last executing test programs: 52.371043006s ago: executing program 1 (id=436): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000002540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x101000000000007, &(0x7f0000000740)={0xffffffffffffffff}, 0x2, 0x4}}, 0x20) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r2, &(0x7f0000002f40)={0x0, 0x0, &(0x7f0000002f00)={&(0x7f0000002e80)={0x14, 0x2, 0x2, 0x201, 0x0, 0x0, {0xa, 0x0, 0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) (async) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000280)={0x15, 0x110, 0xfa00, {r1, 0x0, 0x0, 0x30, 0x0, @in={0x1b, 0xfffc, @multicast1}, @ib={0x1b, 0x0, 0x0, {}, 0xfffffffffffffffc, 0x100000000000001, 0x2}}}, 0x118) (async) io_uring_register$IORING_REGISTER_QUERY(0xffffffffffffffff, 0x23, &(0x7f0000003200), 0x0) 52.267218152s ago: executing program 1 (id=439): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) capset(0x0, 0x0) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000280000002800000005000000030000000200000f0000000407000300000000000200002d02000000020000f5ffffff030000000000000061"], &(0x7f0000000f40)=""/4110, 0x45, 0x100e, 0x9}, 0x28) 52.246026383s ago: executing program 1 (id=440): socket$netlink(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="020000004a0fa331c90400000008000000010000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x3b, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000008000b70500000800000085000000a500000095b57ba4dc15fd3300000002000008"], &(0x7f00000001c0)='syzkaller\x00', 0x400, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = landlock_create_ruleset(&(0x7f0000000080)={0xc0d8, 0x1, 0x3}, 0x18, 0x0) (async) prlimit64(0x0, 0xc, &(0x7f0000000140)={0x4, 0x8b}, 0x0) (async, rerun: 32) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) (async, rerun: 32) r3 = getpid() sched_setscheduler(r3, 0x5, &(0x7f0000000180)=0x6) (async, rerun: 64) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async, rerun: 64) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) (async) r5 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r5, &(0x7f0000000040)={0xa, 0xfffd, 0xe9, @mcast1, 0x5}, 0x1c) sendmsg(r5, &(0x7f00000000c0)={0x0, 0x952c, &(0x7f0000000100)=[{&(0x7f0000000000)="2b10", 0xffbd}], 0x1, 0x0, 0x0, 0x2c}, 0x4) (async) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) (async) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x6) (async) r6 = socket(0x10, 0x80000, 0x400) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x18, &(0x7f0000000000)=0xff, 0x4) connect$inet6(r7, &(0x7f0000000340)={0xa, 0x5, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffffe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r7, 0x6, 0x1f, &(0x7f00000000c0), 0x4) (async, rerun: 32) setsockopt$inet6_tcp_TLS_TX(r7, 0x11a, 0x1, &(0x7f0000000480)=@gcm_256={{0x303}, "000200", "e123c5876ff425b1ebe250a8486be34705f4f827ae60ecb65e528248d5552bff", "7e25837b", "15d0db2c77179e1a"}, 0x38) (rerun: 32) write$binfmt_script(r7, &(0x7f0000000500)={'#! ', './file0'}, 0xb) (async, rerun: 64) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r7, 0x6, 0x23, 0x0, &(0x7f0000000240)) (async, rerun: 64) writev(r7, 0x0, 0x0) close_range(r6, r7, 0x0) (async, rerun: 64) landlock_restrict_self(r2, 0x0) (rerun: 64) 51.372352716s ago: executing program 1 (id=448): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_COMPAT_GET(r0, &(0x7f0000008240)={0x0, 0x0, &(0x7f0000008200)={&(0x7f0000008180)={0x30, 0x0, 0xb, 0x101, 0x0, 0x0, {0x3}, [@NFTA_COMPAT_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_COMPAT_NAME={0x9, 0x1, 'SNAT\x00'}, @NFTA_COMPAT_REV={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x40000c0) newfstatat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x6000) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000340)='./file0\x00', 0x210000, &(0x7f0000000400)={[{@nobarrier}, {@dioread_lock}, {@barrier_val}, {@nolazytime}, {@dax_inode}, {@lazytime}, {@dax_inode}, {@resgid={'resgid', 0x3d, r1}}, {@bh}, {@debug}]}, 0xfc, 0x56f, &(0x7f0000003780)="$eJzs3d9rW1UcAPDvTdPup66DMdQHGezByVy6tv6YIDgfRYcDfZ+hzcpouowmHWsduD24F19kCCIOxD/Adx+H/4B/xUAHQ0bRBxEiN73psjZp2i4z2fL5wG3Pyb23535z7vf2nNyEBDC0jqU/chEvR8Q3ScShlnX5yFYeW9tu9eH1mXRJol7/9M8kkuyx5vZJ9vtAVnkpIn79KuJkbnO71eWV+WK5XFrM6hO1hSsT1eWVU5cWinOludLlqenpM29NT737zts9i/X1839//8ndD898fXz1u5/vH76dxNk4mK1rjeMJ3GitHCv+m5VG4+yGDSd70NggSfp9AOzKSJbno5FeAw7FSJb1wPPvy4ioA0Mqkf8wpJrjgObcvkfz4GfGgw/WJkCN2Mda48+vvTYSextzo/2ryWMzo3S+O96D9tM2fvnjzu10ia1fh9jXpQ6wIzduRsTpfH7z9T/Jrn+7d7rx4vHWNrYxbP9/oJ/upuOfN9qN/3Lr459oM/450CZ3d6N7/ufu96CZjtLx33ttx7/rl67xkaz2QmPMN5pcvFQunY6IFyPiRNS73vo4s3qv3mld6/gvXdL2m2PB7Dju5/c8vs9ssVaMiLFdhvyYBzcjXsm3iz9Z7/+kTf+nz8f5bbZxtHTn1U7rusf/dNV/initbf8/6tZk6/uTE43zYaJ5Vmz2162jv3Vqv9/xp/2/f+v4x5PW+7XVnbfx495/Sp3W7fb8H0s+a5SbSXCtWKstTkaMJR9vfnzq0b7NenP7NP4Tx7e+/rU7/9PJ1+fbjP/WkVsdNx2E/p/dUf/vvHDvoy9+6NT+9vr/zUbpRPZIdv1rLztXtnuAT/r8AQAAAAAAwCDJRcTBSHKF9XIuVyisvb/jSOzPlSvV2smLlaXLs9H4rOx4jOaad7oPtbwfYjJ7P2yzPrWhPh0RhyPi25F9jXphplKe7XfwAAAAAAAAAAAAAAAAAAAAMCAOdPj8f+r3kX4fHfDUNb7YYE+/jwLoh65f+d+Lb3oCBlLX/AeeW/Ifhpf8h+El/2F4yX8YXvIfhpf8h+El/wEAAAAAAAAAAAAAAAAAAAAAAAAAAKCnzp87ly711YfXZ9L67NXlpfnK1VOzpep8YWFppjBTWbxSmKtU5sqlwkxlodvfK1cqVyanYunaRK1UrU1Ul1cuLFSWLtcuXFoozpUulEb/l6gAAAAAAAAAAAAAAAAAAADg2VJdXpkvlsulRYWOhfdjIA7jaQa4Zle75wclCoUOhZtZ9+5srz5elAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgg/8CAAD//4yLMZo=") listen(0xffffffffffffffff, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000540)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) sendmsg$RDMA_NLDEV_CMD_GET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x38, 0x1401, 0x8, 0x70bd28, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x38}, 0x1, 0x0, 0x0, 0x40880}, 0x20000004) llistxattr(&(0x7f0000000040)='./bus\x00', &(0x7f0000000580)=""/154, 0x9a) 51.223682752s ago: executing program 1 (id=461): r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) io_setup(0x1, &(0x7f0000000040)=0x0) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="14"], 0x14}, 0x1, 0x0, 0x0, 0x4810}, 0x8008000) io_submit(r1, 0x1, &(0x7f0000000440)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x8, 0x1, r0, &(0x7f0000000100)="653de841", 0x4, 0x8000}]) r2 = io_uring_setup(0x270d, &(0x7f0000000040)={0x0, 0x9fad, 0x1000, 0x2, 0x2d6}) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0xb, 0x4000010, r2, 0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r3, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x4}) ioctl$sock_netdev_private(r3, 0x89f3, &(0x7f0000000000)) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0xc0000, 0x0) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2042, 0x0) r6 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000100), 0x0, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, r7) ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r7) 49.747851485s ago: executing program 1 (id=459): openat$cgroup_devices(0xffffffffffffffff, 0x0, 0x2, 0x0) socket$nl_generic(0x11, 0x3, 0x10) (async) r0 = socket$nl_generic(0x11, 0x3, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@broadcast, @empty, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x24, 0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x22, 0x0, 0x0, @empty}}}}}, 0x0) (async) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@broadcast, @empty, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x24, 0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x22, 0x0, 0x0, @empty}}}}}, 0x0) sendmsg(r0, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0x36}], 0x2, 0x0, 0x0, 0x11000000}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./config\x00', &(0x7f0000000140)='configfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./config/nvmet/ports/1/param_inline_data_size\x00', 0x1, 0x0) write(r1, &(0x7f0000000740)='10', 0x2) (async) write(r1, &(0x7f0000000740)='10', 0x2) socket(0x10, 0x803, 0x0) (async) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@ipv6_newaddr={0x48, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x40}, [@IFA_CACHEINFO={0x14, 0x6, {0x3, 0xffffffff, 0x1000, 0x4}}, @IFA_FLAGS={0x8}, @IFA_LOCAL={0x14, 0x2, @remote}]}, 0x48}}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) close(r3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff}) r5 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0xffffffffffffffe5) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0f00000004000000040000001200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000017000000000000000000000000019b2e49aa1c4bdac956f90d62db9e9d6db385970b3693bbeefcba391fd08788df2caa73997a5e1f7d3e911f320e868c4d4d8234060444fe7aae7f508036f92e41811bf52cb8946c28314cd8d08e6de40ec1b70c46accb01634ec33a00098761e73f25985f8a48271677732552f9369c870d6da0a350fe7aa31913aeed7e5ac495e247a4097ff796df542359de8cc27659b8fa01ed53e3"], 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r6, r5, 0x26}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x5, &(0x7f00000000c0)=[{0x45, 0x0, 0x2}, {}, {}, {0x20, 0x0, 0x0, 0x4}, {0x6}]}) syz_emit_ethernet(0x56, &(0x7f0000000180)={@local, @empty, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "a24b9f", 0x20, 0x2b, 0x0, @remote, @local, {[@routing={0x3a, 0x0, 0x2, 0x1}], {0x0, 0x0, 0x18, 0x0, @wg=@data}}}}}}, 0x0) (async) syz_emit_ethernet(0x56, &(0x7f0000000180)={@local, @empty, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "a24b9f", 0x20, 0x2b, 0x0, @remote, @local, {[@routing={0x3a, 0x0, 0x2, 0x1}], {0x0, 0x0, 0x18, 0x0, @wg=@data}}}}}}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r6}, &(0x7f0000000000), &(0x7f0000000080)=r3}, 0x20) close(r4) (async) close(r4) 49.747574424s ago: executing program 32 (id=459): openat$cgroup_devices(0xffffffffffffffff, 0x0, 0x2, 0x0) socket$nl_generic(0x11, 0x3, 0x10) (async) r0 = socket$nl_generic(0x11, 0x3, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@broadcast, @empty, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x24, 0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x22, 0x0, 0x0, @empty}}}}}, 0x0) (async) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@broadcast, @empty, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x24, 0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x22, 0x0, 0x0, @empty}}}}}, 0x0) sendmsg(r0, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0x36}], 0x2, 0x0, 0x0, 0x11000000}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./config\x00', &(0x7f0000000140)='configfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./config/nvmet/ports/1/param_inline_data_size\x00', 0x1, 0x0) write(r1, &(0x7f0000000740)='10', 0x2) (async) write(r1, &(0x7f0000000740)='10', 0x2) socket(0x10, 0x803, 0x0) (async) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@ipv6_newaddr={0x48, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x40}, [@IFA_CACHEINFO={0x14, 0x6, {0x3, 0xffffffff, 0x1000, 0x4}}, @IFA_FLAGS={0x8}, @IFA_LOCAL={0x14, 0x2, @remote}]}, 0x48}}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) close(r3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff}) r5 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0xffffffffffffffe5) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0f00000004000000040000001200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000017000000000000000000000000019b2e49aa1c4bdac956f90d62db9e9d6db385970b3693bbeefcba391fd08788df2caa73997a5e1f7d3e911f320e868c4d4d8234060444fe7aae7f508036f92e41811bf52cb8946c28314cd8d08e6de40ec1b70c46accb01634ec33a00098761e73f25985f8a48271677732552f9369c870d6da0a350fe7aa31913aeed7e5ac495e247a4097ff796df542359de8cc27659b8fa01ed53e3"], 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r6, r5, 0x26}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x5, &(0x7f00000000c0)=[{0x45, 0x0, 0x2}, {}, {}, {0x20, 0x0, 0x0, 0x4}, {0x6}]}) syz_emit_ethernet(0x56, &(0x7f0000000180)={@local, @empty, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "a24b9f", 0x20, 0x2b, 0x0, @remote, @local, {[@routing={0x3a, 0x0, 0x2, 0x1}], {0x0, 0x0, 0x18, 0x0, @wg=@data}}}}}}, 0x0) (async) syz_emit_ethernet(0x56, &(0x7f0000000180)={@local, @empty, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "a24b9f", 0x20, 0x2b, 0x0, @remote, @local, {[@routing={0x3a, 0x0, 0x2, 0x1}], {0x0, 0x0, 0x18, 0x0, @wg=@data}}}}}}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r6}, &(0x7f0000000000), &(0x7f0000000080)=r3}, 0x20) close(r4) (async) close(r4) 17.773059033s ago: executing program 2 (id=878): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) capset(0x0, 0x0) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000280000002800000005000000030000000200000f0000000407000000000000000200002d02000000020000f5ffffff030000000000030061"], &(0x7f0000000f40)=""/4110, 0x45, 0x100e, 0x9}, 0x28) 17.711946695s ago: executing program 2 (id=879): bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_emit_ethernet(0x72, 0x0, 0x0) socket$pppoe(0x18, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x16, 0x8, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r1 = semget$private(0x0, 0x207, 0xa0) semctl$GETALL(r1, 0x0, 0xd, &(0x7f0000000000)=""/58) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x8, &(0x7f0000001340)=ANY=[@ANYBLOB="beaa000000000000791008000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000bf03000000000000850000000c000000b70000000000000095"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x1f00}, 0x94) 17.657893031s ago: executing program 2 (id=880): r0 = syz_open_procfs$namespace(0x1, &(0x7f0000000800)='ns/net\x00') setns(r0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nvmet/subsystems/s1\x00', 0x1ff) write(0xffffffffffffffff, &(0x7f0000000180)='1', 0x1) close(0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/nvmet/ports/1\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/nvmet/ports/1/addr_trtype\x00', 0x1, 0x0) symlinkat(&(0x7f0000000480)='./config/nvmet/subsystems/s1\x00', 0xffffffffffffff9c, &(0x7f0000000500)='./config/nvmet/ports/1/subsystems/s1\x00') 17.636980802s ago: executing program 2 (id=881): syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f00000004c0)={[{@noload}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1}}, {@bh}, {@noload}, {@data_err_ignore}, {@usrjquota}]}, 0xff, 0x44d, &(0x7f0000000900)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x42, 0x0) fadvise64(r0, 0x2, 0x5, 0x5) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ed) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./sys/class/fcloop/ctl/set_cmd_drop\x00', 0x1, 0x0) write$P9_RREADDIR(r1, &(0x7f0000000140)={0xb, 0x29, 0x2, {0x8000}}, 0xb) r2 = socket$inet(0x2, 0x2, 0x1) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000001200)=0xe095, 0x4) sendmsg$inet(r2, &(0x7f0000000640)={&(0x7f00000005c0)={0x2, 0x0, @broadcast}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000280)="0800090687696fd2", 0x8}], 0x1, &(0x7f0000000240)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @empty}}}], 0x20}, 0x4004000) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r0, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002000)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4000005) syz_ublk_add_dev(r0, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x2e, 0x0, 0x0, r0, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000000)=@new_dev={0x4, 0x8bd}}}, &(0x7f0000000180)=0x0) syz_ublk_setup_queues(r0, 0x0, &(0x7f0000000d80)={0x0, 0xbde2, 0x4, 0x0, 0x14, 0x0, r0}, &(0x7f0000000e00)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3ba7, 0x2000, 0x3, 0x304, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b5f, 0x40, 0x2, 0x30b, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc548, 0x0, 0x3, 0x369}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5d14, 0x20085, 0x1, 0x231, 0x0, r0}}], 0x4, &(0x7f0000003040)={0x2e, 0x8, 0x0, r0, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {0x1}, 0x0, 0x0, '\x00', {0x3, 0xe2f, 0x0, &(0x7f0000002040)=@buf_max_buf="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"}}, &(0x7f00000030c0)) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) ioctl$XFS_IOC_FREE_EOFBLOCKS(r5, 0x8080583a, &(0x7f00000002c0)={0x6, 0x4, 0x2, 0x10000, 0x8000, 0x0, 0xffffffffffffffff}) syz_ublk_setup_queues(0xffffffffffffffff, r3, &(0x7f00000001c0)={0x0, 0x4ee8, 0x4000, 0x0, 0x35b, 0x0, r0}, &(0x7f0000000680)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf749, 0x0, 0x9, 0x1bd, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x878f, 0x4000, 0x2, 0xd6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5ac, 0x1000, 0x1, 0x44, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x20f0, 0x1, 0x0, 0x224, 0x0, r0}}], 0x4, &(0x7f0000004100)={0x2e, 0x3d, 0x0, r4, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x8}, 0x0, r6, '\x00', {0x1, 0xcfc, 0x0, &(0x7f0000003100)=@buf_1k="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"}}, &(0x7f0000004180)) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x4, 0x6b35e9d94325e671, 0xffffffffffffffff, 0x0) 17.543962029s ago: executing program 2 (id=882): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000040000000801000001"], 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x1, 0x10, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000001000000b7080000000000007b8af8ff00000000b508000000000000638af8ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018240000", @ANYRES32=r0, @ANYBLOB="0000000002f0ff00b703000008000000850000006a00000095"], &(0x7f0000000080)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) 17.107923932s ago: executing program 2 (id=889): r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) io_setup(0x1, &(0x7f0000000040)=0x0) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="14"], 0x14}, 0x1, 0x0, 0x0, 0x4810}, 0x8008000) io_submit(r1, 0x1, &(0x7f0000000440)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x8, 0x1, r0, &(0x7f0000000100)="653de841f0", 0x5, 0x8000}]) r2 = io_uring_setup(0x270d, &(0x7f0000000040)={0x0, 0x9fad, 0x1000, 0x2, 0x2d6}) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0xb, 0x4000010, r2, 0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r3, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x4}) ioctl$sock_netdev_private(r3, 0x89f3, &(0x7f0000000000)) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0xc0000, 0x0) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2042, 0x0) r6 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000100), 0x0, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, r7) ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82) (fail_nth: 1) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r7) 17.0993826s ago: executing program 33 (id=889): r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) io_setup(0x1, &(0x7f0000000040)=0x0) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="14"], 0x14}, 0x1, 0x0, 0x0, 0x4810}, 0x8008000) io_submit(r1, 0x1, &(0x7f0000000440)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x8, 0x1, r0, &(0x7f0000000100)="653de841f0", 0x5, 0x8000}]) r2 = io_uring_setup(0x270d, &(0x7f0000000040)={0x0, 0x9fad, 0x1000, 0x2, 0x2d6}) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0xb, 0x4000010, r2, 0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r3, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x4}) ioctl$sock_netdev_private(r3, 0x89f3, &(0x7f0000000000)) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0xc0000, 0x0) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2042, 0x0) r6 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000100), 0x0, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, r7) ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82) (fail_nth: 1) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r7) 3.199159675s ago: executing program 5 (id=1079): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000080), 0xffff, 0x503100) ioctl$I2C_SLAVE(r1, 0x703, 0x1b1) r2 = syz_io_uring_setup(0x2c07, &(0x7f0000000100)={0x0, 0x205c, 0x35c40357ea411c08, 0x1, 0x34}, &(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000280)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$bt_hci(0xffffffffffffffff, 0x11a, 0x3, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000001800010000000000000000000a0020000000000000000000050014000000000008000400", @ANYRES32=0x0, @ANYBLOB="9400080000ff100e", @ANYBLOB], 0x38}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000001400000018000180140002006e657464657673696d3000000000000005000c0001000000080007000100000008000600000100000800050002000000080013007cc4000008000d000400000005000b000400000008000e008100000008"], 0x74}, 0x1, 0x0, 0x0, 0x2400c000}, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) ioctl$I2C_FUNCS(r1, 0x705, &(0x7f00000000c0)=0x1) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=@newlink={0x3c, 0x10, 0xffffffffffffffff, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x9414, 0x2021}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4c085}, 0xc008006) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x15, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="18080000e9ff0000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b70300002bb91a0085000000a0000000bc0900000000000045080100002000009500000000000000b7020000000000007b9af8ff00000000b5090000000000007baaf0ff00000000bf2700000000000007080000fffdffffbfa400000000000007040000f0ffffffc40200000800000018220000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7050000080000004608efff76000000bf9800000000000056090000000000008500000000a00000b70000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3.169031779s ago: executing program 5 (id=1081): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000000)='./bus\x00', 0x2000884, &(0x7f0000000080)=ANY=[@ANYBLOB='codepage=1251,nonumtail=0,shortname=win95,shortname=win9hortname=lower,utf8=0,shortname=winnt,uni_xlate=0,iocharset=macceltic,nonumtail=0,iocharset=iso8859-5,nonumtail=0,uid=', @ANYRES64, @ANYRES32=0x0], 0x1, 0x28d, &(0x7f0000000e40)="$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") r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x3c, r1, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_FD={0x8}]}, 0x3c}}, 0x0) (async) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x34, r1, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}]}, 0x34}}, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x133042, 0x19) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, &(0x7f0000000140)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x684, 0x0, 0x0, 0x0, @in6={0xa, 0x4e1e, 0x6, @remote}, @in6={0xa, 0x4e24, 0x8b, @private1={0xfc, 0x1, '\x00', 0x1}, 0x3}}}, 0x118) sendfile(r2, r2, &(0x7f0000000f40), 0x400) 3.099866745s ago: executing program 5 (id=1082): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r0, 0x0) accept(r0, 0x0, 0x0) sendmmsg$inet6(r0, &(0x7f0000001a40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20000011) syz_read_part_table(0x1068, &(0x7f0000000000)="$eJzs0LlNwEAQBdBvtL5AUAcdENMMsRsAixYogpKI6YEYFvkQwsRITt5L5u8xGmnCqV6vtzon45SkP7y+/KTub2MzNEsZUsbMz0ldj/mqm1wkebz7uM97/dzvHpL1U5tkXMJtPyTt1RLffg8qTzddMtWSpNbj3JLLvTvlH/cAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGf6DgAA///mCB3a") 3.044791329s ago: executing program 5 (id=1083): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000001700)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet6_tcp(0xa, 0x1, 0x0) connect$unix(r2, &(0x7f0000000200)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r4, 0x2) syz_emit_ethernet(0x56, &(0x7f0000000480)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1e}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x20, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x95, 0x4000, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x1, 0x6}]}}}}}}}}, 0x0) symlinkat(0x0, 0xffffffffffffff9c, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) r6 = userfaultfd(0x80001) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x100}) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="04230d00c90001"], 0x10) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r5, 0xc05064a7, &(0x7f0000000a00)={0x0, 0x0, 0x0, &(0x7f0000000980), 0x0, 0x0, 0x0, 0x0, r7}) 2.899334688s ago: executing program 4 (id=1089): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) getresgid(0x0, 0x0, 0x0) r0 = syz_open_dev$mtd(&(0x7f0000000000), 0x492, 0x20800) ioctl$MEMWRITEOOB64(r0, 0xc0184d15, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) unshare(0x400) fcntl$getflags(r1, 0x401) r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys_sec/tomoyo/domain_policy\x00', 0x2, 0x0) preadv(r2, &(0x7f0000000580)=[{&(0x7f00000001c0)=""/6, 0x6}, {&(0x7f0000000200)=""/42, 0x2a}, {&(0x7f0000000240)=""/130, 0x82}, {&(0x7f0000000300)=""/243, 0xf3}, {&(0x7f0000000440)=""/106, 0x6a}], 0x5, 0x9, 0x1000) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f00000000c0)={0x0, 0x281}, &(0x7f0000000200)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r2, 0x84, 0x23, &(0x7f0000000240)={r3, 0x6}, 0x8) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f00000017c0)={0x0, 0x0, &(0x7f0000001780)={&(0x7f0000000640)={0x2, 0x13, 0x7, 0x5, 0x7, 0x0, 0x70bd29, 0x25dfdbfc, [@sadb_address={0x5, 0x6, 0x2b, 0xa0, 0x0, @in6={0xa, 0x4e24, 0x2, @private2, 0x6}}]}, 0x38}}, 0x4) r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/block/nullb0/queue/scheduler\x00', 0x2, 0x0) syz_genetlink_get_family_id$batadv(0x0, r5) write(r5, &(0x7f0000000400)='kyb', 0xfffffffffffffe8c) ioctl$FE_SET_FRONTEND(r5, 0x40246f4c, &(0x7f0000000080)={0x7, 0x2, @qam={0x81, 0x11, 0x5}}) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x1000080, &(0x7f0000000100)={[{@nouid32}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0xf2a5}}, {@errors_remount}, {@sb={'sb', 0x3d, 0x1}}]}, 0xfe, 0x7b9, &(0x7f0000000f80)="$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") ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000180)=ANY=[@ANYBLOB="030000000000000009"]) 2.864008238s ago: executing program 0 (id=1090): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x64, 0x24, 0xf0b, 0x2000, 0x0, {0x60, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x1e00000, 0xc6be451e8b3bcc5, 0x4}}}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x8, 0x6, 0x8, 0x3, 0x0, 0x7, 0x7}}, {0x4}}]}]}, 0x64}}, 0x0) 2.803894148s ago: executing program 0 (id=1091): syz_usb_connect$cdc_ncm(0x4, 0x72, &(0x7f0000000540)=ANY=[@ANYRES16], 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000540)=ANY=[@ANYBLOB="e81100002d0001002abd70000000100008000000", @ANYRES32], 0x11e8}], 0x1, 0x0, 0x0, 0x4000000}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newtaction={0x70, 0x30, 0x1, 0x0, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0xfffffffc, 0x0, 0x10000000}}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x6b}]}, {0x4}, {0xc}, {0xc, 0x4}}}]}]}, 0x70}}, 0x0) r3 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000180)=[{0x2, 0x1000000000000, &(0x7f0000000080), 0x6, &(0x7f0000000100)}], 0x492492492492642, 0x0) sendmsg$IPSET_CMD_PROTOCOL(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3400000001060101f8004017000400000000050001e3060000000500010087000000050001000700"/52], 0x34}}, 0x4000000) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r4, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000ac0)={0x48, r5, 0xb97534d5fe9704cf, 0x0, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x580}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x7}, @NL80211_ATTR_STA_WME={0xc, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x9}]}]}, 0x48}}, 0x4040004) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x40202, 0x0) write$cgroup_int(r7, &(0x7f0000000040)=0x922, 0x12) 2.803527054s ago: executing program 4 (id=1092): setns(0xc9, 0x0) syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f0000000180)='./file1\x00', 0x804800, &(0x7f0000000000)=ANY=[@ANYRES8=0x0, @ANYBLOB="6092034e5823f645654f6e8edfc3b8e1a948efb0d4b9a9d4c30f5dacb3c1a7ea2587d59165777f070017c2921e793ec5a1384e143b57bb832f14bb43afdef6cb4ed4960b6c732be46aa67cdd8c57f93ee6c15401df91ebcbe4f9989843313ea9f243d4dc3d276b966b898100a620b69b543033b9b7bcd9069b9248fbdff46c4a49f094a61938776cecb170c6c6a1fbf59567e1a1d0f0c84cb7a84bf0b1e2ce5f38f95e11d5b1977ead80625337f66dc391089ab8573d008a4bd03f6f9f01406db632558fd25be4beecd844ac00e52f95c5dc96a1e4a25c80d56aebf6cb33914d6bc72a40"], 0xf9, 0x1213, &(0x7f0000000600)="$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") mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0x8004}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x74}}, 0x0) r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) pwritev(r1, &(0x7f0000000740)=[{&(0x7f0000000200)='3', 0x1}], 0x1, 0x800, 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, 0x0, 0x0) mount$bind(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000200)='./file1\x00', &(0x7f0000000240), 0x104008, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[], 0x60}}, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000040)={0x0, 0x4, 0x30, 0x6, 0x5}, &(0x7f0000000080)=0x18) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r3, 0x84, 0x71, &(0x7f0000000100)={r4, 0x8}, &(0x7f0000000140)=0x8) 2.712950092s ago: executing program 4 (id=1093): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x19, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000bb00000095"], &(0x7f0000000040)='syzkaller\x00', 0x9, 0x0, 0x0, 0x21600, 0x2e, '\x00', 0x0, @cgroup_sockopt=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82}, 0x94) getsockopt$bt_BT_RCVMTU(r0, 0x112, 0x4, 0xfffffffffffffffe, &(0x7f0000000080)) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f00000001c0)={[{@nobh}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@sysvgroups}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x11}}, {@bh}, {@debug}]}, 0xfc, 0x57d, &(0x7f0000001500)="$eJzs3d9rW1UcAPDvTX/sp66DMfRFBntwMpeurT8mCM5H0eFA32doszKaLqNJx1oHrg/uxRcZgogD8Q/w3cfhP+BfMdDBkFH0QYTITW+2tE2atkuXbPl84G7n5N6bc7+593t6Tm5CAhhYJ9J/chGvRsS3ScSRpnXDka08sbbd6qOb0+mSRK322V9JJNljje2T7P9DWeWViPjt64jTuc3tVpaW5wqlUnEhq49X56+NV5aWz1yZL8wWZ4tXJ6emzr09Nfneu+90LdY3Lv7zw6f3Pjr3zcnV7395cPROEufjcLauOY6ncKu5cqLwX1YaifMbNpzoQmP9JOn1AbArQ1mej0TaBxyJoSzrgRffVxFRAwZUIv9hQDXGAY25fZfmwc+Nhx+uTYDqsY82xz+89t5I7K/PjQ6uJutmRul8d6wL7adt/Prn3TvpElu/D3GgQx1gR26tRMTZ4eHN/X+S9X+7d7b+5vHWNrYxaH9/oJfupeOfN1uN/3KPxz/RYvxzqEXu7kbn/M896EIzbaXjv/dbjn8fd11jQ1ntpfqYbyS5fKVUPBsRL0fEqah1vPVxbvV+rd265vFfuqTtN8aC2XE8GN63fp+ZQrUQEaO7DHmdhyv14W2qTf+/vz7W3Xj+09fj4jbbOF68+1q7dZ3j31u1nyNeb3n+n5zWZOv7k+P162G8cVVs9vft47+3a7/X8T9ciTi4dfxjSfP92srO2/hp/7/Fdut2e/2PJp/Xy40kuFGoVhcmIkaTTzY/Pvlk30a9sX0a/6mTW/d/ra7/dPL1xTbjv33sdttN++H8z+zo/O+8cP/jL39s1/72zv9b9dKp7JGs/2stu1a2e4BP+/oBAAAAAABAP8lFxOFIcvnH5Vwun1/7fMexOJgrlSvV05fLi1dnov5d2bEYyTXudB9p+jzERPZ52EZ9ckN9KiKORsR3Qwfq9fx0uTTT6+ABAAAAAAAAAAAAAAAAAACgTxxq8/3/1B9DvT46YM/Vf9hgX6+PAuiFjj/5341fegL6Usf8B15Y8h8Gl/yHwSX/YXDJfxhc8h8Gl/yHwSX/AQAAAAAAAAAAAAAAAAAAAAAAAAAAoKsuXriQLrXVRzen0/rM9aXFufL1MzPFylx+fnE6P11euJafLZdnS8X8dHm+0/OVyuVrE5OxeGO8WqxUxytLy5fmy4tXq5euzBdmi5eKI88kKgAAAAAAAAAAAAAAAAAAAHi+VJaW5wqlUnGhC4UkIrrxPP1W+CD64jD2MsA1u9p9uF+i2OvCyB6kzDMprGQHvrO9etQhAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEAL/wcAAP//eBcqGw==") lsetxattr$system_posix_acl(&(0x7f00000006c0)='./file1\x00', &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000500)=ANY=[@ANYRESHEX=r0], 0x24, 0x1) 2.688582273s ago: executing program 4 (id=1094): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000680)=0x7) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x9, 0xe, 0x492f, 0x7f, 0x101, 0x1}, 0x50) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x300000a, 0x11, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f00000003c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x400, 0x8000}}, './dev\x00'}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xbf5ce000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/udp\x00') lseek(r5, 0x1000000, 0x0) socket$kcm(0x21, 0x2, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f00000000a0)='./dev\x00', 0x147) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000002b00000002000000ffff000005"], 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x6f1c}, 0x38) r6 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./dev/nvme0n1\x00', 0x2, 0x0) write$tun(r6, &(0x7f0000000300)=ANY=[@ANYBLOB="00000002010f00fd6847dd85cfe3fe34cb8455762b0e6a8cfb0a2997b36cc100e497495bcdf5cc3e41030c1cd28ced1e0c303e6582e38ceb3faf11035e97a96a120400000000000000d5a51e96949343d1a5c758d4e39d9549c6d8a5e4acc48cff479ebb6d"], 0x65) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), r5) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)={0x34, r7, 0x1, 0x0, 0xfffffffb, {0x10}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES_LOW={0x8, 0x11, 0x800000d}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000c5}, 0x0) ioctl$IOC_PR_CLEAR(r6, 0x401070cd, &(0x7f0000000000)={0x7}) sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[@ANYRES16], 0xac}}, 0x2400400c) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="c00000000001050500000000000000000a0000003c0002802c00018014000300ff01000000000000000000000000000114000400ff0200000000000000000000000000010c00028005000100000000003c0001800c00028005000100000000002c00018014000300ff0200000000000000000000000000011400040000000000000000000000ffffffffffff08000740010000012c000680140004000000000000000000000000000000000114000500200100"], 0xc0}}, 0x0) 2.328339612s ago: executing program 6 (id=1095): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) ioctl$UBLK_U_CMD_END_USER_RECOVERY(0xffffffffffffffff, 0xc0207511, &(0x7f00000000c0)={0x0, 0xffff, 0x0, 0x0, 0xffffffffffffffff}) prlimit64(r1, 0x4, &(0x7f0000000140)={0xa, 0x9}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x0, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000001c0), r0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000001700)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fsopen(&(0x7f0000000000)='sockfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r4, &(0x7f0000000000)='3', 0x4e) ioctl$UFFDIO_CONTINUE(r4, 0xc020aa07, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r4, &(0x7f00000003c0)="3e536c53cda0eeb704c7d6c303e91a1173f8b6b43afd5c868e5fc53448c32fa8d0ff26086a620b47ddf3f0b0f48de12aa0f5d105818e4c734ca9bd12c29f31cd4ed417ef2ded5c97491073fe9e280e08eb375e5c3ba160f5b115a3fae50ea459ecee8f7aa4b16dcf08998b07b154bf5740aa64c8d16792afd31f36101c79b633e5f429437335ad696b07cf4cc76cd1e4d1fefc5b8608fe5f74a6bd2b0260499426ebaa2328331b54177b24b1156c07f56a578ece45cec2c23e8189021d515091b126f579cd5f51278d846e1de6b7f974fba323ca22a2bfabc2f856d9e679334c52667f8d651914758a6e18f572faf90c1385ae55d360227923", &(0x7f00000004c0)=@udp=r0, 0x2}, 0x20) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r6, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r7, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c00020008000100", @ANYRES16=r6], 0x3c}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x1, 0x803, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x44, 0x10, 0x403, 0x78bd28, 0x80000, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r10}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040884}, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x428a4}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'dummy0\x00'}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x3c}}, 0x8000) 2.251968943s ago: executing program 6 (id=1096): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1={0xff, 0x5}}, 0x1c) (async, rerun: 64) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @empty}, 0x1c) (async, rerun: 64) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) (async, rerun: 64) r1 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) (rerun: 64) ioctl$MON_IOCX_GETX(r1, 0xc0109207, 0xffffffffffffffff) (async) r2 = socket$inet_udp(0x2, 0x2, 0x0) (async) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=@newsa={0x180, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d3, 0x6c}, @in=@loopback, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3505, 0x2, 0x1, 0x0, 0x80}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @algo_auth={0x48, 0x1, {{'sha3-256-generic\x00'}}}]}, 0x180}, 0x1, 0x0, 0x0, 0x8801}, 0x0) (async, rerun: 32) bind$inet(r2, &(0x7f0000000380)={0x2, 0x4e20, @empty}, 0x10) (async, rerun: 32) syz_emit_ethernet(0x2e, &(0x7f0000000500)={@broadcast, @broadcast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0) 2.240056918s ago: executing program 6 (id=1098): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000001700)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet6_tcp(0xa, 0x1, 0x0) connect$unix(r2, &(0x7f0000000200)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) symlinkat(0x0, 0xffffffffffffff9c, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r4, 0xc05064a7, &(0x7f0000000a00)={0x0, 0x0, 0x0, &(0x7f0000000980), 0x2100, 0x0, 0x0, 0x0, r5}) 2.171358438s ago: executing program 0 (id=1099): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000040000000801000001"], 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x1, 0x10, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000001000000b7080000000000007b8af8ff00000000b508000000000000638af8ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018240000", @ANYRES32=r0, @ANYBLOB="000000000200fe00b703000008000000850000006a00000095"], &(0x7f0000000080)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) 2.107893956s ago: executing program 0 (id=1100): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000740)=@newsa={0x15c, 0x10, 0x1, 0x0, 0x0, {{@in=@multicast1, @in6=@empty}, {@in=@broadcast, 0x0, 0x33}, @in=@local, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, {0x0, 0x0, 0x1}, 0x0, 0x0, 0xa, 0x2}, [@replay_esn_val={0x1c, 0x17, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}, @algo_auth={0x48, 0x1, {{'sha256\x00'}}}, @sa_dir={0x5, 0x21, 0x1}]}, 0x15c}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r1) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) ioctl$SIOCSIFHWADDR(r3, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) ioctl$TUNSETLINK(r4, 0x400454cd, 0x307) bind$inet6(r2, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x7d) setsockopt$inet6_MCAST_JOIN_GROUP(r2, 0x29, 0x2a, &(0x7f00000003c0)={0x2, {{0xa, 0x4e24, 0x6, @mcast1, 0x4}}}, 0x88) syz_emit_ethernet(0x7e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000000ffffffffffff86dd600107000048110000000000000000000000000000000000ff02000000000000000000000000000100000e220048907803000000000000001c62acdfad905d2b4f6f2255ad1b961029028df42bc19c774b2efecb22f91768539b1bf983c8123155f58650f790b44486a262078a7de578"], 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) r6 = syz_open_dev$vim2m(&(0x7f0000000000), 0x3, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r6, 0xc0d05605, &(0x7f0000000200)={0xa, @sliced={0x9, [0xad, 0x4, 0x7, 0xf, 0x7f, 0x6f4, 0x1, 0xc, 0x400, 0x9b6e, 0x3, 0x2, 0x0, 0x2, 0x0, 0x3f, 0x2000, 0x3ff, 0x0, 0x7, 0x6719, 0x5, 0x4080, 0x80, 0x1ff, 0x0, 0x6, 0x3, 0x4, 0x9, 0x3ff, 0x3, 0x0, 0xc1a, 0x33e, 0x4, 0x4, 0x8000, 0x8, 0x5, 0x8, 0x101, 0x0, 0x400, 0x1, 0xc, 0x401, 0x9], 0x5}}) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x800, &(0x7f0000000180), 0x26, 0x755, &(0x7f00000002c0)="$eJzs3M1rHGUYAPBnptmmH9GNIPhxEKGFFko3SXNpT40Xb4VCwWsNySSETLIhu6ndWLD1LNTmoiCIevboVSj1D/AmhQreBdEaD+JlZTablMbsdtskXUl/P5jM877z8bxPdnizA5kJ4IX1dvEjiRiKiMsRUW73pxFxuBUdibi5sd/6wxtTxZJEs3nl96Q4LNab5a1zJe318WgdEq9HxL1SxJmP/5u31lidn8zzbLndHqkvLI3UGqtn5xYmZ7PZbHFs/MLo+fHx86PjT6zhtR5rPfnehaN3fnx3be2n7+q33xo4m8REq+5o19bjaZ7Kxu+kFBPb+hf3I1kfJf0eAAAAPSm+5x+KiIHWt9RyHGpFAAAAwIEy2AQAAAAOvCT6PQIAAABgf23+G8Dms7379RxsJ7+9ExHDO+UfaD1DHHEkShFxbD157MmEZOMw2JWbtyLi7sT26++b4gq7uctzj25rP/6M9OFdnp29cLeYfyZ2mn/Srfkndph/BjbfnbBLnee/R/kPdZj/LveY4/sv3yh1zH8r4s2BnfInW/mTDvnf7zH/7bVP7nTa1vw64tSOf3+Sx3J1eT/ExMxc3vX1A/f+OX2/W/3HOuVPute/1GP9H67/Od9pLinynz7R/fPfKX9xTXzaHkcaEXfa66K9ti3HiYUHP3Srfzqi+Syf/1c91v/Lt4PXe9wVAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAWtKIGIokrWzFaVqpRByPiFfjWJpXa/UzM9WVxeliW8RwlNKZuTwbjYjyRjsp2mOt+FH73Lb2eES88vPRjaRzeVaZqubT/S4eAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACALccjYiiStBIRaUT8VU7TSiVioIdjB5/D+AAAAIA9MtzvAQAAAAD7zv0/AAAAHHzPev+f7PE4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgAPt8qVLxdJcf3hjqmhPX2uszFevnZ3OavOVhZWpylR1eakyW63O5lllqrrwpPPl1erS2IVYuT5Sz2r1kVpj9epCdWWxfnVuYXI2u5qVnktVAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPK2h1pKklYhIW3GaVioRL0XEcJSSmbk8G42IlyPifrk0WLTH+j1oAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA9lytsTo/mefZskAgeG7BRxHxPxhGl6DfMxMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP1Qa6zOT+Z5tlxrdzzo84AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADok/TXJCKK5VT55ND2rYeTv8utdUR88MWVz65P1uvLY0X/H1v99c/b/ef6MX4AAAB4IVx8mp0379M37+MBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB6VWuszk/meba8u+BiNFabSYd9+l0jAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwbP4NAAD//2H1xxQ=") chdir(&(0x7f0000000240)='./file0\x00') r7 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x10) ioctl$FS_IOC_ENABLE_VERITY(r7, 0x40806685, &(0x7f0000000a80)={0x1, 0x2, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_xfrm(r5, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000003c0)=@acquire={0x130, 0x17, 0x1, 0x70bd2c, 0x25dfdbff, {{@in=@remote, 0x4d4, 0xff}, @in=@multicast2, {@in6=@mcast1, @in=@multicast2, 0x4e20, 0x0, 0x4e22, 0x0, 0x2, 0x0, 0x0, 0x33}, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in=@local, 0x4e22, 0x7, 0x4e21, 0x2, 0x2, 0x0, 0xc0}, {0xffff, 0x9, 0xffff, 0x10000, 0xffffffffffffffff, 0x5, 0xffffffffffffff17, 0x5}, {0x4, 0x6e8, 0x8, 0x6}, 0x0, 0x6e6bb5, 0x1, 0x1, 0x2, 0x3}, 0x80000000, 0x8, 0x5, 0x70bd2b}, [@sa_dir={0x5, 0x21, 0x2}]}, 0x130}, 0x1, 0x0, 0x0, 0x5}, 0x10) 2.102730439s ago: executing program 3 (id=1101): openat$nullb(0xffffffffffffff9c, 0x0, 0x101d02, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x1100, 0x2}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000580)=""/80}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000480)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r4 = socket$nl_rdma(0x10, 0x3, 0x14) ioctl$UDMABUF_CREATE(r2, 0x40187542, &(0x7f0000000340)={r2, 0x0, 0xffffffff02000000, 0xfffff000}) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x20}, 0x1, 0x0, 0x0, 0x4000840}, 0x0) 2.075317286s ago: executing program 3 (id=1102): r0 = socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) (async) r1 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_int(r1, 0x107, 0xb, 0xffffffffffffffff, &(0x7f00000001c0)=0x4a) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="18000000101401"], 0x18}, 0x1, 0x0, 0x0, 0x1}, 0x20040004) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a40)=ANY=[@ANYBLOB="3c00000010000700"/20, @ANYRES32=0x0, @ANYBLOB="04010100010a0000140003006873723000000000000000000000000008000a00", @ANYRES32=r4], 0x3c}}, 0x0) 2.042016451s ago: executing program 0 (id=1103): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4c0000002000010000200000f6dbdf250a801000000000666b000000080017004e204e2414000200fc00000000000000000000000000000c140001002001"], 0x4c}, 0x1, 0x0, 0x0, 0x40}, 0x40000) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=@newlink={0x5c, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr=' \x01\x00'}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}]}}}]}, 0x5c}}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x8) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x9a5eb000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) close(r4) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r5, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r5, 0x2) syz_emit_ethernet(0x4e, &(0x7f00000003c0)={@local, @random="d31a45d4a3c5", @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x18, 0x6, 0xff, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@fastopen={0x1e, 0x4, "4a89"}]}}}}}}}}, 0x0) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r6, 0xc004743e, 0x110e22fff6) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000180)={0x2, &(0x7f0000000040)=[{0x20, 0xd, 0x0, 0x5}, {0x6, 0x1, 0x1, 0x40000}]}) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='pimreg\x00', 0x10) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x28, 0x25, 0x44, 0xfffff00c}]}) ioctl$TUNGETVNETLE(r4, 0x40107447, &(0x7f0000000180)) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TUNSETOFFLOAD(r7, 0x4004743d, 0x110e22fff6) write$cgroup_type(r7, &(0x7f0000000280), 0x9) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="0500000000000000711142000000000085c8000002000000850000000500000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) 1.984017948s ago: executing program 3 (id=1104): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x64) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(0x3) r1 = socket$inet_tcp(0x2, 0x1, 0x6) close(0x3) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet_tcp_buf(r1, 0x6, 0x1f, &(0x7f0000000400)='espintcp', 0x8) recvfrom(r0, 0x0, 0x0, 0x17, 0x0, 0x0) r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x9, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f0000000200)={0xeffffffa, 0x80040002, 0x2, {0xd, @win={{0x8, 0x9, 0xfffffffd, 0xa}, 0x1, 0x6, 0x0, 0x7, 0x0, 0xee}}, 0x3}) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x802, 0x0) ioctl$UI_DEV_SETUP(r3, 0x405c5503, &(0x7f0000000100)={{0x100, 0x3, 0x0, 0x1}, 'syz1\x00', 0x27}) ioctl$UI_DEV_CREATE(r3, 0x5501) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000002000/0x3000)=nil, 0x3000, &(0x7f0000000080)='syz1\x00') write$input_event(r3, &(0x7f0000000340)={{0x0, 0xea60}, 0x16, 0x5, 0x84000003}, 0x6) lsm_get_self_attr(0x65, &(0x7f0000000000)={0x0, 0x0, 0x35, 0x15, ""/21}, &(0x7f0000001040)=0x35, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="61106800000000006113740000000000bfa00000000000000700000008ffffffd503010017740040950000000000000069163a0000000000bf67100000000000350607000fff07201706000020190000160300000ee60060bf050000000000007b650000000000006507f9ff01000000070700004d83dde4c375000000000000bf54000000000000070400000400f9ffad4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f17540faf80250aa20c669a5e12814cb1cea5d4601d295c45a6a0b9bdb7dd399703cac4f6f3be4b369226066812b8e007e733a9a4f1b0af3dda82ee45a010fb94fe9de57b9d8a814261bdb94a05000400c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe0185473d51b546cad3f1d5ab2af27546e7c955ccefa1f6ab689b555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d345dc8da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e0dee5eb106774a8f3e6916dfec88158f0200000000c8fb730a5c1bf2b2bb71a629361997a75fd552bdc206438b8ef4901fd03c16dfda44221b235c8ac86d8a297dff0445a15f21dce431e56723888fb126a163f16f920ae2fb494059bba8e3b680324a188076eb685d55c4e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20ceddf4d03723f1c932b3a6aa57f1ad2e99e0e67ab93716d20000009f0f53acbb40b4f8e2738270b31562ed834f2af97787f696649a462e7ee4bcf8b07a10fd7ed6735154beb4000000000000000000000000004000bc00f6746a9709e7e78f4ddc211bc3ebe6bd9d42ca0140a7afaab43176e65ec1118d50d1e827f3472f4445d253887a5ad103649afa17690884f800031e03a651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc47287cd31cc43ea0ffb567b40407d000000210000000000000000005f37d8703f37ca364a601ae899a56715a0a62a34c1d926a0f6a5480a55c22fe3a5ac00000000000000000000000500002000000000fb79ea00000000000000000000e4007be511fe32fbc90e2364a55e9bb66ac64423d2d00feaeba90000000000000000fffb0000000082fb0d3cc3aa39ee4b1386bab561cda886fa642994cacd473b543ccb5f0d7b63924f17c67b13631d22a11dc3c693962895496d4f6e9cc54db6c7205a6b06ff7f0000000000007f31d7c8cc5d325c19d0b5da3ce8bd1f61b007e1ff5f1be1969a1ba791ad46d800000000c7f26a1f37302f3b41eae59809fd05d12f6106f117b062df67d3a6473265dd1410eea68208a3f26b2989b832d8b34a34a4f08b34b3042065acaa10856e858d27adee7daf32903d3fc78700d429a2d4c8b6d803eb83eecfe4c7ff9e6ab5a52e83d089e0b1c23c0f3cf1b11cced7bc3c8da0c44d2ebf9f6f3ff3be4d1458077c2253b0c7c7a1a9fdd63bf910dc20e5cb2a88e59febc47f1212a21f631d22bad050e9856b48ae3a03a497c37758537650fe6db89da3c41fdc3d78e046f6160e1741299e8dc29906870e6431ed1eab5d067a183f064b060a8ec12725d42e3a74863d66bee966b1574f8e01b3f34a267ff0af1cb3f1f815f8989d78854ca4d3116dbc7e2bf2402a75fd7a55733360040855ed5d1c0d634fc5fb38f84d9d87b27f8a5d91217b728f13e3ee20e69e0ffb2780b1a7af137ff7b4c6ea9604faf0453bedf0c5d744b5272b44c23489b2bdbff947c4dfa108cbb88202eeb81f428a5b3c29984864961a57ff52f657a67463d7dbf85ae9321fc2cc17dc4a29b9cba8ded5de8206c812439ab129ae818837ee15620789c524b3baf49a09d8be0fc5beecf153236c19740be9bb7d958d5e87c6c09bf71a894bad62934782cc308e936d7637e07c4a2b4dc87b0da20000d9ef418cf19e7a8c4c328be0ce91798adc2dca87ddd9d064e081383409ed2912c811ae63f03212a5331c2a4ead000000000000000000000000000000000000000000000000001386866b311bd144bc32e059658c9f8342c90c1ade31b78072841b8b5a943d62a44cea6b050c42e3c205fad6a23fb43c93da0f49d911877265e6ee443e37397ecf89021e7f579e8d3a74c12b52938d91e9de07fc8eeeb9505f4a9c26266bf5449484ccc1317c747600000000000000000000000000c6d9a54ed5eec3dbf302b84f54076b6ae6d90be0f53b71bf0d4f0e32fc0761bcf29798a3b6bc16bc6ae04624c85de700717f117c2b1e336d4b61fbf7be8e838d29956cd71a7ec3f12e1a444983200422e05a1347fe439bcbc0f8b5ed687500f7aa5f4b99eca6d21676a39780"], &(0x7f0000000100)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x94) 1.957062056s ago: executing program 3 (id=1105): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = epoll_create1(0x0) clock_adjtime(0x0, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) close(r1) setns(0xc9, 0x0) r2 = socket(0x8, 0x5, 0x5) setsockopt$sock_int(r1, 0x1, 0x2e, &(0x7f0000000040)=0x10009, 0x4) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000003c0)={'bond0\x00', 0x0}) r5 = mq_open(&(0x7f0000000080)='\x00', 0x2, 0x108, &(0x7f00000000c0)={0x8000000000000001, 0x529, 0x1, 0x1000}) ioctl$FIGETBSZ(r5, 0x2, &(0x7f00000001c0)) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21}, [@IFLA_MASTER={0x8, 0xa, r6}, @IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r4}, @IFLA_HSR_SLAVE2={0x8, 0x2, r6}, @IFLA_HSR_PROTOCOL={0x5, 0x7, 0x1}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) syz_genetlink_get_family_id$wireguard(&(0x7f0000000000), r2) 959.001503ms ago: executing program 4 (id=1106): syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x5, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000280)={'bridge_slave_0\x00', &(0x7f0000000040)=@ethtool_gstrings={0x1b, 0x5}}) semget$private(0x0, 0x7, 0x191) futex(&(0x7f000000cffc)=0x1, 0xd, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x1, 0xa, 0x0, 0x0, 0x0, 0x2) 958.469881ms ago: executing program 3 (id=1107): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) madvise(&(0x7f000078a000/0x4000)=nil, 0x4000, 0xb) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000001700)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$unix(r2, &(0x7f0000000200)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) symlinkat(0x0, 0xffffffffffffff9c, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r5, 0xc05064a7, &(0x7f0000000a00)={0x0, 0x0, 0x0, &(0x7f0000000980), 0x0, 0x0, 0x0, 0x0, r6}) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(0xffffffffffffffff, 0x4058587a, &(0x7f0000000480)={{r4, &(0x7f0000000000)='\x00', 0x20000, &(0x7f00000000c0)={@align=0x5, {0x6, 0x9, 0x2, 0x3}}, 0x1, &(0x7f0000000100)={@_ha_fsid}, &(0x7f0000000180)=0xfffffe93}, {[0x0, 0xe, 0x4, 0x5]}, 0xd, 0xb6, &(0x7f00000003c0)=""/182}) read$FUSE(0xffffffffffffffff, &(0x7f0000001740)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000003780)={0x50, 0x0, r7, {0x7, 0x2d, 0x401, 0x400048, 0x401, 0x3, 0x8000200, 0x4, 0x0, 0x0, 0xd0, 0x1}}, 0x50) 917.278931ms ago: executing program 6 (id=1108): r0 = syz_open_dev$mtd(&(0x7f00000000c0), 0x260c, 0x8a42) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0xca02}) (async) r2 = socket$igmp6(0xa, 0x3, 0x2) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x530, 0x1d8, 0xffffffff, 0xffffffff, 0x1d8, 0xffffffff, 0x460, 0xffffffff, 0xffffffff, 0x460, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x1b0, 0x1d8, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'amanda\x00'}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv6=@private1, [0xff000000, 0xffffffff, 0xff, 0xffffffff], @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, [0xffffff00, 0xff, 0xffffffff, 0xffffffff], @ipv6=@empty, [0xff000000, 0xff, 0xff, 0xff], @ipv6=@local, [0xffffffff, 0xff000000, 0xff000000, 0xffffff00], 0x80, 0x54, 0x3b, 0x4e20, 0x4e23, 0x4e21, 0x4e23, 0x446, 0x39a}, 0x100, 0x20}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0xe, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x590) (async) r3 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r3, &(0x7f0000000180)={0xa, 0x5, 0xe, @dev={0xfe, 0x80, '\x00', 0x17}, 0x7}, 0x1c) (async) sendmsg(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000003300)=[{&(0x7f0000000500)="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", 0x323}, {&(0x7f0000001440)="884ab464847da64b706f21833e820163d1f2bd12864a028d63d2b6d5b3f4b8ee1929e89e43e9a2d3eeea181e9b1464a9528b1ff78a976a56932a993f225583f10287998b6908650c21d03a45a07796fb1c4863e5c36cbe082d128e5b37d9e2755530bfc088c19cff45e48558cc8b80cb22d4939d168953c6ba6262b4e500000020bced710000000044df68525aaca640244729bc08fd4698a8ebfd7863b07462dd358739b9b03b8c6fed19900201139ee540319bfe186a57d03d6fa69056e764a159376720070fb3f59e048076486ba3eb60ec8d524fb6f04c7c503dbbd3c35b10392c4c02963515dcb81232e5b664682ba3432820992f5feef072584fd1730da81a99a550f80999d0db425c3f67874cb5652f3efa34998cd1750cb1fb873aa326bc611405970de6751bd21dfd6f34278462b4fa3d3f065e16d63a45b5b5a59841ec1e300395635454730a82ba7a386c4874743e8a58bf364bca9357864f25e4ae82bcead5d781fc00c7c83765f585892919baaff679965a79ec24deaa1ab25ad85736371dad808f809dcf806f37801b0b645f7e1ead1f7d253267eda1dd7f74bfb3ccf7202cf630aee34906e52f5cbf684075961b34fbd8dca037dc4fd16ebbf7b04e5da931aa3d00bbf979db9cc6f350f0bc6c5b3627c7c09aa72e06e2a9364399cd94d2751a41be853c83e484d58602299f800559418dd5d1062e008c94766560b9aa648af83675d62e50c4f8e32e7af92c854a03b12b694688de4e351dfc829fd227e11cd6b7390a76aa5004f72c9a7a4b46a430b29d87415cff34671471a02484162a927df10e87d43904c5f307f862e1b7c1402eab9f28677f269e98bf96d9f9b54cf240fc54d2c59c589ca77bb7fae8d2fbbe7bf2dbfe77ef49d74631476b45804d57f7293c24d9d96771d614bd75c4e6a29bb6227e14209ef852ac050b1c68418408ee03f1765a7331719207375be9777c8c3ddb9ea41f95441b9a6e964cb10d9b87a1d241272ffa0e6b85dea2098fa7cc5c044dc5cd63a6b4c7fbb134d5f3d92535755a2ae442386ca633108f74fdfc439ba7b3a42f48ac6ca97e32f9eb0e6e3404e3e9daf1dcfb32233e051de56fe2fc3837768c7ca58d93fa3d115d751c1a1d977879ff9eeb9625f64edf2dfe8eb997e7aef141972935639eb8309eeb0d48feef10e2b4df31c873378655c4f740fa88fbcbde4911f50bf98d5e956a7cf02ab25769cd8ffaa99451aff5d234de158e0b2be61170627be036fdeda08550cbc41457fde37a28b4dc1e88d27bcbd43cbb8cff537e63e04a963b7c776e21a3ebe0b8c0982656a69982020090eb0b6a333f7bcabda3a889b846926275276b8baf5c82ff47b8140bec940982a5f22dcc987ba1f20df0f826d5b1b7f9405d5f9f0a576f03c1fad24f610b002eb44b0b000034fe8dac914891c3c8ed430391fe8b7d184eff0632c3dc682a92db0a1f9ac98de3f4b7afe1fa1dd22be007880c0314cca16579ac0da7b0a1666f9b75eead478ad61447c6d6a8cf95d426b14759099b55ade8d86b5d9dcd51fd2438605fa4cdb67e4189dd7786554c0931bdc2d8a97c16818a24695f4f6b3698cf5f64c46a0985a118b72277f385a1cac6852423f9d7f8bd85241297bb652d0b144c22bd81d26b973c3819b93161bf52c8d9d772f76fb707d3a3833101", 0x4a9}], 0x2, 0x0, 0x0, 0x2c}, 0x44004) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r4, 0x8983, &(0x7f00000002c0)={0x0, 'syzkaller0\x00', {0x1}, 0xb5}) (async) r5 = syz_open_dev$vim2m(&(0x7f0000000140), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f0000000180)={0x400, 0x2, 0x4, 0x0, 0xfe}) ioctl$vim2m_VIDIOC_EXPBUF(r5, 0xc0405668, &(0x7f00000000c0)={0x4, 0x0, 0x2, 0x880}) (async) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'dvmrp0\x00', @random="a7ae1af6fa0f"}) (async) preadv(r1, &(0x7f0000000400)=[{&(0x7f0000000080)=""/30, 0x1e}], 0x1000000000000105, 0x402, 0x7c) ioctl$MEMREAD(r0, 0xc0404d1a, 0x0) (async) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0xa08000, &(0x7f00000002c0), 0xff, 0x578, &(0x7f0000002900)="$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") 915.697216ms ago: executing program 5 (id=1109): r0 = syz_socket_connect_nvme_tcp() ioctl$XFS_IOC_GET_RESBLKS(r0, 0x80105873, &(0x7f0000000000)) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040), 0x8080, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r1, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000140)=@mangle={'mangle\x00', 0x1f, 0x6, 0x480, 0x0, 0x188, 0xa0, 0x188, 0x188, 0x3e8, 0x3e8, 0x3e8, 0x3e8, 0x3e8, 0x6, &(0x7f00000000c0), {[{{@ip={@broadcast, @private=0xa010100, 0x0, 0x0, 'rose0\x00', 'pimreg1\x00', {}, {}, 0x67, 0x0, 0x1}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0xfffffff8, 0x7, @broadcast, 0x4e20}}}, {{@uncond, 0x0, 0xc0, 0xe8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x5}}, @inet=@rpfilter={{0x28}, {0xa}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xd0, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x1}}, @common=@unspec=@statistic={{0x38}, {0x0, 0x1, 0x9, 0x10, 0x10, {0xfff}}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0x1000, 0xc, [0x7, 0xf, 0x4, 0x27, 0x1f, 0x29, 0x3e, 0x21, 0x1a, 0x36, 0x1a, 0x13, 0x1a, 0x6, 0x13, 0x2c], 0x1, 0x7, 0xc}}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x1, 0x6}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4e0) r3 = ioctl$TIOCGPTPEER(r2, 0x5441, 0x13) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000640)=0x12) pipe2$9p(&(0x7f0000000680)={0xffffffffffffffff}, 0x10000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r1, 0xc0189378, &(0x7f0000000700)={{0x1, 0x1, 0x18, r4, {r6}}, './file0\x00'}) syz_ublk_setup_queues(r8, 0x0, &(0x7f0000000740)={0x0, 0x65f4, 0x4, 0x3, 0x3af, 0x0, r7}, &(0x7f00000007c0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5691, 0x40, 0x1, 0x270}, 0xffffffffffffffff}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x9953, 0x40000, 0x2, 0x181, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6810, 0x10000, 0x3, 0x108, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb04d, 0x1, 0x1, 0x3b7, 0x0, r8}}], 0x4, &(0x7f0000001a40)={0x2e, 0x30, 0x0, r2, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x1}, 0x0, 0x0, '\x00', {0x3, 0xa6c, 0x0, &(0x7f0000000a40)=@buf_1k="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"}}, &(0x7f0000001ac0)) io_uring_register$IORING_REGISTER_EVENTFD(r10, 0x4, &(0x7f0000001b00)=r2, 0x1) r12 = syz_open_dev$rtc(&(0x7f0000001b40), 0x2, 0x408300) ioctl$RTC_WKALM_SET(r12, 0x4028700f, &(0x7f0000001b80)={0x1, 0x0, {0x39, 0x1b, 0xb, 0xd, 0x2, 0x10001, 0x5, 0x160}}) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001c00), r2) sendmsg$NL80211_CMD_SET_KEY(r8, &(0x7f0000001d00)={&(0x7f0000001bc0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001cc0)={&(0x7f0000001c40)={0x64, r13, 0x8, 0x70bd29, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_KEY_SEQ={0xa, 0xa, "fa0baee86c1b"}, @NL80211_ATTR_KEY_SEQ={0x14, 0xa, "8170279cc8e4df2c01142dccb193079b"}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x8, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x1}, @NL80211_ATTR_KEY_DEFAULT={0x4}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000c}, 0x440c0) getsockopt$inet6_tcp_buf(r2, 0x6, 0x21, &(0x7f0000001d40)=""/96, &(0x7f0000001dc0)=0x60) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r8, &(0x7f0000001ec0)={&(0x7f0000001e00)={0x10, 0x0, 0x0, 0x1200000}, 0xc, &(0x7f0000001e80)={&(0x7f0000001e40)={0x1c, 0x0, 0x200, 0x70bd27, 0x25dfdbfc, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000}, 0x4000000) r14 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r14, 0x84, 0x76, &(0x7f0000001f00)={0x0, 0xfffffffd}, &(0x7f0000001f40)=0x8) ioctl$DRM_IOCTL_MAP_BUFS(r8, 0xc0186419, &(0x7f00000035c0)={0xa, &(0x7f0000001f80)=""/77, &(0x7f00000034c0)=[{0x5, 0x5e, 0xfffffffe, &(0x7f0000002000)=""/94}, {0x8, 0x69, 0xfff, &(0x7f0000002080)=""/105}, {0x1, 0x7a, 0x3, &(0x7f0000002100)=""/122}, {0x344, 0x6d, 0x0, &(0x7f0000002180)=""/109}, {0x2, 0x1000, 0xe1, &(0x7f0000002200)=""/4096}, {0x6, 0x7f, 0xb, &(0x7f0000003200)=""/127}, {0x2, 0x0, 0xa6, &(0x7f0000003280)}, {0x6, 0xd1, 0x3, &(0x7f00000032c0)=""/209}, {0x5, 0xac, 0x6, &(0x7f00000033c0)=""/172}, {0x3, 0x35, 0x9, &(0x7f0000003480)=""/53}]}) getpid() ioctl$VIDIOC_STREAMOFF(r12, 0x40045613, &(0x7f0000003600)=0x924) ioctl$DRM_IOCTL_ADD_BUFS(r9, 0xc0206416, &(0x7f0000003640)={0xb22e, 0x8, 0x2, 0x4, 0x2, 0x6}) ioctl$XFS_IOC_FSCOUNTS(0xffffffffffffffff, 0x80205871, &(0x7f0000003680)) ioctl$sock_bt_bnep_BNEPCONNADD(r2, 0x400442c8, &(0x7f00000036c0)={r5, 0x1, 0xff7f, "636e2c487104250d73d29ebfe1d70313039048f484310d390ef6b791c862730c1dcbb65ade4775ba09e217cf494cf9bef4bfcbc2de4545171d295158714491e671de25f0c7050d3cffe2213abeb763ec038e9e7f7e395a4ddfd3113197601c3d932e548246964f890c846f3d0d7d0b48edc250b05f868ffb75d5888b4eb4dad04e21104e22c9b1e911ec131eb68794974d61479f2734d0c695742e9da4ec7d3a67614bd4e93f9a"}) fanotify_mark(r2, 0x1, 0x40001000, r11, &(0x7f0000003780)='./file0\x00') recvmmsg(r5, &(0x7f0000009b80)=[{{&(0x7f00000037c0)=@qipcrtr, 0x80, &(0x7f0000003a40)=[{&(0x7f0000003840)=""/168, 0xa8}, {&(0x7f0000003900)=""/182, 0xb6}, {&(0x7f00000039c0)=""/106, 0x6a}], 0x3}, 0x8}, {{&(0x7f0000003a80)=@l2tp={0x2, 0x0, @local}, 0x80, &(0x7f0000004b80)=[{&(0x7f0000003b00)=""/47, 0x2f}, {&(0x7f0000003b40)=""/50, 0x32}, {&(0x7f0000003b80)=""/4096, 0x1000}], 0x3, &(0x7f0000004bc0)=""/129, 0x81}, 0x2}, {{&(0x7f0000004c80)=@l2tp={0x2, 0x0, @multicast2}, 0x80, &(0x7f0000005f00)=[{&(0x7f0000004d00)=""/109, 0x6d}, {&(0x7f0000004d80)=""/149, 0x95}, {&(0x7f0000004e40)=""/173, 0xad}, {&(0x7f0000004f00)=""/4096, 0x1000}], 0x4, &(0x7f0000005f40)=""/4096, 0x1000}}, {{&(0x7f0000006f40)=@can, 0x80, &(0x7f00000071c0)=[{&(0x7f0000006fc0)=""/56, 0x38}, {&(0x7f0000007000)=""/229, 0xe5}, {&(0x7f0000007100)}, {&(0x7f0000007140)=""/109, 0x6d}], 0x4}, 0x9}, {{&(0x7f0000007200)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, 0x80, &(0x7f00000073c0)=[{&(0x7f0000007280)=""/74, 0x4a}, {&(0x7f0000007300)=""/159, 0x9f}], 0x2, &(0x7f0000007400)=""/158, 0x9e}, 0x4}, {{&(0x7f00000074c0)=@sco={0x1f, @none}, 0x80, &(0x7f0000008ac0)=[{&(0x7f0000007540)=""/198, 0xc6}, {&(0x7f0000007640)=""/8, 0x8}, {&(0x7f0000007680)=""/4096, 0x1000}, {&(0x7f0000008680)=""/153, 0x99}, {&(0x7f0000008740)=""/13, 0xd}, {&(0x7f0000008780)=""/251, 0xfb}, {&(0x7f0000008880)=""/49, 0x31}, {&(0x7f00000088c0)=""/198, 0xc6}, {&(0x7f00000089c0)=""/225, 0xe1}], 0x9, &(0x7f0000008b80)=""/4096, 0x1000}, 0xff}], 0x6, 0x2002, &(0x7f0000009d00)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000009d40)) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 776.984614ms ago: executing program 0 (id=1110): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file2\x00', 0x10ca, &(0x7f0000000240)={[{@errors_remount}, {@mblk_io_submit}, {@grpjquota}, {@grpid}, {@quota}]}, 0x5, 0x4f7, &(0x7f0000000cc0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x3, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"/2646], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r3, 0x84, 0x71, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r3, 0x84, 0x82, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000845, &(0x7f0000000000)={0xa, 0x2, 0x5, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000100)={'tunl0\x00', 0x10}) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', 0xffffffffffffff9c, 0x0, 0x0) 711.854781ms ago: executing program 6 (id=1111): syz_usb_connect(0x3, 0x86, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ffffff40cd060f010001010203010902740001010080fa090400000effffff00070581024000000705820240000007058302400000070584024000000705850240000007058602400000070587024000000705010240"], 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000180)='devtmpfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./dev/ttyUSB0\x00', 0x2, 0x0) syz_mount_image$squashfs(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0xa10c00, &(0x7f0000001480)=ANY=[], 0x0, 0x1b3, &(0x7f00000009c0)="$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") r0 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x8) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x402, 0x1, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0x4, 0x8, 0x83, 0x2, 0xe0f, 0x7f, 0xa9, 0x4d, 0x6, 0x5f, 0x9, 0x6, 0xffff2d37, 0xb60d, 0x6, 0x2, 0x7, 0x5, 0x2db, 0x0, 0x7, 0x3c5b, 0x1, 0x24, 0x10, 0x5, 0x0, 0xffffffff, 0xe661, 0x80, 0x8, 0x20003, 0x8, 0x4c76, 0x10000, 0x242, 0x3, 0x0, 0x4, 0x80008071, 0x7fe, 0x17, 0x0, 0x7, 0x5, 0x3e, 0x18e, 0x200006, 0x6, 0x454f, 0x6, 0x80004, 0x8, 0x3ff, 0x7e, 0x0, 0x5, 0x0, 0x8, 0x8000, 0x1, 0x7], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xffffbff3, 0x2, 0xc8, 0x7fffffff, 0xe, 0x2bf, 0x6c4, 0x1, 0xfffffffc, 0x5, 0x0, 0x0, 0x9, 0x2f, 0xe, 0x1, 0x66abcbd2, 0xea4, 0x8, 0x4, 0x80000005, 0x7fdf, 0x6, 0x500, 0x401, 0x6, 0x1, 0xff, 0x6, 0x2, 0x5f31, 0xd, 0x4e0, 0x381, 0x4, 0xb, 0x4, 0x9, 0x8, 0x5, 0x6, 0xfffff256, 0x6, 0x1, 0xfdfffffd, 0x8, 0x2, 0x4, 0x9, 0x3, 0x3, 0x4000008, 0x6, 0x0, 0x1, 0xfffffffc, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x4, 0x2, 0xfffffffd, 0x100, 0x4, 0x9, 0x9, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x6, 0x1ef, 0x5, 0x0, 0x2, 0x3, 0x303e, 0xfffffffa, 0xb, 0x5, 0xe83, 0x2, 0x400003, 0xfffffffd, 0x4, 0x6d01, 0x8, 0x38, 0x7fffff, 0x200, 0x80, 0x20000003, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x4, 0x3, 0x7, 0xb1, 0xaca, 0xbf, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0xffffffff, 0x5, 0x1c, 0x120000, 0x200807ff, 0x2006, 0x80a2ed, 0x1000004, 0x25], [0x5, 0xbb33, 0x7, 0x503d, 0x5, 0x4, 0x6, 0x6, 0x80000000, 0xb9, 0x1, 0x10001ff, 0x2, 0x4184, 0x5, 0x3, 0x2, 0x10000, 0x4, 0x7fff, 0x10002, 0xa620, 0x1, 0x5, 0x3, 0x6, 0x14c, 0x60a7, 0x6, 0xa, 0x1, 0x80000000, 0x8, 0x5, 0xc8, 0x1, 0xfffff000, 0xffff, 0x0, 0x7e, 0x100, 0x9622, 0x7, 0xaf, 0x20000008, 0x9, 0x226, 0x80000002, 0x5, 0x0, 0x80, 0xa1f, 0xf42, 0x6, 0x8000, 0x6c1b, 0x0, 0x4, 0x5, 0x800, 0xd7, 0x200, 0xb, 0x1003]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) r1 = fsopen(&(0x7f00000001c0)='mqueue\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x8e) io_uring_setup(0x4126, &(0x7f0000000c40)={0x0, 0xc09, 0x10420, 0x0, 0x1000000, 0x0, r2}) io_uring_register$IORING_REGISTER_SEND_MSG_RING(r0, 0x1f, &(0x7f0000000300)={0x28, 0x1, 0x0, r2, &(0x7f0000000200)="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", 0x1, 0x8, 0x1, 0x1, {0x0, 0x0, r0, 0x6}}, 0x1) 113.321866ms ago: executing program 6 (id=1112): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000040), r0) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000540), r3) sendmsg$NLBL_MGMT_C_VERSION(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)={0x14, r4, 0x1, 0x70bd2c, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x400c0) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000000c0)=0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_START_POLL(r6, &(0x7f0000000680)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x3c, r1, 0x800, 0x70bd25, 0x25dfdbfd, {}, [@NFC_ATTR_IM_PROTOCOLS={0x8, 0xd, 0x4}, @NFC_ATTR_TM_PROTOCOLS={0x8, 0xe, 0xc}, @NFC_ATTR_IM_PROTOCOLS={0x8, 0xd, 0x40}, @NFC_ATTR_IM_PROTOCOLS={0x8, 0xd, 0x90}, @NFC_ATTR_IM_PROTOCOLS={0x8, 0xd, 0x44}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000) r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r6) sendmsg$NFC_CMD_DEV_UP(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r7, 0x1, 0x124, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x5000}, 0x24044018) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000300)={&(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x80000, 0x0, 0xffffffffffffffff}) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000580)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0) r9 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) getgroups(0x3, &(0x7f0000000040)=[0x0, 0xee00, 0xee01]) setgroups(0x3, &(0x7f0000000200)=[0x0, r11, r10]) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REG(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000001600)={0x2c, r12, 0x421, 0x70bd2a, 0x25dfdbfe, {}, [@NL80211_ATTR_REG_RULES={0x18, 0x22, 0x0, 0x1, [{0x4}, {0x4}, {0x4}, {0x4}, {0x4}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2080098}, 0x54) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x4400, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r13 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) shutdown(r13, 0x0) connect$bt_rfcomm(r13, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x18}, 0xa) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r9, 0x84, 0x72, &(0x7f0000000380)={0x0, 0x21d, 0x10}, &(0x7f00000003c0)=0xc) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r9, 0x84, 0xa, &(0x7f0000000400)={0x0, 0x9, 0x8000, 0xba, 0x100, 0x1, 0x0, 0x4000000, r14}, &(0x7f0000000440)=0x20) ioctl$UI_SET_MSCBIT(0xffffffffffffffff, 0x40045568, 0x0) ioctl$MEMLOCK(r8, 0x40084d05, &(0x7f0000000340)={0x100, 0x401}) 103.965603ms ago: executing program 3 (id=1113): openat$nullb(0xffffffffffffff9c, 0x0, 0x101d02, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1800040, &(0x7f00000001c0)={[{@nodelalloc}, {}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x1}}, {@barrier}, {@block_validity}, {@nodioread_nolock}, {@grpid}, {@resuid}, {@errors_remount}]}, 0x1, 0x5b0, &(0x7f00000004c0)="$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") r0 = openat(0xffffffffffffff9c, 0x0, 0x141442, 0x40) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x80c410, &(0x7f0000000bc0)=ANY=[@ANYRESDEC=r0], 0x1, 0x2fc, &(0x7f0000000180)="$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") syz_emit_ethernet(0x17b, &(0x7f0000000200)=ANY=[], 0x0) syz_open_dev$tty1(0xc, 0x4, 0x2) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000a80)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e22}, 0x6e) socket$inet6_mptcp(0xa, 0x1, 0x106) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_open_dev$video4linux(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[], 0x50) r5 = open_tree(0xffffffffffffff9c, 0x0, 0x89901) r6 = open_tree(r5, &(0x7f0000000640)='\x00', 0x89901) move_mount(r6, 0x0, r5, 0x0, 0x46) r7 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f00000000c0)=@mangle={'mangle\x00', 0x44, 0x6, 0x398, 0x0, 0x268, 0x138, 0x0, 0x268, 0x300, 0x300, 0x300, 0x300, 0x300, 0x6, 0x0, {[{{@ip={@loopback, @dev={0xac, 0x14, 0x14, 0x13}, 0xff, 0xff000000, 'bond_slave_0\x00', 'bridge_slave_0\x00', {}, {0xff}, 0xc, 0x3, 0x74}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x2, 0x9}}}, {{@ip={@loopback, @dev={0xac, 0x14, 0x14, 0x8}, 0x0, 0xffffff00, 'wg2\x00', 'veth0_virt_wifi\x00', {}, {0xff}, 0x6, 0x1}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0xd69, 0x1, @broadcast, 0x4e24}}}, {{@ip={@rand_addr=0x64010100, @loopback, 0x0, 0xffffff00, 'team0\x00', 'hsr0\x00', {}, {}, 0xff, 0x2, 0x68}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@private=0xa010102, @multicast1, 0x0, 0xffffff00, 'syzkaller0\x00', 'team_slave_0\x00'}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x0, 0xfc}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f8) connect$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) syz_emit_ethernet(0x6a, &(0x7f0000000ac0)=ANY=[@ANYBLOB="aaaaaaaaaaaace3500590a7f08004500005c000000020211907800005145f8442927707c000000489084bf280664420081b8cf6b34749e784300000000000000eed95425ef497343e285ee56ff60d0424927f0b308000000e583a55bca1d80986985716b5fe7237cbf62baa53ec1851d64b69f0d1ade7fbaefba88fc3d7d62c6b5b11cf3f65a9d166f4125e1373c8b43e5db3b22a837ab9124c991308aafc37f4fbeea389fa6a8ddda8e1db778801c3d4001c764d96d263da92a1772441282ca6a7c0175e54bdf3bb68b69834145e2d59484ab2ed4831aafcad4746605d888ecbdde7a920a067ef4b3bd9e6143"], 0x0) 96.048364ms ago: executing program 4 (id=1114): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_ASSOCIATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000a40)={0x3c, r5, 0x1, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x96c}], @NL80211_ATTR_MAC={0xa}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000815}, 0x850) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, r5, 0x4, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_USE_RRM={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x50) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000005500010000000000fbffffff07000000", @ANYRES32, @ANYBLOB="0d0001"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) 0s ago: executing program 5 (id=1115): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) mount(&(0x7f0000001040)=@rnullb={'/dev/syzrnull', 0x0}, &(0x7f0000001080)='./file0\x00', &(0x7f00000010c0)='ext4\x00', 0x0, &(0x7f0000001100)='-#\x00') (async) mount(&(0x7f0000001040)=@rnullb={'/dev/syzrnull', 0x0}, &(0x7f0000001080)='./file0\x00', &(0x7f00000010c0)='ext4\x00', 0x0, &(0x7f0000001100)='-#\x00') write$UHID_INPUT(r0, &(0x7f0000000000)={0xfc, {"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", 0x1000}}, 0x1006) kernel console output (not intermixed with test programs): .828451][ T4705] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 31.830076][ T4712] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.831927][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.831961][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.833345][ T4709] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.849248][ T4704] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.860093][ T520] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.860121][ T520] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.860482][ T520] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.860500][ T520] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.866089][ T4704] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.875556][ T4721] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 31.876623][ T4721] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 31.876911][ T4721] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 31.877751][ T4721] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 31.879392][ T520] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.879420][ T520] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.879964][ T520] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.879983][ T520] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.880370][ T520] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.880388][ T520] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.887124][ T4721] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 31.888546][ T4721] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 31.892295][ T4704] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 31.892308][ T4704] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 31.894729][ T4721] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 31.904070][ T4721] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 31.909964][ T4709] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 31.909977][ T4709] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 31.948237][ T4712] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 31.948253][ T4712] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 32.021305][ T4705] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.026435][ T4721] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.031780][ T4705] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.053309][ T62] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.053338][ T62] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.054206][ T62] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.054226][ T62] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.063324][ T4705] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 32.063338][ T4705] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 32.067942][ T4721] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.081394][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.081426][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.082387][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.082408][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.096241][ T4721] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 32.096259][ T4721] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 32.138533][ T4712] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.149145][ T4709] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.164272][ T4709] veth0_vlan: entered promiscuous mode [ 32.169649][ T4712] veth0_vlan: entered promiscuous mode [ 32.176064][ T4709] veth1_vlan: entered promiscuous mode [ 32.182765][ T4709] veth0_macvtap: entered promiscuous mode [ 32.183808][ T4709] veth1_macvtap: entered promiscuous mode [ 32.189075][ T4712] veth1_vlan: entered promiscuous mode [ 32.194027][ T4712] veth0_macvtap: entered promiscuous mode [ 32.197633][ T4712] veth1_macvtap: entered promiscuous mode [ 32.203323][ T4712] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.204369][ T4712] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.212718][ T4704] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.213919][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.214114][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.227652][ T40] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.228074][ T40] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.239003][ T4709] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.258173][ T4709] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.262948][ T454] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.263025][ T454] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.263175][ T454] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.318042][ T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.318484][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.318495][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.341200][ T454] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.341215][ T454] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.362707][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.362720][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.381096][ T4721] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.382743][ T4705] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.386700][ T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.386712][ T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.394411][ T4704] veth0_vlan: entered promiscuous mode [ 32.398786][ T4721] veth0_vlan: entered promiscuous mode [ 32.406037][ T4704] veth1_vlan: entered promiscuous mode [ 32.417177][ T4712] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 32.420348][ T4721] veth1_vlan: entered promiscuous mode [ 32.438961][ T4705] veth0_vlan: entered promiscuous mode [ 32.441132][ T4705] veth1_vlan: entered promiscuous mode [ 32.441766][ T4704] veth0_macvtap: entered promiscuous mode [ 32.443009][ T4704] veth1_macvtap: entered promiscuous mode [ 32.453140][ T4705] veth0_macvtap: entered promiscuous mode [ 32.454124][ T4705] veth1_macvtap: entered promiscuous mode [ 32.460439][ T4721] veth0_macvtap: entered promiscuous mode [ 32.461684][ T4721] veth1_macvtap: entered promiscuous mode [ 32.472227][ T4705] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.473228][ T4705] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.481482][ T4721] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.487267][ T4721] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.491726][ T4704] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.494376][ T4704] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.494943][ T40] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.536061][ T40] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.536345][ T40] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.536363][ T40] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.557484][ T454] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.557771][ T454] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.557800][ T454] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.557818][ T454] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.559688][ T454] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.559699][ T454] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.578309][ T4893] ip6t_rpfilter: only valid in 'raw' or 'mangle' table, not '' [ 32.596608][ T62] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.596700][ T62] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.596930][ T62] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.601884][ T166] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.601914][ T166] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.615907][ T454] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.618321][ T166] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.618335][ T166] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.762775][ T4894] faux_driver vgem: [drm] Unknown color mode 7; guessing buffer size. [ 32.904953][ T4720] Bluetooth: hci0: command tx timeout [ 32.905213][ T4720] Bluetooth: hci1: command tx timeout [ 32.905415][ T4720] Bluetooth: hci3: command tx timeout [ 32.905604][ T4720] Bluetooth: hci2: command tx timeout [ 32.906648][ T4716] Bluetooth: hci4: command tx timeout [ 33.526246][ T54] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.526260][ T54] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.601738][ T520] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.601756][ T520] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.609381][ T54] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.609394][ T54] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 35.129024][ T4716] Bluetooth: hci4: command tx timeout [ 35.129263][ T4716] Bluetooth: hci2: command tx timeout [ 35.129334][ T4716] Bluetooth: hci3: command tx timeout [ 35.129393][ T4716] Bluetooth: hci1: command tx timeout [ 35.129461][ T4716] Bluetooth: hci0: command tx timeout [ 36.219824][ T4926] nvmet_tcp: malformed ip/port passed: :442 [ 36.549386][ T4931] fuse: Bad value for 'rootmode' [ 37.324242][ T4719] Bluetooth: hci0: command tx timeout [ 37.324275][ T4719] Bluetooth: hci1: command tx timeout [ 37.324295][ T4719] Bluetooth: hci3: command tx timeout [ 37.324312][ T4719] Bluetooth: hci2: command tx timeout [ 37.324329][ T4719] Bluetooth: hci4: command tx timeout [ 38.242030][ T4950] loop0: detected capacity change from 0 to 8192 [ 39.170381][ T4958] loop1: detected capacity change from 0 to 256 [ 39.544747][ T4716] Bluetooth: hci4: command tx timeout [ 39.544842][ T4716] Bluetooth: hci2: command tx timeout [ 39.544901][ T4716] Bluetooth: hci3: command tx timeout [ 39.544958][ T4716] Bluetooth: hci1: command tx timeout [ 39.545015][ T4716] Bluetooth: hci0: command tx timeout [ 39.746360][ T4950] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 39.927215][ T4963] openvswitch: netlink: Actions may not be safe on all matching packets [ 40.132265][ T4958] netlink: 4 bytes leftover after parsing attributes in process `syz.1.16'. [ 40.132811][ T4964] netlink: 4 bytes leftover after parsing attributes in process `syz.1.16'. [ 44.504511][ T5018] loop2: detected capacity change from 0 to 2048 [ 44.504944][ T5018] ext4: Unknown parameter 'func' [ 44.515029][ T5017] loop3: detected capacity change from 0 to 512 [ 44.521260][ T5017] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 44.521318][ T5017] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 44.553761][ T5017] EXT4-fs (loop3): 1 truncate cleaned up [ 45.456718][ T5017] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 45.476923][ T5016] overlayfs: statfs failed on './file0' [ 45.505147][ T5017] EXT4-fs error (device loop3): __ext4_expand_extra_isize:6542: inode #12: comm syz.3.30: bad extra_isize 62 (inode size 256) [ 45.505776][ T5017] EXT4-fs (loop3): Remounting filesystem read-only [ 45.523314][ T5028] Cannot find set identified by id 0 to match [ 45.566375][ T5017] netlink: 4 bytes leftover after parsing attributes in process `syz.3.30'. [ 45.666568][ T5036] loop2: detected capacity change from 0 to 256 [ 45.671523][ T5037] syz_tun: entered allmulticast mode [ 45.681720][ T5036] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 45.689781][ T5036] FAT-fs (loop2): error, allocated dir entry found after end-of-directory marker (i_pos 1) [ 45.689795][ T5036] FAT-fs (loop2): Filesystem has been set read-only [ 45.692224][ T4709] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.700790][ T5034] FAULT_INJECTION: forcing a failure. [ 45.700790][ T5034] name fail_futex, interval 1, probability 0, space 0, times 1 [ 45.700808][ T5034] CPU: 1 UID: 0 PID: 5034 Comm: syz.4.35 Not tainted syzkaller #0 PREEMPT [ 45.700820][ T5034] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 45.700826][ T5034] Call trace: [ 45.700830][ T5034] show_stack+0x2c/0x3c (C) [ 45.700850][ T5034] __dump_stack+0x30/0x40 [ 45.700862][ T5034] dump_stack_lvl+0xd8/0x12c [ 45.700873][ T5034] dump_stack+0x1c/0x28 [ 45.700884][ T5034] should_fail_ex+0x418/0x58c [ 45.700897][ T5034] should_fail+0x14/0x24 [ 45.700908][ T5034] get_futex_key+0x1ec/0x12b0 [ 45.700919][ T5034] futex_wait_setup+0x58/0x674 [ 45.700930][ T5034] __futex_wait+0x108/0x25c [ 45.700941][ T5034] futex_wait+0x108/0x2c0 [ 45.700952][ T5034] do_futex+0x320/0x378 [ 45.700962][ T5034] __arm64_sys_futex+0x2e4/0x418 [ 45.700972][ T5034] invoke_syscall+0x98/0x244 [ 45.700984][ T5034] el0_svc_common+0xec/0x23c [ 45.700995][ T5034] do_el0_svc+0x4c/0x5c [ 45.701006][ T5034] el0_svc+0x60/0x1d8 [ 45.701017][ T5034] el0t_64_sync_handler+0x44/0x104 [ 45.701028][ T5034] el0t_64_sync+0x198/0x19c [ 45.827780][ T5043] netlink: 300 bytes leftover after parsing attributes in process `syz.3.37'. [ 45.930644][ T5051] loop2: detected capacity change from 0 to 512 [ 47.114927][ T5070] loop4: detected capacity change from 0 to 461 [ 47.131562][ T5075] loop2: detected capacity change from 0 to 512 [ 47.344185][ T5078] loop3: detected capacity change from 0 to 512 [ 47.347931][ T5078] EXT4-fs: Ignoring removed i_version option [ 47.450854][ T5078] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 47.512164][ T5078] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.053453][ T5075] workqueue: Failed to create a rescuer kthread for wq "ext4-rsv-conversion": -EINTR [ 48.053726][ T5075] EXT4-fs: failed to create workqueue [ 48.053733][ T5075] EXT4-fs (loop2): mount failed [ 48.064382][ T5083] loop1: detected capacity change from 0 to 256 [ 48.077827][ T5083] vfat: Unknown parameter 'rir' [ 48.187401][ T4709] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.236657][ T5089] netlink: 'syz.1.50': attribute type 1 has an invalid length. [ 48.237207][ T5086] loop2: detected capacity change from 0 to 4096 [ 48.243803][ T5086] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 48.243824][ T5086] EXT4-fs (loop2): Test dummy encryption mode enabled [ 48.248120][ T5091] binder: 5090:5091 BC_CLEAR_DEATH_NOTIFICATION death notification cookie mismatch 00000000000000fc != 0000000000000000 [ 48.260295][ T5086] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=280ec128, mo2=0003] [ 48.260327][ T5086] System zones: 0-5 [ 48.261111][ T5086] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.276844][ T5096] overlayfs: failed to resolve './bus': -2 [ 48.292279][ T5086] fscrypt: AES-256-CBC-CTS using implementation "cts-cbc-aes-ce" [ 48.330715][ T4721] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.717876][ T5108] ieee802154 phy0 wpan0: encryption failed: -22 [ 48.812726][ T5122] syzkaller0: entered promiscuous mode [ 48.812743][ T5122] syzkaller0: entered allmulticast mode [ 48.818891][ T30] audit: type=1326 audit(48.810:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5120 comm="syz.4.56" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff86978868 code=0x0 [ 48.902999][ T5138] netlink: 8 bytes leftover after parsing attributes in process `syz.1.59'. [ 48.906307][ T5138] gtp0: entered allmulticast mode [ 49.002771][ T5113] bond1: entered allmulticast mode [ 49.002937][ T5113] 8021q: adding VLAN 0 to HW filter on device bond1 [ 49.021270][ T5113] bond2: entered allmulticast mode [ 49.021403][ T5113] 8021q: adding VLAN 0 to HW filter on device bond2 [ 49.032372][ T5113] bond3: entered allmulticast mode [ 49.035591][ T5113] 8021q: adding VLAN 0 to HW filter on device bond3 [ 49.060875][ T5113] bond4: entered allmulticast mode [ 49.061619][ T5113] 8021q: adding VLAN 0 to HW filter on device bond4 [ 49.072370][ T5113] bond5: entered allmulticast mode [ 49.072542][ T5113] 8021q: adding VLAN 0 to HW filter on device bond5 [ 49.084371][ T5160] loop1: detected capacity change from 0 to 128 [ 49.086883][ T5113] bond6: entered allmulticast mode [ 49.087045][ T5113] 8021q: adding VLAN 0 to HW filter on device bond6 [ 49.088572][ T5160] ======================================================= [ 49.088572][ T5160] WARNING: The mand mount option has been deprecated and [ 49.088572][ T5160] and is ignored by this kernel. Remove the mand [ 49.088572][ T5160] option from the mount to silence this warning. [ 49.088572][ T5160] ======================================================= [ 49.089966][ T5160] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 49.093750][ T5113] bond7: entered allmulticast mode [ 49.093889][ T5113] 8021q: adding VLAN 0 to HW filter on device bond7 [ 49.125605][ T5160] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 49.136539][ T5113] bond8: entered allmulticast mode [ 49.136684][ T5113] 8021q: adding VLAN 0 to HW filter on device bond8 [ 49.171621][ T5113] bond9: entered allmulticast mode [ 49.174889][ T5113] 8021q: adding VLAN 0 to HW filter on device bond9 [ 49.186836][ T5113] bond10: entered allmulticast mode [ 49.186998][ T5113] 8021q: adding VLAN 0 to HW filter on device bond10 [ 49.214264][ T5113] bond11: entered allmulticast mode [ 49.214776][ T5113] 8021q: adding VLAN 0 to HW filter on device bond11 [ 49.230819][ T4895] Bluetooth: hci5: Frame reassembly failed (-84) [ 49.231026][ T4895] Bluetooth: hci5: Frame reassembly failed (-84) [ 49.232513][ T4896] Bluetooth: hci5: Frame reassembly failed (-84) [ 49.298709][ T5113] bond12: entered allmulticast mode [ 49.299913][ T5113] 8021q: adding VLAN 0 to HW filter on device bond12 [ 49.311002][ T5113] bond13: entered allmulticast mode [ 49.312215][ T5113] 8021q: adding VLAN 0 to HW filter on device bond13 [ 49.320522][ T5113] bond14: entered allmulticast mode [ 49.320673][ T5113] 8021q: adding VLAN 0 to HW filter on device bond14 [ 49.344720][ T5113] bond15: entered allmulticast mode [ 49.344891][ T5113] 8021q: adding VLAN 0 to HW filter on device bond15 [ 50.103134][ T5113] bond16: entered allmulticast mode [ 50.103304][ T5113] 8021q: adding VLAN 0 to HW filter on device bond16 [ 50.335886][ T5228] netlink: 8 bytes leftover after parsing attributes in process `syz.2.64'. [ 50.428079][ T5238] nvme_fc: nvme_fc_create_ctrl: nn-0x3333333333333333:pn-0x4444444444444444 - nn-0x1111111111111111:pn-0x2222222222222222 combination not found [ 50.428558][ T5238] netlink: 40 bytes leftover after parsing attributes in process `syz.0.68'. [ 50.428833][ T5238] netlink: 40 bytes leftover after parsing attributes in process `syz.0.68'. [ 50.911904][ T5257] netlink: 32 bytes leftover after parsing attributes in process `syz.3.75'. [ 51.003422][ T5268] loop3: detected capacity change from 0 to 128 [ 51.004156][ T5268] FAT-fs (loop3): bogus number of reserved sectors [ 51.004166][ T5268] FAT-fs (loop3): This looks like a DOS 1.x volume, but isn't a recognized floppy size (128 sectors) [ 51.004174][ T5268] FAT-fs (loop3): Can't find a valid FAT filesystem [ 51.053713][ T5270] netlink: 104 bytes leftover after parsing attributes in process `syz.3.80'. [ 51.060203][ T5270] netlink: 104 bytes leftover after parsing attributes in process `syz.3.80'. [ 51.240533][ T5289] loop4: detected capacity change from 0 to 8 [ 51.246547][ T5286] tipc: Started in network mode [ 51.246564][ T5286] tipc: Node identity aaaaaaaaaaaa, cluster identity 4711 [ 51.246638][ T5286] tipc: Enabled bearer , priority 0 [ 51.247066][ T5289] squashfs: SQUASHFS error: Xattrs in filesystem, these will be ignored [ 51.247077][ T5289] unable to read xattr id index table [ 51.247685][ T5286] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.81'. [ 51.272085][ T5290] netlink: 8 bytes leftover after parsing attributes in process `syz.4.86'. [ 51.272092][ T5289] netlink: 8 bytes leftover after parsing attributes in process `syz.4.86'. [ 51.285623][ T4719] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 51.941831][ T4705] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 51.974027][ T5311] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 51.975626][ T868] usb 1-1: new low-speed USB device number 2 using dummy_hcd [ 52.031262][ T5317] loop1: detected capacity change from 0 to 512 [ 52.034093][ T5317] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 52.042958][ T5317] EXT4-fs (loop1): 1 truncate cleaned up [ 52.043419][ T5317] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 52.050115][ T5317] EXT4-fs warning (device loop1): ext4_group_add:1735: No reserved GDT blocks, can't resize [ 52.062540][ T4705] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.177386][ T868] usb 1-1: unable to get BOS descriptor or descriptor too short [ 52.177441][ T868] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 52.185795][ T5322] IPVS: set_ctl: invalid protocol: 43 0.0.0.0:20003 [ 52.186703][ T30] audit: type=1326 audit(52.180:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5321 comm="syz.4.97" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff86978868 code=0x0 [ 52.187137][ T868] usb 1-1: config 1 has an invalid descriptor of length 229, skipping remainder of the config [ 52.187150][ T868] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 52.190987][ T868] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 52.191003][ T868] usb 1-1: Product: Ñ [ 52.191010][ T868] usb 1-1: SerialNumber: 䳠ኪ숦âšëŸ©ä©îˆ”諠迌ﺷ羣挣 [ 52.265179][ T4976] tipc: Node number set to 43690 [ 52.295123][ T5332] netlink: 80 bytes leftover after parsing attributes in process `syz.2.100'. [ 52.367148][ T5334] netlink: 12 bytes leftover after parsing attributes in process `syz.2.101'. [ 52.411347][ T868] usb 1-1: USB disconnect, device number 2 [ 52.504352][ T5340] Zero length message leads to an empty skb [ 52.961080][ T5351] loop4: detected capacity change from 0 to 1024 [ 52.969651][ T5351] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 52.970886][ T5351] EXT4-fs (loop4): Errors on filesystem, clearing orphan list. [ 52.971358][ T5351] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 52.982327][ T5351] EXT4-fs warning (device loop4): empty_inline_dir:1785: bad inline directory (dir #12) - no `..' [ 52.997286][ T4704] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.059780][ T5359] loop4: detected capacity change from 0 to 128 [ 53.069667][ T5359] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 53.083875][ T30] audit: type=1326 audit(53.070:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5353 comm="syz.3.106" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff9c378868 code=0x0 [ 53.091817][ T5359] netlink: 12 bytes leftover after parsing attributes in process `syz.4.108'. [ 53.103072][ T4704] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 53.130864][ T5364] syz.0.110 uses obsolete (PF_INET,SOCK_PACKET) [ 53.224883][ T5374] bonding: bond0 is being deleted... [ 53.231320][ T5374] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 53.253453][ T5374] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 53.260067][ T5374] bond0 (unregistering): Released all slaves [ 53.282297][ T5381] input: syz1 as /devices/virtual/input/input2 [ 53.467173][ T5396] can: request_module (can-proto-3) failed. [ 53.473724][ T5396] can: request_module (can-proto-3) failed. [ 53.480967][ T5396] can: request_module (can-proto-3) failed. [ 53.488304][ T5396] can: request_module (can-proto-3) failed. [ 53.498829][ T5396] can: request_module (can-proto-3) failed. [ 53.538604][ T5396] can: request_module (can-proto-3) failed. [ 53.542020][ T5407] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 53.542279][ T5407] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 53.542500][ T5407] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 53.543959][ T5407] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 53.565278][ T5396] can: request_module (can-proto-3) failed. [ 53.580466][ T5407] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 53.597779][ T5414] process 'syz.3.121' launched './file1' with NULL argv: empty string added [ 53.604023][ T5396] can: request_module (can-proto-3) failed. [ 53.621882][ T5436] ip_tables: iptables: counters copy to user failed while replacing table [ 53.624279][ T5408] nvme_fabrics: found same hostid 430cadc0-7e27-4917-baaa-fdf373098f10 but different hostnqn nq [ 53.627620][ T5396] can: request_module (can-proto-3) failed. [ 53.650036][ T5396] can: request_module (can-proto-3) failed. [ 53.676951][ T5460] netlink: 20 bytes leftover after parsing attributes in process `syz.3.124'. [ 53.815374][ T5523] loop3: detected capacity change from 0 to 512 [ 54.222321][ T5564] loop4: detected capacity change from 0 to 1024 [ 54.230159][ T5562] capability: warning: `syz.1.128' uses deprecated v2 capabilities in a way that may be insecure [ 54.352048][ T5574] netlink: 'syz.0.130': attribute type 10 has an invalid length. [ 54.362680][ T5574] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 54.890413][ T5580] ip_tables: iptables: counters copy to user failed while replacing table [ 54.932908][ T5582] FAULT_INJECTION: forcing a failure. [ 54.932908][ T5582] name failslab, interval 1, probability 0, space 0, times 1 [ 54.932930][ T5582] CPU: 0 UID: 0 PID: 5582 Comm: syz.2.133 Tainted: G L syzkaller #0 PREEMPT [ 54.932942][ T5582] Tainted: [L]=SOFTLOCKUP [ 54.932945][ T5582] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 54.932950][ T5582] Call trace: [ 54.932953][ T5582] show_stack+0x2c/0x3c (C) [ 54.932973][ T5582] __dump_stack+0x30/0x40 [ 54.932985][ T5582] dump_stack_lvl+0xd8/0x12c [ 54.932997][ T5582] dump_stack+0x1c/0x28 [ 54.933008][ T5582] should_fail_ex+0x418/0x58c [ 54.933021][ T5582] should_failslab+0xc4/0x120 [ 54.933034][ T5582] kmem_cache_alloc_lru_noprof+0x98/0x5d8 [ 54.933042][ T5582] __d_alloc+0x50/0x600 [ 54.933051][ T5582] d_alloc_pseudo+0x2c/0xd8 [ 54.933060][ T5582] alloc_path_pseudo+0xe8/0x1d4 [ 54.933069][ T5582] alloc_file_pseudo+0xb0/0x198 [ 54.933077][ T5582] __anon_inode_getfile+0x118/0x1c8 [ 54.933090][ T5582] __anon_inode_getfd+0x70/0xf4 [ 54.933102][ T5582] anon_inode_getfd+0x44/0x58 [ 54.933114][ T5582] bpf_enable_stats+0xe0/0x148 [ 54.933125][ T5582] __sys_bpf+0x6f8/0x82c [ 54.933134][ T5582] __arm64_sys_bpf+0xd0/0xec [ 54.933143][ T5582] invoke_syscall+0x98/0x244 [ 54.933155][ T5582] el0_svc_common+0xec/0x23c [ 54.933166][ T5582] do_el0_svc+0x4c/0x5c [ 54.933177][ T5582] el0_svc+0x60/0x1d8 [ 54.933189][ T5582] el0t_64_sync_handler+0x44/0x104 [ 54.933200][ T5582] el0t_64_sync+0x198/0x19c [ 55.088857][ T5593] FAULT_INJECTION: forcing a failure. [ 55.088857][ T5593] name failslab, interval 1, probability 0, space 0, times 0 [ 55.088886][ T5593] CPU: 0 UID: 0 PID: 5593 Comm: syz.1.136 Tainted: G L syzkaller #0 PREEMPT [ 55.088901][ T5593] Tainted: [L]=SOFTLOCKUP [ 55.088905][ T5593] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 55.088911][ T5593] Call trace: [ 55.088914][ T5593] show_stack+0x2c/0x3c (C) [ 55.088935][ T5593] __dump_stack+0x30/0x40 [ 55.088947][ T5593] dump_stack_lvl+0xd8/0x12c [ 55.088959][ T5593] dump_stack+0x1c/0x28 [ 55.088970][ T5593] should_fail_ex+0x418/0x58c [ 55.088983][ T5593] should_failslab+0xc4/0x120 [ 55.088996][ T5593] kmem_cache_alloc_lru_noprof+0x98/0x5d8 [ 55.089004][ T5593] __d_alloc+0x50/0x600 [ 55.089013][ T5593] d_alloc_pseudo+0x2c/0xd8 [ 55.089023][ T5593] alloc_path_pseudo+0xe8/0x1d4 [ 55.089031][ T5593] alloc_file_pseudo+0xb0/0x198 [ 55.089040][ T5593] sock_alloc_file+0xb4/0x1ac [ 55.089050][ T5593] __sys_socket+0x90/0xec [ 55.089064][ T5593] __arm64_sys_socket+0x84/0x9c [ 55.089073][ T5593] invoke_syscall+0x98/0x244 [ 55.089086][ T5593] el0_svc_common+0xec/0x23c [ 55.089098][ T5593] do_el0_svc+0x4c/0x5c [ 55.089109][ T5593] el0_svc+0x60/0x1d8 [ 55.089121][ T5593] el0t_64_sync_handler+0x44/0x104 [ 55.089132][ T5593] el0t_64_sync+0x198/0x19c [ 55.203823][ T5605] netlink: 'syz.4.143': attribute type 10 has an invalid length. [ 55.324273][ T5613] ip_tables: iptables: counters copy to user failed while replacing table [ 56.162923][ T5627] FAULT_INJECTION: forcing a failure. [ 56.162923][ T5627] name failslab, interval 1, probability 0, space 0, times 0 [ 56.162946][ T5627] CPU: 0 UID: 0 PID: 5627 Comm: syz.1.150 Tainted: G L syzkaller #0 PREEMPT [ 56.162960][ T5627] Tainted: [L]=SOFTLOCKUP [ 56.162964][ T5627] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 56.162969][ T5627] Call trace: [ 56.162972][ T5627] show_stack+0x2c/0x3c (C) [ 56.162993][ T5627] __dump_stack+0x30/0x40 [ 56.163008][ T5627] dump_stack_lvl+0xd8/0x12c [ 56.163020][ T5627] dump_stack+0x1c/0x28 [ 56.163031][ T5627] should_fail_ex+0x418/0x58c [ 56.163047][ T5627] should_failslab+0xc4/0x120 [ 56.163060][ T5627] kmem_cache_alloc_noprof+0x94/0x5d4 [ 56.163069][ T5627] __kernfs_new_node+0xf0/0x7d8 [ 56.163079][ T5627] kernfs_new_node+0xe8/0x130 [ 56.163089][ T5627] __kernfs_create_file+0x60/0x2e0 [ 56.163100][ T5627] sysfs_add_file_mode_ns+0x1e8/0x2a4 [ 56.163111][ T5627] internal_create_group+0x550/0xb30 [ 56.163124][ T5627] internal_create_groups+0x64/0x138 [ 56.163136][ T5627] sysfs_create_groups+0x2c/0x3c [ 56.163148][ T5627] kobject_add_internal+0x2cc/0x6f0 [ 56.163162][ T5627] kobject_add_varg+0x9c/0xe8 [ 56.163174][ T5627] kobject_init_and_add+0xec/0x13c [ 56.163186][ T5627] rpc_sysfs_xprt_setup+0x12c/0x234 [ 56.163197][ T5627] xprt_switch_alloc+0x230/0x314 [ 56.163208][ T5627] rpc_create_xprt+0x160/0x6e0 [ 56.163219][ T5627] rpc_create+0x4dc/0x734 [ 56.163229][ T5627] nfs_mount+0x36c/0x618 [ 56.163237][ T5627] nfs_try_get_tree+0x5a8/0xcd8 [ 56.163246][ T5627] nfs_get_tree+0xbf0/0xf18 [ 56.163257][ T5627] vfs_get_tree+0x90/0x28c [ 56.163267][ T5627] vfs_cmd_create+0xb8/0x1d0 [ 56.163276][ T5627] vfs_fsconfig_locked+0x17c/0x2bc [ 56.163285][ T5627] __arm64_sys_fsconfig+0x634/0x72c [ 56.163295][ T5627] invoke_syscall+0x98/0x244 [ 56.163307][ T5627] el0_svc_common+0xec/0x23c [ 56.163318][ T5627] do_el0_svc+0x4c/0x5c [ 56.163329][ T5627] el0_svc+0x60/0x1d8 [ 56.163340][ T5627] el0t_64_sync_handler+0x44/0x104 [ 56.163351][ T5627] el0t_64_sync+0x198/0x19c [ 56.163464][ T5627] kobject: kobject_add_internal failed for xprt-0-tcp (error: -12 parent: switch-0) [ 56.218011][ T5623] __nla_validate_parse: 4 callbacks suppressed [ 56.218022][ T5623] netlink: 13 bytes leftover after parsing attributes in process `syz.3.148'. [ 56.293250][ T5636] PKCS7: Unknown OID: [158] 2.16.840.1.101.3.4.2.13 [ 56.293264][ T5636] Unsupported digest algo: 106 [ 56.325940][ T5641] netlink: 8 bytes leftover after parsing attributes in process `syz.1.153'. [ 56.359204][ T5643] warning: `syz.1.154' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 56.422263][ T5649] netlink: 68 bytes leftover after parsing attributes in process `syz.4.157'. [ 56.424082][ T5649] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 56.488674][ T5656] ip_tables: iptables: counters copy to user failed while replacing table [ 56.558597][ T5656] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 56.589698][ T5668] netlink: 72 bytes leftover after parsing attributes in process `syz.1.159'. [ 56.589970][ T5667] netlink: 64 bytes leftover after parsing attributes in process `syz.4.163'. [ 56.590593][ T5668] netlink: 'syz.1.159': attribute type 29 has an invalid length. [ 56.597907][ T5667] loop4: detected capacity change from 0 to 1024 [ 56.598300][ T5667] EXT4-fs: Ignoring removed oldalloc option [ 56.598309][ T5667] EXT4-fs: Ignoring removed orlov option [ 56.620784][ T5667] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 56.623817][ T5673] netlink: 8 bytes leftover after parsing attributes in process `syz.2.164'. [ 56.625076][ T5669] EXT4-fs error (device loop4): ext4_validate_block_bitmap:445: comm syz.4.163: bg 0: block 112: padding at end of block bitmap is not set [ 56.639130][ T5667] syzkaller1: entered promiscuous mode [ 56.639146][ T5667] syzkaller1: entered allmulticast mode [ 56.673255][ T5680] 9pnet_fd: Insufficient options for proto=fd [ 56.692426][ T4704] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 56.699165][ T5684] overlayfs: failed to resolve './file0': -2 [ 56.769230][ T5696] netlink: 8 bytes leftover after parsing attributes in process `syz.2.174'. [ 56.809096][ T5698] netlink: 20 bytes leftover after parsing attributes in process `syz.2.175'. [ 56.819953][ T5704] netlink: 8 bytes leftover after parsing attributes in process `syz.4.176'. [ 57.172358][ T5715] netlink: 8 bytes leftover after parsing attributes in process `syz.3.179'. [ 57.173432][ T5715] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.285601][ T4716] Bluetooth: hci0: command 0x0406 tx timeout [ 57.878967][ T5757] dummy0: entered promiscuous mode [ 57.905066][ T5762] ipip0: entered promiscuous mode [ 58.434990][ T5798] binder: 5796:5798 ERROR: BC_REGISTER_LOOPER called after BC_ENTER_LOOPER [ 58.467923][ T5785] ip_tables: iptables: counters copy to user failed while replacing table [ 58.562177][ T5794] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 58.600681][ T30] audit: type=1326 audit(58.590:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5791 comm="syz.4.204" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff86978868 code=0x7fc00000 [ 58.669097][ T5811] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 58.669316][ T5811] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 59.139842][ T5848] batadv_slave_0: entered promiscuous mode [ 59.140651][ T5847] batadv_slave_0: left promiscuous mode [ 59.466906][ T5859] FAULT_INJECTION: forcing a failure. [ 59.466906][ T5859] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 59.466928][ T5859] CPU: 1 UID: 0 PID: 5859 Comm: syz.1.223 Tainted: G L syzkaller #0 PREEMPT [ 59.466941][ T5859] Tainted: [L]=SOFTLOCKUP [ 59.466944][ T5859] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 59.466949][ T5859] Call trace: [ 59.466952][ T5859] show_stack+0x2c/0x3c (C) [ 59.466971][ T5859] __dump_stack+0x30/0x40 [ 59.466983][ T5859] dump_stack_lvl+0xd8/0x12c [ 59.466995][ T5859] dump_stack+0x1c/0x28 [ 59.467006][ T5859] should_fail_ex+0x418/0x58c [ 59.467020][ T5859] should_fail+0x14/0x24 [ 59.467031][ T5859] should_fail_usercopy+0x20/0x30 [ 59.467044][ T5859] io_query+0x3f8/0x810 [ 59.467056][ T5859] __arm64_sys_io_uring_register+0x374/0x12d0 [ 59.467068][ T5859] invoke_syscall+0x98/0x244 [ 59.467080][ T5859] el0_svc_common+0xec/0x23c [ 59.467092][ T5859] do_el0_svc+0x4c/0x5c [ 59.467103][ T5859] el0_svc+0x60/0x1d8 [ 59.467114][ T5859] el0t_64_sync_handler+0x44/0x104 [ 59.467125][ T5859] el0t_64_sync+0x198/0x19c [ 59.516729][ T5857] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.516897][ T5857] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.518493][ T5853] ip_tables: iptables: counters copy to user failed while replacing table [ 59.648022][ T5857] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 59.650267][ T5857] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 59.684771][ T4716] Bluetooth: hci1: command 0x0406 tx timeout [ 59.804740][ T520] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.804776][ T520] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.804793][ T520] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.804808][ T520] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.810413][ T5875] Bluetooth: MGMT ver 1.23 [ 60.263553][ T5892] netlink: 'syz.4.233': attribute type 1 has an invalid length. [ 60.276992][ T5892] 8021q: adding VLAN 0 to HW filter on device bond0 [ 60.802192][ T4719] Bluetooth: hci0: unexpected event for opcode 0x0c14 [ 60.863349][ T5929] evm: overlay not supported [ 61.841680][ T5972] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 61.901172][ T5977] nvmet: adding nsid 1 to subsystem testsubsys [ 61.902261][ T5974] nvmet: failed to open file /dev/null: (-22) [ 61.939709][ T5963] fuse: Unknown parameter 'µÉŠ^ [ 61.939709][ T5963] qpè£A²ßŽhÛ»>«ní˜)õì0x0000000000000005' [ 62.101716][ T5991] ip_tables: iptables: counters copy to user failed while replacing table [ 62.252694][ T6001] IPVS: wrr: TCP 127.0.0.1:21 - no destination available [ 62.256208][ T40] IPVS: starting estimator thread 0... [ 62.345301][ T6002] IPVS: using max 61 ests per chain, 146400 per kthread [ 62.822705][ T6019] __nla_validate_parse: 14 callbacks suppressed [ 62.822722][ T6019] netlink: 20 bytes leftover after parsing attributes in process `syz.2.273'. [ 62.884295][ T6020] netlink: 24 bytes leftover after parsing attributes in process `syz.3.274'. [ 62.884316][ T6020] netlink: 24 bytes leftover after parsing attributes in process `syz.3.274'. [ 62.885939][ T6020] syzkaller1: entered promiscuous mode [ 62.885956][ T6020] syzkaller1: entered allmulticast mode [ 62.944083][ T30] audit: type=1326 audit(62.930:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6013 comm="syz.3.274" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff9c378868 code=0x0 [ 64.489687][ T1595] ieee802154 phy0 wpan0: encryption failed: -22 [ 64.489722][ T1595] ieee802154 phy1 wpan1: encryption failed: -22 [ 64.491177][ T24] cfg80211: failed to load regulatory.db [ 64.660061][ T6090] Soft offlining pfn 0x135bcf at process virtual address 0x20631000 [ 64.666067][ T6090] Soft offlining pfn 0x121025 at process virtual address 0x20632000 [ 65.031177][ T6093] null_blk: disk nullb1 created [ 65.273305][ T6115] netlink: 12 bytes leftover after parsing attributes in process `syz.4.303'. [ 66.469650][ T6151] fuse: Bad value for 'fd' [ 66.780699][ T6185] ip_tables: iptables: counters copy to user failed while replacing table [ 66.841831][ T6198] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 68.444543][ T6212] fuse: Unknown parameter 'ƒÜmjeµ†¯C‘©x¾' [ 68.682832][ T6229] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 69.735447][ T6243] netlink: 8 bytes leftover after parsing attributes in process `syz.2.341'. [ 69.772995][ T6245] netlink: 4 bytes leftover after parsing attributes in process `syz.2.342'. [ 69.782166][ T6248] ip_tables: iptables: counters copy to user failed while replacing table [ 69.920407][ T6259] netlink: 60 bytes leftover after parsing attributes in process `syz.2.348'. [ 69.920718][ T6259] netlink: 60 bytes leftover after parsing attributes in process `syz.2.348'. [ 70.144963][ T24] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 70.405894][ T24] usb 1-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.40 [ 70.406822][ T24] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 70.406835][ T24] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 3 [ 70.409068][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 70.409084][ T24] usb 1-1: Product: syz [ 70.409092][ T24] usb 1-1: Manufacturer: syz [ 70.409099][ T24] usb 1-1: SerialNumber: syz [ 70.620092][ T6264] netlink: 16 bytes leftover after parsing attributes in process `syz.0.349'. [ 72.084054][ T6299] 9pnet_virtio: no channels available for device éq‰Y’3aK [ 72.180956][ T6297] netlink: 24 bytes leftover after parsing attributes in process `syz.4.360'. [ 72.983360][ T24] usb 1-1: USB disconnect, device number 3 [ 73.020269][ T6318] MPI: mpi too large (32200 bits) [ 73.151306][ T6322] ip_tables: iptables: counters copy to user failed while replacing table [ 73.191573][ T6328] netlink: 'syz.3.369': attribute type 322 has an invalid length. [ 73.208660][ T6331] ip_tables: iptables: counters copy to user failed while replacing table [ 73.229000][ T6328] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 73.229014][ T6328] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 73.230996][ T6328] vhci_hcd vhci_hcd.0: Device attached [ 73.239259][ T6333] vhci_hcd: cannot find the pending unlink 6 [ 73.438074][ T6342] netlink: 12 bytes leftover after parsing attributes in process `syz.0.373'. [ 73.438094][ T6342] netlink: 40 bytes leftover after parsing attributes in process `syz.0.373'. [ 73.465316][ T24] usb 8-1: new high-speed USB device number 2 using vhci_hcd [ 73.473539][ T6349] netlink: 165 bytes leftover after parsing attributes in process `syz.0.376'. [ 73.863768][ T6333] vhci_hcd: connection reset by peer [ 73.865216][ T40] vhci_hcd vhci_hcd.3: stop threads [ 73.865462][ T40] vhci_hcd vhci_hcd.3: release socket [ 73.865847][ T40] vhci_hcd vhci_hcd.3: disconnect device [ 75.099043][ T6390] ip_tables: iptables: counters copy to user failed while replacing table [ 75.104024][ T6390] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 75.321430][ T6410] nvme_fabrics: missing parameter 'nqn=%s' [ 75.322309][ T6410] 9p: Bad value for 'rfdno' [ 75.502850][ T6435] netlink: 4 bytes leftover after parsing attributes in process `syz.4.400'. [ 75.601530][ T6437] ip_tables: iptables: counters copy to user failed while replacing table [ 75.689912][ T6453] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.408'. [ 75.700434][ T6453] netlink: 4 bytes leftover after parsing attributes in process `syz.4.408'. [ 75.717976][ T30] audit: type=1326 audit(75.710:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6450 comm="syz.3.407" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff9c378868 code=0x0 [ 75.723172][ T6453] team0: Port device team_slave_0 removed [ 75.820938][ T6465] netlink: 'syz.3.407': attribute type 34 has an invalid length. [ 75.820955][ T6465] netlink: 8 bytes leftover after parsing attributes in process `syz.3.407'. [ 75.837383][ T6470] netlink: 60 bytes leftover after parsing attributes in process `syz.4.414'. [ 75.837834][ T6470] netlink: 60 bytes leftover after parsing attributes in process `syz.4.414'. [ 75.860753][ T6465] Invalid ELF header magic: != ELF [ 76.117619][ T6476] fuse: Bad value for 'fd' [ 76.312709][ T6488] ip_tables: iptables: counters copy to user failed while replacing table [ 77.202614][ T6509] netlink: 32 bytes leftover after parsing attributes in process `syz.4.421'. [ 77.333593][ T6461] FAULT_INJECTION: forcing a failure. [ 77.333593][ T6461] name fail_futex, interval 1, probability 0, space 0, times 0 [ 77.333622][ T6461] CPU: 0 UID: 0 PID: 6461 Comm: syz.1.412 Tainted: G L syzkaller #0 PREEMPT [ 77.333637][ T6461] Tainted: [L]=SOFTLOCKUP [ 77.333640][ T6461] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 77.333645][ T6461] Call trace: [ 77.333647][ T6461] show_stack+0x2c/0x3c (C) [ 77.333664][ T6461] __dump_stack+0x30/0x40 [ 77.333674][ T6461] dump_stack_lvl+0xd8/0x12c [ 77.333684][ T6461] dump_stack+0x1c/0x28 [ 77.333693][ T6461] should_fail_ex+0x418/0x58c [ 77.333703][ T6461] should_fail+0x14/0x24 [ 77.333713][ T6461] get_futex_key+0x1ec/0x12b0 [ 77.333722][ T6461] futex_wake+0x10c/0x594 [ 77.333730][ T6461] do_futex+0x2c4/0x378 [ 77.333743][ T6461] mm_exit_exec_release+0x190/0x27c [ 77.333752][ T6461] exit_mm+0x50/0x1f0 [ 77.333762][ T6461] do_exit+0x524/0x1a74 [ 77.333771][ T6461] do_group_exit+0x198/0x238 [ 77.333781][ T6461] get_signal+0xfb0/0x1094 [ 77.333789][ T6461] arch_do_signal_or_restart+0x288/0x444c [ 77.333798][ T6461] exit_to_user_mode_loop+0x70/0x17c [ 77.333808][ T6461] el0_svc+0x12c/0x1d8 [ 77.333817][ T6461] el0t_64_sync_handler+0x44/0x104 [ 77.333826][ T6461] el0t_64_sync+0x198/0x19c [ 77.449239][ T6548] 9p: Bad value for 'rfdno' [ 77.487298][ T6531] qrtr: Invalid version 7 [ 77.487339][ T6553] qrtr: Invalid version 7 [ 77.527134][ T6555] fuse: Bad value for 'user_id' [ 77.527147][ T6555] fuse: Bad value for 'user_id' [ 77.545619][ T6566] fuse: Bad value for 'user_id' [ 77.545630][ T6566] fuse: Bad value for 'user_id' [ 78.042654][ T6596] ip_tables: iptables: counters copy to user failed while replacing table [ 78.922695][ T6615] netlink: 24 bytes leftover after parsing attributes in process `syz.0.435'. [ 78.931856][ T24] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 79.001721][ T6627] loop0: detected capacity change from 0 to 512 [ 79.401771][ T6642] Driver unsupported XDP return value 0 on prog (id 55) dev N/A, expect packet loss! [ 79.934396][ T6661] loop1: detected capacity change from 0 to 1024 [ 79.940262][ T6661] EXT4-fs: Ignoring removed bh option [ 79.959766][ T6661] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a800c018, mo2=0042] [ 79.959805][ T6661] System zones: 0-1, 3-12 [ 79.960981][ T6661] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 79.998290][ T6669] netlink: 12 bytes leftover after parsing attributes in process `syz.0.449'. [ 80.003905][ T6669] netlink: 12 bytes leftover after parsing attributes in process `syz.0.449'. [ 80.017717][ T4705] EXT4-fs error (device loop1): ext4_read_inline_dir:1512: inode #12: block 7: comm syz-executor: path /82/file0/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=60 fake=0 [ 80.021692][ T4705] EXT4-fs error (device loop1): ext4_read_inline_dir:1512: inode #12: block 7: comm syz-executor: path /82/file0/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=60 fake=0 [ 80.021922][ T4705] EXT4-fs error (device loop1): empty_inline_dir:1796: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0 [ 80.023196][ T4705] EXT4-fs warning (device loop1): empty_inline_dir:1803: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 80.023335][ T4705] EXT4-fs error (device loop1): ext4_read_inline_dir:1512: inode #12: block 7: comm syz-executor: path /82/file0/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=60 fake=0 [ 80.023468][ T4705] EXT4-fs error (device loop1): ext4_read_inline_dir:1512: inode #12: block 7: comm syz-executor: path /82/file0/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=60 fake=0 [ 80.024080][ T4705] EXT4-fs error (device loop1): empty_inline_dir:1796: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0 [ 80.024205][ T4705] EXT4-fs warning (device loop1): empty_inline_dir:1803: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 80.024328][ T4705] EXT4-fs error (device loop1): ext4_read_inline_dir:1512: inode #12: block 7: comm syz-executor: path /82/file0/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=60 fake=0 [ 80.024433][ T4705] EXT4-fs error (device loop1): ext4_read_inline_dir:1512: inode #12: block 7: comm syz-executor: path /82/file0/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=60 fake=0 [ 80.026203][ T4705] EXT4-fs error (device loop1): empty_inline_dir:1796: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0 [ 80.027176][ T4705] EXT4-fs warning (device loop1): empty_inline_dir:1803: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 80.027346][ T4705] EXT4-fs error (device loop1): ext4_read_inline_dir:1512: inode #12: block 7: comm syz-executor: path /82/file0/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=60 fake=0 [ 80.029478][ T4705] EXT4-fs warning (device loop1): empty_inline_dir:1803: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 80.029958][ T4705] EXT4-fs warning (device loop1): empty_inline_dir:1803: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 80.030361][ T4705] EXT4-fs warning (device loop1): empty_inline_dir:1803: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 80.031885][ T4705] EXT4-fs warning (device loop1): empty_inline_dir:1803: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 80.032309][ T4705] EXT4-fs warning (device loop1): empty_inline_dir:1803: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 80.032860][ T4705] EXT4-fs warning (device loop1): empty_inline_dir:1803: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 80.035417][ T4705] EXT4-fs warning (device loop1): empty_inline_dir:1803: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 81.033929][ T6681] ip_tables: iptables: counters copy to user failed while replacing table [ 81.153080][ T6691] nvmet_tcp: malformed ip/port passed: :442 [ 81.188481][ T4705] syz_tun (unregistering): left allmulticast mode [ 81.203767][ T6696] nvmet_tcp: malformed ip/port passed: :442 [ 81.239980][ T6698] fuse: Unknown parameter '0000000000000010000' [ 81.492052][ T4705] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.582619][ T4719] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 81.583024][ T4719] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 81.583299][ T4719] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 81.583696][ T4719] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 81.583972][ T4719] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 81.736413][ T6701] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.736469][ T6701] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.736557][ T6701] bridge_slave_0: entered allmulticast mode [ 81.736968][ T6701] bridge_slave_0: entered promiscuous mode [ 81.743918][ T6701] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.743973][ T6701] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.744023][ T6701] bridge_slave_1: entered allmulticast mode [ 81.744503][ T6701] bridge_slave_1: entered promiscuous mode [ 81.759319][ T6701] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.760318][ T6701] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.771949][ T6701] team0: Port device team_slave_0 added [ 81.772716][ T6701] team0: Port device team_slave_1 added [ 81.781571][ T6701] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.781580][ T6701] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 81.781595][ T6701] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.782117][ T6701] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.782125][ T6701] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 81.782139][ T6701] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.813373][ T6701] hsr_slave_0: entered promiscuous mode [ 81.813744][ T6701] hsr_slave_1: entered promiscuous mode [ 81.813942][ T6701] debugfs: 'hsr0' already exists in 'hsr' [ 81.813951][ T6701] Cannot create hsr debugfs directory [ 81.872793][ T6701] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 81.874257][ T6701] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 81.881123][ T6701] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 81.882252][ T6701] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 81.882611][ T6701] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 81.884011][ T6701] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 81.884390][ T6701] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 81.888089][ T6701] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 81.895440][ T6701] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.895469][ T6701] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.895539][ T6701] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.895566][ T6701] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.923205][ T6701] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.931071][ T4896] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.932225][ T4896] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.942505][ T6701] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.947698][ T4896] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.947722][ T4896] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.950386][ T4896] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.950407][ T4896] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.971560][ T6701] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 82.051382][ T6736] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 82.051577][ T6736] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 82.051895][ T6736] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 82.054564][ T6736] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 82.098636][ T6739] No such timeout policy "syz1" [ 82.124029][ T6701] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.131883][ T6748] __nla_validate_parse: 1 callbacks suppressed [ 82.131894][ T6748] netlink: 4 bytes leftover after parsing attributes in process `syz.0.468'. [ 82.166790][ T6755] fuse: fd is not a fuse device [ 82.213577][ T6701] veth0_vlan: entered promiscuous mode [ 82.217663][ T6701] veth1_vlan: entered promiscuous mode [ 82.222950][ T6701] veth0_macvtap: entered promiscuous mode [ 82.224114][ T6701] veth1_macvtap: entered promiscuous mode [ 82.233823][ T6701] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.238364][ T6701] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.280629][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.280643][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.292026][ T166] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.292041][ T166] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.294990][ T13] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.295361][ T13] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.295459][ T13] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.295474][ T13] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.311575][ T6766] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 82.352900][ T6767] nvmet_tcp: malformed ip/port passed: :442 [ 82.402479][ T6770] netlink: 8 bytes leftover after parsing attributes in process `syz.5.460'. [ 82.642046][ T6774] ip_tables: iptables: counters copy to user failed while replacing table [ 82.869857][ T6781] netlink: 5 bytes leftover after parsing attributes in process `syz.3.477'. [ 83.606386][ T4716] Bluetooth: hci1: command tx timeout [ 83.844104][ T6822] netlink: 4 bytes leftover after parsing attributes in process `syz.0.490'. [ 83.991841][ T6833] nvmet_tcp: malformed ip/port passed: :442 [ 84.746322][ T6856] xt_SECMARK: invalid mode: 2 [ 85.474804][ T6875] ip_tables: iptables: counters copy to user failed while replacing table [ 85.564343][ T6879] netlink: 44 bytes leftover after parsing attributes in process `syz.2.506'. [ 85.598089][ T6883] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 85.598244][ T6883] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 85.603672][ T6882] syz_tun: entered allmulticast mode [ 85.690172][ T4716] Bluetooth: hci1: command tx timeout [ 85.755364][ T6899] nvmet_tcp: malformed ip/port passed: :442 [ 85.780570][ T6902] netlink: 68 bytes leftover after parsing attributes in process `syz.4.512'. [ 86.353758][ T6920] netlink: 'syz.2.517': attribute type 1 has an invalid length. [ 87.355493][ T6929] syz_tun: entered allmulticast mode [ 87.375158][ T6923] ip_tables: iptables: counters copy to user failed while replacing table [ 87.425385][ T6937] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 87.425563][ T6937] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 87.510572][ T6947] Injecting memory failure for pfn 0x11e722 at process virtual address 0x20001000 [ 87.824878][ T4719] Bluetooth: hci1: command tx timeout [ 87.839151][ T6947] Memory failure: 0x11e722: Sending SIGBUS to syz.4.525:6947 due to hardware memory corruption [ 87.839237][ T6947] Memory failure: 0x11e722: recovery action for dirty LRU page: Recovered [ 87.953935][ T6961] binder: 6960:6961 BC_FREEZE_NOTIFICATION_DONE 000000000000ffff not found [ 87.953954][ T6961] binder: 6960:6961 ioctl c0306201 20000100 returned -22 [ 89.151737][ T868] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 89.944675][ T4716] Bluetooth: hci1: command tx timeout [ 90.126835][ T868] usb 1-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 90.128906][ T868] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.128918][ T868] usb 1-1: Product: syz [ 90.128925][ T868] usb 1-1: Manufacturer: syz [ 90.128931][ T868] usb 1-1: SerialNumber: syz [ 90.595380][ T6967] lo: entered promiscuous mode [ 90.595398][ T6967] lo: entered allmulticast mode [ 90.596692][ T6967] bond0: entered promiscuous mode [ 90.596706][ T6967] bond0: entered allmulticast mode [ 90.597097][ T6967] dummy0: entered promiscuous mode [ 90.597106][ T6967] dummy0: entered allmulticast mode [ 90.597995][ T6967] eql: entered promiscuous mode [ 90.598008][ T6967] eql: entered allmulticast mode [ 90.599292][ T6967] ifb0: entered promiscuous mode [ 90.599304][ T6967] ifb0: entered allmulticast mode [ 90.599488][ T6967] ifb1: entered promiscuous mode [ 90.599496][ T6967] ifb1: entered allmulticast mode [ 90.599690][ T6967] gve 0000:00:00.0 enp0s0: entered promiscuous mode [ 90.599701][ T6967] gve 0000:00:00.0 enp0s0: entered allmulticast mode [ 90.600520][ T6967] mac80211_hwsim hwsim0 wlan0: entered promiscuous mode [ 90.600537][ T6967] mac80211_hwsim hwsim0 wlan0: entered allmulticast mode [ 90.600742][ T6967] mac80211_hwsim hwsim1 wlan1: entered promiscuous mode [ 90.600753][ T6967] mac80211_hwsim hwsim1 wlan1: entered allmulticast mode [ 90.601073][ T6967] hwsim0: entered promiscuous mode [ 90.601082][ T6967] hwsim0: entered allmulticast mode [ 90.601483][ T6967] ieee802154 phy0 wpan0: entered promiscuous mode [ 90.601493][ T6967] ieee802154 phy0 wpan0: entered allmulticast mode [ 90.601606][ T6967] ieee802154 phy1 wpan1: entered promiscuous mode [ 90.601615][ T6967] ieee802154 phy1 wpan1: entered allmulticast mode [ 90.601730][ T6967] teql0: entered promiscuous mode [ 90.601743][ T6967] teql0: entered allmulticast mode [ 90.601752][ T6967] A link change request failed with some changes committed already. Interface teql0 may have been left with an inconsistent configuration, please check. [ 90.603277][ T6967] 9p: Bad value for 'rfdno' [ 90.665486][ T868] rtl8150 1-1:1.0: couldn't reset the device [ 90.665820][ T868] rtl8150 1-1:1.0: probe with driver rtl8150 failed with error -5 [ 90.672332][ T868] usb 1-1: USB disconnect, device number 4 [ 90.869926][ T7015] syz_tun: entered allmulticast mode [ 90.967793][ T7022] Bluetooth: hci0: unsupported parameter 5161 [ 90.967811][ T7022] Bluetooth: hci0: unsupported parameter 8192 [ 90.967820][ T7022] Bluetooth: hci0: unsupported parameter 5161 [ 90.967828][ T7022] Bluetooth: hci0: unsupported parameter 8192 [ 91.133141][ T7043] syz_tun: entered allmulticast mode [ 91.172425][ T7045] netlink: 40 bytes leftover after parsing attributes in process `syz.0.561'. [ 91.172456][ T7045] netlink: 40 bytes leftover after parsing attributes in process `syz.0.561'. [ 91.185860][ T7051] overlayfs: failed to resolve './file0': -2 [ 91.242160][ T7060] netlink: 16 bytes leftover after parsing attributes in process `syz.0.565'. [ 91.341131][ T7062] infiniband syz0: set active [ 91.341149][ T7062] infiniband syz0: added veth1_to_bridge [ 91.495796][ T7062] RDS/IB: syz0: added [ 91.495912][ T7062] smc: adding ib device syz0 with port count 1 [ 91.495945][ T7062] smc: ib device syz0 port 1 has no pnetid [ 91.573047][ T7076] x_tables: duplicate underflow at hook 2 [ 92.342321][ T7121] syz_tun: entered allmulticast mode [ 93.122607][ T7194] xt_connbytes: Forcing CT accounting to be enabled [ 93.122692][ T7194] xt_NFQUEUE: number of total queues is 0 [ 93.191976][ T30] audit: type=1326 audit(93.180:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7191 comm="syz.5.585" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff85f78868 code=0x7ffc0000 [ 93.193552][ T30] audit: type=1326 audit(93.180:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7191 comm="syz.5.585" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff85f78868 code=0x7ffc0000 [ 93.193625][ T30] audit: type=1326 audit(93.180:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7191 comm="syz.5.585" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff85f78868 code=0x7ffc0000 [ 93.219726][ T30] audit: type=1326 audit(93.210:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7191 comm="syz.5.585" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff85f78868 code=0x7ffc0000 [ 93.220106][ T30] audit: type=1326 audit(93.210:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7191 comm="syz.5.585" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff85f78868 code=0x7ffc0000 [ 93.220187][ T30] audit: type=1326 audit(93.210:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7191 comm="syz.5.585" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=59 compat=0 ip=0xffff85f78868 code=0x7ffc0000 [ 93.220311][ T30] audit: type=1326 audit(93.210:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7191 comm="syz.5.585" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff85f78868 code=0x7ffc0000 [ 93.220367][ T30] audit: type=1326 audit(93.210:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7191 comm="syz.5.585" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff85f78868 code=0x7ffc0000 [ 93.223960][ T30] audit: type=1326 audit(93.210:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7191 comm="syz.5.585" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=56 compat=0 ip=0xffff85f78868 code=0x7ffc0000 [ 93.223978][ T30] audit: type=1326 audit(93.210:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7191 comm="syz.5.585" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff85f78868 code=0x7ffc0000 [ 93.451946][ T7236] FAULT_INJECTION: forcing a failure. [ 93.451946][ T7236] name fail_futex, interval 1, probability 0, space 0, times 0 [ 93.451973][ T7236] CPU: 1 UID: 0 PID: 7236 Comm: syz.4.590 Tainted: G L syzkaller #0 PREEMPT [ 93.451990][ T7236] Tainted: [L]=SOFTLOCKUP [ 93.451994][ T7236] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 93.451998][ T7236] Call trace: [ 93.452001][ T7236] show_stack+0x2c/0x3c (C) [ 93.452020][ T7236] __dump_stack+0x30/0x40 [ 93.452030][ T7236] dump_stack_lvl+0xd8/0x12c [ 93.452040][ T7236] dump_stack+0x1c/0x28 [ 93.452049][ T7236] should_fail_ex+0x418/0x58c [ 93.452060][ T7236] should_fail+0x14/0x24 [ 93.452069][ T7236] get_futex_key+0xd0c/0x12b0 [ 93.452078][ T7236] futex_wake+0x10c/0x594 [ 93.452087][ T7236] do_futex+0x2c4/0x378 [ 93.452096][ T7236] mm_exit_exec_release+0x190/0x27c [ 93.452104][ T7236] exit_mm+0x50/0x1f0 [ 93.452113][ T7236] do_exit+0x524/0x1a74 [ 93.452123][ T7236] do_group_exit+0x198/0x238 [ 93.452132][ T7236] get_signal+0xfb0/0x1094 [ 93.452140][ T7236] arch_do_signal_or_restart+0x288/0x444c [ 93.452149][ T7236] exit_to_user_mode_loop+0x70/0x17c [ 93.452159][ T7236] el0_svc+0x12c/0x1d8 [ 93.452169][ T7236] el0t_64_sync_handler+0x44/0x104 [ 93.452178][ T7236] el0t_64_sync+0x198/0x19c [ 93.796083][ T7274] netlink: 'syz.0.604': attribute type 11 has an invalid length. [ 94.202123][ T7302] netlink: 'syz.5.610': attribute type 6 has an invalid length. [ 94.304782][ T7316] input: syz0 as /devices/virtual/input/input5 [ 94.619791][ T7327] autofs4:pid:7327:validate_dev_ioctl: invalid path supplied for cmd(0xc018937a) [ 94.626464][ T7327] usb usb1: usbfs: interface 0 claimed by hub while 'syz.3.615' resets device [ 94.676059][ T7336] netlink: 256 bytes leftover after parsing attributes in process `syz.2.619'. [ 94.828364][ T4895] Bluetooth: hci5: Frame reassembly failed (-84) [ 94.897405][ T7358] netlink: 8 bytes leftover after parsing attributes in process `syz.3.627'. [ 94.903881][ T7358] [U] VÔ3¸ÂFÙ¾"SÇÁ/ÉÊ4:ÃXTZ“W¡T‘’LWµ«= [ 94.910397][ T7358] [U] J"—E:ÀÆ" [ 94.912349][ T7360] [U] VÔ3¸ÂFÙ¾"SÇÁ/ÉÊ4:ÃXTZ“W¡T‘’LWµ«= [ 94.913383][ T7360] [U] J"—E:ÀÆ" [ 95.713301][ T7403] ip_tables: iptables: counters copy to user failed while replacing table [ 95.799828][ T7406] nfs: Unknown parameter 'LT×ÍLË' [ 96.497916][ T7446] 9p: Bad value for 'rfdno' [ 96.497998][ T7446] 9p: Bad value for 'rfdno' [ 96.498073][ T7446] 9p: Bad value for 'rfdno' [ 96.498142][ T7446] 9p: Bad value for 'rfdno' [ 96.498212][ T7446] 9p: Bad value for 'rfdno' [ 96.498280][ T7446] 9p: Bad value for 'rfdno' [ 96.498381][ T7446] 9p: Bad value for 'rfdno' [ 96.498451][ T7446] 9p: Bad value for 'rfdno' [ 96.498521][ T7446] 9p: Bad value for 'rfdno' [ 96.498588][ T7446] 9p: Bad value for 'rfdno' [ 96.498658][ T7446] 9p: Bad value for 'rfdno' [ 96.498723][ T7446] 9p: Bad value for 'rfdno' [ 96.498808][ T7446] 9p: Bad value for 'rfdno' [ 96.498884][ T7446] 9p: Bad value for 'rfdno' [ 96.498964][ T7446] 9p: Bad value for 'rfdno' [ 96.499030][ T7446] 9p: Bad value for 'rfdno' [ 96.499097][ T7446] 9p: Bad value for 'rfdno' [ 96.499162][ T7446] 9p: Bad value for 'rfdno' [ 96.499231][ T7446] 9p: Bad value for 'rfdno' [ 96.499296][ T7446] 9p: Bad value for 'rfdno' [ 96.499363][ T7446] 9p: Bad value for 'rfdno' [ 96.499431][ T7446] 9p: Bad value for 'rfdno' [ 96.499499][ T7446] 9p: Bad value for 'rfdno' [ 96.499564][ T7446] 9p: Bad value for 'rfdno' [ 96.499632][ T7446] 9p: Bad value for 'rfdno' [ 96.499698][ T7446] 9p: Bad value for 'rfdno' [ 96.499770][ T7446] 9p: Bad value for 'rfdno' [ 96.499836][ T7446] 9p: Bad value for 'rfdno' [ 96.499917][ T7446] 9p: Bad value for 'rfdno' [ 96.499982][ T7446] 9p: Bad value for 'rfdno' [ 96.500053][ T7446] 9p: Bad value for 'rfdno' [ 96.500119][ T7446] 9p: Bad value for 'rfdno' [ 96.500187][ T7446] 9p: Bad value for 'rfdno' [ 96.503676][ T7446] usb usb1: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 96.503686][ T7446] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 96.509418][ T7446] usb usb1: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 96.509428][ T7446] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 96.518921][ T7446] usb usb1: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 96.522518][ T7446] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 96.528527][ T7446] usb usb1: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 96.528537][ T7446] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 96.538249][ T7446] usb usb1: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 96.538259][ T7446] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 96.541095][ T7447] bridge_slave_0: left allmulticast mode [ 96.541113][ T7447] bridge_slave_0: left promiscuous mode [ 96.541222][ T7447] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.545979][ T7446] usb usb1: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 96.545988][ T7446] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 96.550816][ T7450] netlink: 'syz.5.653': attribute type 2 has an invalid length. [ 96.550831][ T7450] netlink: 224 bytes leftover after parsing attributes in process `syz.5.653'. [ 96.556889][ T7446] usb usb1: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 96.556900][ T7446] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 96.567055][ T7449] bridge_slave_1: left allmulticast mode [ 96.567073][ T7449] bridge_slave_1: left promiscuous mode [ 96.567161][ T7449] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.576741][ T7446] usb usb1: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 96.576762][ T7446] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 96.581518][ T7446] usb usb1: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 96.581528][ T7446] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 96.588380][ T7446] usb usb1: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 96.588390][ T7446] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 96.596136][ T7446] usb usb1: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 96.596147][ T7446] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 96.603116][ T7446] usb usb1: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 96.603127][ T7446] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 96.616982][ T7446] usb usb1: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 96.616993][ T7446] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 96.662191][ T7446] usb usb1: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 96.662202][ T7446] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 96.669649][ T7446] usb usb1: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 96.669660][ T7446] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 96.671183][ T7446] usb usb1: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 96.671192][ T7446] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 96.673384][ T7446] usb usb1: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 96.673392][ T7446] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 96.677297][ T7446] usb usb1: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 96.677305][ T7446] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 96.681400][ T7446] usb usb1: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 96.681408][ T7446] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 96.684193][ T7446] usb usb1: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 96.684207][ T7446] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 96.685716][ T7446] usb usb1: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 96.685724][ T7446] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 96.687346][ T7446] usb usb1: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 96.687356][ T7446] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 96.694378][ T7455] binder: 7454:7455 ioctl c0306201 20000080 returned -14 [ 96.702543][ T7446] usb usb1: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 96.702555][ T7446] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 96.710244][ T7446] usb usb1: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 96.710255][ T7446] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 96.885191][ T4719] Bluetooth: hci5: command 0x1003 tx timeout [ 96.885484][ T4716] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 96.942916][ T7458] binder: 7454:7458 tried to acquire reference to desc 0, got 1 instead [ 96.942943][ T7458] binder: 7454:7458 ioctl c0306201 200003c0 returned -14 [ 96.961081][ T7446] usb usb1: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 96.961115][ T7446] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 96.978970][ T7455] binder: 7454:7455 got transaction with fd, 0, but target does not allow fds [ 96.980760][ T7455] binder: 7455:7454 translate fd failed [ 96.980823][ T7455] binder: 7454:7455 transaction call to 7454:0 failed 7/29201/-1, code 0 size 112-24 line 3593 [ 96.981675][ T7446] usb usb1: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 96.981684][ T7446] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 96.982000][ T4803] binder: undelivered TRANSACTION_ERROR: 29201 [ 96.984542][ T7446] usb usb1: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 96.984555][ T7446] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 97.007808][ T7446] usb usb1: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 97.007822][ T7446] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 97.012312][ T7446] usb usb1: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 97.012321][ T7446] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 97.024561][ T7446] usb usb1: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 97.024572][ T7446] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 97.037710][ T7446] usb usb1: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 97.037723][ T7446] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 97.047406][ T7446] usb usb1: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 97.047417][ T7446] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 97.060014][ T7446] usb usb1: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 97.060024][ T7446] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 97.070021][ T7446] usb usb1: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 97.070032][ T7446] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 97.081039][ T7446] usb usb1: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 97.081051][ T7446] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 97.090200][ T7446] usb usb1: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 97.090212][ T7446] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 97.106241][ T7446] usb usb1: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 97.106253][ T7446] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 97.108150][ T7446] usb usb1: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 97.108159][ T7446] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 97.126522][ T7446] usb usb1: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 97.126535][ T7446] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 97.133591][ T7446] usb usb1: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 97.133601][ T7446] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 97.140669][ T7446] usb usb1: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 97.140679][ T7446] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 97.144563][ T7446] usb usb1: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 97.144572][ T7446] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 97.152398][ T7446] usb usb1: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 97.152408][ T7446] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 97.162609][ T7446] usb usb1: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 97.162624][ T7446] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 97.167844][ T7446] usb usb1: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 97.167857][ T7446] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 97.172591][ T7446] usb usb1: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 97.172603][ T7446] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 97.178883][ T7446] usb usb1: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 97.178893][ T7446] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 97.192373][ T7446] usb usb1: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 97.192386][ T7446] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 97.198227][ T7446] usb usb1: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 97.198238][ T7446] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 97.202381][ T7446] usb usb1: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 97.202395][ T7446] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 97.207421][ T7446] usb usb1: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 97.207433][ T7446] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 97.209467][ T7446] usb usb1: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 97.209476][ T7446] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 97.213025][ T7446] usb usb1: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 97.213034][ T7446] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 97.215624][ T7446] usb usb1: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 97.215633][ T7446] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 97.218046][ T7446] usb usb1: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 97.218056][ T7446] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 97.220656][ T7446] usb usb1: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 97.220666][ T7446] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 97.222911][ T7446] usb usb1: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 97.222924][ T7446] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 97.225694][ T7446] usb usb1: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 97.225706][ T7446] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 97.228685][ T7446] usb usb1: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 97.228696][ T7446] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 97.231138][ T7446] usb usb1: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 97.231146][ T7446] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 97.233167][ T7446] usb usb1: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 97.233177][ T7446] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 97.237221][ T7446] usb usb1: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 97.237229][ T7446] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 97.239897][ T7446] usb usb1: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 97.239905][ T7446] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 97.244945][ T7446] usb usb1: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 97.244957][ T7446] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 97.249421][ T7446] usb usb1: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 97.249437][ T7446] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 97.719749][ T7488] netlink: 12 bytes leftover after parsing attributes in process `syz.2.665'. [ 97.771087][ T7490] netlink: 12 bytes leftover after parsing attributes in process `syz.2.665'. [ 97.817358][ T7486] ptrace attach of "ci-upstream-gce-arm64/syz-executor exec"[4712] was attempted by " [ 98.171250][ T7511] netlink: 16 bytes leftover after parsing attributes in process `syz.5.669'. [ 98.206974][ T7511] netlink: 16 bytes leftover after parsing attributes in process `syz.5.669'. [ 98.206993][ T7511] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 98.789710][ T7534] netlink: 156 bytes leftover after parsing attributes in process `syz.4.679'. [ 99.540206][ T7563] netlink: 12 bytes leftover after parsing attributes in process `syz.2.683'. [ 99.698681][ T7588] netlink: 4 bytes leftover after parsing attributes in process `syz.2.691'. [ 100.100767][ T7598] loop0: detected capacity change from 0 to 512 [ 100.129154][ T7598] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 100.148996][ T4712] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.351715][ T7623] bridge0: port 3(syz_tun) entered blocking state [ 100.351787][ T7623] bridge0: port 3(syz_tun) entered disabled state [ 100.352480][ T7623] syz_tun: entered promiscuous mode [ 100.352722][ T7623] bridge0: port 3(syz_tun) entered blocking state [ 100.352757][ T7623] bridge0: port 3(syz_tun) entered forwarding state [ 100.388006][ T7628] bond1: entered allmulticast mode [ 100.388171][ T7628] 8021q: adding VLAN 0 to HW filter on device bond1 [ 100.397657][ T7628] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 100.398313][ T7628] macvlan2: entered allmulticast mode [ 100.398323][ T7628] bond0: entered allmulticast mode [ 100.398330][ T7628] bond_slave_0: entered allmulticast mode [ 100.398342][ T7628] bond_slave_1: entered allmulticast mode [ 100.398352][ T7628] dummy0: entered allmulticast mode [ 100.398914][ T7628] bond1: (slave macvlan2): Enslaving as a backup interface with an up link [ 100.494334][ T7637] netlink: 12 bytes leftover after parsing attributes in process `syz.4.706'. [ 100.670770][ T7649] FAULT_INJECTION: forcing a failure. [ 100.670770][ T7649] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 100.670793][ T7649] CPU: 0 UID: 0 PID: 7649 Comm: syz.5.712 Tainted: G L syzkaller #0 PREEMPT [ 100.670807][ T7649] Tainted: [L]=SOFTLOCKUP [ 100.670810][ T7649] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 100.670815][ T7649] Call trace: [ 100.670818][ T7649] show_stack+0x2c/0x3c (C) [ 100.670837][ T7649] __dump_stack+0x30/0x40 [ 100.670848][ T7649] dump_stack_lvl+0xd8/0x12c [ 100.670857][ T7649] dump_stack+0x1c/0x28 [ 100.670866][ T7649] should_fail_ex+0x418/0x58c [ 100.670877][ T7649] should_fail+0x14/0x24 [ 100.670886][ T7649] should_fail_usercopy+0x20/0x30 [ 100.670896][ T7649] simple_read_from_buffer+0xc4/0x238 [ 100.670906][ T7649] proc_fail_nth_read+0x1a8/0x248 [ 100.670915][ T7649] vfs_read+0x230/0x8c8 [ 100.670925][ T7649] ksys_read+0x12c/0x228 [ 100.670935][ T7649] __arm64_sys_read+0x84/0x98 [ 100.670944][ T7649] invoke_syscall+0x98/0x244 [ 100.670954][ T7649] el0_svc_common+0xec/0x23c [ 100.670964][ T7649] do_el0_svc+0x4c/0x5c [ 100.670973][ T7649] el0_svc+0x60/0x1d8 [ 100.670983][ T7649] el0t_64_sync_handler+0x44/0x104 [ 100.670991][ T7649] el0t_64_sync+0x198/0x19c [ 101.266731][ T7696] netlink: 'syz.2.718': attribute type 5 has an invalid length. [ 101.320830][ T7709] netlink: 8 bytes leftover after parsing attributes in process `syz.2.718'. [ 102.146013][ T7771] capability: warning: `syz.0.733' uses 32-bit capabilities (legacy support in use) [ 102.321336][ T7779] ubi0: attaching mtd0 [ 102.322071][ T7779] ubi0: scanning is finished [ 102.322079][ T7779] ubi0: empty MTD device detected [ 102.333407][ T7780] netlink: 36 bytes leftover after parsing attributes in process `syz.3.732'. [ 103.209983][ T7779] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 103.210004][ T7779] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 103.210013][ T7779] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 103.210020][ T7779] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 103.210027][ T7779] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 103.210033][ T7779] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 103.210039][ T7779] ubi0: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 2716737601 [ 103.210046][ T7779] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 103.229210][ T7792] ubi0: background thread "ubi_bgt0d" started, PID 7792 [ 104.451071][ T7842] ip_tables: iptables: counters copy to user failed while replacing table [ 104.651489][ T7849] nvmet_tcp: malformed ip/port passed: :442 [ 105.336909][ T7878] ip_tables: iptables: counters copy to user failed while replacing table [ 105.338712][ T7878] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 105.401749][ T7883] netlink: 56 bytes leftover after parsing attributes in process `syz.2.769'. [ 105.453689][ T7885] mmap: syz.2.769 (7885) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 105.461471][ T7883] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 105.462428][ T7883] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 105.463176][ T7883] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 105.463317][ T7883] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 105.463581][ T7883] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 105.463733][ T7883] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 105.479696][ T7883] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 105.479901][ T7883] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 105.480886][ T7883] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 105.481042][ T7883] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 105.482850][ T7883] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 105.483135][ T7883] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 105.492692][ T7880] rdma_rxe: rxe_newlink: failed to add veth1_to_bridge [ 105.494984][ T7880] overlay: Unknown parameter 'pcr' [ 105.503766][ T7880] FAULT_INJECTION: forcing a failure. [ 105.503766][ T7880] name fail_futex, interval 1, probability 0, space 0, times 0 [ 105.503791][ T7880] CPU: 0 UID: 0 PID: 7880 Comm: syz.5.768 Tainted: G L syzkaller #0 PREEMPT [ 105.503804][ T7880] Tainted: [L]=SOFTLOCKUP [ 105.503807][ T7880] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 105.503813][ T7880] Call trace: [ 105.503816][ T7880] show_stack+0x2c/0x3c (C) [ 105.503840][ T7880] __dump_stack+0x30/0x40 [ 105.503853][ T7880] dump_stack_lvl+0xd8/0x12c [ 105.503864][ T7880] dump_stack+0x1c/0x28 [ 105.503875][ T7880] should_fail_ex+0x418/0x58c [ 105.503888][ T7880] should_fail+0x14/0x24 [ 105.503899][ T7880] get_futex_key+0x1ec/0x12b0 [ 105.503910][ T7880] futex_wake+0x10c/0x594 [ 105.503921][ T7880] do_futex+0x2c4/0x378 [ 105.503931][ T7880] __arm64_sys_futex+0x2e4/0x418 [ 105.503942][ T7880] invoke_syscall+0x98/0x244 [ 105.503953][ T7880] el0_svc_common+0xec/0x23c [ 105.503964][ T7880] do_el0_svc+0x4c/0x5c [ 105.503975][ T7880] el0_svc+0x60/0x1d8 [ 105.503987][ T7880] el0t_64_sync_handler+0x44/0x104 [ 105.503998][ T7880] el0t_64_sync+0x198/0x19c [ 106.380323][ T7969] nvmet_tcp: malformed ip/port passed: :442 [ 106.533771][ T7985] ip_tables: iptables: counters copy to user failed while replacing table [ 106.593766][ T8003] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 107.113939][ T8028] tap0: tun_chr_ioctl cmd 1074025677 [ 107.113986][ T8028] tap0: linktype set to 6 [ 107.168004][ T8027] netlink: 8 bytes leftover after parsing attributes in process `syz.4.789'. [ 107.168231][ T4716] Bluetooth: hci0: unexpected event for opcode 0x080f [ 107.976437][ T8052] netlink: 40 bytes leftover after parsing attributes in process `syz.0.798'. [ 107.976453][ T8052] netlink: 16 bytes leftover after parsing attributes in process `syz.0.798'. [ 107.976461][ T8052] netlink: 64 bytes leftover after parsing attributes in process `syz.0.798'. [ 108.101742][ T8061] nvmet_tcp: malformed ip/port passed: :442 [ 108.137350][ T8060] ip_tables: iptables: counters copy to user failed while replacing table [ 108.139728][ T8060] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 108.492865][ T8072] IPVS: Unknown mcast interface: vcan0 [ 108.936246][ T8094] netlink: 12 bytes leftover after parsing attributes in process `syz.3.812'. [ 108.941700][ T8094] netlink: 12 bytes leftover after parsing attributes in process `syz.3.812'. [ 108.953492][ T8098] fuse: Bad value for 'rootmode' [ 108.953717][ T8098] fuse: Bad value for 'rootmode' [ 108.953796][ T8098] fuse: Bad value for 'rootmode' [ 108.953864][ T8098] fuse: Bad value for 'rootmode' [ 108.953936][ T8098] fuse: Bad value for 'rootmode' [ 108.954000][ T8098] fuse: Bad value for 'rootmode' [ 108.954061][ T8098] fuse: Bad value for 'rootmode' [ 108.954125][ T8098] fuse: Bad value for 'rootmode' [ 108.954186][ T8098] fuse: Bad value for 'rootmode' [ 108.954252][ T8098] fuse: Bad value for 'rootmode' [ 108.954313][ T8098] fuse: Bad value for 'rootmode' [ 108.954377][ T8098] fuse: Bad value for 'rootmode' [ 108.954449][ T8098] fuse: Bad value for 'rootmode' [ 108.954522][ T8098] fuse: Bad value for 'rootmode' [ 108.960867][ T4895] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 108.961069][ T4895] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 108.961088][ T4895] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 108.961103][ T4895] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 108.984200][ T8098] fuse: Bad value for 'rootmode' [ 108.984289][ T8098] fuse: Bad value for 'rootmode' [ 108.984353][ T8098] fuse: Bad value for 'rootmode' [ 108.984423][ T8098] fuse: Bad value for 'rootmode' [ 108.989780][ T8098] fuse: Bad value for 'rootmode' [ 108.989864][ T8098] fuse: Bad value for 'rootmode' [ 108.989941][ T8098] fuse: Bad value for 'rootmode' [ 108.990005][ T8098] fuse: Bad value for 'rootmode' [ 108.990069][ T8098] fuse: Bad value for 'rootmode' [ 108.990132][ T8098] fuse: Bad value for 'rootmode' [ 108.990197][ T8098] fuse: Bad value for 'rootmode' [ 108.990258][ T8098] fuse: Bad value for 'rootmode' [ 108.990325][ T8098] fuse: Bad value for 'rootmode' [ 108.990386][ T8098] fuse: Bad value for 'rootmode' [ 108.990519][ T8098] fuse: Bad value for 'rootmode' [ 108.990671][ T8098] fuse: Bad value for 'rootmode' [ 108.990736][ T8098] fuse: Bad value for 'rootmode' [ 108.990807][ T8098] fuse: Bad value for 'rootmode' [ 108.990876][ T8098] fuse: Bad value for 'rootmode' [ 109.031927][ T8097] ip_tables: iptables: counters copy to user failed while replacing table [ 109.033486][ T8097] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 109.075382][ T8107] loop0: detected capacity change from 0 to 512 [ 109.616044][ T8123] nvmet_tcp: malformed ip/port passed: :442 [ 110.036832][ T8134] ip_tables: iptables: counters copy to user failed while replacing table [ 110.910639][ T8202] cgroup: Need name or subsystem set [ 111.312424][ T8214] nvmet_tcp: malformed ip/port passed: :442 [ 111.323401][ T8211] ip_tables: iptables: counters copy to user failed while replacing table [ 112.154224][ T8245] netlink: 12 bytes leftover after parsing attributes in process `syz.0.854'. [ 112.201298][ T8247] nvmet_tcp: malformed ip/port passed: :442 [ 112.257228][ T8249] ip_tables: iptables: counters copy to user failed while replacing table [ 112.319622][ T8258] netlink: 4 bytes leftover after parsing attributes in process `syz.2.860'. [ 112.424901][ T8268] loop2: detected capacity change from 0 to 512 [ 112.787340][ T8274] netlink: 'syz.3.865': attribute type 15 has an invalid length. [ 112.787358][ T8274] netlink: 24 bytes leftover after parsing attributes in process `syz.3.865'. [ 112.791742][ T8274] netlink: 20 bytes leftover after parsing attributes in process `syz.3.865'. [ 112.927310][ T8283] nvmet_tcp: malformed ip/port passed: :442 [ 113.062244][ T8291] ip_tables: iptables: counters copy to user failed while replacing table [ 113.131221][ T8297] __vm_enough_memory: pid: 8297, comm: syz.3.875, bytes: 4115879641088 not enough memory for the allocation [ 113.650283][ T8313] nvmet_tcp: malformed ip/port passed: :442 [ 113.667345][ T8315] loop2: detected capacity change from 0 to 512 [ 113.667804][ T8315] EXT4-fs: Ignoring removed bh option [ 113.670382][ T8315] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 113.683782][ T8315] EXT4-fs (loop2): 1 truncate cleaned up [ 113.687695][ T8315] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 113.709007][ T4721] EXT4-fs error (device loop2): ext4_lookup:1787: inode #14: comm syz-executor: invalid fast symlink length 39 [ 113.710402][ T4721] EXT4-fs error (device loop2): ext4_lookup:1787: inode #14: comm syz-executor: invalid fast symlink length 39 [ 113.733671][ T7396] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.969660][ T7396] tipc: Resetting bearer [ 113.982400][ T7396] syz_tun (unregistering): left allmulticast mode [ 113.982977][ T7396] tipc: Disabling bearer [ 114.079532][ T8325] ip_tables: iptables: counters copy to user failed while replacing table [ 114.225864][ T4719] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 114.226587][ T4719] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 114.226883][ T4719] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 114.227560][ T4719] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 114.227830][ T4719] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 114.404414][ T8333] bridge0: port 1(bridge_slave_0) entered blocking state [ 114.404490][ T8333] bridge0: port 1(bridge_slave_0) entered disabled state [ 114.404552][ T8333] bridge_slave_0: entered allmulticast mode [ 114.405500][ T8333] bridge_slave_0: entered promiscuous mode [ 114.406421][ T8333] bridge0: port 2(bridge_slave_1) entered blocking state [ 114.406443][ T8333] bridge0: port 2(bridge_slave_1) entered disabled state [ 114.406528][ T8333] bridge_slave_1: entered allmulticast mode [ 114.406952][ T8333] bridge_slave_1: entered promiscuous mode [ 114.415037][ T8333] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 114.416001][ T8333] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 114.423781][ T8333] team0: Port device team_slave_0 added [ 114.424481][ T8333] team0: Port device team_slave_1 added [ 114.432654][ T8333] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 114.432663][ T8333] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 114.432674][ T8333] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 114.433294][ T8333] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 114.433301][ T8333] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 114.433314][ T8333] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 114.446505][ T8333] hsr_slave_0: entered promiscuous mode [ 114.446871][ T8333] hsr_slave_1: entered promiscuous mode [ 114.447056][ T8333] debugfs: 'hsr0' already exists in 'hsr' [ 114.447066][ T8333] Cannot create hsr debugfs directory [ 114.471404][ T8353] nvmet_tcp: malformed ip/port passed: :442 [ 114.513474][ T8333] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 114.523041][ T8333] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 114.523351][ T8333] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 114.524286][ T8333] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 114.532286][ T8333] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 114.539196][ T8333] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 114.539570][ T8333] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 114.540575][ T8333] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 114.561639][ T8333] bridge0: port 2(bridge_slave_1) entered blocking state [ 114.561669][ T8333] bridge0: port 2(bridge_slave_1) entered forwarding state [ 114.561739][ T8333] bridge0: port 1(bridge_slave_0) entered blocking state [ 114.561767][ T8333] bridge0: port 1(bridge_slave_0) entered forwarding state [ 114.582781][ T8333] 8021q: adding VLAN 0 to HW filter on device bond0 [ 114.588800][ T4895] bridge0: port 1(bridge_slave_0) entered disabled state [ 114.589287][ T4895] bridge0: port 2(bridge_slave_1) entered disabled state [ 114.594441][ T8333] 8021q: adding VLAN 0 to HW filter on device team0 [ 114.604301][ T62] bridge0: port 1(bridge_slave_0) entered blocking state [ 114.604327][ T62] bridge0: port 1(bridge_slave_0) entered forwarding state [ 114.846635][ T62] bridge0: port 2(bridge_slave_1) entered blocking state [ 114.846673][ T62] bridge0: port 2(bridge_slave_1) entered forwarding state [ 114.978553][ T8333] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 115.081437][ T8333] veth0_vlan: entered promiscuous mode [ 115.083367][ T8333] veth1_vlan: entered promiscuous mode [ 115.108725][ T8333] veth0_macvtap: entered promiscuous mode [ 115.110845][ T8333] veth1_macvtap: entered promiscuous mode [ 115.117423][ T8333] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 115.118598][ T8333] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 115.403642][ T454] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.403701][ T454] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.403729][ T454] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 115.403744][ T454] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 115.403862][ T454] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.416008][ T54] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.433597][ T4895] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 115.433611][ T4895] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 115.480224][ T8396] ip_tables: iptables: counters copy to user failed while replacing table [ 115.482004][ T8396] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 115.508246][ T8398] netlink: 16 bytes leftover after parsing attributes in process `syz.6.890'. [ 115.651966][ T8419] nvmet_tcp: malformed ip/port passed: :442 [ 116.190286][ T4708] kernel read not supported for file /vcs (pid: 4708 comm: kworker/1:4) [ 116.244813][ T4719] Bluetooth: hci4: command tx timeout [ 116.257597][ T8442] ip_tables: iptables: counters copy to user failed while replacing table [ 116.859683][ T8472] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7) [ 116.859706][ T8472] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 116.859793][ T8472] vhci_hcd vhci_hcd.0: Device attached [ 116.860232][ T8473] vhci_hcd: cannot find the pending unlink 175 [ 116.861046][ T8473] vhci_hcd: connection closed [ 116.865055][ T166] vhci_hcd vhci_hcd.3: stop threads [ 116.865070][ T166] vhci_hcd vhci_hcd.3: release socket [ 116.865086][ T166] vhci_hcd vhci_hcd.3: disconnect device [ 116.946924][ T8479] ip_tables: iptables: counters copy to user failed while replacing table [ 117.245890][ T8503] netlink: 12 bytes leftover after parsing attributes in process `syz.4.927'. [ 117.508070][ T8513] FAULT_INJECTION: forcing a failure. [ 117.508070][ T8513] name fail_futex, interval 1, probability 0, space 0, times 0 [ 117.508089][ T8513] CPU: 1 UID: 0 PID: 8513 Comm: syz.4.929 Tainted: G L syzkaller #0 PREEMPT [ 117.508101][ T8513] Tainted: [L]=SOFTLOCKUP [ 117.508104][ T8513] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 117.508108][ T8513] Call trace: [ 117.508111][ T8513] show_stack+0x2c/0x3c (C) [ 117.508127][ T8513] __dump_stack+0x30/0x40 [ 117.508138][ T8513] dump_stack_lvl+0xd8/0x12c [ 117.508147][ T8513] dump_stack+0x1c/0x28 [ 117.508156][ T8513] should_fail_ex+0x418/0x58c [ 117.508168][ T8513] should_fail+0x14/0x24 [ 117.508177][ T8513] get_futex_key+0x1ec/0x12b0 [ 117.508187][ T8513] futex_wake+0x10c/0x594 [ 117.508196][ T8513] do_futex+0x2c4/0x378 [ 117.508204][ T8513] __arm64_sys_futex+0x2e4/0x418 [ 117.508213][ T8513] invoke_syscall+0x98/0x244 [ 117.508222][ T8513] el0_svc_common+0xec/0x23c [ 117.508231][ T8513] do_el0_svc+0x4c/0x5c [ 117.508244][ T8513] el0_svc+0x60/0x1d8 [ 117.508254][ T8513] el0t_64_sync_handler+0x44/0x104 [ 117.508263][ T8513] el0t_64_sync+0x198/0x19c [ 117.661309][ T8525] nvmet_tcp: malformed ip/port passed: :442 [ 117.687612][ T8527] netlink: 8 bytes leftover after parsing attributes in process `syz.0.933'. [ 117.948052][ T8534] loop0: detected capacity change from 0 to 512 [ 117.953240][ T8534] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 117.954051][ T8534] EXT4-fs (loop0): failed to open journal device unknown-block(129,0) -ENXIO [ 118.031644][ T8538] Injecting memory failure for pfn 0x121ae8 at process virtual address 0x20000000 [ 118.036873][ T8538] Memory failure: 0x121ae8: Sending SIGBUS to syz.0.936:8538 due to hardware memory corruption [ 118.036918][ T8538] Memory failure: 0x121ae8: recovery action for dirty LRU page: Recovered [ 118.037008][ T8538] Injecting memory failure for pfn 0x2193df at process virtual address 0x20001000 [ 118.037020][ T8538] Memory failure: 0x2193df: unhandlable page. [ 118.037027][ T8538] Memory failure: 0x2193df: recovery action for reserved kernel page: Ignored [ 118.312050][ T8550] Bluetooth: ISO socket layer initialized [ 118.325099][ T4719] Bluetooth: hci4: command tx timeout [ 118.401198][ T8555] FAULT_INJECTION: forcing a failure. [ 118.401198][ T8555] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 118.401219][ T8555] CPU: 0 UID: 0 PID: 8555 Comm: syz.5.942 Tainted: G L syzkaller #0 PREEMPT [ 118.401231][ T8555] Tainted: [L]=SOFTLOCKUP [ 118.401234][ T8555] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 118.401238][ T8555] Call trace: [ 118.401241][ T8555] show_stack+0x2c/0x3c (C) [ 118.401260][ T8555] __dump_stack+0x30/0x40 [ 118.401270][ T8555] dump_stack_lvl+0xd8/0x12c [ 118.401279][ T8555] dump_stack+0x1c/0x28 [ 118.401288][ T8555] should_fail_ex+0x418/0x58c [ 118.401299][ T8555] should_fail+0x14/0x24 [ 118.401308][ T8555] should_fail_usercopy+0x20/0x30 [ 118.401319][ T8555] _inline_copy_to_user+0x3c/0x158 [ 118.401327][ T8555] drm_ioctl+0x6b4/0xac8 [ 118.401334][ T8555] __arm64_sys_ioctl+0x154/0x1cc [ 118.401345][ T8555] invoke_syscall+0x98/0x244 [ 118.401355][ T8555] el0_svc_common+0xec/0x23c [ 118.401364][ T8555] do_el0_svc+0x4c/0x5c [ 118.401373][ T8555] el0_svc+0x60/0x1d8 [ 118.401383][ T8555] el0t_64_sync_handler+0x44/0x104 [ 118.401392][ T8555] el0t_64_sync+0x198/0x19c [ 118.488324][ T8558] nvmet_tcp: malformed ip/port passed: :442 [ 118.573998][ T8565] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 118.592387][ T8565] si4713 0-0063: IRQ not configured. Using timeouts. [ 118.592458][ T8565] si4713 0-0063: Error while sending command 0x01 [ 118.592465][ T8565] si4713 0-0063: Failed to probe device information. [ 118.598307][ T8565] si4713 0-0063: probe with driver si4713 failed with error -5 [ 118.598748][ T8565] i2c i2c-0: new_device: Instantiated device si4713 at 0x63 [ 118.606986][ T8569] IPVS: set_ctl: invalid protocol: 24 0.0.0.0:52142 [ 119.559922][ T8610] netlink: 'syz.4.960': attribute type 1 has an invalid length. [ 119.627782][ T8619] bridge0: port 2(bridge_slave_1) entered disabled state [ 119.632037][ T9] syz0: Port: 1 Link DOWN [ 119.652315][ T8627] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 119.652694][ T8627] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 119.690819][ T8627] netlink: 16 bytes leftover after parsing attributes in process `syz.4.965'. [ 119.713480][ T8637] Bluetooth: hci0: unsupported parameter 255 [ 119.713494][ T8637] Bluetooth: hci0: unsupported parameter 255 [ 120.171611][ T8643] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 120.171791][ T8643] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 120.405525][ T4719] Bluetooth: hci4: command tx timeout [ 120.645710][ T8667] vxcan3: entered promiscuous mode [ 120.645731][ T8667] vxcan3: entered allmulticast mode [ 120.645964][ T8667] team0: Device vxcan3 is up. Set it down before adding it as a team port [ 120.683373][ T8670] loop0: detected capacity change from 0 to 256 [ 120.755693][ T8674] loop0: detected capacity change from 0 to 1024 [ 120.756517][ T8674] EXT4-fs: Ignoring removed nomblk_io_submit option [ 120.769534][ T8674] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 120.814542][ T4712] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.854339][ T8679] loop0: detected capacity change from 0 to 512 [ 120.855922][ T8679] EXT4-fs: Ignoring removed nomblk_io_submit option [ 120.858937][ T8679] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 120.858951][ T8679] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e118, mo2=0002] [ 120.858976][ T8679] System zones: 0-1, 15-15, 18-18, 34-34 [ 120.859215][ T8679] EXT4-fs (loop0): orphan cleanup on readonly fs [ 120.859247][ T8679] __quota_error: 10 callbacks suppressed [ 120.859255][ T8679] Quota error (device loop0): v2_read_header: Failed header read: expected=8 got=0 [ 120.859295][ T8679] EXT4-fs warning (device loop0): ext4_enable_quotas:7304: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 120.859306][ T8679] EXT4-fs (loop0): Cannot turn on quotas: error -22 [ 120.861530][ T8679] EXT4-fs error (device loop0): ext4_validate_block_bitmap:445: comm syz.0.977: bg 0: block 40: padding at end of block bitmap is not set [ 120.861679][ T8679] loop0: lost filesystem error report for type 5 error -117 [ 120.862166][ T8679] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6680: Corrupt filesystem [ 120.862178][ T8679] loop0: lost filesystem error report for type 5 error -117 [ 120.862507][ T8679] EXT4-fs (loop0): 1 truncate cleaned up [ 120.863053][ T8679] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 120.889593][ T8679] EXT4-fs error (device loop0): ext4_encrypted_get_link:46: inode #16: comm syz.0.977: bad symlink. [ 120.900439][ T4712] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.430071][ T8702] ip_tables: iptables: counters copy to user failed while replacing table [ 121.474550][ T8716] FAULT_INJECTION: forcing a failure. [ 121.474550][ T8716] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 121.474576][ T8716] CPU: 1 UID: 0 PID: 8716 Comm: syz.3.984 Tainted: G L syzkaller #0 PREEMPT [ 121.474592][ T8716] Tainted: [L]=SOFTLOCKUP [ 121.474595][ T8716] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 121.474600][ T8716] Call trace: [ 121.474604][ T8716] show_stack+0x2c/0x3c (C) [ 121.474629][ T8716] __dump_stack+0x30/0x40 [ 121.474642][ T8716] dump_stack_lvl+0xd8/0x12c [ 121.474652][ T8716] dump_stack+0x1c/0x28 [ 121.474661][ T8716] should_fail_ex+0x418/0x58c [ 121.474672][ T8716] should_fail+0x14/0x24 [ 121.474682][ T8716] should_fail_usercopy+0x20/0x30 [ 121.474692][ T8716] _inline_copy_from_user+0x3c/0x174 [ 121.474699][ T8716] kstrtouint_from_user+0xcc/0x174 [ 121.474706][ T8716] proc_fail_nth_write+0x9c/0x234 [ 121.474715][ T8716] vfs_write+0x2a4/0xa0c [ 121.474725][ T8716] ksys_write+0x12c/0x228 [ 121.474735][ T8716] __arm64_sys_write+0x84/0x98 [ 121.474745][ T8716] invoke_syscall+0x98/0x244 [ 121.474759][ T8716] el0_svc_common+0xec/0x23c [ 121.474769][ T8716] do_el0_svc+0x4c/0x5c [ 121.474778][ T8716] el0_svc+0x60/0x1d8 [ 121.474789][ T8716] el0t_64_sync_handler+0x44/0x104 [ 121.474798][ T8716] el0t_64_sync+0x198/0x19c [ 121.524299][ T8723] netlink: 8 bytes leftover after parsing attributes in process `syz.3.986'. [ 121.692984][ T8740] ip_tables: iptables: counters copy to user failed while replacing table [ 122.173894][ T8766] netlink: 48 bytes leftover after parsing attributes in process `syz.6.996'. [ 122.183244][ T8766] netlink: 68 bytes leftover after parsing attributes in process `syz.6.996'. [ 122.484895][ T4719] Bluetooth: hci4: command tx timeout [ 122.772563][ T8782] netlink: 1752 bytes leftover after parsing attributes in process `syz.4.1000'. [ 123.053515][ T8804] ip_tables: iptables: counters copy to user failed while replacing table [ 123.077474][ T8811] binder: 8801:8811 ioctl c018620b 0 returned -14 [ 123.452684][ T4397] veth1_vlan: left promiscuous mode [ 123.592131][ T8843] binder: 8842:8843 ioctl c0306201 200003c0 returned -14 [ 123.916005][ T4397] veth1_vlan: entered promiscuous mode [ 124.263646][ T8899] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1019'. [ 124.263669][ T8899] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1019'. [ 124.263680][ T8899] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1019'. [ 124.292985][ T8899] bond2: option primary_reselect: invalid value (21) [ 124.301229][ T8899] bond2 (unregistering): Released all slaves [ 124.592648][ T24] binder: undelivered death notification, 0000000000000000 [ 124.610887][ T8923] netlink: 312 bytes leftover after parsing attributes in process `syz.3.1022'. [ 124.701762][ T8942] nvmet_tcp: malformed ip/port passed: :442 [ 124.772234][ T8951] netlink: 22 bytes leftover after parsing attributes in process `syz.0.1027'. [ 124.816280][ T8956] FAULT_INJECTION: forcing a failure. [ 124.816280][ T8956] name fail_futex, interval 1, probability 0, space 0, times 0 [ 124.816305][ T8956] CPU: 1 UID: 0 PID: 8956 Comm: syz.6.1029 Tainted: G L syzkaller #0 PREEMPT [ 124.816317][ T8956] Tainted: [L]=SOFTLOCKUP [ 124.816320][ T8956] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 124.816325][ T8956] Call trace: [ 124.816328][ T8956] show_stack+0x2c/0x3c (C) [ 124.816347][ T8956] __dump_stack+0x30/0x40 [ 124.816357][ T8956] dump_stack_lvl+0xd8/0x12c [ 124.816367][ T8956] dump_stack+0x1c/0x28 [ 124.816375][ T8956] should_fail_ex+0x418/0x58c [ 124.816386][ T8956] should_fail+0x14/0x24 [ 124.816395][ T8956] get_futex_key+0x718/0x12b0 [ 124.816405][ T8956] futex_wake+0x10c/0x594 [ 124.816413][ T8956] do_futex+0x2c4/0x378 [ 124.816422][ T8956] mm_exit_exec_release+0x190/0x27c [ 124.816430][ T8956] exit_mm+0x50/0x1f0 [ 124.816440][ T8956] do_exit+0x524/0x1a74 [ 124.816449][ T8956] do_group_exit+0x198/0x238 [ 124.816458][ T8956] get_signal+0xfb0/0x1094 [ 124.816466][ T8956] arch_do_signal_or_restart+0x288/0x444c [ 124.816475][ T8956] exit_to_user_mode_loop+0x70/0x17c [ 124.816484][ T8956] el0_svc+0x12c/0x1d8 [ 124.816495][ T8956] el0t_64_sync_handler+0x44/0x104 [ 124.816504][ T8956] el0t_64_sync+0x198/0x19c [ 124.935321][ T8965] netlink: 'syz.0.1028': attribute type 9 has an invalid length. [ 124.935339][ T8965] netlink: 'syz.0.1028': attribute type 7 has an invalid length. [ 124.935347][ T8965] netlink: 'syz.0.1028': attribute type 8 has an invalid length. [ 125.228435][ T8971] ip_tables: iptables: counters copy to user failed while replacing table [ 125.237286][ T8971] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 125.279055][ T8976] binder: 8975:8976 ioctl c0306201 0 returned -14 [ 125.279204][ T8976] binder: 8975:8976 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 30) [ 125.279216][ T8976] binder: 8976 RLIMIT_NICE not set [ 125.812581][ T9003] nvmet_tcp: malformed ip/port passed: :442 [ 125.869119][ T9005] bond2: Removing last ns target with arp_interval on [ 125.926645][ T1595] ieee802154 phy0 wpan0: encryption failed: -22 [ 125.926676][ T1595] ieee802154 phy1 wpan1: encryption failed: -22 [ 126.037792][ T9028] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1045'. [ 126.038822][ T9028] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 126.038886][ T9028] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 126.043490][ T9026] ip_tables: iptables: counters copy to user failed while replacing table [ 126.049385][ T9028] loop0: detected capacity change from 0 to 1024 [ 126.049788][ T9028] EXT4-fs: Ignoring removed bh option [ 126.056167][ T9026] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 126.080844][ T9028] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 126.100289][ T9028] overlayfs: failed lookup in lower (/, name='bus', err=-40): overlapping layers [ 126.117279][ T4712] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2863: Unable to expand inode 11. Delete some EAs or run e2fsck. [ 126.117644][ T4712] EXT4-fs error (device loop0): ext4_read_inline_dir:1512: inode #12: block 7: comm syz-executor: path /228/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=60 fake=0 [ 126.119353][ T4712] EXT4-fs (loop0): Remounting filesystem read-only [ 126.141640][ T4712] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 126.572641][ T9058] fuse: Bad value for 'fd' [ 126.705998][ T9076] bonding: no command found in bonding_masters - use +ifname or -ifname [ 126.752954][ T9084] __nla_validate_parse: 2 callbacks suppressed [ 126.752969][ T9084] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1054'. [ 126.752987][ T9084] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1054'. [ 126.753479][ T9085] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1054'. [ 126.753487][ T9085] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1054'. [ 126.753678][ T9084] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1054'. [ 126.753687][ T9084] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1054'. [ 126.848044][ T30] audit: type=1326 audit(126.840:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9090 comm="syz.4.1055" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff86978868 code=0x7ffc0000 [ 126.848142][ T30] audit: type=1326 audit(126.840:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9090 comm="syz.4.1055" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff86978868 code=0x7ffc0000 [ 126.849159][ T30] audit: type=1326 audit(126.840:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9090 comm="syz.4.1055" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff86978868 code=0x7ffc0000 [ 126.849177][ T30] audit: type=1326 audit(126.840:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9090 comm="syz.4.1055" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff86978868 code=0x7ffc0000 [ 126.849191][ T30] audit: type=1326 audit(126.840:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9090 comm="syz.4.1055" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=217 compat=0 ip=0xffff86978868 code=0x7ffc0000 [ 126.849205][ T30] audit: type=1326 audit(126.840:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9090 comm="syz.4.1055" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff86978868 code=0x7ffc0000 [ 126.849219][ T30] audit: type=1326 audit(126.840:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9090 comm="syz.4.1055" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff86978868 code=0x7ffc0000 [ 126.849324][ T30] audit: type=1326 audit(126.840:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9090 comm="syz.4.1055" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff86978868 code=0x7ffc0000 [ 126.849658][ T30] audit: type=1326 audit(126.840:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9090 comm="syz.4.1055" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=56 compat=0 ip=0xffff86978868 code=0x7ffc0000 [ 126.849674][ T30] audit: type=1326 audit(126.840:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9090 comm="syz.4.1055" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff86978868 code=0x7ffc0000 [ 126.850709][ T9099] 9p: Bad value for 'wfdno' [ 127.095013][ T9109] ip_tables: iptables: counters copy to user failed while replacing table [ 127.516626][ T9130] x_tables: duplicate underflow at hook 3 [ 127.559539][ T9141] FAULT_INJECTION: forcing a failure. [ 127.559539][ T9141] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 127.559561][ T9141] CPU: 0 UID: 0 PID: 9141 Comm: syz.6.1069 Tainted: G L syzkaller #0 PREEMPT [ 127.559572][ T9141] Tainted: [L]=SOFTLOCKUP [ 127.559575][ T9141] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 127.559579][ T9141] Call trace: [ 127.559582][ T9141] show_stack+0x2c/0x3c (C) [ 127.559599][ T9141] __dump_stack+0x30/0x40 [ 127.559609][ T9141] dump_stack_lvl+0xd8/0x12c [ 127.559619][ T9141] dump_stack+0x1c/0x28 [ 127.559628][ T9141] should_fail_ex+0x418/0x58c [ 127.559639][ T9141] should_fail+0x14/0x24 [ 127.559648][ T9141] should_fail_usercopy+0x20/0x30 [ 127.559658][ T9141] _copy_from_iter+0x188/0x1064 [ 127.559666][ T9141] netlink_sendmsg+0x570/0x948 [ 127.559675][ T9141] __sock_sendmsg+0xc8/0x17c [ 127.559684][ T9141] __sys_sendto+0x250/0x328 [ 127.559692][ T9141] __arm64_sys_sendto+0xec/0x10c [ 127.559701][ T9141] invoke_syscall+0x98/0x244 [ 127.559710][ T9141] el0_svc_common+0xec/0x23c [ 127.559719][ T9141] do_el0_svc+0x4c/0x5c [ 127.559728][ T9141] el0_svc+0x60/0x1d8 [ 127.559745][ T9141] el0t_64_sync_handler+0x44/0x104 [ 127.559756][ T9141] el0t_64_sync+0x198/0x19c [ 128.019525][ T9160] x_tables: duplicate underflow at hook 1 [ 128.056819][ T9162] overlayfs: failed to resolve './file1': -2 [ 128.062254][ T9163] overlayfs: failed to resolve './file1': -2 [ 128.418435][ T8496] IPVS: starting estimator thread 0... [ 128.458248][ T9210] netlink: 4548 bytes leftover after parsing attributes in process `syz.0.1091'. [ 128.476280][ T9210] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 128.476348][ T9210] block device autoloading is deprecated and will be removed. [ 128.507075][ T9212] FAULT_INJECTION: forcing a failure. [ 128.507075][ T9212] name fail_futex, interval 1, probability 0, space 0, times 0 [ 128.507096][ T9212] CPU: 0 UID: 0 PID: 9212 Comm: syz.4.1092 Tainted: G L syzkaller #0 PREEMPT [ 128.507109][ T9212] Tainted: [L]=SOFTLOCKUP [ 128.507112][ T9212] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 128.507117][ T9212] Call trace: [ 128.507120][ T9212] show_stack+0x2c/0x3c (C) [ 128.507140][ T9212] __dump_stack+0x30/0x40 [ 128.507152][ T9212] dump_stack_lvl+0xd8/0x12c [ 128.507164][ T9212] dump_stack+0x1c/0x28 [ 128.507174][ T9212] should_fail_ex+0x418/0x58c [ 128.507188][ T9212] should_fail+0x14/0x24 [ 128.507199][ T9212] get_futex_key+0x1ec/0x12b0 [ 128.507210][ T9212] futex_wake+0x10c/0x594 [ 128.507221][ T9212] do_futex+0x2c4/0x378 [ 128.507231][ T9212] __arm64_sys_futex+0x2e4/0x418 [ 128.507242][ T9212] invoke_syscall+0x98/0x244 [ 128.507254][ T9212] el0_svc_common+0xec/0x23c [ 128.507266][ T9212] do_el0_svc+0x4c/0x5c [ 128.507276][ T9212] el0_svc+0x60/0x1d8 [ 128.507288][ T9212] el0t_64_sync_handler+0x44/0x104 [ 128.507299][ T9212] el0t_64_sync+0x198/0x19c [ 128.516140][ T9206] IPVS: using max 60 ests per chain, 144000 per kthread [ 128.974382][ T9220] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1095'. [ 128.980288][ T9220] netlink: 'syz.6.1095': attribute type 1 has an invalid length. [ 129.070085][ T9227] tc action pedit offset 132 out of bounds [ 129.070101][ T9227] tc action pedit offset 132 out of bounds [ 129.070108][ T9227] tc action pedit offset 132 out of bounds [ 129.070114][ T9227] tc action pedit offset 132 out of bounds [ 129.070120][ T9227] tc action pedit offset 132 out of bounds [ 129.070125][ T9227] tc action pedit offset 132 out of bounds [ 129.070131][ T9227] tc action pedit offset 132 out of bounds [ 129.070136][ T9227] tc action pedit offset 132 out of bounds [ 129.070141][ T9227] tc action pedit offset 132 out of bounds [ 129.070146][ T9227] tc action pedit offset 132 out of bounds [ 129.070175][ T9227] TC_ACT_REPEAT abuse ? [ 129.202713][ T9236] binder: 9235:9236 tried to acquire reference to desc 0, got 1 instead [ 129.202965][ T9236] binder: 9235:9236 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 129.202976][ T9236] binder: 9236 RLIMIT_NICE not set [ 129.202987][ T9236] binder: 9236 RLIMIT_NICE not set [ 129.203733][ T9236] binder: 9235:9236 got new transaction with bad transaction stack, transaction 14 has target 9235:9236 [ 129.203759][ T9236] binder: 9235:9236 transaction call to 9235:0 failed 15/29201/-71, code 0 size 0-0 line 3312 [ 129.204081][ T9236] binder: 9235:9236 ioctl 40187542 20000340 returned -22 [ 129.204487][ T4803] binder: release 9235:9236 transaction 14 out, still active [ 129.204502][ T4803] binder: undelivered TRANSACTION_COMPLETE [ 129.204527][ T4803] binder: undelivered TRANSACTION_ERROR: 29201 [ 129.212302][ T4803] binder: release 9235:9236 transaction 14 in, still active [ 129.212324][ T4803] binder: send failed reply for transaction 14, target dead [ 129.228049][ T9238] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1102'. [ 129.230240][ T9238] hsr0: mtu greater than device maximum [ 129.309812][ T9243] Injecting memory failure for pfn 0x120402 at process virtual address 0x20000000 [ 129.320292][ T9243] Memory failure: 0x120402: Sending SIGBUS to syz.3.1104:9243 due to hardware memory corruption [ 129.320338][ T9243] Memory failure: 0x120402: recovery action for dirty LRU page: Recovered [ 129.320361][ T9243] Injecting memory failure for pfn 0x2193df at process virtual address 0x20001000 [ 129.320463][ T9243] Memory failure: 0x2193df: Sending SIGBUS to syz.3.1104:9243 due to hardware memory corruption [ 129.320485][ T9243] Memory failure: 0x2193df: recovery action for already poisoned page: Failed [ 130.350730][ T9257] xt_hashlimit: size too large, truncated to 1048576 [ 130.577311][ T9271] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 130.577500][ T9271] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 131.316023][ T9295] [ 131.316522][ T9295] ====================================================== [ 131.317954][ T9295] WARNING: possible circular locking dependency detected [ 131.319251][ T9295] syzkaller #0 Tainted: G L [ 131.320388][ T9295] ------------------------------------------------------ [ 131.321792][ T9295] syz.6.1112/9295 is trying to acquire lock: [ 131.322870][ T9295] ffff0000d8ce40b8 (&hdev->lock){+.+.}-{4:4}, at: l2cap_chan_connect+0x84/0xe94 [ 131.324614][ T9295] [ 131.324614][ T9295] but task is already holding lock: [ 131.326003][ T9295] ffff800089eef5a0 (rfcomm_mutex){+.+.}-{4:4}, at: rfcomm_dlc_open+0xa4/0x8b0 [ 131.327816][ T9295] [ 131.327816][ T9295] which lock already depends on the new lock. [ 131.327816][ T9295] [ 131.329940][ T9295] [ 131.329940][ T9295] the existing dependency chain (in reverse order) is: [ 131.331738][ T9295] [ 131.331738][ T9295] -> #2 (rfcomm_mutex){+.+.}-{4:4}: [ 131.333366][ T9295] __mutex_lock+0x164/0x1078 [ 131.334456][ T9295] mutex_lock_nested+0x24/0x30 [ 131.335583][ T9295] rfcomm_security_cfm+0x54/0x4c8 [ 131.336825][ T9295] hci_auth_complete_evt+0x2e0/0xa84 [ 131.338109][ T9295] hci_event_packet+0x4e0/0x9c8 [ 131.339227][ T9295] hci_rx_work+0x2f4/0xd78 [ 131.340308][ T9295] process_scheduled_works+0x91c/0x1250 [ 131.341668][ T9295] worker_thread+0x798/0xbd0 [ 131.342809][ T9295] kthread+0x304/0x3d4 [ 131.343834][ T9295] ret_from_fork+0x10/0x20 [ 131.344940][ T9295] [ 131.344940][ T9295] -> #1 (hci_cb_list_lock){+.+.}-{4:4}: [ 131.346688][ T9295] __mutex_lock+0x164/0x1078 [ 131.347839][ T9295] mutex_lock_nested+0x24/0x30 [ 131.348959][ T9295] hci_remote_features_evt+0x284/0x5e0 [ 131.350229][ T9295] hci_event_packet+0x4e0/0x9c8 [ 131.351320][ T9295] hci_rx_work+0x2f4/0xd78 [ 131.352309][ T9295] process_scheduled_works+0x91c/0x1250 [ 131.353562][ T9295] worker_thread+0x798/0xbd0 [ 131.354634][ T9295] kthread+0x304/0x3d4 [ 131.355498][ T9295] ret_from_fork+0x10/0x20 [ 131.356513][ T9295] [ 131.356513][ T9295] -> #0 (&hdev->lock){+.+.}-{4:4}: [ 131.357929][ T9295] __lock_acquire+0x1660/0x2b08 [ 131.359012][ T9295] lock_acquire+0x13c/0x320 [ 131.360064][ T9295] __mutex_lock+0x164/0x1078 [ 131.361142][ T9295] mutex_lock_nested+0x24/0x30 [ 131.362271][ T9295] l2cap_chan_connect+0x84/0xe94 [ 131.363409][ T9295] l2cap_sock_connect+0x44c/0x654 [ 131.364579][ T9295] kernel_connect+0x12c/0x1a0 [ 131.365763][ T9295] rfcomm_dlc_open+0x574/0x8b0 [ 131.366948][ T9295] rfcomm_sock_connect+0x278/0x598 [ 131.368133][ T9295] __sys_connect_file+0x13c/0x184 [ 131.369302][ T9295] __sys_connect+0x114/0x194 [ 131.370349][ T9295] __arm64_sys_connect+0x84/0x9c [ 131.371450][ T9295] invoke_syscall+0x98/0x244 [ 131.372481][ T9295] el0_svc_common+0xec/0x23c [ 131.373511][ T9295] do_el0_svc+0x4c/0x5c [ 131.374446][ T9295] el0_svc+0x60/0x1d8 [ 131.375377][ T9295] el0t_64_sync_handler+0x44/0x104 [ 131.376629][ T9295] el0t_64_sync+0x198/0x19c [ 131.377755][ T9295] [ 131.377755][ T9295] other info that might help us debug this: [ 131.377755][ T9295] [ 131.380045][ T9295] Chain exists of: [ 131.380045][ T9295] &hdev->lock --> hci_cb_list_lock --> rfcomm_mutex [ 131.380045][ T9295] [ 131.382475][ T9296] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 131.384678][ T9295] Possible unsafe locking scenario: [ 131.384678][ T9295] [ 131.386174][ T9295] CPU0 CPU1 [ 131.387270][ T9295] ---- ---- [ 131.388349][ T9295] lock(rfcomm_mutex); [ 131.389157][ T9295] lock(hci_cb_list_lock); [ 131.390531][ T9295] lock(rfcomm_mutex); [ 131.391829][ T9295] lock(&hdev->lock); [ 131.392621][ T9295] [ 131.392621][ T9295] *** DEADLOCK *** [ 131.392621][ T9295] [ 131.394087][ T9295] locks held by syz.6.1112/9295: 1, last CPU#1: [ 131.395195][ T9295] #0: ffff800089eef5a0 (rfcomm_mutex){+.+.}-{4:4}, at: rfcomm_dlc_open+0xa4/0x8b0 [ 131.396896][ T9295] [ 131.396896][ T9295] stack backtrace: [ 131.398063][ T9295] CPU: 1 UID: 0 PID: 9295 Comm: syz.6.1112 Tainted: G L syzkaller #0 PREEMPT [ 131.400141][ T9295] Tainted: [L]=SOFTLOCKUP [ 131.401055][ T9295] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 131.403238][ T9295] Call trace: [ 131.403929][ T9295] show_stack+0x2c/0x3c (C) [ 131.404893][ T9295] __dump_stack+0x30/0x40 [ 131.405815][ T9295] dump_stack_lvl+0xd8/0x12c [ 131.406835][ T9295] dump_stack+0x1c/0x28 [ 131.407727][ T9295] print_circular_bug+0x328/0x330 [ 131.408799][ T9295] check_noncircular+0x158/0x174 [ 131.409704][ T9295] __lock_acquire+0x1660/0x2b08 [ 131.410584][ T9295] lock_acquire+0x13c/0x320 [ 131.411521][ T9295] __mutex_lock+0x164/0x1078 [ 131.412449][ T9295] mutex_lock_nested+0x24/0x30 [ 131.413401][ T9295] l2cap_chan_connect+0x84/0xe94 [ 131.414404][ T9295] l2cap_sock_connect+0x44c/0x654 [ 131.415385][ T9295] kernel_connect+0x12c/0x1a0 [ 131.416324][ T9295] rfcomm_dlc_open+0x574/0x8b0 [ 131.417302][ T9295] rfcomm_sock_connect+0x278/0x598 [ 131.418247][ T9295] __sys_connect_file+0x13c/0x184 [ 131.419103][ T9295] __sys_connect+0x114/0x194 [ 131.419890][ T9295] __arm64_sys_connect+0x84/0x9c [ 131.420752][ T9295] invoke_syscall+0x98/0x244 [ 131.421684][ T9295] el0_svc_common+0xec/0x23c [ 131.422585][ T9295] do_el0_svc+0x4c/0x5c [ 131.423419][ T9295] el0_svc+0x60/0x1d8 [ 131.424226][ T9295] el0t_64_sync_handler+0x44/0x104 [ 131.425278][ T9295] el0t_64_sync+0x198/0x19c [ 132.530448][ T9279] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 140.738167][ T4719] Bluetooth: hci1: link tx timeout [ 140.738182][ T4719] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa