last executing test programs: 1.890519728s ago: executing program 2 (id=17): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xa0}}, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000840)=ANY=[@ANYBLOB="240000001900010028bd7000fbdbdf251d01020008000900", @ANYRES32, @ANYBLOB="08000a00e1"], 0x24}, 0x1, 0x0, 0x0, 0x4048855}, 0x30004016) sendmmsg(r0, 0x0, 0x0, 0x0) 1.785654186s ago: executing program 2 (id=22): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$bt_hci(r0, 0x84, 0x75, &(0x7f00000010c0)=""/4111, &(0x7f0000000000)=0x100f) r1 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCDELDLCI(r1, 0x8981, &(0x7f0000000080)={'veth0\x00', 0x80}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000b68112d800000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) 1.768691853s ago: executing program 2 (id=23): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000080)=ANY=[@ANYBLOB="44de0000", @ANYRESDEC=r1, @ANYBLOB="010000000000000000000100000004000480080002000100000008000100000000000400088018000c8014", @ANYRES64=r0, @ANYRES8=r1], 0x44}, 0x1, 0x0, 0x0, 0x20000010}, 0x40) 1.706952496s ago: executing program 2 (id=26): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x22) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000140)='ramfs\x00', 0x0, 0x0) syz_mount_image$fuse(&(0x7f0000000580), &(0x7f0000000040)='./file0\x00', 0x30160f8, &(0x7f0000000700)=ANY=[], 0x81, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x4a342, 0x138) fallocate(r0, 0x10, 0x10c00, 0x8000) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x4, &(0x7f0000000540), 0x1, 0x79e, &(0x7f00000007c0)="$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") listxattr(&(0x7f0000000300)='./file0\x00', &(0x7f0000000640)=""/210, 0xd2) 1.530021834s ago: executing program 1 (id=30): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r1) sendmsg$IEEE802154_LLSEC_ADD_KEY(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="290e29bd7000fbdbdf0527960000050031000e0000001400300053e0e85290ceb080fb816d3cdadf198b08000200", @ANYRES32=r0], 0x5c}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000004000)='./mnt\x00', 0x1ff) mount(0x0, &(0x7f0000004080)='./mnt\x00', &(0x7f00000040c0)='tracefs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000004200)='./mnt/trace_marker\x00', 0x1, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000500)='./file2\x00', 0x21c90c, &(0x7f0000001340)={[{@delalloc}, {@noblock_validity}, {@jqfmt_vfsold}, {@nodelalloc}, {@errors_remount}, {@nomblk_io_submit}, {@nojournal_checksum}, {@user_xattr}, {@resgid, 0x32}]}, 0x1e, 0x4e0, &(0x7f0000001a40)="$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") write(r3, &(0x7f0000000000)="2d2519d010bae03d46fdca85c1a1862b9b169eceaaca9cae556c58768461ce74c044b9b0e9db785713ea3656b06797b301cd0e3dcad7e05178b7c9c62c375787e98a80f4102d00", 0x47) r4 = openat(0xffffffffffffff9c, &(0x7f0000009180)='./mnt/trace_pipe\x00', 0x0, 0x0) read(r4, &(0x7f00000091c0)=""/16384, 0x4000) 1.529799571s ago: executing program 2 (id=31): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000840)=ANY=[@ANYBLOB="240000001900010028bd7000fbdbdf251d01020008000900", @ANYRES32, @ANYBLOB='\b\x00\n'], 0x24}, 0x1, 0x0, 0x0, 0x4048855}, 0x30004016) sendmmsg(r0, &(0x7f0000000000), 0x400000000000235, 0x0) 651.779769ms ago: executing program 2 (id=33): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, 0x0, 0x0, 0x1, 0x5}, 0x94) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x58}, 0x10) r1 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x2, 0x325}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) io_uring_enter(r1, 0x12a, 0xffffffdc, 0x17, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={r2, 0x58, &(0x7f0000000100)}, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f0000000380)=@ccm_128={{0x304}, "b78430942aed66bd", "11a239a8e21958ce5d1c2b9015232a74", "7ac72c57", "de5de525df07e236"}, 0x28) ioctl$sock_SIOCETHTOOL(r4, 0x89f1, &(0x7f0000010640)={'tunl0\x00', &(0x7f00000001c0)=@ethtool_cmd={0x2e, 0x200005, 0x0, 0x5, 0x7, 0x0, 0x3, 0xfc, 0x0, 0xfc, 0x3, 0xfffffbfc, 0x4, 0xff, 0x0, 0x45, [0x0, 0x2]}}) sendmsg$NFT_BATCH(r3, 0x0, 0x0) r5 = socket$kcm(0x2, 0x2, 0x73) ioctl$DVB_DEMUX_DMX_EXPBUF(r2, 0xc00c6f3e, &(0x7f00000002c0)={0xffff, 0x80000, r1}) setsockopt$RDS_CONG_MONITOR(r6, 0x114, 0x6, &(0x7f00000003c0), 0x4) io_uring_setup(0xef4, &(0x7f0000000300)={0x0, 0x70, 0x2000, 0x1, 0x385, 0x0, r6}) bind$inet(r5, &(0x7f0000000040)={0x2, 0x4e22, @multicast1}, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="2309fefffffffcffffff0100000005000700000000000800090000000000060002000100000008000a000400010008001700", @ANYRES32], 0x3c}}, 0x0) connect$inet(r0, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r0, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xfa6) 602.136408ms ago: executing program 1 (id=34): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000f80), r0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_SET_MACPARAMS(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x24040004}, 0x800c014) 523.817383ms ago: executing program 1 (id=37): ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000000c0)={'gretap0\x00', &(0x7f0000000040)={'sit0\x00', 0x0, 0x700, 0x1, 0x1, 0x3, {{0xd, 0x4, 0x0, 0x16, 0x34, 0x65, 0x0, 0x63, 0x29, 0x0, @private=0xa010100, @multicast2, {[@ra={0x94, 0x4, 0x1}, @timestamp_addr={0x44, 0x1c, 0x68, 0x1, 0x4, [{@local, 0xf}, {@multicast1, 0x73b}, {@loopback, 0x2}]}]}}}}}) getpeername$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000180)=0x14) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYRESOCT], &(0x7f0000000100)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', r0, @sk_skb=0x5, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0xfffffffd, 0x5}, 0x8}, 0x94) 489.664101ms ago: executing program 0 (id=39): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xa0}}, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x30004016) sendmmsg(r0, &(0x7f0000000000), 0x400000000000235, 0x0) 425.591807ms ago: executing program 1 (id=40): mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x46032, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80801) mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x3000, 0x4, &(0x7f0000d23000/0x3000)=nil) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000854000/0x1000)=nil, 0x1000}, 0x1}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xa0}}, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000840)=ANY=[@ANYBLOB="240000001900010028bd7000fbdbdf251d01020008000900", @ANYRES32, @ANYBLOB="08000a00e1"], 0x24}, 0x1, 0x0, 0x0, 0x4048855}, 0x30004016) sendmmsg(r1, &(0x7f0000000000), 0x400000000000235, 0x0) 424.033557ms ago: executing program 0 (id=41): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) (async) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f00006af000/0x3000)=nil) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80c4}, 0x40041) (async) mlock(&(0x7f0000997000/0x1000)=nil, 0x1000) (async) mremap(&(0x7f00005ed000/0x1000)=nil, 0x1000, 0xc00000, 0x7, &(0x7f00003ab000/0xc00000)=nil) 369.553074ms ago: executing program 3 (id=43): r0 = syz_io_uring_setup(0x3bd4, &(0x7f0000000180)={0x0, 0xcc19, 0x110c0, 0x0, 0x30e}, &(0x7f0000000100), &(0x7f0000000200), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_RESTRICTIONS(r0, 0xb, &(0x7f0000001080)=[@ioring_restriction_sqe_flags_required={0x3, 0x4}, @ioring_restriction_sqe_op], 0x2) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r0, 0xc, 0x0, 0x0) io_uring_enter(r0, 0x2e6f, 0x8555, 0x2, 0x0, 0x0) 353.916065ms ago: executing program 1 (id=44): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000840)=ANY=[@ANYBLOB="240000001900010028bd7000fbdbdf251d01020008000900", @ANYRES32, @ANYBLOB='\b\x00\n'], 0x24}, 0x1, 0x0, 0x0, 0x4048855}, 0x30004016) sendmmsg(r0, &(0x7f0000000000), 0x400000000000235, 0x0) 348.694796ms ago: executing program 0 (id=45): mkdirat(0xffffffffffffff9c, &(0x7f0000004000)='./mnt\x00', 0x1ff) mount(0x0, &(0x7f0000004080)='./mnt\x00', &(0x7f00000040c0)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000004200)='./mnt/trace_marker\x00', 0x1, 0x0) write(r0, &(0x7f0000000000)="2d2519d010bae03d46fdca85c1a1862b9b169eceaaca9cae556c58768461ce74c044b9b0e9db785713ea3656b06797b301cd0e3dcad7e05178b7c9c62c375787e98a80f4102d00", 0x47) r1 = openat(0xffffffffffffff9c, &(0x7f0000009180)='./mnt/trace_pipe\x00', 0x0, 0x0) read(r1, &(0x7f00000091c0)=""/16384, 0x4000) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000100)={{{@in=@multicast2, @in6=@ipv4={""/10, ""/2, @initdev}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6=@mcast1}}, &(0x7f0000000200)=0xe8) r3 = getgid() r4 = getegid() getresgid(&(0x7f0000000240), &(0x7f0000000280)=0x0, &(0x7f00000002c0)) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000200), &(0x7f0000000240)='./file0\x00', 0x1000000, &(0x7f0000000000)={{'fd', 0x3d, r6}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@default_permissions}]}}, 0x1, 0x0, 0x0) read$FUSE(r6, &(0x7f0000000300)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r6, &(0x7f0000002340)={0x50, 0x0, r7, {0x7, 0x2b, 0x7, 0x800, 0x101, 0x2, 0x2, 0x3ff, 0x0, 0x0, 0x80}}, 0x50) syz_fuse_handle_req(r6, &(0x7f00000023c0)="7183c1654c792752d2252c111505954b0b2d4062f31328bea54f310d5dcf627fa7f8f45e484f7bbd0c20f5de909f0c29f7418403b0a343182340147475653be9aec286f773355d274454a71a5eb1afafccb166cd4b995af5b23ea89439fd58f9d4b07fac9ffde1c16f9ec644e02386c4c879fb7495d65b6cd2bda928253538ab5c7061572b7be5483b6fa86968358b4b537fa0b95fc63d8631b1084611daee62ad3bcd2cb9f53a59416985d77f219e29f289a45fbb1ae3ebb4e046d6a9633ec25ea3156f36effa0491e125047e7948e3f889f713abc9474f577d84e8cafe011ee3eec12b43270d728146e2ff22d74bdb0694e93b7f977fa1952ab5b9a69cde45ec4d22047e785794c827c42173a26930b088520677246ac55b5bac5574325eb6aa71b5f67e151efab73f7582588be5eede94b20c257eec7cffb6d6c898f2a525ab0fe9fd0a1fa480137eae2905a932e175ffbba70f1dc7cde443abcfdc2e1fc12b1bf444e65b802eb4859b62a06ff813611a6ea1d8d35bde0348c02af3b8c70fe172d899ff191850604b2786e06cedc28de58093cb585b49a5c1d4c8669e8a59f95ff3bb4287a56d19de4c65d18ae9335cf1cfedc47e6741fdc6a6ca45290cda457a87162fd6868d80e26bbad4657db5214f98e89240c27b071bba6dfc206308a078593c7b7b1d20d64291b7dae4ed3303c5d90d0df3e1be68c47f99baa2cacab4f87878e4a497fe5bd4f9f0bd4e7253dda9a951d1906a6da9e4def5e6fb8df7dcc085957c59b0b725deb104dfa0e38f5d3f4bb6e55d0af541348cfe50f17fcbded2419d939196a349ff139a1545765379442078676ef2287d9a07eeb2758ca36536640820366f99f31155c1d571792bef6c7ee7570f1a267ee692f93203efa00b5678b6f1549068fff92651c9ffe1be516575883c42313c9175bf9dec1c559c8414dcf3c928809f9d4cdc3279164d570b5f2c3f549d7c57acc17286622983bde3db9e6eeaa53fd6dfc30b87edcceed4543eef1ced8a43584a2a0b90ef0c11d92682a7c3647888fdebaf8522a3886cb6874032b803b9024fd2df89a291c8479b6fd1f29202484d2227ee9cfebb58cbbc5459583392c78f4cdea2aaa353fc10d0f6f219e041cb95fc4fcfe95d6e2fdf8680d4d4315ec4a90735aac77c02e0bec67e1f6b8edef2cf8c3b2334aed69bcd855fc70ec13412322bcdfeb9ba36f48b62a19c489ff0be02bb5042bb7b911ba53c2cb73cdc2c8afbcaf4a067c9f33427249ca462fcfc760ad265f468ea8417f1cd35be629d35ddd0901ed6c1be436f248dce3a6280a8e0c245bb409fc4461efdca9b3fbbeb1090f665e2491cb86198d87973ffa4129bd5cc31dd472313f55b3ce5d7517d76414684431ea0eefe3fb4dbcf462cd8ee3605daa4a372b0ecfcddcf9fbea616721cbfc12dbfbf77ebc02de165157bfc7540a8271c2d1f445a2c7afba38c3ebeb61169894ae9ceb8e228c7331137db6f870a19550f2f495c7f08d0b131208fdbab2003479d18093ce57ed13780fed91050ac7be47f4ac661a160f014c18b572c7982c0b03851babdee50a066827ed740f265cc118effc7ef7608a947680c4bee1a305b2cac9f2f37a2771f1382fdb24cb936dc4220a9a6a44669d7c48564e85b475a076c4b06f1f2b8dc04e2d0a0775bf52fcb811a903270d704bac39ed1eeb3caee9b0940e0c22f513ad3c262000047db217f2aea76370af22adbc3c8e6f1e6fc22b5fb4b176f405517e5fc483c50076ecbd2af833c45f1b7fe21722d35bbb5153068426c1a630f9d08517953b39b9adf9b9c5f5f7a9bf2f0020e84edc541bb5112bd00d3dda0a5a784b038de7f2bada95b5040690ef556a5ae169b874f26f85c114e71a0393bda4c8c1aaad8b4c7523f24a901324c9d2cdf6deb88bfc03092130aafcbb75ed469f269a78b83937dea2fc1d0e3d826edb978471c5cbadbd60bd3b9f418ef30aa6a437319793d5b252b30e6c6587b7c888da6d257a59356d2e3aa7ddfe477cb7122a727289d42a5d0773a3a2a93a76e3ba0c854a98a4297ae388f0861f64f1949eda7cb8f1d643b1a8ea488f1565a829c3dc06ddf10ef193ddc74661d4a1e8ade01fe2652ff606d48eee3732c88603f8059c56d08b231069eee3c4c9b62ce59fd03352723ae4068983c5ef5f3aefdacb92756bc051c15936f86ab70910141a897545489da87f8ec6a545626dfeedd1a01b39b03c0961030fca2eef0e0935f0afcf495598ae5e1b428152e62ecf21512ea27d7295bb9697eca3a6fffe5d7c1f1c389ec0d4f509d3bbda5d3bc31cbf8d6a32f966d654b18c25134fb994b1acca6ded0e13f7a2d94964b5e16ec0e0448398c297314254a9acd36d14c342d637084b96e0b770ad7a46d67238f26625e2f3e2c1283983bea299ad149fafaea62e4622c29f168ba2b091ad8a19e5c19f0f51608c0f55012f829af2934bf00b59ef689b93fb5e080620da166f61251a83ef4c52f246bd5ead76449c99048eadf778e52313935ca50d953a962941d07cdb5f201cad408efeac1802f1b622bf9ff338ec0dc0b61297e681c15db4ba82b9a7c7879b2897e2f4da36de9d366770c222a064d5b56ca800009d260376a6dc19f63d0a5fbb4f2b7ccb71b9d693d4596a4580d7822872f29a3af6d0419aad50b5e44515ce4b48bfb923c16dff60eb890bc04a8997b4bb347a643ca436ffb8f4cdab529c2fc847ef8db017dbb8ea76f645eaf3d8314d8b68ebefdff622076f5f5365fb00db199dcf6ffc998d4007a2d3ff11abd03a71f7c2b23bf7da785010acaddc388d21ca5700ec57407e025ab5a93750820a0814b330fca50534edb5a1b8658301a7f175f110c8513b9e0841074f135200965e8d74c93732c7c34c003cb727e86e6caf3fa8ddf54927001e1f29c7ffe1cce3cee719f980d4ffc9abebfeb1c5059b52afe9c78413a6e825af24fb1c675b906577bb1afd02fae10b6d7b6d9a394826987a621c3d332320f714e74b709236dbdcda930db15650d1fb3dac7333944a205c69f78433545b942dc8bc41a670da0ede8b0383e66838a2980344d35977e9a1fa94c164f73ddb673c7e65eeb70df39bf25b692dd09ddbdb6a5d0bd0a5b5773c128abeb021147277cca9c8f76dacdf75174969ea62b479d05557ad3365f0aeaf061323d8de1773c81cfdb809a55e5aa6967a3fde5eb3b590a523e3b986997bd42adcaf55f5859641d8a20288e48eac8b5d3ee23d71be3298120031437d650645e36786b6f887d9dc74e7dbbfdb6d463e912f3e462480b5dac49a2804eb56ff333d7fce4c1b29036ff26cf7ebfa0bb46e36f6ab37cf8a4480fe85004a05a046a7e367ce78699a893f7d9471fa1b81b23d59bc1dcec14ac85db72056c7c84be166e87a2b120c6d7e53d3b1505c1336cd362e1d101a2c29d62ce1e2733efb4e4861a9f712f678b09f174fce6ab5957c185e77b0017964f7caf17ab31531f8ad3afdebadaa949aac1f85b1fe31553afb464ece3b0db14a5c0b42b9574729bd41f1e543529219939685e7dfc643263f363b3836cace58433244180f1ca6bcc740a0e6c66ec22f5c0edb91599faad9ff618d541568680831e5659c73d01151dc4a89ad6666cca1ad7e57bfe819a305328f00d680555f4979348fb444c508785db795d3505b764f328bd123dd2f4fd13c3be9094b5232ff38b02e485da80ea0418d1d6c6facf7bbf020c5d2894f8c4f6d67a0ecf660dc87af9c625c7b8dc12921f3f01edc8954fbc40a61d87bd64a1eb7aa18d525df842492d16d380fbfa0022118c22fe617e4a43dc311fbcc06ed9fa656deadd965021ff973a19a84bb2c04eeeda2b0d8e9dc4ebc9818c21661fe95c42f8917d88ebb5beafb7e0ac35e7174e9851ba2a8c5cf4115a5e0391b65a8fdaa9750c07046e67881cc491dfb14999cae28e835dd083fb5962ea9809664fb5dbacaec93423f9ca2bd37da35fe5560409f76adafded418891cb45d22363cd77f0eabbf90e6c0413f56175ead17954d18f5e13e16f9a43e3d50ecfcaca20cdeadc6a85e3c5d8039d502e82c8657b0d8d67aa81003d5eab83884df0206fa5020e32eee186aab41da797a32c8e7d2ba8309b463bd84447d27d51f8978d744474dac867822814e1adf897c79e53662a3db2575a6ed5654e41baf4da6415fa4f79baa0dd5870916814fb42e72441080dc50f33fed0ec215931f3ef6b53786911afc7ce6b89d8984f5dfe26d29c6d1b59671820390b7c9695f51bc13aa84abb6bb49cfc8dfeb7aebc2d21b9ea4a44be2f90ac7934d6f3910d388dc65ca3f18c6875ff5ee81a4bd61202443bb96e40af5c8d840ecc4374ecccd8c242fbaab3bd5b57beadc8562e5280716898d6684c0f09102f378e9e4c5dc0f2e735acb8c5f312974e1c80c817fa504fbb948c9a5fe779f249b1faf95d3de797615f29ad83807fc357c3de2fa1dea6b75d70bb20d3db88b7ed167e377e7c1f2b0f185cfc598c54a3de9a3c6a1099f3dbdac4ccf9b541c5b82ecc46a02054dadc255b27507615ea028b887e3446f7bfe9f07a397ed271b31f6b61e4d4fe4f444dd501d1bbe5ad0d9f532f22f7d181cdf2eacf02fe73b86bff775c1d27c97fb5d61a62c7bd160fa9abc411628339926915f016c15cb9d7dd6a161a46d0dbe8ce79ee8f92e4b0b1a90d26fd9a336d2dabb6844086ab91ccb875039c22d3e3cd623369642416b13940da156fc38bf22ccd790eaa594a43057886e31aa1d9b08d551128c227b111d11c11149e9f17ba10ef9fa330cf779b53777067d118d92a029359b60a4967460db0ad15437c26cddbe0467cb86332a4ee5a7db0994c70fae7b0c91b2be8ab0b8fd59724f22a7499f367f0a564eaec5a6c6ec33e217d1179e063bdfca7aea8643b258a91326996cea21c3f5833e88ffaf7162760360b068136172e8ff3896c6cb3f85ed389087b782bddc2787d316d02218651e726ac74f0680f41375eaacb65f5e07fe02554b4ef68d21c0057151f1885e40efa06cc575d9da764646ad1623a12476fd22a1689b80029d686b49fc5e3809ecb67a3d455db985f9fa5ef94ff15a37b7f436e25fb6b332a61593b0091320aa059fa4e7b40218721e93a4852a305afb91482711959886dba77ca130d6b704152c88a497492a8c8497d6500d4c00303c976ce4feb63af3c04d79470798916a39a35bbe286f0139ab4a389776216f0ff45192b78ef7bc37a591961f29334bb159f05cfb29077d25ae64e25511cb0e06d04bce0bee9940cc9301e5188410d90de2e6f3c8b2bc7d3b63a7e9e81e06c0f7aba6deb3f65ade427ee759f4a145d48f46be57452c186f79756eddbd57a8afa56c464ec2390bd0de443e9050358600d2aae0f4c26c57509ca44f87828a78b3402877097793a124f1d8797df9ee8a3d4ee31b2d0b6ff15d9fd4dfed8576f8473f11ff1fa8a9ba5d6a98b496fa8ee07b780a2f3db6096ef7a210944c421f917a1dbb6656b5dd1b5d28b9c12fffca50c7ae219cf2fc942f44157e6a9075df8bd1d1a4e78c5257de2c0547ecdbdecab658dbb78cd12f123cf30126f6d3bb9862ac2577dafa57f6d781de013c24de2c1a61b68852933cd52a008188c81db89a3a5f6d726b4a36ec94b88c1f9897ff4c8b70357dd6b8df89814979f23e6299bef881b418b43b2b8b2f9a2b4fdb63602b4855b6af76a0738b05f9595f109a087f51fec1d8c8fd89fc65a7a5e87fb51c6c1d5f7681a03866935099d71a14090b4acbd9b32b53f41b5bd941825099d2b60b8a2824b2ae8a6a280bb49664b168b680b5557cd4c043cd8317740b7bfc67c09c572a6f9430717a7fe8c0de6eac2a8197353fd98008318301586574d3d0a9bd940119c86eab16c37b52f5279ef017dd05ee01ec251ecfa4552faf56b2e6c5da623db3dbbe5b61c997b587a1ff324bd52ebc009083abc3b38ec8e025a74c9a93b4ab93563b077fe21bf8e003ec94d0ba086c755d57d089a4d26da0dc3905794e9f514e6489fb1fd17017214d13e5f8953b5ccbbcdceabbb795c47509b77b856a325062bb576472639a9c5945758862e9919a585a08323e3f6b373daeeae53fc34bcb0348c225b42681698b560adad4d6e76a142fb24fac16ffe41d3ce90f3c8d2c23c9bc9a1f1cb6d7d914a52a4a81e0bcdc81c3db916280b5064e337dbeb609fc55349c3b3c157fd5f290f96a49b9bf793bfc86a5e2f2aa8640b7051cfefc60079807daba74caadda51e509c45b6334364751424f6812aa649044cda11ce9f667433ce507521a2fa5b2bf7426a06c4cd2b96cd5daddf40b83f5201066962ccab5aa240abfc161cd22767af0c9f38eaa353ec94ebc91cd5d0d692199c51c94ab0ad01a96fa5acd1dc426732f46c97b48ca6122e35c165d67af9c1c7939efc4b34b94287339ae19dde488d5ac009b271ddcde85ea9651bc793b1c6a6a71aa569f03f350e0bc9b7f03697bc8c676f8adca0dab2885b40c5ca0cb39f5aafea2ca215267af81f67b1f3598395e1f7b4b98fb85add7d260d53aa7d6720454809daabd390283214a8c04fd86be5fad5417c7256beb270d6528b611d57d9889792f6615ccc8b27e36de49960b2027c12915fa472bd15b233eae9026771be4459397016ebe5e7c03f0c9c24aa62936a98f09c37aabbcc001b55b1fad4729be3b708e70f893fd1901064c5863e444c38ecc8127c40fe573a412f154731587fb4ed173a112ab5ef727f9d35538a00280b099dce9aa990cbc3fb5ba0f224d637d26060c93dd768e4ce14ecdeff52d374e1bbb75b4e36f5c24bc2efd619896d4ae7ce89b3eebc96024c0f20643c8722b20570f52546f0b7950a8b1364041611a57f1cbf0473d1b4c0fb270c3eddcb7ec770990e738057e1e147c7cb222a4fa1d43159b00a5cb4bf8693f46e338c5342fb779dcf3774c47916c9b6378bb7024c46d3a9283db02f06f33e923194f377b60d3a3544df65d7fd0e864bdd2f5498a186d00c055a3266ae58df5324b5577ff8bc10e802587ce4b40224795634a8740f46ca4684513bfdfd058fb3dcacae59fd81328752a4dea349073bee3f8f6deb4ab49d07dc8e12f5c07c03e18dd9f3ed50a81cfaa34b7d76a0ca136800c7dc9d8e4d031dd83d350fdc5f1c381dfe9a4d50ce7a3d672497686e36417bf42c963ea4d57b4a1e8406a8d8366e48d90ca841f11d578707745642a92bee162bf53413193c4f56393fd6f3f16104b037e540467e4399ebb474911ae4e3f6bd8de3b8d78d465a0f965aa83a9a6915e1a8680173dcfc943b0b22e72a9c1e2ff91035c73e1ae8a391433927b4f98721926e27c24ebfd9ae433305de8ae18e4f7e58fba0a71711bc2462e6f58b52f62eedfdd188d82e837d84c695128c442c7feca7cf33bf9f3e0419c2ad2c0d0ce716cd3aa50d14590a1b0cc3f7a7faaf6edbe23f3dca06328618c47eb300aa2e70eaa9d3d9ef1fedc7c62f678001d00b73afedcb904064ab9402556bba36635d6009200524723e30f9e5f3ba0fe7f0dcdd7a71e917d20ce83385832477aed639ff46a6407b6bda8adcc1445c9ac5050012779d5d203e01c1a60a6ec1189e0c311baa8b4b7f80353c2545ed25d4e967bfb55d60502909177e51a4fab5f14bfafeb2f8e29b8c358c4c6e01126ae4909dfce62c05b7c1f26ebec4ca1eeffadf7e2de92d505d4dbce9f01f5898b78a29df49041334f7723ed3f33ef66d47a7d7934bddb65bbc35c61f6f87aaca98e33ed76d99bdf91028202aac5fdc2e8f2349d213d720ed20342275ba17dbd4513771a523d59d4e58f1a85a5b2db3444a7426aeeeee000c7732b580136dbb5da4e38bfeb9b4bcc8d8277191a6bdd3cc8999e7b029eac6d4a3230f3921bb7c05aee79eeb6582da5f55ae988284fb406944f60ce5f56c91571d9871d08e1abbd727021af7de75ed8636ae66b58e28e49ed26f90858103f40477500d8ea9dda0aeb93f8f3ed64584aa53281c0e823f421d2a5ae4c5c6dbed7a5eea7759e5f88e0b1e4c5aba30402eec0f31cad961c7b91f97718d69d36b2e05116003e48b154bd192463c88a91bff59469260d5253f7592d88d7d1b404eb44a1a37b9bc168d2aaae1d9c1bc76429b443e750c5465c9964024401dd840827b6562119bfd26419be851774ee6f042d03023e8733d5e5da81f0d79eb6b2d44680c761a4067340a70e64928ff083d3d6d580818dacc91cf911e43996fdef4e7a2b99961ff9f1524429a619c262bdca9d66ea3d6e2af7726d53fb2daf4aad27c4f140463c2f28ca0080361ebf1bc53d04ed095e79ea456a7df398b27ac4968c91fc05f25ce547c55584b1fd4409bf831f1c094b7b5b922ac320b68f0a2ed9fdf6589cec5664d086832fd2d124ac0a3414cd79231f7608d6a7bb282cd2294b976e76f677a0c55b6230b16ba5c778e7c4b098b254f61c48a96840dea31526ea453a64bd8c6c79cfa6b2d9b67c1f43dd09dae0474234e370dbb87e09c2dd3c06f6e2537d0730258c267dc0125b5de1abf6c873327558059c1f15f8ae330f57bd01e922e7ddfd1645cb7f65fa93758346f40795f7fb4ee34a52a77b88e21bb4ae5f3992a8ecf3749543c9a29018270dc78b2e1b2e2ba8cabfff252d2beab6f3a03fd97f7a3c64c9dc653fa2776247f18806fcaa806adbd1e1f40e452778799dfaa54ddc5034b68b1111204831d172666fe2491f8e7d1b774125021e1e506846a85bf0595e3a4f1d6749fb1e0f307db076f793fbb376748eb4848d277f339f8402c34996a6f0402867b4842a2b49dc5000aa7fd1d1ece309a7d9ac2de864be2f891714f80dc33de0ba12b443d4c797028b428fefa73f4d449db3d8857f54b87bb18be180defec7d342f9bc6a62cf7e803019d5b34699b4d641f7b877473b31eb285ed7298942b390c6f0dc3f2d020b99e97cf77d9c0deb5f7a4d24acfed27529983238a9396387004c1d0d559914fdd328d8138d8a09a239d13ea7cbe6a1e5bb15ef31744c47db7b2ed9adba3490c925f7cd32ebadf1703abfb6f7208a0618fac5ce87c41c34614f12890262e7b768fd61d18ade5dddd17f981a331481d8cf51a4ea0de2b5ae771cd9854eb837e0c3161135c2ea96bc65368fd4ade64bbe8b1ad83bf8e441efa5ad58b504b3363e4f64b107a052e520da8592d5a82cdca61e62dc929675d43ec22adf0d5e6e1b2c6e6da2a8331e43891ec01b8d437ad2eef660f0819b1cdc0da41dcb10e3ab569400b2bfc6596aa3fe74c0a9eab4d49734f8ba17ae80dc2af75f003872b9242d0ea419bfd8f7998e8f5efc3a3f31aae23228f5df23e1a4f9f887aaf62d16db191e16423363228ffb7e5707dbf48b0718664104ca1b3b8094ca2f2e505efeca17449391a1de5273f9945d778a44d25bed43e88627e0f02ac99b17b6062f1cf1c3ff896ffedd647fbf5b17bba1c9f48b44f37c175cab7423bb515266c351bcd32cb8e686dcc2f53c0e6e69370bfeb26a92eed46345faa54d16fb8631abbf87155893a00321d4e6895f1db18791570a3c3bafdc4a0a0ee400879babfb96c32de9fe4f0c7e5525b214f2efa6134fd11b7cce737306c9a2f181589296861a069b52ab409f6d68947d4e93408c58a2583852eef6180386095cf05af416dc753e04d01e63850954877052b91e0106e9e4a09188db2e3d20c4d0f55cbc70191eee8306627934b4385f0388d4473d255edeb2863fd199c7de24e4017eb3419a01986efdd686e6811eafce821a4990612618c635f5493fbbf078f7ebb6ad2524685673ff6de8ddd1f31f5e8c38a4ea82032acc1bc4492921a227869de3465b63c8af1f9da042d6a4ff6038fe2d5d8b33957b2da3751263fc761e474183e9d98800b9a8f70b6c14dc3088e6433e873635e892e0011b619e75d1a9a8f2cdb05cd400a3c9e1e3a49d3e2b94dd31ee691b3405c9d7afc2cd90b158630877b369fc7fa89e99436d8199844c9c8d983dcdc9265ac7fce701366b77a96188bf3e38edd51db71b6e812e5ad91b365c42113579a9a21d6ae1763cd661abeb0d44818b48d0044852bbbde748d0d553e3248e6b8c8b96626955e558ea3545d37bdf8678650846328a192a3094499e278f97ffe373fb84b66cf632cf310e2f9f7bf9796949d8e3df3ce3449962ef94e802866b15a96f639a01563196eebcf5d4c44874b04fe0af19f5e529da8b5c84c4a7720c4a4e376853a62803f147a0b02af0cdb84c8beb82943544e818a405dac88240d5d16163dcd305863ae3e23cbd30a3afee464d3c650584b3f0a4d18d433629584de57bfeae052f0ee56fcbe9e99fb8889330cfde95c2acf458a9547d845d9f16d61c91086e6b093c3231f4ef8ee1d9a483b3ff64e5e1dd458ab1498d5c9ffad7dcffc08f3c17e3471e5d7864d7ff46e3edbd31006cc007692082ab2b876e00003437ae98a12fb5113f30fe0273d6e54bb724e1a68231b514a684c652d9b3221f1002d107607e95690f42441a42fb27ea8c06bff93989868b69b7d89595aff235177a7033cd8460b5ce72d693a465ed5f32db2eb84de6a073df764b171bf95d989fb1d5aecf51a035b6b3a2598178c626355dd45fcfd7418cbefa7266408ead0b0758bdb20458ca2a9e17c4948ed2b448ee0b05c9ca40d2737f18b5d55c1bbcdc54d8d84057211148fd29c673a4d9d40c9ea95934adbd92cf51bc04bb5a129de5e61e745549c3661216cc95ca8bdbaf1300afa4a1b217520498471e25786535183bc9f9e807d5e2f8a719371b36f582b89829c3d122f609d6fbab9ba3f9b531254cf8f136da347fca26c134038e9fe5c37a20a747273a6312a2c8c54a9ef16f1309704b4c6e8f28c64b120c7fc4527250580de7febe7bed26976a2b5f50af3d391005b06216946b0cb83029848092f473b0504a747c10302ead0743abf7879a6bcacf66c51ab74c85dcc9ab80ea97c8e410f4ca2be1496ada764b0d40710110b609b94959063cdd744bfff8a205cc78267451319181314c1ec3f0f7698c91592f5e876a6953cba7040a5dd5abba1064319ca4c9776a5d164b2378765b385c4bd046ece0c19853e5a6b0a95cc4e64ad056327209f6f98f085e2abad270930e1c74f462137184c7ad9cf88a73db662c15235e79065eed8c89e3ad88a68a51505dd09e042871d65204ef36b7958543b23dc4661cd796f98738d8638b3ec8612da6bbd01b3915a23076a55497b8442c6895f2d708e5212e3bc4a377849f690fbf2a4f40189d1416a1c30b841fdf035e97832af641162d221dfd9b9f636ba0e280a338bb5ee8fb9421216f6fab09b782dcc34190bc65f906dfcbf31a932c85440ca6e8e6f20c2a9a76a27a2cba65403ba8ebacccc9a282e29cb8373c24858e51f7f19fa0f484ff15f1f70a819a84abdf69f09c0a8d4fb84ff43f867a4574e1a517b8f3f3724388d90a82dd0ec5d207d40e72812e2b3cb098e9d0a491330fad438355e7bee0240e4fc3b99675ff5f51434746fa700a2bddc2573b2cb5ae6fdfe7130869fc26c95d800ec5870d63fc5b54256cec89f738d62f7921569b4b72ffa7d19823d2da72215a6f994f950945c00", 0x2000, &(0x7f0000007080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x78, 0x0, 0x6, {0x1, 0x100, 0x0, {0x4, 0x8000000000000001, 0xfffffffffffffc01, 0x2000000000000, 0x1cc2f0c0, 0x101, 0x4, 0x6, 0xbfe, 0xa000, 0x9, r8, r9, 0x6, 0x4000000}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$bpf(0x0, &(0x7f0000000080)='./mnt/trace_marker\x00', &(0x7f00000000c0), 0x40000, &(0x7f0000000300)={[{@gid={'gid', 0x3d, 0xffffffffffffffff}}, {@uid={'uid', 0x3d, r2}}, {@gid={'gid', 0x3d, r3}}, {@gid={'gid', 0x3d, r4}}, {@mode={'mode', 0x3d, 0x5}}, {@gid={'gid', 0x3d, r5}}, {@mode={'mode', 0x3d, 0xff6c}}, {@uid={'uid', 0x3d, r8}}], [{@flag='async'}, {@dont_appraise}, {@audit}, {@smackfshat={'smackfshat', 0x3d, ',&\')'}}]}) 273.682021ms ago: executing program 1 (id=46): socketpair(0x18, 0x0, 0x2, &(0x7f0000000000)) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f00000001c0), 0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x3, @rand_addr=' \x01\x00', 0x9}]}, &(0x7f0000000140)=0x10) sched_setaffinity(0x0, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000400), 0x50) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x4, 0x7fff0000}]}) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000001c40)={[{@user_xattr}, {}, {@sysvgroups}, {@resuid={'resuid', 0x3d, 0xee01}}, {@sysvgroups}, {@nodelalloc}, {@journal_dev={'journal_dev', 0x3d, 0x1}}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) pwritev2(r2, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5412, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r2, 0x40305829, &(0x7f0000000140)={0x17c04, r2, 0x3052, 0x973f, 0x81, 0x1}) fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{0x6, 0x20, 0xfb, 0x208}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x6, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) setresgid(0xee01, 0x0, 0xee01) setresgid(0x0, 0xee00, 0x0) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f0000000000)) 269.577635ms ago: executing program 3 (id=47): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000f80), r0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_SET_MACPARAMS(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x24040004}, 0x800c014) 268.934444ms ago: executing program 4 (id=48): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x967c3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x4c, 0x24, 0x4, 0x70bd2b, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x1, 0xfff3}, {0xc}, {0x7fef, 0x8}}, [@TCA_RATE={0x6, 0x5, {0x4, 0x9}}, @qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x0, 0x7d}}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x7}]}, 0x4c}}, 0x0) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1a, &(0x7f0000000000)=0x6, 0x4) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="2a08843b100003040000000000000000000000002cc3fcf2f8e36da0fb0bcd205d50cd4c09b652000000711c2bd0ed8eb9e45e3faef6da00000000", @ANYRES32=0x0, @ANYBLOB="00000000420000007c0012800c0001006d6163766c616e006c000280100005800a0004000180c20000000000340005800a00040000000000000000000a0004000180c200000200000a000400aaaaaaaaaa3500000a000400aaaaaaaaaabb0000100005800a0004009904fba50000000008000700010400000a000400aaaaaaaaaa350000"], 0x9c}, 0x1, 0xba01}, 0x0) ioctl$VT_RESIZEX(r2, 0x560d, 0xffffffffffffffff) socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r4, 0x29, 0x48, &(0x7f0000000400)=0x101, 0x4) sendto$inet6(r4, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000100)={0x2ffc, 0x2, 0xfffffefc, 0x6}, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000160001f47efde4be701161000a000000040000800400"], 0x1c}}, 0x804) ioctl$KDSKBSENT(r2, 0x4b49, &(0x7f0000000200)={0x8a, "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"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xd) rt_sigprocmask(0x0, &(0x7f00000001c0)={[0xfffffeffffffffff]}, 0x0, 0x8) r6 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x12, 0x4, @tid=r6}, &(0x7f0000000380)=0x0) gettid() timer_create(0x1, &(0x7f0000000180)={0x0, 0x22, 0x4, @thr={&(0x7f0000000500)="a46b8b5828ef393522ddf40d867ebed6641c8d261bf313f4edfcc72f9a313210b3307d40063297867348a51d247d49cdb8a60b991bee1e6c14abf4cf008237790f49c17fbfe4e21550c61d2c93f4b060243217fffd85b66b86374af1", &(0x7f0000000580)="9b45ea8028afae27ac13c6ba3e9ce7fd9ba2310a932897ea0113ccbc8f0d5d169d7f32c709934f85d163418d9dc94f528afefd1173d70b89f8a0a8bd7911394748ebc1b7f205b1ef56dd9ef58fb6c129e89555311ea5c8a601acc312ad84f50aab446f29bd4de024fd143354e9b2a0c136b503bf0a7c73617b0da0f4fe92abd0383e4a6ff00e55c63a02d334923afa6e4705cc5047af4f86f605a7bc75e2bd217b1f418ddea5594e530d1e9ec8e1a4d9d437ab8b18e8776445824efe20"}}, &(0x7f0000000380)=0x0) timer_settime(r8, 0x1, &(0x7f0000000100)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timer_settime(r7, 0x1, &(0x7f0000000080)={{}, {0x77359400}}, 0x0) r9 = gettid() tkill(r9, 0x16) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) socket$inet_sctp(0x2, 0x1, 0x84) 227.809199ms ago: executing program 0 (id=49): r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000000c0)={'batadv_slave_0\x00', 0x0}) sendmsg$BATADV_CMD_SET_HARDIF(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x24, r3, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r5}]}, 0x24}, 0x1, 0x0, 0x0, 0x40800}, 0x20000040) getpeername$packet(r0, 0x0, 0x0) 195.324998ms ago: executing program 3 (id=50): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xa0}}, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000840)=ANY=[@ANYBLOB="240000001900010028bd7000fbdbdf251d01020008000900", @ANYRES32, @ANYBLOB="08000a00e1"], 0x24}, 0x1, 0x0, 0x0, 0x4048855}, 0x30004016) sendmmsg(r0, &(0x7f0000000000), 0x400000000000235, 0x0) 194.957555ms ago: executing program 4 (id=51): memfd_create(&(0x7f0000000080)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea\x7f\x8cZ7`_4t\xcda\x9b\x11\x11\x0e\xa1\xcf\x00'/51, 0x6) r0 = syz_io_uring_setup(0x34b9, &(0x7f0000000540)={0x0, 0x69ee, 0xc00, 0x5, 0x50}, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000280)=@IORING_OP_WRITE={0x17, 0x0, 0x6000, @fd_index=0x3, 0x9, 0x0, 0x0, 0x14, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r0, 0x1, 0x1, 0x1, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_IGNORE_DF={0x5, 0x13, 0x1}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_PMTUDISC={0x5}]}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x4}]}, 0x50}}, 0x0) 172.390105ms ago: executing program 3 (id=52): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xa0}}, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x30004016) sendmmsg(r0, &(0x7f0000000000), 0x400000000000235, 0x0) 131.24453ms ago: executing program 0 (id=53): syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x8052, &(0x7f00000000c0)={[{@noauto_da_alloc}, {@init_itable_val={'init_itable', 0x3d, 0x6}}, {@dioread_nolock}]}, 0x3, 0x4de, &(0x7f0000000c40)="$eJzs3E1oXNUeAPD/nUma9Ot1Xl9f32utmlrFYDFp02q7EKSi4EJBrKAuQ5KW2rSRJgVbqkxB6lIK7sWlWxdu1U0RV4LbuhSkUKSbtoI4cmfunZlMZ5ImmWSM+f1gMufcr3POPffcOfeczASwYQ2lf5Ja+GZE7IiIQusGQ7W3e3euTNy/c2UiypXKyd+S6m5303gmO0xszSLDhYjCx0ljRZPZS5fPjk9PT13I4qNz594fnb10+dkzg9mS48ePHjl87Pmx55ZeqDbppeW6u/ejmX17Xn33+usTffnyPLXmcnTLUAy1y0rVU91OrMe2N4WTvh5mhCVJr/+0uvqr7X9HFGOhyiuvYc6A1VapVCoDnVeXK62uPrAEWLeS6HUOgN7IP+jT59/81a4jsGl1uh89d/tE7QEoLfe97BXxeHVhPg7S3/J8201DEfFO+ffP01es0jgEAECzb0/kPcGW/l+pNjPyx8UbL6bv/8rmUEoR8e+I2BkR/4mIXRHx34jYHRH/i4j/txy/GBGVBdIfaonX069PQhVudamobaX9vxeyua1G/29eBkrFLLY9Iu8wTx3Kzslw9A+cOjM9dXiBNL57+adPO61r7v+lrzT9vC+Y5eNWX8sA3eT43PiyC9zi9tWIvX2t5U/6IpL6TEASEXsiYu8SjltqCp955st99Uj//O0WL39Vpe08WhfmmSpfRDxdq/9yzKv/RorJvPnJc+Onp05PnR+rz0+ODsb01KHR9Co41DaNH3689kan9Bct/9e/tO7yyrFvTmYta+XS+t/SdP1HPn/bKH8piUjq87WzS0/j2s+fdHymWe71vyl5qxrOn0s/GJ+bu3A4YlPy2oPLxxr75vH0Pcq18g8faN/+d2b7pGfikYhIL+JHI+KxqD0hpnnfHxFPRMSBBcr//UtPvrf88q+utPyTLfe/Ws3Pq//GfH2nQJLNDbZZVTy7/+b9DjePh6v/o9XQcLak/f0vmXeL6JTT/NMuXfLnis8eAAAArA+FiNjWNJa0LQqFkZHaGNCu2FKYnpmdO3hq5uL5yXRdRCn6C/lIV208uD/Jxz9LTfGxlviRbNz4s+LmanxkYmZ6sqclB7ZW23xSGIl4u9jU/lO/dmeIGfg7830t2LgWav9pJ3739TXMDLCmHv7z/8aHq5oRYM01tf9O3/AvL+P/voB1wPM/0LD4D/24Z8D6V9GWYUNbUvs/6EcA4Z+kL96shws9zQmw1vT/YUNa9Hv9KwpUBtqvGowHN47BhQ9YjOVlY3ObtHoSSHtWPUl983L2yn9NoeM2UVjaAQeiO3V6aoVno3xh9vTurl/8lex/5btdg1+tSTttF+jJ7QgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKDr/goAAP//aUHglQ==") r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f00000001c0)={0x32, 0x2, 0x1, 0x4, 0x0, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02']}, 0x18) lsetxattr$system_posix_acl(&(0x7f00000006c0)='./file1\x00', &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000340)={{}, {0x1, 0x2}, [], {0x4, 0x4}, [], {}, {0x20, 0x7}}, 0x24, 0x3) 130.908271ms ago: executing program 4 (id=54): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000840)=ANY=[@ANYBLOB="240000001900010028bd7000fbdbdf251d01020008000900", @ANYRES32, @ANYBLOB="08000a00e1"], 0x24}, 0x1, 0x0, 0x0, 0x4048855}, 0x30004016) sendmmsg(r0, &(0x7f0000000000), 0x400000000000235, 0x0) 5.495531ms ago: executing program 4 (id=55): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xa0}}, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000840)=ANY=[@ANYBLOB="240000001900010028bd7000fbdbdf251d01020008000900", @ANYRES32, @ANYBLOB="08000a00e1"], 0x24}, 0x1, 0x0, 0x0, 0x4048855}, 0x30004016) sendmmsg(r0, &(0x7f0000000000), 0x400000000000235, 0x0) (fail_nth: 2) 4.996531ms ago: executing program 3 (id=56): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000840)=ANY=[@ANYBLOB="240000001900010028bd7000fbdbdf251d01020008000900", @ANYRES32, @ANYBLOB='\b\x00\n'], 0x24}, 0x1, 0x0, 0x0, 0x4048855}, 0x30004016) sendmmsg(r0, &(0x7f0000000000), 0x400000000000235, 0x0) 2.309423ms ago: executing program 4 (id=57): r0 = syz_io_uring_setup(0x3bd4, &(0x7f0000000180)={0x0, 0xcc19, 0x110c0, 0x0, 0x30e}, &(0x7f0000000100), &(0x7f0000000200), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_RESTRICTIONS(r0, 0xb, &(0x7f0000001080)=[@ioring_restriction_sqe_flags_required={0x3, 0x4}, @ioring_restriction_sqe_op], 0x2) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r0, 0xc, 0x0, 0x0) io_uring_enter(r0, 0x2e6f, 0x8555, 0x2, 0x0, 0x0) 1.783258ms ago: executing program 3 (id=58): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./gadget\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./gadget\x00', &(0x7f0000000000)='gadgetfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./gadget/dummy_udc\x00', 0x802, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x777) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x0) write(r1, &(0x7f0000000180)='1', 0x1) write(0xffffffffffffffff, &(0x7f0000000200)='1', 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r2, &(0x7f0000000280)='0', 0x1) write(r0, &(0x7f0000000400)="0000000009020900010100803212010002000000402505a0a4000100000001", 0x1f) 618.37µs ago: executing program 0 (id=59): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xa0}}, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000840)=ANY=[@ANYBLOB="240000001900010028bd7000fbdbdf251d01020008000900", @ANYRES32, @ANYBLOB="08000a00e1"], 0x24}, 0x1, 0x0, 0x0, 0x4048855}, 0x30004016) sendmmsg(r0, &(0x7f0000000000), 0x0, 0x71404077b8d713d1) 0s ago: executing program 4 (id=60): mkdirat(0xffffffffffffff9c, &(0x7f0000004000)='./mnt\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000004200)='./mnt/trace_marker\x00', 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000009180)='./mnt/trace_pipe\x00', 0x0, 0x0) read(r0, &(0x7f00000091c0)=""/16384, 0x4000) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.164' (ED25519) to the list of known hosts. [ 29.460470][ T4698] cgroup: Unknown subsys name 'net' [ 29.551475][ T4698] cgroup: Unknown subsys name 'cpuset' [ 29.553581][ T4698] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 29.722420][ T4698] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SS [ 31.186357][ T4712] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 31.189304][ T4712] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 31.191630][ T4714] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 31.193393][ T4714] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 31.194857][ T4714] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 31.198447][ T4714] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 31.200434][ T4714] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 31.202041][ T50] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 31.204595][ T50] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 31.209703][ T50] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 31.210231][ T50] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 31.219349][ T50] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 31.220833][ T50] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 31.221117][ T50] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 31.228057][ T50] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 31.230002][ T50] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 31.233181][ T50] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 31.234914][ T50] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 31.238487][ T4710] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 31.240548][ T4710] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 31.250732][ T4710] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 31.252868][ T4710] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 31.265941][ T4710] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 31.268624][ T4710] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 31.276727][ T4710] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 31.516045][ T4713] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.518039][ T4713] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.518208][ T4713] bridge_slave_0: entered allmulticast mode [ 31.518678][ T4713] bridge_slave_0: entered promiscuous mode [ 31.522348][ T4713] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.523855][ T4713] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.523940][ T4713] bridge_slave_1: entered allmulticast mode [ 31.524462][ T4713] bridge_slave_1: entered promiscuous mode [ 31.564478][ T4713] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.565476][ T4713] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.594912][ T4713] team0: Port device team_slave_0 added [ 31.598198][ T4708] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.598741][ T4708] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.599125][ T4708] bridge_slave_0: entered allmulticast mode [ 31.599555][ T4708] bridge_slave_0: entered promiscuous mode [ 31.600673][ T4708] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.600692][ T4708] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.600739][ T4708] bridge_slave_1: entered allmulticast mode [ 31.601154][ T4708] bridge_slave_1: entered promiscuous mode [ 31.602621][ T4713] team0: Port device team_slave_1 added [ 31.608776][ T4713] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.609560][ T4713] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.609832][ T4713] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.611030][ T4713] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.611216][ T4713] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.611375][ T4713] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.622246][ T4708] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.625868][ T4708] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.647484][ T4708] team0: Port device team_slave_0 added [ 31.656841][ T4713] hsr_slave_0: entered promiscuous mode [ 31.657289][ T4713] hsr_slave_1: entered promiscuous mode [ 31.658906][ T4708] team0: Port device team_slave_1 added [ 31.680269][ T4708] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.680300][ T4708] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.680312][ T4708] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.680884][ T4708] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.680891][ T4708] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.680902][ T4708] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.706805][ T4708] hsr_slave_0: entered promiscuous mode [ 31.707176][ T4708] hsr_slave_1: entered promiscuous mode [ 31.707391][ T4708] debugfs: 'hsr0' already exists in 'hsr' [ 31.707431][ T4708] Cannot create hsr debugfs directory [ 31.773117][ T4709] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.774763][ T4709] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.776327][ T4709] bridge_slave_0: entered allmulticast mode [ 31.778064][ T4709] bridge_slave_0: entered promiscuous mode [ 31.781378][ T4709] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.781415][ T4709] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.781479][ T4709] bridge_slave_1: entered allmulticast mode [ 31.781905][ T4709] bridge_slave_1: entered promiscuous mode [ 31.787182][ T4718] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.788494][ T4718] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.790274][ T4718] bridge_slave_0: entered allmulticast mode [ 31.792049][ T4718] bridge_slave_0: entered promiscuous mode [ 31.796074][ T4718] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.797429][ T4718] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.799326][ T4718] bridge_slave_1: entered allmulticast mode [ 31.800916][ T4718] bridge_slave_1: entered promiscuous mode [ 31.829813][ T4709] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.842211][ T4709] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.852696][ T4722] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.854211][ T4722] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.854341][ T4722] bridge_slave_0: entered allmulticast mode [ 31.854962][ T4722] bridge_slave_0: entered promiscuous mode [ 31.856460][ T4722] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.856484][ T4722] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.856539][ T4722] bridge_slave_1: entered allmulticast mode [ 31.857044][ T4722] bridge_slave_1: entered promiscuous mode [ 31.858793][ T4718] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.860426][ T4718] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.863771][ T4709] team0: Port device team_slave_0 added [ 31.864799][ T4709] team0: Port device team_slave_1 added [ 31.883914][ T4709] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.883946][ T4709] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.883961][ T4709] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.884570][ T4709] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.884577][ T4709] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.884590][ T4709] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.895216][ T4722] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.905847][ T4722] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.909781][ T4718] team0: Port device team_slave_0 added [ 31.910593][ T4718] team0: Port device team_slave_1 added [ 31.926283][ T4709] hsr_slave_0: entered promiscuous mode [ 31.926879][ T4709] hsr_slave_1: entered promiscuous mode [ 31.927099][ T4709] debugfs: 'hsr0' already exists in 'hsr' [ 31.927109][ T4709] Cannot create hsr debugfs directory [ 31.930646][ T4718] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.930655][ T4718] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.930668][ T4718] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.934259][ T4718] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.934275][ T4718] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.934287][ T4718] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.938807][ T4722] team0: Port device team_slave_0 added [ 31.940596][ T4722] team0: Port device team_slave_1 added [ 31.945499][ T4713] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 31.948891][ T4713] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 31.949781][ T4713] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 31.951349][ T4713] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 31.964800][ T4713] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 31.967277][ T4713] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 31.967598][ T4713] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 31.969897][ T4713] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 31.973766][ T4722] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.973797][ T4722] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.973812][ T4722] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.974754][ T4722] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.974762][ T4722] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.974773][ T4722] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 32.020225][ T4718] hsr_slave_0: entered promiscuous mode [ 32.020563][ T4718] hsr_slave_1: entered promiscuous mode [ 32.020763][ T4718] debugfs: 'hsr0' already exists in 'hsr' [ 32.020773][ T4718] Cannot create hsr debugfs directory [ 32.023301][ T4722] hsr_slave_0: entered promiscuous mode [ 32.023611][ T4722] hsr_slave_1: entered promiscuous mode [ 32.023815][ T4722] debugfs: 'hsr0' already exists in 'hsr' [ 32.023824][ T4722] Cannot create hsr debugfs directory [ 32.038270][ T4708] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 32.040887][ T4708] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 32.048301][ T4708] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 32.051015][ T4708] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 32.051357][ T4708] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 32.053268][ T4708] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 32.064586][ T4708] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 32.066797][ T4708] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 32.069479][ T4713] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.069534][ T4713] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.069773][ T4713] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.069802][ T4713] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.103467][ T4708] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.103512][ T4708] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.103600][ T4708] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.103632][ T4708] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.141680][ T4709] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 32.144273][ T4709] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 32.145926][ T4709] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 32.147991][ T4709] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 32.151396][ T4709] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 32.153191][ T4709] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 32.159509][ T4709] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 32.161603][ T4709] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 32.178553][ T4713] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.187069][ T4709] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.187117][ T4709] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.187193][ T4709] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.187221][ T4709] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.190810][ T4708] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.204786][ T1186] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.206229][ T1186] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.208697][ T1186] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.210681][ T1186] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.214004][ T1186] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.215443][ T1186] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.221624][ T4708] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.223269][ T4718] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 32.225992][ T4718] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 32.241487][ T4718] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 32.243646][ T4718] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 32.243972][ T4718] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 32.245766][ T4718] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 32.248211][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.248263][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.248912][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.248968][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.254386][ T4709] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.260501][ T4718] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 32.262701][ T4718] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 32.273791][ T4713] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.278063][ T4708] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 32.282337][ T4722] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 32.284694][ T4722] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 32.286549][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.286592][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.287453][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.287474][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.295718][ T4709] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.297277][ T4722] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 32.298809][ T4722] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 32.300248][ T4722] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 32.303287][ T4722] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 32.308879][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.308956][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.313157][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.313201][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.319517][ T4722] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 32.321887][ T4722] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 32.378170][ T4718] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.403312][ T4718] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.421882][ T109] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.421936][ T109] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.429504][ T39] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.429557][ T39] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.438449][ T4718] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 32.441781][ T4718] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 32.464588][ T4722] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.508326][ T4722] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.521971][ T4846] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.522023][ T4846] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.522560][ T4846] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.522580][ T4846] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.537540][ T4722] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 32.537584][ T4722] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 32.561930][ T4713] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.565060][ T4708] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.606344][ T4708] veth0_vlan: entered promiscuous mode [ 32.615252][ T4708] veth1_vlan: entered promiscuous mode [ 32.622450][ T4709] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.641453][ T4708] veth0_macvtap: entered promiscuous mode [ 32.644143][ T4708] veth1_macvtap: entered promiscuous mode [ 32.648889][ T4708] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.654900][ T4708] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.668541][ T4713] veth0_vlan: entered promiscuous mode [ 32.685854][ T4713] veth1_vlan: entered promiscuous mode [ 32.707403][ T4709] veth0_vlan: entered promiscuous mode [ 32.715708][ T4718] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.720682][ T109] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.720720][ T109] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.731376][ T4709] veth1_vlan: entered promiscuous mode [ 32.748398][ T4713] veth0_macvtap: entered promiscuous mode [ 32.754372][ T4852] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.754399][ T4852] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.755665][ T4722] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.759564][ T4713] veth1_macvtap: entered promiscuous mode [ 32.763788][ T4718] veth0_vlan: entered promiscuous mode [ 32.771114][ T4718] veth1_vlan: entered promiscuous mode [ 32.778024][ T4709] veth0_macvtap: entered promiscuous mode [ 32.789202][ T4709] veth1_macvtap: entered promiscuous mode [ 32.796474][ T4713] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.797504][ T4713] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.800566][ T4846] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.810208][ T4709] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.814485][ T4708] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 32.826440][ T4709] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.831805][ T4718] veth0_macvtap: entered promiscuous mode [ 32.832947][ T4718] veth1_macvtap: entered promiscuous mode [ 32.860735][ T1186] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.860818][ T1186] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.860839][ T1186] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.860856][ T1186] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.860871][ T1186] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.868106][ T4887] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4'. [ 32.868390][ T4887] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4'. [ 32.876773][ T4887] warning: `syz.3.4' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 32.896079][ T4718] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.899967][ T4852] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.901635][ T4852] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.937956][ T3585] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.937995][ T3585] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.944515][ T4852] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.944546][ T4852] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.948457][ T4718] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.982975][ T4722] veth0_vlan: entered promiscuous mode [ 32.987450][ T4846] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.988777][ T4846] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.993735][ T3585] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.993765][ T3585] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.996128][ T4722] veth1_vlan: entered promiscuous mode [ 33.013421][ T4798] IPVS: starting estimator thread 0... [ 33.014066][ T4894] IPVS: sh: TCP 127.0.0.1:21 - no destination available [ 33.018243][ T4722] veth0_macvtap: entered promiscuous mode [ 33.024143][ T4722] veth1_macvtap: entered promiscuous mode [ 33.036671][ T109] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.036704][ T109] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.038194][ T4722] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.040708][ T4722] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.050095][ T109] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.050631][ T109] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.050668][ T109] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.050699][ T109] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.050726][ T109] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.050746][ T109] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.050765][ T109] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.050784][ T109] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.080437][ T109] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.080476][ T109] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.100561][ T4903] Zero length message leads to an empty skb [ 33.110900][ T4895] IPVS: using max 56 ests per chain, 134400 per kthread [ 33.132454][ T4905] loop1: detected capacity change from 0 to 4096 [ 33.136716][ T4905] EXT4-fs: Mount option(s) incompatible with ext3 [ 33.152769][ T3585] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.152813][ T3585] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.152830][ T3585] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.152846][ T3585] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.165647][ T109] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.165680][ T109] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.207173][ T4846] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.207277][ T4846] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.232593][ T4710] Bluetooth: hci0: command tx timeout [ 33.232595][ T4712] Bluetooth: hci1: command tx timeout [ 33.270423][ T4912] loop2: detected capacity change from 0 to 256 [ 33.299752][ T50] Bluetooth: hci2: command tx timeout [ 33.300272][ T4710] Bluetooth: hci3: command tx timeout [ 33.300457][ T4712] Bluetooth: hci4: command tx timeout [ 33.307249][ T4912] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 33.341570][ T4917] netlink: 'syz.1.14': attribute type 6 has an invalid length. [ 33.341603][ T4917] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14'. [ 33.425072][ T4937] loop1: detected capacity change from 0 to 128 [ 33.428349][ T4937] FAT-fs (loop1): bogus logical sector size 657 [ 33.428386][ T4937] FAT-fs (loop1): Can't find a valid FAT filesystem [ 33.505636][ T4948] ======================================================= [ 33.505636][ T4948] WARNING: The mand mount option has been deprecated and [ 33.505636][ T4948] and is ignored by this kernel. Remove the mand [ 33.505636][ T4948] option from the mount to silence this warning. [ 33.505636][ T4948] ======================================================= [ 33.520707][ T4948] loop2: detected capacity change from 0 to 2048 [ 33.526158][ T4949] loop0: detected capacity change from 0 to 128 [ 33.556190][ T4949] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 33.577370][ T4948] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 33.605904][ T4960] binder: 4959:4960 got transaction to invalid handle, 1 [ 33.608357][ T4960] binder: 4959:4960 cannot find target node [ 33.612941][ T4960] binder: 4959:4960 transaction call to 0:0 failed 2/29201/-22, code 0 size 0-0 line 3252 [ 33.630332][ T4948] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.653061][ T9] binder: undelivered TRANSACTION_ERROR: 29201 [ 33.667720][ T4963] netlink: 36 bytes leftover after parsing attributes in process `syz.1.30'. [ 33.674763][ T4963] loop1: detected capacity change from 0 to 512 [ 33.675168][ T4963] EXT4-fs: Ignoring removed nomblk_io_submit option [ 33.679846][ T4963] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 33.683002][ T4963] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 33.814662][ T4964] netlink: 46 bytes leftover after parsing attributes in process `syz.0.25'. [ 33.853885][ T4964] netlink: 'syz.0.25': attribute type 2 has an invalid length. [ 33.853961][ T4964] netlink: 4 bytes leftover after parsing attributes in process `syz.0.25'. [ 34.019150][ C1] IPVS: sh: TCP 127.0.0.1:21 - no destination available [ 34.484462][ T4963] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4222: comm syz.1.30: Allocating blocks 41-42 which overlap fs metadata [ 34.484521][ T4963] loop1: lost filesystem error report for type 5 error -117 [ 34.488950][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 34.488982][ C1] EXT4-fs (loop1): initial error at time 34: ext4_mb_mark_diskspace_used:4222 [ 34.489012][ C1] EXT4-fs (loop1): last error at time 34: ext4_mb_mark_diskspace_used:4222 [ 34.498266][ T4963] EXT4-fs (loop1): Remounting filesystem read-only [ 34.498469][ T4963] Quota error (device loop1): write_blk: dquota write failed [ 34.498493][ T4963] Quota error (device loop1): find_free_dqentry: Can't write quota data block 5 [ 34.498574][ T4963] Quota error (device loop1): write_blk: dquota write failed [ 34.498627][ T4963] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 34.498753][ T4963] EXT4-fs (loop1): 1 truncate cleaned up [ 34.511491][ T4963] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 34.585199][ T4713] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.612585][ T4970] loop3: detected capacity change from 0 to 512 [ 34.616722][ T4709] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 34.627496][ T4970] EXT4-fs: Ignoring removed nomblk_io_submit option [ 34.643672][ T4970] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 34.643715][ T4970] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 34.670548][ T4970] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4222: comm syz.3.32: Allocating blocks 41-42 which overlap fs metadata [ 34.670585][ T4970] loop3: lost filesystem error report for type 5 error -117 [ 34.673886][ T4970] EXT4-fs (loop3): Remounting filesystem read-only [ 34.673975][ T4970] Quota error (device loop3): write_blk: dquota write failed [ 34.673999][ T4970] Quota error (device loop3): find_free_dqentry: Can't write quota data block 5 [ 34.674068][ T4970] Quota error (device loop3): write_blk: dquota write failed [ 34.674113][ T4970] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 34.674173][ T4970] EXT4-fs (loop3): 1 truncate cleaned up [ 34.674661][ T4970] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 34.717443][ T4708] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.735544][ T4982] FAULT_INJECTION: forcing a failure. [ 34.735544][ T4982] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 34.735580][ T4982] CPU: 1 UID: 0 PID: 4982 Comm: syz.4.36 Not tainted syzkaller #0 PREEMPT [ 34.735593][ T4982] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 34.735600][ T4982] Call trace: [ 34.735604][ T4982] show_stack+0x2c/0x3c (C) [ 34.735625][ T4982] __dump_stack+0x30/0x40 [ 34.735637][ T4982] dump_stack_lvl+0xd8/0x12c [ 34.735647][ T4982] dump_stack+0x1c/0x28 [ 34.735656][ T4982] should_fail_ex+0x41c/0x590 [ 34.735664][ T4982] should_fail+0x14/0x24 [ 34.735671][ T4982] should_fail_usercopy+0x20/0x30 [ 34.735678][ T4982] _inline_copy_from_user+0x3c/0x174 [ 34.735689][ T4982] copy_msghdr_from_user+0xb8/0x194 [ 34.735699][ T4982] ___sys_sendmsg+0x14c/0x224 [ 34.735708][ T4982] __sys_sendmmsg+0x204/0x580 [ 34.735717][ T4982] __arm64_sys_sendmmsg+0xac/0xc8 [ 34.735727][ T4982] invoke_syscall+0x98/0x244 [ 34.735737][ T4982] el0_svc_common+0xec/0x23c [ 34.735746][ T4982] do_el0_svc+0x4c/0x5c [ 34.735756][ T4982] el0_svc+0x64/0x260 [ 34.735765][ T4982] el0t_64_sync_handler+0x44/0x104 [ 34.735773][ T4982] el0t_64_sync+0x198/0x19c [ 34.904113][ T4995] syz.4.42 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 34.904154][ T4995] CPU: 0 UID: 0 PID: 4995 Comm: syz.4.42 Not tainted syzkaller #0 PREEMPT [ 34.904165][ T4995] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 34.904171][ T4995] Call trace: [ 34.904173][ T4995] show_stack+0x2c/0x3c (C) [ 34.904195][ T4995] __dump_stack+0x30/0x40 [ 34.904210][ T4995] dump_stack_lvl+0xd8/0x12c [ 34.904221][ T4995] dump_stack+0x1c/0x28 [ 34.904233][ T4995] dump_header+0xbc/0x3f0 [ 34.904242][ T4995] oom_kill_process+0x248/0x8a0 [ 34.904253][ T4995] out_of_memory+0xd24/0x1064 [ 34.904263][ T4995] mem_cgroup_out_of_memory+0xe8/0x170 [ 34.904274][ T4995] try_charge_memcg+0x8ec/0xc64 [ 34.904283][ T4995] obj_cgroup_charge_pages+0x30/0xb0 [ 34.904291][ T4995] __memcg_slab_post_alloc_hook+0x4a0/0x8cc [ 34.904303][ T4995] kmem_cache_alloc_lru_noprof+0x32c/0x5dc [ 34.904316][ T4995] alloc_inode+0x84/0x198 [ 34.904328][ T4995] new_inode+0x20/0x50 [ 34.904339][ T4995] gadgetfs_make_inode+0x34/0x18c [ 34.904350][ T4995] gadgetfs_create_file+0x48/0xd8 [ 34.904359][ T4995] gadgetfs_bind+0x3f8/0x75c [ 34.904368][ T4995] gadget_bind_driver+0x274/0x834 [ 34.904378][ T4995] really_probe+0x29c/0x800 [ 34.904391][ T4995] __driver_probe_device+0x1e0/0x350 [ 34.904404][ T4995] driver_probe_device+0x6c/0x19c [ 34.904415][ T4995] __driver_attach+0x168/0x384 [ 34.904427][ T4995] bus_for_each_dev+0x128/0x1b4 [ 34.904437][ T4995] driver_attach+0x50/0x60 [ 34.904448][ T4995] bus_add_driver+0x208/0x500 [ 34.904458][ T4995] driver_register+0x220/0x310 [ 34.904471][ T4995] usb_gadget_register_driver_owner+0xf0/0x25c [ 34.904480][ T4995] dev_config+0x91c/0xcc0 [ 34.904489][ T4995] vfs_write+0x2a4/0xa0c [ 34.904497][ T4995] ksys_write+0x12c/0x228 [ 34.904504][ T4995] __arm64_sys_write+0x84/0x98 [ 34.904512][ T4995] invoke_syscall+0x98/0x244 [ 34.904524][ T4995] el0_svc_common+0x19c/0x23c [ 34.904536][ T4995] do_el0_svc+0x4c/0x5c [ 34.904548][ T4995] el0_svc+0x64/0x260 [ 34.904559][ T4995] el0t_64_sync_handler+0x44/0x104 [ 34.904569][ T4995] el0t_64_sync+0x198/0x19c [ 34.906729][ T4995] memory: usage 0kB, limit 0kB, failcnt 19 [ 34.906748][ T4995] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 34.906756][ T4995] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 34.906762][ T4995] Memory cgroup stats for /syz4/test: [ 34.906851][ T4995] cache 0 [ 34.906856][ T4995] rss 0 [ 34.906859][ T4995] rss_huge 0 [ 34.906873][ T4995] shmem 0 [ 34.906876][ T4995] mapped_file 0 [ 34.906880][ T4995] dirty 0 [ 34.906883][ T4995] writeback 0 [ 34.906887][ T4995] workingset_refault_anon 0 [ 34.906890][ T4995] workingset_refault_file 0 [ 34.906894][ T4995] swap 0 [ 34.906898][ T4995] swapcached 0 [ 34.906902][ T4995] pgpgin 0 [ 34.906905][ T4995] pgpgout 0 [ 34.906908][ T4995] pgfault 0 [ 34.906912][ T4995] pgmajfault 0 [ 34.906915][ T4995] inactive_anon 0 [ 34.906919][ T4995] active_anon 0 [ 34.906922][ T4995] inactive_file 0 [ 34.906926][ T4995] active_file 0 [ 34.906929][ T4995] unevictable 0 [ 34.906932][ T4995] hierarchical_memory_limit 0 [ 34.906936][ T4995] hierarchical_memsw_limit 9223372036854771712 [ 34.906940][ T4995] total_cache 0 [ 34.906944][ T4995] total_rss 0 [ 34.906947][ T4995] total_rss_huge 0 [ 34.906950][ T4995] total_shmem 0 [ 34.906954][ T4995] total_mapped_file 0 [ 34.908124][ T4995] total_dirty 0 [ 34.908137][ T4995] total_writeback 0 [ 34.908142][ T4995] total_workingset_refault_anon 0 [ 34.908147][ T4995] total_workingset_refault_file 0 [ 34.908151][ T4995] total_swap 0 [ 34.908154][ T4995] total_swapcached 0 [ 34.908158][ T4995] total_pgpgin 0 [ 34.908161][ T4995] total_pgpgout 0 [ 34.908165][ T4995] total_pgfault 0 [ 34.908168][ T4995] total_pgmajfault 0 [ 34.908172][ T4995] total_inactive_anon 0 [ 34.908175][ T4995] total_active_anon 0 [ 34.908179][ T4995] total_inactive_file 0 [ 34.908182][ T4995] total_active_file 0 [ 34.908186][ T4995] total_unevictable 0 [ 34.908189][ T4995] anon_cost 0 [ 34.908193][ T4995] file_cost 0 [ 34.908196][ T4995] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz4/test,task_memcg=/syz4/test,task=syz.4.42,pid=4994,uid=0 [ 34.908547][ T4995] Memory cgroup out of memory: Killed process 4994 (syz.4.42) total-vm:102188kB, anon-rss:1388kB, file-rss:22664kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 34.926584][ T4995] udc dummy_udc.0: failed to start USB Gadget filesystem: -12 [ 34.926601][ T4995] gadgetfs gadget.0: probe with driver gadgetfs failed with error -12 [ 34.926781][ T4995] gadgetfs expected dummy_udc controller not usbip-vudc [ 34.926791][ T4995] udc usbip-vudc.0: failed to start USB Gadget filesystem: -19 [ 34.929744][ T4995] UDC core: USB Gadget filesystem: couldn't find an available UDC [ 35.085949][ T5009] loop1: detected capacity change from 0 to 1024 [ 35.086320][ T5009] EXT4-fs: Ignoring removed nomblk_io_submit option [ 35.105186][ T5009] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 35.136402][ T5026] loop0: detected capacity change from 0 to 512 [ 35.140208][ T30] audit: type=1326 audit(35.120:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5002 comm="syz.1.46" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffb71792a8 code=0x0 [ 35.150809][ T5026] EXT4-fs error (device loop0): ext4_get_branch:178: inode #11: block 4294967295: comm syz.0.53: invalid block [ 35.154561][ T5026] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 35.155648][ T5026] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.53: invalid indirect mapped block 4294967295 (level 1) [ 35.160290][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 35.160300][ C1] EXT4-fs (loop0): initial error at time 35: ext4_get_branch:178: inode 11: block 4294967295 [ 35.160319][ C1] EXT4-fs (loop0): last error at time 35: ext4_get_branch:178: inode 11: block 4294967295 [ 35.165734][ T5026] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 35.170003][ T5026] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.53: invalid indirect mapped block 4294967295 (level 1) [ 35.170051][ T5026] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 35.175150][ T5026] EXT4-fs (loop0): 2 truncates cleaned up [ 35.178366][ T5033] ================================================================== [ 35.178379][ T5033] BUG: KASAN: slab-use-after-free in _raw_spin_lock_irq+0x58/0x70 [ 35.178402][ T5033] Read of size 1 at addr ffff0000c89a1818 by task syz.3.58/5033 [ 35.178411][ T5033] [ 35.178417][ T5033] CPU: 1 UID: 0 PID: 5033 Comm: syz.3.58 Not tainted syzkaller #0 PREEMPT [ 35.178427][ T5033] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 35.178432][ T5033] Call trace: [ 35.178435][ T5033] show_stack+0x2c/0x3c (C) [ 35.178451][ T5033] __dump_stack+0x30/0x40 [ 35.178464][ T5033] dump_stack_lvl+0xd8/0x12c [ 35.178476][ T5033] print_address_description+0xb0/0x238 [ 35.178485][ T5033] print_report+0x68/0x84 [ 35.178492][ T5033] kasan_report+0x8c/0xc4 [ 35.178504][ T5033] __kasan_check_byte+0x3c/0x54 [ 35.178514][ T5033] lock_acquire+0xa4/0x364 [ 35.178524][ T5033] _raw_spin_lock_irq+0x58/0x70 [ 35.178534][ T5033] gadget_dev_open+0x50/0x1c4 [ 35.178544][ T5033] do_dentry_open+0x5c4/0xfc0 [ 35.178556][ T5033] vfs_open+0x44/0x2dc [ 35.178567][ T5033] path_openat+0x21fc/0x2a60 [ 35.178577][ T5033] do_file_open+0x1c8/0x2e8 [ 35.178587][ T5033] do_sys_openat2+0x114/0x1e8 [ 35.178598][ T5033] do_sys_open+0xb0/0xe0 [ 35.178610][ T5033] __arm64_sys_openat+0xa8/0xc4 [ 35.178621][ T5033] invoke_syscall+0x98/0x244 [ 35.178634][ T5033] el0_svc_common+0x19c/0x23c [ 35.178645][ T5033] do_el0_svc+0x4c/0x5c [ 35.178657][ T5033] el0_svc+0x64/0x260 [ 35.178666][ T5033] el0t_64_sync_handler+0x44/0x104 [ 35.178676][ T5033] el0t_64_sync+0x198/0x19c [ 35.178685][ T5033] [ 35.178687][ T5033] Allocated by task 4708: [ 35.178691][ T5033] kasan_save_track+0x40/0x78 [ 35.178700][ T5033] kasan_save_alloc_info+0x40/0x50 [ 35.178710][ T5033] __kasan_kmalloc+0x9c/0xb4 [ 35.178718][ T5033] __kmalloc_cache_noprof+0x2e8/0x5ec [ 35.178727][ T5033] gadgetfs_fill_super+0x19c/0x370 [ 35.178735][ T5033] vfs_get_super+0xb8/0x148 [ 35.178743][ T5033] get_tree_single+0x30/0x40 [ 35.178751][ T5033] gadgetfs_get_tree+0x28/0x38 [ 35.178758][ T5033] vfs_get_tree+0x90/0x28c [ 35.178766][ T5033] fc_mount+0x24/0xac [ 35.178774][ T5033] do_new_mount+0x2a4/0x538 [ 35.178783][ T5033] path_mount+0x5f0/0xa88 [ 35.178791][ T5033] do_mount+0xe8/0x148 [ 35.178800][ T5033] __arm64_sys_mount+0x33c/0x388 [ 35.178809][ T5033] invoke_syscall+0x98/0x244 [ 35.178819][ T5033] el0_svc_common+0xec/0x23c [ 35.178829][ T5033] do_el0_svc+0x4c/0x5c [ 35.178839][ T5033] el0_svc+0x64/0x260 [ 35.178847][ T5033] el0t_64_sync_handler+0x44/0x104 [ 35.178855][ T5033] el0t_64_sync+0x198/0x19c [ 35.178861][ T5033] [ 35.178863][ T5033] Freed by task 4995: [ 35.178867][ T5033] kasan_save_track+0x40/0x78 [ 35.178880][ T5033] kasan_save_free_info+0x54/0x6c [ 35.178891][ T5033] __kasan_slab_free+0x74/0xa4 [ 35.178899][ T5033] kfree+0x188/0x690 [ 35.178906][ T5033] put_dev+0x8c/0xf8 [ 35.178913][ T5033] dev_release+0x100/0x15c [ 35.178922][ T5033] __fput+0x338/0x74c [ 35.178929][ T5033] ____fput+0x20/0x30 [ 35.178936][ T5033] task_work_run+0x1cc/0x25c [ 35.178946][ T5033] do_exit+0x58c/0x1a74 [ 35.178957][ T5033] do_group_exit+0x198/0x238 [ 35.178962][ T5033] get_signal+0xfb0/0x1094 [ 35.178969][ T5033] arch_do_signal_or_restart+0x288/0x444c [ 35.178980][ T5033] exit_to_user_mode_loop+0x70/0x17c [ 35.178989][ T5033] el0_svc+0x18c/0x260 [ 35.178996][ T5033] el0t_64_sync_handler+0x44/0x104 [ 35.179005][ T5033] el0t_64_sync+0x198/0x19c [ 35.179011][ T5033] [ 35.179012][ T5033] The buggy address belongs to the object at ffff0000c89a1800 [ 35.179012][ T5033] which belongs to the cache kmalloc-1k of size 1024 [ 35.179019][ T5033] The buggy address is located 24 bytes inside of [ 35.179019][ T5033] freed 1024-byte region [ffff0000c89a1800, ffff0000c89a1c00) [ 35.179027][ T5033] [ 35.179029][ T5033] The buggy address belongs to the physical page: [ 35.179033][ T5033] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1089a0 [ 35.179040][ T5033] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 35.179046][ T5033] flags: 0x5ffc00000000040(head|node=0|zone=2|lastcpupid=0x7ff) [ 35.179054][ T5033] page_type: f5(slab) [ 35.179062][ T5033] raw: 05ffc00000000040 ffff0000c0001dc0 dead000000000100 dead000000000122 [ 35.179069][ T5033] raw: 0000000000000000 0000000800100010 00000000f5000000 0000000000000000 [ 35.179076][ T5033] head: 05ffc00000000040 ffff0000c0001dc0 dead000000000100 dead000000000122 [ 35.179083][ T5033] head: 0000000000000000 0000000800100010 00000000f5000000 0000000000000000 [ 35.179090][ T5033] head: 05ffc00000000003 fffffdffc3226801 00000000ffffffff 00000000ffffffff [ 35.179096][ T5033] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 35.179100][ T5033] page dumped because: kasan: bad access detected [ 35.179103][ T5033] [ 35.179105][ T5033] Memory state around the buggy address: [ 35.179109][ T5033] ffff0000c89a1700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 35.179114][ T5033] ffff0000c89a1780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 35.179119][ T5033] >ffff0000c89a1800: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 35.179123][ T5033] ^ [ 35.179127][ T5033] ffff0000c89a1880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 35.179132][ T5033] ffff0000c89a1900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 35.179136][ T5033] ================================================================== [ 35.179140][ T5033] Disabling lock debugging due to kernel taint [ 35.179143][ T5033] ------------[ cut here ]------------ [ 35.179146][ T5033] UBSAN: array-index-out-of-bounds in kernel/locking/qspinlock.h:68:9 [ 35.179152][ T5033] index 13303 is out of range for type 'unsigned long[8]' [ 35.179158][ T5033] CPU: 1 UID: 0 PID: 5033 Comm: syz.3.58 Tainted: G B syzkaller #0 PREEMPT [ 35.179168][ T5033] Tainted: [B]=BAD_PAGE [ 35.179171][ T5033] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 35.179175][ T5033] Call trace: [ 35.179177][ T5033] show_stack+0x2c/0x3c (C) [ 35.179189][ T5033] __dump_stack+0x30/0x40 [ 35.179201][ T5033] dump_stack_lvl+0xd8/0x12c [ 35.179212][ T5033] dump_stack+0x1c/0x28 [ 35.179223][ T5033] ubsan_epilogue+0x14/0x48 [ 35.179234][ T5033] __ubsan_handle_out_of_bounds+0xd0/0xf8 [ 35.179246][ T5033] queued_spin_lock_slowpath+0x834/0xd04 [ 35.179257][ T5033] do_raw_spin_lock+0x21c/0x2d0 [ 35.179267][ T5033] _raw_spin_lock_irq+0x60/0x70 [ 35.179277][ T5033] gadget_dev_open+0x50/0x1c4 [ 35.179286][ T5033] do_dentry_open+0x5c4/0xfc0 [ 35.179298][ T5033] vfs_open+0x44/0x2dc [ 35.179308][ T5033] path_openat+0x21fc/0x2a60 [ 35.179318][ T5033] do_file_open+0x1c8/0x2e8 [ 35.179327][ T5033] do_sys_openat2+0x114/0x1e8 [ 35.179339][ T5033] do_sys_open+0xb0/0xe0 [ 35.179350][ T5033] __arm64_sys_openat+0xa8/0xc4 [ 35.179361][ T5033] invoke_syscall+0x98/0x244 [ 35.179373][ T5033] el0_svc_common+0x19c/0x23c [ 35.179384][ T5033] do_el0_svc+0x4c/0x5c [ 35.179395][ T5033] el0_svc+0x64/0x260 [ 35.179404][ T5033] el0t_64_sync_handler+0x44/0x104 [ 35.179414][ T5033] el0t_64_sync+0x198/0x19c [ 35.179421][ T5033] ---[ end trace ]--- [ 35.185313][ T5026] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 35.197392][ T5026] EXT4-fs error (device loop0): ext4_validate_block_bitmap:432: comm syz.0.53: bg 0: block 5: invalid block bitmap [ 56.048920][ C0] watchdog: BUG: soft lockup - CPU#0 stuck for 23s! [kworker/0:4:4799] [ 56.048939][ C0] Modules linked in: [ 56.048945][ C0] irq event stamp: 29810 [ 56.167315][ C0] hardirqs last enabled at (29809): [] _raw_spin_unlock_irq+0x30/0x80 [ 56.169001][ C0] hardirqs last disabled at (29810): [] __schedule+0x2f8/0x2d80 [ 56.170524][ C0] softirqs last enabled at (29804): [] handle_softirqs+0xc28/0xd98 [ 56.172217][ C0] softirqs last disabled at (29797): [] __do_softirq+0x14/0x20