba68d9c9cc9bce14306cbf87698a721564c5cf0c2595f934f65fe1f4b41405ce1f658b57b6a33a3994dd4ca52f4a6eab734a6eb159b9f5b94f0b0cd06a35514708801718bbb2e4712f778297b8e8266b433b7d824c827b341ded325125af47bb426c57ac6792be20d9ffa6e75a0a1c8011b5aa67b0591ad73f7008fd5face33f3c37118f8da3b641918bed872fad21dee70731481ed9b5d", 0xa0}, {&(0x7f0000000700)="f86dc37a68e764ee45fb3f72c76a5c5dfbb58beea3bed0387b1a496b0130c86f8198adf3122177b7d4423a7154acfc0f83288e55ea75fcc8f440c71da1049f9e419a0815ab3771a02a778c96cc9de9574a927f6eca09ecec9f2ff257f55ce043a3d30c454a873f3f1a4d5e1bb4bd2e153feb30d8eb0418b5530e5df70636b0f0d1ddb54b5a88384a8075adcf0b135dabf7028c92ced19d91ff6ee6e1ea5cf5757a6c889532f7ee62161629", 0xab}, {&(0x7f00000007c0)="8a6ac105d3633c8ace0f484e58b8ea8853042a4f3e784b0743dc25811b6c0546f11f12b4c9a0bcf0d6671d25634c458ff6e904f376f0383d936b9c72fef5", 0x3e}, {&(0x7f0000000800)="7abab2f9c5a4da18a9c948bbb229db927bd079f6380dd044ead2e116dc8812be660e4867aa0f7637204512389e5158808b65d44bb5783439829bc1efa5f787a4ce1d3d5c8d9b48c85d35fff5671b90dcccacdc87a01da9e086f6a2f2956184945b0b0b1b1bcb0f445e38097e4194861669a9aeb386c21593ed42a0ec40062a4fdd53fa03df52bc4700ed855a11de8bd9", 0x90}], 0x9, &(0x7f0000000980)="e3135b4a132924efaad990a2ebf22a96529e164e3cf054d8a7c855c3ff2fd323dda6c63497cbf38adf18be272de935e78000d68aff943211ca1079cfe53db4bae93fe2186aab110a3afbf0544b7bc3f660ce9864339f7fe0aebc6a45106b54f52681b2488be3875806e59263c13cf99961a76de47e803711598a46605d815d070e352cdb8935857603c42154bcf75ffb5ded40871d0e9a08c91e66e6e479693ce25f363bb2e6bf3e1bacf053ef000675", 0xb0, 0x80}, 0x4000) (async) r5 = socket(0x15, 0x5, 0x0) setsockopt$sock_timeval(r5, 0x1, 0x14, &(0x7f00000020c0)={0x0, 0x2710}, 0x10) (async) recvmsg(r5, &(0x7f0000003340)={0x0, 0x0, 0x0}, 0x0) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r1, 0x4048587b, &(0x7f00000032c0)={{r0, &(0x7f0000001dc0)='\\\x00', 0x200800, &(0x7f0000001e00)={@_ha_fsid={[0x8, 0x7]}, {0x8, 0x2, 0xac, 0x8}}, 0x0, &(0x7f0000001e40), &(0x7f0000001e80)=0x5}, 0x5, &(0x7f0000003200)=[{0x2, 0x10, &(0x7f0000001ec0)='vfat\x00', &(0x7f0000001f00)="ac48a91212d8cc36ed3702dbadc2bdf01c7c505c7fa1a91a5f148923954af1fb4840cf1b610fe718aa7db956930f468e4fe6ede8b93798612d9dfd1f96900c46d09c0874241a3b5059", 0x49, 0x20}, {0x3, 0xc, &(0x7f0000001f80)='vfat\x00', &(0x7f0000001fc0)="616a842b2256c206ebbd3111951caaaf2578bfb3d3f9625ad0f51dce90020dbe1eb1f850232639c9ef92aaf35123bb203eff7dce8604e47a03550ae68e464bd0b988e2587a6cfcda6176ca5c63c52c58bf1ee8ef3ff339e632068dd151547eaec2af0d097b6b99de8f9233e8345062aaf063bc4b4a74b2cd1eec91d9e0483133ed305d2becbdee359fd06b3e60314517186af9cb47ffa1", 0x97, 0x28}, {0x1, 0x9, &(0x7f0000002080)='&-):]#$:}\x00', &(0x7f00000020c0), 0x0, 0x20}, {0x1, 0x65e, &(0x7f0000002100)='}[}$}%%-,$/@#\x00', &(0x7f0000002140)="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", 0x1000, 0x28}, {0x3, 0x8001, &(0x7f0000003140)='vfat\x00', &(0x7f0000003180)="e993c8b5e3b74bf762fa6625eefa4718c153669bc3a79aef9fb941026e96b7e4ed621ddee38f769dda3d6ba54cc3c407e40dfd1455d9119b1bb35aab7fbb7641661c7f1bc4a857037f8300f437944313d92bebde5f048597c0d8", 0x5a, 0x1a}]}) syz_mount_image$vfat(&(0x7f00000001c0), &(0x7f00000002c0)='./file0\x00', 0x804, &(0x7f0000001ac0)=ANY=[@ANYBLOB="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"], 0x1, 0x2a6, &(0x7f0000000440)="$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") (async) syz_emit_ethernet(0x7e, &(0x7f0000003880)={@link_local, @broadcast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "ecff80", 0x48, 0x11, 0x0, @remote, @mcast2, {[], {0x0, 0x4e22, 0x48, 0x0, @wg=@cookie={0x4, 0x0, "7d91b3ccaf4c63521df8f969a9a3ef8377d86e2c440fb055", "8fc99fa615e832d5f00ce4a5807ebb53fbfc8fbe4761a7cfe44dcf957dbdc946"}}}}}}}, 0x0) (async) syz_mount_image$vfat(&(0x7f0000006040), &(0x7f0000006080)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x802077, 0x0, 0xfc, 0x0, &(0x7f0000006100)) 10.266200697s ago: executing program 0 (id=233): mmap(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x0, 0x4003171, 0xffffffffffffffff, 0x0) (async) r0 = syz_open_dev$mtd(&(0x7f0000000000), 0x260c, 0xa02) ioctl$MEMWRITEOOB(r0, 0xc0104d03, &(0x7f00000003c0)={0x54, 0x0, 0x0}) 10.145119505s ago: executing program 0 (id=236): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000140)={[{}, {@oldalloc}, {@resuid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@block_validity}, {@jqfmt_vfsv1}]}, 0x3, 0x447, &(0x7f0000000380)="$eJzs28tvG0UYAPBv10lKX8SU8ugDCBRExCNp0gI9cAGBxAEkJDiUY0jSqtRtUBMkWlW0IFSOqBJ3xIEDEn8BJ7gg4ITEFe6oUoV6aeFktPZuYjt2mocTF/z7SdvO7M5q5vPu2DM72QD61kj2TxKxKyJ+j4jhera5wEj9v1s3Lk7/fePidBLV6lt/JbVyN29cnC6KFuftzDOjaUT6aRIH2tQ7f/7C6alKZfZcnh9fOPP++Pz5C8+eOjN1cvbk7NnJY8eOHpl44fnJ57oSZ9amm/s/mju477V3rr4xffzquz9/mxTxt8TRJSMrHXyiWu1ydb21uyGdDPSwIaxJKSKyyzVY6//DUYqlizccr37S08YBm6parVZ3dj58uQr8jyXR6xYAvVH80Gfz32LboqHHHeH6S/UJUBb3rXyrHxmINC8z2DK/7aaRiDh++Z8vsy025zkEAECT77PxzzPtxn9p3N9Q7u58bagcEfdExJ6IuDci9kbEfRG1sg9ExINrrL91kWT5+Ce9tq7AVikb/72Yr201j/+K0V+US3ludy3+weTEqcrs4fwzGY3BbVl+YoU6fnjlt887HWsc/2VbVn8xFszbcW1gW/M5M1MLUxuJudH1jyP2D7SLP1lcCUgiYl9E7F9nHaee+uZgp2O3j38FXVhnqn4V8WT9+l+OlvgLycrrk+N3RWX28HhxVyz3y69X3uxU/4bi74Ls+u9oe/8vxl9OGtdr59dex5U/Pus4p1nd/V+91HhOdv8PJW/X0kP5vg+nFhbOTUQMJa/XG924f3Lp3CJflM/iHz3Uvv/viaVP4kBEZDfxQxHxcEQ8krf90Yh4LCIOrRD/Ty8//t76499cWfwza7r+S4mhaN3TPlE6/eN3TZWW1xJ/dv2P1lKj+Z7VfP+tpl3ru5sBAADgvyeNiF2RpGOL6TQdG6v/vfze2JFW5uYXnj4x98HZmfo7AuUYTIsnXcMNz0Mn8ml9kZ+M+LoxfyR/bvxFaXstPzY9V5npdfDQ53Z26P+ZP0u9bh2w6byvBf1L/4f+pf9D/9L/oX+16f/be9EOYOu1+/2/1IN2AFuvpf9b9oM+Yv4P/Uv/h/6l/0Nfmt8et39JXkJiWSLSO6IZEt1JpBHRtGf5d0W5F19QAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAG/RvAAAA//831udB") syz_mount_image$fuse(0x0, &(0x7f0000000100)='./bus\x00', 0x20020, 0x0, 0x1, 0x0, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000080)='./file0\x00', &(0x7f0000000340), &(0x7f0000000380), 0x2, 0x1) mmap$IORING_OFF_SQ_RING(0x0, 0x2fba, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys\x00', 0x1ff) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000280)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs2/custom1\x00', 0x0, 0x0) connect$unix(r1, &(0x7f0000000800)=@file={0x0, './sys/file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000880), 0x318, 0x0) recvmmsg(r1, &(0x7f00000008c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000900)=0x2) pipe2$9p(&(0x7f0000000940), 0x0) mount$9p_fd(0x0, &(0x7f0000000980)='./sys\x00', &(0x7f00000009c0), 0x2004000, 0x0) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) mknodat(0xffffffffffffff9c, &(0x7f0000000880)='./file0\x00', 0x11c0, 0x0) r4 = inotify_init1(0x0) inotify_add_watch(r4, &(0x7f00000008c0)='./file0\x00', 0xa4000061) inotify_add_watch(r4, &(0x7f0000000a00)='.\x00', 0xc100092e) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000a40)='fdinfo/3\x00') pread64(r5, &(0x7f0000000a80)=""/210, 0xd2, 0x57) ioctl$VT_DISALLOCATE(r3, 0x5608) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000000)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@index_on}]}) 8.985620093s ago: executing program 0 (id=240): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = memfd_create(&(0x7f0000000b00)='[\v\xdbX\xae[5\xa9\x90\xffc\x1f\x1a\xa9\xfd\xfa\xad\xd1md\xe7\xe2\x7f\x9b\xd5R\x10\xf3\xb6\xffT\xbf\xd1\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\x9fc\xda\xa9\x83r\xd8\x98\x00\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9', 0x0) write$binfmt_script(r1, &(0x7f0000000bc0)={'#! ', './file0'}, 0xb) pwrite64(r1, &(0x7f0000000c00)="12", 0x1, 0x2) execveat(r1, &(0x7f0000000c40)='\x00', 0x0, 0x0, 0x1000) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000000)=0x6a, 0x4) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f00000003c0)={0xa, 0x4e20, 0x0, @empty, 0x3}, 0x1c) 8.573401974s ago: executing program 0 (id=245): ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) r0 = syz_io_uring_setup(0x7689, &(0x7f0000000200)={0x0, 0x5410, 0x80, 0x3, 0x192}, &(0x7f0000000100), &(0x7f0000000140), &(0x7f00000000c0)) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000300)={'batadv_slave_0\x00', 0x0}) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000000)={r3, 0x1, 0x6, @multicast}, 0x10) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x48241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000180)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local}) io_uring_register$IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, &(0x7f0000000540)=[@ioring_restriction_register_op={0x0, 0x4}], 0x1) r6 = io_uring_setup(0x2f04, &(0x7f0000000580)={0x0, 0xca6b, 0x1000, 0x20004, 0xc7}) io_uring_register$IORING_REGISTER_BUFFERS(r6, 0x0, 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000002c0)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@newtfilter={0x80, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0xb, 0x7}, {0xfff1, 0xffff}, {0x300, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4c, 0x2, [@TCA_MATCHALL_ACT={0x48, 0x2, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x0, 0x0, 0x3}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x80}}, 0x0) write$tun(r4, &(0x7f0000000500)={@val={0x70}, @void, @eth={@broadcast, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x3c, 0x1c, 0x0, 0x0, 0x4, 0x2f, 0x0, @rand_addr=0x64010100, @multicast1}, {0x4e23, 0x6558, 0x8}}}}}}, 0x2e) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000001c0)=0x8) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000040)={r10, 0x3}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) io_uring_enter(r0, 0x1, 0x1, 0x1, 0x0, 0x0) 8.21167721s ago: executing program 32 (id=245): ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) r0 = syz_io_uring_setup(0x7689, &(0x7f0000000200)={0x0, 0x5410, 0x80, 0x3, 0x192}, &(0x7f0000000100), &(0x7f0000000140), &(0x7f00000000c0)) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000300)={'batadv_slave_0\x00', 0x0}) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000000)={r3, 0x1, 0x6, @multicast}, 0x10) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x48241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000180)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local}) io_uring_register$IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, &(0x7f0000000540)=[@ioring_restriction_register_op={0x0, 0x4}], 0x1) r6 = io_uring_setup(0x2f04, &(0x7f0000000580)={0x0, 0xca6b, 0x1000, 0x20004, 0xc7}) io_uring_register$IORING_REGISTER_BUFFERS(r6, 0x0, 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000002c0)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@newtfilter={0x80, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0xb, 0x7}, {0xfff1, 0xffff}, {0x300, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4c, 0x2, [@TCA_MATCHALL_ACT={0x48, 0x2, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x0, 0x0, 0x3}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x80}}, 0x0) write$tun(r4, &(0x7f0000000500)={@val={0x70}, @void, @eth={@broadcast, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x3c, 0x1c, 0x0, 0x0, 0x4, 0x2f, 0x0, @rand_addr=0x64010100, @multicast1}, {0x4e23, 0x6558, 0x8}}}}}}, 0x2e) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000001c0)=0x8) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000040)={r10, 0x3}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) io_uring_enter(r0, 0x1, 0x1, 0x1, 0x0, 0x0) 6.0739523s ago: executing program 4 (id=262): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) (async) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x844) (async) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x80000100008b}, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1e000) r1 = syz_create_resource$futex(&(0x7f0000000080)=0x1) r2 = syz_create_resource$futex(&(0x7f0000000100)=0x1) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x2, &(0x7f00000001c0)=[{0x20, 0x1, 0x7, 0x6}, {0x1, 0x9, 0xfc, 0x9}]}) (async) futex(r1, 0x5, 0x3, 0x0, r2, 0xfffffffd) (async) futex(r1, 0xc, 0x1, 0x0, r2, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) (async) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) (async) writev(0xffffffffffffffff, 0x0, 0x0) r3 = fsopen(&(0x7f0000001340)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x80) r5 = openat$cgroup_procs(r4, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) sendfile(r5, r5, 0x0, 0x200) 5.237506677s ago: executing program 4 (id=270): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x33) (async, rerun: 64) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 64) sendmsg$netlink(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="94000000000105060100000000000000020000003200018014000180080001007f000001080002007f0000011a0002800500010006000000060002003039000006000300001500003200028014000180080001007f000001080002007f0000011a0002800500010006000000060002000015000006000300303900000c0005800800010066747000080007"], 0x94}], 0x1}, 0x0) 5.101382893s ago: executing program 4 (id=273): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'hsr0\x00', 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(&(0x7f0000000180)=@nullb, &(0x7f0000000140)='./sys\x00', &(0x7f0000000740)='cgroup2\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys/devices/system/clockevents/clockevent0/unbind_device\x00', 0x400, 0x0) write(r2, &(0x7f0000000200)='lapic\n\x00', 0x6) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./sys/devices/system/clockevents/clockevent1/unbind_device\x00', 0x1, 0x0) write(r3, &(0x7f0000000280)='lapic\n\x00', 0x6) r4 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/devices/system/cpu/cpu1/online\x00', 0x1, 0x0) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000680)=0x7) sched_setscheduler(r5, 0x6, &(0x7f00000006c0)=0x555) r6 = socket$netlink(0x10, 0x3, 0x4) shmat(0xffffffffffffffff, &(0x7f0000ffc000/0x2000)=nil, 0x8000) writev(r6, &(0x7f0000000080)=[{&(0x7f0000000400)="480000001400190d09004beafd0d8c560a8447608000000000000000050000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x7b}], 0x1) ioctl$TCSETAF(r4, 0x5408, &(0x7f0000000700)={0x1, 0x3fe5, 0x6, 0x3, 0x10, "da7f974f53daa46c"}) write(r4, &(0x7f0000000380)='0\n\x00', 0x2) nanosleep(&(0x7f00000003c0)={0x0, 0x989680}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000480)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r9 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r9, 0x29, 0x40, &(0x7f0000000780)=@filter={'filter\x00', 0xe, 0x4, 0x398, 0xffffffff, 0x0, 0xd0, 0x1a0, 0xffffffff, 0xffffffff, 0x0, 0xd0, 0x2c8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'lo\x00', {0x1, 0xa, 0x10, 0x10, 0x10, 0x2710, 0xea60}}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3f8) r10 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r10, 0x29, 0x40, &(0x7f0000000b80)=@filter={'filter\x00', 0xe, 0x4, 0x340, 0xffffffff, 0x0, 0x1a0, 0x270, 0xffffffff, 0xffffffff, 0xd0, 0x1a0, 0x270, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xd0}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x9, 0x10, &(0x7f00000005c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8f}, {{0x18, 0x1, 0x1, 0x0, r8}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x900}, {0x85, 0x0, 0x0, 0x86}}, {}, [@jmp={0x5, 0x0, 0xd, 0x9, 0x0, 0xfffffffffffffffe, 0x10}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000640)='syzkaller\x00', 0x3, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="2c0000001000010428bd70000000000000000000", @ANYRES32=r1, @ANYBLOB="02000005a20800000b0001"], 0x2c}}, 0x0) 4.821392909s ago: executing program 4 (id=277): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)=@newtaction={0x60, 0x30, 0x1, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x3, 0x2, 0x20000000, 0xfffffff7, 0x80000000}, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x60}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1400000010000100000000000000000000000a0020000000000a01000000000000000000050000000900010073797a300000000064000000120a01000000000000000000050000000900010073797a30000000000900020073797a31000000000800030000000006300004"], 0xb0}, 0x1, 0x0, 0x0, 0x20004081}, 0x40800) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1400000010000100000000000000000000000a0020000000000a01000000000000000000050000000900010073797a300000000064000000120a01000000000000000000050000000900010073797a30000000000900020073797a31000000000800030000000006300004"], 0xb0}, 0x1, 0x0, 0x0, 0x20004081}, 0x40800) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000e40)={0x50, 0x2, 0x6, 0x5, 0x0, 0x0, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x2}]}]}, 0x50}}, 0x0) (async) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000e40)={0x50, 0x2, 0x6, 0x5, 0x0, 0x0, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x2}]}]}, 0x50}}, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) r4 = syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000180)='mnt\x00', 0x0, &(0x7f00000001c0), 0x0, 0x248, &(0x7f0000000200)="$eJzs3T9oFFkcB/DfzO5eLsly5O6ag4O7g+M47gIh1x3YxEYhICGICCpERGyURIgJdomVjYXWKqlsgtgZrdMEG0Ww8k+K2AgaLAwWWqzsTiLRbDBxN7uS+Xxg2JnZee/3hp3v221mNoDc6omIgYgoRERvRJQiIll/wB/Z0rO6OdO5MBJRqRx8ndSOy7Yza+26I2I6Iv6PiPk0idPFiMm5o0tvH+//+9JE6a8bc0c6W3qSq5aXFg+sXB+6eHvwv8kHj14OJTEQ5U/Oq/mSOvuKScRPO1HsG5EU2z0CtmL4/K0n1dz/HBF/1vJfijSyD+/y+Hfzpfj32mZtr7x6+Gsrxwo0X6VSqn4HTleA3EkjohxJ2hcR2Xqa9vVlv+GfFrrSM2Pj53pPjU2Mnmz3TAU0Szlicd/djjvdn+X/RSHLP7B7VfN/aHj2WXV9pdDu0QCtVM1/7/Gpf0L+IXfkH/JL/iG/5B/yS/4hv+Qf8kv+Ydf4frsN5B/yS/4hv+Qf8mt9/gGAfKl0tPsOZKBd2j3/AAAAAAAAAAAAAAAAAAAAG810LoysLa2qee9qxPLeiCjWq1+o/R/x2qNNu94k1cM+SrJmDTn2e4MdNOjmDt59vZVHuv3wfOfqb8X935rZW3nbLaZGI6YvRER/sbjx+ktWr7+v9+MX3i+daLBAg/Ycbm/997Otq1Wqs2+wkmQr/fXmnzR+qb3Wn3/Km/S5HWffNdgBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALfMhAAD//+M2bGo=") ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r4, 0xc0506617, &(0x7f0000000480)={@desc={0x1, 0x0, @desc4}, 0x10, 0x0, '\x00', @d}) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x0, 0xc, &(0x7f0000000880)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d00"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) (async) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) socket$nl_xfrm(0x10, 0x3, 0x6) (async) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000f00)={&(0x7f0000000f40)=@newsa={0x140, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3505, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @XFRMA_IF_ID={0x8, 0x1f, 0x2}]}, 0x140}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000001080)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000001100)=ANY=[@ANYBLOB="3801000018000100feffffff0001000000000000000000000000ffffe0000002fc0100000000000000000000000000010001071c4e230005000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c000000ac14142500000000000000000000000000000000000000009201000000000000a39b000000000000ffff0000000000001c250800000000000500000000000000fcffffffffffffff0000000000000000ffffffffffffffff00000000000000001f00000000000000fefffffffffffffffafffffffcffffff00000000800000000035000002"], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x0, 0xc, &(0x7f00000009c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000a00)={r5, &(0x7f0000000a40), &(0x7f0000000a80)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r5], 0x0, 0xc618, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r5], 0x0, 0xc618, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x16, 0xc, &(0x7f0000000d00)=ANY=[], &(0x7f0000000d40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d80)={r8, 0x2000000, 0xe, 0x0, &(0x7f0000000e00)="63eced8e46dc3f07df33c9f7b986", 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r4, 0xc080661a, &(0x7f0000000500)={@desc={0x1, 0x0, @desc4}}) (async) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r4, 0xc080661a, &(0x7f0000000500)={@desc={0x1, 0x0, @desc4}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x28011, r3, 0x4238000) r9 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r9) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r9, 0xfd900000000, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 4.353468143s ago: executing program 4 (id=280): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) vmsplice(0xffffffffffffffff, &(0x7f0000e79000)=[{&(0x7f00003fb000)="f7", 0x7ffff000}], 0x1, 0x0) r0 = syz_open_dev$dvb_dvr(&(0x7f0000000640), 0x0, 0x13f) ppoll(&(0x7f0000000740)=[{r0, 0x280}], 0x1, &(0x7f0000000780)={0x0, 0x989680}, 0x0, 0x0) mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) r2 = add_key$user(&(0x7f00000004c0), &(0x7f0000000500)={'syz', 0x2}, &(0x7f0000000540)="f5", 0x30, 0xfffffffffffffffe) openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x40, 0x9) r3 = add_key$user(&(0x7f00000005c0), &(0x7f0000000600), &(0x7f0000000640), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000680)={r2, r3, r2}, &(0x7f00000006c0)=""/83, 0xfffffffffffffe4f, 0x0) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000080)=@req3={0x7813, 0xffffffff, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) recvmsg$unix(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000140)=""/246, 0xf6}], 0x1}, 0x20) sendmmsg(r4, &(0x7f0000000240)=[{{0x0, 0xa9cc7003, &(0x7f0000000280)=[{&(0x7f00000002c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) setsockopt$sock_int(r4, 0x1, 0x21, &(0x7f0000000300)=0x5, 0x4) recvmsg$unix(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000003c0)=""/254, 0xfe}], 0x1}, 0x10000) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r5 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r5, 0x0, 0x48b, &(0x7f0000000000)={0x2, 'veth1_to_bridge\x00', 0x20}, 0x18) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1, 0x0, 0x0, 0x2) 4.212810923s ago: executing program 4 (id=281): r0 = socket$packet(0x11, 0x2, 0x300) capset(&(0x7f0000000280)={0x20071026}, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="02000000040000001a00000001"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x8, 0x10, &(0x7f0000000400)=ANY=[@ANYBLOB="18000000001900000000000000000000b7080000000000007baa00fe00000000b5080000000000197b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000001000000b705000008000000850000006900000095"], &(0x7f0000000480)='GPL\x00', 0x3, 0xffb, &(0x7f00000004c0)=""/4091}, 0x94) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="8c000000", @ANYRES16=r4, @ANYBLOB="010000000000000000000c00000018000180140002006261746164765f736c6176655f310000600003805c0003"], 0x8c}}, 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001900), 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001980)={r5}, 0x4) socket$nl_generic(0x10, 0x3, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000001cc0)={0x6, 0x11, &(0x7f0000001a80)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffff963}, [@call={0x85, 0x0, 0x0, 0x41}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r5}}]}, &(0x7f0000001b40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001b80)={r6, 0x0, 0x2100, 0x0, &(0x7f0000001c00), 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000240)={0x9, 0x2, {}, {0x0}, 0xafe, 0x8}) bpf$PROG_LOAD(0x5, &(0x7f00000014c0)={0x6, 0xe, &(0x7f0000001580)=ANY=[@ANYBLOB="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"/686], &(0x7f0000001840)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000001880), 0x3a, 0x10, &(0x7f00000018c0), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42) setresuid(0xffffffffffffffff, 0xee00, r7) setreuid(0xee01, 0xee01) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000001c00)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000001c40)={0x4, 0x0, &(0x7f0000001c80)=[@register_looper={0x40086315}]}) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="7800000013000100000000000000000007000000", @ANYRES8=r2, @ANYBLOB="000000000000000058001a8006000000010000004c0005804800088008000100010000000a000200000000000000000008000300000000000800040000000000080003000000000005000600000000000800070000000000050008"], 0x78}}, 0x0) 3.970487949s ago: executing program 33 (id=281): r0 = socket$packet(0x11, 0x2, 0x300) capset(&(0x7f0000000280)={0x20071026}, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="02000000040000001a00000001"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x8, 0x10, &(0x7f0000000400)=ANY=[@ANYBLOB="18000000001900000000000000000000b7080000000000007baa00fe00000000b5080000000000197b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000001000000b705000008000000850000006900000095"], &(0x7f0000000480)='GPL\x00', 0x3, 0xffb, &(0x7f00000004c0)=""/4091}, 0x94) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="8c000000", @ANYRES16=r4, @ANYBLOB="010000000000000000000c00000018000180140002006261746164765f736c6176655f310000600003805c0003"], 0x8c}}, 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001900), 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001980)={r5}, 0x4) socket$nl_generic(0x10, 0x3, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000001cc0)={0x6, 0x11, &(0x7f0000001a80)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffff963}, [@call={0x85, 0x0, 0x0, 0x41}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r5}}]}, &(0x7f0000001b40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001b80)={r6, 0x0, 0x2100, 0x0, &(0x7f0000001c00), 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000240)={0x9, 0x2, {}, {0x0}, 0xafe, 0x8}) bpf$PROG_LOAD(0x5, &(0x7f00000014c0)={0x6, 0xe, &(0x7f0000001580)=ANY=[@ANYBLOB="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"/686], &(0x7f0000001840)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000001880), 0x3a, 0x10, &(0x7f00000018c0), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42) setresuid(0xffffffffffffffff, 0xee00, r7) setreuid(0xee01, 0xee01) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000001c00)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000001c40)={0x4, 0x0, &(0x7f0000001c80)=[@register_looper={0x40086315}]}) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="7800000013000100000000000000000007000000", @ANYRES8=r2, @ANYBLOB="000000000000000058001a8006000000010000004c0005804800088008000100010000000a000200000000000000000008000300000000000800040000000000080003000000000005000600000000000800070000000000050008"], 0x78}}, 0x0) 3.922388926s ago: executing program 1 (id=285): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_open_dev$dri(&(0x7f0000000280), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(r1, 0xc06864b8, &(0x7f0000002480)={0x0, 0xc1, 0x80, 0x34325258, 0x0, [0x2], [0x80ffff]}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000002500), 0x6) ioctl$sock_bt_hci(r2, 0x400448dc, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0x3ff, 0x2000001, 0x5d031, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000400)='smaps\x00') r4 = inotify_init1(0x80800) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xb635773f066bbeeb, 0x12, r4, 0x0) read$FUSE(r3, &(0x7f0000000440)={0x2020}, 0x2020) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYRES16=r3], 0xa0}}, 0xc050) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) capset(&(0x7f0000000080)={0x20080522}, &(0x7f00000002c0)={0x200003, 0x200003, 0x801, 0x4, 0x7, 0x6}) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='loginuid\x00') socket$inet_smc(0x2b, 0x1, 0x0) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r0, 0x80089419, &(0x7f0000000240)) pwritev(r5, &(0x7f0000000340)=[{&(0x7f0000000380)='0', 0xfffffffffffffef9}], 0x1, 0x0, 0x0) write$binfmt_format(r5, &(0x7f00000003c0)='1\x00', 0x2) prlimit64(0x0, 0x4, 0x0, &(0x7f00000000c0)) 3.809609841s ago: executing program 3 (id=287): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000c40)=@filter={'filter\x00', 0xe, 0x4, 0x260, 0xffffffff, 0x0, 0x130, 0x1c8, 0xffffffff, 0xffffffff, 0x98, 0x130, 0x1c8, 0xffffffff, 0x4, 0x0, {[{{@ip={@empty, @empty, 0x0, 0x0, '\x00', '\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0xf, 0x7, 0x5b4}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2c0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x1b, &(0x7f0000000000)={@ipv4={'\x00', '\xff\xff', @multicast2}, 0x1, 0x0, 0x0, 0x0, 0x72, 0x2}, 0x20) syz_emit_ethernet(0x62, &(0x7f0000000f00)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x54, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x1000, 0x2000, 0x41424344, 0x0, 0x0, 0x0, 0x10, 0x1, 0xffff, 0x0, 0x0, {[@exp_smc={0xfe, 0x6}, @window={0x3, 0x3, 0xf}, @exp_fastopen={0xfe, 0x4}, @timestamp={0x8, 0xa, 0x18}, @md5sig={0x13, 0x12, "4e605bf25192a300c2efcb6d690c8f93"}]}}}}}}}, 0x0) 3.744663218s ago: executing program 3 (id=288): r0 = add_key$user(&(0x7f0000000100), &(0x7f0000000440), &(0x7f00000000c0), 0x0, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000040)={r0, r0, r0}, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000001080)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001100)={&(0x7f0000001140)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffffffd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x10}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x0, 0x2, 0x7, 0x200, 0x0, 0x8000, 0x8, 0x1000, 0xd}}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001240)=@delchain={0x3c, 0x65, 0x100, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0xfff5, 0x6}, {0xffff, 0xffff}, {0x2, 0x4}}, [@TCA_CHAIN={0x8, 0xb, 0x8}, @TCA_CHAIN={0x8, 0xb, 0x3}, @TCA_CHAIN={0x8, 0xb, 0x1ff}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20045005}, 0x0) r4 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000003c0)='./proc\x00', &(0x7f0000000400)='proc\x00', 0x4000, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./proc/thread-self/fail-nth\x00', 0x2, 0x1a2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) unshare(0x6020400) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000600)='ext3\x00', &(0x7f0000000640)='./file1\x00', 0x210000, &(0x7f0000000280)={[{@errors_continue}]}, 0x3, 0x583, &(0x7f0000000780)="$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") r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000d40)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) ftruncate(r7, 0x10000) r8 = syz_open_dev$dvb_frontend(&(0x7f0000000e00), 0x0, 0x2) ioctl$FE_SET_PROPERTY(r8, 0x40106f52, &(0x7f0000000e40)={0x3, &(0x7f0000000f80)=[{0x2a, '\x00', @st={0x4, [{0x2, @svalue=0x800000}, {0x2, @uvalue=0xfffffffffffffffb}, {0x0, @uvalue=0x9}, {0x2, @uvalue=0x7fffffffffffffff}]}, 0x7a7ce1c2}, {0x3e, '\x00', @buffer={"069ee7038ffbf36ba0ba006898448ff8dcc4d16d792dd19458e3036956543de3", 0x20}, 0x8}, {0x12, '\x00', @buffer={"c28a7981a1d0f3a9ad214f9b162758ec0c724514ea7a3c1492c541a96926e252", 0x20}, 0x7ff}]}) mount$fuse(0x0, &(0x7f0000000d80)='.\x00', &(0x7f0000000dc0), 0x2, &(0x7f0000000e80)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=00000000000000000010000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="000000000000000000005050199e1f5adf84443e7aa70df4bdb8f029ebe4d3f90974cee64aae451e157acd7990939c06000000f4f3e16a32e9888688b83ef6ae5e52807e000000feffc376f09c425e3d502710fc42cfac5a59c21100"/104, @ANYRESDEC=0x0, @ANYBLOB=',\x00']) sendfile(r6, r7, 0x0, 0x4000) openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000004c0)='./binderfs/binder-control\x00', 0x0, 0x0) write(r5, &(0x7f0000000500)='270', 0x3) socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r9, &(0x7f0000000540)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r9, &(0x7f0000000580)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r9, &(0x7f00000005c0), 0x800001d, 0x0) request_key(&(0x7f00000005c0)='rxrpc\x00', &(0x7f0000000180)={'syz', 0x2}, &(0x7f00000001c0)='.[\'\x00', r4) 3.693302347s ago: executing program 1 (id=289): r0 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'netdevsim0\x00', &(0x7f0000000080)=@ethtool_rxfh={0x1, 0x0, 0x8000, 0xf9, 0x1, "cda7c5", 0x9}}) 3.515465516s ago: executing program 1 (id=291): r0 = socket$unix(0x1, 0x1, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x8000, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000280)=0xf) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = syz_open_pts(r1, 0x1) ioctl$PIO_UNIMAPCLR(r3, 0x4b68, &(0x7f0000000200)={0x6, 0x719c, 0x4a0}) sendto$inet6(r2, &(0x7f0000000080)="f9", 0x1, 0x20000040, &(0x7f00000000c0)={0xa, 0x0, 0x2, @private2}, 0x1c) socket$inet_mptcp(0x2, 0x1, 0x106) r4 = syz_io_uring_setup(0x34b8, &(0x7f0000000680)={0x0, 0xc3b1, 0x80000, 0x1, 0x82, 0x0, 0x0}, &(0x7f0000000700)=0x0, &(0x7f0000000740)=0x0, &(0x7f0000000780)=0x0) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$llc(0xffffffffffffffff, &(0x7f00000007c0)={0x1a, 0x5, 0x1, 0x7, 0x1, 0x42, @remote}, 0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r8, 0x84, 0x83, &(0x7f0000000800)=@assoc_value={0x0}, &(0x7f0000000840)=0x8) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000880)={r9, 0x3}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) syz_io_uring_submit(r5, r6, r7, &(0x7f00000008c0)=@IORING_OP_CLOSE={0x13, 0x48, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r4, 0x1, 0x1, 0x1, 0x0, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x1a1500, 0x0) sendto$inet6(r2, &(0x7f0000000100)="ed", 0x1, 0x808d1, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @private0, 0x6}, 0x1c) shutdown(r2, 0x1) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x74, &(0x7f0000000180)={0x0, 0x0, 0x10, 0x5ed, 0x10000}, &(0x7f00000001c0)=0x18) socket(0x10, 0xa, 0x0) r10 = fcntl$dupfd(r1, 0x0, r0) ioctl$TCFLSH(r10, 0x400455c8, 0x0) r11 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000300)={0x1, &(0x7f0000000040)=[{0x6, 0x10, 0x1, 0xf47}]}) inotify_init1(0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r11, 0xc0502100, &(0x7f0000000380)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r11, 0xc0182101, &(0x7f0000000400)={r12, 0x80001, 0x80000004}) socket$inet6(0xa, 0x800000000000002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000640)={@ifindex, 0x2f, 0x670b88b485dc7421, 0xc8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 3.270431401s ago: executing program 3 (id=292): sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000)=0x8, 0x222d7866) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x200000, 0x0) ioctl$FBIO_WAITFORVSYNC(r0, 0x40044620, 0x0) r1 = gettid() process_vm_writev(r1, &(0x7f0000000200)=[{&(0x7f0000000080)}, {&(0x7f00000000c0)=""/9, 0x9}, {&(0x7f0000000100)=""/128, 0x80}, {&(0x7f0000000180)=""/127, 0x7f}], 0x4, &(0x7f00000002c0)=[{&(0x7f0000000240)=""/102, 0x66}], 0x1, 0x0) keyctl$restrict_keyring(0x1d, 0xffffffffffffffff, &(0x7f0000000300)='asymmetric\x00', &(0x7f0000000340)='$\x00') openat$ttynull(0xffffffffffffff9c, &(0x7f0000000380), 0xc0e80, 0x0) prlimit64(r1, 0x0, &(0x7f00000003c0)={0x80000000, 0x27a10616}, &(0x7f0000000400)) ioctl$NILFS_IOCTL_SET_SUINFO(r0, 0x40186e8d, &(0x7f00000004c0)={&(0x7f0000000440)=[{0x8, 0x860660620d0f43b5, 0x0, {0x4, 0x7, 0x2}}, {0x7, 0x0, 0x0, {0xb, 0x1, 0x2}}, {0x7fffffff, 0x0, 0x0, {0x46d006b2, 0xfffffc01, 0x2}}, {0x7fff, 0x2, 0x0, {0x7fff, 0x1, 0x1}}], 0x4, 0x20, 0x7, 0x9}) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000500)={0x2, 0x37, {r1}, {0x0}, 0x2, 0x6}) keyctl$get_persistent(0x16, r2, 0xfffffffffffffff8) r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f0000000540)=@abs={0x0, 0x0, 0x4e24}, 0x6e) r4 = socket$kcm(0x29, 0x7, 0x0) sendmsg$kcm(r4, &(0x7f00000006c0)={&(0x7f00000005c0)=@tipc=@nameseq={0x1e, 0x1, 0x0, {0x0, 0x2, 0x4}}, 0x80, &(0x7f0000000680)=[{&(0x7f0000000640)="5e8918f05c5965a39307e59e287fdb7d", 0x10}], 0x1}, 0x200400c0) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r5, 0x89f2, &(0x7f0000000780)={'syztnl2\x00', &(0x7f0000000700)={'syztnl0\x00', 0x0, 0x10, 0x0, 0x0, 0x8, {{0x10, 0x4, 0x3, 0x3, 0x40, 0x66, 0x0, 0xa0, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x11}, @broadcast, {[@timestamp_addr={0x44, 0x2c, 0xc3, 0x1, 0x7, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x6}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@private=0xa010100, 0x81}, {@broadcast}, {@broadcast, 0xf56b}]}]}}}}}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f00000007c0)={{0x1, 0x1, 0x18, r0, {0xffff}}, '\x00'}) syz_io_uring_setup(0xe, &(0x7f0000000800)={0x0, 0x490c, 0x5c28, 0x2, 0x1ba, 0x0, r6}, &(0x7f0000000880), &(0x7f00000008c0), &(0x7f0000000900)) r7 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_RECVERR(r7, 0x114, 0x5, &(0x7f0000000940), 0x4) setsockopt$inet_sctp6_SCTP_ASCONF_SUPPORTED(r6, 0x84, 0x80, &(0x7f0000000980)={0x1, 0x4}, 0x8) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x45, &(0x7f00000009c0)=0x7fffffff, 0x4) r8 = memfd_secret(0x80000) ioctl$vim2m_VIDIOC_REQBUFS(r8, 0xc0145608, &(0x7f0000000a00)={0xe1c, 0x3, 0x1, 0x0, 0xce}) ioctl$SIOCGSTAMP(r7, 0x8906, &(0x7f0000000a40)) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF_FLAGS(r8, 0x84, 0x7a, &(0x7f0000000a80)={0x0, 0xffffffffffffffff, 0x800}, &(0x7f0000000ac0)=0xc) getsockopt$inet_sctp6_SCTP_MAX_BURST(r9, 0x84, 0x14, &(0x7f0000000b00)=@assoc_value, &(0x7f0000000b40)=0x8) ioctl$PIO_UNISCRNMAP(r8, 0x4b6a, &(0x7f0000000b80)="40011d163579a4b789f8869d7e846698b7e7f585c565e12174b4e4793d383db33275df73aa659db77a8839dfea9fa304f992d79d68f3cbe1c6dcbe99b7dd53c1f760e231a1c24ca2ee22af658c6dbb3b8500d76b8f4423bbc3de5b9bcf15b3841e40959739d0d03116413e99273a99fde82a930fda6872319463cea71d2b162bb6b06603d3a5be2177ba204bbeab7320aa00ae22dbfd150c0fd3bfb2cafd0d0512f4237ab62a3b151d200e4ce0e43970e646592c5dffbc9b0f314aee283c409c3774c7ead1b8a7a1e45ec2dc06d1b679c823cfcef94387fafea831c2df690de331d0af86f2936b89b6232ef10941baaac412") ioctl$UI_DEV_SETUP(r8, 0x405c5503, &(0x7f0000000c80)={{0x4e, 0x1ff, 0x9, 0x5}, 'syz1\x00', 0x53}) 2.969581866s ago: executing program 3 (id=293): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000140)={[{}, {@oldalloc}, {@resuid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@block_validity}, {@jqfmt_vfsv1}]}, 0x3, 0x447, &(0x7f0000000380)="$eJzs28tvG0UYAPBv10lKX8SU8ugDCBRExCNp0gI9cAGBxAEkJDiUY0jSqtRtUBMkWlW0IFSOqBJ3xIEDEn8BJ7gg4ITEFe6oUoV6aeFktPZuYjt2mocTF/z7SdvO7M5q5vPu2DM72QD61kj2TxKxKyJ+j4jhera5wEj9v1s3Lk7/fePidBLV6lt/JbVyN29cnC6KFuftzDOjaUT6aRIH2tQ7f/7C6alKZfZcnh9fOPP++Pz5C8+eOjN1cvbk7NnJY8eOHpl44fnJ57oSZ9amm/s/mju477V3rr4xffzquz9/mxTxt8TRJSMrHXyiWu1ydb21uyGdDPSwIaxJKSKyyzVY6//DUYqlizccr37S08YBm6parVZ3dj58uQr8jyXR6xYAvVH80Gfz32LboqHHHeH6S/UJUBb3rXyrHxmINC8z2DK/7aaRiDh++Z8vsy025zkEAECT77PxzzPtxn9p3N9Q7u58bagcEfdExJ6IuDci9kbEfRG1sg9ExINrrL91kWT5+Ce9tq7AVikb/72Yr201j/+K0V+US3ludy3+weTEqcrs4fwzGY3BbVl+YoU6fnjlt887HWsc/2VbVn8xFszbcW1gW/M5M1MLUxuJudH1jyP2D7SLP1lcCUgiYl9E7F9nHaee+uZgp2O3j38FXVhnqn4V8WT9+l+OlvgLycrrk+N3RWX28HhxVyz3y69X3uxU/4bi74Ls+u9oe/8vxl9OGtdr59dex5U/Pus4p1nd/V+91HhOdv8PJW/X0kP5vg+nFhbOTUQMJa/XG924f3Lp3CJflM/iHz3Uvv/viaVP4kBEZDfxQxHxcEQ8krf90Yh4LCIOrRD/Ty8//t76499cWfwza7r+S4mhaN3TPlE6/eN3TZWW1xJ/dv2P1lKj+Z7VfP+tpl3ru5sBAADgvyeNiF2RpGOL6TQdG6v/vfze2JFW5uYXnj4x98HZmfo7AuUYTIsnXcMNz0Mn8ml9kZ+M+LoxfyR/bvxFaXstPzY9V5npdfDQ53Z26P+ZP0u9bh2w6byvBf1L/4f+pf9D/9L/oX+16f/be9EOYOu1+/2/1IN2AFuvpf9b9oM+Yv4P/Uv/h/6l/0Nfmt8et39JXkJiWSLSO6IZEt1JpBHRtGf5d0W5F19QAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAG/RvAAAA//831udB") syz_mount_image$fuse(0x0, &(0x7f0000000100)='./bus\x00', 0x20020, 0x0, 0x1, 0x0, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000080)='./file0\x00', &(0x7f0000000340), &(0x7f0000000380), 0x2, 0x1) mknodat(0xffffffffffffff9c, &(0x7f0000000880)='./file0\x00', 0x11c0, 0x0) r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f00000008c0)='./file0\x00', 0xa4000061) inotify_add_watch(r0, &(0x7f0000000a00)='.\x00', 0xc100092e) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000000)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@index_on}]}) 2.801981629s ago: executing program 3 (id=294): sendmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[], 0x18, 0xc011}, 0x400c0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000080)=0x100000001, 0x4) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000100), 0xffb2) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000140)=@ccm_128={{0x304}, "e3d9162be1b07411", "726c84d47b8e1c777b43316b24f98517", "6284695f", "296d4442c1ff8da4"}, 0x28) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x275a, 0x0) r2 = socket$l2tp6(0xa, 0x2, 0x73) getpeername$l2tp6(r2, 0x0, 0x0) write$cgroup_subtree(r1, &(0x7f00000001c0)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) socket$kcm(0x2, 0xa, 0x2) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$sock_netdev_private(r3, 0x89f3, &(0x7f0000000300)="1ccee46d6e20e12ada1cb1507248c58b680da9cea486c3b99bccbfb642de4b89ead93bf98658d2c9c7b6aa936bd381899d509c1fd301b7800b25c5b1e39e10ca3e1df112dc3d84811a4fa7dd99c6e71c64706f1e3623926988fffec580757b63a7986e21704fbc6a90fe8475a7d8e5da3d7bd6") socket(0x11, 0x2, 0x10001) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ptype\x00') preadv(r4, &(0x7f00000001c0)=[{&(0x7f0000000240)=""/179, 0xb3}], 0x1, 0x4f, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x4, &(0x7f0000000200)=@ccm_128={{0x303}, "a5820eff8ad320a2", "871a1000", "566c49a9", "08f473bb5c2e29c1"}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f00000011c0)={0x10, 0x16, &(0x7f0000001280)=ANY=[@ANYBLOB="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"], &(0x7f0000001380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @sk_msg}, 0x48) 2.390810168s ago: executing program 5 (id=297): ioctl$FE_SET_PROPERTY(0xffffffffffffffff, 0x40106f52, &(0x7f0000008400)={0x3, &(0x7f0000008440)=[{0x2e, '\x00', @buffer={"4a9f14176e2c9d74e7cfe84302932b57de6a2e2dc00a815b09ea42f96957915b", 0x20}, 0x4}, {0x1e, '\x00', @st={0x4, [{0x2, @svalue=0x6}, {0x2, @uvalue=0x4}, {0x3, @svalue=0x75}, {0x3}]}, 0x80009}, {0x1f, '\x00', @buffer={"e84ad8fc77000a80ab64f8ec00", 0x20}, 0xe6}]}) 2.269559675s ago: executing program 3 (id=298): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) r3 = syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000180), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000200)={0x0, &(0x7f0000000280)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r4, 0xc06864a1, &(0x7f0000000380)={0x0, 0x0, r5, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r4, 0xc06864ce, &(0x7f0000000400)={r6, 0x2, 0x40000004, 0x21000000, 0x2, [], [0x3, 0x0, 0x2, 0x9], [0xfffffffc, 0x0, 0xfffffffc], [0x1, 0x0, 0x7, 0xc01]}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3020, 0x1000004, 0x13, r3, 0x100000000) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x70bd28, 0x25dfdbfc, {0x2, 0x20, 0x11, 0xc8, r2}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}, 0x1, 0x0, 0x0, 0x823be637d8173150}, 0x40000c0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=@newlink={0x44, 0x10, 0x503, 0x70bd2a, 0x700, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3806}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8, 0x2, 0x2}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}}, 0x44) 2.264473513s ago: executing program 5 (id=299): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x1a2) getsockopt$inet6_mreq(r0, 0x29, 0x1c, &(0x7f0000000040)={@initdev}, &(0x7f00000000c0)=0x14) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000500)=@assoc_value, &(0x7f0000000540)=0x8) r2 = socket(0x2, 0x80805, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000340)={0x80}, 0x213) sendmsg$nl_route(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=@ipv6_getroute={0x1c, 0x1a, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}}, 0x1c}}, 0x0) sendmmsg$inet_sctp(r2, &(0x7f0000000580)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB], 0x30, 0x40}], 0x1, 0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, 0x0, 0x0) write(r0, &(0x7f0000000000)='270', 0x3) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_buf(r4, 0x6, 0xb, 0x0, &(0x7f0000000680)) socket$nl_route(0x10, 0x3, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) syz_genetlink_get_family_id$devlink(&(0x7f0000000380), r0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./sys\x00', &(0x7f00000001c0)='sysfs\x00', 0x400, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/module/zswap/parameters/compressor\x00', 0x2, 0x0) write(r5, &(0x7f0000000280)='lz4', 0x3) 2.090473145s ago: executing program 34 (id=298): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) r3 = syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000180), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000200)={0x0, &(0x7f0000000280)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r4, 0xc06864a1, &(0x7f0000000380)={0x0, 0x0, r5, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r4, 0xc06864ce, &(0x7f0000000400)={r6, 0x2, 0x40000004, 0x21000000, 0x2, [], [0x3, 0x0, 0x2, 0x9], [0xfffffffc, 0x0, 0xfffffffc], [0x1, 0x0, 0x7, 0xc01]}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3020, 0x1000004, 0x13, r3, 0x100000000) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x70bd28, 0x25dfdbfc, {0x2, 0x20, 0x11, 0xc8, r2}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}, 0x1, 0x0, 0x0, 0x823be637d8173150}, 0x40000c0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=@newlink={0x44, 0x10, 0x503, 0x70bd2a, 0x700, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3806}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8, 0x2, 0x2}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}}, 0x44) 2.074822601s ago: executing program 5 (id=301): getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f0000000000), &(0x7f00000000c0)=0x4) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'netdevsim0\x00', &(0x7f0000000080)=@ethtool_rxfh={0x1, 0x0, 0x8000, 0xf9, 0x1, "cda7c5", 0x9}}) 1.984471642s ago: executing program 5 (id=303): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000140)={[{}, {@oldalloc}, {@resuid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@block_validity}, {@jqfmt_vfsv1}]}, 0x3, 0x447, &(0x7f0000000380)="$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") syz_mount_image$fuse(0x0, &(0x7f0000000100)='./bus\x00', 0x20020, 0x0, 0x1, 0x0, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000080)='./file0\x00', &(0x7f0000000340), &(0x7f0000000380), 0x2, 0x1) mknodat(0xffffffffffffff9c, &(0x7f0000000880)='./file0\x00', 0x11c0, 0x0) r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f00000008c0)='./file0\x00', 0xa4000061) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000000)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@index_on}]}) 1.791866794s ago: executing program 5 (id=305): socket$igmp(0x2, 0x3, 0x2) socket(0x10, 0x803, 0x2) socket(0x2d, 0x2, 0x0) socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x7) r0 = getpid() socket$inet_icmp_raw(0x2, 0x3, 0x1) sched_setscheduler(r0, 0x1, &(0x7f0000000080)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000100)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000180), 0x651, 0x0) recvmmsg(r1, &(0x7f00000001c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) set_mempolicy(0x6005, &(0x7f0000000240)=0xfffffffffffffffd, 0x4) remap_file_pages(&(0x7f0000b71000/0x1000)=nil, 0x1000, 0x3000007, 0x7fffffffffffffff, 0x4000000) syz_clone3(&(0x7f0000000280)={0x22001500, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) madvise(&(0x7f000053c000/0x1000)=nil, 0x1000, 0x66) madvise(&(0x7f00005dd000/0x1000)=nil, 0x1000, 0x65) 1.501593925s ago: executing program 5 (id=306): socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000050c0)={0x34, r1, 0x1, 0x3, 0x0, {0x2c}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x0) ioctl$NILFS_IOCTL_GET_SUINFO(r0, 0x80186e84, &(0x7f0000000040)={&(0x7f0000000000)=[{0x2, 0x9, 0x2}], 0x1, 0x10, 0x1, 0x2}) 1.387735892s ago: executing program 35 (id=306): socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000050c0)={0x34, r1, 0x1, 0x3, 0x0, {0x2c}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x0) ioctl$NILFS_IOCTL_GET_SUINFO(r0, 0x80186e84, &(0x7f0000000040)={&(0x7f0000000000)=[{0x2, 0x9, 0x2}], 0x1, 0x10, 0x1, 0x2}) 1.232035242s ago: executing program 1 (id=307): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x4) mount(0x0, &(0x7f0000000100)='./proc\x00', &(0x7f0000000140)='proc\x00', 0x4000, 0x0) pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r1 = openat(r0, &(0x7f0000000040)='./proc\x00', 0x2, 0x140) write(r1, &(0x7f00000001c0)='27', 0x2) mkdirat(0xffffffffffffff9c, 0x0, 0x80) ioctl$F2FS_IOC_ABORT_ATOMIC_WRITE(0xffffffffffffffff, 0xf505, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000380)='.\x00', 0x0, 0x0) renameat(r2, &(0x7f00000003c0)='./cgroup.net/devices.allow\x00', r2, &(0x7f0000000400)='./cgroup.net/cgroup.procs\x00') r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x3c1, 0x3, 0x340, 0x158, 0x940c, 0x3002, 0x158, 0x2c0, 0x270, 0x3d8, 0x3d8, 0x270, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x120, 0x158, 0x0, {}, [@common=@hl={{0x28}, {0x1, 0x7}}, @common=@inet=@multiport={{0x50}, {0x1, 0xb, [0x4e24, 0x4e22, 0x4e23, 0x4e22, 0x4e24, 0x4e24, 0x4e21, 0x4e22, 0x4e20, 0x4e20, 0x4e23, 0x4e24, 0x4e22, 0x4e22, 0x4e21], [0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x10]}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x4, 0x2, 0x4}, {0xffffffffffffffff, 0x6}, {0x2, 0x3}, 0x3ff, 0x4}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xe}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'veth1_to_team\x00', {0x12}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x2004000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000800)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40000000002c0000000b0a990000000000000000000a0000020900010073797a31000000000c001040000000000000000214000000110001"], 0x90}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000008c0), 0x2, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000900)={'syzkaller0\x00', 0x1}) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000940)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000a00)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xd, 0xf}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x20040004) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000a40)={'syzkaller0\x00'}) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000a80), 0x0, 0x0) close(r9) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000ac0)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) socket$kcm(0x11, 0x2, 0x0) r10 = socket(0x400000000010, 0x3, 0x0) r11 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000b00)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000bc0)=@newtfilter={0xea4, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r12, {0x1, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0xe70, 0x2, [@TCA_MATCHALL_ACT={0xe6c, 0x2, [@m_pedit={0xe68, 0x1, 0x0, 0x0, {{0xa}, {0xe3c, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x2, 0x9, 0x20000000, 0x6}, 0x1, 0xfb}, [{0x2, 0xfffffffa, 0x9, 0x5, 0x2, 0x7}, {0x0, 0x6, 0x4, 0x10000, 0xfffffffd, 0x81}, {0x1, 0x1, 0x8, 0x101, 0x1}, {0x3, 0x3, 0x0, 0x7, 0x5, 0x4}, {0xf, 0x7, 0x9, 0x51, 0x6}, {0x3, 0x8004, 0xc, 0x101, 0x103, 0x84b5}, {0x9c, 0x4, 0x9, 0x2, 0x487, 0x8}, {0x1, 0x10000, 0x5, 0x4, 0x3, 0x8000}, {0x7, 0x9, 0x1ff, 0x8, 0x2, 0x7fff}, {0x439356e7, 0x609, 0x16, 0xfffffffc, 0x0, 0x6}, {0x5, 0x3, 0x8, 0x3, 0x400000, 0xffffffff}, {0x5, 0xfffffff8, 0x7, 0x7, 0x8, 0x5}, {0x8001, 0x8, 0xfffffffe, 0x5, 0xfffff000, 0x7}, {0x768d, 0xcd, 0x8, 0x7, 0x5, 0x10000}, {0xfffffffe, 0xfffffffb, 0x6, 0x5, 0x7ff, 0x5}, {0x23e, 0x6, 0xfffffffe, 0x6, 0x2}, {0xfffff9fd, 0x49, 0xa5f, 0xa, 0x5, 0x2}, {0x6, 0x9, 0x167, 0x2, 0x71, 0xa2}, {0x140, 0x2, 0xc, 0x6, 0x87}, {0x5, 0xa, 0x2, 0x4, 0x3, 0x2000}, {0x32d, 0x2008, 0x7fff, 0x4, 0x8, 0x9}, {0x6, 0x200, 0x58fe, 0x7ff, 0x4, 0x3}, {0x101, 0xd, 0x101, 0x0, 0xde4, 0x2}, {0x0, 0x3, 0x2, 0x1, 0x2, 0x9}, {0xffffffff, 0x1, 0x9, 0x0, 0x1, 0x4}, {0xc, 0xe, 0x0, 0x3, 0x8, 0x81}, {0x3, 0x3, 0x8006, 0xe, 0x0, 0x80}, {0xd, 0x638c, 0x7ff, 0x0, 0x80000000, 0x2}, {0x4, 0xb, 0x6c5f1878, 0x57c4, 0x8, 0x25ff}, {0x4, 0xd, 0x1fadd976, 0x3071, 0x0, 0x1}, {0x5, 0x800, 0x3, 0x3, 0x3, 0x9}, {0x9, 0x1ff, 0x1000, 0x9c, 0x1, 0x5}, {0x9, 0xd76, 0x6, 0xdc2, 0xa16a, 0x2}, {0x1ff, 0x5, 0x7, 0x2, 0x2, 0xffffffff}, {0x1, 0x32158140, 0x0, 0x8, 0x6, 0x7}, {0xe, 0x4, 0x9000, 0x5, 0x2, 0x7}, {0x3, 0x2ec74d53, 0x0, 0x0, 0x8, 0x2}, {0x5, 0xfff, 0xffffff13, 0x6, 0x2, 0x6}, {0x1, 0x6, 0x3, 0x4, 0xffb, 0xc}, {0x86, 0x6, 0x1ff, 0x8, 0x7ff, 0x8001}, {0x4, 0xffffffff, 0x0, 0xfffff740, 0x4, 0x4}, {0xffff, 0x5, 0x7, 0xac, 0xf, 0x8}, {0x5, 0x3, 0x6, 0xfff, 0x4, 0x8001}, {0xd, 0x3, 0x80000000, 0x0, 0xffffff81, 0x7ff}, {0xfffffffb, 0x2, 0x1ff, 0x5d, 0xffff8001, 0x800000}, {0x0, 0x6, 0x7ffc, 0x9, 0x500, 0x7}, {0x1, 0x5, 0x834, 0x7, 0x0, 0x3}, {0x7fff, 0x6, 0x0, 0x2002, 0x1, 0x8}, {0xf61, 0x101, 0x9, 0x2, 0x80000000, 0x7fff}, {0xc7, 0x1, 0x8, 0x2, 0xffff, 0x20000000}, {0x0, 0x5, 0x1, 0xffff, 0x3, 0x3}, {0x9, 0x10001, 0x9f98, 0x1, 0x8, 0x66a}, {0xfff, 0x6, 0x8, 0x80000001, 0x0, 0x7f}, {0xff, 0x6, 0x7f, 0x5, 0x3, 0xb}, {0x4, 0x4b, 0x0, 0x1, 0x7f, 0x7fffffff}, {0xfff, 0x47e4, 0x1, 0xffffffff, 0x80000001, 0x9}, {0x3, 0x4, 0x7, 0x6, 0x8, 0xe5}, {0x9, 0x9, 0x1, 0x9, 0x0, 0x2}, {0x8, 0x80000001, 0x7fff, 0xb2d9, 0xfffffffe, 0x8}, {0x80000001, 0xfcf6, 0x5202, 0x2, 0x53ce, 0x3}, {0x6, 0x4, 0x8, 0x8, 0x7f, 0x80000000}, {0xfffffff9, 0x9, 0x6, 0x6, 0x9, 0x3}, {0xfffffffd, 0x8, 0x6, 0x5, 0x3, 0x8f}, {0x741, 0x0, 0x9, 0x7fffffff, 0x2, 0x200}, {0x401, 0x2, 0x8, 0x4, 0x8000, 0xc6e9}, {0x1, 0x2d73, 0x40000000, 0x5, 0x9f17, 0xffffff7f}, {0xe, 0x401, 0x2b00, 0xfffff57b, 0xfffffc00, 0xd}, {0x3, 0x4, 0xc52b, 0x9, 0x5, 0xff}, {0x0, 0x4, 0x401, 0x0, 0x1, 0x9}, {0x8, 0x4, 0x1, 0x2, 0x10, 0x1}, {0xff, 0x8, 0x6, 0x5, 0xff, 0x5}, {0x2, 0xb15ce2d, 0x80000001, 0xbeab, 0x4, 0x5}, {0x3, 0x8, 0x3, 0x7, 0x8, 0x4}, {0xfff, 0x9, 0x6, 0x13, 0x100, 0x57}, {0x9, 0x5, 0x8, 0x3, 0xa, 0x2}, {0xb3, 0xe, 0x3, 0x7e8, 0x7, 0x9}, {0x400000ff, 0x7, 0x5, 0x10001, 0x2, 0x6}, {0x1, 0x8f, 0x9, 0xffffff46, 0x4, 0x88000000}, {0x9, 0x2, 0xfffffffc, 0x1, 0xd52, 0x3}, {0xd203, 0x7, 0x1, 0x10000, 0x43, 0x1ff}, {0x1004, 0x40003ff, 0xffffffff, 0x1, 0x5, 0x100}, {0x1ff, 0x3, 0x7ff, 0xfffffff8, 0x1ff, 0xfffffffc}, {0x7, 0x9, 0x83ff, 0x1, 0x7, 0x4}, {0x0, 0x6, 0x0, 0x6, 0xffff0001, 0xcca}, {0x9, 0x1, 0xfffffff1, 0x3ff, 0x100, 0x4}, {0x3, 0x9, 0x0, 0xed4, 0x4, 0x9}, {0x9, 0x7, 0x8001, 0x7, 0x2, 0x2}, {0x5, 0x0, 0x9, 0x5, 0xb5, 0x3}, {0x0, 0x1, 0x16, 0x5, 0xffffff01, 0xfff}, {0x7, 0x5, 0x2, 0xa5f, 0x0, 0x9}, {0x9, 0xffffffff, 0xe6b, 0xb, 0xb, 0x4}, {0x9, 0xffffff11, 0x1, 0x2, 0xff, 0x52e2}, {0x0, 0x1, 0x0, 0x7, 0xdb, 0x6}, {0x7, 0x400, 0x9, 0x8, 0xa, 0x104}, {0x81, 0x8, 0x988, 0x0, 0x0, 0x7}, {0xdc03, 0x7, 0x80, 0x8, 0xfffffff9, 0x8}, {0xa, 0xfffffffe, 0x1, 0x1ff, 0x1ff, 0xc1b7}, {0xa24b, 0x947d, 0x40, 0x4, 0x9, 0x2}, {0x9, 0x401, 0xa89, 0x5ef, 0x9, 0x8}, {0x4, 0x7fff, 0x0, 0x4, 0x7fffffff, 0x20}, {0x3, 0xb8c, 0x6, 0x21761f6a, 0x1, 0x4}, {0xfff, 0xda, 0x1d, 0x4, 0x8, 0x80000002}, {0x8, 0x10, 0x100, 0x0, 0xfffffff7, 0xc}, {0xfffff000, 0x8, 0xbc, 0x9, 0x9, 0x34b0}, {0x4, 0x8, 0x8, 0x3, 0x6cf4, 0x1}, {0x3, 0x3, 0x7, 0x5, 0xbe, 0x81}, {0x4, 0x800, 0x4000, 0x5, 0x8, 0xfa2f}, {0x3, 0x8d, 0x81, 0x2, 0x8, 0x6}, {0x9, 0x2, 0x6, 0x4, 0xf, 0x5}, {0x100, 0x1, 0x2, 0xffffffff, 0x9, 0x74}, {0x4, 0x4, 0x8, 0x1, 0x0, 0x3}, {0x8002, 0xfffffffb, 0xffffffff, 0x62f, 0x401, 0x30564e0}, {0x9a2f, 0x800, 0x8, 0x1, 0x80000000}, {0x20000009, 0x2, 0x800, 0x200, 0x9, 0x3}, {0x47, 0x6, 0x8936, 0xdcb, 0x7, 0x2}, {0x6, 0x80000000, 0x8, 0xe, 0xfffffffa, 0x8de3}, {0x0, 0x9, 0x8, 0xfff, 0x6, 0x1ff}, {0x8195, 0x2, 0x1000}, {0x1, 0x50, 0xff, 0x9e0f, 0x5, 0x3}, {0x7fff, 0x6, 0x0, 0x5, 0x8000, 0x3}, {0x7ff, 0x9, 0x9, 0x6, 0x7, 0xe77}, {0x1, 0x5e12, 0x3, 0xfffffffa, 0x2, 0x80000001}, {0xffffff8c, 0x9, 0x1, 0x1, 0x10, 0x5}, {0x7, 0x80007, 0x104, 0x78d, 0xffffcff7, 0x4c0c}, {0x1, 0xe, 0x7, 0x2, 0x2, 0x207f}, {0xf, 0x5, 0xfffffffa, 0xff, 0x80004, 0x81}, {0x1, 0x7ff, 0x696e, 0xa, 0x49d, 0xb}, {0x9bf4, 0x0, 0x5, 0x3, 0x3, 0x1000}], [{0x1, 0x1}, {0x2}, {}, {0x2}, {0x2, 0x745e81639ff0f356}, {0x4, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x3}, {0x2}, {0x3}, {}, {}, {0x2}, {0x2}, {}, {0x3}, {0x0, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x2}, {0x5}, {0x2, 0x1}, {0x1, 0x1}, {0x1}, {0x1, 0x1}, {0x5}, {0x4}, {0x3, 0x1}, {0x5, 0x1}, {0x36bc5bece03d104f}, {0x4, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {}, {0xa}, {0x3}, {0x3, 0x1}, {0x2}, {0x3}, {0x0, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x2}, {0x4}, {0x4, 0x1}, {0x4, 0x1}, {0x4}, {0x2}, {0x2, 0x1}, {0x5, 0x3}, {0x4, 0x1}, {0x1}, {0x4}, {0x0, 0x1}, {0x2}, {0x1, 0x1}, {0x3, 0x1}, {0x5}, {0x3, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {}, {0x2, 0x1}, {0x3}, {0x0, 0x1}, {}, {0x3}, {0x6}, {0xa}, {0x5b984eb6d5c686a1, 0x1}, {}, {0x5, 0x1}, {0x1}, {0x4}, {0x5}, {0x2590228f88cc2931}, {0x3, 0x1}, {0x4}, {0x0, 0x1}, {0x5, 0x1}, {0x6}, {0x2}, {0xb82e57098c7a44ef}, {0x3, 0x1}, {0x1}, {0x6, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x5}, {0x0, 0x1}, {0x4}, {0x4}, {0x0, 0x1}, {0x2}, {0x4, 0x1}, {0x1}, {0x1, 0x1}, {}, {0x3}, {0x1, 0x1}, {}, {0x4, 0x1}, {0x3}, {0x3}, {0x1}, {0x5}, {0x3, 0x1}, {0x4}, {0x3, 0x1}, {0x0, 0x1}, {0x4}, {0x4, 0x1}, {0x1}, {0x4, 0x1}, {0x4}, {0x0, 0x1}, {0x3}, {0x1}, {0x0, 0x1}, {0x4}], 0x1}}, @TCA_PEDIT_KEYS_EX={0x18, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}]}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0xea4}, 0x1, 0x0, 0x0, 0x10}, 0x0) 821.442016ms ago: executing program 2 (id=311): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$gtp(&(0x7f0000000000), r0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x40, r1, 0x1, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7, 0x37}}}}, [@NL80211_ATTR_MEASUREMENT_DURATION_MANDATORY={0x4}, @NL80211_ATTR_SCAN_FREQUENCIES={0x14, 0x2c, 0x0, 0x1, [{0x8, 0x0, 0xf}, {0x8, 0x0, 0x9}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x4c840) (async) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_SYS_GET(r2, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x18, 0x1406, 0x100, 0x70bd26, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x18}, 0x1, 0x0, 0x0, 0x4048004}, 0x0) (async) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_int(r3, 0x29, 0xa, &(0x7f0000000280)=0x8, 0x4) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_WDS_PEER(r4, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x40, r1, 0x2, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x9, 0xb}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}]}, 0x40}, 0x1, 0x0, 0x0, 0x84}, 0x800) (async) epoll_create1(0x80000) (async) syz_genetlink_get_family_id$nfc(&(0x7f00000003c0), 0xffffffffffffffff) (async, rerun: 64) r5 = socket$inet_tcp(0x2, 0x1, 0x0) (rerun: 64) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000400)={'wlan0\x00'}) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r3, 0xc0709411, &(0x7f0000000640)={{r6, 0x7fff, 0x0, 0x7, 0x5, 0x0, 0x10000, 0x4, 0x9, 0xfffffffe, 0x5, 0x1, 0x6ee, 0x4, 0x6}, 0x10, [0x0, 0x0]}) (async) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f00000006c0)={0x2, 0x7}, &(0x7f0000000700)=0xc) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000740)={r7, 0xd18, 0x9, 0xf}, &(0x7f0000000780)=0x10) (async) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r5, 0x8982, &(0x7f00000007c0)={0x6, 'pimreg0\x00', {0x4}, 0x9}) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000840), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(r8, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x14, r9, 0x4, 0x70bd2a, 0x25dfdbfd, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x20048015) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000980)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_INTERFACE(r0, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x60080120}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x1c, r1, 0x10, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r10}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004815}, 0x60400c0) (async) ioctl$sock_SIOCSIFBR(r2, 0x8941, &(0x7f0000000a80)=@generic={0x1, 0x2, 0x2}) r11 = socket$inet_udp(0x2, 0x2, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000ac0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000b00)=0x14) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r11, 0x89f8, &(0x7f0000000bc0)={'tunl0\x00', &(0x7f0000000b40)={'ip_vti0\x00', r12, 0x8, 0x1, 0x80, 0x4, {{0xc, 0x4, 0x1, 0x25, 0x30, 0x68, 0x0, 0x40, 0x29, 0x0, @rand_addr=0x64010102, @private=0xa010101, {[@ssrr={0x89, 0xf, 0x6f, [@rand_addr=0x64010100, @multicast1, @multicast1]}, @noop, @rr={0x7, 0xb, 0x77, [@empty, @loopback]}]}}}}}) (async) connect$unix(r5, &(0x7f0000000c00)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmsg$NLBL_UNLABEL_C_STATICLIST(r8, &(0x7f0000000d80)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000cc0)={0x68, 0x0, 0x700, 0x70bd2a, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'geneve0\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth0_to_batadv\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @local}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth1_to_hsr\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}]}, 0x68}, 0x1, 0x0, 0x0, 0x855}, 0x840) 489.436671ms ago: executing program 1 (id=312): r0 = syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1800040, &(0x7f0000000240)={[{@barrier}, {@nodioread_nolock}, {@noquota}, {@barrier}, {@block_validity}, {@nodioread_nolock}, {@noauto_da_alloc}, {@resuid}, {@noblock_validity}]}, 0x1, 0x59c, &(0x7f0000001840)="$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") r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_VERSION(r1, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20042201}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x40, 0x0, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @rand_addr=' \x01\x00'}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x8}]}, 0x40}}, 0x4) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0xd02, 0x15) pwrite64(r2, &(0x7f0000000140)='2', 0xfdef, 0xc00) r3 = openat(r0, &(0x7f0000000280)='./file1\x00', 0x12242, 0x91) ioctl$F2FS_IOC_SET_COMPRESS_OPTION(r0, 0x4002f516, &(0x7f0000000040)={0x4a, 0x3}) write(r3, &(0x7f0000000300)="af2858cc7171", 0x6) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000340)=@framed={{}, [@ldst={0x1, 0x0, 0x4, 0x0, 0xa, 0xfe00}]}, &(0x7f0000000380)='syzkaller\x00', 0xf}, 0x90) setsockopt$netlink_NETLINK_CAP_ACK(r4, 0x10e, 0xa, &(0x7f0000000100)=0x3ff, 0x4) write$FUSE_INIT(r3, &(0x7f0000004400)={0x50, 0x0, 0x0, {0x7, 0x2d, 0x3, 0x40540010, 0xb6, 0xa5, 0x100001, 0x2ad, 0x0, 0x0, 0x19, 0x81}}, 0x50) 489.152067ms ago: executing program 2 (id=313): ioctl$DVB_DVR_DMX_EXPBUF(0xffffffffffffffff, 0xc00c6f3e, &(0x7f0000000100)={0xffff8001, 0x80000, 0xffffffffffffffff}) r1 = fsmount(r0, 0x0, 0xf7) r2 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x2300) ioctl$BLKIOOPT(r2, 0x1279, &(0x7f00000000c0)) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f0000000000)=0x0) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r1, 0x118, 0x1, &(0x7f00000001c0)=0x12c, 0x4) bind$nfc_llcp(r3, &(0x7f0000001040)={0x27, r5, 0xfffffffe, 0x4, 0x0, 0x4, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000000200000000001900", 0x3f}, 0x60) set_mempolicy(0x8006, &(0x7f0000000200)=0xfff, 0x5) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2) close(r4) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'macvlan0\x00', 0x200}) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000140)={r0, r1, 0x1e, 0x0, @void}, 0x10) 337.803259ms ago: executing program 1 (id=315): r0 = syz_usb_connect$uac2(0x6, 0xbd, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x10, 0x2b73, 0x34, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xab, 0x3, 0x1, 0xf1, 0xe0, 0x6, {0x8, 0xb, 0x2, 0x0, 0x1, 0x8, 0x20, 0x1}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x1, 0x2, 0x3b}, [@mixer_unit={0xb, 0x24, 0x4, 0x4, 0x3, "2f084a2abd3a"}, @source_unit={0x8, 0x24, 0xa, 0xe5, 0x2, 0x1, 0x0, 0x4}, @input_terminal={0x10, 0x24, 0x2, 0x2, 0x100, 0x1, 0xa, 0x1, 0xb, 0x7f, 0x3, 0x5}, @source_unit={0x8, 0x24, 0xa, 0x4, 0x3, 0x6, 0x1f, 0x2}, @multiply_unit={0x7, 0x24, 0xc, 0xfc, 0x9, 0x1d, 0xa}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x73d3, 0x3ff, 0xb6, 0x7}]}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x1, 0x1c, 0xb, {0x8, 0x25, 0x1, 0x0, 0x0, 0x6, 0x9}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x2, 0x8}]}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0x5, 0xc9, 0xf, {0x8, 0x25, 0x1, 0x1, 0x3f, 0x6, 0x3ff}}}}}}}}]}}, &(0x7f0000000400)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x110, 0xfc, 0x0, 0x1, 0x20}, 0x59, &(0x7f0000000100)={0x5, 0xf, 0x59, 0x6, [@wireless={0xb, 0x10, 0x1, 0xc, 0xa6, 0x4, 0x0, 0x8, 0x5}, @ssp_cap={0x14, 0x10, 0xa, 0x7, 0x2, 0x4, 0xf, 0x8eca, [0xfe9f80, 0x60]}, @ptm_cap={0x3}, @ssp_cap={0x1c, 0x10, 0xa, 0x4, 0x4, 0x4, 0xf000, 0xadc, [0x0, 0xc0e8, 0x0, 0xffc00f]}, @wireless={0xb, 0x10, 0x1, 0x2, 0x20, 0x0, 0x10, 0x4, 0x5}, @wireless={0xb, 0x10, 0x1, 0x4, 0x12, 0x4, 0x9, 0x7, 0x78}]}, 0x4, [{0xde, &(0x7f0000000180)=@string={0xde, 0x3, "8246897873cf63981ffa08f3a71f37136d974dcd9c05bf88cedfd19b71e55527f7820c0613ea18fc23af65e75d936cf0089d9b67b0daff4cb1cda7f2ae11248ccfc944d7277e38efa2c78c9b94430c188d547957a3697db097ea88dbbec34ece14952ce57fc93f1e2e8b892de51d19a46bbb83f496e839cfca489b7e681bea444c78942608c8ca01dc664aea3a6b1e6d343929ea55fb2dac3e513901075bf81d3e6cd42c47d5df26566fb7bb32e69f73f5296010cf6c3a3a8c880674cf6587b7f78963f878917f9557b25ba4b2eb3774398794410f989a5ca211e49d"}}, {0xda, &(0x7f0000000280)=@string={0xda, 0x3, "51fb2293453d56383fdc8329dbb54f65a349a05130a40d88fe12d262c8bf890b56acce2a5e62d527b6b7096fb3cb278dda038ecb118dc06553626e070b9ab809ea31b80a9a506da32ab51d28859fe8cfe80ff334df10b433e50d81c0387aad4fc33602146bce851bcebbaacf296dc4af8ba63b38b695c3aa8eae469345795e313e49d5602b808a1a0f39f938e84aa6876cbb41844e35bf4337e799b77e4e9feef22d21386b67e13a30ebb77d99aabff64dadbf9affe8574b548b2c27f51eac4e71a9caf6bfd9378001555618fd3459fbea521a08f844f34a"}}, {0x2a, &(0x7f0000000380)=@string={0x2a, 0x3, "65c29e7e9d3dfd4e216bbc40fc0102f3caf7502564466aa092e91328856ae010e36bc614ed226c9c"}}, {0x10, &(0x7f00000003c0)=@string={0x10, 0x3, "6c602f8d94c4bf9d60e429b8d04f"}}]}) syz_usb_control_io$uac2(r0, &(0x7f00000005c0)={0x14, &(0x7f0000000480)={0x20, 0x11, 0x27, {0x27, 0x31, "944a9890fb651b0119815745f11e9370e630406855635a29d6686ffa8731cfe4bd34879fc5"}}, &(0x7f00000004c0)={0x0, 0x3, 0xe9, @string={0xe9, 0x3, "803b07a518fbfe3b7e8a439ce77b9b0e106d9c42920f287d27c5dde901dace4ee7178b192a53559dda0fd4625446f5151faf07192de2a596a2eeb27c8ccbc98b167165eb0958fae0d46a1e3d729e0979c1546f6732e3f29dcff74bea3ea78c8d95d2126bb49207d7de668ebe378ebf9284e71937d7fa13e127c16a01363aa2ea016e603d89ce6b8a3115db4b036d91163799d2386321d6c611b3bb7f66093a203294365a3b8688987f6a0fb53b9d9df86d72695cebf08ed0541a7b02d9fb4e160cc2977f479e39a66236e98de1fe093411718db076ad7411e05e36a107f19172171b4ad4aa81da"}}}, &(0x7f0000000880)={0x44, &(0x7f0000000600)={0x40, 0xa, 0x7b, "b4eb2242d4f3548cd894b06ba97f93228d71f6a2d2af43483698c02ca6c6795ede58d781655a4093028ac43c5f4112aaca9022fbdfef8467f558879c78467a6141e00b5e0d8ddafcef2e4983e1303cc87f8144139ead896b8677fc8295b0c1d38f340e1708590a060c5badfdada164239a18f0745d0772f83901dd"}, &(0x7f00000006c0)={0x0, 0xa, 0x1, 0x38}, &(0x7f0000000700)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000000740)={0x20, 0x81, 0x1, "fb"}, &(0x7f0000000780)={0x20, 0x82, 0x1, "e1"}, &(0x7f00000007c0)={0x20, 0x83, 0x3, "6c3bc9"}, &(0x7f0000000800)={0x20, 0x84, 0x4, "4b2defeb"}, &(0x7f0000000840)={0x20, 0x85, 0x3, "c21960"}}) r1 = syz_open_dev$vcsn(&(0x7f0000000900), 0x1, 0x0) ioctl$PPPIOCSFLAGS1(r1, 0x40047459, &(0x7f0000000940)=0x10000) (async) ioctl$PPPIOCSFLAGS1(r1, 0x40047459, &(0x7f0000000940)=0x10000) syz_usb_control_io$sierra_net(0xffffffffffffffff, &(0x7f0000000a80)={0x14, &(0x7f0000000980)={0x40, 0x11, 0xb9, {0xb9, 0x3, "0dcc9ccf0048f48fbf5f6b4289cb50243d09b580fab39143b04520d420a42e8fc039870714a682dd8e8a5f47a88159f41e0cb9ea993a550352b85f1ba1c5b61d07fb1af309fad22530667303e6967ceae47715d163397d03d267ee3bfb15911019f9b006fd5fdbba8bda55a0680ed9dee26a640ed127104cc763f13525c696b97d69610cac3cb6ccb363c8d030908a7dbd9d56dace8d708da24cf6f181a869be6b4ae3f733c39518393bf173d30850c5a62d1acbebdc20"}}, &(0x7f0000000a40)={0x0, 0x3, 0x28, @string={0x28, 0x3, "9a63d955aad254aabf87fc4b4727e9c794fdff99e8b119f9435279dccfe057d220dce9ea270a"}}}, &(0x7f0000000fc0)={0x1c, &(0x7f0000000ac0)={0x0, 0xc, 0x69, "cd2d6c09afaa9d434fa6a4d74d5d6b1bd044aba332babc20a37c634b6f62f234a6876e0a269e6bd225a59baa6fb01ae288be0f4119a2d17aa3f76bc587de5ac46023f794c28d9c3e01479d3f9ae4457ac6678769a4da270aa91eceba3816efdcc3e09f7a619243a134"}, &(0x7f0000000b40)={0xa1, 0x1, 0x400, "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"}, &(0x7f0000000f80)}) pwritev(r1, &(0x7f0000001200)=[{&(0x7f0000001000)="1a0e4ee706984d7f0553d426c2699f83dda646cddf6b15896722", 0x1a}, {&(0x7f0000001040)="039554398dbdba6722774fb39a36588883545715dea99a08e5f2cfc0cac3dc759145f5cab1b51c07c32d08671648df8c16045ea581ddd534db087ea9f6d0dcc72a33da60116b1bae70f35418ddc922e8582590f867296b", 0x57}, {&(0x7f00000010c0)="9ae4dd4d661a1b9a83f3c363c11d11aac7f04a207ab885d242ff34f0365f235d661d3870633598faa6936d613c621fdf101d4d47d7273e813bbeb663c670709205c4fb78b010f8675aeecb0f8654b346518f316bfa1f21b4497d2db810299eaaa8fbb4a5aecc91f11bf08c13eb68772c5b8335", 0x73}, {&(0x7f0000001140)="d629d9c62882b6acda3f3c010fb0941c370e9173fafd253914db30cfd97e7f04c4e9e70a7a6a00374cdc9367aed2add2a18498f96b4ab4c5329fae", 0x3b}, {&(0x7f0000001180)="bc6fa66e54a7340687b81cb7163ed355f0d3e57e5a63483df93cbf699d4bce4c255efaf0c09e810066ce975b2ebb7c72efdd7d4bc0bb62a7e97d753696e58d90d9f35be8dd18c748a022606e5508cff0b6", 0x51}], 0x5, 0x0, 0x7) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f00000012c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000001300)={'wpan3\x00', 0x0}) read$FUSE(r1, &(0x7f0000001340)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f0000003400)={&(0x7f0000001280)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000033c0)={&(0x7f0000003380)={0x24, r2, 0x400, 0x70bd2d, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_PID={0x8, 0x1c, r4}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x40010) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000003440), r5) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000003480)=0x83) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000003500)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_GET_WPAN_PHY(r5, &(0x7f0000003600)={&(0x7f00000034c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000035c0)={&(0x7f0000003540)={0x64, r2, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x180000003}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x64}, 0x1, 0x0, 0x0, 0x40c0}, 0x800) (async) sendmsg$NL802154_CMD_GET_WPAN_PHY(r5, &(0x7f0000003600)={&(0x7f00000034c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000035c0)={&(0x7f0000003540)={0x64, r2, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x180000003}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x64}, 0x1, 0x0, 0x0, 0x40c0}, 0x800) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CALIPSO_C_LIST(r8, &(0x7f0000003700)={&(0x7f0000003640)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000036c0)={&(0x7f0000003680)={0x3c, r6, 0x400, 0x70bd2a, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_DOI={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x810}, 0x11) (async) sendmsg$NLBL_CALIPSO_C_LIST(r8, &(0x7f0000003700)={&(0x7f0000003640)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000036c0)={&(0x7f0000003680)={0x3c, r6, 0x400, 0x70bd2a, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_DOI={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x810}, 0x11) ioctl$NILFS_IOCTL_SET_SUINFO(r1, 0x40186e8d, &(0x7f0000003800)={&(0x7f0000003740)=[{0xfff, 0x2, 0x0, {0x4, 0x7fff}}, {0x6, 0x0, 0x0, {0x401, 0xa8eb, 0x2}}, {0x200, 0x0, 0x0, {0xa0, 0x800}}, {0x7fffffffffffffff, 0x0, 0x0, {0x8b2, 0x200, 0x2}}, {0x8, 0x2, 0x0, {0x4bc4, 0x4}}, {0x7, 0x0, 0x0, {0x8ae, 0x0, 0x2}}], 0x6, 0x20, 0x5, 0x2}) (async) ioctl$NILFS_IOCTL_SET_SUINFO(r1, 0x40186e8d, &(0x7f0000003800)={&(0x7f0000003740)=[{0xfff, 0x2, 0x0, {0x4, 0x7fff}}, {0x6, 0x0, 0x0, {0x401, 0xa8eb, 0x2}}, {0x200, 0x0, 0x0, {0xa0, 0x800}}, {0x7fffffffffffffff, 0x0, 0x0, {0x8b2, 0x200, 0x2}}, {0x8, 0x2, 0x0, {0x4bc4, 0x4}}, {0x7, 0x0, 0x0, {0x8ae, 0x0, 0x2}}], 0x6, 0x20, 0x5, 0x2}) syz_genetlink_get_family_id$ieee802154(&(0x7f0000003880), r8) (async) r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000003880), r8) sendmsg$IEEE802154_DISASSOCIATE_REQ(r8, &(0x7f0000003940)={&(0x7f0000003840)={0x10, 0x0, 0x0, 0x4000088}, 0xc, &(0x7f0000003900)={&(0x7f00000038c0)={0x34, r9, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0x3}, @IEEE802154_ATTR_REASON={0x5, 0x12, 0xff}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa1}, @IEEE802154_ATTR_REASON={0x5, 0x12, 0x6}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x1) sendmsg$NLBL_CALIPSO_C_REMOVE(r5, &(0x7f0000003a40)={&(0x7f0000003980)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000003a00)={&(0x7f00000039c0)={0x24, r6, 0x100, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x95) sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r8, &(0x7f0000003b40)={&(0x7f0000003a80)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000003b00)={&(0x7f0000003ac0)={0x34, r2, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5, 0x12, 0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x10) sendmsg$IEEE802154_LLSEC_ADD_KEY(r8, &(0x7f0000003c80)={&(0x7f0000003b80)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000003c40)={&(0x7f0000003bc0)={0x6c, r9, 0x2, 0x70bd2d, 0x25dfdbfe, {}, [@IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0x2}, @IEEE802154_ATTR_SHORT_ADDR={0x6}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0xf}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa0}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_LLSEC_KEY_USAGE_COMMANDS={0x24, 0x32, "ee444b10d3c4e5c0dcdf2cf7a7712b08775be79dce3b6997ea84d522ad380d5b"}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20000000}, 0x14) ioctl$DVB_DVR_DMX_QUERYBUF(r1, 0xc0186f3d, &(0x7f0000003cc0)={0x2, 0x6, 0x4, 0x2, 0x2, 0x7}) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003d40), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000003d80)={'wlan1\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000003d80)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r1, &(0x7f0000003e40)={&(0x7f0000003d00)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000003e00)={&(0x7f0000003dc0)={0x24, r10, 0x8, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x74d}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x14) (async) sendmsg$NL80211_CMD_SET_STATION(r1, &(0x7f0000003e40)={&(0x7f0000003d00)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000003e00)={&(0x7f0000003dc0)={0x24, r10, 0x8, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x74d}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x14) dup(r1) (async) dup(r1) sendmsg$NL80211_CMD_SET_PMK(r1, &(0x7f0000003fc0)={&(0x7f0000003e80)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000003f80)={&(0x7f0000003ec0)={0xc0, r10, 0x100, 0x70bd29, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x8, 0x3d}}}}, [@NL80211_ATTR_PMK={0x14, 0xfe, "1be66bb3e471b4059d95cee1eec53c73"}, @NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "c9fab579c7b4bb71f4f090bf5858136b"}, @NL80211_ATTR_PMK={0x14, 0xfe, "efa6fef3b697acf58022fee2b8db56bd"}, @NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "f28427322d88c125ec8cd24d6dd022fa"}, @NL80211_ATTR_PMK={0x14, 0xfe, "6d4d0bfc235a192da1a0c047f4708c6d"}, @NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "d0861c0ffa4a8d36a41c79424855d748"}, @NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "e115fdb77c68ebefa05a287ffd848c30"}, @NL80211_ATTR_PMK={0x14, 0xfe, "602ed729904fe752d83e8deea9ccbb3a"}]}, 0xc0}, 0x1, 0x0, 0x0, 0x8004}, 0x0) (async) sendmsg$NL80211_CMD_SET_PMK(r1, &(0x7f0000003fc0)={&(0x7f0000003e80)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000003f80)={&(0x7f0000003ec0)={0xc0, r10, 0x100, 0x70bd29, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x8, 0x3d}}}}, [@NL80211_ATTR_PMK={0x14, 0xfe, "1be66bb3e471b4059d95cee1eec53c73"}, @NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "c9fab579c7b4bb71f4f090bf5858136b"}, @NL80211_ATTR_PMK={0x14, 0xfe, "efa6fef3b697acf58022fee2b8db56bd"}, @NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "f28427322d88c125ec8cd24d6dd022fa"}, @NL80211_ATTR_PMK={0x14, 0xfe, "6d4d0bfc235a192da1a0c047f4708c6d"}, @NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "d0861c0ffa4a8d36a41c79424855d748"}, @NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "e115fdb77c68ebefa05a287ffd848c30"}, @NL80211_ATTR_PMK={0x14, 0xfe, "602ed729904fe752d83e8deea9ccbb3a"}]}, 0xc0}, 0x1, 0x0, 0x0, 0x8004}, 0x0) sendmsg$TIPC_CMD_GET_NODES(0xffffffffffffffff, &(0x7f0000004100)={&(0x7f0000004000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000040c0)={&(0x7f0000004080)={0x1c, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20044000}, 0x40) (async) sendmsg$TIPC_CMD_GET_NODES(0xffffffffffffffff, &(0x7f0000004100)={&(0x7f0000004000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000040c0)={&(0x7f0000004080)={0x1c, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20044000}, 0x40) 270.974527ms ago: executing program 2 (id=316): socket$inet(0x2, 0x4000000000000001, 0x0) r0 = memfd_create(&(0x7f0000000b00)='[\v\xdbX\xae[5\xa9\x90\xffc\x1f\x1a\xa9\xfd\xfa\xad\xd1md\xe7\xe2\x7f\x9b\xd5R\x10\xf3\xb6\xffT\xbf\xd1\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\x9fc\xda\xa9\x83r\xd8\x98\x00\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9', 0x0) execveat(r0, &(0x7f0000000c40)='\x00', 0x0, 0x0, 0x1000) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f00000003c0)={0xa, 0x4e20, 0x0, @empty, 0x3}, 0x1c) 215.231605ms ago: executing program 2 (id=317): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x10, &(0x7f0000000000)=@raw=[@map_fd={0x18, 0x0, 0x1, 0x0, 0x1}, @jmp={0x5, 0x0, 0xa, 0x8, 0x4, 0xffffffffffffff64, 0xffffffffffffffff}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffbff}}], &(0x7f0000000080)='GPL\x00', 0x1, 0x53, &(0x7f00000000c0)=""/83, 0x41100, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000180)={0x4, 0x3, 0xfffff09f, 0x6}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wg2\x00', 0x0}) r2 = fcntl$getown(0xffffffffffffffff, 0x9) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r0, r1, 0x25, 0x2, @val=@uprobe_multi={&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)=[0x5], &(0x7f0000000340)=[0x2, 0x4, 0x2, 0x1, 0x0, 0x2, 0x3, 0x1, 0x0], 0xf1, 0x1, 0x0, r2}}, 0x40) (async) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r0, r1, 0x25, 0x2, @val=@uprobe_multi={&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)=[0x5], &(0x7f0000000340)=[0x2, 0x4, 0x2, 0x1, 0x0, 0x2, 0x3, 0x1, 0x0], 0xf1, 0x1, 0x0, r2}}, 0x40) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000500)={'ip6tnl0\x00', &(0x7f0000000480)={'ip6_vti0\x00', r1, 0x29, 0x92, 0x8, 0x3, 0x12, @loopback, @loopback, 0x8, 0x7, 0xffffffff, 0x2}}) sendmsg$ETHTOOL_MSG_PAUSE_GET(r3, &(0x7f0000000640)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000600)={&(0x7f0000000540)={0x98, r4, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x20040000}, 0x20000000) (async) sendmsg$ETHTOOL_MSG_PAUSE_GET(r3, &(0x7f0000000640)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000600)={&(0x7f0000000540)={0x98, r4, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x20040000}, 0x20000000) socket$nl_route(0x10, 0x3, 0x0) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000680)='/proc/sysvipc/shm\x00', 0x0, 0x0) (async) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000680)='/proc/sysvipc/shm\x00', 0x0, 0x0) ioctl$USBDEVFS_DISCARDURB(r7, 0x550b, &(0x7f00000006c0)=0x7) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000740), r3) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000780)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_KEY(r3, &(0x7f0000000840)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x3c, r8, 0x100, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x8, 0x59}}}}, [@NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "d1d970c41b"}, @NL80211_ATTR_KEY={0x8, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x4010004) getpeername$l2tp(r7, &(0x7f0000000880)={0x2, 0x0, @initdev}, &(0x7f00000008c0)=0x10) sendmsg$TEAM_CMD_OPTIONS_SET(r7, &(0x7f0000000c40)={&(0x7f0000000900), 0xc, &(0x7f0000000c00)={&(0x7f0000000940)={0x29c, 0x0, 0x0, 0x70bd27, 0x25dfdbfb, {}, [{{0x8, 0x1, r5}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x5d0}}, {0x8, 0x6, r1}}}]}}, {{0x8, 0x1, r5}, {0xc4, 0x2, 0x0, 0x1, [{0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x7ff, 0x8, 0x1, 0x1}, {0x6, 0xd1, 0x80, 0x1d6}]}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r1}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r1}}, {0x8}}}]}}, {{0x8, 0x1, r5}, {0x168, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8, 0x6, r5}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x81}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}]}, 0x29c}, 0x1, 0x0, 0x0, 0x30008020}, 0x80) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'wlan1\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'wlan1\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r7, 0x89f0, &(0x7f0000000d40)={'syztnl2\x00', &(0x7f0000000cc0)={'sit0\x00', r10, 0x7800, 0xf44f0335ce9b78fe, 0x8b5, 0x5, {{0x17, 0x4, 0x0, 0x1, 0x5c, 0x65, 0x0, 0x81, 0x4, 0x0, @private=0xa010100, @broadcast, {[@timestamp={0x44, 0xc, 0xe9, 0x0, 0x4, [0x4, 0x9]}, @lsrr={0x83, 0x1b, 0xc1, [@initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010100, @private=0xa010101, @multicast2, @remote, @private=0xa010102]}, @generic={0x7, 0xc, "5fbd704f16873134cdfb"}, @ssrr={0x89, 0x13, 0x11, [@multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @multicast2]}]}}}}}) sendmsg$NL80211_CMD_START_AP(r7, &(0x7f0000001300)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000012c0)={&(0x7f0000000dc0)={0x4c0, r8, 0x200, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x24, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3b}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3a}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}]}, @crypto_settings=[@NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x6}, @NL80211_ATTR_CIPHER_SUITE_GROUP={0x8, 0x4a, 0xfac05}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_CONTROL_PORT={0x4}, @NL80211_ATTR_SOCKET_OWNER={0x4}], @beacon=[@NL80211_ATTR_BEACON_HEAD={0x2af, 0xe, {{{0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x5}, @broadcast, @device_b, @random="e25736cafc95", {0xe, 0x7}}, 0x2, @random=0xaf1, 0x2d20, @void, @void, @val={0x3, 0x1, 0xe}, @val={0x4, 0x6, {0x5, 0x83, 0x8, 0xe}}, @void, @val={0x5, 0xb0, {0xd, 0x7, 0xf, "5ca84ccee5a52355e9a3732c7c7bf37156d935b5aed24599abe84c7bb6c473c1f30273de7792108397efa2d6e17e735f6a99929b989a51dc8dca45236f25aebb42f52ca18aeb274dcafe3889b6c9662ff4f338b9c339a86f5b57f46d604bdbab0cf051b1c6e5e05a51d8db3799bce2936c7e9884ea58b1eeb674cb36b11d793ded31d41a1a133ce37758ab5ad50b5274100d5707ce4d1f7825e6f3fb34c4830e8b4c0c2867f9d8d6311f2668b1"}}, @void, @void, @val={0x3c, 0x4, {0x0, 0x3, 0x2c, 0x3}}, @void, @val={0x72, 0x6}, @val={0x71, 0x7, {0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x9}}, @val={0x76, 0x6, {0x3, 0x9, 0x17, 0xc}}, [{0xdd, 0xc1, "22dd98e4b0268250dcd6478746dc4b26e4da3dbbc2827c3adaa236c7c84e48ec8deb02ce34914f87c74af0cdf7223b7427df718ba4e5ded85c1286787a6a312318b5e55a581c1568aeedf6212f9a745856ce09116a89ca69cfb4fe395e87c36ba86e4c6d6c9bdfcc754d841b917b88270080ca0a31fdbe425260400034713b82f8000f7636fa2a22ab9b06e36557134daa68812a217068745d387bcabb1caa59feb175263905093464430794d72dd2f2dfb3d5b33bdef5a5f42acccbd47d65235c"}, {0xdd, 0x94, "0be6257db8c13face14b2f494587d22be484c0fb192047f1b345b93ad47d0c7031cf70ab1148869337ad23599d4ccdeee02f9a67511580f3618f15f02c790a2ef48d8b216b8d2e9fe31b4e1b3f043e16eec5399977dd826dc341f3c17fb2659c8b5e890d9d786b7b8145d823ac2f665ae866c63ed53cf9cd071b72effd8387be598a8a012d45b5f9a5f6e625946e8e1a0f06ef5b"}, {0xdd, 0x50, "429ce65fe81949d17cefe11cdaec67a3a010400536cb1307de09053530a90218c93f00a137e34375f6abbce9e58f1c5f7989ea3aa1b2ecf34730f934d39206f3fa51c5a3eff9b758d3dce85649ceae11"}]}}, @NL80211_ATTR_IE={0x12c, 0x2a, [@ht={0x2d, 0x1a, {0x800, 0x1, 0x5, 0x0, {0x1, 0x7f, 0x0, 0x1f4, 0x0, 0x0, 0x1, 0x2}, 0x8, 0x1ff, 0x6}}, @chsw_timing={0x68, 0x4, {0x62, 0x5}}, @measure_req={0x26, 0xfb, {0x10, 0x20, 0x5, "934dc95722f502740b13b1f9da540516ae856672fafbdb79ad815b50b8cc49a826314901bb30089e8ad583521c1b84a9f6d940472d063cee1eee42f9eb3fa6b8c3126736df01d408022c523e419257cc3148e01c1fe80d44c2570593ff6c1cf67d232e6bef582d9222cde23c6f588cfd7b99d00fec7a75c81654ce1adb8a9445f81695d9e3bb0d525697464b644562e2c188282295c61df9bd02c8c35ca75125fdcce870dec5c181fb39d79ca88af1d308a736494e53b14bcbfad816a78b984492c86cb7e8602c81b8a6e301dfa2fddfe1fcc10d8abc63ba1ad9fbf54fbcc0dbd14d14fb8a05beef234a9d543c435798da968b5844228ae7"}}, @challenge={0x10, 0x1, 0xe0}, @ext_channel_switch={0x3c, 0x4, {0x1, 0x7, 0xb2, 0x9}}]}], @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2f3}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x17e}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x6}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}], @acl_policy=[@NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}, @NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_MAC_ADDRS={0x34, 0xa6, 0x0, 0x1, [{0xa}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}]}], @NL80211_ATTR_P2P_OPPPS={0x5, 0xa3, 0x1}]}, 0x4c0}, 0x1, 0x0, 0x0, 0x40}, 0x20000000) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_clone(0x1000000, &(0x7f0000001340)="a06df9b1e4fc8c950318e0a2debb9ad52071754aef8a948e41f184d291712860f241f6a22301df6eabed13fb13758fe6d4f613d22eab5c7273add7dda5068e8ae3a416516392ac595358487899ff7ab3926a55e2906dbab40ba1a71456aa5bd80f52a63ed7040fc6726553514bea402a6205a3c0b2039618d0bb92e2fc3322697663d17ea9260b2611f02baf", 0x8c, &(0x7f0000001400), &(0x7f0000001440), &(0x7f0000001480)="c31619b551abcb6edf4592f918918c7f48b3f6d42bead3d35b9c041a70f55f0f48d44054a22827be3a1d960991da540f26b19e398c580d5278ac5c3a31a0ebb8e959e0b96707af46dc44e527df8d3c7abc95de674d88618f97ff674b1e4fd4f2e4ef3ca3d3e4ce1324f3e9aa1fd2ac1cb4") rt_tgsigqueueinfo(r12, r12, 0x13, &(0x7f0000001500)={0x38, 0x8001, 0x796}) syz_genetlink_get_family_id$batadv(&(0x7f00000015c0), r3) (async) r13 = syz_genetlink_get_family_id$batadv(&(0x7f00000015c0), r3) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r11, &(0x7f0000001680)={&(0x7f0000001580), 0xc, &(0x7f0000001640)={&(0x7f0000001600)={0x38, r13, 0x10, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xe}}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xa4d}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20008900) (async) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r11, &(0x7f0000001680)={&(0x7f0000001580), 0xc, &(0x7f0000001640)={&(0x7f0000001600)={0x38, r13, 0x10, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xe}}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xa4d}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20008900) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r7, 0x84, 0x16, &(0x7f00000016c0)={0x6, [0x401, 0xfd, 0x9, 0x0, 0x40, 0x4]}, &(0x7f0000001700)=0x10) (async) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r7, 0x84, 0x16, &(0x7f00000016c0)={0x6, [0x401, 0xfd, 0x9, 0x0, 0x40, 0x4]}, &(0x7f0000001700)=0x10) fsetxattr$smack_xattr_label(r3, &(0x7f0000001740)='security.SMACK64IPOUT\x00', &(0x7f0000001780)={'lb_port_stats\x00'}, 0xf, 0x0) landlock_create_ruleset(&(0x7f00000017c0)={0x400, 0x8, 0x0, 0x312, 0x0, 0x1}, 0x30, 0x0) mmap$IORING_MAP_OFF_ZCRX_REGION(0x0, 0xfffffffe, 0x8, 0x8010, r7, 0x30251bfc) (async) mmap$IORING_MAP_OFF_ZCRX_REGION(0x0, 0xfffffffe, 0x8, 0x8010, r7, 0x30251bfc) mprotect(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x6) (async) mprotect(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x6) sendmsg$NL80211_CMD_GET_SURVEY(r11, &(0x7f00000018c0)={&(0x7f0000001800)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001880)={&(0x7f0000001840)={0x14, r8, 0x1, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @void}}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20004880}, 0x8014) 13.670909ms ago: executing program 2 (id=318): r0 = syz_open_dev$dvb_frontend(0x0, 0x0, 0x2) ioctl$FE_SET_PROPERTY(r0, 0x40106f52, &(0x7f0000008400)={0x3, &(0x7f0000008440)=[{0x2e, '\x00', @buffer={"4a9f14176e2c9d74e7cfe84302932b57de6a2e2dc00a815b09ea42f96957915b", 0x20}, 0x4}, {0x1e, '\x00', @st={0x4, [{0x2, @svalue=0x6}, {0x2, @uvalue=0x4}, {0x3, @svalue=0x75}, {0x3}]}, 0x80009}, {0x1f, '\x00', @buffer={"e84ad8fc77000a80ab64f8ec00", 0x20}, 0xe6}]}) 0s ago: executing program 2 (id=319): r0 = socket$packet(0x11, 0x3, 0x300) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000018c0), 0x1, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000001900)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000001940), 0x0, 0x0) close(r2) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000002140)={0x2, 0x4e21, @broadcast}, 0x2f) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000002180)='vegas', 0x5) connect$inet(r4, &(0x7f00000021c0)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="30000000100003052ebd70000007000000000000", @ANYRES32=0x0, @ANYBLOB="000000000638000010001280080001007369740004000280"], 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x440b0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000140)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r6 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r6, &(0x7f0000002200)={0x0, 0x0, &(0x7f0000002240)=[{&(0x7f0000002280)="89000000120081ae08060cdc030000fe7f03214e000000000001ffca1b1f0000000024c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00150c00014003080c00bdad446b31007a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947e", 0x75}, {&(0x7f0000002300)="11d6cb557c8496a2fe7a81f38210bfa9b70ee09c", 0x14}], 0x2}, 0x4000000) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000001980)={'syzkaller0\x00', @multicast}) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000019c0)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r6, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000840)="ca73703109fa1dfdf5dc95199604c7d023e318afb1f32adeacc2210c64fcf0b587b438232b1dcc075dd3d5727a03e96f1eb50387c4b84119666bfe3e85ff0f2fc6bfc28188f236b14a5b6fae196429879242bb9459be0671d6606ace7329e6e55fb8a275aca4bcb2bfb4d1dc141826ceb1365ab641177f42cc53fdd45dd7e73b05b0f7d833340dbac166e00a91e8cc9835ac5486460932b717a3ea83d72246e0723191c05043d4737f2e6d042dc5a67315b4a162b92d10a9db6f263e909731f4053dca9b564a18f1875139d88561cea500f391282285d5d53f", 0xd9}, {&(0x7f0000000940)="2e1092705376f9f5a504624cacf5f6ae54f55b9ca7fc8f538e12e692c745c371a8", 0x21}, {&(0x7f0000000980)="b682971c511cf1af694fd74d99ff90322ca94d0538e5e095d2942a5c17bc15d592a4873745a1d3028f8923a32945ffdf7ce8021048cab4d4fdeda9d63444682bf464b8252548fdd3f6ed89e57bd1e599deba8f559a7d494f59fea376f800000000000000", 0x64}], 0x3}, 0x20000881) sendmsg$nl_route_sched(r7, &(0x7f0000001a00)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f0000001a80)=@newqdisc={0x58, 0x24, 0x2, 0x1, 0x25dfdbfb, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0xa}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x6, 0x2a, 0x29, 0x3763, 0x6, 0x2, 0xffff8001, 0xa6e4, 0x8}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40088c1}, 0x4000004) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000001b00)={0x0, 0x0, &(0x7f0000001b40)={&(0x7f0000001b80)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x7fffe, {0x0, 0x0, 0x0, r8, {0x0, 0xffe0}, {0xfff2, 0xb}, {0x1, 0xb}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x404c800}, 0x8000) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001bc0)={'syzkaller0\x00', 0x0}) sendto$packet(r3, &(0x7f0000001c00)="05031c00d3fc140000004788031c", 0xe, 0x4044, &(0x7f0000001c40)={0x11, 0x0, r10, 0x1, 0x6, 0x6, @multicast}, 0x14) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000140)='./file0/file0\x00', 0x2018086, &(0x7f0000000040)=ANY=[@ANYRES8=r0], 0x1, 0x30a, &(0x7f0000000a80)="$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") r11 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0), 0xc0082, 0x0) ioctl$TUNSETIFF(r11, 0x400454ca, &(0x7f0000000700)={'syzkaller1\x00', 0xc201}) r12 = socket$inet6(0xa, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x3, &(0x7f0000001880)={0x6, &(0x7f0000001840)=[{0x8, 0x3, 0xfc, 0xe}, {0x6, 0xf, 0x81, 0xffff}, {0xc31, 0xf, 0xd9, 0xb84}, {0x40, 0x9c, 0x9}, {0x2, 0x8, 0x2, 0x9}, {0xff, 0x5, 0xc, 0x200040}]}) bind$inet6(r12, &(0x7f0000000780)={0xa, 0x4e20, 0x0, @empty, 0x3}, 0x1c) kernel console output (not intermixed with test programs): 3] alloc_netdev_mqs+0x1fc/0xf34 [ 28.527019][ T5093] rtnl_create_link+0x2b0/0xb78 [ 28.527027][ T5093] rtnl_newlink_create+0x210/0x6b8 [ 28.527036][ T5093] rtnl_newlink+0xfe4/0x138c [ 28.527044][ T5093] rtnetlink_rcv_msg+0x66c/0x9bc [ 28.527052][ T5093] netlink_rcv_skb+0x238/0x414 [ 28.527062][ T5093] rtnetlink_rcv+0x28/0x38 [ 28.527070][ T5093] netlink_unicast+0x600/0x7f8 [ 28.527079][ T5093] netlink_sendmsg+0x648/0x948 [ 28.527089][ T5093] __sock_sendmsg+0xc8/0x17c [ 28.527097][ T5093] ____sys_sendmsg+0x3d0/0x6c8 [ 28.527107][ T5093] ___sys_sendmsg+0x198/0x224 [ 28.527116][ T5093] __sys_sendmsg+0x158/0x204 [ 28.527125][ T5093] __arm64_sys_sendmsg+0x88/0x9c [ 28.527135][ T5093] invoke_syscall+0x98/0x244 [ 28.527145][ T5093] el0_svc_common+0xec/0x23c [ 28.527155][ T5093] do_el0_svc+0x4c/0x5c [ 28.527164][ T5093] el0_svc+0x60/0x1d8 [ 28.527172][ T5093] el0t_64_sync_handler+0x44/0x104 [ 28.527179][ T5093] el0t_64_sync+0x198/0x19c [ 28.552781][ T5096] netlink: 'syz.0.57': attribute type 10 has an invalid length. [ 28.552795][ T5096] netlink: 4 bytes leftover after parsing attributes in process `syz.0.57'. [ 28.557253][ T5096] FAULT_INJECTION: forcing a failure. [ 28.557253][ T5096] name failslab, interval 1, probability 0, space 0, times 0 [ 28.557273][ T5096] CPU: 0 UID: 0 PID: 5096 Comm: syz.0.57 Not tainted syzkaller #0 PREEMPT [ 28.557283][ T5096] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 28.557289][ T5096] Call trace: [ 28.557292][ T5096] show_stack+0x2c/0x3c (C) [ 28.557310][ T5096] __dump_stack+0x30/0x40 [ 28.557323][ T5096] dump_stack_lvl+0xd8/0x12c [ 28.557334][ T5096] dump_stack+0x1c/0x28 [ 28.557345][ T5096] should_fail_ex+0x418/0x58c [ 28.557354][ T5096] should_failslab+0xc4/0x120 [ 28.557361][ T5096] __kmalloc_cache_noprof+0x94/0x5fc [ 28.557371][ T5096] zs_create_pool+0x358/0x66c [ 28.557379][ T5096] zswap_pool_create+0x160/0x53c [ 28.557390][ T5096] zswap_compressor_param_set+0x200/0x54c [ 28.557402][ T5096] param_attr_store+0x144/0x1bc [ 28.557411][ T5096] module_attr_store+0x6c/0x94 [ 28.557418][ T5096] sysfs_kf_write+0xe0/0x108 [ 28.557427][ T5096] kernfs_fop_write_iter+0x260/0x3b8 [ 28.557439][ T5096] vfs_write+0x51c/0xa0c [ 28.557447][ T5096] ksys_write+0x12c/0x228 [ 28.557454][ T5096] __arm64_sys_write+0x84/0x98 [ 28.557462][ T5096] invoke_syscall+0x98/0x244 [ 28.557474][ T5096] el0_svc_common+0xec/0x23c [ 28.557486][ T5096] do_el0_svc+0x4c/0x5c [ 28.557497][ T5096] el0_svc+0x60/0x1d8 [ 28.557505][ T5096] el0t_64_sync_handler+0x44/0x104 [ 28.557513][ T5096] el0t_64_sync+0x198/0x19c [ 28.646911][ T5113] ip_tables: iptables: counters copy to user failed while replacing table [ 28.671412][ T5115] netlink: 'syz.4.64': attribute type 1 has an invalid length. [ 28.722044][ T5122] loop1: detected capacity change from 0 to 2048 [ 28.731965][ T5124] process 'syz.4.67' launched '/dev/fd/4' with NULL argv: empty string added [ 28.751062][ T5122] loop1: p1 < > p4 [ 28.751062][ T5122] p4: [ 28.753498][ T5122] loop1: p4 size 722688 extends beyond EOD, truncated [ 28.820065][ T5132] netlink: 'syz.0.71': attribute type 21 has an invalid length. [ 28.829544][ T4724] Bluetooth: hci2: command tx timeout [ 28.829564][ T4724] Bluetooth: hci0: command tx timeout [ 28.829620][ T4718] Bluetooth: hci3: command tx timeout [ 28.870905][ T5140] netlink: 8 bytes leftover after parsing attributes in process `syz.0.75'. [ 28.875581][ T5135] loop4: detected capacity change from 0 to 8192 [ 28.876623][ T5140] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.876830][ T5140] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.893136][ T5135] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 28.909475][ T4713] Bluetooth: hci1: command tx timeout [ 28.951499][ T5144] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 28.951520][ T5144] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 28.951526][ T5144] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 28.955094][ T5144] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #16: comm syz.4.76: invalid indirect mapped block 4294967295 (level 0) [ 28.955146][ T5144] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 28.955770][ T5144] EXT4-fs (loop4): Remounting filesystem read-only [ 28.955965][ T5144] EXT4-fs (loop4): 1 orphan inode deleted [ 28.955974][ T5144] EXT4-fs (loop4): 1 truncate cleaned up [ 28.957872][ T5144] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 29.016331][ T5152] EXT4-fs (loop4): shut down requested (2) [ 29.026143][ T5154] netlink: 55 bytes leftover after parsing attributes in process `syz.3.78'. [ 29.037671][ T5154] netlink: 'syz.3.78': attribute type 4 has an invalid length. [ 29.061267][ T5156] binder: 5155:5156 got reply transaction with no transaction stack [ 29.061298][ T5156] binder: 5155:5156 transaction reply to 0:0 failed 1/29201/-71, code 0 size 0-0 line 3156 [ 29.088771][ T5159] ======================================================= [ 29.088771][ T5159] WARNING: The mand mount option has been deprecated and [ 29.088771][ T5159] and is ignored by this kernel. Remove the mand [ 29.088771][ T5159] option from the mount to silence this warning. [ 29.088771][ T5159] ======================================================= [ 29.095804][ T5161] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 29.095856][ T5161] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 29.111643][ T5159] EXT4-fs error (device loop3): ext4_get_journal_inode:5928: comm syz.3.80: inode #2147418112: comm syz.3.80: iget: illegal inode # [ 29.111686][ T5159] loop3: lost filesystem error report for type 5 error -117 [ 29.114867][ T5159] EXT4-fs (loop3): no journal found [ 29.114877][ T5159] EXT4-fs (loop3): can't get journal size [ 29.119199][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 29.119213][ C0] EXT4-fs (loop3): initial error at time 29: ext4_get_journal_inode:5928 [ 29.119231][ C0] EXT4-fs (loop3): last error at time 29: ext4_get_journal_inode:5928 [ 29.119938][ T5159] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended [ 29.120107][ T5159] EXT4-fs (loop3): Errors on filesystem, clearing orphan list. [ 29.120815][ T5159] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 29.142249][ T4715] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 29.711976][ T5174] netlink: 'syz.0.85': attribute type 21 has an invalid length. [ 29.786688][ T4711] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 29.803132][ T30] audit: type=1326 audit(29.770:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5176 comm="syz.1.87" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff81378be8 code=0x7ffc0000 [ 29.803214][ T30] audit: type=1326 audit(29.770:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5176 comm="syz.1.87" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff81378be8 code=0x7ffc0000 [ 29.803316][ T30] audit: type=1326 audit(29.770:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5176 comm="syz.1.87" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=56 compat=0 ip=0xffff8135baac code=0x7ffc0000 [ 29.803531][ T30] audit: type=1326 audit(29.770:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5176 comm="syz.1.87" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=64 compat=0 ip=0xffff8135baac code=0x7ffc0000 [ 29.803636][ T5177] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 29.803644][ T5177] audit: out of memory in audit_log_start [ 29.808235][ T5179] random: crng reseeded on system resumption [ 29.845135][ T4713] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:66' [ 29.845168][ T4713] CPU: 0 UID: 0 PID: 4713 Comm: kworker/u9:1 Not tainted syzkaller #0 PREEMPT [ 29.845179][ T4713] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 29.845186][ T4713] Workqueue: hci1 hci_rx_work [ 29.845199][ T4713] Call trace: [ 29.845202][ T4713] show_stack+0x2c/0x3c (C) [ 29.845227][ T4713] __dump_stack+0x30/0x40 [ 29.845240][ T4713] dump_stack_lvl+0xd8/0x12c [ 29.845253][ T4713] dump_stack+0x1c/0x28 [ 29.845264][ T4713] sysfs_warn_dup+0x9c/0xb8 [ 29.845274][ T4713] sysfs_create_dir_ns+0x190/0x1f4 [ 29.845282][ T4713] kobject_add_internal+0x290/0x6f0 [ 29.845293][ T4713] kobject_add_varg+0x9c/0xe8 [ 29.845302][ T4713] kobject_add+0x110/0x1c8 [ 29.845311][ T4713] device_add+0x394/0x9e0 [ 29.845323][ T4713] hci_conn_add_sysfs+0xbc/0x1e8 [ 29.845334][ T4713] le_conn_complete_evt+0xc84/0x122c [ 29.845344][ T4713] hci_le_conn_complete_evt+0x114/0x3d8 [ 29.845354][ T4713] hci_le_meta_evt+0x2b0/0x46c [ 29.845365][ T4713] hci_event_packet+0x4c0/0x9c8 [ 29.845376][ T4713] hci_rx_work+0x2f4/0xd78 [ 29.845383][ T4713] process_scheduled_works+0x91c/0x1250 [ 29.845395][ T4713] worker_thread+0x798/0xbd0 [ 29.845406][ T4713] kthread+0x304/0x3d4 [ 29.845415][ T4713] ret_from_fork+0x10/0x20 [ 29.845430][ T4713] kobject: kobject_add_internal failed for hci1:66 with -EEXIST, don't try to register things with the same name in the same directory. [ 29.845443][ T4713] Bluetooth: hci1: failed to register connection device [ 29.855323][ T30] audit: type=1326 audit(29.820:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5176 comm="syz.1.87" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=63 compat=0 ip=0xffff8135baac code=0x7ffc0000 [ 29.855615][ T30] audit: type=1326 audit(29.820:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5176 comm="syz.1.87" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=64 compat=0 ip=0xffff8135baac code=0x7ffc0000 [ 29.855681][ T30] audit: type=1326 audit(29.820:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5176 comm="syz.1.87" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=57 compat=0 ip=0xffff8135baac code=0x7ffc0000 [ 29.952022][ T5190] netlink: 24 bytes leftover after parsing attributes in process `syz.0.91'. [ 29.961765][ T5194] netlink: 276 bytes leftover after parsing attributes in process `syz.1.92'. [ 29.963012][ T5193] FAULT_INJECTION: forcing a failure. [ 29.963012][ T5193] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 29.963028][ T5193] CPU: 0 UID: 0 PID: 5193 Comm: syz.1.92 Not tainted syzkaller #0 PREEMPT [ 29.963038][ T5193] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 29.963043][ T5193] Call trace: [ 29.963046][ T5193] show_stack+0x2c/0x3c (C) [ 29.963062][ T5193] __dump_stack+0x30/0x40 [ 29.963072][ T5193] dump_stack_lvl+0xd8/0x12c [ 29.963082][ T5193] dump_stack+0x1c/0x28 [ 29.963091][ T5193] should_fail_ex+0x418/0x58c [ 29.963099][ T5193] should_fail+0x14/0x24 [ 29.963106][ T5193] should_fail_usercopy+0x20/0x30 [ 29.963113][ T5193] _copy_from_iter+0x188/0x1064 [ 29.963121][ T5193] netlink_sendmsg+0x570/0x948 [ 29.963132][ T5193] __sock_sendmsg+0xc8/0x17c [ 29.963141][ T5193] ____sys_sendmsg+0x3d0/0x6c8 [ 29.963151][ T5193] ___sys_sendmsg+0x198/0x224 [ 29.963160][ T5193] __sys_sendmsg+0x158/0x204 [ 29.963169][ T5193] __arm64_sys_sendmsg+0x88/0x9c [ 29.963179][ T5193] invoke_syscall+0x98/0x244 [ 29.963189][ T5193] el0_svc_common+0xec/0x23c [ 29.963198][ T5193] do_el0_svc+0x4c/0x5c [ 29.963208][ T5193] el0_svc+0x60/0x1d8 [ 29.963215][ T5193] el0t_64_sync_handler+0x44/0x104 [ 29.963229][ T5193] el0t_64_sync+0x198/0x19c [ 30.008573][ T5205] set_capacity_and_notify: 2 callbacks suppressed [ 30.008583][ T5205] loop2: detected capacity change from 0 to 512 [ 30.012117][ T5202] netlink: 8 bytes leftover after parsing attributes in process `syz.3.95'. [ 30.016348][ T5205] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 30.016363][ T5205] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 30.018394][ T5205] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #16: comm syz.2.96: invalid indirect mapped block 4294967295 (level 0) [ 30.018419][ T5205] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 30.019166][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 30.019182][ C1] EXT4-fs (loop2): initial error at time 29: ext4_free_branches:1023: inode 16 [ 30.019199][ C1] EXT4-fs (loop2): last error at time 29: ext4_free_branches:1023: inode 16 [ 30.019570][ T5205] EXT4-fs (loop2): Remounting filesystem read-only [ 30.019715][ T5205] EXT4-fs (loop2): 1 orphan inode deleted [ 30.019725][ T5205] EXT4-fs (loop2): 1 truncate cleaned up [ 30.020168][ T5205] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 30.135274][ T5228] ecryptfs_verify_version: Minor version number mismatch. Expected [4]; got [0] [ 30.135287][ T5228] Data structure version mismatch. Userspace tools must match eCryptfs kernel module with major version [0] and minor version [4] [ 30.135295][ T5228] Could not find valid key in user session keyring for sig specified in mount option: [syz] [ 30.135301][ T5228] One or more global auth toks could not properly register; rc = [-22] [ 30.135317][ T5228] Error validating options; rc = [-22] [ 30.211142][ T5233] loop3: detected capacity change from 0 to 512 [ 30.212411][ T5233] EXT4-fs: Ignoring removed oldalloc option [ 30.217300][ T5233] EXT4-fs error (device loop3): ext4_orphan_get:1429: comm syz.3.102: bad orphan inode 32 [ 30.217318][ T5233] loop3: lost filesystem error report for type 5 error -117 [ 30.217518][ T5233] ext4_test_bit(bit=31, block=4) = 0 [ 30.217532][ T5233] EXT4-fs (loop3): 1 truncate cleaned up [ 30.218037][ T5233] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 30.234124][ T5236] loop0: detected capacity change from 0 to 256 [ 30.247901][ T4715] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 30.350678][ T4713] Bluetooth: hci4: command tx timeout [ 30.369579][ T5246] netlink: 'syz.0.106': attribute type 10 has an invalid length. [ 30.369713][ T5247] loop4: detected capacity change from 0 to 512 [ 30.385131][ T5247] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 30.394405][ T5247] EXT4-fs error (device loop4): ext4_xattr_block_get:608: inode #15: comm syz.4.107: corrupted xattr block 33: invalid header [ 30.397357][ T5247] EXT4-fs error (device loop4): ext4_xattr_block_get:608: inode #15: comm syz.4.107: corrupted xattr block 33: invalid header [ 30.397933][ T5247] EXT4-fs error (device loop4): ext4_xattr_block_get:608: inode #15: comm syz.4.107: corrupted xattr block 33: invalid header [ 30.432931][ T5254] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 30.456037][ T5258] loop0: detected capacity change from 0 to 512 [ 30.463921][ T5258] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 30.463935][ T5258] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 30.466139][ T5258] EXT4-fs (loop0): 1 truncate cleaned up [ 30.466568][ T5258] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 30.481445][ T5258] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 156 vs 220 free clusters [ 30.481987][ T5258] EXT4-fs (loop0): Remounting filesystem read-only [ 30.482050][ T5258] EXT4-fs (loop0): error restoring inline_data for inode -- potential data loss! (inode 12, error -30) [ 30.498364][ T4710] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 30.525363][ T5261] bridge0: entered allmulticast mode [ 30.529992][ T5261] binder: tried to use weak ref as strong ref [ 30.530005][ T5261] binder: 5260:5261 Acquire 1 refcount change on invalid ref 0 ret -22 [ 30.530503][ T5261] binder: 5260:5261 got transaction to invalid handle, 1 [ 30.530513][ T5261] binder: 5260:5261 cannot find target node [ 30.530527][ T5261] binder: 5260:5261 transaction call to 0:0 failed 4/29201/-22, code 0 size 72-0 line 3253 [ 30.536661][ T1090] binder: undelivered TRANSACTION_ERROR: 29201 [ 30.585796][ T5263] loop0: detected capacity change from 0 to 256 [ 30.588138][ T5263] vfat: Unknown parameter 'shortne' [ 30.652342][ T5266] tipc: Started in network mode [ 30.652357][ T5266] tipc: Node identity ce26eb02476f, cluster identity 4711 [ 30.652433][ T5266] tipc: Enabled bearer , priority 0 [ 30.675257][ T5268] loop0: detected capacity change from 0 to 1024 [ 30.679997][ T5268] EXT4-fs (loop0): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 30.697550][ T5268] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 30.734882][ T1187] EXT4-fs warning (device loop0): ext4_convert_unwritten_extents:5172: inode #15: block 63: len 65: ext4_map_blocks returned -28 [ 30.734915][ T1187] EXT4-fs (loop0): failed to convert unwritten extents to written extents -- potential data loss! (inode 15, error -28) [ 30.747636][ T4710] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 30.848661][ T4722] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 30.872161][ T5278] loop2: detected capacity change from 0 to 2048 [ 30.877521][ T5274] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff0000d8002a40 pfn:0x118000 [ 30.877535][ T5274] flags: 0x5ffc00000000000(node=0|zone=2|lastcpupid=0x7ff) [ 30.877548][ T5274] raw: 05ffc00000000000 0000000000000000 dead000000000122 0000000000000000 [ 30.877557][ T5274] raw: ffff0000d8002a40 0000000000000000 00000001ffffffff 0000000000000000 [ 30.877562][ T5274] page dumped because: unmovable page [ 30.891755][ T5281] netlink: 'syz.1.118': attribute type 10 has an invalid length. [ 30.901485][ T5278] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 30.901499][ T5278] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 30.902106][ T5278] loop2: p1 < p5 p6 p7 p8 p9 p10 p11 p12 p13 p14 p15 p16 p17 p18 p19 p20 p21 p22 p23 p24 p25 p26 p27 p28 p29 p30 p31 p32 p33 p34 p35 p36 p37 p38 p39 p40 p41 p42 p43 p44 p45 p46 p47 p48 p49 p50 p51 p52 p53 p54 p55 p56 p57 p58 p59 p60 p61 p62 p63 p64 p65 p66 p67 p68 p69 p70 p71 p72 p73 p74 p75 p76 p77 p78 p79 p80 p81 p82 p83 p84 p85 p86 p87 p88 p89 p90 p91 p92 p93 p94 p95 p96 p97 p98 p99 p100 p101 p102 p103 p104 p105 p106 p107 p108 p109 p110 p111 p112 p113 p114 p115 p116 p117 p118 p119 p120 p121 p122 p123 p124 p125 p126 p127 p128 p129 p130 p131 p132 p133 p134 p135 p136 p137 p138 p139 p140 p141 p142 p143 p144 p145 p146 p147 p148 p149 p150 p151 p152 p153 p154 p155 p156 p157 p158 p159 p160 p161 p162 p163 p164 p165 p166 p167 p168 p169 p170 p171 p172 p173 p174 p175 p176 p177 p178 p179 p180 p181 p182 p183 p184 p185 p186 p187 p188 p189 p190 p191 p192 p193 p194 p195 p196 p197 p198 p199 p200 p201 p202 p203 p204 p205 p206 p207 p208 p209 p210 p211 p212 p213 p214 p215 p216 p217 p218 p219 p220 p221 p222 p223 p224 p225 p22 [ 30.905959][ T5278] loop2: p4 start 318767104 is beyond EOD, truncated [ 30.905975][ T5278] loop2: p5 start 318767104 is beyond EOD, truncated [ 30.905984][ T5278] loop2: p6 start 318767104 is beyond EOD, truncated [ 30.905992][ T5278] loop2: p7 start 318767104 is beyond EOD, truncated [ 30.906000][ T5278] loop2: p8 start 318767104 is beyond EOD, truncated [ 30.906007][ T5278] loop2: p9 start 318767104 is beyond EOD, truncated [ 30.906014][ T5278] loop2: p10 start 318767104 is beyond EOD, truncated [ 30.906021][ T5278] loop2: p11 start 318767104 is beyond EOD, truncated [ 30.906028][ T5278] loop2: p12 start 318767104 is beyond EOD, truncated [ 30.906035][ T5278] loop2: p13 start 318767104 is beyond EOD, truncated [ 30.906042][ T5278] loop2: p14 start 318767104 is beyond EOD, truncated [ 30.906050][ T5278] loop2: p15 start 318767104 is beyond EOD, truncated [ 30.906057][ T5278] loop2: p16 start 318767104 is beyond EOD, truncated [ 30.906064][ T5278] loop2: p17 start 318767104 is beyond EOD, truncated [ 30.906071][ T5278] loop2: p18 start 318767104 is beyond EOD, truncated [ 30.906078][ T5278] loop2: p19 start 318767104 is beyond EOD, truncated [ 30.906085][ T5278] loop2: p20 start 318767104 is beyond EOD, truncated [ 30.906092][ T5278] loop2: p21 start 318767104 is beyond EOD, truncated [ 30.906099][ T5278] loop2: p22 start 318767104 is beyond EOD, truncated [ 30.906106][ T5278] loop2: p23 start 318767104 is beyond EOD, truncated [ 30.906113][ T5278] loop2: p24 start 318767104 is beyond EOD, truncated [ 30.906120][ T5278] loop2: p25 start 318767104 is beyond EOD, truncated [ 30.906127][ T5278] loop2: p26 start 318767104 is beyond EOD, truncated [ 30.906134][ T5278] loop2: p27 start 318767104 is beyond EOD, truncated [ 30.906141][ T5278] loop2: p28 start 318767104 is beyond EOD, truncated [ 30.906148][ T5278] loop2: p29 start 318767104 is beyond EOD, truncated [ 30.906155][ T5278] loop2: p30 start 318767104 is beyond EOD, truncated [ 30.906163][ T5278] loop2: p31 start 318767104 is beyond EOD, truncated [ 30.906170][ T5278] loop2: p32 start 318767104 is beyond EOD, truncated [ 30.906177][ T5278] loop2: p33 start 318767104 is beyond EOD, truncated [ 30.906184][ T5278] loop2: p34 start 318767104 is beyond EOD, truncated [ 30.906191][ T5278] loop2: p35 start 318767104 is beyond EOD, truncated [ 30.906198][ T5278] loop2: p36 start 318767104 is beyond EOD, truncated [ 30.906205][ T5278] loop2: p37 start 318767104 is beyond EOD, truncated [ 30.906212][ T5278] loop2: p38 start 318767104 is beyond EOD, truncated [ 30.906219][ T5278] loop2: p39 start 318767104 is beyond EOD, truncated [ 30.906226][ T5278] loop2: p40 start 318767104 is beyond EOD, truncated [ 30.906238][ T5278] loop2: p41 start 318767104 is beyond EOD, truncated [ 30.906245][ T5278] loop2: p42 start 318767104 is beyond EOD, truncated [ 30.906253][ T5278] loop2: p43 start 318767104 is beyond EOD, truncated [ 30.906260][ T5278] loop2: p44 start 318767104 is beyond EOD, truncated [ 30.906268][ T5278] loop2: p45 start 318767104 is beyond EOD, truncated [ 30.906275][ T5278] loop2: p46 start 318767104 is beyond EOD, truncated [ 30.906282][ T5278] loop2: p47 start 318767104 is beyond EOD, truncated [ 30.906289][ T5278] loop2: p48 start 318767104 is beyond EOD, truncated [ 30.906296][ T5278] loop2: p49 start 318767104 is beyond EOD, truncated [ 30.906303][ T5278] loop2: p50 start 318767104 is beyond EOD, truncated [ 30.906310][ T5278] loop2: p51 start 318767104 is beyond EOD, truncated [ 30.906317][ T5278] loop2: p52 start 318767104 is beyond EOD, truncated [ 30.906324][ T5278] loop2: p53 start 318767104 is beyond EOD, truncated [ 30.906331][ T5278] loop2: p54 start 318767104 is beyond EOD, truncated [ 30.906338][ T5278] loop2: p55 start 318767104 is beyond EOD, truncated [ 30.906345][ T5278] loop2: p56 start 318767104 is beyond EOD, truncated [ 30.906352][ T5278] loop2: p57 start 318767104 is beyond EOD, truncated [ 30.906359][ T5278] loop2: p58 start 318767104 is beyond EOD, truncated [ 30.906366][ T5278] loop2: p59 start 318767104 is beyond EOD, truncated [ 30.906373][ T5278] loop2: p60 start 318767104 is beyond EOD, truncated [ 30.906380][ T5278] loop2: p61 start 318767104 is beyond EOD, truncated [ 30.906387][ T5278] loop2: p62 start 318767104 is beyond EOD, truncated [ 30.906395][ T5278] loop2: p63 start 318767104 is beyond EOD, truncated [ 30.906402][ T5278] loop2: p64 start 318767104 is beyond EOD, truncated [ 30.906409][ T5278] loop2: p65 start 318767104 is beyond EOD, truncated [ 30.906416][ T5278] loop2: p66 start 318767104 is beyond EOD, truncated [ 30.906423][ T5278] loop2: p67 start 318767104 is beyond EOD, truncated [ 30.906430][ T5278] loop2: p68 start 318767104 is beyond EOD, truncated [ 30.906437][ T5278] loop2: p69 start 318767104 is beyond EOD, truncated [ 30.906444][ T5278] loop2: p70 start 318767104 is beyond EOD, truncated [ 30.906451][ T5278] loop2: p71 start 318767104 is beyond EOD, truncated [ 30.906458][ T5278] loop2: p72 start 318767104 is beyond EOD, truncated [ 30.906465][ T5278] loop2: p73 start 318767104 is beyond EOD, truncated [ 30.906472][ T5278] loop2: p74 start 318767104 is beyond EOD, truncated [ 30.906479][ T5278] loop2: p75 start 318767104 is beyond EOD, truncated [ 30.906486][ T5278] loop2: p76 start 318767104 is beyond EOD, truncated [ 30.906493][ T5278] loop2: p77 start 318767104 is beyond EOD, truncated [ 30.906501][ T5278] loop2: p78 start 318767104 is beyond EOD, truncated [ 30.906508][ T5278] loop2: p79 start 318767104 is beyond EOD, truncated [ 30.906515][ T5278] loop2: p80 start 318767104 is beyond EOD, truncated [ 30.906522][ T5278] loop2: p81 start 318767104 is beyond EOD, truncated [ 30.906529][ T5278] loop2: p82 start 318767104 is beyond EOD, truncated [ 30.906536][ T5278] loop2: p83 start 318767104 is beyond EOD, truncated [ 30.906543][ T5278] loop2: p84 start 318767104 is beyond EOD, truncated [ 30.906550][ T5278] loop2: p85 start 318767104 is beyond EOD, truncated [ 30.906557][ T5278] loop2: p86 start 318767104 is beyond EOD, truncated [ 30.906564][ T5278] loop2: p87 start 318767104 is beyond EOD, truncated [ 30.906571][ T5278] loop2: p88 start 318767104 is beyond EOD, truncated [ 30.906578][ T5278] loop2: p89 start 318767104 is beyond EOD, truncated [ 30.906585][ T5278] loop2: p90 start 318767104 is beyond EOD, truncated [ 30.906592][ T5278] loop2: p91 start 318767104 is beyond EOD, truncated [ 30.906599][ T5278] loop2: p92 start 318767104 is beyond EOD, truncated [ 30.906606][ T5278] loop2: p93 start 318767104 is beyond EOD, truncated [ 30.906613][ T5278] loop2: p94 start 318767104 is beyond EOD, truncated [ 30.906620][ T5278] loop2: p95 start 318767104 is beyond EOD, truncated [ 30.906627][ T5278] loop2: p96 start 318767104 is beyond EOD, truncated [ 30.906635][ T5278] loop2: p97 start 318767104 is beyond EOD, truncated [ 30.906642][ T5278] loop2: p98 start 318767104 is beyond EOD, truncated [ 30.906649][ T5278] loop2: p99 start 318767104 is beyond EOD, truncated [ 30.906656][ T5278] loop2: p100 start 318767104 is beyond EOD, truncated [ 30.906663][ T5278] loop2: p101 start 318767104 is beyond EOD, truncated [ 30.906670][ T5278] loop2: p102 start 318767104 is beyond EOD, truncated [ 30.906677][ T5278] loop2: p103 start 318767104 is beyond EOD, truncated [ 30.906684][ T5278] loop2: p104 start 318767104 is beyond EOD, truncated [ 30.906691][ T5278] loop2: p105 start 318767104 is beyond EOD, truncated [ 30.906698][ T5278] loop2: p106 start 318767104 is beyond EOD, truncated [ 30.906705][ T5278] loop2: p107 start 318767104 is beyond EOD, truncated [ 30.906712][ T5278] loop2: p108 start 318767104 is beyond EOD, truncated [ 30.906720][ T5278] loop2: p109 start 318767104 is beyond EOD, truncated [ 30.906727][ T5278] loop2: p110 start 318767104 is beyond EOD, truncated [ 30.906734][ T5278] loop2: p111 start 318767104 is beyond EOD, truncated [ 30.906741][ T5278] loop2: p112 start 318767104 is beyond EOD, truncated [ 30.906748][ T5278] loop2: p113 start 318767104 is beyond EOD, truncated [ 30.906755][ T5278] loop2: p114 start 318767104 is beyond EOD, truncated [ 30.906762][ T5278] loop2: p115 start 318767104 is beyond EOD, truncated [ 30.906769][ T5278] loop2: p116 start 318767104 is beyond EOD, truncated [ 30.906776][ T5278] loop2: p117 start 318767104 is beyond EOD, truncated [ 30.906783][ T5278] loop2: p118 start 318767104 is beyond EOD, truncated [ 30.906790][ T5278] loop2: p119 start 318767104 is beyond EOD, truncated [ 30.906797][ T5278] loop2: p120 start 318767104 is beyond EOD, truncated [ 30.906805][ T5278] loop2: p121 start 318767104 is beyond EOD, truncated [ 30.906812][ T5278] loop2: p122 start 318767104 is beyond EOD, truncated [ 30.906819][ T5278] loop2: p123 start 318767104 is beyond EOD, truncated [ 30.906826][ T5278] loop2: p124 start 318767104 is beyond EOD, truncated [ 30.906833][ T5278] loop2: p125 start 318767104 is beyond EOD, truncated [ 30.906840][ T5278] loop2: p126 start 318767104 is beyond EOD, truncated [ 30.906847][ T5278] loop2: p127 start 318767104 is beyond EOD, truncated [ 30.906854][ T5278] loop2: p128 start 318767104 is beyond EOD, truncated [ 30.906861][ T5278] loop2: p129 start 318767104 is beyond EOD, truncated [ 30.906868][ T5278] loop2: p130 start 318767104 is beyond EOD, truncated [ 30.906875][ T5278] loop2: p131 start 318767104 is beyond EOD, truncated [ 30.906883][ T5278] loop2: p132 start 318767104 is beyond EOD, truncated [ 30.906890][ T5278] loop2: p133 start 318767104 is beyond EOD, truncated [ 30.906897][ T5278] loop2: p134 start 318767104 is beyond EOD, truncated [ 30.906904][ T5278] loop2: p135 start 318767104 is beyond EOD, truncated [ 30.906911][ T5278] loop2: p136 start 318767104 is beyond EOD, truncated [ 30.906918][ T5278] loop2: p137 start 318767104 is beyond EOD, truncated [ 30.906925][ T5278] loop2: p138 start 318767104 is beyond EOD, truncated [ 30.906932][ T5278] loop2: p139 start 318767104 is beyond EOD, truncated [ 30.906939][ T5278] loop2: p140 start 318767104 is beyond EOD, truncated [ 30.906946][ T5278] loop2: p141 start 318767104 is beyond EOD, truncated [ 30.906954][ T5278] loop2: p142 start 318767104 is beyond EOD, truncated [ 30.906961][ T5278] loop2: p143 start 318767104 is beyond EOD, truncated [ 30.906968][ T5278] loop2: p144 start 318767104 is beyond EOD, truncated [ 30.906975][ T5278] loop2: p145 start 318767104 is beyond EOD, truncated [ 30.906982][ T5278] loop2: p146 start 318767104 is beyond EOD, truncated [ 30.906989][ T5278] loop2: p147 start 318767104 is beyond EOD, truncated [ 30.906996][ T5278] loop2: p148 start 318767104 is beyond EOD, truncated [ 30.907003][ T5278] loop2: p149 start 318767104 is beyond EOD, truncated [ 30.907010][ T5278] loop2: p150 start 318767104 is beyond EOD, truncated [ 30.907017][ T5278] loop2: p151 start 318767104 is beyond EOD, truncated [ 30.907024][ T5278] loop2: p152 start 318767104 is beyond EOD, truncated [ 30.907031][ T5278] loop2: p153 start 318767104 is beyond EOD, truncated [ 30.907039][ T5278] loop2: p154 start 318767104 is beyond EOD, truncated [ 30.907046][ T5278] loop2: p155 start 318767104 is beyond EOD, truncated [ 30.907053][ T5278] loop2: p156 start 318767104 is beyond EOD, truncated [ 30.907060][ T5278] loop2: p157 start 318767104 is beyond EOD, truncated [ 30.907067][ T5278] loop2: p158 start 318767104 is beyond EOD, truncated [ 30.907074][ T5278] loop2: p159 start 318767104 is beyond EOD, truncated [ 30.907081][ T5278] loop2: p160 start 318767104 is beyond EOD, truncated [ 30.907088][ T5278] loop2: p161 start 318767104 is beyond EOD, truncated [ 30.907095][ T5278] loop2: p162 start 318767104 is beyond EOD, truncated [ 30.907102][ T5278] loop2: p163 start 318767104 is beyond EOD, truncated [ 30.907110][ T5278] loop2: p164 start 318767104 is beyond EOD, truncated [ 30.907117][ T5278] loop2: p165 start 318767104 is beyond EOD, truncated [ 30.907124][ T5278] loop2: p166 start 318767104 is beyond EOD, truncated [ 30.907131][ T5278] loop2: p167 start 318767104 is beyond EOD, truncated [ 30.907138][ T5278] loop2: p168 start 318767104 is beyond EOD, truncated [ 30.907145][ T5278] loop2: p169 start 318767104 is beyond EOD, truncated [ 30.907152][ T5278] loop2: p170 start 318767104 is beyond EOD, truncated [ 30.907159][ T5278] loop2: p171 start 318767104 is beyond EOD, truncated [ 30.907166][ T5278] loop2: p172 start 318767104 is beyond EOD, truncated [ 30.907174][ T5278] loop2: p173 start 318767104 is beyond EOD, truncated [ 30.907181][ T5278] loop2: p174 start 318767104 is beyond EOD, truncated [ 30.907188][ T5278] loop2: p175 start 318767104 is beyond EOD, truncated [ 30.907195][ T5278] loop2: p176 start 318767104 is beyond EOD, truncated [ 30.907202][ T5278] loop2: p177 start 318767104 is beyond EOD, truncated [ 30.907209][ T5278] loop2: p178 start 318767104 is beyond EOD, truncated [ 30.907216][ T5278] loop2: p179 start 318767104 is beyond EOD, truncated [ 30.907223][ T5278] loop2: p180 start 318767104 is beyond EOD, truncated [ 30.907230][ T5278] loop2: p181 start 318767104 is beyond EOD, truncated [ 30.907242][ T5278] loop2: p182 start 318767104 is beyond EOD, truncated [ 30.907249][ T5278] loop2: p183 start 318767104 is beyond EOD, truncated [ 30.907256][ T5278] loop2: p184 start 318767104 is beyond EOD, truncated [ 30.907263][ T5278] loop2: p185 start 318767104 is beyond EOD, truncated [ 30.907270][ T5278] loop2: p186 start 318767104 is beyond EOD, truncated [ 30.907277][ T5278] loop2: p187 start 318767104 is beyond EOD, truncated [ 30.907285][ T5278] loop2: p188 start 318767104 is beyond EOD, truncated [ 30.907292][ T5278] loop2: p189 start 318767104 is beyond EOD, truncated [ 30.907299][ T5278] loop2: p190 start 318767104 is beyond EOD, truncated [ 30.907306][ T5278] loop2: p191 start 318767104 is beyond EOD, truncated [ 30.907313][ T5278] loop2: p192 start 318767104 is beyond EOD, truncated [ 30.907320][ T5278] loop2: p193 start 318767104 is beyond EOD, truncated [ 30.907327][ T5278] loop2: p194 start 318767104 is beyond EOD, truncated [ 30.907334][ T5278] loop2: p195 start 318767104 is beyond EOD, truncated [ 30.907341][ T5278] loop2: p196 start 318767104 is beyond EOD, truncated [ 30.907348][ T5278] loop2: p197 start 318767104 is beyond EOD, truncated [ 30.907355][ T5278] loop2: p198 start 318767104 is beyond EOD, truncated [ 30.907363][ T5278] loop2: p199 start 318767104 is beyond EOD, truncated [ 30.907370][ T5278] loop2: p200 start 318767104 is beyond EOD, truncated [ 30.907377][ T5278] loop2: p201 start 318767104 is beyond EOD, truncated [ 30.907384][ T5278] loop2: p202 start 318767104 is beyond EOD, truncated [ 30.907391][ T5278] loop2: p203 start 318767104 is beyond EOD, truncated [ 30.907398][ T5278] loop2: p204 start 318767104 is beyond EOD, truncated [ 30.907405][ T5278] loop2: p205 start 318767104 is beyond EOD, truncated [ 30.907412][ T5278] loop2: p206 start 318767104 is beyond EOD, truncated [ 30.907419][ T5278] loop2: p207 start 318767104 is beyond EOD, truncated [ 30.907426][ T5278] loop2: p208 start 318767104 is beyond EOD, truncated [ 30.907434][ T5278] loop2: p209 start 318767104 is beyond EOD, truncated [ 30.907441][ T5278] loop2: p210 start 318767104 is beyond EOD, truncated [ 30.907448][ T5278] loop2: p211 start 318767104 is beyond EOD, truncated [ 30.907455][ T5278] loop2: p212 start 318767104 is beyond EOD, truncated [ 30.907462][ T5278] loop2: p213 start 318767104 is beyond EOD, truncated [ 30.907469][ T5278] loop2: p214 start 318767104 is beyond EOD, truncated [ 30.907476][ T5278] loop2: p215 start 318767104 is beyond EOD, truncated [ 30.907483][ T5278] loop2: p216 start 318767104 is beyond EOD, truncated [ 30.907490][ T5278] loop2: p217 start 318767104 is beyond EOD, truncated [ 30.907498][ T5278] loop2: p218 start 318767104 is beyond EOD, truncated [ 30.907505][ T5278] loop2: p219 start 318767104 is beyond EOD, truncated [ 30.907512][ T5278] loop2: p220 start 318767104 is beyond EOD, truncated [ 30.907519][ T5278] loop2: p221 start 318767104 is beyond EOD, truncated [ 30.907526][ T5278] loop2: p222 start 318767104 is beyond EOD, truncated [ 30.907533][ T5278] loop2: p223 start 318767104 is beyond EOD, truncated [ 30.907540][ T5278] loop2: p224 start 318767104 is beyond EOD, truncated [ 30.907547][ T5278] loop2: p225 start 318767104 is beyond EOD, truncated [ 30.907554][ T5278] loop2: p226 start 318767104 is beyond EOD, truncated [ 30.907561][ T5278] loop2: p227 start 318767104 is beyond EOD, truncated [ 30.907568][ T5278] loop2: p228 start 318767104 is beyond EOD, truncated [ 30.907575][ T5278] loop2: p229 start 318767104 is beyond EOD, truncated [ 30.907582][ T5278] loop2: p230 start 318767104 is beyond EOD, truncated [ 30.907590][ T5278] loop2: p231 start 318767104 is beyond EOD, truncated [ 30.907597][ T5278] loop2: p232 start 318767104 is beyond EOD, truncated [ 30.907604][ T5278] loop2: p233 start 318767104 is beyond EOD, truncated [ 30.907611][ T5278] loop2: p234 start 318767104 is beyond EOD, truncated [ 30.907618][ T5278] loop2: p235 start 318767104 is beyond EOD, truncated [ 30.907625][ T5278] loop2: p236 start 318767104 is beyond EOD, truncated [ 30.907632][ T5278] loop2: p237 start 318767104 is beyond EOD, truncated [ 30.907639][ T5278] loop2: p238 start 318767104 is beyond EOD, truncated [ 30.907646][ T5278] loop2: p239 start 318767104 is beyond EOD, truncated [ 30.907653][ T5278] loop2: p240 start 318767104 is beyond EOD, truncated [ 30.907661][ T5278] loop2: p241 start 318767104 is beyond EOD, truncated [ 30.907668][ T5278] loop2: p242 start 318767104 is beyond EOD, truncated [ 30.907675][ T5278] loop2: p243 start 318767104 is beyond EOD, truncated [ 30.907682][ T5278] loop2: p244 start 318767104 is beyond EOD, truncated [ 30.907689][ T5278] loop2: p245 start 318767104 is beyond EOD, truncated [ 30.907696][ T5278] loop2: p246 start 318767104 is beyond EOD, truncated [ 30.907703][ T5278] loop2: p247 start 318767104 is beyond EOD, truncated [ 30.907710][ T5278] loop2: p248 start 318767104 is beyond EOD, truncated [ 30.907717][ T5278] loop2: p249 start 318767104 is beyond EOD, truncated [ 30.907724][ T5278] loop2: p250 start 318767104 is beyond EOD, truncated [ 30.907731][ T5278] loop2: p251 start 318767104 is beyond EOD, truncated [ 30.907738][ T5278] loop2: p252 start 318767104 is beyond EOD, truncated [ 30.907746][ T5278] loop2: p253 start 318767104 is beyond EOD, truncated [ 30.907753][ T5278] loop2: p254 start 318767104 is beyond EOD, truncated [ 30.907760][ T5278] loop2: p255 start 318767104 is beyond EOD, truncated [ 30.925578][ T4713] Bluetooth: hci3: command tx timeout [ 30.925600][ T4713] Bluetooth: hci0: command tx timeout [ 30.925617][ T4713] Bluetooth: hci2: command tx timeout [ 30.989833][ T4724] Bluetooth: hci1: command tx timeout [ 31.929741][ T4345] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 31.929753][ T4345] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 32.092437][ T1090] tipc: Node number set to 2303322882 [ 32.130953][ T4345] loop2: p1 < p5 p6 p7 p8 p9 p10 p11 p12 p13 p14 p15 p16 p17 p18 p19 p20 p21 p22 p23 p24 p25 p26 p27 p28 p29 p30 p31 p32 p33 p34 p35 p36 p37 p38 p39 p40 p41 p42 p43 p44 p45 p46 p47 p48 p49 p50 p51 p52 p53 p54 p55 p56 p57 p58 p59 p60 p61 p62 p63 p64 p65 p66 p67 p68 p69 p70 p71 p72 p73 p74 p75 p76 p77 p78 p79 p80 p81 p82 p83 p84 p85 p86 p87 p88 p89 p90 p91 p92 p93 p94 p95 p96 p97 p98 p99 p100 p101 p102 p103 p104 p105 p106 p107 p108 p109 p110 p111 p112 p113 p114 p115 p116 p117 p118 p119 p120 p121 p122 p123 p124 p125 p126 p127 p128 p129 p130 p131 p132 p133 p134 p135 p136 p137 p138 p139 p140 p141 p142 p143 p144 p145 p146 p147 p148 p149 p150 p151 p152 p153 p154 p155 p156 p157 p158 p159 p160 p161 p162 p163 p164 p165 p166 p167 p168 p169 p170 p171 p172 p173 p174 p175 p176 p177 p178 p179 p180 p181 p182 p183 p184 p185 p186 p187 p188 p189 p190 p191 p192 p193 p194 p195 p196 p197 p198 p199 p200 p201 p202 p203 p204 p205 p206 p207 p208 p209 p210 p211 p212 p213 p214 p215 p216 p217 p218 p219 p220 p221 p222 p223 p224 p225 p22 [ 32.133516][ T4345] loop2: p4 start 318767104 is beyond EOD, truncated [ 32.133529][ T4345] loop2: p5 start 318767104 is beyond EOD, truncated [ 32.133538][ T4345] loop2: p6 start 318767104 is beyond EOD, truncated [ 32.133548][ T4345] loop2: p7 start 318767104 is beyond EOD, truncated [ 32.133556][ T4345] loop2: p8 start 318767104 is beyond EOD, truncated [ 32.133564][ T4345] loop2: p9 start 318767104 is beyond EOD, truncated [ 32.133572][ T4345] loop2: p10 start 318767104 is beyond EOD, truncated [ 32.133580][ T4345] loop2: p11 start 318767104 is beyond EOD, truncated [ 32.133587][ T4345] loop2: p12 start 318767104 is beyond EOD, truncated [ 32.133593][ T4345] loop2: p13 start 318767104 is beyond EOD, truncated [ 32.133600][ T4345] loop2: p14 start 318767104 is beyond EOD, truncated [ 32.133607][ T4345] loop2: p15 start 318767104 is beyond EOD, truncated [ 32.133613][ T4345] loop2: p16 start 318767104 is beyond EOD, truncated [ 32.133620][ T4345] loop2: p17 start 318767104 is beyond EOD, truncated [ 32.133626][ T4345] loop2: p18 start 318767104 is beyond EOD, truncated [ 32.133633][ T4345] loop2: p19 start 318767104 is beyond EOD, truncated [ 32.133639][ T4345] loop2: p20 start 318767104 is beyond EOD, truncated [ 32.133646][ T4345] loop2: p21 start 318767104 is beyond EOD, truncated [ 32.133652][ T4345] loop2: p22 start 318767104 is beyond EOD, truncated [ 32.133658][ T4345] loop2: p23 start 318767104 is beyond EOD, truncated [ 32.133665][ T4345] loop2: p24 start 318767104 is beyond EOD, truncated [ 32.133671][ T4345] loop2: p25 start 318767104 is beyond EOD, truncated [ 32.133678][ T4345] loop2: p26 start 318767104 is beyond EOD, truncated [ 32.133684][ T4345] loop2: p27 start 318767104 is beyond EOD, truncated [ 32.133691][ T4345] loop2: p28 start 318767104 is beyond EOD, truncated [ 32.133697][ T4345] loop2: p29 start 318767104 is beyond EOD, truncated [ 32.133704][ T4345] loop2: p30 start 318767104 is beyond EOD, truncated [ 32.133710][ T4345] loop2: p31 start 318767104 is beyond EOD, truncated [ 32.133717][ T4345] loop2: p32 start 318767104 is beyond EOD, truncated [ 32.133723][ T4345] loop2: p33 start 318767104 is beyond EOD, truncated [ 32.133729][ T4345] loop2: p34 start 318767104 is beyond EOD, truncated [ 32.133736][ T4345] loop2: p35 start 318767104 is beyond EOD, truncated [ 32.133742][ T4345] loop2: p36 start 318767104 is beyond EOD, truncated [ 32.133749][ T4345] loop2: p37 start 318767104 is beyond EOD, truncated [ 32.133755][ T4345] loop2: p38 start 318767104 is beyond EOD, truncated [ 32.133762][ T4345] loop2: p39 start 318767104 is beyond EOD, truncated [ 32.133768][ T4345] loop2: p40 start 318767104 is beyond EOD, truncated [ 32.133775][ T4345] loop2: p41 start 318767104 is beyond EOD, truncated [ 32.133781][ T4345] loop2: p42 start 318767104 is beyond EOD, truncated [ 32.133787][ T4345] loop2: p43 start 318767104 is beyond EOD, truncated [ 32.133794][ T4345] loop2: p44 start 318767104 is beyond EOD, truncated [ 32.133800][ T4345] loop2: p45 start 318767104 is beyond EOD, truncated [ 32.133807][ T4345] loop2: p46 start 318767104 is beyond EOD, truncated [ 32.133813][ T4345] loop2: p47 start 318767104 is beyond EOD, truncated [ 32.133819][ T4345] loop2: p48 start 318767104 is beyond EOD, truncated [ 32.133826][ T4345] loop2: p49 start 318767104 is beyond EOD, truncated [ 32.133832][ T4345] loop2: p50 start 318767104 is beyond EOD, truncated [ 32.133839][ T4345] loop2: p51 start 318767104 is beyond EOD, truncated [ 32.133845][ T4345] loop2: p52 start 318767104 is beyond EOD, truncated [ 32.133851][ T4345] loop2: p53 start 318767104 is beyond EOD, truncated [ 32.133858][ T4345] loop2: p54 start 318767104 is beyond EOD, truncated [ 32.133864][ T4345] loop2: p55 start 318767104 is beyond EOD, truncated [ 32.133871][ T4345] loop2: p56 start 318767104 is beyond EOD, truncated [ 32.133877][ T4345] loop2: p57 start 318767104 is beyond EOD, truncated [ 32.133883][ T4345] loop2: p58 start 318767104 is beyond EOD, truncated [ 32.133890][ T4345] loop2: p59 start 318767104 is beyond EOD, truncated [ 32.133896][ T4345] loop2: p60 start 318767104 is beyond EOD, truncated [ 32.133902][ T4345] loop2: p61 start 318767104 is beyond EOD, truncated [ 32.133909][ T4345] loop2: p62 start 318767104 is beyond EOD, truncated [ 32.133915][ T4345] loop2: p63 start 318767104 is beyond EOD, truncated [ 32.133922][ T4345] loop2: p64 start 318767104 is beyond EOD, truncated [ 32.133928][ T4345] loop2: p65 start 318767104 is beyond EOD, truncated [ 32.133934][ T4345] loop2: p66 start 318767104 is beyond EOD, truncated [ 32.133941][ T4345] loop2: p67 start 318767104 is beyond EOD, truncated [ 32.133947][ T4345] loop2: p68 start 318767104 is beyond EOD, truncated [ 32.133954][ T4345] loop2: p69 start 318767104 is beyond EOD, truncated [ 32.133960][ T4345] loop2: p70 start 318767104 is beyond EOD, truncated [ 32.133966][ T4345] loop2: p71 start 318767104 is beyond EOD, truncated [ 32.133973][ T4345] loop2: p72 start 318767104 is beyond EOD, truncated [ 32.133979][ T4345] loop2: p73 start 318767104 is beyond EOD, truncated [ 32.133986][ T4345] loop2: p74 start 318767104 is beyond EOD, truncated [ 32.133992][ T4345] loop2: p75 start 318767104 is beyond EOD, truncated [ 32.133999][ T4345] loop2: p76 start 318767104 is beyond EOD, truncated [ 32.134005][ T4345] loop2: p77 start 318767104 is beyond EOD, truncated [ 32.134011][ T4345] loop2: p78 start 318767104 is beyond EOD, truncated [ 32.134018][ T4345] loop2: p79 start 318767104 is beyond EOD, truncated [ 32.134024][ T4345] loop2: p80 start 318767104 is beyond EOD, truncated [ 32.134031][ T4345] loop2: p81 start 318767104 is beyond EOD, truncated [ 32.134037][ T4345] loop2: p82 start 318767104 is beyond EOD, truncated [ 32.134043][ T4345] loop2: p83 start 318767104 is beyond EOD, truncated [ 32.134050][ T4345] loop2: p84 start 318767104 is beyond EOD, truncated [ 32.134056][ T4345] loop2: p85 start 318767104 is beyond EOD, truncated [ 32.134063][ T4345] loop2: p86 start 318767104 is beyond EOD, truncated [ 32.134069][ T4345] loop2: p87 start 318767104 is beyond EOD, truncated [ 32.134075][ T4345] loop2: p88 start 318767104 is beyond EOD, truncated [ 32.134082][ T4345] loop2: p89 start 318767104 is beyond EOD, truncated [ 32.134088][ T4345] loop2: p90 start 318767104 is beyond EOD, truncated [ 32.134095][ T4345] loop2: p91 start 318767104 is beyond EOD, truncated [ 32.134101][ T4345] loop2: p92 start 318767104 is beyond EOD, truncated [ 32.134107][ T4345] loop2: p93 start 318767104 is beyond EOD, truncated [ 32.134114][ T4345] loop2: p94 start 318767104 is beyond EOD, truncated [ 32.134120][ T4345] loop2: p95 start 318767104 is beyond EOD, truncated [ 32.134127][ T4345] loop2: p96 start 318767104 is beyond EOD, truncated [ 32.134133][ T4345] loop2: p97 start 318767104 is beyond EOD, truncated [ 32.134139][ T4345] loop2: p98 start 318767104 is beyond EOD, truncated [ 32.134146][ T4345] loop2: p99 start 318767104 is beyond EOD, truncated [ 32.134152][ T4345] loop2: p100 start 318767104 is beyond EOD, truncated [ 32.134159][ T4345] loop2: p101 start 318767104 is beyond EOD, truncated [ 32.134165][ T4345] loop2: p102 start 318767104 is beyond EOD, truncated [ 32.134172][ T4345] loop2: p103 start 318767104 is beyond EOD, truncated [ 32.134178][ T4345] loop2: p104 start 318767104 is beyond EOD, truncated [ 32.134184][ T4345] loop2: p105 start 318767104 is beyond EOD, truncated [ 32.134191][ T4345] loop2: p106 start 318767104 is beyond EOD, truncated [ 32.134197][ T4345] loop2: p107 start 318767104 is beyond EOD, truncated [ 32.134204][ T4345] loop2: p108 start 318767104 is beyond EOD, truncated [ 32.134210][ T4345] loop2: p109 start 318767104 is beyond EOD, truncated [ 32.134217][ T4345] loop2: p110 start 318767104 is beyond EOD, truncated [ 32.134228][ T4345] loop2: p111 start 318767104 is beyond EOD, truncated [ 32.134235][ T4345] loop2: p112 start 318767104 is beyond EOD, truncated [ 32.134241][ T4345] loop2: p113 start 318767104 is beyond EOD, truncated [ 32.134248][ T4345] loop2: p114 start 318767104 is beyond EOD, truncated [ 32.134255][ T4345] loop2: p115 start 318767104 is beyond EOD, truncated [ 32.134261][ T4345] loop2: p116 start 318767104 is beyond EOD, truncated [ 32.134268][ T4345] loop2: p117 start 318767104 is beyond EOD, truncated [ 32.134274][ T4345] loop2: p118 start 318767104 is beyond EOD, truncated [ 32.134280][ T4345] loop2: p119 start 318767104 is beyond EOD, truncated [ 32.134287][ T4345] loop2: p120 start 318767104 is beyond EOD, truncated [ 32.134293][ T4345] loop2: p121 start 318767104 is beyond EOD, truncated [ 32.134300][ T4345] loop2: p122 start 318767104 is beyond EOD, truncated [ 32.134306][ T4345] loop2: p123 start 318767104 is beyond EOD, truncated [ 32.134313][ T4345] loop2: p124 start 318767104 is beyond EOD, truncated [ 32.134319][ T4345] loop2: p125 start 318767104 is beyond EOD, truncated [ 32.134325][ T4345] loop2: p126 start 318767104 is beyond EOD, truncated [ 32.134332][ T4345] loop2: p127 start 318767104 is beyond EOD, truncated [ 32.134338][ T4345] loop2: p128 start 318767104 is beyond EOD, truncated [ 32.134345][ T4345] loop2: p129 start 318767104 is beyond EOD, truncated [ 32.134351][ T4345] loop2: p130 start 318767104 is beyond EOD, truncated [ 32.134357][ T4345] loop2: p131 start 318767104 is beyond EOD, truncated [ 32.134364][ T4345] loop2: p132 start 318767104 is beyond EOD, truncated [ 32.134370][ T4345] loop2: p133 start 318767104 is beyond EOD, truncated [ 32.134377][ T4345] loop2: p134 start 318767104 is beyond EOD, truncated [ 32.134383][ T4345] loop2: p135 start 318767104 is beyond EOD, truncated [ 32.134390][ T4345] loop2: p136 start 318767104 is beyond EOD, truncated [ 32.134396][ T4345] loop2: p137 start 318767104 is beyond EOD, truncated [ 32.134402][ T4345] loop2: p138 start 318767104 is beyond EOD, truncated [ 32.134409][ T4345] loop2: p139 start 318767104 is beyond EOD, truncated [ 32.134415][ T4345] loop2: p140 start 318767104 is beyond EOD, truncated [ 32.134422][ T4345] loop2: p141 start 318767104 is beyond EOD, truncated [ 32.134428][ T4345] loop2: p142 start 318767104 is beyond EOD, truncated [ 32.134435][ T4345] loop2: p143 start 318767104 is beyond EOD, truncated [ 32.134441][ T4345] loop2: p144 start 318767104 is beyond EOD, truncated [ 32.134447][ T4345] loop2: p145 start 318767104 is beyond EOD, truncated [ 32.134454][ T4345] loop2: p146 start 318767104 is beyond EOD, truncated [ 32.134460][ T4345] loop2: p147 start 318767104 is beyond EOD, truncated [ 32.134467][ T4345] loop2: p148 start 318767104 is beyond EOD, truncated [ 32.134473][ T4345] loop2: p149 start 318767104 is beyond EOD, truncated [ 32.134479][ T4345] loop2: p150 start 318767104 is beyond EOD, truncated [ 32.134486][ T4345] loop2: p151 start 318767104 is beyond EOD, truncated [ 32.134492][ T4345] loop2: p152 start 318767104 is beyond EOD, truncated [ 32.134499][ T4345] loop2: p153 start 318767104 is beyond EOD, truncated [ 32.134505][ T4345] loop2: p154 start 318767104 is beyond EOD, truncated [ 32.134512][ T4345] loop2: p155 start 318767104 is beyond EOD, truncated [ 32.134518][ T4345] loop2: p156 start 318767104 is beyond EOD, truncated [ 32.134525][ T4345] loop2: p157 start 318767104 is beyond EOD, truncated [ 32.134531][ T4345] loop2: p158 start 318767104 is beyond EOD, truncated [ 32.134537][ T4345] loop2: p159 start 318767104 is beyond EOD, truncated [ 32.134544][ T4345] loop2: p160 start 318767104 is beyond EOD, truncated [ 32.134550][ T4345] loop2: p161 start 318767104 is beyond EOD, truncated [ 32.134557][ T4345] loop2: p162 start 318767104 is beyond EOD, truncated [ 32.134563][ T4345] loop2: p163 start 318767104 is beyond EOD, truncated [ 32.134569][ T4345] loop2: p164 start 318767104 is beyond EOD, truncated [ 32.134576][ T4345] loop2: p165 start 318767104 is beyond EOD, truncated [ 32.134582][ T4345] loop2: p166 start 318767104 is beyond EOD, truncated [ 32.134589][ T4345] loop2: p167 start 318767104 is beyond EOD, truncated [ 32.134595][ T4345] loop2: p168 start 318767104 is beyond EOD, truncated [ 32.134602][ T4345] loop2: p169 start 318767104 is beyond EOD, truncated [ 32.134608][ T4345] loop2: p170 start 318767104 is beyond EOD, truncated [ 32.134614][ T4345] loop2: p171 start 318767104 is beyond EOD, truncated [ 32.134634][ T4345] loop2: p172 start 318767104 is beyond EOD, truncated [ 32.134642][ T4345] loop2: p173 start 318767104 is beyond EOD, truncated [ 32.134650][ T4345] loop2: p174 start 318767104 is beyond EOD, truncated [ 32.134657][ T4345] loop2: p175 start 318767104 is beyond EOD, truncated [ 32.134664][ T4345] loop2: p176 start 318767104 is beyond EOD, truncated [ 32.134670][ T4345] loop2: p177 start 318767104 is beyond EOD, truncated [ 32.134677][ T4345] loop2: p178 start 318767104 is beyond EOD, truncated [ 32.134683][ T4345] loop2: p179 start 318767104 is beyond EOD, truncated [ 32.134690][ T4345] loop2: p180 start 318767104 is beyond EOD, truncated [ 32.134696][ T4345] loop2: p181 start 318767104 is beyond EOD, truncated [ 32.134703][ T4345] loop2: p182 start 318767104 is beyond EOD, truncated [ 32.134709][ T4345] loop2: p183 start 318767104 is beyond EOD, truncated [ 32.134716][ T4345] loop2: p184 start 318767104 is beyond EOD, truncated [ 32.134722][ T4345] loop2: p185 start 318767104 is beyond EOD, truncated [ 32.134728][ T4345] loop2: p186 start 318767104 is beyond EOD, truncated [ 32.134735][ T4345] loop2: p187 start 318767104 is beyond EOD, truncated [ 32.134741][ T4345] loop2: p188 start 318767104 is beyond EOD, truncated [ 32.134748][ T4345] loop2: p189 start 318767104 is beyond EOD, truncated [ 32.134754][ T4345] loop2: p190 start 318767104 is beyond EOD, truncated [ 32.134761][ T4345] loop2: p191 start 318767104 is beyond EOD, truncated [ 32.134767][ T4345] loop2: p192 start 318767104 is beyond EOD, truncated [ 32.134773][ T4345] loop2: p193 start 318767104 is beyond EOD, truncated [ 32.134780][ T4345] loop2: p194 start 318767104 is beyond EOD, truncated [ 32.134786][ T4345] loop2: p195 start 318767104 is beyond EOD, truncated [ 32.134793][ T4345] loop2: p196 start 318767104 is beyond EOD, truncated [ 32.134799][ T4345] loop2: p197 start 318767104 is beyond EOD, truncated [ 32.134806][ T4345] loop2: p198 start 318767104 is beyond EOD, truncated [ 32.134812][ T4345] loop2: p199 start 318767104 is beyond EOD, truncated [ 32.134819][ T4345] loop2: p200 start 318767104 is beyond EOD, truncated [ 32.134825][ T4345] loop2: p201 start 318767104 is beyond EOD, truncated [ 32.134831][ T4345] loop2: p202 start 318767104 is beyond EOD, truncated [ 32.134838][ T4345] loop2: p203 start 318767104 is beyond EOD, truncated [ 32.134844][ T4345] loop2: p204 start 318767104 is beyond EOD, truncated [ 32.134851][ T4345] loop2: p205 start 318767104 is beyond EOD, truncated [ 32.134857][ T4345] loop2: p206 start 318767104 is beyond EOD, truncated [ 32.134864][ T4345] loop2: p207 start 318767104 is beyond EOD, truncated [ 32.134870][ T4345] loop2: p208 start 318767104 is beyond EOD, truncated [ 32.134877][ T4345] loop2: p209 start 318767104 is beyond EOD, truncated [ 32.134883][ T4345] loop2: p210 start 318767104 is beyond EOD, truncated [ 32.134889][ T4345] loop2: p211 start 318767104 is beyond EOD, truncated [ 32.134896][ T4345] loop2: p212 start 318767104 is beyond EOD, truncated [ 32.134902][ T4345] loop2: p213 start 318767104 is beyond EOD, truncated [ 32.134909][ T4345] loop2: p214 start 318767104 is beyond EOD, truncated [ 32.134915][ T4345] loop2: p215 start 318767104 is beyond EOD, truncated [ 32.134922][ T4345] loop2: p216 start 318767104 is beyond EOD, truncated [ 32.134928][ T4345] loop2: p217 start 318767104 is beyond EOD, truncated [ 32.134935][ T4345] loop2: p218 start 318767104 is beyond EOD, truncated [ 32.134941][ T4345] loop2: p219 start 318767104 is beyond EOD, truncated [ 32.134947][ T4345] loop2: p220 start 318767104 is beyond EOD, truncated [ 32.134954][ T4345] loop2: p221 start 318767104 is beyond EOD, truncated [ 32.134960][ T4345] loop2: p222 start 318767104 is beyond EOD, truncated [ 32.134967][ T4345] loop2: p223 start 318767104 is beyond EOD, truncated [ 32.134973][ T4345] loop2: p224 start 318767104 is beyond EOD, truncated [ 32.134980][ T4345] loop2: p225 start 318767104 is beyond EOD, truncated [ 32.134986][ T4345] loop2: p226 start 318767104 is beyond EOD, truncated [ 32.134992][ T4345] loop2: p227 start 318767104 is beyond EOD, truncated [ 32.134999][ T4345] loop2: p228 start 318767104 is beyond EOD, truncated [ 32.135005][ T4345] loop2: p229 start 318767104 is beyond EOD, truncated [ 32.135012][ T4345] loop2: p230 start 318767104 is beyond EOD, truncated [ 32.135018][ T4345] loop2: p231 start 318767104 is beyond EOD, truncated [ 32.135025][ T4345] loop2: p232 start 318767104 is beyond EOD, truncated [ 32.135031][ T4345] loop2: p233 start 318767104 is beyond EOD, truncated [ 32.135038][ T4345] loop2: p234 start 318767104 is beyond EOD, truncated [ 32.135044][ T4345] loop2: p235 start 318767104 is beyond EOD, truncated [ 32.135050][ T4345] loop2: p236 start 318767104 is beyond EOD, truncated [ 32.135057][ T4345] loop2: p237 start 318767104 is beyond EOD, truncated [ 32.135063][ T4345] loop2: p238 start 318767104 is beyond EOD, truncated [ 32.135070][ T4345] loop2: p239 start 318767104 is beyond EOD, truncated [ 32.135076][ T4345] loop2: p240 start 318767104 is beyond EOD, truncated [ 32.135083][ T4345] loop2: p241 start 318767104 is beyond EOD, truncated [ 32.135089][ T4345] loop2: p242 start 318767104 is beyond EOD, truncated [ 32.135095][ T4345] loop2: p243 start 318767104 is beyond EOD, truncated [ 32.135102][ T4345] loop2: p244 start 318767104 is beyond EOD, truncated [ 32.135108][ T4345] loop2: p245 start 318767104 is beyond EOD, truncated [ 32.135115][ T4345] loop2: p246 start 318767104 is beyond EOD, truncated [ 32.135121][ T4345] loop2: p247 start 318767104 is beyond EOD, truncated [ 32.135128][ T4345] loop2: p248 start 318767104 is beyond EOD, truncated [ 32.135134][ T4345] loop2: p249 start 318767104 is beyond EOD, truncated [ 32.135140][ T4345] loop2: p250 start 318767104 is beyond EOD, truncated [ 32.135147][ T4345] loop2: p251 start 318767104 is beyond EOD, truncated [ 32.135153][ T4345] loop2: p252 start 318767104 is beyond EOD, truncated [ 32.135160][ T4345] loop2: p253 start 318767104 is beyond EOD, truncated [ 32.135166][ T4345] loop2: p254 start 318767104 is beyond EOD, truncated [ 32.135173][ T4345] loop2: p255 start 318767104 is beyond EOD, truncated [ 32.518348][ T5285] loop0: detected capacity change from 0 to 1024 [ 32.639681][ T5285] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 32.652772][ T5274] psci: CPU1 killed (polled 0 ms) [ 32.666467][ T4702] udevd[4702]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 32.730419][ T4711] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.842117][ T4796] input: syz0 as /devices/virtual/misc/uhid/0002:0001:0002.0001/input/input3 [ 32.868186][ T4796] hid-generic 0002:0001:0002.0001: input,hidraw0: HID v0.01 Mouse [syz0] on syz0 [ 32.873630][ T5302] loop4: detected capacity change from 0 to 256 [ 32.973147][ T3137] tipc: Subscription rejected, illegal request [ 33.071060][ T4724] Bluetooth: hci1: command 0x2016 tx timeout [ 33.210022][ T4796] rxe_eth0 speed is unknown, defaulting to 1000 [ 33.255968][ T4710] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.341162][ T5328] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 33.341185][ T5328] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 33.363357][ T5328] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #16: comm syz.1.130: invalid indirect mapped block 4294967295 (level 0) [ 33.363380][ T5328] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 33.363554][ T5328] EXT4-fs (loop1): Remounting filesystem read-only [ 33.363664][ T5328] EXT4-fs (loop1): 1 orphan inode deleted [ 33.363673][ T5328] EXT4-fs (loop1): 1 truncate cleaned up [ 33.364203][ T5328] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 33.788698][ T5344] __nla_validate_parse: 5 callbacks suppressed [ 33.788713][ T5344] netlink: 40 bytes leftover after parsing attributes in process `syz.4.132'. [ 33.878501][ T5351] netlink: 'syz.4.134': attribute type 10 has an invalid length. [ 33.882123][ T5351] syz_tun: entered promiscuous mode [ 33.908449][ T5351] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 33.934508][ T5347] 9p: Bad value for 'wfdno' [ 34.241505][ T4714] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.272059][ T5367] netlink: 'syz.2.138': attribute type 21 has an invalid length. [ 34.392822][ T5375] EXT4-fs: Ignoring removed nobh option [ 34.396309][ T5375] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 34.397611][ T5375] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 219 vs 220 free clusters [ 34.398583][ T5375] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.142: invalid indirect mapped block 4278190080 (level 0) [ 34.398600][ T5375] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 34.399173][ C0] EXT4-fs (loop2): error count since last fsck: 2 [ 34.399186][ C0] EXT4-fs (loop2): initial error at time 34: ext4_mb_generate_buddy:1317 [ 34.399201][ C0] EXT4-fs (loop2): last error at time 34: ext4_free_branches:1023: inode 11 [ 34.410592][ T5375] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.142: invalid indirect mapped block 1 (level 1) [ 34.410613][ T5375] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 34.422828][ T5375] EXT4-fs (loop2): 1 truncate cleaned up [ 34.423217][ T5375] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 34.710707][ T5384] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 34.720984][ T5384] EXT4-fs (loop0): external journal device major/minor numbers have changed [ 34.732110][ T5384] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 34.732146][ T5384] block device autoloading is deprecated and will be removed. [ 34.732489][ T5384] EXT4-fs (loop0): couldn't read superblock of external journal [ 34.807035][ T5387] vfat: Unknown parameter 'TÓlR}·î˜È­…' [ 34.807624][ T4722] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.868020][ T5389] EXT4-fs (loop1): Test dummy encryption mode enabled [ 34.875366][ T5389] EXT4-fs error (device loop1): ext4_orphan_get:1403: inode #15: comm syz.1.145: inode has both inline data and extents flags [ 34.875390][ T5389] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 34.875514][ T5389] EXT4-fs error (device loop1): ext4_orphan_get:1408: comm syz.1.145: couldn't read orphan inode 15 (err -117) [ 34.875528][ T5389] loop1: lost filesystem error report for type 5 error -117 [ 34.876025][ T5389] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 34.933836][ T5393] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 34.975390][ T4714] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.044624][ T5397] cougar: G6 mapped to space [ 35.064005][ T4722] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.149760][ T4724] Bluetooth: hci1: command 0x2016 tx timeout [ 35.406108][ T5409] netlink: 32 bytes leftover after parsing attributes in process `syz.1.148'. [ 35.428430][ T5407] netlink: 'syz.4.150': attribute type 10 has an invalid length. [ 35.428444][ T5407] netlink: 4 bytes leftover after parsing attributes in process `syz.4.150'. [ 35.528545][ T5418] FAULT_INJECTION: forcing a failure. [ 35.528545][ T5418] name failslab, interval 1, probability 0, space 0, times 0 [ 35.528569][ T5418] CPU: 0 UID: 0 PID: 5418 Comm: syz.4.152 Not tainted syzkaller #0 PREEMPT [ 35.528581][ T5418] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 35.528587][ T5418] Call trace: [ 35.528590][ T5418] show_stack+0x2c/0x3c (C) [ 35.528613][ T5418] __dump_stack+0x30/0x40 [ 35.528626][ T5418] dump_stack_lvl+0xd8/0x12c [ 35.528638][ T5418] dump_stack+0x1c/0x28 [ 35.528649][ T5418] should_fail_ex+0x418/0x58c [ 35.528658][ T5418] should_failslab+0xc4/0x120 [ 35.528667][ T5418] __kmalloc_noprof+0x108/0x6c8 [ 35.528677][ T5418] tomoyo_realpath_from_path+0xbc/0x4dc [ 35.528690][ T5418] tomoyo_check_open_permission+0x1c4/0x394 [ 35.528701][ T5418] tomoyo_file_open+0x78/0xcc [ 35.528713][ T5418] security_file_open+0xbc/0x258 [ 35.528724][ T5418] do_dentry_open+0x2a8/0xfbc [ 35.528736][ T5418] vfs_open+0x44/0x2dc [ 35.528747][ T5418] path_openat+0x1084/0x18f0 [ 35.528758][ T5418] do_file_open+0x1c8/0x2e8 [ 35.528769][ T5418] do_sys_openat2+0x114/0x1e8 [ 35.528780][ T5418] do_sys_open+0xb0/0xe0 [ 35.528792][ T5418] __arm64_sys_openat+0xa8/0xc4 [ 35.528804][ T5418] invoke_syscall+0x98/0x244 [ 35.528816][ T5418] el0_svc_common+0xec/0x23c [ 35.528828][ T5418] do_el0_svc+0x4c/0x5c [ 35.528839][ T5418] el0_svc+0x60/0x1d8 [ 35.528848][ T5418] el0t_64_sync_handler+0x44/0x104 [ 35.528856][ T5418] el0t_64_sync+0x198/0x19c [ 35.528866][ T5418] ERROR: Out of memory at tomoyo_realpath_from_path. [ 35.696984][ T5423] 9p: Could not find request transport: fO [ 35.913194][ T5440] set_capacity_and_notify: 7 callbacks suppressed [ 35.913207][ T5440] loop4: detected capacity change from 0 to 4096 [ 35.919104][ T5440] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 35.919122][ T5440] EXT4-fs (loop4): Test dummy encryption mode enabled [ 35.932335][ T5440] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 35.993347][ T5440] fscrypt: AES-256-CBC-CTS using implementation "cts-cbc-aes-ce" [ 36.041717][ T5440] fscrypt: AES-256-XTS using blk-crypto-fallback [ 36.048013][ T5440] overlayfs: invalid origin (00000079000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000) [ 36.048972][ T5448] loop1: detected capacity change from 0 to 1024 [ 36.056113][ T5448] EXT4-fs: Ignoring removed bh option [ 36.056136][ T5448] EXT4-fs: Ignoring removed bh option [ 36.063054][ T5448] EXT4-fs (loop1): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 36.086807][ T5448] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 36.161524][ T5448] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 36.215694][ T4711] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.222043][ T5458] fuse: Bad value for 'fd' [ 36.233214][ T5454] loop2: detected capacity change from 0 to 2048 [ 36.253739][ T5454] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 36.303228][ T4722] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.386670][ T4714] EXT4-fs error (device loop1): ext4_read_inline_dir:1512: inode #12: block 7: comm syz-executor: path /25/control/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=60 fake=0 [ 36.394063][ T4714] EXT4-fs (loop1): Remounting filesystem read-only [ 36.404551][ T4714] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.416681][ T5462] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 36.418443][ T5468] loop2: detected capacity change from 0 to 512 [ 36.429035][ T30] kauditd_printk_skb: 18 callbacks suppressed [ 36.429043][ T30] audit: type=1326 audit(36.390:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5467 comm="syz.0.166" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb4778be8 code=0x7ffc0000 [ 36.429062][ T30] audit: type=1326 audit(36.390:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5467 comm="syz.0.166" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb4778be8 code=0x7ffc0000 [ 36.449104][ T5462] xt_CONNSECMARK: invalid mode: 0 [ 36.466378][ T5469] FAULT_INJECTION: forcing a failure. [ 36.466378][ T5469] name fail_futex, interval 1, probability 0, space 0, times 1 [ 36.466394][ T5469] CPU: 0 UID: 0 PID: 5469 Comm: syz.0.166 Not tainted syzkaller #0 PREEMPT [ 36.466405][ T5469] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 36.466410][ T5469] Call trace: [ 36.466413][ T5469] show_stack+0x2c/0x3c (C) [ 36.466433][ T5469] __dump_stack+0x30/0x40 [ 36.466444][ T5469] dump_stack_lvl+0xd8/0x12c [ 36.466453][ T5469] dump_stack+0x1c/0x28 [ 36.466463][ T5469] should_fail_ex+0x418/0x58c [ 36.466471][ T5469] should_fail+0x14/0x24 [ 36.466477][ T5469] get_futex_key+0xd0c/0x12b0 [ 36.466487][ T5469] futex_wait_setup+0x58/0x674 [ 36.466497][ T5469] __futex_wait+0x108/0x25c [ 36.466506][ T5469] futex_wait+0x108/0x2c0 [ 36.466515][ T5469] do_futex+0x320/0x378 [ 36.466524][ T5469] __arm64_sys_futex+0x2e4/0x418 [ 36.466533][ T5469] invoke_syscall+0x98/0x244 [ 36.466543][ T5469] el0_svc_common+0x19c/0x23c [ 36.466552][ T5469] do_el0_svc+0x4c/0x5c [ 36.466562][ T5469] el0_svc+0x60/0x1d8 [ 36.466570][ T5469] el0t_64_sync_handler+0x44/0x104 [ 36.466577][ T5469] el0t_64_sync+0x198/0x19c [ 36.484855][ T30] audit: type=1326 audit(36.430:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5467 comm="syz.0.166" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=56 compat=0 ip=0xffffb475baac code=0x7ffc0000 [ 36.484876][ T30] audit: type=1326 audit(36.430:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5467 comm="syz.0.166" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=64 compat=0 ip=0xffffb475baac code=0x7ffc0000 [ 36.484892][ T30] audit: type=1326 audit(36.430:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5467 comm="syz.0.166" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb4778be8 code=0x7ffc0000 [ 36.484906][ T30] audit: type=1326 audit(36.430:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5467 comm="syz.0.166" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=63 compat=0 ip=0xffffb475baac code=0x7ffc0000 [ 36.484921][ T30] audit: type=1326 audit(36.430:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5467 comm="syz.0.166" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=64 compat=0 ip=0xffffb475baac code=0x7ffc0000 [ 36.484935][ T30] audit: type=1326 audit(36.430:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5467 comm="syz.0.166" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=57 compat=0 ip=0xffffb475baac code=0x7ffc0000 [ 36.484948][ T30] audit: type=1326 audit(36.430:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5467 comm="syz.0.166" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb4778be8 code=0x7ffc0000 [ 36.484963][ T30] audit: type=1326 audit(36.430:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5467 comm="syz.0.166" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb4778be8 code=0x7ffc0000 [ 36.562738][ T5468] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 36.562760][ T5468] FAT-fs (loop2): Filesystem has been set read-only [ 36.563755][ T5471] netlink: 'syz.1.165': attribute type 2 has an invalid length. [ 36.563768][ T5471] netlink: 8 bytes leftover after parsing attributes in process `syz.1.165'. [ 36.564243][ T5462] netlink: 16 bytes leftover after parsing attributes in process `syz.4.161'. [ 36.614816][ T5477] loop0: detected capacity change from 0 to 512 [ 36.619047][ T5474] tipc: Started in network mode [ 36.619068][ T5474] tipc: Node identity 5e9a3724e60f, cluster identity 4711 [ 36.619119][ T5474] tipc: Enabled bearer , priority 0 [ 36.630908][ T5478] FAT-fs (loop2): error, invalid access to FAT (entry 0x00020000) [ 36.649692][ T5477] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 36.649701][ T5477] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 36.654557][ T5477] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #16: comm syz.0.168: invalid indirect mapped block 4294967295 (level 0) [ 36.654578][ T5477] loop0: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 36.656202][ T5477] EXT4-fs (loop0): Remounting filesystem read-only [ 36.656343][ T5477] EXT4-fs (loop0): 1 orphan inode deleted [ 36.656354][ T5477] EXT4-fs (loop0): 1 truncate cleaned up [ 36.656777][ T5477] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 36.684612][ T5478] sctp: [Deprecated]: syz.2.163 (pid 5478) Use of struct sctp_assoc_value in delayed_ack socket option. [ 36.684612][ T5478] Use struct sctp_sack_info instead [ 36.742434][ T5436] tipc: Subscription rejected, illegal request [ 36.745507][ T5488] netlink: 24 bytes leftover after parsing attributes in process `syz.4.172'. [ 36.886906][ T5504] netlink: 12 bytes leftover after parsing attributes in process `syz.4.175'. [ 36.887013][ T5506] netlink: 12 bytes leftover after parsing attributes in process `syz.4.175'. [ 36.907561][ T5504] loop4: detected capacity change from 0 to 512 [ 36.919266][ T5504] EXT4-fs (loop4): Cannot use DAX on a filesystem that may contain inline data [ 37.229484][ T4724] Bluetooth: hci1: command 0x2016 tx timeout [ 37.638750][ T4710] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.790008][ T4796] tipc: Node number set to 3096786724 [ 37.946055][ T5569] netlink: 'syz.2.176': attribute type 21 has an invalid length. [ 37.997469][ T5578] overlay: Unknown parameter 'obj_type' [ 37.997613][ T5579] overlay: Unknown parameter 'obj_type' [ 38.052908][ T5583] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 38.106057][ T5587] netlink: 'syz.2.184': attribute type 10 has an invalid length. [ 38.106072][ T5587] netlink: 4 bytes leftover after parsing attributes in process `syz.2.184'. [ 38.178409][ T5590] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.214417][ T5594] loop0: detected capacity change from 0 to 512 [ 38.235207][ T5594] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 38.255715][ T5594] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.303226][ T5602] netlink: 8 bytes leftover after parsing attributes in process `syz.4.190'. [ 38.315120][ T5602] loop4: detected capacity change from 0 to 512 [ 38.401609][ T5602] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 38.444256][ T5602] EXT4-fs error (device loop4): ext4_ext_check_inode:521: inode #4: comm syz.4.190: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 38.444287][ T5602] loop4: lost file I/O error report for ino 4 type 5 pos 0x0 len 0x0 error -117 [ 38.444441][ T5602] EXT4-fs (loop4): Remounting filesystem read-only [ 38.444472][ T5602] EXT4-fs warning (device loop4): ext4_enable_quotas:7305: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 38.444660][ T5602] EXT4-fs (loop4): mount failed [ 38.449162][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 38.449178][ C0] EXT4-fs (loop4): initial error at time 38: ext4_ext_check_inode:521: inode 4 [ 38.449196][ C0] EXT4-fs (loop4): last error at time 38: ext4_ext_check_inode:521: inode 4 [ 38.476914][ T5609] netlink: 'syz.1.192': attribute type 21 has an invalid length. [ 38.570379][ T5613] FAULT_INJECTION: forcing a failure. [ 38.570379][ T5613] name failslab, interval 1, probability 0, space 0, times 0 [ 38.570398][ T5613] CPU: 0 UID: 0 PID: 5613 Comm: syz.3.194 Not tainted syzkaller #0 PREEMPT [ 38.570408][ T5613] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 38.570414][ T5613] Call trace: [ 38.570417][ T5613] show_stack+0x2c/0x3c (C) [ 38.570438][ T5613] __dump_stack+0x30/0x40 [ 38.570452][ T5613] dump_stack_lvl+0xd8/0x12c [ 38.570463][ T5613] dump_stack+0x1c/0x28 [ 38.570475][ T5613] should_fail_ex+0x418/0x58c [ 38.570484][ T5613] should_failslab+0xc4/0x120 [ 38.570493][ T5613] kmem_cache_alloc_lru_noprof+0x98/0x5d8 [ 38.570503][ T5613] shmem_alloc_inode+0x2c/0x48 [ 38.570511][ T5613] alloc_inode+0x68/0x198 [ 38.570523][ T5613] new_inode+0x20/0x50 [ 38.570534][ T5613] shmem_get_inode+0xac/0x788 [ 38.570542][ T5613] __shmem_file_setup+0x168/0x284 [ 38.570554][ T5613] shmem_zero_setup+0x90/0x130 [ 38.570566][ T5613] mmap_region+0x15d0/0x1ff4 [ 38.570578][ T5613] do_mmap+0xb88/0x1104 [ 38.570587][ T5613] vm_mmap_pgoff+0x298/0x46c [ 38.570597][ T5613] ksys_mmap_pgoff+0xd0/0x5b4 [ 38.570606][ T5613] __arm64_sys_mmap+0x110/0x12c [ 38.570618][ T5613] invoke_syscall+0x98/0x244 [ 38.570630][ T5613] el0_svc_common+0xec/0x23c [ 38.570643][ T5613] do_el0_svc+0x4c/0x5c [ 38.570655][ T5613] el0_svc+0x60/0x1d8 [ 38.570663][ T5613] el0t_64_sync_handler+0x44/0x104 [ 38.570671][ T5613] el0t_64_sync+0x198/0x19c [ 38.572330][ T4718] Bluetooth: hci1: unexpected event for opcode 0x1804 [ 38.637464][ T5638] netlink: 'syz.2.197': attribute type 10 has an invalid length. [ 38.772067][ T4710] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.783158][ T5647] binder: 5645:5647 ioctl 400c620e 20000100 returned -22 [ 38.784455][ T5646] binder: 5645:5646 ioctl 400c620e 20000100 returned -22 [ 38.813164][ T5646] capability: warning: `syz.2.200' uses deprecated v2 capabilities in a way that may be insecure [ 38.814550][ T4796] hid-generic 0003:0001:0001.0002: hidraw0: USB HID v0.01 Mouse [syz1] on syz0 [ 38.944166][ T5661] fido_id[5661]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 39.175547][ T5670] loop2: detected capacity change from 0 to 512 [ 39.181507][ T5670] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 39.193527][ T5672] netlink: 'syz.0.205': attribute type 21 has an invalid length. [ 39.203762][ T5670] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 72 vs 41 free clusters [ 39.204712][ T5670] EXT4-fs (loop2): Remounting filesystem read-only [ 39.204910][ T5670] EXT4-fs (loop2): 1 truncate cleaned up [ 39.205358][ T5670] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.255319][ T4722] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.316236][ T5683] xt_HMARK: proto mask must be zero with L3 mode [ 39.322915][ T5683] xt_CT: You must specify a L4 protocol and not use inversions on it [ 39.363855][ T5682] FAULT_INJECTION: forcing a failure. [ 39.363855][ T5682] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 39.363874][ T5682] CPU: 0 UID: 0 PID: 5682 Comm: syz.0.208 Not tainted syzkaller #0 PREEMPT [ 39.363885][ T5682] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 39.363891][ T5682] Call trace: [ 39.363894][ T5682] show_stack+0x2c/0x3c (C) [ 39.363917][ T5682] __dump_stack+0x30/0x40 [ 39.363928][ T5682] dump_stack_lvl+0xd8/0x12c [ 39.363939][ T5682] dump_stack+0x1c/0x28 [ 39.363949][ T5682] should_fail_ex+0x418/0x58c [ 39.363958][ T5682] should_fail+0x14/0x24 [ 39.363965][ T5682] should_fail_usercopy+0x20/0x30 [ 39.363972][ T5682] simple_read_from_buffer+0xc4/0x238 [ 39.363983][ T5682] proc_fail_nth_read+0x1a8/0x248 [ 39.363992][ T5682] vfs_read+0x230/0x8c8 [ 39.363999][ T5682] ksys_read+0x12c/0x228 [ 39.364006][ T5682] __arm64_sys_read+0x84/0x98 [ 39.364013][ T5682] invoke_syscall+0x98/0x244 [ 39.364023][ T5682] el0_svc_common+0x19c/0x23c [ 39.364033][ T5682] do_el0_svc+0x4c/0x5c [ 39.364042][ T5682] el0_svc+0x60/0x1d8 [ 39.364050][ T5682] el0t_64_sync_handler+0x44/0x104 [ 39.364057][ T5682] el0t_64_sync+0x198/0x19c [ 39.547718][ T5700] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 39.592829][ T5703] __nla_validate_parse: 1 callbacks suppressed [ 39.592841][ T5703] netlink: 4 bytes leftover after parsing attributes in process `syz.0.214'. [ 39.592855][ T5703] openvswitch: netlink: nsh attribute has 220 unknown bytes. [ 39.604121][ T5708] capability: warning: `syz.2.215' uses 32-bit capabilities (legacy support in use) [ 39.644856][ T5703] loop0: detected capacity change from 0 to 256 [ 39.645179][ T5703] vfat: Unknown parameter 'rodir utf8' [ 39.799782][ T3325] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 39.799813][ T3325] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 39.799830][ T3325] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 39.799845][ T3325] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 39.824843][ T5720] netlink: 'syz.2.219': attribute type 10 has an invalid length. [ 39.824857][ T5720] netlink: 4 bytes leftover after parsing attributes in process `syz.2.219'. [ 39.826953][ T5720] FAULT_INJECTION: forcing a failure. [ 39.826953][ T5720] name failslab, interval 1, probability 0, space 0, times 0 [ 39.826969][ T5720] CPU: 0 UID: 0 PID: 5720 Comm: syz.2.219 Not tainted syzkaller #0 PREEMPT [ 39.826979][ T5720] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 39.826985][ T5720] Call trace: [ 39.826988][ T5720] show_stack+0x2c/0x3c (C) [ 39.827008][ T5720] __dump_stack+0x30/0x40 [ 39.827020][ T5720] dump_stack_lvl+0xd8/0x12c [ 39.827032][ T5720] dump_stack+0x1c/0x28 [ 39.827043][ T5720] should_fail_ex+0x418/0x58c [ 39.827052][ T5720] should_failslab+0xc4/0x120 [ 39.827061][ T5720] __kmalloc_node_noprof+0x10c/0x6e4 [ 39.827071][ T5720] __vmalloc_node_range_noprof+0x43c/0xe9c [ 39.827081][ T5720] __vmalloc_node_noprof+0xec/0x14c [ 39.827091][ T5720] vmalloc_noprof+0x3c/0x4c [ 39.827101][ T5720] lz4_alloc_ctx+0x18/0x30 [ 39.827113][ T5720] crypto_acomp_alloc_streams+0xbc/0x2fc [ 39.827124][ T5720] crypto_scomp_init_tfm+0x58/0x188 [ 39.827134][ T5720] crypto_create_tfm_node+0x11c/0x304 [ 39.827147][ T5720] crypto_init_scomp_ops_async+0x60/0x130 [ 39.827157][ T5720] crypto_acomp_init_tfm+0x80/0x2f4 [ 39.827167][ T5720] crypto_create_tfm_node+0x11c/0x304 [ 39.827179][ T5720] crypto_alloc_tfm_node+0x100/0x22c [ 39.827191][ T5720] crypto_alloc_acomp_node+0x44/0x58 [ 39.827201][ T5720] zswap_cpu_comp_prepare+0x19c/0x4e8 [ 39.827212][ T5720] cpuhp_invoke_callback+0x3ec/0x6cc [ 39.827235][ T5720] cpuhp_issue_call+0x2b0/0x3e8 [ 39.827246][ T5720] __cpuhp_state_add_instance_cpuslocked+0x164/0x2d4 [ 39.827259][ T5720] __cpuhp_state_add_instance+0x38/0x58 [ 39.827270][ T5720] zswap_pool_create+0x228/0x53c [ 39.827281][ T5720] zswap_compressor_param_set+0x200/0x54c [ 39.827292][ T5720] param_attr_store+0x144/0x1bc [ 39.827301][ T5720] module_attr_store+0x6c/0x94 [ 39.827309][ T5720] sysfs_kf_write+0xe0/0x108 [ 39.827317][ T5720] kernfs_fop_write_iter+0x260/0x3b8 [ 39.827329][ T5720] vfs_write+0x51c/0xa0c [ 39.827337][ T5720] ksys_write+0x12c/0x228 [ 39.827345][ T5720] __arm64_sys_write+0x84/0x98 [ 39.827353][ T5720] invoke_syscall+0x98/0x244 [ 39.827365][ T5720] el0_svc_common+0xec/0x23c [ 39.827377][ T5720] do_el0_svc+0x4c/0x5c [ 39.827388][ T5720] el0_svc+0x60/0x1d8 [ 39.827397][ T5720] el0t_64_sync_handler+0x44/0x104 [ 39.827405][ T5720] el0t_64_sync+0x198/0x19c [ 39.827478][ T5720] syz.2.219: vmalloc error: size 20480, failed to allocated page array size 40, mode:0xcc2(GFP_KERNEL|__GFP_HIGHMEM), nodemask=(null),cpuset=/,mems_allowed=0 [ 39.827536][ T5720] CPU: 0 UID: 0 PID: 5720 Comm: syz.2.219 Not tainted syzkaller #0 PREEMPT [ 39.827545][ T5720] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 39.827549][ T5720] Call trace: [ 39.827552][ T5720] show_stack+0x2c/0x3c (C) [ 39.827565][ T5720] __dump_stack+0x30/0x40 [ 39.827576][ T5720] dump_stack_lvl+0xd8/0x12c [ 39.827588][ T5720] dump_stack+0x1c/0x28 [ 39.827600][ T5720] warn_alloc+0x1c4/0x1d8 [ 39.827608][ T5720] __vmalloc_node_range_noprof+0x670/0xe9c [ 39.827619][ T5720] __vmalloc_node_noprof+0xec/0x14c [ 39.827629][ T5720] vmalloc_noprof+0x3c/0x4c [ 39.827639][ T5720] lz4_alloc_ctx+0x18/0x30 [ 39.827651][ T5720] crypto_acomp_alloc_streams+0xbc/0x2fc [ 39.827662][ T5720] crypto_scomp_init_tfm+0x58/0x188 [ 39.827672][ T5720] crypto_create_tfm_node+0x11c/0x304 [ 39.827685][ T5720] crypto_init_scomp_ops_async+0x60/0x130 [ 39.827695][ T5720] crypto_acomp_init_tfm+0x80/0x2f4 [ 39.827705][ T5720] crypto_create_tfm_node+0x11c/0x304 [ 39.827717][ T5720] crypto_alloc_tfm_node+0x100/0x22c [ 39.827730][ T5720] crypto_alloc_acomp_node+0x44/0x58 [ 39.827740][ T5720] zswap_cpu_comp_prepare+0x19c/0x4e8 [ 39.827750][ T5720] cpuhp_invoke_callback+0x3ec/0x6cc [ 39.827763][ T5720] cpuhp_issue_call+0x2b0/0x3e8 [ 39.827775][ T5720] __cpuhp_state_add_instance_cpuslocked+0x164/0x2d4 [ 39.827787][ T5720] __cpuhp_state_add_instance+0x38/0x58 [ 39.827799][ T5720] zswap_pool_create+0x228/0x53c [ 39.827810][ T5720] zswap_compressor_param_set+0x200/0x54c [ 39.827821][ T5720] param_attr_store+0x144/0x1bc [ 39.827830][ T5720] module_attr_store+0x6c/0x94 [ 39.827837][ T5720] sysfs_kf_write+0xe0/0x108 [ 39.827845][ T5720] kernfs_fop_write_iter+0x260/0x3b8 [ 39.827857][ T5720] vfs_write+0x51c/0xa0c [ 39.827865][ T5720] ksys_write+0x12c/0x228 [ 39.827873][ T5720] __arm64_sys_write+0x84/0x98 [ 39.827881][ T5720] invoke_syscall+0x98/0x244 [ 39.827893][ T5720] el0_svc_common+0xec/0x23c [ 39.827905][ T5720] do_el0_svc+0x4c/0x5c [ 39.827916][ T5720] el0_svc+0x60/0x1d8 [ 39.827924][ T5720] el0t_64_sync_handler+0x44/0x104 [ 39.827932][ T5720] el0t_64_sync+0x198/0x19c [ 39.827942][ T5720] Mem-Info: [ 39.827946][ T5720] active_anon:20 inactive_anon:5137 isolated_anon:0 [ 39.827946][ T5720] active_file:2958 inactive_file:15834 isolated_file:0 [ 39.827946][ T5720] unevictable:768 dirty:1988 writeback:0 [ 39.827946][ T5720] slab_reclaimable:9133 slab_unreclaimable:91513 [ 39.827946][ T5720] mapped:29356 shmem:954 pagetables:1058 [ 39.827946][ T5720] sec_pagetables:0 bounce:0 [ 39.827946][ T5720] kernel_misc_reclaimable:0 [ 39.827946][ T5720] free:1464515 free_pcp:12917 free_cma:7616 [ 39.828411][ T5720] Node 0 active_anon:80kB inactive_anon:20548kB active_file:11832kB inactive_file:63336kB unevictable:3072kB isolated(anon):0kB isolated(file):0kB mapped:117424kB dirty:7952kB writeback:0kB shmem:3816kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:9536kB pagetables:4232kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 39.828445][ T5720] Node 0 DMA free:3077888kB boost:0kB min:20400kB low:25500kB high:30600kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3145728kB managed:3080192kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:30464kB [ 39.828470][ T5720] lowmem_reserve[]: 0 0 3637 3637 3637 [ 39.828490][ T5720] Node 0 Normal free:2780172kB boost:0kB min:24652kB low:30812kB high:36972kB reserved_highatomic:0kB free_highatomic:0kB active_anon:80kB inactive_anon:20548kB active_file:11832kB inactive_file:63336kB unevictable:3072kB writepending:7952kB zspages:0kB present:5242880kB managed:3724676kB mlocked:0kB bounce:0kB free_pcp:51668kB local_pcp:51668kB free_cma:0kB [ 39.828515][ T5720] lowmem_reserve[]: 0 0 0 0 0 [ 39.828533][ T5720] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 1*256kB (C) 1*512kB (C) 1*1024kB (C) 0*2048kB 751*4096kB (MC) = 3077888kB [ 39.828604][ T5720] Node 0 Normal: 745*4kB (UME) 869*8kB (UME) 652*16kB (UME) 254*32kB (UME) 33*64kB (UME) 3*128kB (UME) 1*256kB (E) 1*512kB (M) 4*1024kB (UM) 8*2048kB (UME) 666*4096kB (UM) = 2780172kB [ 39.828685][ T5720] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 39.828692][ T5720] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=32768kB [ 39.828699][ T5720] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 39.828706][ T5720] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=64kB [ 39.828712][ T5720] 19742 total pagecache pages [ 39.828716][ T5720] 0 pages in swap cache [ 39.828720][ T5720] Free swap = 124996kB [ 39.828724][ T5720] Total swap = 124996kB [ 39.828727][ T5720] 2097152 pages RAM [ 39.828731][ T5720] 0 pages HighMem/MovableOnly [ 39.828734][ T5720] 395935 pages reserved [ 39.828737][ T5720] 8192 pages cma reserved [ 39.828741][ T5720] 1 pages hwpoisoned [ 39.840642][ T5720] zswap: could not alloc crypto acomp lz4 : -ENOMEM [ 40.085578][ T5724] bond1: entered allmulticast mode [ 40.086644][ T5724] 8021q: adding VLAN 0 to HW filter on device bond1 [ 40.124062][ T5724] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 40.125610][ T5724] EXT4-fs (loop2): orphan cleanup on readonly fs [ 40.125793][ T5724] EXT4-fs error (device loop2): ext4_orphan_get:1429: comm syz.2.221: bad orphan inode 15 [ 40.125810][ T5724] loop2: lost filesystem error report for type 5 error -117 [ 40.126856][ T5724] EXT4-fs (loop2): Remounting filesystem read-only [ 40.126870][ T5724] ext4_test_bit(bit=14, block=18) = 1 [ 40.126878][ T5724] is_bad_inode(inode)=0 [ 40.126883][ T5724] NEXT_ORPHAN(inode)=1023 [ 40.126888][ T5724] max_ino=32 [ 40.126892][ T5724] i_nlink=0 [ 40.156149][ T5724] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 40.206749][ T4722] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.330240][ T5739] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.344203][ T5739] EXT4-fs error (device loop2): ext4_xattr_block_get:608: inode #12: comm syz.2.226: corrupted xattr block 6: invalid header [ 40.345408][ T5739] EXT4-fs error (device loop2): ext4_xattr_block_get:608: inode #12: comm syz.2.226: corrupted xattr block 6: invalid header [ 40.358338][ T5739] EXT4-fs error (device loop2): ext4_xattr_block_get:608: inode #12: comm syz.2.226: corrupted xattr block 6: invalid header [ 40.358690][ T5739] EXT4-fs error (device loop2): ext4_xattr_block_get:608: inode #12: comm syz.2.226: corrupted xattr block 6: invalid header [ 40.367392][ T5745] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -13 [ 40.367547][ T5745] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.229: invalid indirect mapped block 2683928664 (level 1) [ 40.367562][ T5745] loop4: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 40.367974][ T5745] EXT4-fs (loop4): 1 truncate cleaned up [ 40.368427][ T5745] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.384156][ T5739] EXT4-fs error (device loop2): ext4_get_inode_usage:899: inode #12: comm syz.2.226: corrupted xattr block 6: invalid header [ 40.393172][ T5745] netlink: 8 bytes leftover after parsing attributes in process `syz.4.229'. [ 40.421989][ T4722] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.425863][ T5750] netlink: 24 bytes leftover after parsing attributes in process `syz.3.230'. [ 40.655420][ T5769] EXT4-fs: Ignoring removed oldalloc option [ 40.661147][ T5769] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 40.661159][ T5769] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 40.672017][ T5769] EXT4-fs (loop0): 1 truncate cleaned up [ 40.672476][ T5769] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 40.698369][ T5772] EXT4-fs: Ignoring removed i_version option [ 40.730827][ T5772] EXT4-fs (loop3): mounted filesystem 00000000-0500-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.605889][ T5776] overlayfs: invalid origin (0000) [ 41.639109][ T5772] EXT4-fs error (device loop3): ext4_find_dest_de:2052: inode #2: block 16: comm syz.3.237: bad entry in directory: directory entry overrun - offset=60, inode=21519, rec_len=1024, size=1024 fake=0 [ 41.665910][ T5778] netlink: 20 bytes leftover after parsing attributes in process `syz.2.238'. [ 41.667343][ T5778] netlink: 'syz.2.238': attribute type 32 has an invalid length. [ 41.667360][ T5778] netlink: 8 bytes leftover after parsing attributes in process `syz.2.238'. [ 41.679234][ T5778] netlink: 20 bytes leftover after parsing attributes in process `syz.2.238'. [ 41.724664][ T4715] EXT4-fs (loop3): unmounting filesystem 00000000-0500-0000-0000-000000000000. [ 41.740195][ T4710] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2863: Unable to expand inode 11. Delete some EAs or run e2fsck. [ 41.784758][ T4710] EXT4-fs error (device loop0): ext4_lookup:1787: inode #14: comm syz-executor: invalid fast symlink length 39 [ 41.787694][ T4710] EXT4-fs error (device loop0): ext4_lookup:1787: inode #14: comm syz-executor: invalid fast symlink length 39 [ 41.896741][ T5787] netlink: 4 bytes leftover after parsing attributes in process `syz.2.238'. [ 41.926944][ T4982] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.050951][ T5797] netlink: 24 bytes leftover after parsing attributes in process `syz.3.242'. [ 42.104960][ T5799] set_capacity_and_notify: 6 callbacks suppressed [ 42.104970][ T5799] loop3: detected capacity change from 0 to 128 [ 42.156540][ T5799] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 42.196410][ T1187] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.487276][ T5805] fscrypt: loop3: 1 inode(s) still busy after removing key with identifier 69b2f6edeee720cce0577937eb8a6751, including ino 12 [ 42.505412][ T5807] netlink: 24 bytes leftover after parsing attributes in process `syz.2.244'. [ 42.535346][ T1187] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.577144][ T1187] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.621382][ T1187] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.638966][ T5811] loop2: detected capacity change from 0 to 512 [ 42.649668][ T5811] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 42.663482][ T5811] EXT4-fs (loop2): 1 truncate cleaned up [ 42.671180][ T5811] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 42.707269][ T5811] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 42.707459][ T5811] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 42.813804][ T4724] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 42.815751][ T4724] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 42.816257][ T4724] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 42.817603][ T4724] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 42.817806][ T4724] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 43.073849][ T5821] ptrace attach of "ci-upstream-gce-arm64/syz-executor exec"[4722] was attempted by "ci-upstream-gce-arm64/syz-executor exec"[5821] [ 43.094505][ T5821] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 43.094686][ T5821] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 43.095699][ T4715] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 43.096519][ T1187] bridge_slave_1: left allmulticast mode [ 43.096542][ T1187] bridge_slave_1: left promiscuous mode [ 43.096934][ T1187] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.164815][ T1187] bridge_slave_0: left allmulticast mode [ 43.164832][ T1187] bridge_slave_0: left promiscuous mode [ 43.164931][ T1187] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.184723][ T1187] bridge0: left allmulticast mode [ 43.229371][ T5442] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:487: comm ext4lazyinit: Invalid block bitmap block 3 in block_group 0 [ 43.231453][ T5442] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:487: comm ext4lazyinit: Invalid block bitmap block 3 in block_group 0 [ 43.411701][ T1187] tipc: Disabling bearer [ 43.423983][ T4711] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.443281][ T1187] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 43.453518][ T1187] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 43.461940][ T1187] bond0 (unregistering): Released all slaves [ 43.511684][ T1187] tipc: Left network mode [ 43.518291][ T30] kauditd_printk_skb: 19 callbacks suppressed [ 43.518301][ T30] audit: type=1326 audit(43.480:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5830 comm="syz.4.251" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffad178be8 code=0x7ffc0000 [ 43.518320][ T30] audit: type=1326 audit(43.480:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5830 comm="syz.4.251" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffad178be8 code=0x7ffc0000 [ 43.541692][ T30] audit: type=1326 audit(43.510:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5830 comm="syz.4.251" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffad178be8 code=0x7ffc0000 [ 43.575189][ T5834] loop3: detected capacity change from 0 to 512 [ 43.583821][ T5834] EXT4-fs: Ignoring removed oldalloc option [ 43.583838][ T5834] EXT4-fs: Ignoring removed i_version option [ 43.586573][ T5834] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 43.603187][ T5834] EXT4-fs error (device loop3) in ext4_process_orphan:346: Corrupt filesystem [ 43.603201][ T5834] loop3: lost filesystem error report for type 5 error -117 [ 43.609171][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 43.609188][ C0] EXT4-fs (loop3): initial error at time 43: ext4_process_orphan:346 [ 43.609201][ C0] EXT4-fs (loop3): last error at time 43: ext4_process_orphan:346 [ 43.620641][ T5834] EXT4-fs (loop3): 2 truncates cleaned up [ 43.625693][ T5834] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.645452][ T5839] FAULT_INJECTION: forcing a failure. [ 43.645452][ T5839] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 43.645470][ T5839] CPU: 0 UID: 0 PID: 5839 Comm: syz.1.253 Not tainted syzkaller #0 PREEMPT [ 43.645484][ T5839] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 43.645490][ T5839] Call trace: [ 43.645494][ T5839] show_stack+0x2c/0x3c (C) [ 43.645511][ T5839] __dump_stack+0x30/0x40 [ 43.645522][ T5839] dump_stack_lvl+0xd8/0x12c [ 43.645532][ T5839] dump_stack+0x1c/0x28 [ 43.645541][ T5839] should_fail_ex+0x418/0x58c [ 43.645549][ T5839] should_fail+0x14/0x24 [ 43.645555][ T5839] should_fail_usercopy+0x20/0x30 [ 43.645563][ T5839] _inline_copy_from_user+0x3c/0x174 [ 43.645574][ T5839] copy_msghdr_from_user+0xb8/0x194 [ 43.645581][ T5839] ___sys_sendmsg+0x14c/0x224 [ 43.645591][ T5839] __sys_sendmsg+0x158/0x204 [ 43.645600][ T5839] __arm64_sys_sendmsg+0x88/0x9c [ 43.645609][ T5839] invoke_syscall+0x98/0x244 [ 43.645619][ T5839] el0_svc_common+0xec/0x23c [ 43.645629][ T5839] do_el0_svc+0x4c/0x5c [ 43.645638][ T5839] el0_svc+0x60/0x1d8 [ 43.645646][ T5839] el0t_64_sync_handler+0x44/0x104 [ 43.645653][ T5839] el0t_64_sync+0x198/0x19c [ 43.756126][ T5834] EXT4-fs error (device loop3): ext4_validate_block_bitmap:436: comm syz.3.252: bg 0: block 5: invalid block bitmap [ 43.828701][ T4715] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.988899][ T5813] rxe_eth0 speed is unknown, defaulting to 1000 [ 44.132650][ T5866] syz.3.257 uses obsolete (PF_INET,SOCK_PACKET) [ 44.162272][ T1187] hsr_slave_0: left promiscuous mode [ 44.166333][ T1187] hsr_slave_1: left promiscuous mode [ 44.167543][ T1187] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 44.167562][ T1187] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 44.168132][ T1187] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 44.168146][ T1187] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 44.196248][ T1187] veth1_macvtap: left promiscuous mode [ 44.196289][ T1187] veth0_macvtap: left promiscuous mode [ 44.196340][ T1187] veth1_vlan: left promiscuous mode [ 44.196377][ T1187] veth0_vlan: left promiscuous mode [ 44.391739][ T5876] sctp: [Deprecated]: syz.4.259 (pid 5876) Use of struct sctp_assoc_value in delayed_ack socket option. [ 44.391739][ T5876] Use struct sctp_sack_info instead [ 44.392465][ T5876] sctp: [Deprecated]: syz.4.259 (pid 5876) Use of struct sctp_assoc_value in delayed_ack socket option. [ 44.392465][ T5876] Use struct sctp_sack_info instead [ 44.440236][ T1187] team0 (unregistering): Port device team_slave_1 removed [ 44.444555][ T1187] team0 (unregistering): Port device team_slave_0 removed [ 44.549267][ T4402] 8021q: adding VLAN 0 to HW filter on device eth0 [ 44.737968][ T5883] overlayfs: failed to get inode (-116) [ 44.738087][ T5883] overlayfs: failed to get inode (-116) [ 44.767103][ T5883] overlayfs: failed to get inode (-116) [ 44.767281][ T5883] overlayfs: failed to get inode (-116) [ 44.808594][ T5892] futex_wake_op: syz.4.262 tries to shift op by -1; fix this program [ 44.829758][ T4724] Bluetooth: hci0: command tx timeout [ 44.983754][ T5813] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.983788][ T5813] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.983878][ T5813] bridge_slave_0: entered allmulticast mode [ 44.998073][ T5813] bridge_slave_0: entered promiscuous mode [ 45.003243][ T5813] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.007267][ T5813] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.007332][ T5813] bridge_slave_1: entered allmulticast mode [ 45.007721][ T5813] bridge_slave_1: entered promiscuous mode [ 45.068834][ T5813] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 45.077209][ T5813] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 45.125028][ T5813] team0: Port device team_slave_0 added [ 45.128644][ T5813] team0: Port device team_slave_1 added [ 45.178866][ T5813] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 45.178878][ T5813] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 45.178891][ T5813] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 45.198274][ T5813] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 45.198283][ T5813] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 45.198294][ T5813] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 45.277514][ T5813] hsr_slave_0: entered promiscuous mode [ 45.282941][ T5813] hsr_slave_1: entered promiscuous mode [ 45.283996][ T5813] debugfs: 'hsr0' already exists in 'hsr' [ 45.284015][ T5813] Cannot create hsr debugfs directory [ 45.317588][ T5923] fuse: Unknown parameter 'group_id¹Þd-Ì"då' [ 45.488119][ T30] audit: type=1326 audit(45.450:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5926 comm="syz.1.268" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff81378be8 code=0x7ffc0000 [ 45.488143][ T30] audit: type=1326 audit(45.450:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5926 comm="syz.1.268" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff81378be8 code=0x7ffc0000 [ 45.489112][ T30] audit: type=1326 audit(45.450:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5926 comm="syz.1.268" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff81378be8 code=0x7ffc0000 [ 45.518300][ T4402] 8021q: adding VLAN 0 to HW filter on device eth1 [ 45.563149][ T5933] __nla_validate_parse: 1 callbacks suppressed [ 45.563166][ T5933] netlink: 4 bytes leftover after parsing attributes in process `syz.4.270'. [ 45.569002][ T5813] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 45.583635][ T5813] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 45.584787][ T5813] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 45.593473][ T5813] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 45.597016][ T5813] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 45.608675][ T5813] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 45.608963][ T5813] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 45.615128][ T5813] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 45.663067][ T4722] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.701412][ T5938] loop3: detected capacity change from 0 to 512 [ 45.716772][ T5938] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 45.716781][ T5938] EXT4-fs (loop3): couldn't mount as ext2 due to feature incompatibilities [ 45.771691][ T5813] 8021q: adding VLAN 0 to HW filter on device bond0 [ 45.808095][ T5947] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 45.816876][ T5947] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 45.827689][ T5813] 8021q: adding VLAN 0 to HW filter on device team0 [ 45.845143][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.845167][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 45.858079][ T1187] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.858103][ T1187] bridge0: port 2(bridge_slave_1) entered forwarding state [ 45.940357][ T5962] netlink: 44 bytes leftover after parsing attributes in process `syz.4.277'. [ 45.957953][ T5963] netlink: 44 bytes leftover after parsing attributes in process `syz.4.277'. [ 45.976435][ T5962] loop4: detected capacity change from 0 to 128 [ 46.003345][ T5962] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 46.035535][ T5962] netlink: 64 bytes leftover after parsing attributes in process `syz.4.277'. [ 46.042561][ T4718] Bluetooth: hci4: hardware error 0x0d [ 46.053837][ T4724] Bluetooth: hci4: unexpected event for opcode 0x0000 [ 46.135645][ T5972] loop3: detected capacity change from 0 to 512 [ 46.135986][ T5972] EXT4-fs: Ignoring removed oldalloc option [ 46.138698][ T5972] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 46.138719][ T5972] EXT4-fs (loop3): Test dummy encryption mode enabled [ 46.162619][ T5972] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.353189][ T4711] EXT4-fs error (device loop4): ext4_lookup:1787: inode #11: comm syz-executor: iget: checksum invalid [ 46.357028][ T4711] EXT4-fs error (device loop4): ext4_lookup:1787: inode #11: comm syz-executor: iget: checksum invalid [ 46.397482][ T5990] bridge0: port 3(dummy0) entered blocking state [ 46.397524][ T5990] bridge0: port 3(dummy0) entered disabled state [ 46.397622][ T5990] dummy0: entered allmulticast mode [ 46.398157][ T5990] dummy0: entered promiscuous mode [ 46.398472][ T5990] bridge0: port 3(dummy0) entered blocking state [ 46.398500][ T5990] bridge0: port 3(dummy0) entered forwarding state [ 46.470191][ T5983] bond0: (slave syz_tun): Releasing backup interface [ 46.477446][ T4402] 8021q: adding VLAN 0 to HW filter on device eth2 [ 46.484398][ T5813] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 46.501569][ T5983] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 46.595846][ T1187] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 46.595869][ T1187] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.641959][ T1187] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 46.641982][ T1187] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.716377][ T4715] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.735731][ T6002] netlink: 24 bytes leftover after parsing attributes in process `syz.1.282'. [ 46.764984][ T1187] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 46.765006][ T1187] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.802373][ T1187] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 46.802394][ T1187] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.887537][ T5813] veth0_vlan: entered promiscuous mode [ 46.909525][ T4724] Bluetooth: hci0: command tx timeout [ 46.945370][ T6016] ip_tables: iptables: counters copy to user failed while replacing table [ 46.956686][ T5813] veth1_vlan: entered promiscuous mode [ 46.977488][ T6018] binder: 6014:6018 BC_ACQUIRE_DONE u0000000000000001 node 5 cookie mismatch 00000000000000fc != 0000000000000000 [ 46.995345][ T5813] veth0_macvtap: entered promiscuous mode [ 47.092234][ T1187] bridge_slave_1: left allmulticast mode [ 47.092252][ T1187] bridge_slave_1: left promiscuous mode [ 47.092317][ T1187] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.093811][ T4713] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 47.094395][ T4713] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 47.094654][ T4713] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 47.094971][ T4713] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 47.095171][ T4713] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 47.114275][ T1187] bridge_slave_0: left allmulticast mode [ 47.114289][ T1187] bridge_slave_0: left promiscuous mode [ 47.114360][ T1187] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.143290][ T6032] loop2: detected capacity change from 0 to 512 [ 47.148431][ T6032] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 47.148450][ T6032] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 47.180108][ T6032] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #16: comm syz.2.290: invalid indirect mapped block 4294967295 (level 0) [ 47.180130][ T6032] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 47.181945][ T6032] EXT4-fs (loop2): Remounting filesystem read-only [ 47.182099][ T6032] EXT4-fs (loop2): 1 orphan inode deleted [ 47.182109][ T6032] EXT4-fs (loop2): 1 truncate cleaned up [ 47.182561][ T6032] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.228070][ T6034] loop3: detected capacity change from 0 to 1024 [ 47.242535][ T6034] EXT4-fs (loop3): couldn't mount as ext3 due to feature incompatibilities [ 47.356424][ T5435] Bluetooth: hci5: Frame reassembly failed (-84) [ 47.398404][ T1187] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 47.405569][ T1187] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 47.406464][ T1187] bond0 (unregistering): Released all slaves [ 47.431146][ T4402] 8021q: adding VLAN 0 to HW filter on device eth3 [ 47.432667][ T5813] veth1_macvtap: entered promiscuous mode [ 47.487232][ T5813] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 47.498942][ T5813] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 47.521788][ T13] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.521922][ T13] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.521985][ T13] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.522008][ T13] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.672118][ T1450] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 47.672130][ T1450] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 47.756609][ T1450] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 47.756621][ T1450] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 47.808676][ T6063] loop3: detected capacity change from 0 to 512 [ 47.808988][ T6063] EXT4-fs: Ignoring removed oldalloc option [ 47.818360][ T6063] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 47.818369][ T6063] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 47.828842][ T6063] EXT4-fs (loop3): 1 truncate cleaned up [ 47.830736][ T1187] hsr_slave_0: left promiscuous mode [ 47.832787][ T6063] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 47.840596][ T1187] hsr_slave_1: left promiscuous mode [ 47.841096][ T1187] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 47.841110][ T1187] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 47.842636][ T1187] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 47.842650][ T1187] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 47.862933][ T1187] veth1_macvtap: left promiscuous mode [ 47.862959][ T1187] veth0_macvtap: left promiscuous mode [ 47.863010][ T1187] veth1_vlan: left promiscuous mode [ 47.863043][ T1187] veth0_vlan: left promiscuous mode [ 47.907849][ T6063] overlayfs: invalid origin (0000) [ 47.962082][ T4715] EXT4-fs error (device loop3): ext4_lookup:1787: inode #14: comm syz-executor: invalid fast symlink length 39 [ 47.964052][ T4722] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.964597][ T4715] EXT4-fs error (device loop3): ext4_lookup:1787: inode #14: comm syz-executor: invalid fast symlink length 39 [ 48.111823][ T4718] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 48.172547][ T1187] team0 (unregistering): Port device team_slave_1 removed [ 48.176934][ T1187] team0 (unregistering): Port device team_slave_0 removed [ 48.265291][ T4402] 8021q: adding VLAN 0 to HW filter on device eth4 [ 48.268368][ T6078] tipc: Started in network mode [ 48.268385][ T6078] tipc: Node identity ac14140f, cluster identity 4711 [ 48.268604][ T6078] tipc: New replicast peer: 255.255.255.255 [ 48.268880][ T6078] tipc: Enabled bearer , priority 10 [ 48.268919][ T6024] rxe_eth0 speed is unknown, defaulting to 1000 [ 48.313885][ T6088] tipc: Enabling of bearer rejected, already enabled [ 48.411689][ T4715] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.561830][ T6096] FAULT_INJECTION: forcing a failure. [ 48.561830][ T6096] name failslab, interval 1, probability 0, space 0, times 0 [ 48.561849][ T6096] CPU: 0 UID: 0 PID: 6096 Comm: syz.5.299 Not tainted syzkaller #0 PREEMPT [ 48.561859][ T6096] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 48.561865][ T6096] Call trace: [ 48.561868][ T6096] show_stack+0x2c/0x3c (C) [ 48.561889][ T6096] __dump_stack+0x30/0x40 [ 48.561902][ T6096] dump_stack_lvl+0xd8/0x12c [ 48.561914][ T6096] dump_stack+0x1c/0x28 [ 48.561925][ T6096] should_fail_ex+0x418/0x58c [ 48.561934][ T6096] should_failslab+0xc4/0x120 [ 48.561943][ T6096] __kmalloc_cache_noprof+0x94/0x5fc [ 48.561953][ T6096] zs_create_pool+0x358/0x66c [ 48.561961][ T6096] zswap_pool_create+0x160/0x53c [ 48.561972][ T6096] zswap_compressor_param_set+0x200/0x54c [ 48.561984][ T6096] param_attr_store+0x144/0x1bc [ 48.561993][ T6096] module_attr_store+0x6c/0x94 [ 48.562001][ T6096] sysfs_kf_write+0xe0/0x108 [ 48.562010][ T6096] kernfs_fop_write_iter+0x260/0x3b8 [ 48.562022][ T6096] vfs_write+0x51c/0xa0c [ 48.562030][ T6096] ksys_write+0x12c/0x228 [ 48.562037][ T6096] __arm64_sys_write+0x84/0x98 [ 48.562045][ T6096] invoke_syscall+0x98/0x244 [ 48.562058][ T6096] el0_svc_common+0xec/0x23c [ 48.562069][ T6096] do_el0_svc+0x4c/0x5c [ 48.562081][ T6096] el0_svc+0x60/0x1d8 [ 48.562089][ T6096] el0t_64_sync_handler+0x44/0x104 [ 48.562098][ T6096] el0t_64_sync+0x198/0x19c [ 48.616510][ T1187] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.700489][ T1187] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.802606][ T1187] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.820327][ T6115] loop5: detected capacity change from 0 to 512 [ 48.820673][ T6115] EXT4-fs: Ignoring removed oldalloc option [ 48.821984][ T6115] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 48.821992][ T6115] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 48.840817][ T6115] EXT4-fs (loop5): 1 truncate cleaned up [ 48.844566][ T6115] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 48.873157][ T6115] overlayfs: invalid origin (0000) [ 48.894901][ T6118] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 48.922426][ T4402] 8021q: adding VLAN 0 to HW filter on device eth6 [ 48.926141][ T4724] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 48.928762][ T4724] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 48.935415][ T4724] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 48.937745][ T4724] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 48.938344][ T4724] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 48.960140][ T1187] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.975759][ T5813] EXT4-fs error (device loop5): ext4_lookup:1787: inode #14: comm syz-executor: invalid fast symlink length 39 [ 48.975979][ T5813] EXT4-fs error (device loop5): ext4_lookup:1787: inode #14: comm syz-executor: invalid fast symlink length 39 [ 48.990059][ T4718] Bluetooth: hci0: command tx timeout [ 49.080017][ T6024] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.080052][ T6024] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.080102][ T6024] bridge_slave_0: entered allmulticast mode [ 49.080517][ T6024] bridge_slave_0: entered promiscuous mode [ 49.081194][ T6024] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.081229][ T6024] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.081277][ T6024] bridge_slave_1: entered allmulticast mode [ 49.081649][ T6024] bridge_slave_1: entered promiscuous mode [ 49.123110][ T1187] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.125187][ T1187] bridge_slave_0: left allmulticast mode [ 49.125199][ T1187] bridge_slave_0: left promiscuous mode [ 49.125272][ T1187] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.149548][ T4718] Bluetooth: hci1: command tx timeout [ 49.183389][ T5813] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.235894][ T1187] tipc: Disabling bearer [ 49.252364][ T1187] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 49.253402][ T1187] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 49.254287][ T1187] bond0 (unregistering): Released all slaves [ 49.271401][ T1187] tipc: Left network mode [ 49.282568][ T6024] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 49.301598][ T6024] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 49.374072][ T6024] team0: Port device team_slave_0 added [ 49.374783][ T6024] team0: Port device team_slave_1 added [ 49.389590][ T4718] Bluetooth: hci5: command 0x1003 tx timeout [ 49.389638][ T4713] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 49.403489][ T6024] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 49.403498][ T6024] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 49.403512][ T6024] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 49.403998][ T6024] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 49.404006][ T6024] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 49.404019][ T6024] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 49.488985][ T4898] tipc: Node number set to 2886997007 [ 49.506708][ T6024] hsr_slave_0: entered promiscuous mode [ 49.537529][ T6024] hsr_slave_1: entered promiscuous mode [ 49.649793][ T4718] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 49.651710][ T4718] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 49.653660][ T4718] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 49.654017][ T4718] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 49.654257][ T4718] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 49.707236][ T6122] rxe_eth0 speed is unknown, defaulting to 1000 [ 49.797343][ T5434] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 49.797431][ T5434] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 49.797457][ T5434] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 49.797471][ T5434] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 49.885773][ T1187] hsr_slave_0: left promiscuous mode [ 49.886025][ T1187] hsr_slave_1: left promiscuous mode [ 49.886283][ T1187] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 49.886293][ T1187] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 49.886568][ T1187] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 49.886577][ T1187] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 49.900833][ T1187] veth1_macvtap: left promiscuous mode [ 49.900859][ T1187] veth0_macvtap: left promiscuous mode [ 49.900962][ T1187] veth1_vlan: left promiscuous mode [ 49.900996][ T1187] veth0_vlan: left promiscuous mode [ 50.078351][ T1187] team0 (unregistering): Port device team_slave_1 removed [ 50.088481][ T1187] team0 (unregistering): Port device team_slave_0 removed [ 50.157281][ T4402] 8021q: adding VLAN 0 to HW filter on device eth7 [ 50.284015][ T6178] loop1: detected capacity change from 0 to 1024 [ 50.301393][ T6178] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 50.346756][ T6178] EXT4-fs error (device loop1): ext4_free_blocks:6719: comm syz.1.312: Freeing blocks not in datazone - block = 0, count = 16 [ 50.367500][ T6178] EXT4-fs error (device loop1): ext4_validate_block_bitmap:445: comm syz.1.312: bg 0: block 112: padding at end of block bitmap is not set [ 50.417418][ T4714] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 50.488613][ T6152] rxe_eth0 speed is unknown, defaulting to 1000 [ 50.592735][ T6024] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 50.605165][ T6024] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 50.605472][ T6024] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 50.625332][ T6024] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 50.668705][ T1187] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.734595][ T6024] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 50.735724][ T6024] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 50.768790][ T1187] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.777460][ T6024] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 50.778348][ T6024] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 50.830623][ T1187] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.836029][ T4402] 8021q: adding VLAN 0 to HW filter on device eth5 [ 51.617845][ T4718] Bluetooth: hci4: command tx timeout [ 51.618013][ T4718] Bluetooth: hci1: command tx timeout [ 51.720365][ T4713] Bluetooth: hci0: command tx timeout [ 53.073962][ T4713] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 53.080881][ T4713] Bluetooth: hci3: Injecting HCI hardware error event [ 53.082551][ T4713] Bluetooth: hci3: hardware error 0x00 [ 53.636929][ T4718] Bluetooth: hci4: command tx timeout [ 53.940975][ T4718] Bluetooth: hci1: command tx timeout [ 53.941004][ T4718] Bluetooth: hci0: command tx timeout [ 57.791602][ T4724] Bluetooth: hci4: command tx timeout [ 57.791631][ T4724] Bluetooth: hci0: command tx timeout [ 57.791647][ T4724] Bluetooth: hci1: command tx timeout [ 58.522917][ C0] sched: DL replenish lagged too much [ 60.060640][ T4718] Bluetooth: hci0: command tx timeout [ 60.060668][ T4718] Bluetooth: hci4: command tx timeout [ 62.059294][ T1595] ieee802154 phy0 wpan0: encryption failed: -22 [ 90.751974][ C0] BUG: workqueue lockup - pool cpus=0 node=0 flags=0x0 nice=0 stuck for 36s! [ 90.752017][ C0] Showing busy workqueues and worker pools: [ 90.752023][ C0] workqueue events: flags=0x100 [ 90.752061][ C0] pwq 2: cpus=0 node=0 flags=0x0 nice=0 active=24 refcnt=26 [ 90.752078][ C0] in-flight: 1156:request_firmware_work_func for 87s ,9:fqdir_free_fn for 36s ,4898:netdev_work_proc for 39s netdev_work_proc [ 90.752138][ C0] pending: ovs_dp_masks_rebalance, 7*nsim_dev_hwstats_traffic_work, psi_avgs_work, ovs_dp_masks_rebalance, psi_avgs_work, vmstat_shepherd, psi_avgs_work, drm_fb_helper_damage_work, 5*ovs_dp_masks_rebalance, xfrm_state_gc_task BAR(1187) [ 90.752229][ C0] workqueue events_unbound: flags=0x2 [ 90.752234][ C0] pwq 8: cpus=0-1 flags=0x4 nice=0 active=19 refcnt=20 [ 90.752249][ C0] in-flight: 54:nsim_dev_trap_report_work for 3s ,5431:cfg80211_wiphy_work for 35s cfg80211_wiphy_work ,5433:macvlan_process_broadcast for 8s ,3325:linkwatch_event for 35s ,1450:cfg80211_wiphy_work for 37s cfg80211_wiphy_work ,5434:cfg80211_wiphy_work for 38s cfg80211_wiphy_work ,12:macvlan_process_broadcast for 4s macvlan_process_broadcast ,1165:nsim_dev_trap_report_work for 2s ,5425:cfg80211_wiphy_work for 30s cfg80211_wiphy_work ,3137:toggle_allocation_gate for 2s [ 90.752403][ C0] pending: 4*nsim_dev_trap_report_work [ 90.752418][ C0] workqueue events_power_efficient: flags=0x82 [ 90.752422][ C0] pwq 8: cpus=0-1 flags=0x4 nice=0 active=4 refcnt=5 [ 90.752435][ C0] in-flight: 5426:gc_worker for 25s [ 90.752452][ C0] pending: do_cache_clean, wg_ratelimiter_gc_entries, fb_flashcursor [ 90.752478][ C0] workqueue events_dfl_long: flags=0x2 [ 90.752482][ C0] pwq 8: cpus=0-1 flags=0x4 nice=0 active=5 refcnt=6 [ 90.752494][ C0] in-flight: 5436:defense_work_handler for 0s [ 90.752509][ C0] pending: 4*defense_work_handler [ 90.752523][ C0] workqueue netns: flags=0x6000a [ 90.752527][ C0] pwq 8: cpus=0-1 flags=0x4 nice=0 active=1 refcnt=4 [ 90.752539][ C0] in-flight: 1187:cleanup_net for 40s [ 90.752557][ C0] workqueue mm_percpu_wq: flags=0x108 [ 90.752562][ C0] pwq 2: cpus=0 node=0 flags=0x0 nice=0 active=1 refcnt=2 [ 90.752576][ C0] pending: vmstat_update [ 90.752593][ C0] workqueue writeback: flags=0x4a [ 90.752597][ C0] pwq 8: cpus=0-1 flags=0x4 nice=0 active=1 refcnt=2 [ 90.752610][ C0] in-flight: 5435:wb_workfn for 16s [ 90.752659][ C0] workqueue mld: flags=0x40108 [ 90.752663][ C0] pwq 2: cpus=0 node=0 flags=0x0 nice=0 active=1 refcnt=6 [ 90.752677][ C0] pending: mld_ifc_work [ 90.752687][ C0] inactive: 4*mld_ifc_work [ 90.752699][ C0] workqueue ipv6_addrconf: flags=0x6000a [ 90.752703][ C0] pwq 8: cpus=0-1 flags=0x4 nice=0 active=1 refcnt=8 [ 90.752715][ C0] in-flight: 13:addrconf_dad_work for 37s [ 90.752730][ C0] inactive: 4*addrconf_dad_work [ 90.752744][ C0] workqueue bat_events: flags=0x6000a [ 90.752748][ C0] pwq 8: cpus=0-1 flags=0x4 nice=0 active=1 refcnt=39 [ 90.752761][ C0] pending: batadv_purge_orig [ 90.752771][ C0] inactive: 4*batadv_mcast_mla_update, 5*batadv_iv_send_outstanding_bat_ogm_packet, 2*batadv_purge_orig, batadv_tt_purge, batadv_bla_periodic_work, batadv_dat_purge, 2*batadv_tt_purge, batadv_dat_purge, batadv_bla_periodic_work, batadv_dat_purge, batadv_bla_periodic_work, batadv_tt_purge, batadv_mcast_mla_update, batadv_tt_purge, batadv_iv_send_outstanding_bat_ogm_packet, batadv_dat_purge, batadv_bla_periodic_work, batadv_dat_purge, batadv_bla_periodic_work, 2*batadv_iv_send_outstanding_bat_ogm_packet, batadv_purge_orig, 3*batadv_iv_send_outstanding_bat_ogm_packet, batadv_purge_orig [ 90.752939][ C0] workqueue hci3: flags=0x20012 [ 90.752943][ C0] pwq 9: cpus=0-1 node=0 flags=0x4 nice=-20 active=1 refcnt=4 [ 90.752958][ C0] in-flight: 4713:hci_error_reset for 37s [ 90.752975][ C0] workqueue wg-crypt-wg0: flags=0x128 [ 90.752979][ C0] pwq 2: cpus=0 node=0 flags=0x0 nice=0 active=2 refcnt=3 [ 90.752993][ C0] pending: wg_packet_tx_worker, wg_packet_encrypt_worker [ 90.753010][ C0] workqueue wg-crypt-wg1: flags=0x128 [ 90.753015][ C0] pwq 2: cpus=0 node=0 flags=0x0 nice=0 active=3 refcnt=4 [ 90.753029][ C0] pending: wg_packet_decrypt_worker, wg_packet_tx_worker, wg_packet_encrypt_worker [ 90.753051][ C0] workqueue wg-crypt-wg2: flags=0x128 [ 90.753055][ C0] pwq 2: cpus=0 node=0 flags=0x0 nice=0 active=2 refcnt=3 [ 90.753069][ C0] pending: wg_packet_tx_worker, wg_packet_encrypt_worker [ 90.753086][ C0] workqueue wg-crypt-wg0: flags=0x128 [ 90.753091][ C0] pwq 2: cpus=0 node=0 flags=0x0 nice=0 active=2 refcnt=3 [ 90.753105][ C0] pending: wg_packet_tx_worker, wg_packet_encrypt_worker [ 90.753121][ C0] workqueue wg-crypt-wg1: flags=0x128 [ 90.753125][ C0] pwq 2: cpus=0 node=0 flags=0x0 nice=0 active=2 refcnt=3 [ 90.753139][ C0] pending: wg_packet_decrypt_worker, wg_packet_encrypt_worker [ 90.753156][ C0] workqueue wg-crypt-wg2: flags=0x128 [ 90.753160][ C0] pwq 2: cpus=0 node=0 flags=0x0 nice=0 active=2 refcnt=3 [ 90.753174][ C0] pending: wg_packet_tx_worker, wg_packet_encrypt_worker [ 90.753195][ C0] workqueue wg-crypt-wg0: flags=0x128 [ 90.753199][ C0] pwq 2: cpus=0 node=0 flags=0x0 nice=0 active=3 refcnt=4 [ 90.753213][ C0] pending: 2*wg_packet_tx_worker, wg_packet_encrypt_worker [ 90.753235][ C0] workqueue wg-kex-wg1: flags=0x6 [ 90.753239][ C0] pwq 8: cpus=0-1 flags=0x4 nice=0 active=1 refcnt=2 [ 90.753251][ C0] pending: wg_packet_handshake_send_worker [ 90.753263][ C0] workqueue wg-crypt-wg1: flags=0x128 [ 90.753267][ C0] pwq 2: cpus=0 node=0 flags=0x0 nice=0 active=2 refcnt=3 [ 90.753281][ C0] pending: wg_packet_tx_worker, wg_packet_encrypt_worker [ 90.753297][ C0] workqueue wg-kex-wg2: flags=0x124 [ 90.753302][ C0] pwq 2: cpus=0 node=0 flags=0x0 nice=0 active=1 refcnt=2 [ 90.753316][ C0] pending: wg_packet_handshake_receive_worker [ 90.753328][ C0] workqueue wg-crypt-wg2: flags=0x128 [ 90.753332][ C0] pwq 2: cpus=0 node=0 flags=0x0 nice=0 active=2 refcnt=3 [ 90.753346][ C0] pending: wg_packet_tx_worker, wg_packet_encrypt_worker [ 90.753373][ C0] pool 2: cpus=0 node=0 flags=0x0 nice=0 hung=36s workers=9 idle: 4311 4815 4806 4796 4816 10 [ 90.753421][ C0] pool 8: cpus=0-1 flags=0x4 nice=0 hung=0s workers=24 idle: 5429 5432 58 5430 5427 40 3251 5428 4930 [ 90.753473][ C0] pool 9: cpus=0-1 node=0 flags=0x4 nice=-20 hung=0s workers=7 idle: 4724 4718 4716 4719 50 4726 [ 90.753514][ C0] Showing backtraces of busy workers in stalled worker pools: [ 90.753519][ C0] pool 2: [ 90.753522][ C0] task:kworker/0:2 state:R running task stack:0 pid:1156 tgid:1156 ppid:2 task_flags:0x4288060 flags:0x00000010 [ 90.753536][ C0] Workqueue: events request_firmware_work_func [ 90.753545][ C0] Call trace: [ 90.753548][ C0] __switch_to+0x2b4/0x6e4 (T) [ 90.753562][ C0] __schedule+0x135c/0x2b00 [ 90.753573][ C0] preempt_schedule_common+0xd4/0x190 [ 90.753583][ C0] preempt_schedule+0x60/0x78 [ 90.753592][ C0] __local_bh_enable_ip+0x16c/0x234 [ 90.753601][ C0] __alloc_skb+0x1c8/0x610 [ 90.753612][ C0] alloc_uevent_skb+0x78/0x1ec [ 90.753621][ C0] kobject_uevent_net_broadcast+0x2d4/0x53c [ 90.753630][ C0] kobject_uevent_env+0x518/0x944 [ 90.753639][ C0] kobject_uevent+0x2c/0x3c [ 90.753647][ C0] device_del+0x5f8/0x71c [ 90.753657][ C0] firmware_fallback_sysfs+0x330/0x930 [ 90.753665][ C0] _request_firmware+0xb34/0xf5c [ 90.753673][ C0] request_firmware_work_func+0xa4/0x24c [ 90.753681][ C0] process_scheduled_works+0x91c/0x1250 [ 90.753690][ C0] worker_thread+0x798/0xbd0 [ 90.753700][ C0] kthread+0x304/0x3d4 [ 90.753708][ C0] ret_from_fork+0x10/0x20 [ 93.082817][ T1156] cfg80211: failed to load regulatory.db