last executing test programs: 4m18.334196359s ago: executing program 4 (id=86): clock_nanosleep(0xe3e5dcf198c9fd6f, 0x1, &(0x7f0000000000)={0x0, 0x989680}, 0x0) r0 = socket$inet6(0xa, 0x80002, 0x0) fsopen(&(0x7f0000000040)='cifs\x00', 0x1) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x300, 0x0) close(r2) socket$key(0xf, 0x3, 0x2) r3 = socket(0x40000000015, 0x5, 0x0) connect$inet(r3, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) bind$inet(r3, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) setsockopt$SO_TIMESTAMP(r3, 0x1, 0x40, &(0x7f00000000c0)=0xd95, 0x4019e2060d4e3ac7) sendto$inet(r3, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f00000037c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000003700)=""/177, 0xb1}, 0x4}], 0x1, 0x20102, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000640)=@mangle={'mangle\x00', 0x1f, 0x6, 0x530, 0x3c0, 0x3c0, 0x0, 0x0, 0xe8, 0x498, 0x498, 0x498, 0x498, 0x498, 0x6, &(0x7f0000000080), {[{{@ip={@local, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xff000000, 0xff, 'batadv0\x00', 'lo\x00', {0xff}, {}, 0x1, 0x1, 0x10}, 0x0, 0xc0, 0xe8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xc}}, @inet=@rpfilter={{0x28}, {0x8}}]}, @inet=@DSCP={0x28, 'DSCP\x00', 0x0, {0x31}}}, {{@uncond, 0x0, 0xe8, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xc}}, @common=@osf={{0x50}, {'syz1\x00', 0x0, 0xc, 0x0, 0x1}}]}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0x4c, 0x9}}}, {{@ip={@multicast1, @rand_addr=0x64010101, 0xffffff00, 0xff000000, 'ip6tnl0\x00', 'macvlan1\x00', {0xff}, {0xff}, 0x10c, 0x3, 0x4}, 0x0, 0xa0, 0xe0, 0x0, {}, [@common=@addrtype={{0x30}, {0xc8, 0x6c, 0x1}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x8, 0x9, @ipv6=@private1, 0x4e20}}}, {{@uncond, 0x0, 0xc0, 0xe8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x8}}, @inet=@rpfilter={{0x28}, {0x165d96ca76e09dc1}}]}, @inet=@DSCP={0x28, 'DSCP\x00', 0x0, {0x13}}}, {{@uncond, 0x0, 0xb0, 0xd8, 0x0, {}, [@common=@set={{0x40}, {{0x4, [0x5, 0x5, 0x0, 0x3, 0x5, 0x6], 0x2, 0x1}}}]}, @common=@unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x2}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x590) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x5, 0x6361, 0x5, 0xffffffff, 0xffffffff}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r5, {0x0, 0x6}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r6, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r6, &(0x7f00000002c0)="0503e5fdd3fc140000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x8100, r7, 0x1, 0x0, 0x6, @multicast}, 0x14) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @local, 0x80}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4000000) 4m17.746374979s ago: executing program 4 (id=90): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=@newsa={0x15c, 0x10, 0x1, 0x0, 0x25dfdbff, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@empty, 0x0, 0x3}, {@in=@broadcast, 0x0, 0x33}, @in6=@local, {0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0x20000000}, {0xe, 0x4000000, 0x1}, 0x70bd27, 0x0, 0x2, 0x4, 0x0, 0x8a}, [@replay_esn_val={0x1c, 0x17, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}, @algo_auth={0x48, 0x1, {{'sha256\x00'}}}, @sa_dir={0x5, 0x21, 0x1}]}, 0x15c}}, 0x0) 4m17.644776765s ago: executing program 4 (id=93): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)) socket$netlink(0x10, 0x3, 0x8000000004) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c00000000010104000000000000000002001000240002801400018008000100e000200108000200e00000010c00028005000100000000001c0010800800014000000000d97405010000000008000240000000000800", @ANYRES64=r0], 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) 4m17.518228684s ago: executing program 4 (id=95): r0 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) (async) socket$packet(0x11, 0x3, 0x300) r2 = syz_io_uring_setup(0x34b9, &(0x7f0000000540)={0x0, 0x69ec, 0xc00, 0x5, 0x50}, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, r5, &(0x7f0000000280)=@IORING_OP_WRITE={0x17, 0x0, 0x2004, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0xfffffffffffffff2, 0x14, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) (async) io_uring_enter(r2, 0x521c, 0x1, 0x61, 0x0, 0x18) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="7000000010000304000080000000000000007400", @ANYRES32=r1, @ANYBLOB="0000000003120100500012800b00010062726964676500004000028008000500010000000600270000000000080001001500080005002500000000"], 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x40) mkdirat(0xffffffffffffff9c, &(0x7f0000005a00)='./gadget\x00', 0x930aa59063c1a109) (async) mount(0x0, &(0x7f0000000100)='./gadget\x00', &(0x7f0000000200)='gadgetfs\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./gadget/dummy_udc\x00', 0x2, 0x0) write(r6, &(0x7f0000005c40)="00000000090209000101008001120100020000004000800000000000000001", 0x1f) (async) ioctl$VHOST_SET_MEM_TABLE(r6, 0x4008af03, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) (async) r7 = socket$netlink(0x10, 0x3, 0x0) (async) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000700)=ANY=[@ANYBLOB="280000005e00817b00000000000000b20c00fe0501f0ffffff0000800c000180080004"], 0x28}], 0x1, 0x0, 0x0, 0x40004}, 0x0) r9 = syz_clone(0x0, 0x0, 0x39, 0x0, 0x0, 0x0) r10 = syz_open_procfs(r9, &(0x7f0000000400)='stat\x00') sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r6, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x48, 0x140a, 0x400, 0x70bd29, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x1}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x3}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000811}, 0x43) (async) ioctl$DRM_IOCTL_GET_CLIENT(r6, 0xc0286405, &(0x7f0000000080)={0x7, 0x7, {0xffffffffffffffff}, {0xffffffffffffffff}, 0x2}) openat$smackfs_cipsonum(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/fs/smackfs/mapped\x00', 0x2, 0x0) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f00000000c0), 0x103040, 0x0) (async) mbind(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, &(0x7f0000000240)=0x4, 0x4, 0x1) kcmp$KCMP_EPOLL_TFD(r9, r11, 0x7, r10, &(0x7f0000000180)={r6, r0, 0x5b}) (async) r12 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_udp_int(r12, 0x11, 0x65, 0x0, &(0x7f0000000180)=0xfffffefe) (async) r13 = userfaultfd(0x80000) ioctl$UFFDIO_CONTINUE(r13, 0xc020aa07, &(0x7f0000000040)={{&(0x7f0000002000/0x2000)=nil, 0x2000}, 0x1}) (async) sendmsg$nl_route_sched(r7, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x40004) 4m16.901341163s ago: executing program 4 (id=104): r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x20006, 0x2) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000600)=@nat={'nat\x00', 0x670, 0x5, 0x368, 0xd8, 0x170, 0xffffffff, 0xd8, 0x228, 0x2d0, 0x2d0, 0xffffffff, 0x2d0, 0x2d0, 0x5, 0x0, {[{{@ip={@rand_addr=0x64010100, @rand_addr=0x64010101, 0xff, 0x0, 'veth1_macvtap\x00', 'ipvlan1\x00', {0xff}, {}, 0x33, 0x2, 0x14}, 0x0, 0xa0, 0xd8, 0x48, {}, [@common=@ah={{0x30}, {[0x1, 0x3]}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0xf, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id=0x67, @port=0x4e24}}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, 0x0, 0x0, 'virt_wifi0\x00', 'veth1_vlan\x00'}, 0x0, 0x70, 0xb8}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0xe, @ipv6=@ipv4={'\x00', '\xff\xff', @empty}, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @icmp_id=0x65, @port=0x4e21}}}, {{@ip={@private=0xa010100, @empty, 0x0, 0x0, 'nicvf0\x00', 'nr0\x00'}, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x0, @rand_addr, @dev={0xac, 0x14, 0x14, 0x2a}, @gre_key=0xe, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3c8) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000040)={0x12, 0x2, 0x0, "bc57499e007105bf0000000100100000e403000000000000000040002100", 0x38414761}) 4m16.305038391s ago: executing program 4 (id=114): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000006400007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32, @ANYBLOB="0000000002000000b705000008000000850000005d00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x1002, &(0x7f0000000880)=""/4121, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x30, 0x0, 0x0, 0xfffffffffffffe65}, 0x23) 4m16.15004228s ago: executing program 32 (id=114): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000006400007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32, @ANYBLOB="0000000002000000b705000008000000850000005d00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x1002, &(0x7f0000000880)=""/4121, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x30, 0x0, 0x0, 0xfffffffffffffe65}, 0x23) 3m52.197057368s ago: executing program 0 (id=308): sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, 0x0, 0x100, 0x70bd27, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x9, 0x63}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x50}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x4003) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_NOACK_MAP(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x40, r0, 0x100, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0xe, 0x34}}}}, [@NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x23d}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x5}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f00000010c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001080)={&(0x7f0000000280)={0xdc4, r0, 0x300, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x93, 0x62}}}}, [@NL80211_ATTR_TX_RATES={0x118, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x34, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1a, 0x1, [0xb, 0x2, 0x48, 0x5, 0x1b, 0x30, 0xd3, 0x6c, 0x4, 0x48, 0x24, 0x60, 0x1, 0xb, 0x1, 0x16, 0x48, 0x1, 0xc, 0x36, 0x2b, 0x30]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x6, 0x80, 0x8, 0x2, 0x5, 0xa0, 0x6]}}]}, @NL80211_BAND_5GHZ={0x64, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x3c, 0x2, [{0x4, 0x2}, {0x5, 0x7}, {0x3, 0x1}, {0x2, 0x8}, {0x3, 0x7}, {0x2}, {0x6, 0x7}, {0x4, 0x2}, {0x2, 0xa}, {0x4}, {0x1}, {0x6, 0x8}, {0x3, 0x9}, {}, {0x5, 0x5}, {0x0, 0x8}, {0x3, 0xa}, {0x1, 0x3}, {0x3, 0x4}, {0x3, 0x1}, {0x5, 0x9}, {0x3, 0x1}, {0x6, 0x4}, {0x1, 0x2}, {0x7, 0x2}, {0x1, 0x7}, {0x0, 0x9}, {0x4}, {0x5, 0x7}, {0x1, 0x7}, {0x0, 0x1}, {0x7, 0x6}, {0x4, 0x4}, {0x3, 0xa}, {0x0, 0x2}, {0x2, 0x5}, {0x4, 0x3}, {0x0, 0x4}, {0x2, 0x4}, {0x3, 0x8}, {0x7, 0x4}, {0x7, 0xa}, {0x3, 0x2}, {0x3, 0x5}, {0x3, 0x3}, {0x7, 0x7}, {0x5, 0x5}, {0x0, 0x3}, {0x1, 0x3}, {0x6, 0x2}, {0x2, 0x3}, {0x7, 0x3}, {0x4, 0x4}, {0x4, 0x4}, {0x5, 0x2}, {0x2, 0x3}]}, @NL80211_TXRATE_LEGACY={0x23, 0x1, [0x6c, 0x18, 0x4, 0xb, 0x9, 0x5, 0x5, 0x0, 0x0, 0x18, 0x24, 0x4, 0x4, 0xb, 0x36, 0x1b, 0x9, 0x12, 0x3a, 0x6c, 0x71, 0xc, 0x18, 0x5, 0x5, 0xb, 0x4, 0x24, 0x48, 0x1, 0x2]}]}, @NL80211_BAND_5GHZ={0x6c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x9, 0x4, 0x5, 0x8, 0xff, 0x3, 0x1]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7ff, 0x6a, 0x0, 0x32, 0x2, 0x0, 0x0, 0x8]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x5, 0xc, 0x6, 0x1, 0xfffe, 0x1]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8000, 0x1, 0x7, 0xb992, 0x9, 0x8, 0x81, 0x2]}}]}, @NL80211_BAND_60GHZ={0x10, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x9, 0x1, [0x3, 0x2f, 0x60, 0x36, 0x1b]}]}]}, @NL80211_ATTR_TX_RATES={0x1fc, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x88, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x43, 0x2, [{0x5, 0xa}, {0x6}, {0x1, 0xa}, {0x0, 0x5}, {0x2, 0x6}, {0x1, 0x5}, {0x6, 0x5}, {0x5, 0x8}, {0x3, 0x3}, {0x7, 0x8}, {0x1, 0x7}, {0x1, 0x4}, {0x1, 0xa}, {0x0, 0x7}, {0x7, 0xa}, {0x7, 0x3}, {0x1}, {0x5, 0x9}, {0x2}, {0x3, 0x3}, {0x7, 0x3}, {0x6, 0xa}, {0x4, 0x6}, {0x7, 0x3}, {0x2, 0x5}, {0x0, 0x7}, {0x3, 0x8}, {0x6, 0xa}, {0x5}, {0x3, 0x9}, {0x7, 0xa}, {0x6, 0x2}, {0x5, 0x3}, {0x7, 0x2}, {0x1, 0x5}, {0x2, 0x7}, {0x0, 0x2}, {0x0, 0xa}, {0x7, 0x9}, {0x1, 0x4}, {0x6, 0x1c}, {0x2, 0x8}, {0x6, 0xa}, {0x4, 0x3}, {0x5, 0x1}, {0x3, 0x8}, {0x2, 0x6}, {0x2, 0xa}, {0x2, 0x4}, {0x2, 0x6}, {0x0, 0x6}, {0x5, 0xa}, {0x5, 0x7}, {0x0, 0x2}, {0x1, 0x1}, {0x0, 0x5}, {0x2, 0x3}, {0x0, 0x7}, {0x6, 0x5}, {0x4, 0x2}, {0x7, 0x7}, {0x5, 0x4}, {0x1, 0x9}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0xe2, 0x8, 0xa000, 0x42d1, 0x68d, 0xaaf, 0x1]}}, @NL80211_TXRATE_LEGACY={0x24, 0x1, [0x6c, 0x18, 0x10, 0x48, 0x16, 0x3a, 0x9, 0x0, 0x1, 0x1b, 0x1b, 0x1b, 0xc, 0x36, 0x9, 0x36, 0x1d, 0x24, 0x30, 0x2, 0x9, 0x3, 0x24, 0x6c, 0x30, 0xc, 0xb, 0x12, 0x60, 0x30, 0x5, 0x3]}]}, @NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_6GHZ={0x4}, @NL80211_BAND_5GHZ={0xa0, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xc, 0x947, 0x6, 0x3, 0xfff, 0xbded, 0x9, 0x9]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x5, 0x3, 0xb, 0x7fff, 0x964, 0x1, 0x3]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0xff, 0x6, 0x7, 0x6, 0x0, 0x6, 0x9]}}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x16, 0xb6cf4121a0f899aa, 0x6, 0x9, 0x1b, 0x2]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x3, 0x8, 0x800, 0x1200, 0xff, 0x4, 0x3]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xfffa, 0x6, 0x3, 0x8, 0x6, 0x4e79, 0x0, 0x1]}}, @NL80211_TXRATE_HT={0x16, 0x2, [{0x7, 0x3}, {0x0, 0x6}, {0x7, 0x5}, {0x3, 0x1}, {0x0, 0xa}, {0x5}, {0x1, 0x4}, {0x6}, {0x6}, {0x4, 0x1}, {0x3, 0x6}, {0x0, 0x1}, {0x2, 0x4}, {0x2, 0x6}, {0x4, 0xa}, {0x3, 0xa}, {0x4, 0x5}, {0x5, 0x9}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8001, 0xe88, 0x2, 0x8, 0x4, 0x5, 0x3, 0x8001]}}]}, @NL80211_BAND_60GHZ={0x48, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x654, 0x7f, 0x401, 0x5, 0x2, 0x4, 0x2d6, 0x8]}}, @NL80211_TXRATE_HT={0x2d, 0x2, [{0x7, 0x6}, {0x4}, {0x5, 0x6}, {0x6, 0x7}, {0x7, 0x4}, {0x2, 0x7}, {0x0, 0x4}, {0x1, 0x8}, {0x0, 0x2}, {0x0, 0x3}, {0x7}, {0x1, 0x2}, {0x0, 0x9}, {0x3, 0x6}, {0x6, 0x9}, {0x1, 0x8}, {0x2, 0x9}, {0x3, 0x9}, {0x5, 0x6}, {0x3}, {0x4, 0x4}, {0x5, 0x5}, {0x3, 0xa}, {0x7, 0x9}, {0x1}, {0x2, 0x4}, {0x6, 0x9}, {0x5, 0x2}, {0x2, 0x9}, {0x7, 0x9}, {0x0, 0x1}, {0x3, 0x5}, {0x6, 0x7}, {0x5, 0x8}, {0x7, 0x9}, {0x2, 0x5}, {0x1, 0x1}, {0x4, 0x4}, {0x7, 0x4}, {0x0, 0x8}, {0x4}]}]}, @NL80211_BAND_6GHZ={0x28, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x20, 0x3, 0xc5, 0x2, 0x0, 0x4, 0xc]}}]}, @NL80211_BAND_6GHZ={0xc, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_2GHZ={0x30, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x16, 0x1, [0x1, 0x48, 0x4, 0x4, 0x60, 0x5, 0x12, 0x12, 0x16, 0x12, 0xc, 0xc, 0x4, 0x1b, 0x30, 0x60, 0xc, 0x5]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x8001, 0x6, 0x0, 0x7, 0x1, 0xebd3, 0x2]}}]}, @NL80211_BAND_6GHZ={0x18, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x6, 0x5, 0x5, 0x3, 0x4, 0x80, 0x3]}}]}]}, @NL80211_ATTR_TX_RATES={0x68, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x64, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x40, 0x2681, 0x4f75, 0x7, 0x9, 0x9, 0x9, 0x3]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x1, 0xecf6, 0x5, 0x2, 0x9, 0x8, 0xe]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xe317, 0x1, 0x2, 0x4, 0x0, 0x80, 0x40, 0x3]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xf949, 0x3, 0x2, 0x4, 0x6, 0x7, 0x101, 0xfff4]}}]}]}, @NL80211_ATTR_TX_RATES={0x114, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x110, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x47, 0x2, [{0x3}, {0x3, 0x5}, {0x5, 0x4}, {0x5, 0x6}, {0x1, 0x8}, {0x2}, {0x0, 0x5}, {0x5, 0x9}, {0x2, 0x8}, {0x1, 0x3}, {0x3, 0x3}, {0x3, 0x1}, {0x2, 0x7}, {0x6, 0x6}, {0x0, 0x4}, {0x1, 0x1}, {0x5, 0x9}, {0x6, 0x3}, {0x6, 0xa}, {0x1, 0x9}, {0x5, 0x6}, {0x2, 0x5}, {0x1, 0x1}, {0x0, 0x6}, {0x0, 0x8}, {0x5, 0xa}, {0x6, 0x8}, {0x7, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x5, 0xa}, {0x4, 0x3}, {0x4, 0xa}, {0x4, 0x8}, {0x6, 0x3}, {0x4, 0x2}, {0x5, 0x1}, {0x0, 0x9}, {0x2, 0x2}, {0x1, 0x7}, {0x4, 0x4}, {0x4, 0x3}, {0x1}, {0x1, 0x2}, {0x2, 0x5}, {0x4, 0xa}, {0x7}, {0x4, 0x1}, {0x1, 0x2}, {0x2, 0xa}, {0x6, 0x9}, {0x5, 0x9}, {0x1, 0x4}, {0x5, 0x4}, {0x0, 0x6}, {0x7, 0x9}, {0x1, 0x8}, {0x0, 0x9}, {0x7}, {0x2, 0x8}, {0x1, 0xa}, {0x3, 0x1}, {0x7, 0x6}, {0x7, 0x5}, {0x3, 0x6}, {0x7, 0x3}, {0x7, 0x1}]}, @NL80211_TXRATE_HT={0x26, 0x2, [{0x0, 0x4}, {0x4, 0x4}, {0x6, 0x8}, {0x6, 0x5}, {0x1, 0x8}, {0x4, 0x8}, {0x2}, {0x3}, {0x1, 0x1}, {0x5, 0x9}, {0x6, 0x8}, {0x4, 0xa}, {}, {}, {0x7, 0x3}, {0x1}, {0x4, 0x7}, {0x2, 0xa}, {0x2, 0x6}, {0x7, 0x5}, {0x4}, {0x4, 0x1}, {0x3, 0xa}, {0x0, 0x6}, {0x0, 0x5}, {0x0, 0x6}, {0x4, 0xa}, {0x6, 0x9}, {0x0, 0x2}, {0x7, 0xa}, {0x3, 0x7}, {0x5, 0x2}, {0x0, 0x8}, {0x7, 0x3}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x9, 0x81, 0x4, 0x5, 0x401, 0x101, 0x3]}}, @NL80211_TXRATE_HT={0x3f, 0x2, [{0x1, 0x6}, {0x4, 0x7}, {0x4, 0xa}, {0x2, 0xa}, {0x2}, {0x1, 0x9}, {0x4, 0xa}, {0x3, 0x3}, {0x6, 0x1}, {0x0, 0x5}, {0x6, 0x7}, {0x1, 0x9}, {0x1, 0x2}, {0x1}, {0x2, 0x6}, {0x3, 0x3}, {0x7, 0x9}, {0x0, 0x6}, {0x2, 0x1}, {0x5}, {0x1, 0x5}, {0x0, 0x2}, {0x4, 0x6}, {0x1}, {0x7}, {0x4, 0x2}, {0x4, 0x6}, {0x6, 0x1}, {0x6, 0x6}, {0x2, 0x2}, {0x4, 0x6}, {0x6, 0x4}, {0x7, 0x8}, {0x4, 0x3}, {0x3, 0x7}, {0x7}, {0x4}, {0x6, 0x1}, {0x3}, {0x2, 0x2}, {0x7, 0x2}, {0x2, 0x8}, {0x1, 0xa}, {0x2, 0x7}, {0x4, 0x4}, {0x5, 0x8}, {0x5, 0x2}, {0x2, 0x6}, {0x6}, {0x3, 0x3}, {0x5}, {0x0, 0x5}, {0x5, 0x9}, {0x3, 0xa}, {0x1, 0x1}, {0x3, 0x2}, {0x4, 0x3}, {0x5, 0x1}, {0x1, 0x3}]}, @NL80211_TXRATE_LEGACY={0x7, 0x1, [0x24, 0xc, 0x1b]}, @NL80211_TXRATE_HT={0x11, 0x2, [{0x1, 0x3}, {0x7, 0x7}, {0x5, 0x4}, {0x6, 0x4}, {0x4, 0x9}, {0x1, 0x2}, {0x1}, {0x2, 0x4}, {0x2, 0x1}, {0x0, 0x1e}, {0x3, 0x4}, {0x4, 0x3}, {0x4, 0x4}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xc78a, 0x5, 0x3, 0x9, 0x0, 0x3ff, 0x6, 0x400]}}]}]}, @NL80211_ATTR_TX_RATES={0x210, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0xc, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_60GHZ={0x54, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x0, 0x49f, 0x33, 0x73fb, 0x7f, 0x8, 0x8]}}, @NL80211_TXRATE_LEGACY={0x1c, 0x1, [0x12, 0x16, 0x9, 0x9, 0x2, 0x6, 0x24, 0x24, 0x6, 0x7f, 0x60, 0x36, 0x24, 0x6c, 0x6d, 0x2, 0x4, 0x12, 0x6, 0x60, 0x9, 0x6, 0x60, 0x12]}]}, @NL80211_BAND_2GHZ={0x14, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_2GHZ={0x9c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x3, 0x81, 0xfd27, 0x0, 0x7c, 0xffff, 0x6]}}, @NL80211_TXRATE_HT={0x3d, 0x2, [{0x5, 0x3}, {0x1, 0x8}, {0x3, 0x1}, {0x3, 0x4}, {0x6, 0x5}, {0x1, 0x6}, {0x6, 0x2}, {0x0, 0x5}, {0x7, 0x5}, {0x5, 0x9}, {0x4, 0x1}, {0x1, 0x2}, {0x6, 0x5}, {0x2, 0xa}, {0x6, 0x8}, {0x1, 0x6}, {0x0, 0xa}, {0x7, 0x2}, {0x6, 0xa}, {}, {0x1, 0x6}, {0x6, 0x3}, {0x3, 0x5}, {0x2}, {0x1, 0x8}, {0x0, 0x3}, {0x1, 0xa}, {0x5, 0x8}, {0x1, 0x2}, {0x1, 0x8}, {0x1, 0x9}, {}, {0x7, 0x1}, {0x3, 0x8}, {0x5, 0x3}, {0x6, 0xa}, {0x4, 0x9}, {0x6, 0xa}, {0x1}, {0x0, 0x5}, {0x4, 0x5}, {0x7, 0x2}, {0x2, 0x8}, {0x0, 0x5}, {0x7, 0x8}, {0x6, 0x5}, {0x4, 0x2}, {0x2, 0x7}, {0x1, 0xa}, {0x6, 0x4}, {0x1, 0x6}, {0x6, 0x3}, {0x5, 0x4}, {0x0, 0x2}, {0x7, 0x3}, {0x4, 0x1}, {0x0, 0xa}]}, @NL80211_TXRATE_LEGACY={0x11, 0x1, [0x12, 0x3, 0x4, 0x16, 0x4, 0x48, 0x11, 0x18, 0x60, 0x5, 0x12, 0x60, 0x3]}, @NL80211_TXRATE_LEGACY={0x20, 0x1, [0x0, 0x12, 0x2, 0x60, 0x12, 0x7a, 0x18, 0xb, 0x1b, 0x1b, 0x3, 0xb, 0x3, 0x36, 0x12, 0x6, 0x24, 0x9, 0x12, 0x9, 0x24, 0x6c, 0xb, 0x6, 0x48, 0xda, 0x3, 0x1]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_60GHZ={0x20, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xfffa, 0xf01, 0x6, 0xb, 0x5, 0x58, 0x1e, 0x8d]}}]}, @NL80211_BAND_6GHZ={0x60, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HT={0x44, 0x2, [{0x3, 0x5}, {}, {0x4}, {0x1}, {0x3, 0x3}, {0x7, 0x3}, {0x7, 0x5}, {0x6, 0x1}, {0x7, 0x3}, {0x1}, {0x5, 0x9}, {0x3, 0x8}, {0x1, 0x7}, {0x7, 0xa}, {0x7, 0x6}, {0x1, 0x7}, {0x6, 0x4}, {0x2, 0x4}, {0x5, 0x8}, {0x2, 0x5}, {0x1, 0x9}, {0x7, 0xa}, {0x1, 0x5}, {0x6}, {0x1, 0x1}, {0x4, 0x3}, {0x5, 0x2}, {0x1, 0x8}, {0x4, 0xa}, {0x1, 0x9}, {0x3, 0x1}, {0x5, 0x7}, {0x7, 0x3}, {0x0, 0x9}, {0x6, 0x5}, {0x6, 0x3}, {0x0, 0x7}, {0x4, 0x2}, {0x5, 0xa}, {0x4, 0xa}, {0x1}, {0x5, 0x7}, {0x1}, {0x5, 0xa}, {0x7, 0x1}, {0x3, 0x8}, {0x0, 0xa}, {0x1, 0x4}, {0x7, 0x7}, {0x3, 0x6}, {0x4, 0x7}, {0x5, 0x8}, {0x4, 0xa}, {0x4, 0x8}, {0x1, 0x5}, {0x6, 0xa}, {0x7, 0x5}, {0x1, 0x9}, {0x5, 0x1}, {0x1, 0xa}, {0x1, 0x1}, {0x6, 0x3}, {0x3, 0x8}, {0x6, 0x7}]}]}, @NL80211_BAND_2GHZ={0x7c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x1, 0x4, 0x3, 0x7, 0x1, 0xbf6c, 0xffff]}}, @NL80211_TXRATE_HT={0x43, 0x2, [{}, {0x6, 0x1}, {0x3, 0xa}, {0x0, 0x5}, {0x0, 0x8}, {}, {0x1}, {0x3, 0x3}, {0x5, 0x3}, {0x3, 0x1}, {0x6, 0x2}, {0x2}, {0x3, 0x8}, {0x4, 0xa}, {0x3, 0x5}, {0x3, 0x6}, {0x1, 0x4}, {0x1, 0xa}, {0x0, 0x3}, {0x7, 0x5}, {0x0, 0x4}, {0x3, 0x7}, {0x2, 0x6}, {0x4, 0xa}, {0x0, 0xa}, {0x1, 0x5}, {0x0, 0x5}, {0x5, 0x5}, {0x1, 0x5}, {0x2, 0xa}, {0x1, 0x7}, {0x0, 0x7}, {0x5, 0x7}, {0x2, 0x4}, {0x0, 0x9}, {0x5, 0x2}, {0x1, 0x5}, {0x1, 0x3}, {0x5, 0x6}, {0x7}, {0x2, 0x8}, {0x7, 0x2}, {0x6, 0x5}, {0x3, 0x6}, {0x4, 0x3}, {0x5}, {0x7, 0xa}, {0x6, 0x4}, {0x3, 0x8}, {0x5}, {0x7}, {0x2, 0xa}, {0x3, 0x8}, {0x3, 0x7}, {0x0, 0x7}, {0x0, 0x3}, {0x2, 0x5}, {0x6, 0x7}, {0x3, 0x3}, {0x2, 0x5}, {0x0, 0x7}, {0x0, 0x1}, {0x1, 0x7}]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}]}, @NL80211_ATTR_TX_RATES={0x398, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0xdc, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x0, 0x7ff, 0xc000, 0x8, 0xc72, 0xb20, 0x787]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0xfff, 0x6, 0x9, 0x7, 0x4, 0x77ab]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1e, 0xfffc, 0xc, 0x3, 0x298, 0x0, 0xa, 0x9]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x1ff, 0x55, 0x0, 0x808, 0x83, 0xff, 0x4]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x5, 0xc, 0x0, 0x7ff, 0x1, 0xd, 0xa]}}, @NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x1b, 0x16, 0x6c, 0x16, 0x2, 0x56, 0x6c, 0x5, 0x36, 0x48, 0x24, 0x6, 0x2, 0xa, 0x30, 0xc, 0x5, 0x6, 0x9, 0x12, 0xc, 0x1b, 0x6, 0x18, 0x6, 0x5]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x43, 0x2, [{0x1, 0x3}, {0x7}, {0x0, 0x9}, {0x2, 0x8}, {0x5, 0x1}, {0x1, 0x7}, {0x0, 0x8}, {0x4, 0xa}, {0x4, 0x2}, {0x5}, {0x7, 0x3}, {0x4, 0x9}, {0x4, 0x3}, {0x6, 0x8}, {0x7}, {0x5, 0x9}, {0x6, 0x6}, {0x1}, {0x3, 0x4}, {0x3, 0x6}, {0x2, 0x5}, {0x2, 0x3}, {0x1}, {0x4, 0x9}, {0x5, 0x2}, {0x0, 0x6}, {0x3, 0xa}, {0x5, 0xa}, {0x6, 0xa}, {0x1, 0x2}, {0x0, 0x1}, {0x0, 0x5}, {0x4, 0xa}, {0x0, 0x7}, {0x7, 0x4}, {0x7, 0x6}, {0x7, 0x3}, {0x7, 0x8}, {0x2, 0x8}, {0x0, 0x5}, {0x7, 0x3}, {0x1}, {0x1}, {0x5, 0x6}, {0x0, 0x5}, {0x7, 0x8}, {0x6, 0x1}, {0x3}, {0x5, 0xa}, {0x3, 0x9}, {0x5, 0x5}, {0x5, 0x9}, {0x5, 0x5}, {0x6, 0xa}, {0x1, 0x2}, {0x3}, {0x3, 0x2}, {0x0, 0x1}, {0x1, 0xa}, {0x0, 0x2}, {0x0, 0x9}, {0x6, 0x2}, {0x6, 0xa}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_5GHZ={0x54, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x15, 0x1, [0x5, 0x16, 0x4, 0x48, 0x0, 0x48, 0x6c, 0x36, 0x1b, 0x24, 0xc, 0x16, 0x2, 0x18, 0x9, 0x9, 0x3]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0x7fff, 0x6, 0x7, 0x5, 0x16, 0x7, 0x1]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0xde7c, 0x5, 0x6d3, 0xbc2, 0x0, 0xdf66, 0x3]}}]}, @NL80211_BAND_5GHZ={0x34, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x80}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_60GHZ={0x80, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x7, 0x3, 0x7, 0x9827, 0x10, 0x5, 0x9]}}, @NL80211_TXRATE_HT={0x33, 0x2, [{0x0, 0x1}, {0x2, 0x5}, {0x7, 0xa}, {0x1, 0xa}, {0x3}, {0x3, 0x8}, {0x1, 0x2}, {0x1, 0x6}, {0x5, 0x4}, {0x0, 0x7}, {0x1, 0x6}, {0x1, 0x5}, {0x4, 0x2}, {0x3, 0x2}, {0x5, 0x6}, {0x1}, {0x1, 0xa}, {0x6, 0x3}, {0x5, 0x6}, {0x4, 0x8}, {0x3, 0x3}, {0x0, 0x9}, {0x1}, {0x2, 0x8}, {0x2, 0xa}, {0x1, 0x7}, {0x0, 0x4}, {0x0, 0x5}, {0x6, 0x2}, {0x6, 0x1}, {0x3, 0x1}, {0x6, 0x5}, {0x1, 0x1}, {0x5, 0x7}, {0x0, 0x7}, {0x0, 0x6}, {0x0, 0x2}, {0x7, 0x1}, {0x1, 0x1}, {0x2, 0xa}, {0x1, 0x7}, {0x0, 0x2}, {0x5, 0x3}, {0x0, 0x1}, {0x1, 0x3}, {0x6, 0x1}, {0x7, 0x3}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0xff, 0x2, 0x2, 0xb95, 0x41c8, 0x5, 0xff7f]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x5, 0x1, [0x60]}]}, @NL80211_BAND_2GHZ={0x14, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_6GHZ={0x58, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x3a, 0x2, [{0x0, 0x9}, {0x2, 0x3}, {0x3, 0x2}, {0x3, 0x5}, {0x7, 0x2}, {0x1}, {0x3, 0x2}, {0x5, 0x9}, {0x1, 0x3}, {0x1, 0x2}, {0x2, 0x1}, {0x7, 0x7}, {0x1, 0x6}, {0x3}, {0x5, 0x3}, {0x6, 0x7}, {0x3, 0x3}, {0x6, 0x7}, {0x4, 0x1}, {0x3, 0x4}, {0x4, 0x8}, {0x5, 0x4}, {0x4, 0x9}, {0x4, 0x2}, {0x2, 0xa}, {0x3, 0x8}, {0x6, 0x4}, {0x1, 0x8}, {0x6, 0x5}, {0x3, 0x4}, {0x1, 0x1}, {0x3, 0xa}, {0x4}, {0x6, 0x6}, {0x4, 0x3}, {0x1}, {0x1, 0x7}, {0x3, 0x9}, {0x3, 0x3}, {0x0, 0x6}, {0x6, 0xa}, {0x0, 0x9}, {0x3, 0x5}, {0x7}, {0x1}, {0x5}, {0x7, 0x7}, {0x7}, {0x1, 0x9}, {0x7, 0x6}, {0x7, 0x5}, {0x7, 0xa}, {0x5, 0x3}, {0x0, 0x7}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_6GHZ={0x100, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x2, 0x6721, 0x81, 0x40, 0x7, 0xa, 0x8]}}, @NL80211_TXRATE_HT={0x4c, 0x2, [{0x7, 0x5}, {0x2, 0x7}, {0x4, 0x4}, {0x0, 0x4}, {0x1, 0x8}, {0x1, 0x7}, {0x1}, {0x4, 0x3}, {0x0, 0x9}, {0x0, 0x1}, {0x0, 0x6}, {0x2, 0x9}, {0x6, 0x7}, {0x2, 0x2}, {0x1, 0x9}, {0x2, 0x8}, {0x1, 0x3}, {0x0, 0x8}, {0x7, 0xa}, {0x1, 0xa}, {0x7, 0x7}, {0x7, 0x5}, {0x3, 0x8}, {0x5, 0x1}, {0x3, 0x9}, {0x4}, {0x3, 0x6}, {0x1, 0x5}, {0x0, 0x1}, {0x4}, {0x0, 0x2}, {0x4, 0x4}, {0x3, 0x1}, {0x1, 0x3}, {0x5, 0xa}, {0x0, 0x5}, {0x0, 0x7}, {0x5}, {0x0, 0x5}, {0x2, 0x7}, {0x0, 0x6}, {0x3}, {0x7, 0xc}, {0x0, 0x6}, {0x4, 0x8}, {0x3, 0x8}, {0x1, 0x3}, {0x0, 0x3}, {0x0, 0x7}, {0x6, 0x4}, {0x4, 0x8}, {0x0, 0x5}, {0x5, 0x9}, {}, {0x5}, {0x1, 0x3}, {0x4, 0x5}, {0x7, 0x2}, {0x4, 0x5}, {0x1, 0x4}, {0x1, 0x8}, {0x0, 0x4}, {0x6, 0x2}, {0x6, 0x4}, {0x5, 0x8}, {0x6, 0x4}, {0x4, 0x2}, {0x7}, {0x0, 0x3}, {0x7, 0x8}, {0x1, 0x1}, {0x3, 0x9}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HT={0x37, 0x2, [{0x0, 0x2}, {0x0, 0x1}, {0x2, 0x8}, {0x2, 0x5}, {0x3, 0x9}, {0x1, 0xa}, {0x3, 0x9}, {0x0, 0x8}, {0x6, 0x1}, {0x3, 0x7}, {0x0, 0x6}, {0x2, 0x8}, {0x1, 0x6}, {0x0, 0x7}, {0x3, 0x1}, {}, {0x1, 0x2}, {0x6, 0xa}, {0x1, 0x7}, {0x7, 0x9}, {0x7, 0xa}, {0x5, 0x3}, {0x1, 0x9}, {0x1, 0x3}, {0x6, 0x9}, {0x0, 0x7}, {0x2, 0x9}, {0x1, 0x6}, {0x7, 0xa}, {0x0, 0x2}, {0x2, 0x1}, {0x6, 0x1}, {0x3, 0x7}, {0x4, 0x2}, {0x7, 0xa}, {0x0, 0x2}, {0x2, 0x3}, {0x1, 0x9}, {0x4, 0x2}, {0x3, 0xa}, {0x3, 0x1}, {0x7, 0x3}, {0x5, 0x5}, {0x3, 0xa}, {0x6, 0x2}, {0x5, 0x5}, {}, {0x2, 0x2}, {0x2, 0x2}, {0x5, 0x3}, {0x2, 0x3}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x0, 0x4, 0x4, 0x881, 0x5, 0x49b0, 0x8]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HT={0x26, 0x2, [{0x0, 0xa}, {0x1, 0x6}, {0x0, 0x9}, {0x2}, {0x4, 0x9}, {0x4, 0x3}, {0x0, 0x7}, {0x2, 0x5}, {0x5, 0x5}, {0x0, 0xa}, {0x0, 0x2}, {0x7, 0xa}, {0x5, 0x3}, {0x4, 0x2}, {0x4, 0x1}, {0x4, 0x8}, {0x3, 0x8}, {0x1, 0xa}, {0x6, 0x3}, {0x6, 0x8}, {0x1, 0x2}, {0x3, 0x7}, {0x0, 0x3}, {0x1, 0x1}, {0x4}, {0x7, 0x6}, {0x1, 0x2}, {0x6, 0x5}, {0x7, 0x7}, {0x1, 0x3}, {0x0, 0x7}, {0x0, 0x5}, {0x6}, {0x1}]}]}, @NL80211_BAND_60GHZ={0x44, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x25, 0x51c, 0x401, 0x1, 0xfff, 0x0, 0x0, 0xfff8]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9c, 0xc, 0xfff1, 0x9, 0x5, 0x7, 0xe, 0x3]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}]}, @NL80211_ATTR_TX_RATES={0x31c, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x28, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xfffc, 0xf532, 0x64a, 0xffff, 0x4, 0xc, 0x8, 0x5]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_6GHZ={0x60, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x67, 0x200, 0x8, 0x8c9, 0xfffd, 0x2e, 0x8000]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x800, 0x0, 0x7, 0x1ff, 0xecf0, 0x0, 0x5, 0x6da]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x3703, 0x68d, 0x3, 0x9, 0xf06e, 0x1, 0x2]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_60GHZ={0x18, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x14, 0x1, [0x36, 0x3, 0x18, 0x4, 0x1, 0x0, 0x9, 0x2, 0x60, 0x18, 0x16, 0x16, 0xb, 0x6, 0x60, 0x18]}]}, @NL80211_BAND_2GHZ={0x70, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x15, 0x2, [{0x1, 0x1}, {0x0, 0x9}, {0x7, 0x1}, {0x3, 0xa}, {0x7, 0x6}, {0x4, 0x3}, {0x4, 0x1}, {0x4, 0x7}, {0x3, 0x6}, {0x0, 0x8}, {0x1}, {0x7, 0x3}, {0x0, 0x9}, {0x7, 0x5}, {0x4, 0x8}, {0x7, 0x8}, {0x3, 0x5}]}, @NL80211_TXRATE_LEGACY={0xc, 0x1, [0x6c, 0x1b, 0x3, 0x3, 0x6, 0x4, 0xc, 0x48]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x2a98, 0xc0, 0x7f, 0xf, 0x4, 0x80, 0xb]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xa, 0x1, 0x100, 0x1063, 0x7, 0x5, 0x3, 0xe6]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_6GHZ={0x48, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x39, 0x2, [{0x2, 0x7}, {0x7, 0x4}, {0x7, 0x2}, {0x2, 0xa}, {0x7, 0x1}, {0x4, 0x8}, {0x6, 0x2}, {0x2, 0x3}, {0x0, 0x2}, {0x4, 0x1}, {0x6, 0x7}, {0x2, 0x4}, {0x5, 0x2}, {0x2, 0x3}, {0x3, 0x2}, {0x7, 0x9}, {0x3, 0x1}, {0x4, 0x3}, {0x0, 0x2}, {0x4, 0x3}, {0x4, 0x1}, {0x6, 0x8}, {0x6, 0x7}, {0x5, 0xa}, {0x3, 0x7}, {0x4, 0x6}, {0x0, 0xa}, {0x0, 0x1}, {0x2, 0xa}, {0x7, 0x3}, {0x0, 0x8}, {0x6, 0x7}, {0x5, 0x4}, {0x5, 0xa}, {0x5, 0x3}, {0x0, 0x8}, {0x7}, {0x0, 0x2}, {0x5, 0x4}, {0x3, 0x3}, {0x0, 0x4}, {0x3, 0x9}, {0x0, 0x9}, {0x6, 0x3}, {0x0, 0x2}, {}, {}, {0x2, 0x8}, {0x0, 0x2}, {0x4, 0x9}, {0x7, 0x5}, {0x6, 0x6}, {}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_6GHZ={0x70, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0x2, 0x401, 0x6e, 0x9, 0x4a46, 0x9, 0x5]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xae9, 0xf17, 0x2, 0x2, 0x34, 0x0, 0x400]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_LEGACY={0xc, 0x1, [0x5, 0x6c, 0x16, 0x6c, 0x6, 0x16, 0x6c, 0x18]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x0, 0xfffc, 0x384, 0x621, 0x22, 0xa3b, 0xb]}}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x1b, 0x4, 0x18, 0x0, 0x3, 0x48, 0x5, 0x12, 0x1, 0xf1cd1afe962ffc6f, 0x3, 0xb, 0x60, 0x6, 0x6c, 0x24, 0x5, 0x1b, 0x1, 0x36, 0x60]}]}, @NL80211_BAND_6GHZ={0x54, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x22, 0x1, [0x18, 0x1b, 0x1b, 0x1b, 0x12, 0x1, 0xc, 0x5, 0x24, 0x16, 0x9, 0x5, 0x1, 0x4, 0x12, 0x12, 0xc, 0x43, 0x2, 0x5, 0xc, 0x1, 0xc, 0x1, 0x36, 0x16, 0x6, 0x6, 0x1, 0x48]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0xfff, 0x80, 0x0, 0x200, 0x6, 0x4, 0xe89a]}}]}, @NL80211_BAND_6GHZ={0xac, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0xff, 0x4, 0x3ff, 0x4, 0x400, 0xe978, 0x5]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1000, 0x9, 0x0, 0x0, 0x5, 0x1200, 0x3, 0x2]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x35, 0x2, [{0x0, 0x5}, {0x1, 0x7}, {0x1, 0x8}, {0x4, 0xa}, {0x0, 0x6}, {0x7, 0x2}, {0x1, 0x2}, {0x3, 0x7}, {0x4, 0x8}, {0x5, 0x9}, {0x5, 0x2}, {0x3, 0x8}, {0x5}, {0x0, 0x3}, {0x3, 0xa}, {0x6, 0x2}, {0x1, 0x8}, {0x5, 0xa}, {0x3}, {0x0, 0xa}, {0x6, 0x1}, {0x2, 0x6}, {0x6, 0x8}, {0x3, 0x8}, {}, {0x6, 0xa}, {0x4, 0x8}, {0x1, 0x3}, {0x0, 0x6}, {0x1, 0xa}, {0x5, 0x1}, {0x7, 0x1}, {0x1, 0x2}, {0x0, 0x4}, {0x4, 0x2}, {0x0, 0x3}, {0x5, 0x3}, {0x0, 0x9}, {0x0, 0x3}, {0x3, 0x6}, {0x6, 0x9}, {0x2, 0x5}, {0x3, 0x7}, {0x4, 0x6}, {0x6, 0x1}, {0x3, 0x2}, {0x0, 0x4}, {0x5, 0x3}, {0x7}]}, @NL80211_TXRATE_HT={0x28, 0x2, [{0x3, 0x4}, {0x2, 0x9}, {0x7, 0x2}, {0x6, 0x2}, {0x6, 0x1}, {0x5, 0x8}, {0x1, 0x2}, {0x6, 0x6}, {0x4, 0x9}, {0x7}, {0x1, 0x7}, {0x1, 0xa}, {0x1, 0x4}, {0x3, 0x6}, {}, {0x3, 0x4}, {0x0, 0x4}, {0x3, 0x4}, {0x1, 0x5}, {0x6, 0x8}, {0x7, 0x9}, {0x3, 0x6}, {0x4, 0x5}, {0x7, 0x4}, {0x0, 0x1}, {0x4, 0x7}, {0x0, 0x1}, {0x6, 0x6}, {0x7, 0x4}, {0x5}, {0x7, 0x1}, {0x1, 0x7}, {0x7, 0x6}, {0x6, 0x4}, {0x1}, {0x3, 0x3}]}]}, @NL80211_BAND_2GHZ={0x50, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x4000, 0x3ff, 0x7f, 0xfffa, 0x8, 0x2, 0xbe8]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x200, 0x0, 0x800, 0x9, 0x8ad4, 0x3, 0x401, 0xf]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8001, 0x5f85, 0x0, 0x2, 0x5, 0x800, 0x90, 0x1000]}}]}]}, @NL80211_ATTR_TX_RATES={0x50, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x4, 0x1c2, 0x5, 0x9, 0x9, 0x9, 0x3]}}, @NL80211_TXRATE_HT={0x4}, @NL80211_TXRATE_LEGACY={0x14, 0x1, [0x60, 0x5, 0x9, 0x1b, 0x1, 0x36, 0x4, 0x4e, 0x6c, 0x1b, 0x9, 0xb, 0xa947ba7767e3d44e, 0x24, 0x6, 0x18]}, @NL80211_TXRATE_LEGACY={0x8, 0x1, [0x18, 0x5, 0x2, 0x5]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x6, 0x5, 0x6, 0x9, 0x5, 0x3ff, 0xa232]}}]}]}]}, 0xdc4}, 0x1, 0x0, 0x0, 0x800}, 0x20000040) ioctl$DVB_DEMUX_DMX_EXPBUF(0xffffffffffffffff, 0xc00c6f3e, &(0x7f0000001100)={0x2, 0x80000, 0xffffffffffffffff}) close(r1) openat$nullb(0xffffffffffffff9c, &(0x7f0000001140), 0x1, 0x0) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, &(0x7f00000011c0)=0x0, &(0x7f0000001200)=0x4) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000001300)={&(0x7f0000001180)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000012c0)={&(0x7f0000001240)={0x50, 0x0, 0x100, 0x70bd26, 0x25dfdbff, {}, [@GTPA_LINK={0x8}, @GTPA_FLOW={0x6, 0x6, 0x1}, @GTPA_LINK={0x8, 0x1, r2}, @GTPA_MS_ADDRESS={0x8, 0x5, @remote}, @GTPA_MS_ADDR6={0x14, 0xc, @private1}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x50}}, 0x8800) ioctl$MEDIA_IOC_REQUEST_ALLOC(r1, 0x80047c05, &(0x7f0000001340)=0xffffffffffffffff) ioctl$VFAT_IOCTL_READDIR_SHORT(r3, 0x82307202, &(0x7f0000001380)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000001600), r1) sendmsg$MPTCP_PM_CMD_REMOVE(r1, &(0x7f00000016c0)={&(0x7f00000015c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001680)={&(0x7f0000001640)={0x1c, r4, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004}, 0x10) r5 = gettid() sched_setscheduler(r5, 0x6, &(0x7f0000001700)=0x8) r6 = openat(r1, &(0x7f0000001740)='./file0\x00', 0x2040, 0x183) syz_genetlink_get_family_id$nl80211(&(0x7f0000001780), r1) getsockname$packet(0xffffffffffffffff, &(0x7f00000017c0), &(0x7f0000001800)=0x14) sendmsg$IPVS_CMD_ZERO(r1, &(0x7f00000019c0)={&(0x7f0000001840)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001980)={&(0x7f0000001880)={0xe4, 0x0, 0x526, 0x70bd2a, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x8001}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}, @IPVS_CMD_ATTR_SERVICE={0x50, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@loopback}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x3}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3a}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x400}, @IPVS_CMD_ATTR_DEST={0x3c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xddfb}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e20}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x9}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x80000000}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x3}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1ff}]}, 0xe4}}, 0x8000) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r1, &(0x7f0000001b40)={&(0x7f0000001a00)={0x10, 0x0, 0x0, 0x100040}, 0xc, &(0x7f0000001b00)={&(0x7f0000001a40)={0x88, r4, 0x400, 0x70bd28, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR={0x54, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @broadcast}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x75}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x9}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x8}]}, 0x88}, 0x1, 0x0, 0x0, 0x84}, 0x4) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000001bc0), r6) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r6, &(0x7f0000001cc0)={&(0x7f0000001b80)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001c80)={&(0x7f0000001c00)={0x60, r7, 0x200, 0x70bd26, 0x25dfdbfe, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xc14}}]}, 0x60}, 0x1, 0x0, 0x0, 0x200480d0}, 0x4000000) write$FUSE_NOTIFY_STORE(r1, &(0x7f0000001d00)={0x2a, 0x4, 0x0, {0x1, 0x7, 0x2, 0x0, [0x0, 0x0]}}, 0x2a) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001d80), r1) sendmsg$NL80211_CMD_REGISTER_FRAME(r1, &(0x7f0000001e40)={&(0x7f0000001d40)={0x10, 0x0, 0x0, 0x10800100}, 0xc, &(0x7f0000001e00)={&(0x7f0000001dc0)={0x2c, r8, 0x20, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0xcf0, 0x2a}}}}, [@NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x4}, @NL80211_ATTR_FRAME_MATCH={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20008001) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_INTERFACE(r9, &(0x7f0000001f80)={&(0x7f0000001e80)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001f40)={&(0x7f0000001ec0)={0x54, r8, 0x300, 0x70bd26, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_4ADDR={0x5}, @NL80211_ATTR_4ADDR={0x5}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_4ADDR={0x5}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}]}, 0x54}}, 0x8080) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r9, 0x84009422, &(0x7f0000001fc0)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) getsockopt$llc_int(r6, 0x10c, 0x3, &(0x7f00000023c0), &(0x7f0000002400)=0x4) sendmsg$nl_generic(r1, &(0x7f0000002640)={&(0x7f0000002440)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000002600)={&(0x7f0000002480)={0x168, 0x12, 0x4, 0x70bd2a, 0x25dfdbfb, {0x20}, [@generic="4030e3385ff4e6f998effcfc7e4ace2a627205132d1ed76065574c370ca9ec311322579f8479249ad808702d784e60abd23b4862f0021a8307fc9f2734e2b365917530a27e8e736d72b88465d8d0aa4f0620ec1d702e1b590cfdd36d7e903196f88067", @typed={0x7, 0xf8, 0x0, 0x0, @str='(*\x00'}, @typed={0x4, 0x9a}, @nested={0xd2, 0x26, 0x0, 0x1, [@typed={0xaa, 0x130, 0x0, 0x0, @binary="0b692a57e3c945d3a9f5e20130905e2c9412d3f9cdccab1d97c752a2e4450cf8f769c4c6e05168b74be6e808f586917410cd7e2647027c5a8b424e3097784e8e0276cd9318d2b275f2050c13b4f730c4704dfbb7e189f520bb244ba7609471b283cace071d150305206bd884563946cb4499dc9000563724e28b8656525d7dca51076ee9c49c4eee2132e0e684aa508c98a8390f0e837dbfbae7b9641df1ff8a1d7546a32590"}, @nested={0x4, 0x80}, @nested={0x4, 0x144}, @generic="77d36a823da2ab439f567a8b81c0490cd763", @typed={0x8, 0x1a, 0x0, 0x0, @pid=r5}]}, @typed={0x8, 0xd0, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}, @typed={0x8, 0x48, 0x0, 0x0, @str=')&\xd8\x00'}]}, 0x168}, 0x1, 0x0, 0x0, 0x4008}, 0x4080) 3m52.002286486s ago: executing program 0 (id=309): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1b6) pwrite64(r0, &(0x7f0000000100)="0000010042", 0x5, 0x1be) pwrite64(r0, &(0x7f0000000100)="55aa", 0x2, 0x1fe) pwrite64(r0, &(0x7f0000000100)='PRIVHEAD', 0x8, 0xc00) pwrite64(r0, 0x0, 0x0, 0xc0c) pwrite64(r0, &(0x7f0000000100)='TOCBLOC', 0x7, 0x100200) r1 = syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x2) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00'}) 3m51.617950124s ago: executing program 0 (id=313): socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000140), 0xfc, 0x560, &(0x7f00000008c0)="$eJzs3d9rW1UcAPDvTdut+6HtYAz1QQp7cDKXrq0/JvgwH0WHA33XkGRlNF1Gk461Dtwe3IsvMgQRB6Lvvvs4/Af8KwY6GDKKPuwlctObLluTNu3StVs+H7jtOffe9Jxv7v2enpubkAAG1kT6IxfxakR8l0SMtW0bjmzjxOp+Kw+uFdMliUbjs3+SSLJ1rf2T7PehrPJKRPzxTcTJ3Pp2a0vLc4VKpbyQ1Sfr85cna0vLpy7OF2bLs+VL0zMzZ96ZmX7/vXf7Fuub5//78dM7H5359vjKD7/dO3IribNxONvWHsdTuN5emYiJ7DkZibNP7DjVh8b2kmS3O8C2DGV5PhLpGDAWQ1nWd9QYe5ZdA3bY12laAwMqkf8woFrzgNa1fZ+ug58b9z9cvQBaH//w6msjMdq8Njq4kjx2ZZRe7473of20jd//vn0rXaJ/r0MAbOr6jYg4PTy8fvxLsvFv+073sM+TbRj/4Nm5k85/3uo0/8mtzX+iw/znUIfc3Y7N8z93rw/NdJXO/z7oOP9du2k1PpTVXmrO+UaSCxcr5XRsezkiTsTI/rS+wf2cL3MrdxvdNrbP/9Ilbb81F8z6cW94/+OPKRXqhacKus39GxGvdZz/JmvHP+lw/NPn43yPbRwr336927bN499ZjV8i3uh4/B/d0Uo2vj852TwfJltnxXr/3jz2Z7f2dzv+9Pgf3Dj+8aT9fm1t6238PPqw3G3bds//fcnnzfK+bN3VQr2+MBWxL/lk/frpR49t1Vv7p/GfOL7x+Nfp/D+QJnaP8d88erN919Gtxb+z0vhLWzr+Wy/c/firn7q139vxf7tZOpGt6WX867WDT/PcAQAAAAAAwF6Ti4jDkeTya+VcLp9ffX/H0TiYq1Rr9ZMXqouXStH8rOx4jORad7rH2t4PMZW9H7ZVn36iPhMRRyLi+6EDzXq+WK2Udjt4AAAAAAAAAAAAAAAAAAAA2CMORYx2+vx/6q+h3e4dsOM2+Mpv4AXXPf+zLf34pidgT/L/HwaX/IfBJf9hcMl/GFzyHwaX/IfBJf9hcG0l/389t4MdAQAAAAAAAAAAAAAAAAAAAAAAAAAAgBfD+XPn0qWx8uBaMa2XriwtzlWvnCqVa3P5+cVivlhduJyfrVZnK+V8sTq/2d+rVKuXp6Zj8epkvVyrT9aWlr+Yry5eethYVR55JlEBAAAAAAAAAAAAAAAAAADA86W2tDxXqFTKCwoK2yoM741uKPS5sNsjEwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA88n8AAAD//75iP7A=") sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20000840) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) userfaultfd(0x80001) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x12, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000002000000000000085000000bb000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000003100000095"], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x47, '\x00', 0x0, @cgroup_sock_addr=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcc84}, 0x94) 3m49.868708727s ago: executing program 0 (id=320): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000000)=0x8400, 0x4) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000100)=ANY=[@ANYRES32=r0, @ANYRES64=0x0, @ANYRESDEC=r0, @ANYRESHEX], 0x8) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) mmap$IORING_OFF_SQ_RING(0x0, 0xc00001, 0x3000007, 0x401d031, 0xffffffffffffffff, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000080)=@pppol2tpin6={0x18, 0x1, {0x0, r2, 0x6, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local, 0x5}}}, 0x32) getsockopt$sock_buf(r1, 0x1, 0x1c, 0x0, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000400)=0x6, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) recvmsg(r0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/16, 0x5b}, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) r4 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x0) ioctl$FE_GET_PROPERTY(r4, 0x80106f53, &(0x7f0000000400)={0x4, &(0x7f00000006c0)=[{0x13, '\x00', @st={0x4, [{0x3, @svalue=0x9}, {0x3, @uvalue=0x9}, {0x0, @uvalue=0xbfac}, {0x2, @svalue=0x1}]}, 0x87}, {0x20, '\x00', @st={0x4, [{0x3}, {0x2, @svalue=0xffff}, {0x0, @svalue=0x4}, {0x1, @svalue=0x5}]}, 0x6}, {0x2f, '\x00', @data=0x20000007, 0xa}, {0x40, '\x00', @st={0x4, [{0x1, @svalue=0x5}, {0x2, @svalue=0x7fffffff}, {0x2, @svalue=0x1}, {0x1, @uvalue=0x8}]}, 0x2}]}) bind$inet6(r3, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r3, 0x402) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f0000000240)='./file3\x00', 0x4010, &(0x7f00000001c0), 0x2, 0xbd8, &(0x7f00000083c0)="$eJzs3M1rHOcZAPBnRqu1ZKtduZRS91KVUmwoXUsuMrUp1C4uvfRQaK8FC3llhNYfSCquZB1W7T9Q2p5begk4MQk5xGdfEpJrLol9TcghYIJiJWBCsmH2Q1K8Wkm2dzWO/PvBu/O+887u8zwer2Ze2N0AXlhj2UMacSwiLiYRpdb+NCKKjd5QRK153PrayvTnayvTSdTrf/okiSQiHq6tTLdfK2ltj7QGQxHx7m+T+N4/OuMuLC3PTVWrlfnW+OTilesnF5aWfzF7Zepy5XLl6sTpX02emjw9fmayZ7U++uDcnc9+8vuPal+8/OXtT//9UhLnYqQ1t7WOXhmLsY1/k60KETHV62A5GWjVs7XOpLDLk9I+JwUAQFfplnu4H0QpBmLz5q0Ub76Xa3IAAABAT9QHIuoAAADAAZdY/wMAAMAB1/4cwMO1lel2y/cTCfvrwfmIGG3Wv95qzZlC1BrboRiMiMMPk9j6tdak+bRnNhYRH94/81rWouN7yP+71YMQO6qtRsQPtzv/SaP+0ca3uDvrTyNivAfxxx4b7/f/v2ep/1wP4uddPwAvprvnmxeyzutfunH/E9tc/wrbXLueRt7Xv/b933rH/d9m/QNd7v/+uMcYN2/990a3uaz+X9/53avtlsXPts9U1BN4sBrxo8J29Scb9Sdd6r+4xxilr25Uus3lXX/9/xHHY/v625Kdf5/o5MxstTLefNw2xuo7k690i593/dn5P9yl/vbvP3U7/9f3GOMvFy683rHz/mZ35/rTj4vJnxu9YmvP36YWF+cnIorJHzr3n9ohkdrmMe3XyOo/8dOd3//b1T/QfLnGXLYWWG1ts/HfHwv7m9s33+iWUnv998Tnf3jXI/Ykq/9Sl/O/tf63C53n/597jPGzt/51otvc1vVv1rL47bUwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALSlETESSVre6KdpuRxxJCK+H4fT6rWFxZ/PXPvr1UvZXMRoDKYzs9XKeESUmuMkG080+pvjU4+NfxkRRyPiP6Xhxrg8fa16Ke/iAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA2HAkIkYiScsRkUbEeilNy+W8swIAAAB6bjTvBAAAAIC+s/4HAACAg8/6HwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgD47+uO795KIqJ0dbrRMsTU3mGtmQL+leScA5GYg7wSA3BTyTgDIzROu8d0uwAGU7DI/1HXmUM9zAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOD5dfzY3XtJRNTODjdaptiaG8w1M6Df0rwTAHIzsNNkYf/yAPaftzi8uKzxgWSX+aHNY2rfnDnUt5wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeP6MNFqSliOi2NpXLkd8JyJGYzCZma1WxiPiuxHxfmnwUDaeyDlnAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAem9haXluqlqtzGedNFqdjT3fgk4kzUr6HqsVp5Z/yTo96RTjKZ/+qF6v55183zu5/lkCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAnC0vLc1PVamV+Ie9MAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgLwtLC3PTVWrlfk+dvKuEQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA/HwdAAD///TiCwo=") mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file7\x00', 0x1c4) r5 = syz_open_dev$usbmon(&(0x7f0000000000), 0x80000001, 0x82002) mmap$IORING_MAP_OFF_PARAM_REGION(0x0, 0x1000, 0x2000002, 0x11, r5, 0x20000000) syz_mount_image$fuse(0x0, &(0x7f00000001c0)='./file7/file0\x00', 0x100000, 0x0, 0x0, 0x0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./debug/split_huge_pages\x00', 0x1, 0x0) write(r6, &(0x7f0000000180)='/proc/self/cwd/test_file,0x0,0x', 0x1f) syz_emit_ethernet(0x5e, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000286dd6000000000280600fe8000000000000000000000000000aafe8000000000000000000000000000aafffc4e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="a0c200059078f5001e1220057f000001000145673d923b56c2630000"], 0x0) 3m47.446200916s ago: executing program 0 (id=329): symlinkat(&(0x7f00000000c0)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r0 = socket$nl_netfilter(0x10, 0x3, 0xc) fcntl$setlease(r0, 0x400, 0x2) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="50000000020605000000000000000000000000000500010006000000050005000200020005000400000000000900020073797a310000000015000300686173683a69702c706f72742c6e657400000000"], 0x50}, 0x1, 0x0, 0x0, 0x2000c810}, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0xcbb, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000040)={0xf0f007, 0x20009}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000300000005"], 0x48) bpf$PROG_LOAD(0x2, &(0x7f0000000040)={0x3, 0x3, &(0x7f0000000740)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000090607000000000000000000050000400900020073797a3100000000050001000700000038000780060004404e21000005000700ff0000000c00018008000140e00040000c00028008000140e00000020c00148008000140"], 0x60}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f00000007c0)=[{&(0x7f00000003c0)}, {&(0x7f0000000400)=""/38, 0x26}, {&(0x7f0000000440)=""/149, 0x95}, {&(0x7f0000000500)=""/61, 0x3d}, {&(0x7f0000000540)=""/128, 0x80}, {&(0x7f0000000640)=""/60, 0x3c}, {&(0x7f0000000680)=""/165, 0xa5}, {&(0x7f0000000740)=""/24, 0x18}], 0x8) ioctl$F2FS_IOC_GET_PIN_FILE(r0, 0x8004f50e, &(0x7f0000000180)) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x210000, 0x0) ioctl$PPPIOCCONNECT(r3, 0x4004743a, &(0x7f00000001c0)=0x3) syz_open_dev$dvb_dvr(&(0x7f0000000200), 0x0, 0x40) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r4 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000280), 0x420c41, 0x0) ioctl$DVB_DVR_DMX_EXPBUF(r4, 0xc00c6f3e, &(0x7f0000000380)={0x5, 0x0, r2}) 3m43.622084332s ago: executing program 0 (id=339): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) unshare(0x24020400) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) r1 = mq_open(&(0x7f00000000c0)='@#@\x00', 0x40, 0xc, 0x0) mq_timedsend(r1, 0x0, 0x0, 0x7, 0x0) 3m43.314719517s ago: executing program 33 (id=339): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) unshare(0x24020400) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) r1 = mq_open(&(0x7f00000000c0)='@#@\x00', 0x40, 0xc, 0x0) mq_timedsend(r1, 0x0, 0x0, 0x7, 0x0) 2m29.593439265s ago: executing program 6 (id=583): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x7, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10104, 0xfd000000}, [@IFLA_IFNAME={0x14, 0x3, 'vlan0\x00'}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x3c}}, 0x0) 2m28.445697864s ago: executing program 6 (id=588): syz_mount_image$ext4(&(0x7f0000000280)='ext2\x00', &(0x7f0000000240)='./file0\x00', 0x10040, &(0x7f0000000200), 0xfe, 0x26f, &(0x7f00000002c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x181341, 0x84) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) symlinkat(&(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x28541, 0x140) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x380407b, 0x0, 0x1, 0x0, &(0x7f0000000140)) (fail_nth: 25) 2m27.786259599s ago: executing program 6 (id=591): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x200000, &(0x7f0000000140), 0x1, 0x4dd, &(0x7f0000000d40)="$eJzs3c1vVF0ZAPDn3n6+ffvSoiR+RAURRUOYaQdoCCvcaAwhMRJXLqC2Q9N0ptN0pkgri/I/mEjiSvduXJi4MGHl3p3ujAkuTFCJhpq4GHPvTEspndK8tDPQ+f2Sm7nnnpn7nGfgnnPntJ0TQN86FxGbETEcEfciYqJ9PGlvcbO1Zc97+eLR3NaLR3NJNJt3/pnk9dmx2PWazMftc45GxA++G/Hj5M249fWNpdlKpbzaLhcb1ZVifX3jr4vV2YXyQnm5VJqZnpm6fuVa6chyPVv9zfPvLN764e9/9+Vnf9z81k+zZo2363bncZRaqQ/txMkMRsSt4wjWAwPtfIZ73RA+lTQiPhMR57Prv9nr1gAA3dBsTkRzYncZADjp0nwOLEkL7bmA8UjTQqE1h3cmxtJKrd64dL+2tjzfmiubjKH0/mKlPNWeK5yMoSQrT+f7r8qlPeUrEXE6In428lFeLszVKvO9vPEBgD728Z7x/z8jrfEfADjhRnvdAACg64z/ANB/jP8A0H+M/wDQf4z/ANB/jP8A0H+M/wDQV75/+3a2Nbfa3389/2B9ban24PJ8ub5UqK7NFeZqqyuFhVptIf/Onurbzlep1Vamr8baw2KjXG8U6+sbd6u1teXG3fx7ve+Wh7qSFQBwkNNnn/45iYjNGx/lW+xay8FYDSdb2usGAD0z0OsGAD0z2OsGAD3jMz6wzxK9r+n4K0JPOr5E1wLvuYtfMP8P/cr8P/Qv8//Qv8z/Q/9qNhNr/gNAnzHHDxzxz/9H3rU9AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8CEYz7ckLbTXAh+PNC0UIj6JiMkYSu4vVspTEXEqIv40MjSSlad73WgA4B2lf08iIhmIuDhxYXxv7XDy33wtr+GI+Mkv7vz84WyjsTqdHf/XzvHGk/bx0oGBdpYaTI8lDwCgk+1xensc3/byxaO57a2b7Xn+7dbiolncrfbWqhmMwfxxNL9xGPt30i63ZPcsA0cQf/NxRHx+v/yTfG5ksr3y6d74WexPuho/fS1+mte1HrP34rNH0BboN0+z/ufmftdfGufyx/2v/9G8h3p32/3f1hv9X7rT/w106P/OHTbG1T98r2Pd44gvDrbiZ+ff2tX/bMdPOsS/cMj4f/nSV853qmv+MuJi7Jd/8lqsYqO6Uqyvb1xerM4ulBfKy6XSzPTM1PUr10rFfI66uD1T/aZ/3Lh06qD8xzrEH31L/l8/ZP6/+t+9H321w+feLP43v7b/v/+ZA+JnY+I3Dhl/duy3HZfvzuLP759/+zWd8790yPjP/rYxf8inAgBdUF/fWJqtVMqrx7lT/3UrWDdifQA72b3be9CME7fz+IN5V7P/AUdxns8dY1N73TMBx+3VRd/rlgAAAAAAAAAAAAAAAJ104w+eep0jAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJ9f/AwAA///VutIX") r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000c40)=ANY=[@ANYBLOB="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"], 0x159c}, 0x1, 0x0, 0x0, 0x8041}, 0x0) 2m26.649197345s ago: executing program 6 (id=595): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000006c0)=@bpf_lsm={0x6, 0x3, &(0x7f0000000300)=ANY=[], &(0x7f0000000140)='GPL\x00', 0xfffffff9, 0x0, 0x0, 0x0, 0x20}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000680)='./config/usb_gadget/g1/functions/hid.usb0/no_out_endpoint\x00', 0x1, 0x0) write(r0, &(0x7f00000006c0)='5', 0x1) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYRES16=0x0], &(0x7f00000001c0)='syzkaller\x00', 0xfffffffe, 0x0, 0x0, 0x0, 0x53, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r1, 0x27, 0xe, 0x0, &(0x7f0000000180)="378b23e1e6d4996a3356d4a6c293", 0x0, 0x5, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000019c0)={&(0x7f0000000580)="60783e2114962d27d1e49dee0bd7a8f6071c503e296c93706233c4de2067445c5fbd1e66b8124c7cb386c9af43b04db29989f55267f528660194bf4ff9df919a66cb5307544ef270b6824968e72e93cfcd61e3be958fa6ac89b75b118f03362f6959386fc6247a97888448bad631393f22808267fed6e653f8414e34de03c6d8f62e18ae6ef15367a456abae4b51ead94a1ebccba035db94f9355c8a2495d9f7fc0bef37b796f8305742cd54644e052f2d6bc0b10765592e1131882f633fb7887292611d1e5cd1bd57810774fc93874890b0c0e1", &(0x7f0000000780)=""/4096, &(0x7f0000001780)="ca97e85ee9b4ff66b4e2a377047f71c0794bfd907f7253388fdde0876747b777bab245ccb961ce172f7fc9a4d161a536de5546e75c0b8ca80421546c0dfe885c3e5165186b1d25224b9678c3f5ccd35b69697ab905fe7a2b605c31863b389f827fc449a35c6426e19c85348a33ee7d8ce7b25d9754058e71e93f24a693ff5fca73feb44ee8bb14a740aba99fcc5644ff16f95bdd7d47c048d5285b602e76137033f2dfc47a125c2e016358ed699a2ea8a5f35c24c4fac467d8b7d1341cbef44b8a56320b446e48", &(0x7f0000001880)="63719aa4cc2ba108a4460b52901ce6ccf147217da9519a0756f7b80af665d66c8af4208695eb91049edb7189628e8b1627e7fab533a39cd9ee12ea8d8b7200c353a2493b8ff57fb553ebd7cd249a9899287459532afe035bef4cf4b18d901a66158952affda510d0a31ffea36b66e93e56aeb26dab9a8530443fc068b6d721c8ce23f21e6fe82b5f5c05651e285eced67ae2b3bcba53a79aba64c54814637c748b3d732accc4ce6fb6ca9dadbc0f184ee14d23162a100487cd106bb57dcd9300d552cd65e4fcb87fd55c44f0d764e669173d102f8a09dd3660a039dd05deae8d3ba7dde2fddc2076a32d", 0x8}, 0x38) r2 = socket$alg(0x26, 0x5, 0x0) setns(0xc9, 0x20000) socket$inet6_sctp(0xa, 0x1, 0x84) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000060000000800000000000000", @ANYRES32, @ANYBLOB="0700000001000000000000000000007b4f9e0bdf", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x2, 0xd, &(0x7f0000000380)=ANY=[@ANYRES64=r2, @ANYRES64=r2], &(0x7f0000000340)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x467d}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x0, 0xe, 0xfeff, &(0x7f0000000100)="e0857f9f582f0300000000000000", 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$nl_netfilter(0x10, 0x3, 0xc) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x58, &(0x7f0000000240)={[{@inode_readahead_blks}, {@noload}, {@norecovery}, {@stripe={'stripe', 0x3d, 0x4ffff}}, {@norecovery}, {@errors_remount}, {@dax_inode}]}, 0xfe, 0x79f, &(0x7f0000001380)="$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") r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x8840, 0xa2) r5 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) write(r5, &(0x7f0000000080)="6ecfc00c", 0x4) sendfile(r5, r4, 0x0, 0x3ffff) socketpair$unix(0x1, 0x1, 0x0, 0x0) r6 = getpid() sched_setscheduler(r6, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys_sec\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys_sec\x00', &(0x7f0000000080)='securityfs\x00', 0x8, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys_sec/tomoyo/domain_policy\x00', 0x2, 0x0) write(r7, &(0x7f0000000100)='select \n', 0x10) write(r7, &(0x7f0000000100)='file read /etc/passwd task.uid== exec.argv[0]=\"s\\\" exec.envp[\"PATH\"]=\"/bin\"\n', 0x4c) 2m25.446124529s ago: executing program 6 (id=600): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x8042, 0x0) fcntl$setlease(r1, 0x400, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2, 0x5) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f00000001c0)={0x0, 0x2}, 0x8) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./\x00\x00'], 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=@base={0xe, 0x4, 0x4, 0x2}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x6, 0x10, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000010000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70200000c000000850000008600000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000040000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r6, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) sendmsg$inet6(r3, &(0x7f0000000140)={&(0x7f0000000100)={0xa, 0x4e22, 0x80000, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xfffffffb}, 0x1c, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000af0000000300000036000000732c0005000000"], 0x18}, 0x40001) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r7, 0x6, 0x8, &(0x7f0000000000)=0x6, 0x4) getsockopt$inet6_tcp_buf(r7, 0x6, 0x8, 0x0, &(0x7f0000001040)) renameat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sec\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sec\x00', &(0x7f0000000100)='securityfs\x00', 0x0, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sec/safesetid/gid_allowlist_policy\x00', 0x0, 0x0) read(r8, 0x0, 0x0) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0x4, 0x1}, 0x6) write(r0, &(0x7f0000000000)="4c00000011000f14001100020000020002000000200000", 0x17) r9 = io_uring_setup(0x6bdb, &(0x7f0000000080)={0x0, 0xf0b4, 0x20, 0x3, 0x10000, 0x0, r1}) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r9, 0xf50f, 0x0) unshare(0x2040400) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x103042, 0x0) r10 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r10, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(r11, 0x0) socket(0x10, 0x3, 0x0) 2m21.286894512s ago: executing program 6 (id=614): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xd000}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_MULTI_BOOLOPT={0xc, 0x2e, {0x0, 0x3}}, @IFLA_BR_NF_CALL_ARPTABLES={0x5}]}}}]}, 0x48}}, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) close_range(r0, r0, 0x0) sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f0000000500)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000280)={0x230, r1, 0x200, 0x70bd2d, 0x25dfdbfc, {}, [@TIPC_NLA_MEDIA={0x28, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}]}, @TIPC_NLA_NODE={0xac, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0x53, 0x3, "4e36d9bb4059f3747e60258dd5125413aab7c9d3f02f068eac3e5c04c07754f1491ce68f0c0fe24656a093a67d6021b5b7ce3a00dcea5ae012d1a56c7fb3661d85a6d8bd366eeb6cdf37b8e0ef2443"}, @TIPC_NLA_NODE_KEY={0x45, 0x4, {'gcm(aes)\x00', 0x1d, "f8d8fbe27ce4ab3138a992cbeacb599ec0690d5da4a6b7ca904ab35edf"}}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x3}]}, @TIPC_NLA_BEARER={0x2c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xf7}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1ff}, @TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7b}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xb}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x401}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}]}, @TIPC_NLA_LINK={0xa4, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xa2e2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x19}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffa}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x730}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x42}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x101}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x81}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_PUBL={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2}, @TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xd}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x932}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x10001}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2}]}]}, 0x230}, 0x1, 0x0, 0x0, 0x8005}, 0x48094) 2m20.189968716s ago: executing program 34 (id=614): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xd000}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_MULTI_BOOLOPT={0xc, 0x2e, {0x0, 0x3}}, @IFLA_BR_NF_CALL_ARPTABLES={0x5}]}}}]}, 0x48}}, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) close_range(r0, r0, 0x0) sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f0000000500)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000280)={0x230, r1, 0x200, 0x70bd2d, 0x25dfdbfc, {}, [@TIPC_NLA_MEDIA={0x28, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}]}, @TIPC_NLA_NODE={0xac, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0x53, 0x3, "4e36d9bb4059f3747e60258dd5125413aab7c9d3f02f068eac3e5c04c07754f1491ce68f0c0fe24656a093a67d6021b5b7ce3a00dcea5ae012d1a56c7fb3661d85a6d8bd366eeb6cdf37b8e0ef2443"}, @TIPC_NLA_NODE_KEY={0x45, 0x4, {'gcm(aes)\x00', 0x1d, "f8d8fbe27ce4ab3138a992cbeacb599ec0690d5da4a6b7ca904ab35edf"}}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x3}]}, @TIPC_NLA_BEARER={0x2c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xf7}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1ff}, @TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7b}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xb}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x401}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}]}, @TIPC_NLA_LINK={0xa4, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xa2e2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x19}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffa}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x730}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x42}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x101}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x81}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_PUBL={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2}, @TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xd}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x932}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x10001}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2}]}]}, 0x230}, 0x1, 0x0, 0x0, 0x8005}, 0x48094) 1m10.616166574s ago: executing program 5 (id=959): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x9, 0x7, 0x0, 0x7744, 0x4, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x5}, 0x50) r1 = syz_open_dev$video(&(0x7f0000000700), 0x7, 0x2) ioctl$VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000740)={0x1, 0x1, 0x1}) (async) ioctl$VIDIOC_S_INPUT(r1, 0xc0045627, &(0x7f0000000580)=0x2) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0x17, &(0x7f0000000200)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4002}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @jmp={0x5, 0x1, 0xb, 0x6, 0x6, 0x8, 0xfffffffffffffff0}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0x9}, @map_fd={0x18, 0x4, 0x1, 0x0, r0}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}]}, &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) 1m10.440981676s ago: executing program 5 (id=961): socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000140), 0xfc, 0x560, &(0x7f00000008c0)="$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") sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20000840) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) userfaultfd(0x80001) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x12, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000060000000085000000bb000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000003100000095"], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x47, '\x00', 0x0, @cgroup_sock_addr=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcc84}, 0x94) 1m9.683525206s ago: executing program 5 (id=970): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="c4000000190001000000000000004000e00000020000000000000000000000000000000000000000000000000000000000000000000000000a00000087000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000053260e130000000000000000000000fbfffffffff5ffff00000000001b00000000000000000000000000000000000200000000000000b9120000000000000000000000000000000c001500283a6b304c"], 0xc4}, 0x1, 0x0, 0x0, 0x40100}, 0x2c000010) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="b8000000190001000000000000000000e00000020000000000000007000000000000000000000000000000000000000000000000000000000a0000008700", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00'], 0xb8}, 0x1, 0x0, 0x0, 0x4000015}, 0x2c000010) 1m9.226050309s ago: executing program 5 (id=975): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x207, &(0x7f0000000200)={[{@nouid32}, {@nolazytime}]}, 0x1, 0x469, &(0x7f0000000600)="$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") mount(0x0, &(0x7f0000000240)='.\x00', 0x0, 0x2390024, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x20, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x0, 0x3, 0x5}}]}, @action_gd=@TCA_ACT_TAB={0x43, 0x1, [{0x10, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3e}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x2004c8d8) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@delchain={0x24, 0x65, 0x400, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x509d884560ba1ba6, 0x3}, {}, {0x8, 0x10}}}, 0x24}, 0x1, 0x0, 0x0, 0x8011}, 0x10) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x1, 0x80000000, 0x4, {0x0, 0x0, 0x0, 0x0, {0x8, 0x3}, {0xa, 0xffe0}, {0xfff1, 0x7}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_TARGET={0x8, 0x3, 0x1}]}}]}, 0x3c}}, 0x20004055) (async, rerun: 32) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async, rerun: 32) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) (async, rerun: 64) r0 = socket$netlink(0x10, 0x3, 0x0) (rerun: 64) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) (async) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./bus\x00', 0x40011, 0x0, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f00000002c0)='./file0\x00', 0x2048c5, &(0x7f0000000400)=ANY=[@ANYBLOB="726f6469722c71756965742c73686f72746e616d653d6d697865642c6e6f6e756d7461696c3d302c756e695f78616d653d77696e39352c73686f72746e616d653d6d697865642c757466383d312c73686f77657865632c646f733158666c6f7070792c73686f72746e616d653d6c6f7765722c73686f72746e616d653d77696e39352c73686f72746e616d653d77696e6e742c6572726f72733d636f6e74696e75652c756e695f786c6174653d312c756e695f786c6174653d312c00a424ddc02352286f0e247eefad4e92264183729b0ac7807d80e4e938f1fb35a58c07c12d2a2a84b941940e6b4923fea1a18277e485c1a675893632"], 0x0, 0x2c7, &(0x7f0000002b80)="$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") (async) r1 = syz_open_procfs(0x0, &(0x7f0000000540)='mounts\x00') (async) mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x100000, 0x0) (async) mount$bind(&(0x7f0000000500)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x1333404, 0x0) mount$bind(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0/file0\x00', 0x0, 0x13481, 0x0) (async) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) (async) read$FUSE(r1, &(0x7f0000000840)={0x2020}, 0x2020) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) (async) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setuid(0x0) (async) acct(0x0) 1m7.874272506s ago: executing program 5 (id=993): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000800), r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:02.0/config\x00', 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_open_dev$ttys(0xc, 0x2, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) pwrite64(r1, &(0x7f0000000100), 0x0, 0x5) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xc, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="180000000020000000003e000000100073013d000000000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1m4.226167539s ago: executing program 5 (id=1007): r0 = socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_BLANKSCREEN(r1, 0x541c, &(0x7f0000000100)) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x7fff8) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)={0x5c, r2, 0xb97534d5fe9704cf, 0x70bd2b, 0x25dfdbfe, {{0x12}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x6, 0xbd, [0xfffa]}, @NL80211_ATTR_STA_EXT_CAPABILITY={0x25, 0xac, "ab2b216763eff3655fd6576d99731b0a751a2ae3a2e27329e5ad9156784b69e27e"}, @NL80211_ATTR_STA_TX_POWER_SETTING={0x5, 0x113, 0x2}, @NL80211_ATTR_MESH_PEER_AID={0x6, 0xed, 0x572}]}, 0x5c}}, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) 1m3.783981697s ago: executing program 35 (id=1007): r0 = socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_BLANKSCREEN(r1, 0x541c, &(0x7f0000000100)) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x7fff8) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)={0x5c, r2, 0xb97534d5fe9704cf, 0x70bd2b, 0x25dfdbfe, {{0x12}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x6, 0xbd, [0xfffa]}, @NL80211_ATTR_STA_EXT_CAPABILITY={0x25, 0xac, "ab2b216763eff3655fd6576d99731b0a751a2ae3a2e27329e5ad9156784b69e27e"}, @NL80211_ATTR_STA_TX_POWER_SETTING={0x5, 0x113, 0x2}, @NL80211_ATTR_MESH_PEER_AID={0x6, 0xed, 0x572}]}, 0x5c}}, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) 1m3.058000143s ago: executing program 2 (id=1017): bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$tun(r0, &(0x7f00000006c0)=ANY=[@ANYBLOB="000086dd0001110004000000a60c6eec00be00442fd3fe8000000000006000000000000000aaff02000000000000000000000000000104"], 0xfdef) 1m2.618232859s ago: executing program 2 (id=1022): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000980)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000b0ff000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r0, @ANYBLOB="0000000002000000b70500000800000085000000c200000095"], &(0x7f0000000300)='GPL\x00', 0x4, 0x1013, &(0x7f0000000a40)=""/4115, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) 1m2.433127183s ago: executing program 2 (id=1024): syz_mount_image$ext4(&(0x7f00000001c0)='ext3\x00', &(0x7f0000000500)='./file2\x00', 0x101c91c, &(0x7f0000000400)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2000000}}, {@noblock_validity}, {@resgid}, {@inlinecrypt}, {@errors_remount}, {@usrquota}, {@usrjquota}, {@nodelalloc}, {@resgid, 0x32}]}, 0x1d, 0x4e8, &(0x7f0000000540)="$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") bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000000a0000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x1, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb=0x1, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) syz_open_dev$vim2m(&(0x7f0000000200), 0x4, 0x2) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)=0x13) r1 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$netlink(r1, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000940)=ANY=[@ANYBLOB="e00000001000090500000000000000006f6d8864d22a3f2ffaa46c88bca90000002b0e13e735a3184f123d6da2f1acfac0ee2dd2b184b25db1f302de337c0004060000000000bf8506000000000000005f44e4ce2d715f2828"], 0xe0}], 0x1}, 0x40040) sendmsg$nl_crypto(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)=@getstat={0xe0, 0x15, 0x0, 0x70bd2c, 0x25dfdbff, {{'cbc-aes-aesni\x00'}}, ["", "", "", ""]}, 0xe0}}, 0x20004890) 1m2.090146703s ago: executing program 3 (id=1028): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000180)='./file0\x00', 0x3810754, &(0x7f00000001c0), 0x4, 0x4b1, &(0x7f0000000bc0)="$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") r0 = socket$kcm(0x1e, 0x4, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x41, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f00000012c0)={[{@grpid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x10}}, {@nodioread_nolock}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4f2040d2}}, {@auto_da_alloc}, {@stripe}, {@minixdf}, {@orlov}]}, 0x4, 0xbd0, &(0x7f0000002380)="$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") quotactl$Q_GETNEXTQUOTA(0xffffffff80000901, &(0x7f0000000180)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000200)) setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r3 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f00000008c0)=r1, 0x4) sendmsg$sock(r0, &(0x7f0000001b00)={0x0, 0x0, &(0x7f0000001a80), 0x19c}, 0xf225ff1a574978fc) setsockopt$sock_attach_bpf(r3, 0x1, 0x21, &(0x7f0000000300), 0x4) r4 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r4, &(0x7f0000000300)={0x18, 0x0, {0x1, @remote, 'bridge_slave_1\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r4, 0x80047437, &(0x7f0000000040)) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl(r5, 0x40047438, &(0x7f0000000040)) mmap(0x0, 0x400000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$PPPIOCCONNECT(r5, 0x4004743a, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x28, r7, 0xc4fc9e906872338b, 0x0, 0xf0ffff, {{0x5}, {@void, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x8, 0x11d, 0x0, 0x1, [{0x4}]}]}, 0x28}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000780)={&(0x7f0000000680)={0x100, r7, 0x100, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x3, 0x28}}}}, [@NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x3da}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2de}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xf}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2f}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xa}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}], @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2a}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x4}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x77}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2c}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xc588}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x3c}], @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}, @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}, @NL80211_ATTR_CSA_IES={0x54, 0xb9, 0x0, 0x1, [@NL80211_ATTR_CSA_C_OFF_PRESP={0x8, 0xbb, [0x8000, 0x70]}, @NL80211_ATTR_CSA_C_OFF_PRESP={0x10, 0xbb, [0x5, 0x401, 0x9, 0x9, 0xa, 0xff66]}, @NL80211_ATTR_CSA_C_OFF_BEACON={0x8, 0xba, [0x1, 0x6000]}, @NL80211_ATTR_CSA_C_OFF_BEACON={0x8, 0xba, [0x5d, 0x101]}, @NL80211_ATTR_CSA_C_OFF_BEACON={0x18, 0xba, [0x80, 0x2, 0x80, 0x5, 0xffc0, 0x2, 0x4000, 0x28d9, 0x2, 0xd329]}, @NL80211_ATTR_CSA_C_OFF_BEACON={0x10, 0xba, [0x4, 0x0, 0x565, 0x6, 0xe, 0x5]}]}]}, 0x100}, 0x1, 0x0, 0x0, 0x844}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000c00)=ANY=[@ANYBLOB="d8010000", @ANYRES16=r10, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r11, @ANYBLOB="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"], 0x1d8}, 0x1, 0x0, 0x0, 0x805}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000800)={0xa4, r10, 0x100, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0xcb, 0xd}}}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x3}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x5}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x24}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2b}], @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x3}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_GATE_ANNOUNCEMENTS={0x5}, @NL80211_MESHCONF_RETRY_TIMEOUT={0x6, 0x1, 0x8e}, @NL80211_MESHCONF_FORWARDING={0x5, 0x13, 0x1}, @NL80211_MESHCONF_HOLDING_TIMEOUT={0x6, 0x3, 0x4a}]}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_MESH_ID={0xa}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4081}, 0x0) write$cgroup_subtree(r3, &(0x7f0000000500)=ANY=[], 0xfdef) sendmsg$kcm(r0, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000000)="03fe2de2dfeff6a612b5cff8df54ff90f8e3e32b10112dbabfc8da358d6c751d7ed78424f369372e41e8f7ba7106758cc1c06d0695f5b7950d13d2658bc9903ebc600fef6599708439f6188c75af4453fd31e425da505890d5b68888d3539e9638d0160c8eaf661c1c86eec755bab44bcdbd0f3bbbf2702147775886fe4a40af511ece4f7c7e0a75c5166dc6019183d9a6c1e07c409ad50b475692ffaa6e0030c2bef6caf89b3546a73d8f2d65ae0fd8095e6c6f33e754bdd2fb09ce9c95fd29a37189bab78263b664be6831e5d8644802478a9fcbb2cfe2d12738fb45b283339f173d91268cf2426e0039633c5d0f59dad0b073cfcc6066", 0xf8}, {&(0x7f0000000100)="6974f6d4c2dfcc6ebe787d529a71e73467b6774d408c0c460ee7b8c1b0191808de09926540ad47af92dcbf6bd175a73ec461b25fad29563b73ac2977d7c47c6f246cbcfea5fae56236dd7deb2b0a332f04e80cb821690e75bcaaec63f868b59f4be9b4c3eaacda88b09df06b9a011e4d3a857035ac82da63bcb4b245362a8e826f7fa0a5bc6a550045a3f5d4bd862cb128301dd8665f4472702471", 0x9b}, {&(0x7f00000001c0)="ec2aa8885d3413a5a9cee41448fcf0deaa75d7f9af97636cdf0c5988ee4a1f199b4f569552a65de5afbc8557a684f1dd192fd3fd3a86bd93da5cca544f490185dfe949a78c02e20bcc579616dc6d02cb551cb835866e17b2801a8e9086777d35b2cfc14d6facd66dd504f941fd0c55cb989b57439cb6527f83a72284bb15dc3a861f3e7e", 0x84}], 0x3, &(0x7f0000002f80)=ANY=[@ANYBLOB="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"], 0x12b0}, 0x4000000) 1m1.826096931s ago: executing program 2 (id=1031): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) setns(0xc9, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4001}) r2 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000080)={'syzkaller0\x00', {0x2, 0x0, @rand_addr=0xac140001}}) close(r1) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)={0x2, 0x3, 0x0, 0x3, 0xf, 0x0, 0x700, 0x0, [@sadb_key={0x5, 0x9, 0xd8, 0x0, "01d78771b90bd8a3b4914783c58777003d5b9538a9d03e6e9bfdac"}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @private}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x2, 0xd}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev}}]}, 0x78}, 0x1, 0x7}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000c8ab726ae98ad26a1226000000000095", @ANYRESDEC=r0, @ANYRESHEX=r0], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x51}, 0x94) 1m1.712291524s ago: executing program 7 (id=1032): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000700000c20000000000a01040000000000000000070000000900010073797a300000000040000000030a01040000000000000000070000000900010073797a30000000000900030073797a300000000014000480080001400000000408000240ffffff3865000000060a01040000000000000000070000000900010073797a30000000000900020073797a30000000002800048024000180090001006d657461000000001400028008000140000000010800024000000025"], 0xdc}}, 0x0) 1m1.254071172s ago: executing program 7 (id=1034): r0 = socket$inet(0x2, 0x80001, 0x84) socket$inet(0x2, 0x3, 0x5) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0xfffb}}, './file0\x00'}) r1 = openat$sysfs(0xffffff9c, &(0x7f0000000200)='/sys/kernel/notes', 0x0, 0x90) preadv(r1, &(0x7f0000000180)=[{0x0}, {&(0x7f0000000000)=""/253, 0xfd}], 0x2, 0x0, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xa62d6000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x15, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000006911160000000000851000000200000085000000a000000095000000000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x51, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x6}, 0x94) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), r5) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000300)={'wpan0\x00'}) sendmsg$NL802154_CMD_DEL_SEC_DEV(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000500)=ANY=[@ANYBLOB="08566e1c646389d56f1d5d370763756c0671e49b", @ANYRESDEC=r6, @ANYBLOB="01002dbd7000ffdbdf000008000300", @ANYRESDEC=r6, @ANYRESDEC=r4], 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r7 = socket$nl_rdma(0x10, 0x3, 0x14) r8 = memfd_create(&(0x7f0000000040)='\x00\x00@Z\x82\x1f\xd7\xdc\xe8\x01\x17\xf4\xd6z\xfeJ\xd4k\x01\x00\x00\x00\xb4\xa4\xc4\x85s\xedz\xef\x96\xe4:\xec\xb4ZB\x9elG\xfa+q\xa2w\x8d\x991\xc7\xef\x91\xcbZ\xd4\x0f\"U\xbc\x02k\xf4m\x9fXr\x1a\xb9\xc3\xfdaf\xec\xa7\xc2W]\xd8\x1d\xdel\x94\xfd\xd7\xde\x84\xf1n\xc5G\x89\x0e\xa1$6\x06*\x16\xc7\xf6i\xd6r\xcb\xe7Z\xdc\x82\x97\x89\xd3\x80i\xc00\x90\xee\xd6\xc4%,\xaa\f\xf0ra\x98\xca\xc6\x87\xb3\x85\xcc\xe3\x06\xc9\xcc\xe7do\xd8 8\x04\xe1\xa9R\xa0\xe1M\x10\xaa4!\x8f\xcez\x81F\x81\xcd\xdd\x1b\xa7\x85\b\xad)3s\x9f\x90\x85\x82\x1d\xc7\x80h\x87\xa2N\x80\xbf\xf5\xfe\xb9\'QC\xe7d\xc1\x16$\xb1\xd6\x85\xb9[\x16!\xf7{r\x01\x00\x00\x00\x00\x00\x00\x00\xb9#\xe0\xe0\r\x84\xa5\xb5\xe3U\xb3B\x84-\xce\x18!z\xe7\xcd\x93\x9e\xb9#\x8d\x8d\r\x1bD\x05#\xf3$A\xd1\xf5i\x87\x05\xedCo\x92\x84\xfe\x11$p\xab\xbb\n\x19\xe4\xf5t-x\xf3\a\x05n\x13\xe3X\x03\xe2\x04Y9/br\xb0\\\xdcDY\xd9\r\n\xe3Y}\x97,G\xf2\tC\xf3*\x9e\x8c]\x03\x9bt\x85{v3\xdd\x9f\xbc\a\x9eo5\xa2\xe3%\xcd\x19C\xbd*\xdb\xd8\xfe\x9f\xf2%~\xafH\v\x7fh\x88P?\xb8\x94\x8f\x9a\x87\x1c\xfb\x10\x032\xec\x0e\"\xc9\x89\xbd*\xf7\xfd\x17\xbb!\xebN\xe5\x17\xc4\xc7$\x11\xf0\x00G4\n\f\x95\x04\xae}\x81\xc5d\x17\xe4)\xd8\x12\xe6; ,\x0e7\xc1\x81lx', 0x1) syz_open_dev$usbfs(&(0x7f0000000080), 0xf, 0x8041) write$binfmt_script(r8, &(0x7f0000000340)={'#! ', './file0'}, 0xb) execveat(r8, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) setsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000240)={0x0, 0x4, 0xfff, 0x8}, 0x10) getpid() r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, 0x0, 0x2000000) mmap$IORING_OFF_SQES(0x0, 0x2, 0xc, 0x40010, r7, 0x10000000) 1m1.166403983s ago: executing program 3 (id=1035): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) epoll_create1(0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x8fd2b000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r0, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x275a, 0x0) write$tun(r1, &(0x7f0000000400)=ANY=[@ANYBLOB="6d6ff16901dc11fffe8800000e63142c213d0a527cf1dd2c2fc74c012c06bc9e8100000000000000000084000001fc01000000000000cf54cb21000000004e254e2101dc9078ee373935ef0f8da10b47000507b002"], 0x204) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x2b0, 0x0, 0x12, 0x60d, 0xf0, 0x202, 0x1b8, 0x2e8, 0x2e8, 0x1b8, 0x2c0, 0x4, 0x0, {[{{@ipv6={@private1, @ipv4={'\x00', '\xff\xff', @empty}, [0x0, 0xff], [], 'ip_vti0\x00', 'macsec0\x00', {0xff}}, 0x0, 0xa8, 0xf0}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00', 0x0, 0x3000000}}}, {{@ipv6={@mcast1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0xff, 0x0, 0xffffff00, 0xffffffff], [0xff, 0xff000000, 0x0, 0xfe], 'ipvlan1\x00', 'erspan0\x00', {}, {0xff}, 0x2b, 0x5, 0x6, 0x33}, 0x0, 0xd0, 0xf0}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0xae328689605bc686) 59.663603178s ago: executing program 1 (id=1036): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)) socket$netlink(0x10, 0x3, 0x8000000004) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c00000000010104000000000000000002001000240002801400018008000100e000000108200200e00000010c00028005000100000000001c0010800800014000000000d97405010000000008000240000000000800", @ANYRES64=r0], 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) 59.498236214s ago: executing program 2 (id=1037): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r1, &(0x7f00000016c0)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000200)="9a", 0x1}], 0x1}}], 0x1, 0x4000000) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000280)=@assoc_value={r3, 0x40}, 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={r3, 0x78, &(0x7f00000002c0)=[@in={0x2, 0x4e22, @private=0xa010102}, @in={0x2, 0x4e21, @loopback}, @in6={0xa, 0x4e20, 0x3a98, @dev={0xfe, 0x80, '\x00', 0x16}, 0x7}, @in={0x2, 0x4e23, @multicast2}, @in={0x2, 0x4e21, @multicast2}, @in6={0xa, 0x4e22, 0x9, @empty, 0x7}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f0000000400)={0x0, @in6={{0xa, 0x4e20, 0xffffffff, @private2, 0x7}}}, 0x90) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file2\x00', 0x8, &(0x7f0000000080), 0x4, 0x526, &(0x7f0000000700)="$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") r4 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0/file0\x00', 0x10b442, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x42, 0xe) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r5, 0xc0189379, &(0x7f0000000100)={{0x1, 0x1, 0x18, r4}, './file2\x00'}) pwrite64(r5, &(0x7f0000000140)="00002cc68400", 0x6, 0x7) ioctl$EXT4_IOC_MOVE_EXT(r4, 0xc028660f, &(0x7f0000000000)={0x0, r5, 0x0, 0x0, 0x1ff, 0xffffffffffff}) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x1018e58, &(0x7f00000005c0)={[{@nodioread_nolock}, {@noblock_validity}, {@data_err_ignore}, {@max_batch_time={'max_batch_time', 0x3d, 0x8c9}}, {@nodiscard}, {@stripe={'stripe', 0x3d, 0x4}}, {@nombcache}]}, 0x6, 0x623, &(0x7f0000000e00)="$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") 59.04417193s ago: executing program 1 (id=1038): r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$inet(r0, &(0x7f0000002780)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1c00000000000000000000a708000000", @ANYRES32, @ANYBLOB="e000000200000000000000001c00000000000000100100000d000000070b41ac"], 0x40}, 0x8000) 58.971494738s ago: executing program 7 (id=1039): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000100)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, &(0x7f0000000440)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000019000000000000000000711212000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) socket$can_j1939(0x1d, 0x2, 0x7) 58.698147356s ago: executing program 1 (id=1040): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000780)={'netdevsim0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newtfilter={0x80, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0xffffffff, {0x4, 0x8}, {0x1}, {0x300, 0x1}}, [@filter_kind_options=@f_flower={{0xb}, {0x50, 0x2, [@TCA_FLOWER_KEY_MPLS_LABEL={0x8}, @TCA_FLOWER_KEY_ICMPV4_TYPE={0x5}, @TCA_FLOWER_KEY_ENC_IPV6_SRC_MASK={0x14, 0x20, [0x0, 0xffffffff, 0xffffff00, 0xffffff]}, @TCA_FLOWER_KEY_ICMPV4_TYPE_MASK={0x5}, @TCA_FLOWER_KEY_ICMPV6_TYPE_MASK={0x5}, @TCA_FLOWER_KEY_CT_MARK={0x8, 0x5f, 0x9}, @TCA_FLOWER_KEY_TCP_FLAGS={0x6, 0x47, 0x5}, @TCA_FLOWER_KEY_VLAN_ETH_TYPE={0x6, 0x19, 0x8100}]}}]}, 0x80}}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000d00), r2) sendmsg$IEEE802154_LLSEC_ADD_KEY(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000340)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="290e29bd7000fbdbdf052700000005003100030000001400300053e0e85290ceb080fb816d3cdadf198b0a0001007770616e3100000005002b000300000005002e"], 0x4c}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x1}]}, 0x38}}, 0x0) 57.703714777s ago: executing program 2 (id=1041): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x79, 0x4) (async, rerun: 64) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) (async, rerun: 64) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) (async) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) (async, rerun: 32) sendmmsg$inet(r0, &(0x7f0000001180)=[{{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000640)="64b1de932e628eee8a0a89a94e5f750f399c7b1c35ac914dd6fc80d007beda93780f095b542decee786afeec8991e630bd7ebe6cdd3df5c82a54b9ba0f7e6f7cdd6729eb18e61f5296ad1df8ead0378b1cee4f7f6fef15d2b4b38d1e028e32d5584c080fcbe799a4eedfef7cbf95cb8435bf921ea828aaff4d73a74a44076e29eea4eab04413f2cc2081a0f05bec00b2ef34bd524f004ef0740ff6bc880b284742db", 0xa2}, {&(0x7f0000000700)="6731a9da84a7f1d212561a21cd729eb4a2e7f2c859d2682f4601b2befc6bfd956ab32128d13f450ac5ef76ffcf2a43f71d5011ad9e4fd63b36", 0x39}], 0x2}}, {{0x0, 0x0, &(0x7f0000000d80)=[{&(0x7f00000008c0)="1a4327465638b8670e9ef99039dc0f60eb2cde85b2639882576537b3beb8b09ca7dd2c4972f132eb493ac7a3dd19bf1a9b8aacd86b333646a9e5342d840708bcd9aa55104cfedd028566dffeaf06fdb5f2d372c586b0b89c64700b3d9abdadd9f9fc7a36e68d46b7c9f80f6bd975de3ed294", 0x72}, {&(0x7f0000000980)="70c12f0fa84f4fcbfdb9e33365085ad18b6b869d3b7d05d8f7610180cb11c7f13b66eeb4156bfbb3f635a7dfde1719e1f90fe56dbf21f901857a7eafcf9fde47342a2d78eeb82a302413a3bfdb1c939d405fa6a8234f082b80073226b42969805f104a28759b329d3b6afc406f0d36cbc7d0a61ccbfb631af5416206c4c57c76bd167a93d23cf3783c3febaf24be3685637891f8380306980cd8505739", 0x9d}, {&(0x7f0000000a40)="73778c0d766ea105fb79d14c301c6080916c289dc3cfad072f0c96f3fefe267e50eed86d9dfc2921cfe6832450c74b23b3053fb0b963449a26650154545ebfa628468dd509ed54f0aefa06c53ee50750a8f75171be2ccf7a0028f94b6aabf6840340d42157adb59b312e95fb21235f2218b20122fe6a70986f5898d64dfb232a5ed4b5e33d2fc3d4625f96ea7e33efc27bacf87905e1fa8220799ffd2e29c67f48e620a307", 0xa5}], 0x3, &(0x7f0000000e00)=ANY=[@ANYBLOB="d8"], 0xd8}}], 0x2, 0x2090) (async, rerun: 32) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdf8, 0x4) (async) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r1, 0x84, 0x78, 0xfffffffffffffffe, 0x0) (async, rerun: 32) syz_usb_disconnect(0xffffffffffffffff) (async, rerun: 32) write(r0, &(0x7f0000001e00)="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", 0x33b) 57.68304346s ago: executing program 3 (id=1042): bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xc, 0x13, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000300000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000ffffff85850000006d000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 57.538387427s ago: executing program 3 (id=1043): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x130}}, 0x0) 57.470783513s ago: executing program 1 (id=1044): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r1 = socket$unix(0x1, 0x5, 0x0) bind$unix(r1, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x12) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000bc0)=@ipv6_newroute={0x30, 0x18, 0x1, 0x0, 0x1, {0xa, 0x0, 0x0, 0x0, 0xfd, 0x3, 0xc8}, [@RTA_GATEWAY={0x14, 0x5, @loopback}]}, 0x30}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="a0000000", @ANYRES16=r4, @ANYBLOB="cf042c9d7000fbdb06251200000008000300", @ANYRES32=r5, @ANYBLOB="0a000600ffffffffffff00000500c200820000000800a400030000003400ac00135ec1fefc4f5ba6be6c1af4ea7e19da007981ee1bce56c1bd23c1d1ae6eb6a5682a7927bc133d5be7d045b94f1146c608001400", @ANYRES8=r4], 0xa0}, 0x1, 0x0, 0x0, 0x24008091}, 0x0) listen(r1, 0x787) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000040), 0x400, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 57.233713882s ago: executing program 3 (id=1045): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) dup(r0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000200), r1) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000002780)={&(0x7f00000002c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010029bd7000fbdbdf25010000000c00020000000000000000001c0007801800018008000100", @ANYBLOB="04"], 0x3c}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000) 56.963685598s ago: executing program 7 (id=1046): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a09040000000000000000020000000900020073797a32000000000900010073797a300000000a2400048020000180070001006374000014000280080001400000000a080002400000000608000740e77a08fe14000000110001000000000000"], 0x80}, 0x1, 0x0, 0x0, 0x802}, 0x0) 56.85952686s ago: executing program 3 (id=1047): r0 = socket$netlink(0x10, 0x3, 0x0) openat$smackfs_relabel_self(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$inet(r0, &(0x7f0000000a80)={&(0x7f0000000180)={0x2, 0x4e20, @remote}, 0x10, &(0x7f0000000980)=[{&(0x7f0000000340)="4f3d23663352ce35e290f3ba7eb875e66c8356e5f20516f3db52f0fce1b830f21fe59dbbae89a37cc1cf70b618ff80dd935c5d980ae1ac473958e837d2a7b9dbebf7bc716af579e0bb0a139bcb9e9068fddaeb1f895f8c48d81d4425fc58dd03bd7617dd6536d188e807c7bf29541922d8f502", 0x73}, {&(0x7f00000003c0)="aaa8ebb3c34f8cce67bc216a8f1d7608546811534178c3896e6dd123aa1c4a2c396be372082ce0d4c7bd242f7600bcfec6b425e8b31b8d67bf964488d7a78678b9dca1c6c3a163cc5e5a772bcaca58842657196a23d68778f0afdc052d2ae84cbdc0bab87832349708d0d53deba906731b0826e1c1e7932474827cd5ceeddc03e9ddd7499d58a2acf5589f834086cd4a039235c7ab77a9fb6cc130181e34727261c384cba9179e16103bed74e69a18b70e1a121d87e8b20746c03aa2c142d5ed", 0xc0}, {&(0x7f0000000580)="2489c20f983bfbee64dcc16c6f139b674c5bcdcd5f305f5cc7511e1866ed53d7266f7961b5c8c882ab477b888095f9ce9d13f3c7f214be343f215d1c32a10b654d945bd4c1e595fdf522291f7e83bdbd5224", 0x52}, {&(0x7f0000000600)="97e8f3907f61395d755a7efba05b51406669b18e0d60a0e8f07dd4c924dfdd9072ce0e319b8119922ef208371b4ad35a9190d973f4b1c41869eb", 0x3a}, {&(0x7f0000000700)="2146a64ef34370f76c2593f5755f252d3bc4e6d7ae2acfd750c86b2094b880feac64316060def1eaab037f2b2edbe2f453cd183abbab677e324cdde0a4449bacfc7f", 0x42}, {&(0x7f0000000780)="0a694e92054cd3575f", 0x9}, {&(0x7f00000007c0)="19ffcda70496c72ac001acb11c2a417062ccfbeaadca28ee1ab3689853e4c32297d44195ca4447f166cc315c477e9f340dbab629216d5ac1ee9cd841379e7ead4e72d27f9c802d8571e79cd0e4cae1ed31d69b344bd8903a819f73704bbe", 0x5e}, {&(0x7f00000008c0)="f7e534a3d2fbd0e7bfaf63dbd503ac5b559f79f15a8e2c0bcbc5bc16a689f641c11583dfaf01ea56b23d316592976cf9e2a963449cae96c02c30c89a18ef2138ba933045250e01b7eb1a16facff7459fed7c6a86dcff43716fc0559f6826cfefae63705dd28d6d7579fc07c9a09ef0c43253a8d2d4eb217c02d70406c1acdf812cef858f55f2a7aac93350178ffd81bb8daf7e44820e05ab05ba816a073c0fc8ddab6634d433a6162ca3edc1", 0xac}], 0x8, &(0x7f0000000a00)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @rand_addr=0x64010100, @loopback}}}, @ip_retopts={{0x44, 0x0, 0x7, {[@lsrr={0x83, 0x17, 0x99, [@remote, @remote, @multicast1, @empty, @dev={0xac, 0x14, 0x14, 0xb}]}, @timestamp_addr={0x44, 0x1c, 0x22, 0x1, 0x2, [{@local, 0x6}, {@multicast2, 0x1}, {@multicast2, 0x800}]}]}}}], 0x68}, 0x4000) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'ipvlan0\x00', @multicast}) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e23}, 0x1c) listen(r3, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000480)={@in6={{0xa, 0x4e24, 0x80000001, @loopback, 0xb}}, 0x0, 0x0, 0x4, 0x0, "9ecf3315567f14d56a87d134cc409e2a652dbbf6c50480937c6fa85af81bc6fc54b71f03985ac33e31d612d976a6efcda8853b8a4430503621f06679995d916cb4361795dd7dbae51d07384b7c2e6949"}, 0xffae) syz_emit_ethernet(0x5e, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa0086dd6000400000280600fe880000000000e5ff00000000000101fe8000000000000000000000000000aa4e234e24", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="a0800000907800001312f79568c029e530c3899ae5d322348df70000"], 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c00020008000100", @ANYRES16=r1], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350064756d6d79300000000000000000000008000a00", @ANYRES32=r4], 0x3c}}, 0x8000) sendmsg$inet(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000680)="5c00000013006bcd9e3fe3dceb48aa31086b8703110000001fa1ff0000000000040014020d000a00000000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d00d00000000000000bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) socket$netlink(0x10, 0x3, 0x0) (async) openat$smackfs_relabel_self(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) socket(0x10, 0x803, 0x0) (async) sendmsg$inet(r0, &(0x7f0000000a80)={&(0x7f0000000180)={0x2, 0x4e20, @remote}, 0x10, &(0x7f0000000980)=[{&(0x7f0000000340)="4f3d23663352ce35e290f3ba7eb875e66c8356e5f20516f3db52f0fce1b830f21fe59dbbae89a37cc1cf70b618ff80dd935c5d980ae1ac473958e837d2a7b9dbebf7bc716af579e0bb0a139bcb9e9068fddaeb1f895f8c48d81d4425fc58dd03bd7617dd6536d188e807c7bf29541922d8f502", 0x73}, {&(0x7f00000003c0)="aaa8ebb3c34f8cce67bc216a8f1d7608546811534178c3896e6dd123aa1c4a2c396be372082ce0d4c7bd242f7600bcfec6b425e8b31b8d67bf964488d7a78678b9dca1c6c3a163cc5e5a772bcaca58842657196a23d68778f0afdc052d2ae84cbdc0bab87832349708d0d53deba906731b0826e1c1e7932474827cd5ceeddc03e9ddd7499d58a2acf5589f834086cd4a039235c7ab77a9fb6cc130181e34727261c384cba9179e16103bed74e69a18b70e1a121d87e8b20746c03aa2c142d5ed", 0xc0}, {&(0x7f0000000580)="2489c20f983bfbee64dcc16c6f139b674c5bcdcd5f305f5cc7511e1866ed53d7266f7961b5c8c882ab477b888095f9ce9d13f3c7f214be343f215d1c32a10b654d945bd4c1e595fdf522291f7e83bdbd5224", 0x52}, {&(0x7f0000000600)="97e8f3907f61395d755a7efba05b51406669b18e0d60a0e8f07dd4c924dfdd9072ce0e319b8119922ef208371b4ad35a9190d973f4b1c41869eb", 0x3a}, {&(0x7f0000000700)="2146a64ef34370f76c2593f5755f252d3bc4e6d7ae2acfd750c86b2094b880feac64316060def1eaab037f2b2edbe2f453cd183abbab677e324cdde0a4449bacfc7f", 0x42}, {&(0x7f0000000780)="0a694e92054cd3575f", 0x9}, {&(0x7f00000007c0)="19ffcda70496c72ac001acb11c2a417062ccfbeaadca28ee1ab3689853e4c32297d44195ca4447f166cc315c477e9f340dbab629216d5ac1ee9cd841379e7ead4e72d27f9c802d8571e79cd0e4cae1ed31d69b344bd8903a819f73704bbe", 0x5e}, {&(0x7f00000008c0)="f7e534a3d2fbd0e7bfaf63dbd503ac5b559f79f15a8e2c0bcbc5bc16a689f641c11583dfaf01ea56b23d316592976cf9e2a963449cae96c02c30c89a18ef2138ba933045250e01b7eb1a16facff7459fed7c6a86dcff43716fc0559f6826cfefae63705dd28d6d7579fc07c9a09ef0c43253a8d2d4eb217c02d70406c1acdf812cef858f55f2a7aac93350178ffd81bb8daf7e44820e05ab05ba816a073c0fc8ddab6634d433a6162ca3edc1", 0xac}], 0x8, &(0x7f0000000a00)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @rand_addr=0x64010100, @loopback}}}, @ip_retopts={{0x44, 0x0, 0x7, {[@lsrr={0x83, 0x17, 0x99, [@remote, @remote, @multicast1, @empty, @dev={0xac, 0x14, 0x14, 0xb}]}, @timestamp_addr={0x44, 0x1c, 0x22, 0x1, 0x2, [{@local, 0x6}, {@multicast2, 0x1}, {@multicast2, 0x800}]}]}}}], 0x68}, 0x4000) (async) socket$kcm(0x2, 0xa, 0x2) (async) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'ipvlan0\x00', @multicast}) (async) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e23}, 0x1c) (async) listen(r3, 0x0) (async) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000480)={@in6={{0xa, 0x4e24, 0x80000001, @loopback, 0xb}}, 0x0, 0x0, 0x4, 0x0, "9ecf3315567f14d56a87d134cc409e2a652dbbf6c50480937c6fa85af81bc6fc54b71f03985ac33e31d612d976a6efcda8853b8a4430503621f06679995d916cb4361795dd7dbae51d07384b7c2e6949"}, 0xffae) (async) syz_emit_ethernet(0x5e, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa0086dd6000400000280600fe880000000000e5ff00000000000101fe8000000000000000000000000000aa4e234e24", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="a0800000907800001312f79568c029e530c3899ae5d322348df70000"], 0x0) (async) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c00020008000100", @ANYRES16=r1], 0x3c}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350064756d6d79300000000000000000000008000a00", @ANYRES32=r4], 0x3c}}, 0x8000) (async) sendmsg$inet(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000680)="5c00000013006bcd9e3fe3dceb48aa31086b8703110000001fa1ff0000000000040014020d000a00000000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d00d00000000000000bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) (async) 56.857992933s ago: executing program 1 (id=1048): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r2, &(0x7f0000000100)="f257a8ea7bc273dfaeab96850806", 0x2a, 0x0, &(0x7f0000000200)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @link_local}, 0x14) getsockopt$ARPT_SO_GET_ENTRIES(r1, 0x0, 0x61, &(0x7f0000001040)=ANY=[@ANYBLOB='filter'], &(0x7f0000000080)=0x28) r4 = signalfd4(r0, &(0x7f0000000080)={[0x6]}, 0x8, 0x0) syz_emit_ethernet(0x19e, &(0x7f00000000c0)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x168, 0x3a, 0xff, @local, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, [{0x3, 0x9, "bd3e6d4706598080a8030037ffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34116d42ca0a5c15b37adac15084dbaf736b41e5af0302"}, {0x0, 0x1, "000000050000000026000400"}, {0x3, 0x20, "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"}]}}}}}}, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) r6 = fanotify_init(0x20, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000002b80)={0x6, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000470001000800000095"], &(0x7f0000001a40)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) r7 = openat$incfs(r4, &(0x7f0000000280)='.pending_reads\x00', 0x1, 0x16e) ioctl$sock_inet6_SIOCDIFADDR(r7, 0x8936, &(0x7f00000002c0)={@rand_addr=' \x01\x00', 0x6b, r3}) fanotify_mark(r6, 0x221, 0x1010, 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r8 = socket$packet(0x11, 0x3, 0x300) bind$packet(r8, &(0x7f0000000500)={0x11, 0x3, 0x2}, 0x14) sendto$packet(r8, &(0x7f0000000780)="f4c28e4077a8e6d7b1993b7ecc0ac0ce36303b719b9985b7426dba4bf0bca1d3cc1374833e2c7c9b42ccd4c59a259f0afc20b2a24848a7ea7fcdbd82f3cebe7afae4ae56d00514ac086d0fd6888c76b8ae0793bc70ccfc9e594a99e43f308dff171b5c34665546", 0x67, 0x20004000, 0x0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x0) r9 = dup(r5) socket$unix(0x1, 0x5, 0x0) write$UHID_INPUT(r9, &(0x7f0000002100)={0xb, {"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", 0x1000}}, 0x1006) 56.197277554s ago: executing program 1 (id=1049): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000a40)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a88000000060a010400000000000000000a0000010900010073797a31000000005c000480340001800c0001007061796c6f6164002400028008000140f5000009080003400000004f08000440000000370800024000000002240001800b0001007470726f7879000014000280080002400000000c080001400100000a0900020073797a32"], 0xc4}, 0x1, 0x0, 0x0, 0x40}, 0x24000840) 56.196260227s ago: executing program 7 (id=1050): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="5800000068000104000000000000000000000000000000000800010003010000060003000100000014000200010000000100000002000000010000001c000c80"], 0x58}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff) 51.18037222s ago: executing program 7 (id=1051): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000064000000000000000079100800000000007b0ae0ff0000000095"], &(0x7f0000000100)='GPL\x00', 0x4}, 0x94) 0s ago: executing program 36 (id=1049): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000a40)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a88000000060a010400000000000000000a0000010900010073797a31000000005c000480340001800c0001007061796c6f6164002400028008000140f5000009080003400000004f08000440000000370800024000000002240001800b0001007470726f7879000014000280080002400000000c080001400100000a0900020073797a32"], 0xc4}, 0x1, 0x0, 0x0, 0x40}, 0x24000840) kernel console output (not intermixed with test programs): f+0x160/0x7fc [ 66.068356][ T6309] allocate_hook_entries_size+0x50/0xb8 [ 66.068374][ T6309] __nf_hook_entries_try_shrink+0x10c/0x2b4 [ 66.068391][ T6309] nf_hook_entries_delete_raw+0x108/0x1bc [ 66.068408][ T6309] nf_nat_unregister_fn+0x1c0/0x348 [ 66.068422][ T6309] nf_nat_ipv4_unregister_fn+0x54/0x70 [ 66.068435][ T6309] __nf_tables_unregister_hook+0x160/0x1dc [ 66.068451][ T6309] nf_tables_abort+0x1bf8/0x31b0 [ 66.068464][ T6309] nfnetlink_rcv+0x106c/0x16ec [ 66.068477][ T6309] netlink_unicast+0x600/0x7f8 [ 66.068496][ T6309] netlink_sendmsg+0x648/0x948 [ 66.068511][ T6309] __sock_sendmsg+0xc8/0x17c [ 66.068527][ T6309] ____sys_sendmsg+0x3d0/0x6c8 [ 66.068542][ T6309] ___sys_sendmsg+0x198/0x224 [ 66.068557][ T6309] __sys_sendmsg+0x158/0x204 [ 66.068572][ T6309] __arm64_sys_sendmsg+0x88/0x9c [ 66.068587][ T6309] invoke_syscall+0x98/0x244 [ 66.068605][ T6309] el0_svc_common+0x19c/0x23c [ 66.068621][ T6309] do_el0_svc+0x4c/0x5c [ 66.068637][ T6309] el0_svc+0x64/0x260 [ 66.068654][ T6309] el0t_64_sync_handler+0x44/0x104 [ 66.068670][ T6309] el0t_64_sync+0x198/0x19c [ 66.594721][ T6318] loop1: detected capacity change from 0 to 1024 [ 66.607520][ T6318] EXT4-fs: Ignoring removed orlov option [ 66.637020][ T6318] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 67.697255][ T6329] netlink: 12 bytes leftover after parsing attributes in process `syz.2.334'. [ 69.224100][ T4717] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.913455][ T4711] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.150329][ T6356] loop2: detected capacity change from 0 to 256 [ 72.092084][ T6379] netlink: 'syz.1.347': attribute type 2 has an invalid length. [ 72.092107][ T6379] netlink: 'syz.1.347': attribute type 2 has an invalid length. [ 72.092122][ T6379] netlink: 64 bytes leftover after parsing attributes in process `syz.1.347'. [ 72.153298][ T4726] Bluetooth: hci1: unexpected event for opcode 0x2040 [ 72.183968][ T4721] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 72.185457][ T4721] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 72.186166][ T4721] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 72.187576][ T4721] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 72.189887][ T4721] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 72.377198][ T6387] ip_tables: iptables: counters copy to user failed while replacing table [ 72.567818][ T1215] bridge_slave_1: left allmulticast mode [ 72.567851][ T1215] bridge_slave_1: left promiscuous mode [ 72.568025][ T1215] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.577676][ T1215] bridge_slave_0: left allmulticast mode [ 72.577698][ T1215] bridge_slave_0: left promiscuous mode [ 72.577856][ T1215] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.110058][ T6406] netlink: 'syz.1.351': attribute type 10 has an invalid length. [ 73.156692][ T1215] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 73.194378][ T1215] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 73.236746][ T1215] bond0 (unregistering): Released all slaves [ 74.395062][ T4726] Bluetooth: hci3: command tx timeout [ 75.208130][ T6400] loop1: detected capacity change from 0 to 4096 [ 75.449689][ T6400] ext2: block size(16384) > page size(4096) not supported by filesystem [ 75.449714][ T6400] EXT4-fs (loop1): bad block size 16384 [ 75.999994][ T4402] 8021q: adding VLAN 0 to HW filter on device eth4 [ 76.581986][ T4726] Bluetooth: hci3: command tx timeout [ 76.733897][ T6460] binder: 6452:6460 BC_CLEAR_DEATH_NOTIFICATION death notification not active [ 76.733930][ T6460] binder: 6452:6460 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 76.733950][ T6460] binder: 6460 RLIMIT_NICE not set [ 76.734050][ T6460] binder: 6452:6460 ioctl c0306201 20000480 returned -14 [ 76.906405][ T6467] ip_tables: iptables: counters copy to user failed while replacing table [ 77.233729][ T4402] 8021q: adding VLAN 0 to HW filter on device eth6 [ 77.269340][ T6481] ip_tables: iptables: counters copy to user failed while replacing table [ 77.269780][ T1215] hsr_slave_0: left promiscuous mode [ 77.271815][ T6481] FAULT_INJECTION: forcing a failure. [ 77.271815][ T6481] name failslab, interval 1, probability 0, space 0, times 0 [ 77.271838][ T6481] CPU: 0 UID: 0 PID: 6481 Comm: syz.3.363 Not tainted syzkaller #0 PREEMPT [ 77.271850][ T6481] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 77.271857][ T6481] Call trace: [ 77.271861][ T6481] show_stack+0x2c/0x3c (C) [ 77.271883][ T6481] __dump_stack+0x30/0x40 [ 77.271897][ T6481] dump_stack_lvl+0xd8/0x12c [ 77.271911][ T6481] dump_stack+0x1c/0x28 [ 77.271924][ T6481] should_fail_ex+0x41c/0x590 [ 77.271940][ T6481] should_failslab+0xc4/0x120 [ 77.271955][ T6481] __kmalloc_noprof+0x108/0x6c8 [ 77.271967][ T6481] metadata_dst_alloc+0x34/0xa4 [ 77.271983][ T6481] ip_tun_rx_dst+0xe0/0x408 [ 77.271998][ T6481] __ipgre_rcv+0x2c8/0x4c0 [ 77.272012][ T6481] gre_rcv+0x2b4/0x4b8 [ 77.272026][ T6481] gre_rcv+0x228/0x4b0 [ 77.272039][ T6481] ip_protocol_deliver_rcu+0x20c/0x468 [ 77.272052][ T6481] ip_local_deliver_finish+0x320/0x65c [ 77.272064][ T6481] NF_HOOK+0x308/0x398 [ 77.272076][ T6481] ip_local_deliver+0x128/0x188 [ 77.272087][ T6481] ip_rcv_finish+0x20c/0x230 [ 77.272099][ T6481] NF_HOOK+0x308/0x398 [ 77.272111][ T6481] ip_rcv+0x7c/0x9c [ 77.272122][ T6481] __netif_receive_skb_one_core+0xc8/0x110 [ 77.272135][ T6481] __netif_receive_skb+0x34/0x128 [ 77.272150][ T6481] netif_receive_skb+0x1e0/0xad0 [ 77.272162][ T6481] tun_rx_batched+0x180/0x620 [ 77.272176][ T6481] tun_get_user+0x2330/0x36d0 [ 77.272188][ T6481] tun_chr_write_iter+0xfc/0x168 [ 77.272200][ T6481] vfs_write+0x51c/0xa0c [ 77.272215][ T6481] ksys_write+0x12c/0x228 [ 77.272229][ T6481] __arm64_sys_write+0x84/0x98 [ 77.272243][ T6481] invoke_syscall+0x98/0x244 [ 77.272257][ T6481] el0_svc_common+0x19c/0x23c [ 77.272271][ T6481] do_el0_svc+0x4c/0x5c [ 77.272284][ T6481] el0_svc+0x64/0x260 [ 77.272299][ T6481] el0t_64_sync_handler+0x44/0x104 [ 77.272312][ T6481] el0t_64_sync+0x198/0x19c [ 77.272548][ T1215] hsr_slave_1: left promiscuous mode [ 77.273408][ T1215] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 77.274455][ T1215] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 77.431764][ T6465] Injecting memory failure for pfn 0x121248 at process virtual address 0x20000000 [ 77.466883][ T6465] Memory failure: 0x121248: Sending SIGBUS to syz.5.359:6465 due to hardware memory corruption [ 77.467023][ T6465] Memory failure: 0x121248: recovery action for dirty LRU page: Recovered [ 77.467047][ T6465] Injecting memory failure for pfn 0x138857 at process virtual address 0x20001000 [ 77.467368][ T6465] Memory failure: 0x138857: Sending SIGBUS to syz.5.359:6465 due to hardware memory corruption [ 77.467414][ T6465] Memory failure: 0x138857: recovery action for dirty LRU page: Recovered [ 77.467430][ T6465] Injecting memory failure for pfn 0x138856 at process virtual address 0x20002000 [ 77.467512][ T6465] Memory failure: 0x138856: Sending SIGBUS to syz.5.359:6465 due to hardware memory corruption [ 77.467554][ T6465] Memory failure: 0x138856: recovery action for dirty LRU page: Recovered [ 77.467595][ T6465] Injecting memory failure for pfn 0x138855 at process virtual address 0x20003000 [ 77.508461][ T6465] Memory failure: 0x138855: Sending SIGBUS to syz.5.359:6465 due to hardware memory corruption [ 77.508538][ T6465] Memory failure: 0x138855: recovery action for dirty LRU page: Recovered [ 77.508561][ T6465] Injecting memory failure for pfn 0x138854 at process virtual address 0x20004000 [ 77.509971][ T6465] Memory failure: 0x138854: Sending SIGBUS to syz.5.359:6465 due to hardware memory corruption [ 77.510020][ T6465] Memory failure: 0x138854: recovery action for dirty LRU page: Recovered [ 77.510039][ T6465] Injecting memory failure for pfn 0x138853 at process virtual address 0x20005000 [ 77.510123][ T6465] Memory failure: 0x138853: Sending SIGBUS to syz.5.359:6465 due to hardware memory corruption [ 77.510166][ T6465] Memory failure: 0x138853: recovery action for dirty LRU page: Recovered [ 77.510182][ T6465] Injecting memory failure for pfn 0x138852 at process virtual address 0x20006000 [ 77.510259][ T6465] Memory failure: 0x138852: Sending SIGBUS to syz.5.359:6465 due to hardware memory corruption [ 77.510301][ T6465] Memory failure: 0x138852: recovery action for dirty LRU page: Recovered [ 77.510317][ T6465] Injecting memory failure for pfn 0x138851 at process virtual address 0x20007000 [ 77.510393][ T6465] Memory failure: 0x138851: Sending SIGBUS to syz.5.359:6465 due to hardware memory corruption [ 77.510442][ T6465] Memory failure: 0x138851: recovery action for dirty LRU page: Recovered [ 77.510457][ T6465] Injecting memory failure for pfn 0x138850 at process virtual address 0x20008000 [ 77.510660][ T6465] Memory failure: 0x138850: Sending SIGBUS to syz.5.359:6465 due to hardware memory corruption [ 77.510702][ T6465] Memory failure: 0x138850: recovery action for dirty LRU page: Recovered [ 77.510718][ T6465] Injecting memory failure for pfn 0x13b837 at process virtual address 0x20009000 [ 77.510801][ T6465] Memory failure: 0x13b837: Sending SIGBUS to syz.5.359:6465 due to hardware memory corruption [ 77.510842][ T6465] Memory failure: 0x13b837: recovery action for dirty LRU page: Recovered [ 77.510857][ T6465] Injecting memory failure for pfn 0x13b836 at process virtual address 0x2000a000 [ 77.510932][ T6465] Memory failure: 0x13b836: Sending SIGBUS to syz.5.359:6465 due to hardware memory corruption [ 77.510972][ T6465] Memory failure: 0x13b836: recovery action for dirty LRU page: Recovered [ 77.510987][ T6465] Injecting memory failure for pfn 0x13b835 at process virtual address 0x2000b000 [ 77.511061][ T6465] Memory failure: 0x13b835: Sending SIGBUS to syz.5.359:6465 due to hardware memory corruption [ 77.511103][ T6465] Memory failure: 0x13b835: recovery action for dirty LRU page: Recovered [ 77.511118][ T6465] Injecting memory failure for pfn 0x13b834 at process virtual address 0x2000c000 [ 77.511192][ T6465] Memory failure: 0x13b834: Sending SIGBUS to syz.5.359:6465 due to hardware memory corruption [ 77.511232][ T6465] Memory failure: 0x13b834: recovery action for dirty LRU page: Recovered [ 77.511247][ T6465] Injecting memory failure for pfn 0x13b833 at process virtual address 0x2000d000 [ 77.511321][ T6465] Memory failure: 0x13b833: Sending SIGBUS to syz.5.359:6465 due to hardware memory corruption [ 77.511362][ T6465] Memory failure: 0x13b833: recovery action for dirty LRU page: Recovered [ 77.511377][ T6465] Injecting memory failure for pfn 0x13b832 at process virtual address 0x2000e000 [ 77.511451][ T6465] Memory failure: 0x13b832: Sending SIGBUS to syz.5.359:6465 due to hardware memory corruption [ 77.511514][ T6465] Memory failure: 0x13b832: recovery action for dirty LRU page: Recovered [ 77.511532][ T6465] Injecting memory failure for pfn 0x13b831 at process virtual address 0x2000f000 [ 77.511606][ T6465] Memory failure: 0x13b831: Sending SIGBUS to syz.5.359:6465 due to hardware memory corruption [ 77.511647][ T6465] Memory failure: 0x13b831: recovery action for dirty LRU page: Recovered [ 77.511662][ T6465] Injecting memory failure for pfn 0x13b830 at process virtual address 0x20010000 [ 77.866319][ T6465] Memory failure: 0x13b830: Sending SIGBUS to syz.5.359:6465 due to hardware memory corruption [ 77.866393][ T6465] Memory failure: 0x13b830: recovery action for dirty LRU page: Recovered [ 78.343874][ T1215] team0 (unregistering): Port device team_slave_1 removed [ 78.385947][ T1215] team0 (unregistering): Port device team_slave_0 removed [ 78.537267][ T6505] netlink: 8 bytes leftover after parsing attributes in process `syz.5.371'. [ 78.537300][ T6505] netlink: 20 bytes leftover after parsing attributes in process `syz.5.371'. [ 78.805770][ T6512] FAULT_INJECTION: forcing a failure. [ 78.805770][ T6512] name failslab, interval 1, probability 0, space 0, times 0 [ 78.805800][ T6512] CPU: 1 UID: 0 PID: 6512 Comm: syz.2.374 Not tainted syzkaller #0 PREEMPT [ 78.805813][ T6512] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 78.805821][ T6512] Call trace: [ 78.805826][ T6512] show_stack+0x2c/0x3c (C) [ 78.805849][ T6512] __dump_stack+0x30/0x40 [ 78.805866][ T6512] dump_stack_lvl+0xd8/0x12c [ 78.805882][ T6512] dump_stack+0x1c/0x28 [ 78.805898][ T6512] should_fail_ex+0x41c/0x590 [ 78.805915][ T6512] should_failslab+0xc4/0x120 [ 78.805933][ T6512] kmem_cache_alloc_lru_noprof+0x98/0x5d8 [ 78.805946][ T6512] sock_alloc_inode+0x30/0x180 [ 78.805963][ T6512] alloc_inode+0x68/0x198 [ 78.805980][ T6512] sock_alloc+0x4c/0x204 [ 78.805993][ T6512] do_accept+0x108/0x438 [ 78.806007][ T6512] __sys_accept4+0x11c/0x1f8 [ 78.806021][ T6512] __arm64_sys_accept+0x88/0xa0 [ 78.806036][ T6512] invoke_syscall+0x98/0x244 [ 78.806052][ T6512] el0_svc_common+0x19c/0x23c [ 78.806068][ T6512] do_el0_svc+0x4c/0x5c [ 78.806084][ T6512] el0_svc+0x64/0x260 [ 78.806100][ T6512] el0t_64_sync_handler+0x44/0x104 [ 78.806116][ T6512] el0t_64_sync+0x198/0x19c [ 78.820820][ T4726] Bluetooth: hci3: command tx timeout [ 79.260896][ T6518] netlink: 'syz.1.376': attribute type 4 has an invalid length. [ 79.383512][ T6382] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.383678][ T6382] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.383890][ T6382] bridge_slave_0: entered allmulticast mode [ 79.386495][ T6382] bridge_slave_0: entered promiscuous mode [ 79.389408][ T6382] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.389538][ T6382] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.389747][ T6382] bridge_slave_1: entered allmulticast mode [ 79.398669][ T6382] bridge_slave_1: entered promiscuous mode [ 79.491024][ T6382] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.558369][ T6382] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.571269][ T6536] netlink: 12 bytes leftover after parsing attributes in process `syz.1.379'. [ 79.571293][ T6536] block nbd0: Unsupported socket: should be TCP or UNIX. [ 79.631694][ T6537] tmpfs: Unknown parameter 'usrquota˜imĘųĘ2‘hardlimit' [ 79.661378][ T1502] kernel read not supported for file /120/task (pid: 1502 comm: kworker/1:4) [ 79.719197][ T6382] team0: Port device team_slave_0 added [ 79.744410][ T6382] team0: Port device team_slave_1 added [ 79.853491][ T6539] loop1: detected capacity change from 0 to 8 [ 80.194171][ T6382] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.194188][ T6382] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.194207][ T6382] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.210261][ T6382] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.210276][ T6382] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.210292][ T6382] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.524112][ T6567] xt_hashlimit: size too large, truncated to 1048576 [ 80.673078][ T6573] netlink: 12 bytes leftover after parsing attributes in process `syz.3.387'. [ 80.741455][ T6575] netlink: 8 bytes leftover after parsing attributes in process `syz.3.387'. [ 80.741482][ T6575] netlink: 4 bytes leftover after parsing attributes in process `syz.3.387'. [ 80.827128][ T6579] netlink: 72 bytes leftover after parsing attributes in process `syz.5.389'. [ 80.869062][ T4402] 8021q: adding VLAN 0 to HW filter on device eth5 [ 80.928256][ T6382] hsr_slave_0: entered promiscuous mode [ 80.935173][ T6382] hsr_slave_1: entered promiscuous mode [ 80.936127][ T6382] debugfs: 'hsr0' already exists in 'hsr' [ 80.936150][ T6382] Cannot create hsr debugfs directory [ 80.945434][ T6577] veth0_to_bond: left allmulticast mode [ 80.945461][ T6577] veth0_to_bond: left promiscuous mode [ 80.945683][ T6577] bridge1: port 1(veth0_to_bond) entered disabled state [ 81.001240][ T6577] bridge2: port 1(veth0_to_bond) entered blocking state [ 81.001295][ T6577] bridge2: port 1(veth0_to_bond) entered disabled state [ 81.001507][ T6577] veth0_to_bond: entered allmulticast mode [ 81.002493][ T6582] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 81.007098][ T6577] veth0_to_bond: entered promiscuous mode [ 81.024070][ T6582] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 81.042079][ T4726] Bluetooth: hci3: command tx timeout [ 81.346047][ T6595] loop2: detected capacity change from 0 to 1024 [ 81.486117][ T6595] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 81.517567][ T6604] loop3: detected capacity change from 0 to 256 [ 81.565524][ T6604] FAT-fs (loop3): Directory bread(block 1285) failed [ 81.565563][ T6604] FAT-fs (loop3): Directory bread(block 1286) failed [ 81.565587][ T6604] FAT-fs (loop3): Directory bread(block 1287) failed [ 81.565769][ T6604] FAT-fs (loop3): Directory bread(block 1288) failed [ 81.573546][ T6595] overlayfs: failed to resolve './bus': -2 [ 81.921113][ T4720] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.011246][ T6382] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 82.035326][ T6382] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 82.036123][ T6382] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 82.058042][ T6382] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 82.060360][ T6382] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 82.079804][ T6382] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 82.080552][ T6382] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 82.100481][ T6382] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 82.372759][ T6382] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.459621][ T6382] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.491963][ T6105] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.492018][ T6105] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.493495][ T6105] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.493607][ T6105] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.569998][ T6625] dyndbg: expected <4096 bytes into control [ 83.153203][ T6644] i2c i2c-0: delete_device: Extra parameters [ 83.365120][ T6650] binder: 6648:6650 tried to acquire reference to desc 0, got 1 instead [ 83.365601][ T6650] binder_alloc: 6648: binder_alloc_buf size 65616 failed, no address space [ 83.365616][ T6650] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288) [ 83.365643][ T6650] binder: cannot allocate buffer: no space left [ 83.365693][ T6650] binder: 6648:6650 transaction call to 6648:0 failed 22/29201/-28, code 0 size 72-24 line 3408 [ 83.385777][ T4805] binder: undelivered TRANSACTION_ERROR: 29201 [ 83.408144][ T4402] 8021q: adding VLAN 0 to HW filter on device eth7 [ 83.880802][ T6382] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.080359][ T6382] veth0_vlan: entered promiscuous mode [ 85.135285][ T6382] veth1_vlan: entered promiscuous mode [ 85.271263][ T6382] veth0_macvtap: entered promiscuous mode [ 85.311240][ T6382] veth1_macvtap: entered promiscuous mode [ 85.396454][ T6382] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.426201][ T6696] loop5: detected capacity change from 0 to 128 [ 85.458105][ T6696] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem [ 85.461683][ T6382] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.504000][ T6696] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 85.552906][ T14] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.553339][ T14] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.553374][ T14] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.553405][ T14] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.562382][ T6707] capability: warning: `syz.2.413' uses 32-bit capabilities (legacy support in use) [ 86.804755][ T6709] i2c i2c-0: delete_device: Extra parameters [ 86.960373][ T6681] can0: slcan on ttyS3. [ 87.000892][ T5259] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 87.093149][ T6689] can0 (unregistered): slcan off ttyS3. [ 87.300083][ T6110] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.300103][ T6110] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.392959][ T14] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.392979][ T14] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.462302][ T6716] loop3: detected capacity change from 0 to 1024 [ 87.464259][ T6716] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (38034!=20869) [ 87.467607][ T6716] JBD2: no valid journal superblock found [ 87.475782][ T6716] EXT4-fs (loop3): Could not load journal inode [ 88.752990][ T6724] loop5: detected capacity change from 0 to 512 [ 88.753899][ T6724] EXT4-fs: Ignoring removed i_version option [ 88.753917][ T6724] EXT4-fs: Ignoring removed bh option [ 88.819565][ T6724] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 89.321107][ T6734] loop6: detected capacity change from 0 to 1024 [ 89.424965][ T6734] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 89.428675][ T6736] loop1: detected capacity change from 0 to 1024 [ 89.540697][ T6736] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 89.593955][ T6734] overlayfs: failed to resolve './bus': -2 [ 89.640636][ T4711] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 89.755184][ T5259] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.834275][ T6382] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.887987][ T6748] i2c i2c-0: delete_device: Extra parameters [ 90.084916][ T6750] loop3: detected capacity change from 0 to 256 [ 90.360013][ T6767] loop1: detected capacity change from 0 to 512 [ 90.501743][ T6771] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 90.502485][ T6771] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 90.628820][ T6773] loop2: detected capacity change from 0 to 2048 [ 90.671184][ T6772] loop6: detected capacity change from 0 to 8192 [ 90.681742][ T6772] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 90.713356][ T6773] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 92.004993][ T6778] input: syz0 as /devices/virtual/input/input3 [ 92.046182][ T6777] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 92.290693][ T6786] netlink: 60 bytes leftover after parsing attributes in process `syz.6.441'. [ 92.290767][ T6786] netlink: 8 bytes leftover after parsing attributes in process `syz.6.441'. [ 92.538606][ T6787] warning: `syz.5.440' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 93.248893][ T6790] bridge0: adding interface bridge0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 93.720863][ T4720] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.003901][ T6796] loop6: detected capacity change from 0 to 256 [ 98.172063][ T6836] netlink: 'syz.1.451': attribute type 10 has an invalid length. [ 98.741239][ T6840] loop1: detected capacity change from 0 to 4096 [ 98.812512][ T6840] ext2: block size(16384) > page size(4096) not supported by filesystem [ 98.812539][ T6840] EXT4-fs (loop1): bad block size 16384 [ 99.085996][ T6850] FAULT_INJECTION: forcing a failure. [ 99.085996][ T6850] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 99.086023][ T6850] CPU: 0 UID: 0 PID: 6850 Comm: syz.5.454 Not tainted syzkaller #0 PREEMPT [ 99.086035][ T6850] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 99.086042][ T6850] Call trace: [ 99.086047][ T6850] show_stack+0x2c/0x3c (C) [ 99.086068][ T6850] __dump_stack+0x30/0x40 [ 99.086082][ T6850] dump_stack_lvl+0xd8/0x12c [ 99.086096][ T6850] dump_stack+0x1c/0x28 [ 99.086110][ T6850] should_fail_ex+0x41c/0x590 [ 99.086125][ T6850] should_fail+0x14/0x24 [ 99.086142][ T6850] should_fail_usercopy+0x20/0x30 [ 99.086157][ T6850] _copy_from_iter+0x188/0x1064 [ 99.086170][ T6850] file_tty_write+0x370/0x66c [ 99.086182][ T6850] tty_write+0x44/0x54 [ 99.086193][ T6850] vfs_write+0x51c/0xa0c [ 99.086209][ T6850] ksys_write+0x12c/0x228 [ 99.086223][ T6850] __arm64_sys_write+0x84/0x98 [ 99.086237][ T6850] invoke_syscall+0x98/0x244 [ 99.086251][ T6850] el0_svc_common+0x19c/0x23c [ 99.086265][ T6850] do_el0_svc+0x4c/0x5c [ 99.086278][ T6850] el0_svc+0x64/0x260 [ 99.086293][ T6850] el0t_64_sync_handler+0x44/0x104 [ 99.086306][ T6850] el0t_64_sync+0x198/0x19c [ 99.753251][ T6859] loop1: detected capacity change from 0 to 512 [ 100.205870][ T6859] EXT4-fs error (device loop1): ext4_orphan_get:1403: inode #15: comm syz.1.456: inode has both inline data and extents flags [ 100.205902][ T6859] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 100.218039][ T6859] EXT4-fs error (device loop1): ext4_orphan_get:1408: comm syz.1.456: couldn't read orphan inode 15 (err -117) [ 100.218065][ T6859] loop1: lost filesystem error report for type 5 error -117 [ 100.243508][ T6859] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 100.498377][ T6859] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 101.687598][ T6859] EXT4-fs error (device loop1): __ext4_remount:6872: comm syz.1.456: Abort forced by user [ 101.698187][ T6859] EXT4-fs (loop1): Remounting filesystem read-only [ 101.698215][ T6859] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000. [ 103.320070][ T4711] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.256362][ T6900] SET target dimension over the limit! [ 104.656905][ T6909] netlink: 12 bytes leftover after parsing attributes in process `syz.5.469'. [ 104.656932][ T6909] block nbd0: Unsupported socket: should be TCP or UNIX. [ 105.045349][ T4726] Bluetooth: hci1: unexpected event for opcode 0x2003 [ 105.266918][ T6916] fuse: Bad value for 'group_id' [ 105.266935][ T6916] fuse: Bad value for 'group_id' [ 105.372986][ T6915] block nbd6: shutting down sockets [ 107.906466][ T6947] FAULT_INJECTION: forcing a failure. [ 107.906466][ T6947] name failslab, interval 1, probability 0, space 0, times 0 [ 107.906495][ T6947] CPU: 0 UID: 0 PID: 6947 Comm: syz.3.480 Not tainted syzkaller #0 PREEMPT [ 107.906508][ T6947] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 107.906516][ T6947] Call trace: [ 107.906521][ T6947] show_stack+0x2c/0x3c (C) [ 107.906546][ T6947] __dump_stack+0x30/0x40 [ 107.906562][ T6947] dump_stack_lvl+0xd8/0x12c [ 107.906578][ T6947] dump_stack+0x1c/0x28 [ 107.906594][ T6947] should_fail_ex+0x41c/0x590 [ 107.906612][ T6947] should_failslab+0xc4/0x120 [ 107.906630][ T6947] __kmalloc_cache_noprof+0x94/0x5fc [ 107.906644][ T6947] rand_initialize_disk+0x58/0xb8 [ 107.906661][ T6947] __alloc_disk_node+0x328/0x494 [ 107.906674][ T6947] __blk_alloc_disk+0xec/0x1a8 [ 107.906686][ T6947] dm_create+0x3ec/0xd94 [ 107.906702][ T6947] dev_create+0x108/0x258 [ 107.906715][ T6947] dm_ctl_ioctl+0x884/0xbbc [ 107.906737][ T6947] __arm64_sys_ioctl+0x154/0x1cc [ 107.906754][ T6947] invoke_syscall+0x98/0x244 [ 107.906771][ T6947] el0_svc_common+0x19c/0x23c [ 107.906787][ T6947] do_el0_svc+0x4c/0x5c [ 107.906803][ T6947] el0_svc+0x64/0x260 [ 107.906819][ T6947] el0t_64_sync_handler+0x44/0x104 [ 107.906835][ T6947] el0t_64_sync+0x198/0x19c [ 108.201555][ T6953] netlink: 96 bytes leftover after parsing attributes in process `syz.6.482'. [ 108.283007][ T6953] FAULT_INJECTION: forcing a failure. [ 108.283007][ T6953] name fail_futex, interval 1, probability 0, space 0, times 0 [ 108.283037][ T6953] CPU: 0 UID: 0 PID: 6953 Comm: syz.6.482 Not tainted syzkaller #0 PREEMPT [ 108.283050][ T6953] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 108.283058][ T6953] Call trace: [ 108.283063][ T6953] show_stack+0x2c/0x3c (C) [ 108.283086][ T6953] __dump_stack+0x30/0x40 [ 108.283103][ T6953] dump_stack_lvl+0xd8/0x12c [ 108.283119][ T6953] dump_stack+0x1c/0x28 [ 108.283135][ T6953] should_fail_ex+0x41c/0x590 [ 108.283153][ T6953] should_fail+0x14/0x24 [ 108.283169][ T6953] get_futex_key+0x1ec/0x12b0 [ 108.283185][ T6953] futex_wake+0x10c/0x594 [ 108.283200][ T6953] do_futex+0x2c4/0x378 [ 108.283216][ T6953] __arm64_sys_futex+0x2e4/0x418 [ 108.283231][ T6953] invoke_syscall+0x98/0x244 [ 108.283248][ T6953] el0_svc_common+0x19c/0x23c [ 108.283264][ T6953] do_el0_svc+0x4c/0x5c [ 108.283280][ T6953] el0_svc+0x64/0x260 [ 108.283296][ T6953] el0t_64_sync_handler+0x44/0x104 [ 108.283312][ T6953] el0t_64_sync+0x198/0x19c [ 108.359164][ T6954] netlink: 20 bytes leftover after parsing attributes in process `syz.1.478'. [ 108.529314][ T6961] netlink: 'syz.3.485': attribute type 1 has an invalid length. [ 108.568579][ T6963] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 108.869169][ T6961] bond3: entered promiscuous mode [ 108.869525][ T6961] 8021q: adding VLAN 0 to HW filter on device bond3 [ 109.001977][ T6965] 8021q: adding VLAN 0 to HW filter on device bond3 [ 109.002412][ T6965] bond3: (slave gre1): The slave device specified does not support setting the MAC address [ 109.002427][ T6965] bond3: (slave gre1): Setting fail_over_mac to active for active-backup mode [ 109.014307][ T6965] bond3: (slave gre1): Opening slave failed [ 109.125164][ T6976] netlink: 12 bytes leftover after parsing attributes in process `syz.2.487'. [ 109.519777][ T6985] loop1: detected capacity change from 0 to 4096 [ 109.592969][ T6985] ext2: block size(16384) > page size(4096) not supported by filesystem [ 109.592995][ T6985] EXT4-fs (loop1): bad block size 16384 [ 109.998196][ T6984] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 112.222920][ T7012] netlink: 20 bytes leftover after parsing attributes in process `syz.5.496'. [ 112.444926][ T7013] loop2: detected capacity change from 0 to 1024 [ 113.072613][ T7028] loop5: detected capacity change from 0 to 128 [ 113.887554][ T7028] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 115.276110][ T7055] FAULT_INJECTION: forcing a failure. [ 115.276110][ T7055] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 115.276137][ T7055] CPU: 0 UID: 0 PID: 7055 Comm: syz.2.501 Not tainted syzkaller #0 PREEMPT [ 115.276149][ T7055] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 115.276155][ T7055] Call trace: [ 115.276160][ T7055] show_stack+0x2c/0x3c (C) [ 115.276181][ T7055] __dump_stack+0x30/0x40 [ 115.276195][ T7055] dump_stack_lvl+0xd8/0x12c [ 115.276209][ T7055] dump_stack+0x1c/0x28 [ 115.276223][ T7055] should_fail_ex+0x41c/0x590 [ 115.276238][ T7055] should_fail+0x14/0x24 [ 115.276253][ T7055] should_fail_usercopy+0x20/0x30 [ 115.276267][ T7055] _copy_from_iter+0x188/0x1064 [ 115.276280][ T7055] kernfs_fop_write_iter+0x17c/0x3b8 [ 115.276295][ T7055] vfs_write+0x51c/0xa0c [ 115.276310][ T7055] ksys_write+0x12c/0x228 [ 115.276324][ T7055] __arm64_sys_write+0x84/0x98 [ 115.276338][ T7055] invoke_syscall+0x98/0x244 [ 115.276352][ T7055] el0_svc_common+0x19c/0x23c [ 115.276366][ T7055] do_el0_svc+0x4c/0x5c [ 115.276379][ T7055] el0_svc+0x64/0x260 [ 115.276393][ T7055] el0t_64_sync_handler+0x44/0x104 [ 115.276407][ T7055] el0t_64_sync+0x198/0x19c [ 115.451546][ T7058] netlink: 4 bytes leftover after parsing attributes in process `syz.1.503'. [ 115.642797][ T5259] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 115.922745][ T7068] netlink: 60 bytes leftover after parsing attributes in process `syz.6.507'. [ 115.922816][ T7068] netlink: 8 bytes leftover after parsing attributes in process `syz.6.507'. [ 117.416868][ T7074] netlink: 20 bytes leftover after parsing attributes in process `syz.2.508'. [ 118.102384][ T7089] loop6: detected capacity change from 0 to 2048 [ 118.215668][ T7089] loop6: detected capacity change from 0 to 256 [ 119.034109][ C1] sched: DL replenish lagged too much [ 121.126064][ T7115] loop3: detected capacity change from 0 to 512 [ 121.256975][ T7115] Quota error (device loop3): do_check_range: Getting dqdh_entries 1536 out of range 0-14 [ 121.257085][ T7115] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 121.257115][ T7115] EXT4-fs error (device loop3): ext4_acquire_dquot:7069: comm syz.3.519: Failed to acquire dquot type 1 [ 121.257133][ T7115] loop3: lost filesystem error report for type 5 error -117 [ 121.257804][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 121.257818][ C0] EXT4-fs (loop3): last error at time 117: ext4_acquire_dquot:7069 [ 121.307485][ T7115] EXT4-fs (loop3): 1 truncate cleaned up [ 121.309834][ T7115] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 121.594327][ T7115] Quota error (device loop3): do_check_range: Getting dqdh_entries 1536 out of range 0-14 [ 121.594520][ T7115] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 121.594556][ T7115] EXT4-fs error (device loop3): ext4_acquire_dquot:7069: comm syz.3.519: Failed to acquire dquot type 1 [ 121.834321][ T7126] i2c i2c-0: delete_device: Extra parameters [ 122.128260][ T4710] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 122.133344][ T7128] xt_hashlimit: size too large, truncated to 1048576 [ 122.413247][ T7133] netlink: 60 bytes leftover after parsing attributes in process `syz.3.525'. [ 122.413325][ T7133] netlink: 8 bytes leftover after parsing attributes in process `syz.3.525'. [ 123.033095][ T7140] loop1: detected capacity change from 0 to 256 [ 123.034532][ T7140] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 123.093211][ T7140] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 123.177683][ T7143] loop3: detected capacity change from 0 to 128 [ 123.203219][ T7143] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 123.274690][ T7143] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 123.345510][ T7143] FAULT_INJECTION: forcing a failure. [ 123.345510][ T7143] name failslab, interval 1, probability 0, space 0, times 0 [ 123.345537][ T7143] CPU: 0 UID: 0 PID: 7143 Comm: syz.3.528 Not tainted syzkaller #0 PREEMPT [ 123.345549][ T7143] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 123.345556][ T7143] Call trace: [ 123.345561][ T7143] show_stack+0x2c/0x3c (C) [ 123.345582][ T7143] __dump_stack+0x30/0x40 [ 123.345598][ T7143] dump_stack_lvl+0xd8/0x12c [ 123.345612][ T7143] dump_stack+0x1c/0x28 [ 123.345625][ T7143] should_fail_ex+0x41c/0x590 [ 123.345641][ T7143] should_failslab+0xc4/0x120 [ 123.345656][ T7143] kmem_cache_alloc_noprof+0x94/0x5d4 [ 123.345668][ T7143] __es_insert_extent+0x1f4/0xa9c [ 123.345682][ T7143] ext4_es_insert_extent+0x448/0xe84 [ 123.345696][ T7143] ext4_map_create_blocks+0x2bc/0x4a0 [ 123.345709][ T7143] ext4_map_blocks+0x520/0xc88 [ 123.345721][ T7143] ext4_getblk+0x174/0x6e8 [ 123.345737][ T7143] ext4_bread+0x3c/0x1a8 [ 123.345751][ T7143] ext4_append+0x238/0x470 [ 123.345764][ T7143] make_indexed_dir+0x424/0xf44 [ 123.345776][ T7143] __ext4_add_entry+0x1630/0x1788 [ 123.345789][ T7143] ext4_mkdir+0x488/0x9a8 [ 123.345801][ T7143] vfs_mkdir+0x2e4/0x46c [ 123.345814][ T7143] filename_mkdirat+0x228/0x3f4 [ 123.345827][ T7143] __arm64_sys_mkdirat+0x9c/0xc0 [ 123.345840][ T7143] invoke_syscall+0x98/0x244 [ 123.345854][ T7143] el0_svc_common+0x19c/0x23c [ 123.345868][ T7143] do_el0_svc+0x4c/0x5c [ 123.345881][ T7143] el0_svc+0x64/0x260 [ 123.345896][ T7143] el0t_64_sync_handler+0x44/0x104 [ 123.345910][ T7143] el0t_64_sync+0x198/0x19c [ 123.640307][ T4710] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 124.527278][ T7161] loop6: detected capacity change from 0 to 2048 [ 124.610138][ T7161] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 124.655792][ T7161] EXT4-fs error (device loop6): ext4_validate_block_bitmap:445: comm syz.6.536: bg 0: block 240: padding at end of block bitmap is not set [ 124.667161][ T7161] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 2 with error 28 [ 124.667192][ T7161] EXT4-fs (loop6): This should not happen!! Data will be lost [ 124.667192][ T7161] [ 124.667210][ T7161] EXT4-fs (loop6): Total free blocks count 0 [ 124.667224][ T7161] EXT4-fs (loop6): Free/Dirty block details [ 124.667242][ T7161] EXT4-fs (loop6): free_blocks=0 [ 124.667264][ T7161] EXT4-fs (loop6): dirty_blocks=16 [ 124.667276][ T7161] EXT4-fs (loop6): Block reservation details [ 124.667288][ T7161] EXT4-fs (loop6): i_reserved_data_blocks=1 [ 125.311449][ T7176] loop3: detected capacity change from 0 to 128 [ 125.495626][ T6382] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 127.429520][ T7194] loop5: detected capacity change from 0 to 512 [ 127.430548][ T7194] EXT4-fs: Ignoring removed oldalloc option [ 127.444306][ T7194] EXT4-fs (loop5): Test dummy encryption mode enabled [ 127.471283][ T7194] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 127.630701][ T5259] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.185815][ T7202] netlink: 'syz.1.545': attribute type 4 has an invalid length. [ 128.721915][ T7215] netlink: 12 bytes leftover after parsing attributes in process `syz.6.546'. [ 128.859666][ T7217] i2c i2c-0: delete_device: Extra parameters [ 129.419270][ T7224] loop5: detected capacity change from 0 to 512 [ 129.464891][ T7224] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 129.621229][ T7224] EXT4-fs: Remounting file system with no journal so ignoring journalled data option [ 129.621247][ T7224] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 129.662266][ T7224] EXT4-fs (loop5): changing journal_checksum during remount not supported; ignoring [ 129.663002][ T7224] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000. [ 130.014358][ T7232] SET target dimension over the limit! [ 130.095437][ T5259] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.424058][ T1595] ieee802154 phy0 wpan0: encryption failed: -22 [ 130.432092][ T1595] ieee802154 phy1 wpan1: encryption failed: -22 [ 130.475916][ T7237] loop1: detected capacity change from 0 to 256 [ 130.505608][ T7237] FAT-fs (loop1): Directory bread(block 1285) failed [ 130.505655][ T7237] FAT-fs (loop1): Directory bread(block 1286) failed [ 130.505676][ T7237] FAT-fs (loop1): Directory bread(block 1287) failed [ 130.505833][ T7237] FAT-fs (loop1): Directory bread(block 1288) failed [ 130.543790][ T7240] FAT-fs (loop1): Directory bread(block 1285) failed [ 130.543824][ T7240] FAT-fs (loop1): Directory bread(block 1286) failed [ 130.543846][ T7240] FAT-fs (loop1): Directory bread(block 1287) failed [ 130.543899][ T7240] FAT-fs (loop1): Directory bread(block 1288) failed [ 130.647099][ T7243] xt_hashlimit: size too large, truncated to 1048576 [ 131.047471][ T7249] loop3: detected capacity change from 0 to 128 [ 131.079193][ T7249] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 131.202338][ T7249] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 132.619172][ T7249] FAULT_INJECTION: forcing a failure. [ 132.619172][ T7249] name failslab, interval 1, probability 0, space 0, times 0 [ 132.619200][ T7249] CPU: 1 UID: 0 PID: 7249 Comm: syz.3.560 Not tainted syzkaller #0 PREEMPT [ 132.619212][ T7249] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 132.619219][ T7249] Call trace: [ 132.619224][ T7249] show_stack+0x2c/0x3c (C) [ 132.619247][ T7249] __dump_stack+0x30/0x40 [ 132.619262][ T7249] dump_stack_lvl+0xd8/0x12c [ 132.619277][ T7249] dump_stack+0x1c/0x28 [ 132.619290][ T7249] should_fail_ex+0x41c/0x590 [ 132.619305][ T7249] should_failslab+0xc4/0x120 [ 132.619321][ T7249] __kmalloc_noprof+0x108/0x6c8 [ 132.619333][ T7249] ext4_find_extent+0x134/0x74c [ 132.619346][ T7249] ext4_ext_map_blocks+0x24c/0x47f8 [ 132.619359][ T7249] ext4_map_create_blocks+0x100/0x4a0 [ 132.619372][ T7249] ext4_map_blocks+0x520/0xc88 [ 132.619384][ T7249] ext4_getblk+0x174/0x6e8 [ 132.619396][ T7249] ext4_bread+0x3c/0x1a8 [ 132.619408][ T7249] ext4_append+0x238/0x470 [ 132.619420][ T7249] do_split+0x19c/0x1710 [ 132.619432][ T7249] make_indexed_dir+0xaa0/0xf44 [ 132.619445][ T7249] __ext4_add_entry+0x1630/0x1788 [ 132.619457][ T7249] ext4_mkdir+0x488/0x9a8 [ 132.619469][ T7249] vfs_mkdir+0x2e4/0x46c [ 132.619482][ T7249] filename_mkdirat+0x228/0x3f4 [ 132.619495][ T7249] __arm64_sys_mkdirat+0x9c/0xc0 [ 132.619508][ T7249] invoke_syscall+0x98/0x244 [ 132.619522][ T7249] el0_svc_common+0x19c/0x23c [ 132.619536][ T7249] do_el0_svc+0x4c/0x5c [ 132.619549][ T7249] el0_svc+0x64/0x260 [ 132.619564][ T7249] el0t_64_sync_handler+0x44/0x104 [ 132.619577][ T7249] el0t_64_sync+0x198/0x19c [ 136.025290][ T4710] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 136.583750][ T7271] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 136.708020][ T7272] loop2: detected capacity change from 0 to 512 [ 136.807595][ T7272] 9p: Bad value for 'rfdno' [ 137.084452][ T7279] sctp: [Deprecated]: syz.2.564 (pid 7279) Use of struct sctp_assoc_value in delayed_ack socket option. [ 137.084452][ T7279] Use struct sctp_sack_info instead [ 138.492989][ T7274] loop3: detected capacity change from 0 to 512 [ 140.432780][ T7299] netlink: 12 bytes leftover after parsing attributes in process `syz.2.570'. [ 140.456858][ T7291] netlink: 8 bytes leftover after parsing attributes in process `syz.2.570'. [ 140.456885][ T7291] netlink: 4 bytes leftover after parsing attributes in process `syz.2.570'. [ 141.182698][ T7309] binder: 7307:7309 tried to acquire reference to desc 0, got 1 instead [ 141.188398][ T7309] binder_alloc: 7307: binder_alloc_buf size 72057594037932128 failed, no address space [ 141.188416][ T7309] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288) [ 141.188444][ T7309] binder: cannot allocate buffer: no space left [ 141.188496][ T7309] binder: 7307:7309 transaction call to 7307:0 failed 27/29201/-28, code 0 size 72-24 line 3408 [ 141.189477][ T4886] binder: undelivered TRANSACTION_ERROR: 29201 [ 141.504649][ T7312] overlayfs: failed to resolve './file0fowner=00000000000000000000': -2 [ 141.716240][ T7319] x_tables: duplicate underflow at hook 1 [ 142.088034][ T7314] loop3: detected capacity change from 0 to 256 [ 142.517024][ T7327] netlink: 12 bytes leftover after parsing attributes in process `syz.5.581'. [ 142.893555][ T7331] loop1: detected capacity change from 0 to 128 [ 142.912193][ T7331] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 143.885056][ T7327] 8021q: adding VLAN 0 to HW filter on device bond2 [ 143.957746][ T7328] macvlan2: entered promiscuous mode [ 143.957769][ T7328] macvlan2: entered allmulticast mode [ 143.971023][ T7328] bond2: entered promiscuous mode [ 143.971523][ T7328] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 144.026071][ T7342] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 144.027985][ T7342] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 144.162535][ T7328] bond2: left promiscuous mode [ 144.748315][ T7340] team0: Device vlan0 is up. Set it down before adding it as a team port [ 144.951905][ T4711] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 145.175969][ T7349] loop6: detected capacity change from 0 to 128 [ 145.199352][ T7349] EXT4-fs (loop6): mounting ext2 file system using the ext4 subsystem [ 145.242128][ T7349] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 145.289900][ T7349] FAULT_INJECTION: forcing a failure. [ 145.289900][ T7349] name failslab, interval 1, probability 0, space 0, times 0 [ 145.289927][ T7349] CPU: 0 UID: 0 PID: 7349 Comm: syz.6.588 Not tainted syzkaller #0 PREEMPT [ 145.289938][ T7349] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 145.289945][ T7349] Call trace: [ 145.289950][ T7349] show_stack+0x2c/0x3c (C) [ 145.289970][ T7349] __dump_stack+0x30/0x40 [ 145.289991][ T7349] dump_stack_lvl+0xd8/0x12c [ 145.290007][ T7349] dump_stack+0x1c/0x28 [ 145.290021][ T7349] should_fail_ex+0x41c/0x590 [ 145.290036][ T7349] should_failslab+0xc4/0x120 [ 145.290051][ T7349] kmem_cache_alloc_noprof+0x94/0x5d4 [ 145.290063][ T7349] ext4_mb_new_blocks+0x4d4/0x41c0 [ 145.290079][ T7349] ext4_ext_map_blocks+0x10e8/0x47f8 [ 145.290092][ T7349] ext4_map_create_blocks+0x100/0x4a0 [ 145.290105][ T7349] ext4_map_blocks+0x520/0xc88 [ 145.290116][ T7349] ext4_getblk+0x174/0x6e8 [ 145.290128][ T7349] ext4_bread+0x3c/0x1a8 [ 145.290140][ T7349] ext4_append+0x238/0x470 [ 145.290153][ T7349] do_split+0x19c/0x1710 [ 145.290166][ T7349] make_indexed_dir+0xaa0/0xf44 [ 145.290179][ T7349] __ext4_add_entry+0x1630/0x1788 [ 145.290191][ T7349] ext4_mkdir+0x488/0x9a8 [ 145.290203][ T7349] vfs_mkdir+0x2e4/0x46c [ 145.290216][ T7349] filename_mkdirat+0x228/0x3f4 [ 145.290229][ T7349] __arm64_sys_mkdirat+0x9c/0xc0 [ 145.290241][ T7349] invoke_syscall+0x98/0x244 [ 145.290255][ T7349] el0_svc_common+0x19c/0x23c [ 145.290269][ T7349] do_el0_svc+0x4c/0x5c [ 145.290282][ T7349] el0_svc+0x64/0x260 [ 145.290297][ T7349] el0t_64_sync_handler+0x44/0x104 [ 145.290311][ T7349] el0t_64_sync+0x198/0x19c [ 145.387529][ T7356] FAULT_INJECTION: forcing a failure. [ 145.387529][ T7356] name failslab, interval 1, probability 0, space 0, times 0 [ 145.387555][ T7356] CPU: 0 UID: 0 PID: 7356 Comm: syz.1.587 Not tainted syzkaller #0 PREEMPT [ 145.387568][ T7356] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 145.387576][ T7356] Call trace: [ 145.387581][ T7356] show_stack+0x2c/0x3c (C) [ 145.387604][ T7356] __dump_stack+0x30/0x40 [ 145.387623][ T7356] dump_stack_lvl+0xd8/0x12c [ 145.387639][ T7356] dump_stack+0x1c/0x28 [ 145.387655][ T7356] should_fail_ex+0x41c/0x590 [ 145.387674][ T7356] should_failslab+0xc4/0x120 [ 145.387692][ T7356] __kmalloc_node_track_caller_noprof+0x108/0x6e0 [ 145.387707][ T7356] kmemdup_noprof+0x44/0x8c [ 145.387721][ T7356] key_alloc+0x2b4/0xd30 [ 145.387744][ T7356] keyring_alloc+0x68/0xe0 [ 145.387757][ T7356] call_sbin_request_key+0x2b8/0x9cc [ 145.387772][ T7356] request_key_and_link+0xfa8/0x1120 [ 145.387787][ T7356] __arm64_sys_request_key+0x2d4/0x37c [ 145.387802][ T7356] invoke_syscall+0x98/0x244 [ 145.387819][ T7356] el0_svc_common+0x19c/0x23c [ 145.387836][ T7356] do_el0_svc+0x4c/0x5c [ 145.387851][ T7356] el0_svc+0x64/0x260 [ 145.387869][ T7356] el0t_64_sync_handler+0x44/0x104 [ 145.387884][ T7356] el0t_64_sync+0x198/0x19c [ 145.584490][ T6382] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 145.927117][ T7364] loop6: detected capacity change from 0 to 512 [ 146.010708][ T7364] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 146.466769][ T7364] netlink: 4696 bytes leftover after parsing attributes in process `syz.6.591'. [ 146.466868][ T7364] netlink: 4696 bytes leftover after parsing attributes in process `syz.6.591'. [ 146.466883][ T7364] netlink: 508 bytes leftover after parsing attributes in process `syz.6.591'. [ 146.731665][ T7370] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 146.774011][ T6382] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.242502][ T7378] loop6: detected capacity change from 0 to 2048 [ 147.409545][ T7378] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 147.572670][ T7385] xt_hashlimit: size too large, truncated to 1048576 [ 147.686848][ T7378] EXT4-fs error (device loop6): ext4_validate_block_bitmap:436: comm syz.6.595: bg 0: block 2: invalid block bitmap [ 147.705399][ T7378] EXT4-fs (loop6): Remounting filesystem read-only [ 148.075967][ T7392] netlink: 12 bytes leftover after parsing attributes in process `syz.1.599'. [ 148.209759][ T7392] 8021q: adding VLAN 0 to HW filter on device bond2 [ 148.404635][ T7392] macvlan2: entered promiscuous mode [ 148.404657][ T7392] macvlan2: entered allmulticast mode [ 148.408736][ T7392] bond2: entered promiscuous mode [ 148.410316][ T7392] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 148.544521][ T7392] bond2: left promiscuous mode [ 148.673546][ T7403] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 149.148645][ T7407] loop2: detected capacity change from 0 to 256 [ 151.306281][ T6382] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 151.564304][ T6112] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.000309][ T6112] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.476741][ T6112] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.637640][ T6112] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.437998][ T6112] bridge_slave_1: left allmulticast mode [ 153.438026][ T6112] bridge_slave_1: left promiscuous mode [ 153.438196][ T6112] bridge0: port 2(bridge_slave_1) entered disabled state [ 153.454942][ T6112] bridge_slave_0: left allmulticast mode [ 153.454970][ T6112] bridge_slave_0: left promiscuous mode [ 153.455113][ T6112] bridge0: port 1(bridge_slave_0) entered disabled state [ 153.469936][ T7445] netlink: 12 bytes leftover after parsing attributes in process `syz.3.618'. [ 153.878513][ T4721] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 153.882858][ T4721] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 153.884012][ T4721] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 153.902670][ T4721] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 153.909932][ T4721] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 154.196933][ T6112] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 154.245776][ T6112] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 154.284653][ T6112] bond0 (unregistering): Released all slaves [ 154.325226][ T7445] 8021q: adding VLAN 0 to HW filter on device bond4 [ 154.332550][ T7448] macvlan2: entered promiscuous mode [ 154.332572][ T7448] macvlan2: entered allmulticast mode [ 154.333756][ T7448] bond4: entered promiscuous mode [ 154.339552][ T7448] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 154.383477][ T7448] bond4: left promiscuous mode [ 156.095479][ T7495] netlink: 'syz.3.629': attribute type 10 has an invalid length. [ 156.120202][ T4721] Bluetooth: hci3: command tx timeout [ 156.433666][ T7499] loop3: detected capacity change from 0 to 4096 [ 156.435653][ T7508] loop5: detected capacity change from 0 to 8 [ 156.441044][ T7499] ext2: block size(16384) > page size(4096) not supported by filesystem [ 156.441066][ T7499] EXT4-fs (loop3): bad block size 16384 [ 156.488673][ T7495] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 156.496664][ T7495] team0: Port device netdevsim1 added [ 156.543777][ T7508] cgroup: Unknown subsys name 'fscontext' [ 156.665657][ T5259] SQUASHFS error: Unable to read directory block [631:72] [ 156.725234][ T5259] SQUASHFS error: Unable to read inode 0xe3 [ 156.725721][ T5259] SQUASHFS error: Unable to read inode 0xe3 [ 157.027339][ T6112] hsr_slave_0: left promiscuous mode [ 157.031483][ T6112] hsr_slave_1: left promiscuous mode [ 157.033103][ T6112] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 157.033125][ T6112] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 157.041304][ T6112] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 157.041326][ T6112] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 157.108087][ T6112] veth1_macvtap: left promiscuous mode [ 157.108149][ T6112] veth0_macvtap: left promiscuous mode [ 157.108285][ T6112] veth1_vlan: left promiscuous mode [ 157.108381][ T6112] veth0_vlan: left promiscuous mode [ 157.142662][ T7521] netlink: 12 bytes leftover after parsing attributes in process `syz.2.635'. [ 157.142690][ T7521] block nbd0: Unsupported socket: should be TCP or UNIX. [ 158.013833][ T6112] team0 (unregistering): Port device team_slave_1 removed [ 158.041537][ T6112] team0 (unregistering): Port device team_slave_0 removed [ 158.233769][ T7537] netlink: 32 bytes leftover after parsing attributes in process `syz.3.640'. [ 158.354550][ T4721] Bluetooth: hci3: command tx timeout [ 158.590293][ T4402] 8021q: adding VLAN 0 to HW filter on device eth8 [ 159.377312][ T7551] sctp: [Deprecated]: syz.2.642 (pid 7551) Use of struct sctp_assoc_value in delayed_ack socket option. [ 159.377312][ T7551] Use struct sctp_sack_info instead [ 159.528996][ T6112] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.578540][ T4721] Bluetooth: hci3: command tx timeout [ 160.810724][ T7565] loop3: detected capacity change from 0 to 512 [ 160.845691][ T7565] EXT4-fs (loop3): Test dummy encryption mode enabled [ 160.899998][ T7567] netlink: 20 bytes leftover after parsing attributes in process `syz.2.646'. [ 160.902764][ T7565] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 161.249635][ T4726] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 161.252336][ T4726] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 161.253701][ T4726] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 161.256542][ T4726] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 161.257816][ T4726] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 161.331017][ T6112] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.618570][ T6112] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.663802][ T7453] bridge0: port 1(bridge_slave_0) entered blocking state [ 161.663959][ T7453] bridge0: port 1(bridge_slave_0) entered disabled state [ 161.664192][ T7453] bridge_slave_0: entered allmulticast mode [ 161.676358][ T7453] bridge_slave_0: entered promiscuous mode [ 161.744116][ T4402] 8021q: adding VLAN 0 to HW filter on device eth11 [ 161.744556][ T7453] bridge0: port 2(bridge_slave_1) entered blocking state [ 161.744696][ T7453] bridge0: port 2(bridge_slave_1) entered disabled state [ 161.744911][ T7453] bridge_slave_1: entered allmulticast mode [ 161.746945][ T7453] bridge_slave_1: entered promiscuous mode [ 161.792758][ T7453] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 161.798906][ T7453] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 161.937966][ T6112] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.076261][ T7453] team0: Port device team_slave_0 added [ 162.080079][ T7453] team0: Port device team_slave_1 added [ 162.109791][ T7602] loop1: detected capacity change from 0 to 128 [ 162.132378][ T7602] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 162.169496][ T7602] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 162.243794][ T7453] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 162.243812][ T7453] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 162.243828][ T7453] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 162.303116][ T7453] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 162.303135][ T7453] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 162.303152][ T7453] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 162.466567][ T4711] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 162.617629][ T4710] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.791720][ T4721] Bluetooth: hci3: command tx timeout [ 162.840576][ T7453] hsr_slave_0: entered promiscuous mode [ 162.841587][ T7453] hsr_slave_1: entered promiscuous mode [ 162.842245][ T7453] debugfs: 'hsr0' already exists in 'hsr' [ 162.842266][ T7453] Cannot create hsr debugfs directory [ 163.051041][ T7623] netlink: 'syz.3.654': attribute type 5 has an invalid length. [ 163.065186][ T7624] netlink: 4768 bytes leftover after parsing attributes in process `syz.1.656'. [ 163.072006][ T7624] netlink: 4768 bytes leftover after parsing attributes in process `syz.1.656'. [ 163.123785][ T6112] bridge_slave_1: left allmulticast mode [ 163.123818][ T6112] bridge_slave_1: left promiscuous mode [ 163.123968][ T6112] bridge0: port 2(bridge_slave_1) entered disabled state [ 163.144272][ T6112] bridge_slave_0: left allmulticast mode [ 163.144298][ T6112] bridge_slave_0: left promiscuous mode [ 163.144446][ T6112] bridge0: port 1(bridge_slave_0) entered disabled state [ 163.476081][ T4721] Bluetooth: hci2: command tx timeout [ 164.706105][ T6112] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 164.776662][ T6112] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 164.792813][ T6112] bond0 (unregistering): Released all slaves [ 164.807153][ T6112] bond1 (unregistering): Released all slaves [ 164.831683][ T6112] bond2 (unregistering): Released all slaves [ 164.858609][ T7619] team0: No ports can be present during mode change [ 165.072301][ T4402] 8021q: adding VLAN 0 to HW filter on device eth9 [ 165.145257][ T7642] netlink: 'syz.1.659': attribute type 10 has an invalid length. [ 165.635991][ T7661] loop3: detected capacity change from 0 to 8 [ 165.636956][ T7661] squashfs: Unknown parameter '' [ 165.700345][ T4721] Bluetooth: hci2: command tx timeout [ 165.779501][ T6112] hsr_slave_0: left promiscuous mode [ 165.780657][ T6112] hsr_slave_1: left promiscuous mode [ 165.781486][ T6112] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 165.781505][ T6112] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 165.783956][ T6112] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 165.783973][ T6112] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 165.842083][ T6112] veth1_macvtap: left promiscuous mode [ 165.842227][ T6112] veth0_macvtap: left promiscuous mode [ 165.843682][ T6112] veth1_vlan: left promiscuous mode [ 165.843795][ T6112] veth0_vlan: left promiscuous mode [ 166.726156][ T7686] block2mtd: illegal erase size [ 166.975971][ T6112] team0 (unregistering): Port device team_slave_1 removed [ 167.006122][ T6112] team0 (unregistering): Port device team_slave_0 removed [ 167.326451][ T7659] syzkaller1: entered allmulticast mode [ 167.388748][ T4402] 8021q: adding VLAN 0 to HW filter on device eth10 [ 167.764000][ T7700] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 167.764047][ T7700] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 167.797744][ T7700] Invalid ELF header magic: != ELF [ 167.931914][ T4721] Bluetooth: hci2: command tx timeout [ 168.255546][ T7711] syz.1.675: vmalloc error: size 18446744073709551615, exceeds total pages, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=/,mems_allowed=0 [ 168.255643][ T7711] CPU: 1 UID: 0 PID: 7711 Comm: syz.1.675 Not tainted syzkaller #0 PREEMPT [ 168.255655][ T7711] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 168.255663][ T7711] Call trace: [ 168.255668][ T7711] show_stack+0x2c/0x3c (C) [ 168.255693][ T7711] __dump_stack+0x30/0x40 [ 168.255713][ T7711] dump_stack_lvl+0xd8/0x12c [ 168.255729][ T7711] dump_stack+0x1c/0x28 [ 168.255752][ T7711] warn_alloc+0x1c4/0x1d8 [ 168.255767][ T7711] __vmalloc_node_range_noprof+0x110/0xe9c [ 168.255783][ T7711] __vmalloc_node_noprof+0xec/0x14c [ 168.255798][ T7711] vmalloc_noprof+0x3c/0x4c [ 168.255812][ T7711] dvb_dvr_do_ioctl+0x120/0x1f8 [ 168.255830][ T7711] dvb_usercopy+0x2a4/0x4d4 [ 168.255845][ T7711] dvb_dvr_ioctl+0x3c/0x54 [ 168.255861][ T7711] __arm64_sys_ioctl+0x154/0x1cc [ 168.255879][ T7711] invoke_syscall+0x98/0x244 [ 168.255896][ T7711] el0_svc_common+0x19c/0x23c [ 168.255912][ T7711] do_el0_svc+0x4c/0x5c [ 168.255928][ T7711] el0_svc+0x64/0x260 [ 168.255945][ T7711] el0t_64_sync_handler+0x44/0x104 [ 168.255961][ T7711] el0t_64_sync+0x198/0x19c [ 168.255978][ T7711] Mem-Info: [ 168.255986][ T7711] active_anon:84 inactive_anon:6980 isolated_anon:0 [ 168.255986][ T7711] active_file:2759 inactive_file:13526 isolated_file:0 [ 168.255986][ T7711] unevictable:768 dirty:42 writeback:0 [ 168.255986][ T7711] slab_reclaimable:8943 slab_unreclaimable:90030 [ 168.255986][ T7711] mapped:29604 shmem:1735 pagetables:1276 [ 168.255986][ T7711] sec_pagetables:0 bounce:0 [ 168.255986][ T7711] kernel_misc_reclaimable:0 [ 168.255986][ T7711] free:1474461 free_pcp:11632 free_cma:7616 [ 168.256011][ T7711] Node 0 active_anon:336kB inactive_anon:27920kB active_file:11036kB inactive_file:54104kB unevictable:3072kB isolated(anon):0kB isolated(file):0kB mapped:118416kB dirty:168kB writeback:0kB shmem:6940kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:9772kB pagetables:5104kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 168.256037][ T7711] Node 0 DMA free:3077888kB boost:0kB min:20360kB low:25448kB high:30536kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3145728kB managed:3080192kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:30464kB [ 168.256068][ T7711] lowmem_reserve[]: 0 0 3650 3650 3650 [ 168.256111][ T7711] Node 0 Normal free:2819956kB boost:0kB min:24692kB low:30864kB high:37036kB reserved_highatomic:0kB free_highatomic:0kB active_anon:336kB inactive_anon:27920kB active_file:11036kB inactive_file:54104kB unevictable:3072kB writepending:168kB zspages:0kB present:5242880kB managed:3738576kB mlocked:0kB bounce:0kB free_pcp:46528kB local_pcp:29004kB free_cma:0kB [ 168.256142][ T7711] lowmem_reserve[]: 0 0 0 0 0 [ 168.256184][ T7711] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 1*256kB (C) 1*512kB (C) 1*1024kB (C) 0*2048kB 751*4096kB (MC) = 3077888kB [ 168.256320][ T7711] Node 0 Normal: 3453*4kB (UM) 1904*8kB (UME) 1348*16kB (UME) 966*32kB (UME) 518*64kB (UME) 138*128kB (UM) 26*256kB (UME) 18*512kB (UME) 9*1024kB (UME) 4*2048kB (ME) 648*4096kB (UM) = 2819828kB [ 168.257059][ T7711] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 168.257071][ T7711] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=32768kB [ 168.257083][ T7711] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 168.257093][ T7711] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=64kB [ 168.257280][ T7711] 18016 total pagecache pages [ 168.257287][ T7711] 0 pages in swap cache [ 168.257294][ T7711] Free swap = 124996kB [ 168.257301][ T7711] Total swap = 124996kB [ 168.257309][ T7711] 2097152 pages RAM [ 168.257316][ T7711] 0 pages HighMem/MovableOnly [ 168.257322][ T7711] 392460 pages reserved [ 168.257329][ T7711] 8192 pages cma reserved [ 168.257336][ T7711] 25 pages hwpoisoned [ 168.532676][ T6112] IPVS: stop unused estimator thread 0... [ 168.662043][ T7715] netlink: 12 bytes leftover after parsing attributes in process `syz.1.676'. [ 168.919788][ T7715] 8021q: adding VLAN 0 to HW filter on device bond3 [ 169.017770][ T7718] macvlan2: entered promiscuous mode [ 169.017795][ T7718] macvlan2: entered allmulticast mode [ 169.019360][ T7718] bond3: entered promiscuous mode [ 169.020323][ T7718] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 169.057695][ T7718] bond3: left promiscuous mode [ 169.421216][ T7453] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 169.424588][ T7453] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 169.439162][ T7453] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 169.492334][ T7453] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 169.554312][ T7453] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 169.557190][ T7453] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 169.657720][ T7575] bridge0: port 1(bridge_slave_0) entered blocking state [ 169.676517][ T7575] bridge0: port 1(bridge_slave_0) entered disabled state [ 169.676772][ T7575] bridge_slave_0: entered allmulticast mode [ 169.713903][ T7575] bridge_slave_0: entered promiscuous mode [ 169.715323][ T7453] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 169.734376][ T7453] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 169.751934][ T7575] bridge0: port 2(bridge_slave_1) entered blocking state [ 169.751984][ T7575] bridge0: port 2(bridge_slave_1) entered disabled state [ 169.752258][ T7575] bridge_slave_1: entered allmulticast mode [ 169.762449][ T7575] bridge_slave_1: entered promiscuous mode [ 169.984560][ T7575] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 170.018894][ T7752] netlink: 12 bytes leftover after parsing attributes in process `syz.2.683'. [ 170.111089][ T7575] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 170.153297][ T4721] Bluetooth: hci2: command tx timeout [ 170.348292][ T7575] team0: Port device team_slave_0 added [ 170.389673][ T7575] team0: Port device team_slave_1 added [ 170.564221][ T7575] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 170.564239][ T7575] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 170.564254][ T7575] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 170.566996][ T7575] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 170.567007][ T7575] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 170.567024][ T7575] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 170.845908][ T7575] hsr_slave_0: entered promiscuous mode [ 170.848000][ T7575] hsr_slave_1: entered promiscuous mode [ 170.848648][ T7575] debugfs: 'hsr0' already exists in 'hsr' [ 170.848670][ T7575] Cannot create hsr debugfs directory [ 170.983133][ T7769] loop1: detected capacity change from 0 to 1024 [ 171.042594][ T7769] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 171.195151][ T7777] ip_tables: iptables: counters copy to user failed while replacing table [ 171.474082][ T4402] 8021q: adding VLAN 0 to HW filter on device eth12 [ 171.550795][ T4711] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.665420][ T7453] 8021q: adding VLAN 0 to HW filter on device bond0 [ 171.818317][ T7785] netlink: 'syz.3.692': attribute type 4 has an invalid length. [ 171.992108][ T7453] 8021q: adding VLAN 0 to HW filter on device team0 [ 172.115544][ T3246] bridge0: port 1(bridge_slave_0) entered blocking state [ 172.115599][ T3246] bridge0: port 1(bridge_slave_0) entered forwarding state [ 172.131014][ T6104] bridge0: port 2(bridge_slave_1) entered blocking state [ 172.131067][ T6104] bridge0: port 2(bridge_slave_1) entered forwarding state [ 172.477834][ T7798] netlink: 128 bytes leftover after parsing attributes in process `syz.3.697'. [ 172.477862][ T7798] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 173.160305][ T7821] FAULT_INJECTION: forcing a failure. [ 173.160305][ T7821] name failslab, interval 1, probability 0, space 0, times 0 [ 173.160333][ T7821] CPU: 0 UID: 0 PID: 7821 Comm: syz.1.703 Not tainted syzkaller #0 PREEMPT [ 173.160346][ T7821] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 173.160354][ T7821] Call trace: [ 173.160359][ T7821] show_stack+0x2c/0x3c (C) [ 173.160384][ T7821] __dump_stack+0x30/0x40 [ 173.160400][ T7821] dump_stack_lvl+0xd8/0x12c [ 173.160416][ T7821] dump_stack+0x1c/0x28 [ 173.160432][ T7821] should_fail_ex+0x41c/0x590 [ 173.160449][ T7821] should_failslab+0xc4/0x120 [ 173.160468][ T7821] __kmalloc_cache_noprof+0x94/0x5fc [ 173.160482][ T7821] rand_initialize_disk+0x58/0xb8 [ 173.160499][ T7821] __alloc_disk_node+0x328/0x494 [ 173.160512][ T7821] __blk_alloc_disk+0xec/0x1a8 [ 173.160524][ T7821] dm_create+0x3ec/0xd94 [ 173.160539][ T7821] dev_create+0x108/0x258 [ 173.160552][ T7821] dm_ctl_ioctl+0x884/0xbbc [ 173.160565][ T7821] __arm64_sys_ioctl+0x154/0x1cc [ 173.160583][ T7821] invoke_syscall+0x98/0x244 [ 173.160600][ T7821] el0_svc_common+0x19c/0x23c [ 173.160618][ T7821] do_el0_svc+0x4c/0x5c [ 173.160634][ T7821] el0_svc+0x64/0x260 [ 173.160651][ T7821] el0t_64_sync_handler+0x44/0x104 [ 173.160666][ T7821] el0t_64_sync+0x198/0x19c [ 174.030731][ T7575] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 174.071994][ T7575] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 174.164012][ T7856] team0 (unregistering): Port device team_slave_0 removed [ 174.198541][ T7856] team0 (unregistering): Port device team_slave_1 removed [ 174.227609][ T7856] team0 (unregistering): Port device netdevsim1 removed [ 174.333908][ T7453] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 174.334721][ T7575] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 174.396676][ T7575] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 174.413641][ T7575] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 174.431249][ T7575] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 174.432079][ T7575] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 174.446685][ T7575] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 174.822418][ T7575] 8021q: adding VLAN 0 to HW filter on device bond0 [ 174.901973][ T7575] 8021q: adding VLAN 0 to HW filter on device team0 [ 174.933515][ T7893] netlink: 60 bytes leftover after parsing attributes in process `syz.3.713'. [ 174.944795][ T6104] bridge0: port 1(bridge_slave_0) entered blocking state [ 174.944861][ T6104] bridge0: port 1(bridge_slave_0) entered forwarding state [ 174.991020][ T6110] bridge0: port 2(bridge_slave_1) entered blocking state [ 174.991075][ T6110] bridge0: port 2(bridge_slave_1) entered forwarding state [ 175.348546][ T7575] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 175.348569][ T7575] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 176.608055][ T7453] veth0_vlan: entered promiscuous mode [ 176.701290][ T7453] veth1_vlan: entered promiscuous mode [ 176.849503][ T7453] veth0_macvtap: entered promiscuous mode [ 176.876205][ T7453] veth1_macvtap: entered promiscuous mode [ 177.002451][ T7453] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 177.008534][ T7453] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 177.143335][ T7930] netlink: 96 bytes leftover after parsing attributes in process `syz.2.724'. [ 177.145322][ T7930] FAULT_INJECTION: forcing a failure. [ 177.145322][ T7930] name failslab, interval 1, probability 0, space 0, times 0 [ 177.145346][ T7930] CPU: 0 UID: 0 PID: 7930 Comm: syz.2.724 Not tainted syzkaller #0 PREEMPT [ 177.145359][ T7930] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 177.145367][ T7930] Call trace: [ 177.145373][ T7930] show_stack+0x2c/0x3c (C) [ 177.145399][ T7930] __dump_stack+0x30/0x40 [ 177.145423][ T7930] dump_stack_lvl+0xd8/0x12c [ 177.145439][ T7930] dump_stack+0x1c/0x28 [ 177.145455][ T7930] should_fail_ex+0x41c/0x590 [ 177.145474][ T7930] should_failslab+0xc4/0x120 [ 177.145491][ T7930] __kvmalloc_node_noprof+0x160/0x7fc [ 177.145506][ T7930] allocate_hook_entries_size+0x50/0xb8 [ 177.145524][ T7930] __nf_hook_entries_try_shrink+0x10c/0x2b4 [ 177.145541][ T7930] nf_hook_entries_delete_raw+0x108/0x1bc [ 177.145558][ T7930] nf_nat_unregister_fn+0x1c0/0x348 [ 177.145571][ T7930] nf_nat_ipv4_unregister_fn+0x54/0x70 [ 177.145585][ T7930] __nf_tables_unregister_hook+0x160/0x1dc [ 177.145600][ T7930] nf_tables_abort+0x1bf8/0x31b0 [ 177.145614][ T7930] nfnetlink_rcv+0x106c/0x16ec [ 177.145627][ T7930] netlink_unicast+0x600/0x7f8 [ 177.145642][ T7930] netlink_sendmsg+0x648/0x948 [ 177.145657][ T7930] __sock_sendmsg+0xc8/0x17c [ 177.145672][ T7930] ____sys_sendmsg+0x3d0/0x6c8 [ 177.145687][ T7930] ___sys_sendmsg+0x198/0x224 [ 177.145702][ T7930] __sys_sendmsg+0x158/0x204 [ 177.145716][ T7930] __arm64_sys_sendmsg+0x88/0x9c [ 177.145736][ T7930] invoke_syscall+0x98/0x244 [ 177.145753][ T7930] el0_svc_common+0x19c/0x23c [ 177.145769][ T7930] do_el0_svc+0x4c/0x5c [ 177.145785][ T7930] el0_svc+0x64/0x260 [ 177.145802][ T7930] el0t_64_sync_handler+0x44/0x104 [ 177.145818][ T7930] el0t_64_sync+0x198/0x19c [ 177.392559][ T14] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.392962][ T14] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.393276][ T14] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.394457][ T6112] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.405038][ T14] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 177.405054][ T14] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 177.483355][ T6104] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 177.483374][ T6104] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 178.956519][ T7955] loop7: detected capacity change from 0 to 2048 [ 178.977937][ T7575] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 178.987298][ T7953] netlink: 12 bytes leftover after parsing attributes in process `syz.2.727'. [ 179.063137][ T7955] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 179.078340][ T7964] netlink: 8 bytes leftover after parsing attributes in process `syz.2.727'. [ 179.078364][ T7964] netlink: 4 bytes leftover after parsing attributes in process `syz.2.727'. [ 179.224280][ T7955] ip6gretap0: entered promiscuous mode [ 180.091495][ T7575] veth0_vlan: entered promiscuous mode [ 180.128376][ T7575] veth1_vlan: entered promiscuous mode [ 180.224329][ T7575] veth0_macvtap: entered promiscuous mode [ 180.247368][ T7575] veth1_macvtap: entered promiscuous mode [ 180.304292][ T30] audit: type=1326 audit(172.675:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7981 comm="syz.2.730" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=31 arch=c00000b7 syscall=277 compat=0 ip=0xffff94379368 code=0x0 [ 180.305564][ T7575] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 180.332488][ T7575] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 180.351003][ T1820] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.351100][ T1820] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.351179][ T1820] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.351245][ T1820] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.373066][ T7983] loop2: detected capacity change from 0 to 1024 [ 180.672508][ T7453] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 180.884833][ T1820] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 180.884853][ T1820] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 181.028188][ T3246] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 181.028208][ T3246] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 181.068365][ T7995] binder: 7993:7995 tried to acquire reference to desc 0, got 1 instead [ 181.072676][ T7995] binder_alloc: 7993: binder_alloc_buf size 6917529027641081952 failed, no address space [ 181.072694][ T7995] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288) [ 181.072724][ T7995] binder: cannot allocate buffer: no space left [ 181.072779][ T7995] binder: 7993:7995 transaction call to 7993:0 failed 32/29201/-28, code 0 size 72-24 line 3408 [ 181.073473][ T1502] binder: undelivered TRANSACTION_ERROR: 29201 [ 181.355747][ T8004] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 181.359816][ T8004] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 182.541463][ T8010] vlan0: entered promiscuous mode [ 182.852488][ T8021] loop1: detected capacity change from 0 to 128 [ 182.861086][ T8021] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 182.913580][ T8021] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 182.988906][ T8021] FAULT_INJECTION: forcing a failure. [ 182.988906][ T8021] name failslab, interval 1, probability 0, space 0, times 0 [ 182.988932][ T8021] CPU: 1 UID: 0 PID: 8021 Comm: syz.1.739 Not tainted syzkaller #0 PREEMPT [ 182.988943][ T8021] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 182.988950][ T8021] Call trace: [ 182.988955][ T8021] show_stack+0x2c/0x3c (C) [ 182.988977][ T8021] __dump_stack+0x30/0x40 [ 182.988992][ T8021] dump_stack_lvl+0xd8/0x12c [ 182.989005][ T8021] dump_stack+0x1c/0x28 [ 182.989018][ T8021] should_fail_ex+0x41c/0x590 [ 182.989035][ T8021] should_failslab+0xc4/0x120 [ 182.989050][ T8021] kmem_cache_alloc_noprof+0x94/0x5d4 [ 182.989063][ T8021] ext4_mb_new_blocks+0xafc/0x41c0 [ 182.989078][ T8021] ext4_ext_map_blocks+0x10e8/0x47f8 [ 182.989092][ T8021] ext4_map_create_blocks+0x100/0x4a0 [ 182.989104][ T8021] ext4_map_blocks+0x520/0xc88 [ 182.989116][ T8021] ext4_getblk+0x174/0x6e8 [ 182.989128][ T8021] ext4_bread+0x3c/0x1a8 [ 182.989139][ T8021] ext4_append+0x238/0x470 [ 182.989151][ T8021] do_split+0x19c/0x1710 [ 182.989163][ T8021] make_indexed_dir+0xaa0/0xf44 [ 182.989176][ T8021] __ext4_add_entry+0x1630/0x1788 [ 182.989188][ T8021] ext4_mkdir+0x488/0x9a8 [ 182.989200][ T8021] vfs_mkdir+0x2e4/0x46c [ 182.989213][ T8021] filename_mkdirat+0x228/0x3f4 [ 182.989226][ T8021] __arm64_sys_mkdirat+0x9c/0xc0 [ 182.989239][ T8021] invoke_syscall+0x98/0x244 [ 182.989253][ T8021] el0_svc_common+0x19c/0x23c [ 182.989267][ T8021] do_el0_svc+0x4c/0x5c [ 182.989280][ T8021] el0_svc+0x64/0x260 [ 182.989294][ T8021] el0t_64_sync_handler+0x44/0x104 [ 182.989308][ T8021] el0t_64_sync+0x198/0x19c [ 183.224314][ T4711] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 183.476892][ T8040] loop1: detected capacity change from 0 to 512 [ 183.784987][ T8048] xt_hashlimit: size too large, truncated to 1048576 [ 183.832054][ T8040] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 183.857369][ T8055] loop3: detected capacity change from 0 to 512 [ 183.882974][ T8040] netlink: 4696 bytes leftover after parsing attributes in process `syz.1.744'. [ 183.883052][ T8040] netlink: 4696 bytes leftover after parsing attributes in process `syz.1.744'. [ 183.883066][ T8040] netlink: 508 bytes leftover after parsing attributes in process `syz.1.744'. [ 183.948208][ T8055] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 183.998522][ T8055] Driver unsupported XDP return value 0 on prog (id 71) dev N/A, expect packet loss! [ 184.208635][ T4711] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 184.587060][ T8070] X.509: signatureAlgorithm (12) differs from tbsCertificate.signature (13) [ 184.728407][ T8072] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 184.936400][ T8080] loop2: detected capacity change from 0 to 256 [ 184.946172][ T4710] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 185.074707][ T8076] loop5: detected capacity change from 0 to 8192 [ 186.169431][ T8099] loop1: detected capacity change from 0 to 1024 [ 186.170452][ T8099] EXT4-fs: Ignoring removed nomblk_io_submit option [ 186.231209][ T8099] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 187.325240][ T8110] loop5: detected capacity change from 0 to 2048 [ 187.469958][ T8110] loop5: p1 p3 < > p4 < p5 > [ 187.469984][ T8110] loop5: partition table partially beyond EOD, truncated [ 187.470184][ T8110] loop5: p1 size 196608 extends beyond EOD, truncated [ 187.495906][ T8110] loop5: p3 start 614273 is beyond EOD, truncated [ 187.519290][ T8110] loop5: p5 size 196608 extends beyond EOD, truncated [ 187.822531][ T4345] loop5: p1 p3 < > p4 < p5 > [ 187.822563][ T4345] loop5: partition table partially beyond EOD, truncated [ 187.822788][ T4345] loop5: p1 size 196608 extends beyond EOD, truncated [ 187.859131][ T8122] loop2: detected capacity change from 0 to 512 [ 187.860123][ T8122] EXT4-fs: Ignoring removed orlov option [ 187.874416][ T8122] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 0 overlaps block group descriptors [ 187.874434][ T8122] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 0 not in group (block 2)! [ 187.874446][ T8122] EXT4-fs (loop2): group descriptors corrupted! [ 187.954313][ T4345] loop5: p3 start 614273 is beyond EOD, truncated [ 187.981409][ T4345] loop5: p5 size 196608 extends beyond EOD, truncated [ 188.036572][ T4711] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 188.925622][ T5524] udevd[5524]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 188.944052][ T4704] udevd[4704]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory [ 188.958896][ T5625] udevd[5625]: inotify_add_watch(7, /dev/loop5p5, 10) failed: No such file or directory [ 189.104622][ T4704] udevd[4704]: inotify_add_watch(7, /dev/loop5p5, 10) failed: No such file or directory [ 189.136343][ T5624] udevd[5624]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory [ 189.208631][ T5524] udevd[5524]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 189.398897][ T8164] netlink: 'syz.3.777': attribute type 10 has an invalid length. [ 189.742609][ T8174] netlink: 'syz.5.779': attribute type 12 has an invalid length. [ 189.813927][ T8171] loop3: detected capacity change from 0 to 4096 [ 189.822656][ T8171] ext2: block size(16384) > page size(4096) not supported by filesystem [ 189.822679][ T8171] EXT4-fs (loop3): bad block size 16384 [ 190.439996][ T8187] netlink: 12 bytes leftover after parsing attributes in process `syz.1.780'. [ 190.440022][ T8187] block nbd0: Unsupported socket: should be TCP or UNIX. [ 190.541226][ T1215] IPVS: starting estimator thread 0... [ 190.640012][ T8198] IPVS: using max 12 ests per chain, 28800 per kthread [ 192.358498][ T8224] netlink: 20 bytes leftover after parsing attributes in process `syz.2.791'. [ 194.303230][ T8263] loop5: detected capacity change from 0 to 128 [ 194.414954][ T8263] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 194.434063][ T8263] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 195.026101][ T8287] loop1: detected capacity change from 0 to 2048 [ 195.770415][ T8311] netlink: 20 bytes leftover after parsing attributes in process `syz.1.818'. [ 195.787668][ T8311] ip_tables: iptables: counters copy to user failed while replacing table [ 195.872605][ T8313] netlink: 12 bytes leftover after parsing attributes in process `syz.7.817'. [ 195.990021][ T1595] ieee802154 phy0 wpan0: encryption failed: -22 [ 195.990076][ T1595] ieee802154 phy1 wpan1: encryption failed: -22 [ 196.269975][ T8328] netlink: 12 bytes leftover after parsing attributes in process `syz.5.822'. [ 196.355157][ T8332] netlink: 16 bytes leftover after parsing attributes in process `syz.3.824'. [ 196.355182][ T8332] netlink: 16 bytes leftover after parsing attributes in process `syz.3.824'. [ 196.355193][ T8332] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Hello request ret = -22) [ 196.355203][ T8332] iwpm_hello_cb: Unable to parse nlmsg [ 196.936853][ T8346] ip_tables: iptables: counters copy to user failed while replacing table [ 196.939789][ T8344] loop1: detected capacity change from 0 to 1024 [ 196.954401][ T8342] FAULT_INJECTION: forcing a failure. [ 196.954401][ T8342] name failslab, interval 1, probability 0, space 0, times 0 [ 196.954431][ T8342] CPU: 0 UID: 0 PID: 8342 Comm: syz.5.829 Tainted: G L syzkaller #0 PREEMPT [ 196.954447][ T8342] Tainted: [L]=SOFTLOCKUP [ 196.954453][ T8342] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 196.954460][ T8342] Call trace: [ 196.954465][ T8342] show_stack+0x2c/0x3c (C) [ 196.954489][ T8342] __dump_stack+0x30/0x40 [ 196.954505][ T8342] dump_stack_lvl+0xd8/0x12c [ 196.954526][ T8342] dump_stack+0x1c/0x28 [ 196.954542][ T8342] should_fail_ex+0x41c/0x590 [ 196.954561][ T8342] should_failslab+0xc4/0x120 [ 196.954579][ T8342] kmem_cache_alloc_noprof+0x94/0x5d4 [ 196.954592][ T8342] prepare_creds+0x34/0x7d0 [ 196.954609][ T8342] __sys_setfsuid+0xc8/0x328 [ 196.954624][ T8342] __arm64_sys_setfsuid+0x40/0x50 [ 196.954639][ T8342] invoke_syscall+0x98/0x244 [ 196.954656][ T8342] el0_svc_common+0x19c/0x23c [ 196.954671][ T8342] do_el0_svc+0x4c/0x5c [ 196.954687][ T8342] el0_svc+0x64/0x260 [ 196.954703][ T8342] el0t_64_sync_handler+0x44/0x104 [ 196.954719][ T8342] el0t_64_sync+0x198/0x19c [ 197.031583][ T8344] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 197.183539][ T8351] netlink: 8 bytes leftover after parsing attributes in process `syz.2.832'. [ 197.594371][ T4711] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 198.438660][ T8375] netlink: 'syz.7.833': attribute type 4 has an invalid length. [ 199.731327][ T8399] FAULT_INJECTION: forcing a failure. [ 199.731327][ T8399] name failslab, interval 1, probability 0, space 0, times 0 [ 199.731356][ T8399] CPU: 1 UID: 0 PID: 8399 Comm: syz.5.844 Tainted: G L syzkaller #0 PREEMPT [ 199.731371][ T8399] Tainted: [L]=SOFTLOCKUP [ 199.731376][ T8399] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 199.731384][ T8399] Call trace: [ 199.731388][ T8399] show_stack+0x2c/0x3c (C) [ 199.731411][ T8399] __dump_stack+0x30/0x40 [ 199.731429][ T8399] dump_stack_lvl+0xd8/0x12c [ 199.731444][ T8399] dump_stack+0x1c/0x28 [ 199.731460][ T8399] should_fail_ex+0x41c/0x590 [ 199.731478][ T8399] should_failslab+0xc4/0x120 [ 199.731495][ T8399] kmem_cache_alloc_noprof+0x94/0x5d4 [ 199.731508][ T8399] security_inode_alloc+0x40/0x304 [ 199.731523][ T8399] inode_init_always_gfp+0x704/0xbac [ 199.731539][ T8399] alloc_inode+0x9c/0x198 [ 199.731553][ T8399] iget5_locked+0x5c/0xc0 [ 199.731569][ T8399] dax_dev_get+0xac/0x244 [ 199.731583][ T8399] alloc_dax+0x9c/0x130 [ 199.731596][ T8399] dm_create+0x8e4/0xd94 [ 199.731611][ T8399] dev_create+0x108/0x258 [ 199.731625][ T8399] dm_ctl_ioctl+0x884/0xbbc [ 199.731638][ T8399] __arm64_sys_ioctl+0x154/0x1cc [ 199.731655][ T8399] invoke_syscall+0x98/0x244 [ 199.731672][ T8399] el0_svc_common+0x19c/0x23c [ 199.731688][ T8399] do_el0_svc+0x4c/0x5c [ 199.731704][ T8399] el0_svc+0x64/0x260 [ 199.731720][ T8399] el0t_64_sync_handler+0x44/0x104 [ 199.731744][ T8399] el0t_64_sync+0x198/0x19c [ 200.718726][ T8414] loop2: detected capacity change from 0 to 2048 [ 202.045970][ T8419] team0 (unregistering): Port device team_slave_0 removed [ 202.084673][ T8432] loop3: detected capacity change from 0 to 512 [ 202.135374][ T8419] team0 (unregistering): Port device team_slave_1 removed [ 202.171690][ T8432] EXT4-fs (loop3): can't mount with data=, fs mounted w/o journal [ 202.269392][ T8441] netlink: 60 bytes leftover after parsing attributes in process `syz.7.855'. [ 202.269471][ T8441] netlink: 8 bytes leftover after parsing attributes in process `syz.7.855'. [ 202.651562][ T8455] netlink: 'syz.7.860': attribute type 16 has an invalid length. [ 202.651588][ T8455] netlink: 64138 bytes leftover after parsing attributes in process `syz.7.860'. [ 202.774835][ T8455] loop7: detected capacity change from 0 to 512 [ 202.775793][ T8455] ext4: Unknown parameter 'fowner<00000000000000000000' [ 203.932386][ T8476] netlink: 96 bytes leftover after parsing attributes in process `syz.3.863'. [ 203.936618][ T8476] FAULT_INJECTION: forcing a failure. [ 203.936618][ T8476] name failslab, interval 1, probability 0, space 0, times 0 [ 203.936642][ T8476] CPU: 0 UID: 0 PID: 8476 Comm: syz.3.863 Tainted: G L syzkaller #0 PREEMPT [ 203.936657][ T8476] Tainted: [L]=SOFTLOCKUP [ 203.936663][ T8476] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 203.936670][ T8476] Call trace: [ 203.936675][ T8476] show_stack+0x2c/0x3c (C) [ 203.936698][ T8476] __dump_stack+0x30/0x40 [ 203.936715][ T8476] dump_stack_lvl+0xd8/0x12c [ 203.936736][ T8476] dump_stack+0x1c/0x28 [ 203.936752][ T8476] should_fail_ex+0x41c/0x590 [ 203.936771][ T8476] should_failslab+0xc4/0x120 [ 203.936789][ T8476] __kvmalloc_node_noprof+0x160/0x7fc [ 203.936804][ T8476] allocate_hook_entries_size+0x50/0xb8 [ 203.936822][ T8476] __nf_hook_entries_try_shrink+0x10c/0x2b4 [ 203.936839][ T8476] nf_hook_entries_delete_raw+0x108/0x1bc [ 203.936857][ T8476] nf_nat_unregister_fn+0x1c0/0x348 [ 203.936870][ T8476] nf_nat_ipv4_unregister_fn+0x54/0x70 [ 203.936884][ T8476] __nf_tables_unregister_hook+0x160/0x1dc [ 203.936899][ T8476] nf_tables_abort+0x1bf8/0x31b0 [ 203.936912][ T8476] nfnetlink_rcv+0x106c/0x16ec [ 203.936924][ T8476] netlink_unicast+0x600/0x7f8 [ 203.936940][ T8476] netlink_sendmsg+0x648/0x948 [ 203.936955][ T8476] __sock_sendmsg+0xc8/0x17c [ 203.936969][ T8476] ____sys_sendmsg+0x3d0/0x6c8 [ 203.936985][ T8476] ___sys_sendmsg+0x198/0x224 [ 203.936999][ T8476] __sys_sendmsg+0x158/0x204 [ 203.937014][ T8476] __arm64_sys_sendmsg+0x88/0x9c [ 203.937029][ T8476] invoke_syscall+0x98/0x244 [ 203.937047][ T8476] el0_svc_common+0x19c/0x23c [ 203.937063][ T8476] do_el0_svc+0x4c/0x5c [ 203.937080][ T8476] el0_svc+0x64/0x260 [ 203.937096][ T8476] el0t_64_sync_handler+0x44/0x104 [ 203.937112][ T8476] el0t_64_sync+0x198/0x19c [ 206.487674][ T8504] netlink: 12 bytes leftover after parsing attributes in process `syz.2.866'. [ 206.566372][ T8509] netlink: 8 bytes leftover after parsing attributes in process `syz.2.866'. [ 206.566398][ T8509] netlink: 4 bytes leftover after parsing attributes in process `syz.2.866'. [ 206.634127][ T8504] bridge2: port 1(veth0_to_bond) entered blocking state [ 206.634183][ T8504] bridge2: port 1(veth0_to_bond) entered disabled state [ 206.634447][ T8504] veth0_to_bond: entered allmulticast mode [ 206.652468][ T8504] veth0_to_bond: entered promiscuous mode [ 206.965782][ T8517] binder: 8516:8517 tried to acquire reference to desc 0, got 1 instead [ 206.969927][ T8517] binder_alloc: 8516: binder_alloc_buf size -1080863910568918944 failed, no address space [ 206.969944][ T8517] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288) [ 206.969974][ T8517] binder: cannot allocate buffer: no space left [ 206.970025][ T8517] binder: 8516:8517 transaction call to 8516:0 failed 37/29201/-28, code 0 size 72-24 line 3408 [ 206.992020][ T1158] binder: undelivered TRANSACTION_ERROR: 29201 [ 207.278661][ T8522] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 207.318010][ T8522] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 207.319539][ T8524] loop1: detected capacity change from 0 to 1024 [ 207.320510][ T8524] EXT4-fs: Ignoring removed bh option [ 207.321809][ T8524] EXT4-fs (loop1): stripe (7) is not aligned with cluster size (16), stripe is disabled [ 207.331043][ T8526] ip_tables: iptables: counters copy to user failed while replacing table [ 207.348789][ T8524] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 207.660896][ T8536] team0: Device vlan0 is up. Set it down before adding it as a team port [ 209.192508][ T8552] loop7: detected capacity change from 0 to 128 [ 209.197152][ T4711] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 209.229965][ T8552] EXT4-fs (loop7): mounting ext2 file system using the ext4 subsystem [ 209.341202][ T8552] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 209.414137][ T8552] FAULT_INJECTION: forcing a failure. [ 209.414137][ T8552] name failslab, interval 1, probability 0, space 0, times 0 [ 209.414165][ T8552] CPU: 1 UID: 0 PID: 8552 Comm: syz.7.881 Tainted: G L syzkaller #0 PREEMPT [ 209.414179][ T8552] Tainted: [L]=SOFTLOCKUP [ 209.414184][ T8552] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 209.414191][ T8552] Call trace: [ 209.414195][ T8552] show_stack+0x2c/0x3c (C) [ 209.414217][ T8552] __dump_stack+0x30/0x40 [ 209.414231][ T8552] dump_stack_lvl+0xd8/0x12c [ 209.414245][ T8552] dump_stack+0x1c/0x28 [ 209.414258][ T8552] should_fail_ex+0x41c/0x590 [ 209.414274][ T8552] should_failslab+0xc4/0x120 [ 209.414289][ T8552] kmem_cache_alloc_noprof+0x94/0x5d4 [ 209.414301][ T8552] __es_insert_extent+0x1f4/0xa9c [ 209.414315][ T8552] ext4_es_insert_extent+0x448/0xe84 [ 209.414329][ T8552] ext4_map_create_blocks+0x2bc/0x4a0 [ 209.414342][ T8552] ext4_map_blocks+0x520/0xc88 [ 209.414355][ T8552] ext4_getblk+0x174/0x6e8 [ 209.414367][ T8552] ext4_bread+0x3c/0x1a8 [ 209.414379][ T8552] ext4_append+0x238/0x470 [ 209.414391][ T8552] do_split+0x19c/0x1710 [ 209.414403][ T8552] make_indexed_dir+0xaa0/0xf44 [ 209.414415][ T8552] __ext4_add_entry+0x1630/0x1788 [ 209.414428][ T8552] ext4_mkdir+0x488/0x9a8 [ 209.414440][ T8552] vfs_mkdir+0x2e4/0x46c [ 209.414453][ T8552] filename_mkdirat+0x228/0x3f4 [ 209.414466][ T8552] __arm64_sys_mkdirat+0x9c/0xc0 [ 209.414479][ T8552] invoke_syscall+0x98/0x244 [ 209.414493][ T8552] el0_svc_common+0x19c/0x23c [ 209.414507][ T8552] do_el0_svc+0x4c/0x5c [ 209.414521][ T8552] el0_svc+0x64/0x260 [ 209.414535][ T8552] el0t_64_sync_handler+0x44/0x104 [ 209.414549][ T8552] el0t_64_sync+0x198/0x19c [ 209.423064][ T8557] loop3: detected capacity change from 0 to 512 [ 209.543967][ T8557] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 209.684056][ T7453] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 209.855736][ T8567] xt_hashlimit: size too large, truncated to 1048576 [ 209.880630][ T4710] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 210.347560][ T8584] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 210.877995][ T8602] loop2: detected capacity change from 0 to 256 [ 210.970514][ T8609] netlink: 44 bytes leftover after parsing attributes in process `syz.7.895'. [ 213.523218][ T8649] netlink: 8 bytes leftover after parsing attributes in process `syz.1.905'. [ 213.915213][ T8645] mmap: syz.2.904 (8645) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 214.020501][ T4721] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 214.675852][ T8685] netlink: 12 bytes leftover after parsing attributes in process `syz.5.915'. [ 214.675880][ T8685] block nbd0: Unsupported socket: should be TCP or UNIX. [ 214.813798][ T8672] loop3: detected capacity change from 0 to 8192 [ 215.361710][ T8705] netlink: 'syz.5.919': attribute type 10 has an invalid length. [ 215.499472][ T8710] loop3: detected capacity change from 0 to 1024 [ 215.930468][ T8700] loop5: detected capacity change from 0 to 4096 [ 215.947578][ T8700] ext2: block size(16384) > page size(4096) not supported by filesystem [ 215.947601][ T8700] EXT4-fs (loop5): bad block size 16384 [ 216.687525][ T8732] loop5: detected capacity change from 0 to 8 [ 216.749363][ T8734] netlink: 20 bytes leftover after parsing attributes in process `syz.1.925'. [ 216.923469][ T8732] overlayfs: failed to resolve './bus': -2 [ 217.035048][ T640] IPVS: starting estimator thread 0... [ 217.174267][ T8739] IPVS: using max 12 ests per chain, 28800 per kthread [ 218.294762][ T8757] netlink: 32 bytes leftover after parsing attributes in process `syz.1.933'. [ 218.404005][ T8763] netlink: 14 bytes leftover after parsing attributes in process `syz.5.934'. [ 218.849341][ T8767] loop1: detected capacity change from 0 to 512 [ 218.850940][ T8767] EXT4-fs: Ignoring removed nobh option [ 218.878622][ T8767] fscrypt (loop1, inode 2): Error -61 getting encryption context [ 218.878842][ T8767] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -61 [ 218.888721][ T8767] EXT4-fs error (device loop1): ext4_orphan_get:1403: inode #13: comm syz.1.937: inode has both inline data and extents flags [ 218.888755][ T8767] loop1: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 218.892369][ T8767] EXT4-fs error (device loop1): ext4_orphan_get:1408: comm syz.1.937: couldn't read orphan inode 13 (err -117) [ 218.892398][ T8767] loop1: lost filesystem error report for type 5 error -117 [ 218.897311][ T8767] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 219.011205][ T8777] loop2: detected capacity change from 0 to 256 [ 219.012449][ T8777] vfat: Unknown parameter '`ŸŪ@d¦shortname' [ 219.075624][ T8769] fscrypt (loop1, inode 2): Error -61 getting encryption context [ 219.383942][ T8777] loop2: detected capacity change from 0 to 1024 [ 219.410581][ T8777] Quota error (device loop2): do_check_range: Getting block 64 out of range 1-5 [ 219.410625][ T8777] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0 [ 219.410643][ T8777] EXT4-fs error (device loop2): ext4_acquire_dquot:7069: comm syz.2.940: Failed to acquire dquot type 0 [ 219.410660][ T8777] loop2: lost filesystem error report for type 5 error -117 [ 219.412953][ T8777] EXT4-fs error (device loop2): mb_free_blocks:2049: group 0, inode 13: block 160:freeing already freed block (bit 10); block bitmap corrupt. [ 219.416988][ T8785] netlink: 8 bytes leftover after parsing attributes in process `syz.5.943'. [ 219.417008][ T8785] netlink: 4 bytes leftover after parsing attributes in process `syz.5.943'. [ 219.417030][ T8785] netlink: 'syz.5.943': attribute type 6 has an invalid length. [ 219.419186][ C1] EXT4-fs (loop2): error count since last fsck: 2 [ 219.419202][ C1] EXT4-fs (loop2): initial error at time 209: ext4_acquire_dquot:7069 [ 219.419220][ C1] EXT4-fs (loop2): last error at time 209: mb_free_blocks:2049: inode 13: block 160 [ 219.616617][ T8786] netlink: 8 bytes leftover after parsing attributes in process `syz.5.943'. [ 219.616810][ T8786] netlink: 4 bytes leftover after parsing attributes in process `syz.5.943'. [ 219.617106][ T8786] netlink: 'syz.5.943': attribute type 6 has an invalid length. [ 220.285496][ T8774] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 220.393601][ T8777] EXT4-fs (loop2): 1 truncate cleaned up [ 220.395909][ T8777] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 220.417927][ T8777] Quota error (device loop2): do_check_range: Getting block 64 out of range 1-5 [ 220.417966][ T8777] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0 [ 220.417985][ T8777] EXT4-fs error (device loop2): ext4_acquire_dquot:7069: comm syz.2.940: Failed to acquire dquot type 0 [ 220.604328][ T4720] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 221.000474][ T8800] loop7: detected capacity change from 0 to 4096 [ 221.039894][ T30] audit: type=1326 audit(210.783:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8798 comm="syz.7.947" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=277 compat=0 ip=0xffffa8979368 code=0x7ffc0000 [ 221.040959][ T30] audit: type=1326 audit(210.783:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8798 comm="syz.7.947" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=135 compat=0 ip=0xffffa8958078 code=0x7ffc0000 [ 221.041092][ T30] audit: type=1326 audit(210.783:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8798 comm="syz.7.947" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=435 compat=0 ip=0xffffa897a368 code=0x7ffc0000 [ 221.041640][ T30] audit: type=1326 audit(210.783:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8798 comm="syz.7.947" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=135 compat=0 ip=0xffffa89580d0 code=0x7ffc0000 [ 221.042172][ T30] audit: type=1326 audit(210.783:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8798 comm="syz.7.947" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa8979368 code=0x7ffc0000 [ 221.042222][ T30] audit: type=1326 audit(210.783:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8798 comm="syz.7.947" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa8979368 code=0x7ffc0000 [ 221.810862][ T8812] netlink: 12 bytes leftover after parsing attributes in process `syz.3.949'. [ 221.834038][ T8812] 8021q: adding VLAN 0 to HW filter on device bond5 [ 221.848319][ T8812] macvlan2: entered promiscuous mode [ 221.848343][ T8812] macvlan2: entered allmulticast mode [ 221.849539][ T8812] bond5: entered promiscuous mode [ 221.850154][ T8812] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 221.930840][ T4711] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 222.030330][ T8812] bond5: left promiscuous mode [ 222.359446][ T8820] netlink: 'syz.1.951': attribute type 1 has an invalid length. [ 222.359471][ T8820] netlink: 4 bytes leftover after parsing attributes in process `syz.1.951'. [ 222.586828][ T8828] netlink: 12 bytes leftover after parsing attributes in process `syz.1.955'. [ 223.016750][ T8841] ip_tables: iptables: counters copy to user failed while replacing table [ 223.124281][ T8844] loop5: detected capacity change from 0 to 1024 [ 223.200153][ T8844] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 223.339952][ T8853] loop3: detected capacity change from 0 to 2048 [ 223.428621][ T8855] netlink: 'syz.1.965': attribute type 4 has an invalid length. [ 223.461388][ T8853] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 223.644192][ T8863] block nbd3: Device being setup by another task [ 223.740676][ T7575] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 223.740745][ T8864] EXT4-fs error (device loop3): ext4_validate_block_bitmap:436: comm syz.3.966: bg 0: block 2: invalid block bitmap [ 223.750866][ T8864] EXT4-fs (loop3): Remounting filesystem read-only [ 223.765556][ T8852] block nbd3: shutting down sockets [ 223.906822][ T4710] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 224.097327][ T8877] FAULT_INJECTION: forcing a failure. [ 224.097327][ T8877] name failslab, interval 1, probability 0, space 0, times 0 [ 224.097358][ T8877] CPU: 0 UID: 0 PID: 8877 Comm: syz.1.973 Tainted: G L syzkaller #0 PREEMPT [ 224.097373][ T8877] Tainted: [L]=SOFTLOCKUP [ 224.097380][ T8877] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 224.097388][ T8877] Call trace: [ 224.097392][ T8877] show_stack+0x2c/0x3c (C) [ 224.097415][ T8877] __dump_stack+0x30/0x40 [ 224.097432][ T8877] dump_stack_lvl+0xd8/0x12c [ 224.097448][ T8877] dump_stack+0x1c/0x28 [ 224.097464][ T8877] should_fail_ex+0x41c/0x590 [ 224.097483][ T8877] should_failslab+0xc4/0x120 [ 224.097501][ T8877] kmem_cache_alloc_noprof+0x94/0x5d4 [ 224.097515][ T8877] security_inode_alloc+0x40/0x304 [ 224.097529][ T8877] inode_init_always_gfp+0x704/0xbac [ 224.097545][ T8877] alloc_inode+0x9c/0x198 [ 224.097560][ T8877] iget5_locked+0x5c/0xc0 [ 224.097576][ T8877] dax_dev_get+0xac/0x244 [ 224.097592][ T8877] alloc_dax+0x9c/0x130 [ 224.097605][ T8877] dm_create+0x8e4/0xd94 [ 224.097620][ T8877] dev_create+0x108/0x258 [ 224.097633][ T8877] dm_ctl_ioctl+0x884/0xbbc [ 224.097647][ T8877] __arm64_sys_ioctl+0x154/0x1cc [ 224.097665][ T8877] invoke_syscall+0x98/0x244 [ 224.097682][ T8877] el0_svc_common+0x19c/0x23c [ 224.097698][ T8877] do_el0_svc+0x4c/0x5c [ 224.097714][ T8877] el0_svc+0x64/0x260 [ 224.097736][ T8877] el0t_64_sync_handler+0x44/0x104 [ 224.097753][ T8877] el0t_64_sync+0x198/0x19c [ 224.206962][ T8882] loop5: detected capacity change from 0 to 512 [ 224.217442][ T8882] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 224.229509][ T8882] EXT4-fs (loop5): orphan cleanup on readonly fs [ 224.232529][ T8882] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:521: comm syz.5.975: Block bitmap for bg 0 marked uninitialized [ 224.232551][ T8882] loop5: lost filesystem error report for type 5 error -117 [ 224.234010][ T8882] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6680: Corrupt filesystem [ 224.234034][ T8882] loop5: lost filesystem error report for type 5 error -117 [ 224.236474][ T8882] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:521: comm syz.5.975: Block bitmap for bg 0 marked uninitialized [ 224.236498][ T8882] loop5: lost filesystem error report for type 5 error -117 [ 224.237617][ T8882] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6680: Corrupt filesystem [ 224.237641][ T8882] loop5: lost filesystem error report for type 5 error -117 [ 224.238142][ T8882] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:521: comm syz.5.975: Block bitmap for bg 0 marked uninitialized [ 224.238161][ T8882] loop5: lost filesystem error report for type 5 error -117 [ 224.238606][ T8882] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6680: Corrupt filesystem [ 224.238623][ T8882] loop5: lost filesystem error report for type 5 error -117 [ 224.239457][ T8882] EXT4-fs (loop5): 1 orphan inode deleted [ 224.275221][ T8882] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 224.328787][ T8882] EXT4-fs (loop5): warning: mounting fs with errors, running e2fsck is recommended [ 224.329329][ T8882] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 224.395056][ T8882] netlink: 12 bytes leftover after parsing attributes in process `syz.5.975'. [ 224.395695][ T8882] netlink: 12 bytes leftover after parsing attributes in process `syz.5.975'. [ 224.402557][ T8886] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:521: comm syz.5.975: Block bitmap for bg 0 marked uninitialized [ 224.690744][ T1091] kernel read not supported for file /comedi0 (pid: 1091 comm: kworker/1:3) [ 224.909735][ T8906] team0 (unregistering): Port device team_slave_0 removed [ 224.942896][ T8906] team0 (unregistering): Port device team_slave_1 removed [ 225.016995][ T8912] netlink: 60 bytes leftover after parsing attributes in process `syz.3.986'. [ 225.017065][ T8912] netlink: 8 bytes leftover after parsing attributes in process `syz.3.986'. [ 225.289050][ T8774] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:521: comm ext4lazyinit: Block bitmap for bg 0 marked uninitialized [ 225.290806][ T8774] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:521: comm ext4lazyinit: Block bitmap for bg 0 marked uninitialized [ 225.385285][ T8920] netlink: 96 bytes leftover after parsing attributes in process `syz.2.990'. [ 225.385437][ T8920] FAULT_INJECTION: forcing a failure. [ 225.385437][ T8920] name failslab, interval 1, probability 0, space 0, times 0 [ 225.385463][ T8920] CPU: 1 UID: 0 PID: 8920 Comm: syz.2.990 Tainted: G L syzkaller #0 PREEMPT [ 225.385477][ T8920] Tainted: [L]=SOFTLOCKUP [ 225.385483][ T8920] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 225.385491][ T8920] Call trace: [ 225.385496][ T8920] show_stack+0x2c/0x3c (C) [ 225.385520][ T8920] __dump_stack+0x30/0x40 [ 225.385537][ T8920] dump_stack_lvl+0xd8/0x12c [ 225.385553][ T8920] dump_stack+0x1c/0x28 [ 225.385569][ T8920] should_fail_ex+0x41c/0x590 [ 225.385587][ T8920] should_failslab+0xc4/0x120 [ 225.385605][ T8920] __kvmalloc_node_noprof+0x160/0x7fc [ 225.385620][ T8920] allocate_hook_entries_size+0x50/0xb8 [ 225.385638][ T8920] __nf_hook_entries_try_shrink+0x10c/0x2b4 [ 225.385655][ T8920] nf_hook_entries_delete_raw+0x108/0x1bc [ 225.385672][ T8920] nf_nat_unregister_fn+0x1c0/0x348 [ 225.385686][ T8920] nf_nat_ipv4_unregister_fn+0x54/0x70 [ 225.385700][ T8920] __nf_tables_unregister_hook+0x160/0x1dc [ 225.385715][ T8920] nf_tables_abort+0x1bf8/0x31b0 [ 225.385728][ T8920] nfnetlink_rcv+0x106c/0x16ec [ 225.385746][ T8920] netlink_unicast+0x600/0x7f8 [ 225.385762][ T8920] netlink_sendmsg+0x648/0x948 [ 225.385778][ T8920] __sock_sendmsg+0xc8/0x17c [ 225.385793][ T8920] ____sys_sendmsg+0x3d0/0x6c8 [ 225.385808][ T8920] ___sys_sendmsg+0x198/0x224 [ 225.385823][ T8920] __sys_sendmsg+0x158/0x204 [ 225.385838][ T8920] __arm64_sys_sendmsg+0x88/0x9c [ 225.385853][ T8920] invoke_syscall+0x98/0x244 [ 225.385871][ T8920] el0_svc_common+0x19c/0x23c [ 225.385888][ T8920] do_el0_svc+0x4c/0x5c [ 225.385904][ T8920] el0_svc+0x64/0x260 [ 225.385921][ T8920] el0t_64_sync_handler+0x44/0x104 [ 225.385937][ T8920] el0t_64_sync+0x198/0x19c [ 225.461429][ T7575] EXT4-fs error (device loop5): ext4_readdir:280: inode #2: block 13: comm syz-executor: path /51/file1: bad entry in directory: directory entry overrun - offset=92, inode=16, rec_len=196732, size=1024 fake=0 [ 225.470539][ T7575] EXT4-fs error (device loop5): ext4_lookup:1791: inode #2: comm syz-executor: deleted inode referenced: 11 [ 225.480059][ T7575] EXT4-fs error (device loop5): ext4_lookup:1791: inode #2: comm syz-executor: deleted inode referenced: 11 [ 225.672772][ T8927] binder: 8926:8927 ioctl c0306201 20000080 returned -14 [ 225.685575][ T8927] binder: 8926:8927 got transaction to invalid handle, 1 [ 225.685597][ T8927] binder: 8926:8927 cannot find target node [ 225.685626][ T8927] binder: 8926:8927 transaction call to 0:0 failed 40/29201/-22, code 0 size 112-24 line 3252 [ 225.695915][ T1091] binder: undelivered TRANSACTION_ERROR: 29201 [ 225.770629][ T8935] netlink: 12 bytes leftover after parsing attributes in process `syz.7.996'. [ 225.788080][ T8935] netlink: 8 bytes leftover after parsing attributes in process `syz.7.996'. [ 225.788102][ T8935] netlink: 4 bytes leftover after parsing attributes in process `syz.7.996'. [ 225.801822][ T8935] bridge1: port 1(veth0_to_bond) entered blocking state [ 225.801873][ T8935] bridge1: port 1(veth0_to_bond) entered disabled state [ 225.802101][ T8935] veth0_to_bond: entered allmulticast mode [ 225.804406][ T8935] veth0_to_bond: entered promiscuous mode [ 226.030127][ T8942] fuseblk: Unknown parameter '*ač0x0000000000000005' [ 226.034550][ T8942] fuseblk: Unknown parameter '*ač0x0000000000000005' [ 228.032486][ T8956] binder: 8955:8956 tried to acquire reference to desc 0, got 1 instead [ 228.032993][ T8956] binder: cannot allocate buffer [ 228.033042][ T8956] binder: 8955:8956 transaction call to 8955:0 failed 45/29201/-22, code 0 size 72-24 line 3408 [ 228.034071][ T1091] binder: undelivered TRANSACTION_ERROR: 29201 [ 228.305284][ T8959] loop7: detected capacity change from 0 to 256 [ 228.748756][ T8376] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 228.968356][ T8963] loop2: detected capacity change from 0 to 8 [ 229.323529][ T8970] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 229.325535][ T8966] FAULT_INJECTION: forcing a failure. [ 229.325535][ T8966] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 229.325561][ T8966] CPU: 0 UID: 0 PID: 8966 Comm: syz.3.1006 Tainted: G L syzkaller #0 PREEMPT [ 229.325575][ T8966] Tainted: [L]=SOFTLOCKUP [ 229.325581][ T8966] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 229.325588][ T8966] Call trace: [ 229.325592][ T8966] show_stack+0x2c/0x3c (C) [ 229.325613][ T8966] __dump_stack+0x30/0x40 [ 229.325628][ T8966] dump_stack_lvl+0xd8/0x12c [ 229.325642][ T8966] dump_stack+0x1c/0x28 [ 229.325656][ T8966] should_fail_ex+0x41c/0x590 [ 229.325671][ T8966] should_fail+0x14/0x24 [ 229.325685][ T8966] should_fail_usercopy+0x20/0x30 [ 229.325701][ T8966] _inline_copy_from_user+0x3c/0x174 [ 229.325715][ T8966] copy_msghdr_from_user+0xb8/0x194 [ 229.325736][ T8966] ___sys_sendmsg+0x14c/0x224 [ 229.325750][ T8966] __sys_sendmsg+0x158/0x204 [ 229.325764][ T8966] __arm64_sys_sendmsg+0x88/0x9c [ 229.325778][ T8966] invoke_syscall+0x98/0x244 [ 229.325792][ T8966] el0_svc_common+0x19c/0x23c [ 229.325806][ T8966] do_el0_svc+0x4c/0x5c [ 229.325819][ T8966] el0_svc+0x64/0x260 [ 229.325834][ T8966] el0t_64_sync_handler+0x44/0x104 [ 229.325847][ T8966] el0t_64_sync+0x198/0x19c [ 229.367051][ T8970] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 229.580577][ T30] kauditd_printk_skb: 574 callbacks suppressed [ 229.580594][ T30] audit: type=1326 audit(218.771:585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8971 comm="syz.7.1008" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffa8979368 code=0x0 [ 229.698862][ T8977] ip_tables: iptables: counters copy to user failed while replacing table [ 229.712775][ T8980] loop2: detected capacity change from 0 to 256 [ 229.870180][ T8985] loop1: detected capacity change from 0 to 128 [ 229.881393][ T8985] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 229.910496][ T8985] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 229.982627][ T8985] FAULT_INJECTION: forcing a failure. [ 229.982627][ T8985] name failslab, interval 1, probability 0, space 0, times 0 [ 229.982657][ T8985] CPU: 1 UID: 0 PID: 8985 Comm: syz.1.1013 Tainted: G L syzkaller #0 PREEMPT [ 229.982671][ T8985] Tainted: [L]=SOFTLOCKUP [ 229.982677][ T8985] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 229.982683][ T8985] Call trace: [ 229.982688][ T8985] show_stack+0x2c/0x3c (C) [ 229.982709][ T8985] __dump_stack+0x30/0x40 [ 229.982724][ T8985] dump_stack_lvl+0xd8/0x12c [ 229.982745][ T8985] dump_stack+0x1c/0x28 [ 229.982759][ T8985] should_fail_ex+0x41c/0x590 [ 229.982775][ T8985] should_failslab+0xc4/0x120 [ 229.982790][ T8985] kmem_cache_alloc_noprof+0x94/0x5d4 [ 229.982802][ T8985] __send_signal_locked+0x2f4/0xda8 [ 229.982818][ T8985] send_signal_locked+0x6bc/0x7ac [ 229.982832][ T8985] force_sig_info_to_task+0x288/0x438 [ 229.982847][ T8985] force_sig_fault+0xcc/0x124 [ 229.982858][ T8985] arm64_force_sig_fault+0x6c/0x80 [ 229.982875][ T8985] do_page_fault+0x424/0xb88 [ 229.982890][ T8985] do_translation_fault+0xc4/0x114 [ 229.982904][ T8985] do_mem_abort+0x70/0x194 [ 229.982916][ T8985] el0_da+0x78/0x254 [ 229.982931][ T8985] el0t_64_sync_handler+0xd8/0x104 [ 229.982945][ T8985] el0t_64_sync+0x198/0x19c [ 230.062340][ T4721] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 230.064064][ T4721] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 230.064761][ T4721] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 230.076561][ T4721] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 230.077471][ T4721] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 230.110057][ T4711] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 230.191631][ T8996] FAULT_INJECTION: forcing a failure. [ 230.191631][ T8996] name failslab, interval 1, probability 0, space 0, times 0 [ 230.191662][ T8996] CPU: 0 UID: 0 PID: 8996 Comm: syz.1.1014 Tainted: G L syzkaller #0 PREEMPT [ 230.191679][ T8996] Tainted: [L]=SOFTLOCKUP [ 230.191684][ T8996] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 230.191692][ T8996] Call trace: [ 230.191697][ T8996] show_stack+0x2c/0x3c (C) [ 230.191729][ T8996] __dump_stack+0x30/0x40 [ 230.191749][ T8996] dump_stack_lvl+0xd8/0x12c [ 230.191766][ T8996] dump_stack+0x1c/0x28 [ 230.191782][ T8996] should_fail_ex+0x41c/0x590 [ 230.191801][ T8996] should_failslab+0xc4/0x120 [ 230.191819][ T8996] kmem_cache_alloc_noprof+0x94/0x5d4 [ 230.191833][ T8996] security_inode_alloc+0x40/0x304 [ 230.191848][ T8996] inode_init_always_gfp+0x704/0xbac [ 230.191866][ T8996] alloc_inode+0x9c/0x198 [ 230.191881][ T8996] sock_alloc+0x4c/0x204 [ 230.191897][ T8996] __sock_create+0x108/0x670 [ 230.191911][ T8996] __sys_socket_create+0xc0/0x11c [ 230.191925][ T8996] __sys_socket+0x44/0xec [ 230.191939][ T8996] __arm64_sys_socket+0x84/0x9c [ 230.191954][ T8996] invoke_syscall+0x98/0x244 [ 230.191971][ T8996] el0_svc_common+0x19c/0x23c [ 230.191987][ T8996] do_el0_svc+0x4c/0x5c [ 230.192003][ T8996] el0_svc+0x64/0x260 [ 230.192019][ T8996] el0t_64_sync_handler+0x44/0x104 [ 230.192035][ T8996] el0t_64_sync+0x198/0x19c [ 230.192082][ T8996] socket: no more sockets [ 230.255138][ T8996] loop1: detected capacity change from 0 to 512 [ 230.264575][ T8996] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 230.342498][ T9001] loop3: detected capacity change from 0 to 512 [ 230.400702][ T9001] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 230.571381][ T4710] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 230.767796][ T9017] xt_hashlimit: size too large, truncated to 1048576 [ 230.892906][ T9027] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 231.100904][ T9029] loop2: detected capacity change from 0 to 512 [ 231.113592][ T9029] EXT4-fs: Mount option(s) incompatible with ext3 [ 231.424978][ T9040] loop3: detected capacity change from 0 to 512 [ 231.455429][ T9040] EXT4-fs error (device loop3): __ext4_iget:5592: inode #11: block 1: comm syz.3.1028: invalid block [ 231.455460][ T9040] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 231.456105][ T9040] EXT4-fs error (device loop3): ext4_orphan_get:1408: comm syz.3.1028: couldn't read orphan inode 11 (err -117) [ 231.456126][ T9040] loop3: lost filesystem error report for type 5 error -117 [ 231.456641][ C0] EXT4-fs (loop3): error count since last fsck: 2 [ 231.456655][ C0] EXT4-fs (loop3): initial error at time 220: __ext4_iget:5592: inode 11: block 1 [ 231.456691][ C0] EXT4-fs (loop3): last error at time 220: ext4_orphan_get:1408 [ 231.483677][ T9040] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 231.808219][ T9054] loop1: detected capacity change from 0 to 256 [ 232.045228][ T9044] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 216 vs 220 free clusters [ 232.324193][ T4721] Bluetooth: hci2: command tx timeout [ 232.747169][ T4710] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 234.248721][ T9084] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1036'. [ 234.422321][ T9089] sctp: [Deprecated]: syz.2.1037 (pid 9089) Use of struct sctp_assoc_value in delayed_ack socket option. [ 234.422321][ T9089] Use struct sctp_sack_info instead [ 234.439006][ T9089] loop2: detected capacity change from 0 to 512 [ 234.540673][ T8992] bridge0: port 1(bridge_slave_0) entered blocking state [ 234.541372][ T8992] bridge0: port 1(bridge_slave_0) entered disabled state [ 234.541627][ T8992] bridge_slave_0: entered allmulticast mode [ 234.559926][ T4721] Bluetooth: hci2: command tx timeout [ 234.563866][ T8992] bridge_slave_0: entered promiscuous mode [ 234.574684][ T8992] bridge0: port 2(bridge_slave_1) entered blocking state [ 234.574803][ T8992] bridge0: port 2(bridge_slave_1) entered disabled state [ 234.575005][ T8992] bridge_slave_1: entered allmulticast mode [ 234.586605][ T8992] bridge_slave_1: entered promiscuous mode [ 234.729717][ T9089] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 234.794176][ T8992] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 234.801829][ T8992] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 235.486391][ T8992] team0: Port device team_slave_0 added [ 235.499690][ T8992] team0: Port device team_slave_1 added [ 235.570566][ T8992] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 235.570582][ T8992] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 235.570597][ T8992] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 235.893040][ T8992] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 235.893058][ T8992] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 235.893076][ T8992] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 235.908455][ T4720] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 236.137491][ T9109] IPv6: NLM_F_CREATE should be specified when creating new route [ 236.137613][ T9109] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 236.137624][ T9109] IPv6: NLM_F_CREATE should be set when creating new route [ 236.227450][ T9116] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1045'. [ 236.227479][ T9116] block nbd0: Unsupported socket: should be TCP or UNIX. [ 236.274973][ T9109] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1044'. [ 236.300524][ T8992] hsr_slave_0: entered promiscuous mode [ 236.303052][ T8992] hsr_slave_1: entered promiscuous mode [ 236.309035][ T8992] debugfs: 'hsr0' already exists in 'hsr' [ 236.309062][ T8992] Cannot create hsr debugfs directory [ 236.757117][ T9122] netlink: 'syz.3.1047': attribute type 1 has an invalid length. [ 236.770097][ T4721] Bluetooth: hci2: command tx timeout [ 236.902657][ T9120] ipvlan0: entered promiscuous mode [ 236.902745][ T9120] ipvlan0: entered allmulticast mode [ 236.902757][ T9120] veth0_vlan: entered allmulticast mode [ 236.928453][ T9120] netlink: 'syz.3.1047': attribute type 10 has an invalid length. [ 236.928477][ T9120] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1047'. [ 237.102606][ T9138] netlink: 'syz.3.1047': attribute type 1 has an invalid length. [ 237.159601][ T9122] 8021q: adding VLAN 0 to HW filter on device bond6 [ 237.319111][ T9124] bond6: (slave veth5): Enslaving as an active interface with a down link [ 237.321289][ T9146] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1050'. [ 237.349894][ T9126] bond6: (slave dummy0): making interface the new active one [ 237.350816][ T9126] bond6: (slave dummy0): Enslaving as an active interface with an up link [ 237.356288][ T9120] dummy0: entered promiscuous mode [ 239.301732][ T9120] bond6: (slave dummy0): Releasing active interface [ 239.337372][ T4721] Bluetooth: hci2: command tx timeout [ 261.863068][ T1595] ieee802154 phy0 wpan0: encryption failed: -22 [ 261.873916][ T1595] ieee802154 phy1 wpan1: encryption failed: -22 [ 291.667332][ T4726] Bluetooth: hci3: command tx timeout [ 330.830734][ T1595] ieee802154 phy0 wpan0: encryption failed: -22 [ 330.844259][ T1595] ieee802154 phy1 wpan1: encryption failed: -22 [ 366.809256][ T4726] Bluetooth: hci2: command 0x0406 tx timeout [ 400.525139][ T1595] ieee802154 phy0 wpan0: encryption failed: -22 [ 400.536282][ T1595] ieee802154 phy1 wpan1: encryption failed: -22 [ 410.409381][ T31] INFO: task kworker/u8:0:12 blocked for more than 153 seconds. [ 410.409405][ T31] Tainted: G L syzkaller #0 [ 410.409415][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 410.409422][ T31] task:kworker/u8:0 state:D stack:0 pid:12 tgid:12 ppid:2 task_flags:0x4208060 flags:0x00000410 [ 410.409445][ T31] Workqueue: events_unbound linkwatch_event [ 410.409472][ T31] Call trace: [ 410.409478][ T31] __switch_to+0x2b4/0x6e4 (T) [ 410.409496][ T31] __schedule+0x1370/0x2d80 [ 410.409511][ T31] schedule+0x13c/0x20c [ 410.409525][ T31] schedule_preempt_disabled+0x18/0x2c [ 410.409540][ T31] __mutex_lock+0x4ec/0xf14 [ 410.409554][ T31] mutex_lock_nested+0x24/0x30 [ 410.409569][ T31] rtnl_lock+0x20/0x2c [ 410.409585][ T31] linkwatch_event+0x14/0x68 [ 410.409600][ T31] process_scheduled_works+0x91c/0x1250 [ 410.409616][ T31] worker_thread+0x798/0xbd0 [ 410.409631][ T31] kthread+0x304/0x3d4 [ 410.409645][ T31] ret_from_fork+0x10/0x20 [ 410.409752][ T31] INFO: task kworker/0:6:4886 blocked for more than 153 seconds. [ 410.409762][ T31] Tainted: G L syzkaller #0 [ 410.409770][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 410.409776][ T31] task:kworker/0:6 state:D stack:0 pid:4886 tgid:4886 ppid:2 task_flags:0x4208060 flags:0x00000410 [ 410.409796][ T31] Workqueue: events netdev_work_proc [ 410.409815][ T31] Call trace: [ 410.409821][ T31] __switch_to+0x2b4/0x6e4 (T) [ 410.409836][ T31] __schedule+0x1370/0x2d80 [ 410.409850][ T31] schedule+0x13c/0x20c [ 410.409864][ T31] schedule_preempt_disabled+0x18/0x2c [ 410.409878][ T31] __mutex_lock+0x4ec/0xf14 [ 410.409893][ T31] mutex_lock_nested+0x24/0x30 [ 410.409908][ T31] rtnl_lock+0x20/0x2c [ 410.409924][ T31] netdev_work_proc+0x7c/0x6d8 [ 410.409938][ T31] process_scheduled_works+0x91c/0x1250 [ 410.409953][ T31] worker_thread+0x798/0xbd0 [ 410.409968][ T31] kthread+0x304/0x3d4 [ 410.409982][ T31] ret_from_fork+0x10/0x20 [ 410.410031][ T31] INFO: task syz-executor:8992 blocked for more than 153 seconds. [ 410.410040][ T31] Tainted: G L syzkaller #0 [ 410.410048][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 410.410055][ T31] task:syz-executor state:D stack:0 pid:8992 tgid:8992 ppid:8973 task_flags:0x400140 flags:0x00800400 [ 410.410073][ T31] Call trace: [ 410.410079][ T31] __switch_to+0x2b4/0x6e4 (T) [ 410.410095][ T31] __schedule+0x1370/0x2d80 [ 410.410109][ T31] schedule+0x13c/0x20c [ 410.410122][ T31] schedule_preempt_disabled+0x18/0x2c [ 410.410137][ T31] __mutex_lock+0x4ec/0xf14 [ 410.410151][ T31] mutex_lock_nested+0x24/0x30 [ 410.410166][ T31] rtnl_nets_lock+0x38/0x10c [ 410.410180][ T31] rtnl_newlink+0x8ac/0x138c [ 410.410193][ T31] rtnetlink_rcv_msg+0x66c/0x9bc [ 410.410207][ T31] netlink_rcv_skb+0x238/0x414 [ 410.410223][ T31] rtnetlink_rcv+0x28/0x38 [ 410.410236][ T31] netlink_unicast+0x600/0x7f8 [ 410.410251][ T31] netlink_sendmsg+0x648/0x948 [ 410.410266][ T31] __sock_sendmsg+0xc8/0x17c [ 410.410281][ T31] __sys_sendto+0x250/0x328 [ 410.410295][ T31] __arm64_sys_sendto+0xec/0x10c [ 410.410310][ T31] invoke_syscall+0x98/0x244 [ 410.410326][ T31] el0_svc_common+0x19c/0x23c [ 410.410342][ T31] do_el0_svc+0x4c/0x5c [ 410.410357][ T31] el0_svc+0x64/0x260 [ 410.410372][ T31] el0t_64_sync_handler+0x44/0x104 [ 410.410388][ T31] el0t_64_sync+0x198/0x19c [ 410.410405][ T31] INFO: task syz.3.1047:9128 blocked for more than 153 seconds. [ 410.410415][ T31] Tainted: G L syzkaller #0 [ 410.410422][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 410.410429][ T31] task:syz.3.1047 state:D stack:0 pid:9128 tgid:9118 ppid:4710 task_flags:0x400140 flags:0x00000411 [ 410.410448][ T31] Call trace: [ 410.410454][ T31] __switch_to+0x2b4/0x6e4 (T) [ 410.410468][ T31] __schedule+0x1370/0x2d80 [ 410.410482][ T31] schedule+0x13c/0x20c [ 410.410496][ T31] schedule_preempt_disabled+0x18/0x2c [ 410.410511][ T31] __mutex_lock+0x4ec/0xf14 [ 410.410525][ T31] mutex_lock_nested+0x24/0x30 [ 410.410539][ T31] rtnl_lock+0x20/0x2c [ 410.410555][ T31] devinet_ioctl+0x2b0/0x1788 [ 410.410569][ T31] inet_ioctl+0x304/0x42c [ 410.410583][ T31] packet_ioctl+0x1c8/0x404 [ 410.410598][ T31] sock_do_ioctl+0x100/0x254 [ 410.410613][ T31] sock_ioctl+0x55c/0x7ec [ 410.410628][ T31] __arm64_sys_ioctl+0x154/0x1cc [ 410.410646][ T31] invoke_syscall+0x98/0x244 [ 410.410662][ T31] el0_svc_common+0x19c/0x23c [ 410.410677][ T31] do_el0_svc+0x4c/0x5c [ 410.410693][ T31] el0_svc+0x64/0x260 [ 410.410708][ T31] el0t_64_sync_handler+0x44/0x104 [ 410.410723][ T31] el0t_64_sync+0x198/0x19c [ 410.410741][ T31] INFO: task syz.3.1047:9138 blocked for more than 153 seconds. [ 410.410751][ T31] Tainted: G L syzkaller #0 [ 410.410758][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 410.410765][ T31] task:syz.3.1047 state:D stack:0 pid:9138 tgid:9118 ppid:4710 task_flags:0x400140 flags:0x00800401 [ 410.410784][ T31] Call trace: [ 410.410790][ T31] __switch_to+0x2b4/0x6e4 (T) [ 410.410804][ T31] __schedule+0x1370/0x2d80 [ 410.410818][ T31] schedule+0x13c/0x20c [ 410.410832][ T31] schedule_preempt_disabled+0x18/0x2c [ 410.410846][ T31] __mutex_lock+0x4ec/0xf14 [ 410.410860][ T31] mutex_lock_nested+0x24/0x30 [ 410.410875][ T31] rtnl_nets_lock+0x38/0x10c [ 410.410889][ T31] rtnl_newlink+0x8ac/0x138c [ 410.410902][ T31] rtnetlink_rcv_msg+0x66c/0x9bc [ 410.410916][ T31] netlink_rcv_skb+0x238/0x414 [ 410.410931][ T31] rtnetlink_rcv+0x28/0x38 [ 410.410945][ T31] netlink_unicast+0x600/0x7f8 [ 410.410959][ T31] netlink_sendmsg+0x648/0x948 [ 410.410974][ T31] __sock_sendmsg+0xc8/0x17c [ 410.410988][ T31] ____sys_sendmsg+0x3d0/0x6c8 [ 410.411003][ T31] ___sys_sendmsg+0x198/0x224 [ 410.411018][ T31] __sys_sendmsg+0x158/0x204 [ 410.411033][ T31] __arm64_sys_sendmsg+0x88/0x9c [ 410.411047][ T31] invoke_syscall+0x98/0x244 [ 410.411063][ T31] el0_svc_common+0x19c/0x23c [ 410.411079][ T31] do_el0_svc+0x4c/0x5c [ 410.411094][ T31] el0_svc+0x64/0x260 [ 410.411110][ T31] el0t_64_sync_handler+0x44/0x104 [ 410.411125][ T31] el0t_64_sync+0x198/0x19c [ 410.411140][ T31] INFO: task syz.3.1047:9139 blocked for more than 153 seconds. [ 410.411149][ T31] Tainted: G L syzkaller #0 [ 410.411156][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 410.411163][ T31] task:syz.3.1047 state:D stack:0 pid:9139 tgid:9118 ppid:4710 task_flags:0x400140 flags:0x00800401 [ 410.411181][ T31] Call trace: [ 410.411187][ T31] __switch_to+0x2b4/0x6e4 (T) [ 410.411201][ T31] __schedule+0x1370/0x2d80 [ 410.411215][ T31] schedule+0x13c/0x20c [ 410.411229][ T31] schedule_preempt_disabled+0x18/0x2c [ 410.411244][ T31] __mutex_lock+0x4ec/0xf14 [ 410.411258][ T31] mutex_lock_nested+0x24/0x30 [ 410.411273][ T31] rtnl_nets_lock+0x38/0x10c [ 410.411287][ T31] rtnl_newlink+0x8ac/0x138c [ 410.411300][ T31] rtnetlink_rcv_msg+0x66c/0x9bc [ 410.411314][ T31] netlink_rcv_skb+0x238/0x414 [ 410.411329][ T31] rtnetlink_rcv+0x28/0x38 [ 410.411342][ T31] netlink_unicast+0x600/0x7f8 [ 410.411356][ T31] netlink_sendmsg+0x648/0x948 [ 410.411371][ T31] __sock_sendmsg+0xc8/0x17c [ 410.411385][ T31] ____sys_sendmsg+0x3d0/0x6c8 [ 410.411400][ T31] ___sys_sendmsg+0x198/0x224 [ 410.411415][ T31] __sys_sendmsg+0x158/0x204 [ 410.411429][ T31] __arm64_sys_sendmsg+0x88/0x9c [ 410.411445][ T31] invoke_syscall+0x98/0x244 [ 410.411461][ T31] el0_svc_common+0x19c/0x23c [ 410.411476][ T31] do_el0_svc+0x4c/0x5c [ 410.411492][ T31] el0_svc+0x64/0x260 [ 410.411507][ T31] el0t_64_sync_handler+0x44/0x104 [ 410.411522][ T31] el0t_64_sync+0x198/0x19c [ 410.411537][ T31] [ 410.411537][ T31] Showing all locks held in the system: [ 410.411545][ T31] locks held by kthreadd/2: 1, last CPU#0: [ 410.411554][ T31] #0: ffff800088ea3130 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x48/0x64 [ 410.411601][ T31] locks held by kworker/0:0/9: 2, last CPU#0: [ 410.411610][ T31] #0: ffff0000eea91140 ((wq_completion)wg-kex-wg0#8){+.+.}-{0:0}, at: process_scheduled_works+0x8c8/0x1250 [ 410.411659][ T31] #1: ffff80008ecd7c40 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x8d0/0x1250 [ 410.411707][ T31] locks held by kworker/0:1/10: 2, last CPU#0: [ 410.411716][ T31] #0: ffff0000da4ead40 ((wq_completion)wg-kex-wg2#14){+.+.}-{0:0}, at: process_scheduled_works+0x8c8/0x1250 [ 410.411768][ T31] #1: ffff80008ece7c40 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x8d0/0x1250 [ 410.411815][ T31] locks held by kworker/u8:0/12: 3, on CPU#0: [ 410.411824][ T31] #0: ffff0000c004c140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x8c8/0x1250 [ 410.411866][ T31] #1: ffff80008ed07c40 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x8d0/0x1250 [ 410.411910][ T31] #2: ffff800089e8b580 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_lock+0x20/0x2c [ 410.411954][ T31] locks held by kworker/u8:1/14: 3, last CPU#0: [ 410.411962][ T31] #0: ffff0000c004c140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x8c8/0x1250 [ 410.412005][ T31] #1: ffff80008ed27c40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x8d0/0x1250 [ 410.412048][ T31] #2: ffff0000f04f0258 (&devlink->lock_key#4){+.+.}-{4:4}, at: devl_trylock+0x24/0x34 [ 410.412098][ T31] locks held by khungtaskd/31: 1, last CPU#0: [ 410.412107][ T31] #0: ffff800088d82260 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x4c/0x188 [ 410.412151][ T31] locks held by kworker/u8:2/40: 3, last CPU#0: [ 410.412160][ T31] #0: ffff0000c004c140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x8c8/0x1250 [ 410.412202][ T31] #1: ffff80008efe7c40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x8d0/0x1250 [ 410.412246][ T31] #2: ffff0000de060800 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xd0/0x588 [ 410.412289][ T31] locks held by kworker/u8:3/54: 3, last CPU#1: [ 410.412298][ T31] #0: ffff0000c004c140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x8c8/0x1250 [ 410.412340][ T31] #1: ffff800090337c40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x8d0/0x1250 [ 410.412383][ T31] #2: ffff0000c790b258 (&devlink->lock_key#7){+.+.}-{4:4}, at: devl_trylock+0x24/0x34 [ 410.412432][ T31] locks held by kworker/u8:5/640: 3, last CPU#1: [ 410.412441][ T31] #0: ffff0000c004c140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x8c8/0x1250 [ 410.412483][ T31] #1: ffff8000942f7c40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x8d0/0x1250 [ 410.412526][ T31] #2: ffff0000f2250800 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xd0/0x588 [ 410.412568][ T31] locks held by kworker/1:3/1091: 3, on CPU#1: [ 410.412577][ T31] #0: ffff0000c002b540 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x8c8/0x1250 [ 410.412619][ T31] #1: ffff800095877c40 (deferred_process_work){+.+.}-{0:0}, at: process_scheduled_works+0x8d0/0x1250 [ 410.412662][ T31] #2: ffff800089e8b580 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_lock+0x20/0x2c [ 410.412706][ T31] locks held by kworker/0:2/1158: 2, last CPU#0: [ 410.412715][ T31] #0: ffff0000ef6a1540 ((wq_completion)wg-kex-wg0#14){+.+.}-{0:0}, at: process_scheduled_works+0x8c8/0x1250 [ 410.412766][ T31] #1: ffff800095b97c40 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x8d0/0x1250 [ 410.412813][ T31] locks held by kworker/u8:6/1215: 3, last CPU#0: [ 410.412822][ T31] #0: ffff0000c004c140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x8c8/0x1250 [ 410.412864][ T31] #1: ffff800095d27c40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x8d0/0x1250 [ 410.412907][ T31] #2: ffff0000efaf6258 (&devlink->lock_key#2){+.+.}-{4:4}, at: devl_trylock+0x24/0x34 [ 410.412954][ T31] locks held by kworker/1:4/1502: 2, last CPU#1: [ 410.412963][ T31] #0: ffff0000ef6a1540 ((wq_completion)wg-kex-wg0#14){+.+.}-{0:0}, at: process_scheduled_works+0x8c8/0x1250 [ 410.413011][ T31] #1: ffff800096437c40 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x8d0/0x1250 [ 410.413061][ T31] locks held by kworker/u8:10/3246: 3, last CPU#0: [ 410.413070][ T31] #0: ffff0000c004c140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x8c8/0x1250 [ 410.413112][ T31] #1: ffff80009a4b7c40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x8d0/0x1250 [ 410.413155][ T31] #2: ffff0000f16b0800 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xd0/0x588 [ 410.413196][ T31] locks held by klogd/4334: 1, last CPU#1: [ 410.413205][ T31] #0: ffff800088ea3130 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x48/0x64 [ 410.413248][ T31] locks held by udevd/4345: 2, last CPU#1: [ 410.413256][ T31] #0: ffff8000890d1638 (tomoyo_ss){.+.+}-{0:0}, at: tomoyo_path_perm+0x208/0x460 [ 410.413300][ T31] #1: ffff800088ea3130 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x48/0x64 [ 410.413343][ T31] locks held by dhcpcd/4402: 1, last CPU#0: [ 410.413352][ T31] #0: ffff800088ea3130 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x48/0x64 [ 410.413395][ T31] locks held by getty/4492: 2, on CPU#0: [ 410.413403][ T31] #0: ffff0000d12310a0 (&tty->ldisc_sem){++++}-{0:0}, at: ldsem_down_read+0x3c/0x4c [ 410.413447][ T31] #1: ffff80009257e2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x348/0xf78 [ 410.413492][ T31] locks held by udevd/4703: 2, on CPU#0: [ 410.413500][ T31] #0: ffff0000d39c3a78 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x228/0xad4 [ 410.413543][ T31] #1: ffff0000d168d280 (&anon_vma->rwsem){++++}-{4:4}, at: unlink_anon_vmas+0xec/0x5c8 [ 410.413588][ T31] locks held by udevd/4704: 2, on CPU#1: [ 410.413596][ T31] #0: ffff0000d39c2f78 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x228/0xad4 [ 410.413638][ T31] #1: ffff0000d168d280 (&anon_vma->rwsem){++++}-{4:4}, at: unlink_anon_vmas+0xec/0x5c8 [ 410.413682][ T31] locks held by syz-executor/4720: 3, last CPU#1: [ 410.413690][ T31] #0: ffff0000cc1e4460 (sb_writers#5){.+.+}-{0:0}, at: mnt_want_write+0x44/0x9c [ 410.413741][ T31] #1: ffff0000cbf3d0f0 (&type->i_mutex_dir_key#5/1){+.+.}-{4:4}, at: __start_dirop+0xa0/0xf4 [ 410.413795][ T31] #2: ffff800088ea3130 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x48/0x64 [ 410.413840][ T31] locks held by kworker/0:5/4818: 2, last CPU#0: [ 410.413848][ T31] #0: ffff0000c002b540 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x8c8/0x1250 [ 410.413891][ T31] #1: ffff800096837c40 ((debug_obj_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x8d0/0x1250 [ 410.413934][ T31] locks held by kworker/0:6/4886: 3, on CPU#0: [ 410.413943][ T31] #0: ffff0000c002b540 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x8c8/0x1250 [ 410.413985][ T31] #1: ffff800095ac7c40 (netdev_work){+.+.}-{0:0}, at: process_scheduled_works+0x8d0/0x1250 [ 410.414027][ T31] #2: ffff800089e8b580 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_lock+0x20/0x2c [ 410.414071][ T31] locks held by udevd/4908: 2, last CPU#0: [ 410.414080][ T31] #0: ffff0000f124e9c0 (&sb->s_type->i_mutex_key#12){+.+.}-{4:4}, at: __sock_release+0x7c/0x1d4 [ 410.414128][ T31] #1: ffff800089ef1048 ((netlink_chain).rwsem){++++}-{4:4}, at: blocking_notifier_call_chain+0x58/0xa0 [ 410.414172][ T31] locks held by udevd/5262: 2, last CPU#0: [ 410.414180][ T31] #0: ffff0000f117d2c0 (&sb->s_type->i_mutex_key#12){+.+.}-{4:4}, at: __sock_release+0x7c/0x1d4 [ 410.414228][ T31] #1: ffff800089ef1048 ((netlink_chain).rwsem){++++}-{4:4}, at: blocking_notifier_call_chain+0x58/0xa0 [ 410.414272][ T31] locks held by udevd/5368: 2, last CPU#1: [ 410.414280][ T31] #0: ffff0000cfb1c578 (&mm->mmap_lock){++++}-{4:4}, at: vms_complete_munmap_vmas+0x1d0/0x930 [ 410.414323][ T31] #1: ffff0000d168d280 (&anon_vma->rwsem){++++}-{4:4}, at: validate_mm+0x1a4/0x438 [ 410.414367][ T31] locks held by udevd/5524: 1, last CPU#0: [ 410.414375][ T31] #0: ffff0000c3000378 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x228/0xad4 [ 410.414417][ T31] locks held by udevd/5625: 2, on CPU#0: [ 410.414426][ T31] #0: ffff0000db69c578 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x228/0xad4 [ 410.414467][ T31] #1: ffff0000d168d280 (&anon_vma->rwsem){++++}-{4:4}, at: __put_anon_vma+0xec/0x2cc [ 410.414513][ T31] locks held by kworker/u8:13/6095: 4, last CPU#0: [ 410.414522][ T31] #0: ffff0000d538c940 ((wq_completion)wg-kex-wg0){+.+.}-{0:0}, at: process_scheduled_works+0x8c8/0x1250 [ 410.414564][ T31] #1: ffff800094117c40 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x8d0/0x1250 [ 410.428665][ T31] #2: ffff0000d5399440 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0xe8/0x484 [ 410.428714][ T31] #3: ffff0000d69a6640 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0xf0/0x484 [ 410.428769][ T31] locks held by kworker/u8:14/6096: 3, last CPU#0: [ 410.428778][ T31] #0: ffff0000c004c140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x8c8/0x1250 [ 410.428821][ T31] #1: ffff800094107c40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x8d0/0x1250 [ 410.428864][ T31] #2: ffff0000ce953258 (&devlink->lock_key#9){+.+.}-{4:4}, at: devl_trylock+0x24/0x34 [ 410.428914][ T31] locks held by kworker/u8:15/6097: 2, last CPU#0: [ 410.428923][ T31] #0: ffff0000c004b940 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x8c8/0x1250 [ 410.428965][ T31] #1: ffff800094037c40 ((gc_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x8d0/0x1250 [ 410.429008][ T31] locks held by kworker/u8:16/6098: 2, last CPU#1: [ 410.429017][ T31] #0: ffff0000c004b940 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x8c8/0x1250 [ 410.429060][ T31] #1: ffff800094027c40 ((work_completion)(&(&tbl->gc_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x8d0/0x1250 [ 410.429103][ T31] locks held by kworker/u8:19/6101: 3, last CPU#0: [ 410.429112][ T31] #0: ffff0000c004c140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x8c8/0x1250 [ 410.429154][ T31] #1: ffff800093ff7c40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x8d0/0x1250 [ 410.429197][ T31] #2: ffff0000d82ca258 (&devlink->lock_key#5){+.+.}-{4:4}, at: devl_trylock+0x24/0x34 [ 410.429245][ T31] locks held by kworker/u8:20/6102: 3, last CPU#0: [ 410.429254][ T31] #0: ffff0000c004c140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x8c8/0x1250 [ 410.429296][ T31] #1: ffff800093fe7c40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x8d0/0x1250 [ 410.429339][ T31] #2: ffff0000f2080800 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xd0/0x588 [ 410.429381][ T31] locks held by kworker/u8:22/6104: 3, last CPU#1: [ 410.429390][ T31] #0: ffff0000c004c140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x8c8/0x1250 [ 410.429432][ T31] #1: ffff800093fc7c40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x8d0/0x1250 [ 410.429476][ T31] #2: ffff0000fab5d258 (&devlink->lock_key#8){+.+.}-{4:4}, at: devl_trylock+0x24/0x34 [ 410.429523][ T31] locks held by kworker/u8:25/6108: 3, last CPU#0: [ 410.429532][ T31] #0: ffff0000c004c140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x8c8/0x1250 [ 410.429574][ T31] #1: ffff800099a67c40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x8d0/0x1250 [ 410.429617][ T31] #2: ffff0000ef16a258 (&devlink->lock_key){+.+.}-{4:4}, at: devl_trylock+0x24/0x34 [ 410.429660][ T31] locks held by kworker/u8:27/6110: 3, last CPU#1: [ 410.429669][ T31] #0: ffff0000c004b940 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x8c8/0x1250 [ 410.429711][ T31] #1: ffff800093857c40 ((work_completion)(&(&gc_work->dwork)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x8d0/0x1250 [ 410.429757][ T31] #2: ffff800088d82260 (rcu_read_lock){....}-{1:3}, at: gc_worker+0x210/0x144c [ 410.429804][ T31] locks held by syz-executor/7453: 2, last CPU#0: [ 410.429812][ T31] #0: ffff8000890d1638 (tomoyo_ss){.+.+}-{0:0}, at: tomoyo_path_number_perm+0x1e0/0x500 [ 410.429855][ T31] #1: ffff800088ea3130 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x48/0x64 [ 410.429905][ T31] locks held by kworker/u8:32/8459: 3, on CPU#0: [ 410.429913][ T31] #0: ffff0000cb97d140 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x8c8/0x1250 [ 410.429956][ T31] #1: ffff800095197c40 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x8d0/0x1250 [ 410.429999][ T31] #2: ffff800089e8b580 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_lock+0x20/0x2c [ 410.430043][ T31] locks held by kworker/u8:33/8460: 3, last CPU#1: [ 410.430052][ T31] #0: ffff0000ce461140 ((wq_completion)bat_events){+.+.}-{0:0}, at: process_scheduled_works+0x8c8/0x1250 [ 410.430095][ T31] #1: ffff800095187c40 ((work_completion)(&(&bat_priv->tt.work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x8d0/0x1250 [ 410.430138][ T31] #2: ffff800088d82260 (rcu_read_lock){....}-{1:3}, at: process_backlog+0x558/0x16f8 [ 410.430179][ T31] locks held by kworker/u8:34/8461: 3, last CPU#0: [ 410.430188][ T31] #0: ffff0000c004c140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x8c8/0x1250 [ 410.430230][ T31] #1: ffff800095167c40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x8d0/0x1250 [ 410.430273][ T31] #2: ffff0000dda70800 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xd0/0x588 [ 410.430314][ T31] locks held by kworker/u8:36/8464: 3, last CPU#0: [ 410.430323][ T31] #0: ffff0000c004c140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x8c8/0x1250 [ 410.430365][ T31] #1: ffff800094887c40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x8d0/0x1250 [ 410.430409][ T31] #2: ffff0000d7b41258 (&devlink->lock_key#3){+.+.}-{4:4}, at: devl_trylock+0x24/0x34 [ 410.430456][ T31] locks held by kworker/u8:37/8466: 2, last CPU#0: [ 410.430465][ T31] #0: ffff0000dc111140 ((wq_completion)wg-kex-wg0#7){+.+.}-{0:0}, at: process_scheduled_works+0x8c8/0x1250 [ 410.430513][ T31] #1: ffff800094847c40 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x8d0/0x1250 [ 410.430557][ T31] locks held by kworker/u8:38/8467: 3, last CPU#0: [ 410.430566][ T31] #0: ffff0000c004c140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x8c8/0x1250 [ 410.430607][ T31] #1: ffff800094837c40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x8d0/0x1250 [ 410.430650][ T31] #2: ffff0000fcc40800 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xd0/0x588 [ 410.430692][ T31] locks held by kworker/u8:39/8468: 4, last CPU#0: [ 410.430701][ T31] #0: ffff0000d538c140 ((wq_completion)wg-kex-wg1){+.+.}-{0:0}, at: process_scheduled_works+0x8c8/0x1250 [ 410.430747][ T31] #1: ffff800094827c40 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x8d0/0x1250 [ 410.430789][ T31] #2: ffff0000cefb5440 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0xe8/0x484 [ 410.430834][ T31] #3: ffff0000d69a5c58 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0xf0/0x484 [ 410.430880][ T31] locks held by syz-executor/8992: 2, on CPU#0: [ 410.430888][ T31] #0: ffff8000895e6768 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x17c/0x26c [ 410.430935][ T31] #1: ffff800089e8b580 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_nets_lock+0x38/0x10c [ 410.430979][ T31] locks held by syz.3.1047/9120: 2, last CPU#0: [ 410.430987][ T31] #0: ffff800089e8b580 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_nets_lock+0x38/0x10c [ 410.431029][ T31] #1: ffff800088ea3130 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x48/0x64 [ 410.431072][ T31] locks held by syz.3.1047/9128: 1, on CPU#0: [ 410.431080][ T31] #0: ffff800089e8b580 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_lock+0x20/0x2c [ 410.431124][ T31] locks held by syz.3.1047/9138: 2, on CPU#0: [ 410.431133][ T31] #0: ffff800088b9b720 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x17c/0x26c [ 410.431180][ T31] #1: ffff800089e8b580 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_nets_lock+0x38/0x10c [ 410.431222][ T31] locks held by syz.3.1047/9139: 2, on CPU#0: [ 410.431230][ T31] #0: ffff8000895e6768 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x17c/0x26c [ 410.431277][ T31] #1: ffff800089e8b580 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_nets_lock+0x38/0x10c [ 410.431319][ T31] locks held by syz-executor/9148: 1, last CPU#0: [ 410.431328][ T31] #0: ffff800088ea3130 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x48/0x64 [ 410.431371][ T31] [ 410.431377][ T31] ============================================= [ 410.431377][ T31] [ 410.431386][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 410.870748][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT [ 410.872560][ T31] Tainted: [L]=SOFTLOCKUP [ 410.873322][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 410.875047][ T31] Call trace: [ 410.875650][ T31] show_stack+0x2c/0x3c (C) [ 410.876495][ T31] __dump_stack+0x30/0x40 [ 410.877289][ T31] dump_stack_lvl+0x30/0x12c [ 410.878166][ T31] dump_stack+0x1c/0x28 [ 410.878950][ T31] vpanic+0x594/0xaf8 [ 410.879688][ T31] vpanic+0x0/0xaf8 [ 410.880396][ T31] hung_task_panic+0x0/0x2c [ 410.881234][ T31] kthread+0x304/0x3d4 [ 410.882016][ T31] ret_from_fork+0x10/0x20 [ 410.882802][ T31] SMP: stopping secondary CPUs [ 410.883708][ T31] Kernel Offset: disabled [ 410.884455][ T31] CPU features: 0x0,a0000000,00f00020,9c080a02,a84ff6a7 [ 410.885683][ T31] Memory Limit: none [ 411.275626][ T31] Rebooting in 86400 seconds..