last executing test programs: 26.677994407s ago: executing program 3 (id=239): sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="01000000", @ANYRES16=0x0, @ANYBLOB="01002bbd7000000000001400000018000180140002006e657464657673696d30000000000000050019"], 0x34}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x3c, r1, 0x2, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x80000001}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xc0af}]}, 0x3c}}, 0x85) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000020000103feffffff0000000002000000000000000400010008000a000008000005001e"], 0x50}}, 0x4000850) r2 = socket(0x10, 0x3, 0x0) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r3 = syz_io_uring_setup(0xf00, &(0x7f00000000c0)={0x0, 0x0, 0x10000, 0x0, 0x40055}, &(0x7f0000000180)=0x0, &(0x7f0000000200)=0x0, &(0x7f0000000240)=0x0) socket(0x5, 0x4, 0x4) syz_io_uring_submit(r4, r5, r6, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, {0x2011}}) io_uring_enter(r3, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000000140), 0x4924b68, 0x0) 26.636159664s ago: executing program 3 (id=243): openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) setns(0xc9, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f00000008c0)='./file1\x00', 0x143442, 0x0) syz_mount_image$fuse(0x0, 0x0, 0x20020, 0x0, 0x1, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000900)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000940)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000980)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000009c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000a00)=@abs, 0x6e) sendmmsg$unix(r4, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f0000000ac0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000b00)=0x6) r5 = memfd_create(&(0x7f0000000b40)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcdX\x9b\x11X\x0e\xa1\xcf\x1a\x98S7\xc9=\t\xbb\x0e\xbb\xb5\x02\x95u\x94r\xfd\x00\xb9\xf8z\xa0\xe6\xcc\x85QO\x1dD\xd5\xe2\xa56j\\', 0x1) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r5) pwritev2(r1, &(0x7f0000000b80)=[{&(0x7f0000000bc0)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x86) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000002c40)={0x0, 0x0, &(0x7f0000002c80)={&(0x7f0000002cc0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000078000000090a010400000000000000000100fffd08000a40000000000900020073797a31000000000900010073797a300000000008000540000000253c0011800a0001006c696d69740000002c0002800c0002400000000000000003080004"], 0xc0}, 0x1, 0x0, 0x0, 0x40c0}, 0xc4) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000002d80)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 25.753800958s ago: executing program 3 (id=256): unshare(0x6020400) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000140)='ns/net\x00') 25.41692958s ago: executing program 3 (id=258): r0 = socket$inet(0x2, 0x6, 0x6) recvmsg(0xffffffffffffffff, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000005480)=""/4129, 0x1021}], 0x1}, 0x0) bind$inet(r0, &(0x7f00000064c0)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$sock_int(r0, 0x1, 0x1d, &(0x7f0000006500)=0x6, 0x4) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000006540)={0x2, 0x24e23, @loopback}, 0x10) sendto$inet(r0, &(0x7f0000006580)='v', 0x1, 0x4040, 0x0, 0x0) recvmmsg(r0, &(0x7f00000065c0), 0x14, 0x40000102, 0x0) r1 = syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000180)='./file1\x00', 0x1218088, &(0x7f0000000b00)=ANY=[@ANYBLOB="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", @ANYRESDEC], 0x4a, 0x2df, &(0x7f0000000f80)="$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") syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f00000002c0)='./file0\x00', 0xc0ed0040, &(0x7f0000000300)={[{@noblock_validity}, {@resgid={'resgid', 0x3d, 0xee00}}, {@acl}, {@noload}, {@acl}, {@nodiscard}]}, 0xfe, 0x478, &(0x7f0000000380)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./file0/file0\x00', 0x22042, 0x20) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000840)='.\x00', 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000008c0), 0x18100, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r3, 0x8004587d, &(0x7f0000000900)={0x0, r2, 0x8000200000000000, 0x4, 0xa, 0x5}) read$FUSE(r2, &(0x7f0000002400)={0x2020}, 0x13df) mkdirat(r1, &(0x7f0000000140)='./file0\x00', 0x150) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='stack\x00') preadv(r4, &(0x7f00000001c0)=[{&(0x7f0000001280)=""/4096, 0x1000}], 0x1, 0x401, 0xc) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000022c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000002300)={'wlan1\x00', 0x0}) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000880)='./proc\x00', 0x0) mount(0x0, &(0x7f0000000940)='./proc\x00', &(0x7f0000000980)='proc\x00', 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f00000009c0)='./proc/thread-self/fail-nth\x00', 0x2002, 0x0) write(r7, &(0x7f0000000a00)='6', 0x32) gettid() clock_adjtime(0x0, &(0x7f0000000cc0)={0x80000037db, 0x538d289c, 0xfffffffffffffffc, 0x0, 0xe, 0x1000000081, 0x6, 0x0, 0x0, 0x0, 0x0, 0x7327, 0x5, 0x2, 0x2, 0x3, 0x0, 0x80000000000, 0x5, 0x0, 0x0, 0x100000000000, 0x2000, 0x8000, 0xffffffffffffffff, 0x200000000000000}) openat$hwrng(0xffffffffffffff9c, 0x0, 0x56d001, 0x0) futex(0x0, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r4, &(0x7f00000023c0)={&(0x7f0000002280)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000002380)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="0002290f000000d68675b0edbcb83a00000024931fed1cddd63b472b0a94535da1f48a8404a456e60cad5a67322cd03295fff9ffa8f82677df64aed2d98b6aa219dd986accc0304c033fc3e8db673b66eb9439324ccbe012b483ce", @ANYRES32=r6, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x20040058}, 0x40800) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="06000000040000000800000001"], 0x48) 25.338794619s ago: executing program 3 (id=260): socketpair(0x1e, 0x1, 0x0, &(0x7f0000000900)={0x0, 0x0}) close(r0) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f0000000940), 0x4bd) r2 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f0000000980), 0x43) sendmsg$kcm(r2, &(0x7f00000009c0)={&(0x7f0000000a00)=@tipc, 0x80, 0x0}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) ioctl$DMA_BUF_SET_NAME_A(0xffffffffffffffff, 0x40046201, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) ioctl$FS_IOC_SETVERSION(0xffffffffffffffff, 0x40087602, 0x0) r3 = socket$kcm(0x11, 0x200000000000002, 0x300) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x1, 0x9, &(0x7f0000000b80)=@framed={{0x18, 0x8, 0x0, 0x0, 0x8}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r4}, {}, {0x85, 0x0, 0x0, 0x2f}, {0x7, 0x0, 0xb, 0x9}}, @call={0x85, 0x0, 0x0, 0x2a}]}, &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000c40)=r5, 0x4) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000d00)={{0x14}, [], {0x14}}, 0x28}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24000044) r7 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/pids.max\x00', 0x2, 0x0) write(r7, &(0x7f0000000880)="729c48217c3b4449b21f7f3fdd9d7db87278876c81b02c10108840c7c89966a8b4abc443fd0b5d37114107076bf2e0084f078de4a31d1b569ea98def06495cc73822b177ecc479d48a7899ed3b7994638b8300f5827536708f27ce27287c68c4839c754117be621c8177321afb49009ed4332ad51210870d", 0x78) write$binfmt_format(r7, &(0x7f0000000040)='1\x00', 0x2) syz_io_uring_setup(0x315b, &(0x7f0000000080)={0x0, 0xc7ca, 0x42, 0x1000, 0x7a}, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)) mkdirat(0xffffffffffffff9c, &(0x7f0000001800)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000001840)='./proc\x00', &(0x7f0000001880)='proc\x00', 0x0, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f00000018c0)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x4000, &(0x7f0000000240), 0xfd, 0x571, &(0x7f0000000280)="$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") r9 = openat(0xffffffffffffff9c, &(0x7f0000000d40)='./file0\x00', 0x12200, 0x110) ioctl$EXT4_IOC_GROUP_ADD(r9, 0x40286608, &(0x7f0000000840)={0x5, 0xfffffffffffffc07, 0xf8bf, 0x7, 0xf, 0xfffb}) write(r8, &(0x7f0000001900)='3', 0x4e) add_key(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) 25.089754804s ago: executing program 3 (id=268): r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x42140, 0x0) ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, &(0x7f0000000040)={{r1}, {@void, @max}}) (async) ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, &(0x7f0000000040)={{r1}, {@void, @max}}) socket$can_raw(0x1d, 0x3, 0x1) (async) r2 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, &(0x7f0000000080)={0x1, 0x3, 0x8, 0x3}, 0x10) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0), 0x9787d3bf5c5c1484, 0x0) ioctl$VIDIOC_DBG_S_REGISTER(r3, 0x4038564f, &(0x7f0000000100)={{0x3, @name="9ca559a677220bb7e61ff2b78764511e23e6144dbf5beed0faeb404fe77eeaf3"}, 0x8, 0x4, 0x5}) (async) ioctl$VIDIOC_DBG_S_REGISTER(r3, 0x4038564f, &(0x7f0000000100)={{0x3, @name="9ca559a677220bb7e61ff2b78764511e23e6144dbf5beed0faeb404fe77eeaf3"}, 0x8, 0x4, 0x5}) socket$l2tp6(0xa, 0x2, 0x73) ioctl$XFS_IOC_FSBULKSTAT(r3, 0xc0205865, &(0x7f0000000340)={&(0x7f0000000140), 0x4, &(0x7f0000000180)=[{}, {}], &(0x7f0000000300)}) (async) ioctl$XFS_IOC_FSBULKSTAT(r3, 0xc0205865, &(0x7f0000000340)={&(0x7f0000000140), 0x4, &(0x7f0000000180)=[{}, {}], &(0x7f0000000300)}) r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000380), 0x403, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r4, 0x84, 0x1c, &(0x7f00000003c0), &(0x7f0000000400)=0x4) ioctl$VHOST_VDPA_SET_CONFIG(r3, 0x4008af74, &(0x7f0000000440)={0xfffffff4}) (async) ioctl$VHOST_VDPA_SET_CONFIG(r3, 0x4008af74, &(0x7f0000000440)={0xfffffff4}) ioctl$VHOST_VDPA_GET_GROUP_NUM(0xffffffffffffffff, 0x8004af81, &(0x7f0000000480)) (async) ioctl$VHOST_VDPA_GET_GROUP_NUM(0xffffffffffffffff, 0x8004af81, &(0x7f0000000480)) sendmsg$nl_generic(r3, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x1c, 0x34, 0x10, 0x70bd2b, 0x25dfdbfe, {0x4}, [@typed={0x8, 0x123, 0x0, 0x0, @uid=0xffffffffffffffff}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc800}, 0x80) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000005c0)={'wg1\x00'}) r5 = dup3(r1, r0, 0x0) sendmsg$nl_generic(r5, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x20, 0x31, 0x200, 0x70bd2b, 0x25dfdbfe, {0xb}, [@typed={0xc, 0x6b, 0x0, 0x0, @u64=0x5}]}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0xabe5ba7db41863f7) ioctl$BTRFS_IOC_SET_FEATURES(r3, 0x40309439, &(0x7f0000000700)={0x2, 0x3, 0xe}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f0000000740)) (async) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f0000000740)={0x0, 0x0}) fcntl$setownex(r3, 0xf, &(0x7f00000007c0)={0x1, r6}) setsockopt$bt_l2cap_L2CAP_OPTIONS(r3, 0x6, 0x1, &(0x7f0000000800)={0x5, 0x7, 0x8, 0x5, 0x2, 0x0, 0x8001}, 0xc) (async) setsockopt$bt_l2cap_L2CAP_OPTIONS(r3, 0x6, 0x1, &(0x7f0000000800)={0x5, 0x7, 0x8, 0x5, 0x2, 0x0, 0x8001}, 0xc) r7 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000840), 0x20000, 0x0) connect$inet6(r4, &(0x7f0000000880)={0xa, 0x4e23, 0xd, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x81}, 0x1c) ioctl$FS_IOC_GETFSUUID(r2, 0x80111500, &(0x7f00000008c0)) ioctl$VHOST_SET_LOG_FD(r4, 0x4004af07, &(0x7f0000000900)) (async) ioctl$VHOST_SET_LOG_FD(r4, 0x4004af07, &(0x7f0000000900)) ioctl$DRM_IOCTL_MODE_GET_LEASE(r4, 0xc01064c8, &(0x7f0000000980)={0x7, 0x0, &(0x7f0000000940)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) (async) ioctl$DRM_IOCTL_MODE_GET_LEASE(r4, 0xc01064c8, &(0x7f0000000980)={0x7, 0x0, &(0x7f0000000940)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r5) syz_open_dev$tty1(0xc, 0x4, 0x1) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r3, &(0x7f00000009c0)={0x80000000}) sendmsg$nl_route_sched(r7, &(0x7f0000002480)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000002440)={&(0x7f0000000a40)=@newtaction={0x1a00, 0x30, 0x100, 0x70bd2d, 0x25dfdbff, {}, [{0x100, 0x1, [@m_gact={0xfc, 0x14, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x2, 0xb10, 0x6}}, @TCA_GACT_PARMS={0x18, 0x2, {0xa, 0x9, 0xffffffffffffffff, 0x2755, 0x1}}]}, {0xac, 0x6, "d6e3af56e1821d77c1799ac96b5bef5646306cb429800a224675a499b937064e60bd85bbb774773bdb0b4479175ae17155ff8f1fbc3c73601a65fc91086a65020fe8501cf64eb585e9e04c47a76763d91eedebc9b39716d6ccf3b37ad80224fc7ce3be504a8ecdbcebe66b45d712dd183eb13d4231bd4fcbd849f70cc32b1e062121cfdc9ab90c37a3118df7db6d5f6d117ecf110a8d1053cf147dac51dd8b74089f504634d67089"}, {0xc, 0x7, {0x0, 0xec9922f0aadb38e3}}, {0xc, 0x8, {0x1, 0x1}}}}]}, {0x498, 0x1, [@m_simple={0x124, 0xd, 0x0, 0x0, {{0xb}, {0x50, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x5, 0x3, '\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x5, 0x8, 0xffffffffffffffff, 0x9, 0x7}}, @TCA_DEF_DATA={0x12, 0x3, '/dev/ubi_ctrl\x00'}, @TCA_DEF_DATA={0xd, 0x3, '/dev/vcs\x00'}, @TCA_DEF_DATA={0x5, 0x3, '\x00'}]}, {0xa9, 0x6, "96a93796808195565de4c8ba4571df0b3af392517387b2d2150648bdde9008d3713b4bd54ee24ea764207d723489670070bc9d7111b228e77009ff6aa8d32215deb57f1fd27ce13beb71c1e7e03de8989f1d0c08c12dfbde25fa4be738c84434171b3c55369ae3bffc7669a60287f60ca5a9eed04f2d095b95396f6cdede3e38cdbb9f3a46d94bb544e9776e5cda66672520896f2aa424e48f0ae760a08f19d9459a8e6457"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_sample={0xa0, 0xa, 0x0, 0x0, {{0xb}, {0x14, 0x2, 0x0, 0x1, [@TCA_SAMPLE_RATE={0x8, 0x3, 0x3800000}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x4}]}, {0x64, 0x6, "8b8999463ec452a31d69fbc8bb15b8f81c744e29dd028cfbc688073a94f3141fedeaa1c1cdbfb6dea9eb0ae04bbcfcfd3b15f20661f12851745ec08f574b229d63aaf92a15754e5d2df67e47d0d354b6a6dfc2e95766dd6da17f2da175b39428"}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}, @m_simple={0xb4, 0x16, 0x0, 0x0, {{0xb}, {0x6c, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x0, 0xdd6d, 0xffffffffffffffff, 0x5a, 0x1}}, @TCA_DEF_PARMS={0x18, 0x2, {0x2, 0xffffff67, 0x3, 0x6}}, @TCA_DEF_DATA={0x7, 0x3, '\\^\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x1, 0x1, 0x7, 0x5238, 0xe}}, @TCA_DEF_PARMS={0x18, 0x2, {0x3, 0xc68a15f0, 0xffffffffffffffff, 0xfff, 0x80}}]}, {0x1e, 0x6, "558acf271e8c10e23bc5c7b287ecf3517b48fbb67016005f0da0"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1}}}}, @m_simple={0x158, 0x17, 0x0, 0x0, {{0xb}, {0xdc, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x9, 0x387f39ae, 0x1, 0x4, 0xfffffff3}}, @TCA_DEF_PARMS={0x18, 0x2, {0x1ad, 0x4, 0x0, 0x10001, 0x3}}, @TCA_DEF_PARMS={0x18, 0x2, {0x4, 0x7, 0xffffffffffffffff, 0x6, 0x28}}, @TCA_DEF_DATA={0xe, 0x3, '/dev/vcsu\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x9, 0x401, 0x1, 0x1a, 0xfffffff9}}, @TCA_DEF_DATA={0x23, 0x3, '/sys/kernel/debug/sync/sw_sync\x00'}, @TCA_DEF_DATA={0x12, 0x3, '/dev/ubi_ctrl\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x9, 0xd, 0x0, 0x9, 0x8}}, @TCA_DEF_PARMS={0x18, 0x2, {0x2, 0x9, 0x0, 0xc}}]}, {0x54, 0x6, "714f96fbeb0694a15aa10c8885492b7d4b85ba344df20f2d2c376ef8ad611c39afc626036397425eb00d4a228e6e114ab0887b8c587d8180aefe6dec1c2c78c499f1c3ca2de773136f34bb53a2b84459"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_sample={0xc4, 0x1a, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0x200, 0xfffffffb, 0x5, 0x1000, 0x5}}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x6}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x8001, 0x1, 0xffffffffffffffff, 0x7f, 0x1000}}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x9}]}, {0x55, 0x6, "2041fd6974cd02284463f0d8a3ef95f5c047bd85bcd487650563fa45b3feeb664f9405ba47339d32cf1b8929fffbd211c85f677b74bda23db9ea1320aa5e3379b57adf4b3059d621ad8a373a2fa76e3b00"}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}, {0x1454, 0x1, [@m_gact={0xac, 0xa, 0x0, 0x0, {{0x9}, {0x40, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0xfffffffd, 0x401, 0xffffffffffffffff, 0x746, 0x3b48}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0x231b, 0x7}}, @TCA_GACT_PARMS={0x18, 0x2, {0x7, 0x0, 0x6, 0x1, 0xd61}}]}, {0x42, 0x6, "a7ddfcee79f107563022cbaf2ad3783edb5c7bc67f6ceeb19af85cc3cd9fcfc0132f06b1b352baf1206f1e24573183a8b17e1ff3fb8fc2d609faf179fdd2"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_nat={0x244, 0x3, 0x0, 0x0, {{0x8}, {0x144, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x6, 0xd, 0x8, 0x3, 0x101}, @remote, @remote, 0xffffffff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x3b4, 0x0, 0xffffffffffffffff, 0x9e65, 0x5}, @multicast2, @multicast2, 0xffffffff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x4, 0xd, 0x5, 0x4, 0x6}, @empty, @local, 0xff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xb, 0x7f, 0x8, 0x3, 0x2}, @broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x872, 0x10001, 0x5, 0x4, 0x5}, @empty, @empty, 0xffffffff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x96, 0x1, 0x2, 0x7, 0x1}, @multicast2, @private=0xa010100, 0xff000000, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x7, 0x3, 0x3, 0x3, 0x5}, @empty, @multicast1, 0xff000000}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x5, 0xe, 0x1, 0xfffffffa, 0x9}, @dev={0xac, 0x14, 0x14, 0x2f}, @rand_addr=0x64010101, 0xff}}]}, {0xd9, 0x6, "c64eb012482e1f68c8f5ca001ce25cb031d7d0c2c01876628c2d3396b195ff2b505db48eafa45e3686aab4dd8cb3d3df5ab32cf9c4f57e2576b7b6f2318d2a8523255be1e1ee128d4d563121c8148ee9bbe8f3b5932c002791df26d2d180ac972e1e275f80fcfe521077810bec9ef4d4f0a2207d9195c3561933479f6bc12529af26a92be46bd8f172d0375537fe115a9703e016043e3f8194d73d296f2f79a0e1ca6501d8a4aa60e135768b13eb7c6adaa96834dab8863b42c71fff3e3531f4ee0f40c0790386ba5078e0e588e69732b7b49e0c01"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1}}}}, @m_pedit={0xff4, 0x15, 0x0, 0x0, {{0xa}, {0xf68, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe38, 0x4, {{{0x400000, 0x7, 0x0, 0x14e39163, 0x80000000}, 0x2, 0xff, [{0x3, 0xc90f, 0x7, 0x0, 0x8, 0xc}]}, [{0x401, 0x0, 0x2, 0xae2, 0x10001, 0x7f}, {0x7, 0x7, 0xfffffffa, 0x2, 0x9, 0x8}, {0x2809170d, 0x6, 0xfffffff3, 0xffffffff, 0x68b, 0x50}, {0x3, 0x7, 0x6, 0x0, 0x5, 0xfffff801}, {0xd, 0x18, 0x1ff, 0x4, 0x8, 0x7fff}, {0x0, 0x9, 0x58291529, 0x1, 0x300, 0xa000000}, {0xb85b, 0x4, 0xfffffffb, 0x7ff, 0x9, 0x7fffffff}, {0x2, 0x6, 0x341, 0xb, 0x0, 0xfffffffb}, {0x5, 0x1, 0x3, 0x8, 0x100, 0x7fffffff}, {0x8, 0x7, 0xc5e9, 0xf, 0x8, 0xd6d}, {0xfffffffe, 0x0, 0x2ffb, 0x3, 0x1}, {0x942, 0x9, 0xbfe, 0x2, 0x400, 0x101}, {0x81, 0x9792, 0x50ba, 0x0, 0xac, 0xffffffff}, {0x2, 0x2, 0x9, 0x3, 0xc, 0x820}, {0x2c2, 0xb493, 0x9d, 0x8000, 0xc, 0x2}, {0x2, 0x6, 0x4, 0x7, 0xfffffffa, 0x9}, {0x5, 0xffff, 0x9, 0x80000001, 0x8, 0x5}, {0x9, 0xfffffff9, 0x1, 0xbf, 0x4, 0x1}, {0x6, 0x1ff, 0x7, 0x9, 0x40, 0xb}, {0xfffffff0, 0x60b9, 0x7, 0x424, 0x8, 0x5}, {0xa396, 0xff, 0x40000000, 0xfe, 0x10, 0xc}, {0x8, 0xc, 0x1000000, 0x7, 0x4, 0x73}, {0x5, 0x8, 0x59, 0x40, 0xfff, 0x3ecf}, {0x8, 0x471, 0x1, 0x7, 0x4, 0x8}, {0x8, 0x0, 0x8, 0xfffff000, 0x8, 0x10001}, {0x9, 0x5, 0x6, 0x7, 0x5, 0x2}, {0xfffffff8, 0x4, 0x72, 0x0, 0x1, 0xfffffff7}, {0xfffffffc, 0x8, 0x100, 0x8, 0x9, 0x3966}, {0x101, 0x9, 0x6, 0x5, 0x7, 0x901}, {0x8, 0x5, 0xc, 0x8, 0x8, 0x4f2}, {0x3, 0xfffffffb, 0x8, 0x5, 0x4}, {0x9, 0x6, 0x0, 0x80, 0x1, 0x3ff}, {0x7fffffff, 0x2, 0x8001, 0x7fff, 0x10001, 0x4}, {0xf202, 0x548, 0x3, 0x5, 0xfffffff8, 0x9}, {0xfffffff8, 0x8, 0xb, 0x0, 0x1fc, 0xf}, {0x8, 0x5, 0x0, 0x7fff, 0x2, 0x6}, {0x2b85b8d1, 0x5, 0x4, 0x8d4, 0x5, 0x46e}, {0x7, 0x4, 0x8, 0x8, 0x401, 0x3}, {0xffffff18, 0x6, 0x7ad, 0x2, 0x3, 0x1}, {0x4, 0x1, 0x6, 0x2, 0xffffffff, 0x5}, {0x4, 0x5, 0x4, 0x9, 0x1ff, 0xe3}, {0x762, 0x8, 0x80, 0x3, 0xa, 0x10}, {0x9245, 0x2, 0x2, 0x9, 0x9, 0xe1}, {0x6, 0x8, 0x10, 0x7, 0x200, 0x3}, {0x80000001, 0x53de, 0x67e0a488, 0x80000001, 0x4}, {0x7, 0xc, 0x0, 0x5, 0x4, 0x2}, {0x4, 0x8, 0x3, 0x3ff, 0x1, 0x2}, {0x40, 0x6, 0x9, 0x4, 0x60, 0x6}, {0x0, 0x0, 0x2, 0x1, 0x1, 0x5}, {0x0, 0x81, 0x9, 0xfff, 0xe, 0xffffffff}, {0x7, 0x3, 0x87e, 0x9, 0x6, 0x4}, {0x615d, 0x9, 0xfffffffb, 0x8, 0x3, 0x80}, {0xe0e, 0x1a6, 0xffffffff, 0xb, 0x7, 0x39}, {0x7, 0x10001, 0x5, 0xe, 0x5cc4, 0xd}, {0xfffffffc, 0x3, 0x7, 0xff, 0x3, 0x3}, {0x8, 0xffff, 0x6, 0xfffffffd, 0x8, 0x9}, {0x6, 0xffffffff, 0x0, 0x430, 0x7f, 0x9}, {0x2, 0x0, 0x8, 0x9, 0x40, 0x80}, {0x4, 0x7, 0xd9d, 0x100, 0x7, 0x2fc0}, {0x401, 0x100, 0x1, 0x8, 0x3, 0x7f}, {0x7fff, 0x4, 0x6, 0xc4, 0x2, 0xfffffffb}, {0x4, 0xffff, 0xffffffff, 0x8, 0x3, 0x4}, {0x7ff, 0x1, 0x401, 0x4, 0x8, 0x5}, {0x2, 0x10000, 0x0, 0x1, 0x7f, 0xf2}, {0x9, 0xfffffffa, 0x50d1, 0xcf97, 0x4}, {0x3, 0x5, 0x7, 0x9, 0x3, 0x7ff}, {0x2, 0x7f, 0x10000, 0x9a3b, 0x4168, 0xfffffff6}, {0x8, 0x1, 0x3, 0x7, 0x5, 0x1}, {0x6, 0x401, 0x5, 0x1ff, 0xd, 0xfffffffb}, {0x4, 0x6, 0x8000, 0x5, 0x6, 0xddf5}, {0x9, 0x290b, 0x1, 0x8, 0xfffffff7, 0x7}, {0x0, 0x5, 0x18, 0x6d, 0x7fff, 0x6}, {0xeab, 0x2, 0x9, 0x1, 0x7, 0xfff}, {0xca2b, 0xe, 0x6, 0xd, 0x3, 0x1cf}, {0x0, 0x86e, 0x6, 0xfffffff9, 0x9, 0x2}, {0x2, 0xffffd142, 0x5, 0xc9, 0x0, 0x101}, {0x7, 0x10001, 0x0, 0x8001, 0x5, 0x664}, {0x7, 0x5, 0x1, 0x3, 0x8000, 0x10000000}, {0x4f96da40, 0x0, 0x2, 0x9, 0xa, 0x7}, {0x4, 0x8, 0x4, 0x4e0b, 0x6, 0x120}, {0x16e, 0x1ff, 0x8, 0xa, 0xf, 0x4}, {0x5c3937c3, 0x1, 0x2, 0x8000, 0x4, 0x4}, {0x1, 0xfffffd04, 0x4, 0x0, 0x0, 0xe00000}, {0x6a, 0x7fff, 0x2, 0xffffffff, 0x7, 0x400}, {0xe6d, 0x3, 0xff, 0x6, 0x8, 0x3953c04a}, {0x3ff, 0x101, 0x1, 0x8, 0x6, 0x5}, {0x4, 0xffff, 0x8, 0x1, 0x8, 0x10000}, {0x8, 0x1ff, 0x2, 0xcc4, 0x0, 0xbe}, {0x6, 0x3ff, 0x9, 0x6, 0xc0000000, 0xd}, {0x1, 0x4, 0x200, 0x6, 0x800}, {0xfffffffd, 0x5, 0x0, 0x9, 0x3, 0x1}, {0x5, 0x0, 0x4, 0x5, 0x8, 0x8}, {0x0, 0x1ff, 0xffff8001, 0x80, 0x10001, 0x5}, {0x5, 0x1, 0x40000, 0x9, 0x0, 0xfff}, {0x400, 0x1000, 0x3, 0x1, 0x9a4}, {0x4d51, 0x2000000, 0x9, 0x3af1779e, 0x1, 0x7}, {0xded, 0x5, 0x8, 0x8, 0x1, 0x1}, {0xffffff3d, 0x93, 0xfff, 0x7, 0xe, 0x1}, {0x81, 0x3, 0x57, 0x7f, 0x80, 0xe}, {0xc0000000, 0x0, 0x9, 0x6, 0x81, 0x800}, {0x6, 0x4, 0x100, 0xffff, 0x3, 0x9}, {0x8, 0x17, 0x6e6, 0xfffffffd, 0xff, 0x3}, {0x3ff, 0x3ff, 0x80000001, 0x1ff, 0x6, 0x2}, {0x9, 0xffffffff, 0x1, 0x7144cd7c, 0x646, 0xffff}, {0x40, 0x6, 0x5, 0x1, 0x7ff, 0x8}, {0x1, 0xd, 0x6, 0x5, 0x7, 0xd4}, {0x3, 0x3, 0x5054, 0x9, 0x2, 0x3}, {0x10001, 0x1, 0x288, 0x3, 0x9, 0x8}, {0x8, 0x2, 0x5, 0x9737, 0x5, 0x514}, {0xd4c, 0x6, 0x30, 0x3, 0x0, 0x79}, {0xffff, 0x7ff, 0x4, 0xdc, 0xfffff801, 0x7}, {0xffffe4fc, 0xf545, 0xf, 0x8, 0x1, 0x5}, {0x6, 0x10, 0xfffffff9, 0x3ff, 0x8f6, 0x7dd}, {0x2, 0x8, 0x2, 0x9, 0x5, 0x9}, {0x7, 0x7fffffff, 0x8, 0x2, 0x8, 0x6}, {0x2fb85755, 0x800, 0x9, 0x6, 0x0, 0x7}, {0x7, 0xfffffff9, 0x1, 0x80000000, 0x401, 0x8}, {0x2, 0xff, 0x800, 0x3, 0x2, 0x1}, {0x9f5, 0xffffffff, 0x9, 0x7fff, 0x8, 0xf29}, {0x6, 0x7f, 0x4, 0x7fffffff, 0x401, 0x101}, {0x5, 0x5, 0x4, 0x9, 0x6, 0x3ff}, {0x168, 0x1, 0x63ad0bb4, 0x8, 0x1, 0x4}, {0xb36e0000, 0x2, 0x0, 0x3, 0x7, 0x8}, {0xfffffe01, 0x149c, 0xaf7, 0x80000000, 0x1ce8, 0xa6e1}, {0x800, 0x4, 0x2, 0x1, 0x8, 0x9}, {0x6103, 0x4, 0xf, 0xfffffffa, 0x2, 0xffffff01}, {0x7fffffff, 0x9, 0x23b58dca, 0x7fffffff, 0x3, 0x3}, {0xfffffffa, 0x7fff, 0x2, 0x8, 0x4, 0x6c89}], [{0x4, 0x1}, {0x2, 0x1}, {0x5}, {0x2, 0x1}, {0x3, 0x1}, {0x2}, {0x3}, {0x3}, {0x0, 0x1}, {}, {0x2}, {0x2}, {0x3, 0x1}, {0x4}, {0x4}, {0x3, 0x1}, {}, {0x2}, {0x5, 0x1}, {0x2, 0x1}, {0x5}, {0x4}, {0x2, 0x1}, {0x2}, {0x3}, {0x0, 0x1}, {0x266e100f5fe2f3b2}, {0x3, 0x1}, {0x3}, {0x0, 0x1}, {}, {0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x5}, {0x2, 0x1}, {0x1}, {0x1, 0x2}, {0x3}, {0x5, 0x1}, {0x4, 0x1}, {0x3}, {0x1, 0x1}, {}, {0x3, 0x1}, {0x1}, {}, {0x5}, {0x2}, {0x2, 0x1}, {0x4}, {0x4}, {0x1, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x1}, {0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x5}, {0x4, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x1, 0x3f896f0ca4e8bae4}, {0x0, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {}, {}, {0x1, 0x1}, {0x3}, {0x5}, {0x4}, {0x3}, {0x3, 0x1}, {0x1, 0x1}, {0x2}, {0x2}, {0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x4}, {0x5, 0x1}, {0x5}, {0x6}, {0x3, 0x1}, {0x0, 0x1}, {0x4}, {}, {0x2}, {0x3}, {0x4}, {0x0, 0x1}, {0x0, 0x1}, {}, {0x0, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x5}, {}, {0x3, 0x1}, {0x3}, {0x2}, {0x1}, {0x4}, {0x1}, {}, {0x3, 0x1}, {0x3, 0x1}, {0x2}, {0x3}, {0x4, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x1}, {0x4}, {0x1, 0x1}, {0x4}, {0x1}, {0x0, 0x1}, {}, {0x5}, {0x4, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x3}, {0x0, 0x1}], 0x1}}, @TCA_PEDIT_KEYS_EX={0x12c, 0x5, 0x0, 0x1, [{0x24, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}]}, {0x24, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}]}, {0x2c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x7}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x44, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}]}, {0x24, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}]}, {0x2c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}]}]}]}, {0x61, 0x6, "b01c25d140fd09bc194637f3e3ded5319e056dbad8899fe82fa94accf3fdae9fb24ac30c3d286d4966c278ed06548e35ceecb57de1c2cb174b7cdfc7c6d4f0ac141fa62b48a974c7e8caf9db1377d05e1dfa75847101600719f0afdbd9"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}, @m_ctinfo={0x6c, 0x2, 0x0, 0x0, {{0xb}, {0x34, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x80}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x9}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0xe756}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0xd}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x100}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x5e400}]}, {0xf, 0x6, "40f627c95f87497eed0c67"}, {0xc}, {0xc, 0x8, {0x2}}}}, @m_xt={0x100, 0x2, 0x0, 0x0, {{0x7}, {0x90, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0x66, 0x6, {0xd2, 'nat\x00', 0xfe, 0xb, "7c198b8970f942ccbd9d4d496370d8df3ce222b4692f4d81b4c7a4b7531f1d7616288d6275e97d49e1a5cfd6d732a01754ee00ac36f2ca06c001ce72"}}, @TCA_IPT_TABLE={0x24, 0x1, 'filter\x00'}]}, {0x4c, 0x6, "0314966e35ae4d99c54b1027623c09cd435eff3c321eecaa8f7dc5bb9e48285a16b3865b9898304f71f6bfbdfc5077e8c15b55823a38d29127bc1ffa3486fbc93b434d01af342856"}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0x1a00}, 0x1, 0x0, 0x0, 0x4df073bb39162598}, 0x4010) 25.018938373s ago: executing program 32 (id=268): r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x42140, 0x0) ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, &(0x7f0000000040)={{r1}, {@void, @max}}) (async) ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, &(0x7f0000000040)={{r1}, {@void, @max}}) socket$can_raw(0x1d, 0x3, 0x1) (async) r2 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, &(0x7f0000000080)={0x1, 0x3, 0x8, 0x3}, 0x10) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0), 0x9787d3bf5c5c1484, 0x0) ioctl$VIDIOC_DBG_S_REGISTER(r3, 0x4038564f, &(0x7f0000000100)={{0x3, @name="9ca559a677220bb7e61ff2b78764511e23e6144dbf5beed0faeb404fe77eeaf3"}, 0x8, 0x4, 0x5}) (async) ioctl$VIDIOC_DBG_S_REGISTER(r3, 0x4038564f, &(0x7f0000000100)={{0x3, @name="9ca559a677220bb7e61ff2b78764511e23e6144dbf5beed0faeb404fe77eeaf3"}, 0x8, 0x4, 0x5}) socket$l2tp6(0xa, 0x2, 0x73) ioctl$XFS_IOC_FSBULKSTAT(r3, 0xc0205865, &(0x7f0000000340)={&(0x7f0000000140), 0x4, &(0x7f0000000180)=[{}, {}], &(0x7f0000000300)}) (async) ioctl$XFS_IOC_FSBULKSTAT(r3, 0xc0205865, &(0x7f0000000340)={&(0x7f0000000140), 0x4, &(0x7f0000000180)=[{}, {}], &(0x7f0000000300)}) r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000380), 0x403, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r4, 0x84, 0x1c, &(0x7f00000003c0), &(0x7f0000000400)=0x4) ioctl$VHOST_VDPA_SET_CONFIG(r3, 0x4008af74, &(0x7f0000000440)={0xfffffff4}) (async) ioctl$VHOST_VDPA_SET_CONFIG(r3, 0x4008af74, &(0x7f0000000440)={0xfffffff4}) ioctl$VHOST_VDPA_GET_GROUP_NUM(0xffffffffffffffff, 0x8004af81, &(0x7f0000000480)) (async) ioctl$VHOST_VDPA_GET_GROUP_NUM(0xffffffffffffffff, 0x8004af81, &(0x7f0000000480)) sendmsg$nl_generic(r3, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x1c, 0x34, 0x10, 0x70bd2b, 0x25dfdbfe, {0x4}, [@typed={0x8, 0x123, 0x0, 0x0, @uid=0xffffffffffffffff}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc800}, 0x80) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000005c0)={'wg1\x00'}) r5 = dup3(r1, r0, 0x0) sendmsg$nl_generic(r5, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x20, 0x31, 0x200, 0x70bd2b, 0x25dfdbfe, {0xb}, [@typed={0xc, 0x6b, 0x0, 0x0, @u64=0x5}]}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0xabe5ba7db41863f7) ioctl$BTRFS_IOC_SET_FEATURES(r3, 0x40309439, &(0x7f0000000700)={0x2, 0x3, 0xe}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f0000000740)) (async) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f0000000740)={0x0, 0x0}) fcntl$setownex(r3, 0xf, &(0x7f00000007c0)={0x1, r6}) setsockopt$bt_l2cap_L2CAP_OPTIONS(r3, 0x6, 0x1, &(0x7f0000000800)={0x5, 0x7, 0x8, 0x5, 0x2, 0x0, 0x8001}, 0xc) (async) setsockopt$bt_l2cap_L2CAP_OPTIONS(r3, 0x6, 0x1, &(0x7f0000000800)={0x5, 0x7, 0x8, 0x5, 0x2, 0x0, 0x8001}, 0xc) r7 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000840), 0x20000, 0x0) connect$inet6(r4, &(0x7f0000000880)={0xa, 0x4e23, 0xd, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x81}, 0x1c) ioctl$FS_IOC_GETFSUUID(r2, 0x80111500, &(0x7f00000008c0)) ioctl$VHOST_SET_LOG_FD(r4, 0x4004af07, &(0x7f0000000900)) (async) ioctl$VHOST_SET_LOG_FD(r4, 0x4004af07, &(0x7f0000000900)) ioctl$DRM_IOCTL_MODE_GET_LEASE(r4, 0xc01064c8, &(0x7f0000000980)={0x7, 0x0, &(0x7f0000000940)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) (async) ioctl$DRM_IOCTL_MODE_GET_LEASE(r4, 0xc01064c8, &(0x7f0000000980)={0x7, 0x0, &(0x7f0000000940)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r5) syz_open_dev$tty1(0xc, 0x4, 0x1) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r3, &(0x7f00000009c0)={0x80000000}) sendmsg$nl_route_sched(r7, &(0x7f0000002480)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000002440)={&(0x7f0000000a40)=@newtaction={0x1a00, 0x30, 0x100, 0x70bd2d, 0x25dfdbff, {}, [{0x100, 0x1, [@m_gact={0xfc, 0x14, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x2, 0xb10, 0x6}}, @TCA_GACT_PARMS={0x18, 0x2, {0xa, 0x9, 0xffffffffffffffff, 0x2755, 0x1}}]}, {0xac, 0x6, "d6e3af56e1821d77c1799ac96b5bef5646306cb429800a224675a499b937064e60bd85bbb774773bdb0b4479175ae17155ff8f1fbc3c73601a65fc91086a65020fe8501cf64eb585e9e04c47a76763d91eedebc9b39716d6ccf3b37ad80224fc7ce3be504a8ecdbcebe66b45d712dd183eb13d4231bd4fcbd849f70cc32b1e062121cfdc9ab90c37a3118df7db6d5f6d117ecf110a8d1053cf147dac51dd8b74089f504634d67089"}, {0xc, 0x7, {0x0, 0xec9922f0aadb38e3}}, {0xc, 0x8, {0x1, 0x1}}}}]}, {0x498, 0x1, [@m_simple={0x124, 0xd, 0x0, 0x0, {{0xb}, {0x50, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x5, 0x3, '\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x5, 0x8, 0xffffffffffffffff, 0x9, 0x7}}, @TCA_DEF_DATA={0x12, 0x3, '/dev/ubi_ctrl\x00'}, @TCA_DEF_DATA={0xd, 0x3, '/dev/vcs\x00'}, @TCA_DEF_DATA={0x5, 0x3, '\x00'}]}, {0xa9, 0x6, "96a93796808195565de4c8ba4571df0b3af392517387b2d2150648bdde9008d3713b4bd54ee24ea764207d723489670070bc9d7111b228e77009ff6aa8d32215deb57f1fd27ce13beb71c1e7e03de8989f1d0c08c12dfbde25fa4be738c84434171b3c55369ae3bffc7669a60287f60ca5a9eed04f2d095b95396f6cdede3e38cdbb9f3a46d94bb544e9776e5cda66672520896f2aa424e48f0ae760a08f19d9459a8e6457"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_sample={0xa0, 0xa, 0x0, 0x0, {{0xb}, {0x14, 0x2, 0x0, 0x1, [@TCA_SAMPLE_RATE={0x8, 0x3, 0x3800000}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x4}]}, {0x64, 0x6, "8b8999463ec452a31d69fbc8bb15b8f81c744e29dd028cfbc688073a94f3141fedeaa1c1cdbfb6dea9eb0ae04bbcfcfd3b15f20661f12851745ec08f574b229d63aaf92a15754e5d2df67e47d0d354b6a6dfc2e95766dd6da17f2da175b39428"}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}, @m_simple={0xb4, 0x16, 0x0, 0x0, {{0xb}, {0x6c, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x0, 0xdd6d, 0xffffffffffffffff, 0x5a, 0x1}}, @TCA_DEF_PARMS={0x18, 0x2, {0x2, 0xffffff67, 0x3, 0x6}}, @TCA_DEF_DATA={0x7, 0x3, '\\^\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x1, 0x1, 0x7, 0x5238, 0xe}}, @TCA_DEF_PARMS={0x18, 0x2, {0x3, 0xc68a15f0, 0xffffffffffffffff, 0xfff, 0x80}}]}, {0x1e, 0x6, "558acf271e8c10e23bc5c7b287ecf3517b48fbb67016005f0da0"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1}}}}, @m_simple={0x158, 0x17, 0x0, 0x0, {{0xb}, {0xdc, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x9, 0x387f39ae, 0x1, 0x4, 0xfffffff3}}, @TCA_DEF_PARMS={0x18, 0x2, {0x1ad, 0x4, 0x0, 0x10001, 0x3}}, @TCA_DEF_PARMS={0x18, 0x2, {0x4, 0x7, 0xffffffffffffffff, 0x6, 0x28}}, @TCA_DEF_DATA={0xe, 0x3, '/dev/vcsu\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x9, 0x401, 0x1, 0x1a, 0xfffffff9}}, @TCA_DEF_DATA={0x23, 0x3, '/sys/kernel/debug/sync/sw_sync\x00'}, @TCA_DEF_DATA={0x12, 0x3, '/dev/ubi_ctrl\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x9, 0xd, 0x0, 0x9, 0x8}}, @TCA_DEF_PARMS={0x18, 0x2, {0x2, 0x9, 0x0, 0xc}}]}, {0x54, 0x6, "714f96fbeb0694a15aa10c8885492b7d4b85ba344df20f2d2c376ef8ad611c39afc626036397425eb00d4a228e6e114ab0887b8c587d8180aefe6dec1c2c78c499f1c3ca2de773136f34bb53a2b84459"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_sample={0xc4, 0x1a, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0x200, 0xfffffffb, 0x5, 0x1000, 0x5}}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x6}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x8001, 0x1, 0xffffffffffffffff, 0x7f, 0x1000}}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x9}]}, {0x55, 0x6, "2041fd6974cd02284463f0d8a3ef95f5c047bd85bcd487650563fa45b3feeb664f9405ba47339d32cf1b8929fffbd211c85f677b74bda23db9ea1320aa5e3379b57adf4b3059d621ad8a373a2fa76e3b00"}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}, {0x1454, 0x1, [@m_gact={0xac, 0xa, 0x0, 0x0, {{0x9}, {0x40, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0xfffffffd, 0x401, 0xffffffffffffffff, 0x746, 0x3b48}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0x231b, 0x7}}, @TCA_GACT_PARMS={0x18, 0x2, {0x7, 0x0, 0x6, 0x1, 0xd61}}]}, {0x42, 0x6, "a7ddfcee79f107563022cbaf2ad3783edb5c7bc67f6ceeb19af85cc3cd9fcfc0132f06b1b352baf1206f1e24573183a8b17e1ff3fb8fc2d609faf179fdd2"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_nat={0x244, 0x3, 0x0, 0x0, {{0x8}, {0x144, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x6, 0xd, 0x8, 0x3, 0x101}, @remote, @remote, 0xffffffff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x3b4, 0x0, 0xffffffffffffffff, 0x9e65, 0x5}, @multicast2, @multicast2, 0xffffffff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x4, 0xd, 0x5, 0x4, 0x6}, @empty, @local, 0xff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xb, 0x7f, 0x8, 0x3, 0x2}, @broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x872, 0x10001, 0x5, 0x4, 0x5}, @empty, @empty, 0xffffffff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x96, 0x1, 0x2, 0x7, 0x1}, @multicast2, @private=0xa010100, 0xff000000, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x7, 0x3, 0x3, 0x3, 0x5}, @empty, @multicast1, 0xff000000}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x5, 0xe, 0x1, 0xfffffffa, 0x9}, @dev={0xac, 0x14, 0x14, 0x2f}, @rand_addr=0x64010101, 0xff}}]}, {0xd9, 0x6, "c64eb012482e1f68c8f5ca001ce25cb031d7d0c2c01876628c2d3396b195ff2b505db48eafa45e3686aab4dd8cb3d3df5ab32cf9c4f57e2576b7b6f2318d2a8523255be1e1ee128d4d563121c8148ee9bbe8f3b5932c002791df26d2d180ac972e1e275f80fcfe521077810bec9ef4d4f0a2207d9195c3561933479f6bc12529af26a92be46bd8f172d0375537fe115a9703e016043e3f8194d73d296f2f79a0e1ca6501d8a4aa60e135768b13eb7c6adaa96834dab8863b42c71fff3e3531f4ee0f40c0790386ba5078e0e588e69732b7b49e0c01"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1}}}}, @m_pedit={0xff4, 0x15, 0x0, 0x0, {{0xa}, {0xf68, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe38, 0x4, {{{0x400000, 0x7, 0x0, 0x14e39163, 0x80000000}, 0x2, 0xff, [{0x3, 0xc90f, 0x7, 0x0, 0x8, 0xc}]}, [{0x401, 0x0, 0x2, 0xae2, 0x10001, 0x7f}, {0x7, 0x7, 0xfffffffa, 0x2, 0x9, 0x8}, {0x2809170d, 0x6, 0xfffffff3, 0xffffffff, 0x68b, 0x50}, {0x3, 0x7, 0x6, 0x0, 0x5, 0xfffff801}, {0xd, 0x18, 0x1ff, 0x4, 0x8, 0x7fff}, {0x0, 0x9, 0x58291529, 0x1, 0x300, 0xa000000}, {0xb85b, 0x4, 0xfffffffb, 0x7ff, 0x9, 0x7fffffff}, {0x2, 0x6, 0x341, 0xb, 0x0, 0xfffffffb}, {0x5, 0x1, 0x3, 0x8, 0x100, 0x7fffffff}, {0x8, 0x7, 0xc5e9, 0xf, 0x8, 0xd6d}, {0xfffffffe, 0x0, 0x2ffb, 0x3, 0x1}, {0x942, 0x9, 0xbfe, 0x2, 0x400, 0x101}, {0x81, 0x9792, 0x50ba, 0x0, 0xac, 0xffffffff}, {0x2, 0x2, 0x9, 0x3, 0xc, 0x820}, {0x2c2, 0xb493, 0x9d, 0x8000, 0xc, 0x2}, {0x2, 0x6, 0x4, 0x7, 0xfffffffa, 0x9}, {0x5, 0xffff, 0x9, 0x80000001, 0x8, 0x5}, {0x9, 0xfffffff9, 0x1, 0xbf, 0x4, 0x1}, {0x6, 0x1ff, 0x7, 0x9, 0x40, 0xb}, {0xfffffff0, 0x60b9, 0x7, 0x424, 0x8, 0x5}, {0xa396, 0xff, 0x40000000, 0xfe, 0x10, 0xc}, {0x8, 0xc, 0x1000000, 0x7, 0x4, 0x73}, {0x5, 0x8, 0x59, 0x40, 0xfff, 0x3ecf}, {0x8, 0x471, 0x1, 0x7, 0x4, 0x8}, {0x8, 0x0, 0x8, 0xfffff000, 0x8, 0x10001}, {0x9, 0x5, 0x6, 0x7, 0x5, 0x2}, {0xfffffff8, 0x4, 0x72, 0x0, 0x1, 0xfffffff7}, {0xfffffffc, 0x8, 0x100, 0x8, 0x9, 0x3966}, {0x101, 0x9, 0x6, 0x5, 0x7, 0x901}, {0x8, 0x5, 0xc, 0x8, 0x8, 0x4f2}, {0x3, 0xfffffffb, 0x8, 0x5, 0x4}, {0x9, 0x6, 0x0, 0x80, 0x1, 0x3ff}, {0x7fffffff, 0x2, 0x8001, 0x7fff, 0x10001, 0x4}, {0xf202, 0x548, 0x3, 0x5, 0xfffffff8, 0x9}, {0xfffffff8, 0x8, 0xb, 0x0, 0x1fc, 0xf}, {0x8, 0x5, 0x0, 0x7fff, 0x2, 0x6}, {0x2b85b8d1, 0x5, 0x4, 0x8d4, 0x5, 0x46e}, {0x7, 0x4, 0x8, 0x8, 0x401, 0x3}, {0xffffff18, 0x6, 0x7ad, 0x2, 0x3, 0x1}, {0x4, 0x1, 0x6, 0x2, 0xffffffff, 0x5}, {0x4, 0x5, 0x4, 0x9, 0x1ff, 0xe3}, {0x762, 0x8, 0x80, 0x3, 0xa, 0x10}, {0x9245, 0x2, 0x2, 0x9, 0x9, 0xe1}, {0x6, 0x8, 0x10, 0x7, 0x200, 0x3}, {0x80000001, 0x53de, 0x67e0a488, 0x80000001, 0x4}, {0x7, 0xc, 0x0, 0x5, 0x4, 0x2}, {0x4, 0x8, 0x3, 0x3ff, 0x1, 0x2}, {0x40, 0x6, 0x9, 0x4, 0x60, 0x6}, {0x0, 0x0, 0x2, 0x1, 0x1, 0x5}, {0x0, 0x81, 0x9, 0xfff, 0xe, 0xffffffff}, {0x7, 0x3, 0x87e, 0x9, 0x6, 0x4}, {0x615d, 0x9, 0xfffffffb, 0x8, 0x3, 0x80}, {0xe0e, 0x1a6, 0xffffffff, 0xb, 0x7, 0x39}, {0x7, 0x10001, 0x5, 0xe, 0x5cc4, 0xd}, {0xfffffffc, 0x3, 0x7, 0xff, 0x3, 0x3}, {0x8, 0xffff, 0x6, 0xfffffffd, 0x8, 0x9}, {0x6, 0xffffffff, 0x0, 0x430, 0x7f, 0x9}, {0x2, 0x0, 0x8, 0x9, 0x40, 0x80}, {0x4, 0x7, 0xd9d, 0x100, 0x7, 0x2fc0}, {0x401, 0x100, 0x1, 0x8, 0x3, 0x7f}, {0x7fff, 0x4, 0x6, 0xc4, 0x2, 0xfffffffb}, {0x4, 0xffff, 0xffffffff, 0x8, 0x3, 0x4}, {0x7ff, 0x1, 0x401, 0x4, 0x8, 0x5}, {0x2, 0x10000, 0x0, 0x1, 0x7f, 0xf2}, {0x9, 0xfffffffa, 0x50d1, 0xcf97, 0x4}, {0x3, 0x5, 0x7, 0x9, 0x3, 0x7ff}, {0x2, 0x7f, 0x10000, 0x9a3b, 0x4168, 0xfffffff6}, {0x8, 0x1, 0x3, 0x7, 0x5, 0x1}, {0x6, 0x401, 0x5, 0x1ff, 0xd, 0xfffffffb}, {0x4, 0x6, 0x8000, 0x5, 0x6, 0xddf5}, {0x9, 0x290b, 0x1, 0x8, 0xfffffff7, 0x7}, {0x0, 0x5, 0x18, 0x6d, 0x7fff, 0x6}, {0xeab, 0x2, 0x9, 0x1, 0x7, 0xfff}, {0xca2b, 0xe, 0x6, 0xd, 0x3, 0x1cf}, {0x0, 0x86e, 0x6, 0xfffffff9, 0x9, 0x2}, {0x2, 0xffffd142, 0x5, 0xc9, 0x0, 0x101}, {0x7, 0x10001, 0x0, 0x8001, 0x5, 0x664}, {0x7, 0x5, 0x1, 0x3, 0x8000, 0x10000000}, {0x4f96da40, 0x0, 0x2, 0x9, 0xa, 0x7}, {0x4, 0x8, 0x4, 0x4e0b, 0x6, 0x120}, {0x16e, 0x1ff, 0x8, 0xa, 0xf, 0x4}, {0x5c3937c3, 0x1, 0x2, 0x8000, 0x4, 0x4}, {0x1, 0xfffffd04, 0x4, 0x0, 0x0, 0xe00000}, {0x6a, 0x7fff, 0x2, 0xffffffff, 0x7, 0x400}, {0xe6d, 0x3, 0xff, 0x6, 0x8, 0x3953c04a}, {0x3ff, 0x101, 0x1, 0x8, 0x6, 0x5}, {0x4, 0xffff, 0x8, 0x1, 0x8, 0x10000}, {0x8, 0x1ff, 0x2, 0xcc4, 0x0, 0xbe}, {0x6, 0x3ff, 0x9, 0x6, 0xc0000000, 0xd}, {0x1, 0x4, 0x200, 0x6, 0x800}, {0xfffffffd, 0x5, 0x0, 0x9, 0x3, 0x1}, {0x5, 0x0, 0x4, 0x5, 0x8, 0x8}, {0x0, 0x1ff, 0xffff8001, 0x80, 0x10001, 0x5}, {0x5, 0x1, 0x40000, 0x9, 0x0, 0xfff}, {0x400, 0x1000, 0x3, 0x1, 0x9a4}, {0x4d51, 0x2000000, 0x9, 0x3af1779e, 0x1, 0x7}, {0xded, 0x5, 0x8, 0x8, 0x1, 0x1}, {0xffffff3d, 0x93, 0xfff, 0x7, 0xe, 0x1}, {0x81, 0x3, 0x57, 0x7f, 0x80, 0xe}, {0xc0000000, 0x0, 0x9, 0x6, 0x81, 0x800}, {0x6, 0x4, 0x100, 0xffff, 0x3, 0x9}, {0x8, 0x17, 0x6e6, 0xfffffffd, 0xff, 0x3}, {0x3ff, 0x3ff, 0x80000001, 0x1ff, 0x6, 0x2}, {0x9, 0xffffffff, 0x1, 0x7144cd7c, 0x646, 0xffff}, {0x40, 0x6, 0x5, 0x1, 0x7ff, 0x8}, {0x1, 0xd, 0x6, 0x5, 0x7, 0xd4}, {0x3, 0x3, 0x5054, 0x9, 0x2, 0x3}, {0x10001, 0x1, 0x288, 0x3, 0x9, 0x8}, {0x8, 0x2, 0x5, 0x9737, 0x5, 0x514}, {0xd4c, 0x6, 0x30, 0x3, 0x0, 0x79}, {0xffff, 0x7ff, 0x4, 0xdc, 0xfffff801, 0x7}, {0xffffe4fc, 0xf545, 0xf, 0x8, 0x1, 0x5}, {0x6, 0x10, 0xfffffff9, 0x3ff, 0x8f6, 0x7dd}, {0x2, 0x8, 0x2, 0x9, 0x5, 0x9}, {0x7, 0x7fffffff, 0x8, 0x2, 0x8, 0x6}, {0x2fb85755, 0x800, 0x9, 0x6, 0x0, 0x7}, {0x7, 0xfffffff9, 0x1, 0x80000000, 0x401, 0x8}, {0x2, 0xff, 0x800, 0x3, 0x2, 0x1}, {0x9f5, 0xffffffff, 0x9, 0x7fff, 0x8, 0xf29}, {0x6, 0x7f, 0x4, 0x7fffffff, 0x401, 0x101}, {0x5, 0x5, 0x4, 0x9, 0x6, 0x3ff}, {0x168, 0x1, 0x63ad0bb4, 0x8, 0x1, 0x4}, {0xb36e0000, 0x2, 0x0, 0x3, 0x7, 0x8}, {0xfffffe01, 0x149c, 0xaf7, 0x80000000, 0x1ce8, 0xa6e1}, {0x800, 0x4, 0x2, 0x1, 0x8, 0x9}, {0x6103, 0x4, 0xf, 0xfffffffa, 0x2, 0xffffff01}, {0x7fffffff, 0x9, 0x23b58dca, 0x7fffffff, 0x3, 0x3}, {0xfffffffa, 0x7fff, 0x2, 0x8, 0x4, 0x6c89}], [{0x4, 0x1}, {0x2, 0x1}, {0x5}, {0x2, 0x1}, {0x3, 0x1}, {0x2}, {0x3}, {0x3}, {0x0, 0x1}, {}, {0x2}, {0x2}, {0x3, 0x1}, {0x4}, {0x4}, {0x3, 0x1}, {}, {0x2}, {0x5, 0x1}, {0x2, 0x1}, {0x5}, {0x4}, {0x2, 0x1}, {0x2}, {0x3}, {0x0, 0x1}, {0x266e100f5fe2f3b2}, {0x3, 0x1}, {0x3}, {0x0, 0x1}, {}, {0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x5}, {0x2, 0x1}, {0x1}, {0x1, 0x2}, {0x3}, {0x5, 0x1}, {0x4, 0x1}, {0x3}, {0x1, 0x1}, {}, {0x3, 0x1}, {0x1}, {}, {0x5}, {0x2}, {0x2, 0x1}, {0x4}, {0x4}, {0x1, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x1}, {0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x5}, {0x4, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x1, 0x3f896f0ca4e8bae4}, {0x0, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {}, {}, {0x1, 0x1}, {0x3}, {0x5}, {0x4}, {0x3}, {0x3, 0x1}, {0x1, 0x1}, {0x2}, {0x2}, {0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x4}, {0x5, 0x1}, {0x5}, {0x6}, {0x3, 0x1}, {0x0, 0x1}, {0x4}, {}, {0x2}, {0x3}, {0x4}, {0x0, 0x1}, {0x0, 0x1}, {}, {0x0, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x5}, {}, {0x3, 0x1}, {0x3}, {0x2}, {0x1}, {0x4}, {0x1}, {}, {0x3, 0x1}, {0x3, 0x1}, {0x2}, {0x3}, {0x4, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x1}, {0x4}, {0x1, 0x1}, {0x4}, {0x1}, {0x0, 0x1}, {}, {0x5}, {0x4, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x3}, {0x0, 0x1}], 0x1}}, @TCA_PEDIT_KEYS_EX={0x12c, 0x5, 0x0, 0x1, [{0x24, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}]}, {0x24, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}]}, {0x2c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x7}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x44, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}]}, {0x24, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}]}, {0x2c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}]}]}]}, {0x61, 0x6, "b01c25d140fd09bc194637f3e3ded5319e056dbad8899fe82fa94accf3fdae9fb24ac30c3d286d4966c278ed06548e35ceecb57de1c2cb174b7cdfc7c6d4f0ac141fa62b48a974c7e8caf9db1377d05e1dfa75847101600719f0afdbd9"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}, @m_ctinfo={0x6c, 0x2, 0x0, 0x0, {{0xb}, {0x34, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x80}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x9}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0xe756}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0xd}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x100}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x5e400}]}, {0xf, 0x6, "40f627c95f87497eed0c67"}, {0xc}, {0xc, 0x8, {0x2}}}}, @m_xt={0x100, 0x2, 0x0, 0x0, {{0x7}, {0x90, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0x66, 0x6, {0xd2, 'nat\x00', 0xfe, 0xb, "7c198b8970f942ccbd9d4d496370d8df3ce222b4692f4d81b4c7a4b7531f1d7616288d6275e97d49e1a5cfd6d732a01754ee00ac36f2ca06c001ce72"}}, @TCA_IPT_TABLE={0x24, 0x1, 'filter\x00'}]}, {0x4c, 0x6, "0314966e35ae4d99c54b1027623c09cd435eff3c321eecaa8f7dc5bb9e48285a16b3865b9898304f71f6bfbdfc5077e8c15b55823a38d29127bc1ffa3486fbc93b434d01af342856"}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0x1a00}, 0x1, 0x0, 0x0, 0x4df073bb39162598}, 0x4010) 8.183515331s ago: executing program 5 (id=391): prlimit64(0x0, 0x3, &(0x7f0000000040)={0x720, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) r1 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r1, &(0x7f0000001780)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x6}, 0xa) shutdown(r1, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f0000000200), 0x10106, 0x2, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x1d) syz_mount_image$ext4(&(0x7f0000001980)='ext4\x00', &(0x7f00000019c0)='./file0\x00', 0x220900c, &(0x7f000000a380)={[{@errors_remount}, {@noquota}, {@journal_path={'journal_path', 0x3d, './file0'}}, {@data_journal}, {@noload}], [{@dont_hash}, {@obj_type={'obj_type', 0x3d, '/'}}, {@uid_gt}, {@uid_lt}]}, 0x2, 0x4dd, &(0x7f0000001a40)="$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") r4 = openat(0xffffffffffffff9c, &(0x7f0000001f40)='./file1\x00', 0x92042, 0x6d) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r4, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000001f80)='./file1\x00', 0x169042, 0x175ce4105fa9b7d4) read$FUSE(r5, &(0x7f0000001fc0)={0x2020, 0x0, 0x0, 0x0}, 0xfdd1) write$binfmt_script(r5, &(0x7f0000004000)={'#! ', './file1/file0'}, 0x11) setuid(0xee01) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f00000017c0)={0x0, 0x0, &(0x7f0000001800)={&(0x7f0000004040)=ANY=[@ANYBLOB="6c0100001f00080029bd7000fbdbdf25e0000001000000000000000000000000000004d302003200ac141444000000000000000000000000090000000535010014000d00ff0100000000000000000000000000010800280006000000ac000700e0000001000000000000000000000000fe8800000000000000000000000001014e2000074e24253b0a0020003a000000", @ANYRES32=0x0, @ANYRES32=r6, @ANYRESOCT], 0x16c}}, 0x0) r8 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000001740)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) write$tcp_mem(r8, 0x0, 0xffffff32) syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000300)='./file1\x00', 0x804, &(0x7f0000001840)={[{@shortname_winnt}, {@shortname_win95}, {@utf8}, {@utf8}, {@shortname_mixed}, {@shortname_winnt}, {@iocharset={'iocharset', 0x3d, 'cp949'}}, {@rodir}, {@fat=@discard}, {@iocharset={'iocharset', 0x3d, 'cp855'}}, {@utf8}, {@shortname_lower}, {@utf8}, {@iocharset={'iocharset', 0x3d, 'iso8859-5'}}, {@shortname_winnt}, {@numtail}]}, 0x1, 0x27b, &(0x7f0000000480)="$eJzs3cFqK1UYAOB/mqRJdJEsXInQAV24Kq1P0CIVxIKgZKEutNgUpAmFFgJVMXblE/gEPo8b8QV8AC93d7u43LmkM0nTyyQlvWlT7v2+TQ//+f85/5kZ2tWc/vBB//jw5Ozo4tf/otFIYm0nduIyiXasxdjvUerfJ+VxAOCRu8yyeJrl6nno/GZGbUZlde3emwMA7sX03/9V9wIAPIyvv/n2i939/b2v0rQR0f9j0Eki/5nP7x7FT9GLbmxFK55HZBP5+LPP9/eimo6046P+cNAZVfa//7u4/u7/EVf129GKdnn9dpqbqh8OOrV4p1h/pxfdL/+KVrxXXv9JSX101uPjD6f634xW/PNjnEQvDovexvW/bafpp9mfz375bhQd1SfDQac+ySuyKw/6YAAAAAAAAAAAAAAAAAAAAAAAeKNtphPtm+fvjA/+nzM/53yg4dT5PFtpmmZJnn9dX433q1Fd5d4BAAAAAAAAAAAAAAAAAADgsTg7//n4oNfrni51MP6sv2QqXtyM1CPi7mttLFoVlaK1XhKx2Fq1qF9V3p5cWXAXzVE/3dOkGst7BMkk0pye2oh8rVGkmQ+mIq+9eiOuBuO36/ggue3hNspekiUMspLXrzKzav3VSLPYQUlyc87q6+/eqeesNWMqiYja5GbOv05tuffw4X4HAQAAAAAAAAAAAAAAAAAAueuPfksmL1bQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACswPX//19gMCyKZ+VkldGgGkVkxVsEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgLfAyAAD//0MUZ+o=") r9 = openat$dir(0xffffffffffffff9c, &(0x7f0000000700)='.\x00', 0x40000, 0x0) getdents64(r9, &(0x7f0000000740)=""/4096, 0x1000) r10 = semget$private(0x0, 0x6, 0x0) semtimedop(r10, &(0x7f0000000240)=[{0x0, 0x1}], 0x1, 0x0) ptrace(0x8, r0) 5.645581063s ago: executing program 5 (id=402): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) clock_gettime(0x2, &(0x7f00000004c0)) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu/syz0\x00', 0x1ff) syz_mount_image$ext4(&(0x7f0000002580)='ext4\x00', &(0x7f00000025c0)='./file0\x00', 0xc5c, &(0x7f0000002600)={[{@errors_remount}, {@grpid}]}, 0x3, 0x459, &(0x7f0000002640)="$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") r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000002ac0)='.\x00', 0x0, 0x10) ioctl$FITRIM(r1, 0xc0185879, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000004c0), 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000500)='cgroup.clone_children\x00', 0x2, 0x0) read$FUSE(r3, &(0x7f0000000540)={0x2020}, 0x2020) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x3) ioctl$TCFLSH(r0, 0x541b, 0xffefff1f00000000) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000440), 0x2042, 0x0) ioctl$AUTOFS_IOC_FAIL(r4, 0x4c80, 0x7000000) syz_usb_connect$uac1(0x2, 0xe5, &(0x7f0000000100)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0xff, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xd3, 0x3, 0x1, 0xd, 0x20, 0x7, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x1, 0x21}, [@input_terminal={0xc, 0x24, 0x2, 0x3, 0x201, 0x3, 0x49, 0x11e6, 0x51, 0x5}, @processing_unit={0xb, 0x24, 0x7, 0x6, 0x1, 0x6b, "322a86c4"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0xbb, 0xe, 0x4, 0xff, 0x9}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x1, 0x1, 0x2, 0x4, "9c", "ddbf"}, @format_type_ii_discrete={0x10, 0x24, 0x2, 0x2, 0x7, 0xfbb, 0x8, "59b67a9d81cc75"}]}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0x9, 0x81, 0x0, {0x7, 0x25, 0x1, 0xc, 0x9, 0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xe, 0x24, 0x2, 0x1, 0x5, 0x2, 0x4, 0x4, "c584b6", "7a6ac9"}, @format_type_i_discrete={0xa, 0x24, 0x2, 0x1, 0x5, 0x2, 0xb, 0x8, 'i^'}, @format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x7, 0x3, 0x7, 0x5, "6381", "d24d"}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0xfd, 0x4, 0x37, 0x5, "", "9b5d"}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x9, 0xff, 0x8}]}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x4, 0xb7, 0x8, {0x7, 0x25, 0x1, 0x0, 0xe, 0x6}}}}}}}}]}}, &(0x7f0000000380)={0xa, &(0x7f0000000200)={0xa, 0x6, 0x200, 0x8, 0x7, 0x1, 0x20, 0x80}, 0x3d, &(0x7f0000000240)={0x5, 0xf, 0x3d, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x8, 0x85, 0x4, 0x7}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x0, 0x1, 0xffff}, @generic={0x24, 0x10, 0x4, "ce2cb2d3341e2e907b11028b179817dcb757575d91cb5609dae16a68e16b183324"}, @ptm_cap={0x3}]}, 0x1, [{0xc5, &(0x7f0000000280)=@string={0xc5, 0x3, "2843f0ec68cb2ff971658a32ec14c0b4d81213086b1dde962e4784cd57fbd3048496be2dbb2e50f77fcbfc442630695fcf508a442ba57ba4bd28c34e4883de540c798cb7a118e28be7467fb3704c07842128706cdb1d88c4a81a70d428d0eff6f738c69a8be19842a1fe2a65ddf9d28b1fbfc2184d7dcbf1cf4a34fe033d75235870e74612514e22e735210301a736014e54cfb4004f6ece59c646d870833951602cb140d13210e8643461e86b284b7315599f18f927235866027560f9f509f9645ab6"}}]}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000002b00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000002b40)={0x0, 0x0, 0x0, 0x0, 0x9, r5, 0x4}, 0x38) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x20080, 0x0) r7 = openat$smackfs_ipv6host(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) syz_open_dev$usbfs(&(0x7f0000002b80), 0x6, 0x440000) write$smackfs_ipv6host(r7, &(0x7f0000000400)=ANY=[@ANYBLOB='0x000'], 0x9d) ioctl$BLKSSZGET(r6, 0x1268, &(0x7f0000000040)) 5.332963087s ago: executing program 2 (id=406): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000000)='./mnt\x00', 0x0, &(0x7f0000000080)={[], [{@fsname={'fsname', 0x3d, '.'}}]}, 0x0, 0x236, &(0x7f0000000300)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000540)='mnt', 0x0, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r0, 0xc0506617, &(0x7f0000000580)={@id={0x2, 0x0, @a}, 0x40, 0x0, '\x00', @a}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="b702000000000000bfa300000000000007030000fdfdfff67a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040000010000400404000001f7ff04b7050000000000006a0a00fe00000000850000000b000000b70000000000000095000000000000009cc6b3fcd62c061c6207005d43a4505f80e39c9f3c530cf08e467b592f868ee3b0a435df0a0e8c1bf176db2a6b2feb4b77d3d5707bfd2d84aaa3b1d4e984c46ea7e2b347a36f5662403e1b2be4284322a4908a0d411a9872971c7c56f0979bd10b97163c066d0e196bf02f46c7953ab1abdaf9de9ca3c00cb9bf4e418d07fa22f0610a70f2bdf4000200000000b0c2c125080963f63223b7b80197aa3161f45346b100000000000000000089e399f6609876b588743794298b79dc192dff048fc207c81f28bdd3e26a1a8a0481e9f0da43bb6ca66e2f55a9ff19ffe306e64f5933ae2700000000005064caec04a367c23d9fb6a6991ddb737d527d6acb15426406991c3b404984dfa2c6e94bd0339454c13ad3c328a182c15dc760a313e3b3ca5d3393404029e98fa883c71949a34d84030323e3d54fc5b29d27643453ad9211e3550ee5520211d9370175133f260c6882a146880b9387f1beb5418618bc83a3becf9ba5d80efd7da7ba8b913c685fc6700848dc6665d73248c1f74e08ad04ce905faf32706e0000249a028044ede964362cfb2f30a246c3b2f60000fc4deb91da1368b0960b8d69bd99c64893d44f962524429dc058528e7e541c903869d96989b9a986620cb2c95c83f2a082c52764f49e51188f9418b01bcd8ae164acdac95318ec8b2c6feacdcf4b528e5e58219bc54f6ad5679e7f430e6960ed048c46e1dccca05bfa1d67c83795eae2d31968c055d325a9c794ef88b30c2de4a274878b73c05ffa88b7073be648b12bb1fee58958d6a6f31bfe5682159fbde59dad00008a73b40f09cf018cd496b36050d7fd45e3620c28f76749262e33e16429a6da35ceb1a989de81c3f8b8bc348ef2ac3781b847611fcb0a26acafdd6d9a1b17dcb9f7c493d8f8cd344a1d470ca0d6f16ab0293774b5509fb0e7113936d59d5a60dbd84a9384f531bb0200000000000000cc1fbc455a64fd449284f71761092a0302000000000000008a05d36fd9b814b4292745418c92d94462d2d8f7e1d24cabe17ad4135d8872935ceac6eb4f046f2acc1b0efb4438abddcabb4e4e72a450aab72b589bec83bbb688e659fb426cb43d0ee993516fd4e867232cde69b6ffad447dcd92e0ef82948dd1fa7afb77d951fe4abf618121b7894c106beb49a71c62df5544ef2219734329cc7e62b151eb898a01010a7ec5acd0a5dcb2de443880c8a682515d1da9a3048744acb44384d1591df789883c0560495cb0cb32283529926d25e5c7f481112ab8a82247e927fb6f256830dab3671f00500d36a17790bab7d0e89e6c15314f2b963bfc867953476b0505c7d728326d666f39e82cfcf7e7a85df288d75df24c5e4d529c349923f9a4fb882310391dd58b4cbd8def239a227724d39c3e6c40e20e07e68a22888a5c3941b7a765b92bcb37f302487bcbd93ccf3a104021ff34ddf7ffcc963e25516a114573779b24a341dfb2e80f1f345c6d96493ffc2a18478b5bf3aab2ea59c51cf0678e1a57d0ea042d911548ff612002ddb2d54d42fbdde42b56887003d27468225b2594a05044baf314113e889468cf13dd92aa0d7744db6b56557a5adad95cb9a69d4de50642b4b9d6d3ba7eb534b00d0fea62f0a61535dfc4da06e7e8695be614c557caed7eb0120516e1351fed7d8ffa31c8f4be364185469cfc5f25c90d71bce745dd2f58a30e0844f1ad00bbdd7a08465e665c2620d78673dfb6d9263ed7def8924cfcd48a8a3534f1a3eac9ee9f18a18106ba3d7c7a62330f5c0e98cb7982dd7bad02c8dba9c13894185bfc4bd2520b6e01000000fc5eb55ecf9e6e363ea2ac40a14a6f00f0ffffa0fdb6487c51ef12c27b30255bc4f8813be88beeb5aa6f6a4151cfb90644e50630ed474df7d1635afcb1ea3f6c6ab5acbba2ce5099a9387c7acb9bbd1da497611ceda25049e48ddacccbb58dddaf9a3510d65383829a51e0f41e661fa80ca1eaaa6cf0824305ba4ec80400c50ffe83ccb0e6fef321190c58aca8c7c8c6d26ff5cbc2cadebda8e1219e04f8dacffd33db1a0a2e74c9eb978d80a12d0b5327bfd053000000000000000000be0d02a14708504412fa93d33599a40283c5addc191b4aa023079ed0536b01958e15315eb5f3f9f4992c18f666359f40295fa73284c4b607649bae75bd68c3e2b770c324a0ab26b6065d7e95a7bd80052db57506ec7cc861bf3998d07484c66630ca8173fea3f06ed1dfc70a8b90418e2dc76137e0f68cb1c8a908aef9f0f85647dba54e05028c33d94d463fb20d2e7547184b8d3611e45dff02144387f342ef9b9bf650e9d049bf65258a7bc094a6965e24611c077e1ca0891362a9d68f3ec7610c0449acf18459500f024f9b75885cd79ba32776e4a511c8a4ad922b00000000000000a9241220dfbf7d02ef507ec6fc7f5d37d835f7bed71283c431b9d8cbd9003972bf1dc6a71bedad8e19efc3edd2a7a7e555d5f3176af69920471e6e5bcb8966c813c132d65e2b99d3015e06b372e1aefaae14ee3fbc6349af362cdff99c214de66912d1a9a98d92dc197a51c29443de62caca334c46d110e50896fe50d0477771d387f40c8ef05750ca651e6e69a237dcf78666d6ab2bda1f853525494e4efdd93be38bb5fc671f8794002d7a951fd336aaf4ed1166cb459df70218c571ba1c40b028234505e5477e268326af8812c2fbb8785a223fce0a0601c2a3b58bea8c6216eadabcabe86ab46e4cd3d58ef7ce8d3c4b0bc5952e81dfc0a490d8568db6f9c51fe703c6864fae0053d2f91f49e977cdc1962dbc28c29471a72199862bc8fc6e211d13d8579cab4fba94b2b613c9b8148d05e0690a4c4ab35aabc45801d2b82081e62b23a01b58b1ffb624f63ad2246796796160cd3682374364edac52f1becb7c6eff50823b75fb2ef516ec4ec1cb20a2535b504502d744f2099674e58f2c117c980cf0d041c8ea5c4f166bab4aa5ed200ef4dcff96f7c9c1ab8c22db0f439b23b04bcd41ffc3a0e01976ca1cf43e12d7d72f3faa4979faabd62e2dc54a980eae4d5e8c6498de331c3aba1144ef1190ea6cda641d9416c4560cab2d819eac7b04c70f141754c3ffd79da363fe8859afee531710caf1b2bf5a51142f4755cbb700c28083525a9093790096cb93417f1216000000000000000000000000000040ceb244e4cae2b65a76d41793aabccd3d0c50486eae6793e1f54814a8ee2779c14ca94759266200229b58c12279817869e831cade7b09ddffffff9d93e2ad25eed43c0b9ee4fd209b5b919a42f676b9d7236fc8dd5040899d0676291407ce9ac8101dd3512f5b3ac8cf8179d1749de324000030d0f942ec4604c28d5c287d1435956784003a53eb5fe535ead8857acf0166dbd9f30a9b9c8a9b9faf1356faf269cded935b07863e4fdad8aab52686c81babd1c08f6700a2fadd413443022ea5c774ffefdd426abed08d437a4db48611fc82a18ab9f54758a1aad86d95cd186ceb55fafa3930090467b8b7bb8adef4de2076dc538bb97502b4b4350e633dc0a53c2fc9a01bc5cfae0245f1fab843c6737ba8b1672ae9677bb5970cf3e84be433446f5f3a43226109b7dafe7815773bd6969f04cbe15236b90000000000000000000000000000000000000000000000000000ff0779b9c005da21073c6d9680d4e547cb727addb2efe11b8b3a706569f1522b57d71bb0beccab7c8fe9e1330b2f501b2ac3cf4eba7ceda6ff8a0c8b18c5e9e2f505e8332116dfcdd6071b976de8c473a7585436730db75da167481ab8921fe051b250106e7b09a8fff8d8ef9c8481bb28a137d15040b0181c28dfad7c17b30c452a64c43a117cb948247c33abc765a6ba695c3cea5e32a4d1ae2dcbec2ff4268e03aad15efc6004e6b3d7f0edf8b5d4ae7846a6d43c16c90b7c5dc13ac2ff0439ab693498964cad2bb533bcd240778b7e49145c48efde42b44c01517f1a7c7707b4c4fc0900e7086ec40354504590696282286db9030f0320e2fcba8723939005347b3f744ff1973431000000000100000000000000000000000000003495d69aaf9a1d83e83511a3bf44fe753b8ad83bc34ea4d46b397e000ff267c50122aa5aaf8474ec2e57d960d963900bef84a4b3c7dd01ae4d6b5522aa8a35ae7996e298bcfe3f31a34e3e12c58cf172a4d3677a67b52041ec21ae8003aa1c9969178b1b00e4b32ac9745b3cabc908e623403c013907523c77f8acc20b9e2fd224ca8f21fab2b10991881e2112f4e1c4f54b9ca7c9a0c8298d60b8b6eaa023418992d6d62b0e9faca4a3b3a805e859137cd933ef5eb8db16f159f32505725da51414562d064b551246dacd586f42d06c790000087bb52ae4bc09f3846c785d1b278e661ed01fbc2415288bc9c808c4aef648d431b3029da0dec8886c3ee9cad996843d00a3b5eb54e270dd2e96c8f2fdb4c27c2d1bd467f2a14867dec6d8a68356cef8646f3815eb4daf46c5c76b29839d9feff688dfbe25c73f936338e7b057980da58a6303d95f17712d667d5a1066ae457ae32925ce518b559c1182a74e267da57fe25b19153f1cdebaddf3f7a3479c09f2303dff449c0513b552a75ed48215cc31264a6ff648a95daa0d8e5c599dbce303b3b5307572df30429a3b4b115cab0a018f2501272048dd9e69877535e20078e7c28a98f26ace2fa90c68166396a2398d7a266bdc15ce904f25ec7fb2434ee7b5b69bed702ba1e7ed72942f452f1a98a2d949450091075efa823b11f5f5eccd921c04c7c15a5a05750cd85b1300fc00ce275de7559e117f87cb6c3c9a4b9f96149e3fcffa44d7258e9fc818ab3d76ab660a254d998592c31017f816e01a21c08a17acdb8ada5bc901934e40608563f14698feafac57b2b48cb89e10c85463a386be0f7fb1d1cfd621f8e2b51d50622b7c15be3999ffa42bd57408fe168d840c45a15317b21cf4c2278a04000000000000000033e2ad66fd156dcbf12d9e0e85dc9705d0ce24a4694c8ecd2493e1ed561a425d6045eb68c80d1dc57defb4abe86c9f2c37652d98b0c415bf246642062bd3b58a1ec57acdc2b6be53eaffaafd100002000057fe38ef705b4b9c0342a9b267db42fdda35e41afd619fb6bb14b910346544d83f462635f0738fe4a8db56364fd28540ac55be7fff8aa77009f12e2c1e7098a27b0bc549f3a6f68c11d786e498bffc37c297185efdb868a16ae1323c7d19da92531b33023e82cdeb8be27f82ca830f409a21d1aec436b0230e4b1b376005bcf6e55fceffce6d184de1b89dc5ed8bdfa37e8f86ada4158a7713db2c6789e6ba90df2bc48944775e45134f2187359f74c9dff3c78fb36fe5f672a8ce6e5c404ed8d734b905c5a12a996d8836b4522dbc73e595c14db9523200000000"], &(0x7f0000001700)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001740)={r1, 0x18000000000002a0, 0x204, 0x0, &(0x7f00000017c0)="5aee41dea43e63a3f7fb7f110800", 0x0, 0xf000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='mnt/encrypted_dir\x00', 0x1c0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000680)='mnt/encrypted_dir\x00', 0x0, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r2, 0x800c6613, &(0x7f00000006c0)=@v2={0x2, @aes256, 0x0, '\x00', @a}) pselect6(0x40, &(0x7f0000000040)={0xbb7, 0x8, 0x4, 0xffffffff, 0xfffffffffffffff7, 0xffffffffffffff45, 0x6, 0x7f}, &(0x7f0000000180)={0x9, 0x7, 0x6, 0x1, 0xffffffffffffffff, 0x9, 0x7f, 0x10001}, &(0x7f00000001c0)={0xcc63, 0x8, 0x6f, 0x1, 0x6, 0x9, 0x7, 0x9}, &(0x7f0000000200), &(0x7f00000002c0)={&(0x7f0000000280)={[0x9e]}, 0x8}) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001800)='./proc\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000001840)='./proc/sys/kernel/printk_devkmsg\x00', 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000001880)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000018c0)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000001900)=0x7) mmap(&(0x7f0000373000/0x1000)=nil, 0x1000, 0xb635773f04ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000700)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000001980)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000001a00), 0x651, 0x0) recvmmsg(r4, &(0x7f0000001a40), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000001a80)=0x6) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0) r6 = userfaultfd(0x1) ioctl$UFFDIO_API(r6, 0xc018aa3f, 0x0) ioctl$UFFDIO_REGISTER(r6, 0x4010aa0a, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r7 = socket(0x840000000002, 0x3, 0xff) sendmsg$rds(r7, &(0x7f0000001ac0)={&(0x7f0000001b00)={0x2, 0x4e23, @local}, 0x10, &(0x7f0000001b40)=[{0x0}], 0x1, 0x0, 0x0, 0x40000}, 0x40004) syz_emit_vhci(&(0x7f0000001b80)=ANY=[@ANYBLOB="040e0406"], 0x7) 4.832656292s ago: executing program 0 (id=411): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x8400, &(0x7f0000000080)=ANY=[@ANYBLOB='flush,shortname=lower,uni_xlate=1,rodir,utf8=1,nonumtail=0,uni_xlate=1,nonumtail=0,uni_xlate=0,utf8=1,uni_xlate=0,utf8=1,shortname=mixed,nonumtail=0,dos1xfloppX,rodir,shortname=winnt,shortname=lower,\x00'], 0xf5, 0x2e8, &(0x7f00000009c0)="$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") r0 = socket(0x2b, 0x1, 0x1) r1 = syz_open_dev$I2C(&(0x7f0000000040), 0x0, 0x80) ioctl$I2C_PEC(r1, 0x708, 0xb8f7) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x41, 0x0) write$binfmt_aout(r3, &(0x7f00000000c0)=ANY=[], 0xff2e) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) write(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="18000000270001031dbd7002fadbdf250100"], 0x18}, 0x1, 0x0, 0x0, 0x40000d0}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r7, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004}, 0x800) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x9, &(0x7f00000014c0)=ANY=[@ANYBLOB], &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x40f00, 0x2}, 0x94) r8 = syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(r8, 0xc06864b8, &(0x7f0000000580)={0x0, 0xc1, 0x80, 0x34325258, 0x0, [0x2], [0x80ffff]}) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e1f, 0x2, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) connect$inet6(r0, 0x0, 0x0) 4.454293074s ago: executing program 5 (id=413): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x80, 0x73}}}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x30}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="11002a00dd0b6162636465666768696a6b00000010002d800a0000000202020202024000"], 0x40}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000100)=ANY=[@ANYBLOB="800000000023e02e0e69688964080211000004000000000000000202020202adf9dbce6901deca0f958c51175b1c7f55b808825b36abc86f15c7e4064c792b34d2939febae95e69a360d3108ee00"/87], 0x36) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000180), 0x169802, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28011, 0xffffffffffffffff, 0x0) mmap(&(0x7f000020c000/0x4000)=nil, 0x4000, 0x2000002, 0x8010, 0xffffffffffffffff, 0x759d000) pipe2$watch_queue(0x0, 0x80) ioprio_set$pid(0x3, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0xb, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000280)=0x7) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f00000002c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f00000003c0)=@abs, 0x6e) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000440)={0x0, 0x0}) ptrace$poke(0x5, r4, 0x0, 0x4) sendmmsg$unix(r6, &(0x7f00000004c0), 0x651, 0x0) recvmmsg(r5, &(0x7f0000000500), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000540)=0x6) ioctl$BLKZEROOUT(r3, 0x127f, &(0x7f00000008c0)={0x600, 0x20000}) 4.353918267s ago: executing program 4 (id=414): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x8400, &(0x7f0000000080)=ANY=[@ANYBLOB='flush,shortname=lower,uni_xlate=1,rodir,utf8=1,nonumtail=0,uni_xlate=1,nonumtail=0,uni_xlate=0,utf8=1,uni_xlate=0,utf8=1,shortname=mixed,nonumtail=0,dos1xfloppX,rodir,shortname=winnt,shortname=lower,\x00'], 0xf5, 0x2e8, &(0x7f00000009c0)="$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") r0 = socket(0x2b, 0x1, 0x1) r1 = syz_open_dev$I2C(&(0x7f0000000040), 0x0, 0x80) ioctl$I2C_PEC(r1, 0x708, 0xb8f7) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x41, 0x0) write$binfmt_aout(r3, &(0x7f00000000c0)=ANY=[], 0xff2e) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) write(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="18000000270001031dbd7002fadbdf250100"], 0x18}, 0x1, 0x0, 0x0, 0x40000d0}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r7, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004}, 0x800) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x9, &(0x7f00000014c0)=ANY=[@ANYBLOB], &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x40f00, 0x2}, 0x94) r8 = syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(r8, 0xc06864b8, &(0x7f0000000580)={0x0, 0xc1, 0x80, 0x34325258, 0x0, [0x2], [0x80ffff]}) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r0, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x5}, 0x1c) 3.768989393s ago: executing program 0 (id=415): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x8400, &(0x7f0000000080)=ANY=[@ANYBLOB='flush,shortname=lower,uni_xlate=1,rodir,utf8=1,nonumtail=0,uni_xlate=1,nonumtail=0,uni_xlate=0,utf8=1,uni_xlate=0,utf8=1,shortname=mixed,nonumtail=0,dos1xfloppX,rodir,shortname=winnt,shortname=lower,\x00'], 0xf5, 0x2e8, &(0x7f00000009c0)="$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") r0 = socket(0x2b, 0x1, 0x1) r1 = syz_open_dev$I2C(&(0x7f0000000040), 0x0, 0x80) ioctl$I2C_PEC(r1, 0x708, 0xb8f7) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x41, 0x0) write$binfmt_aout(r3, &(0x7f00000000c0)=ANY=[], 0xff2e) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) write(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="18000000270001031dbd7002fadbdf250100"], 0x18}, 0x1, 0x0, 0x0, 0x40000d0}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r7, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004}, 0x800) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x9, &(0x7f00000014c0)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x40f00, 0x2}, 0x94) r8 = syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(r8, 0xc06864b8, &(0x7f0000000580)={0x0, 0xc1, 0x80, 0x34325258, 0x0, [0x2], [0x80ffff]}) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e1f, 0x2, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x5}, 0x1c) 3.609662183s ago: executing program 2 (id=416): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x7, 0xfe, 0x7fff0004}]}) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) clock_gettime(0xfffffffffffffffd, &(0x7f0000000080)) mknodat$md(0xffffffffffffff9c, &(0x7f0000000200)='./md0\x00', 0x6180, 0x0) r0 = openat$md_node(0xffffffffffffff9c, &(0x7f00000000c0)='./md0\x00', 0x2, 0x0) ioctl$SET_ARRAY_INFO(r0, 0x40480923, 0x0) 3.222314756s ago: executing program 2 (id=417): openat$udambuf(0xffffffffffffff9c, &(0x7f00000015c0), 0x2) socket(0x10, 0x2, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f00000003c0), 0x8) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f0000000280)={0xffffffffffffffff, 0x0, {0x0, 0x0, 0x0, 0x7, 0x4010000000000ffd, 0x0, 0x0, 0x19, 0xc, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d81a17f7061a74df2cfc06c89f3d9e234b30c50997d3bef4090ebcdda37bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "675237601a8ca5b07dcc141802c4dae4162e43ac61b7ad3300", [0x2, 0x6]}}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) ioctl(r0, 0x3b94, &(0x7f0000000480)='(') bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1f, 0x8, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a800000018110000", @ANYRES64, @ANYBLOB="0000000000000000b7020000010000008500000086"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f00000001c0)={@multicast2, @loopback}, 0xc) open(&(0x7f0000000140)='./file0\x00', 0x115002, 0x2) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000200)={'lo\x00', 0x2000}) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000240)=ANY=[@ANYBLOB="e00000027f0007000000000002"], 0x18) 3.22156261s ago: executing program 4 (id=418): r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(0xffffffffffffffff, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f0000024c80)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000024d40)=ANY=[@ANYBLOB="4400000010000d042abd7000077bf70000000000", @ANYRES32=r3, @ANYBLOB="01000000000000002400128009000100626f6e640000000014000280050001000600000008000b00", @ANYRES32=r1], 0x44}, 0x1, 0x0, 0x0, 0x40040}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000e00)=ANY=[@ANYRES32=r1, @ANYBLOB="0028000000000000140012800c0001006d6163766c616e00", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r6], 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x4888, &(0x7f0000000040)={&(0x7f0000000200)=@dellink={0x20, 0x11, 0x101, 0x0, 0x0, {0x0, 0x0, 0x0, r6, 0x42013, 0x2020e}}, 0x20}, 0x1, 0x0, 0x0, 0x4000886}, 0x0) 3.139245983s ago: executing program 4 (id=420): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x840, &(0x7f0000000140), 0x1, 0x241, &(0x7f0000000540)="$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") r0 = accept$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000240)=0x1c) getsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000280), &(0x7f00000002c0)=0x4) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x100) (async) lsetxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f0000000100)={{}, {0x1, 0x3}, [], {0x4, 0x1}, [], {0x20, 0x6}, {0x20, 0x2}}, 0x1c, 0x2) (async, rerun: 64) chdir(&(0x7f0000000140)='./file0\x00') (async, rerun: 64) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) 3.089068527s ago: executing program 2 (id=422): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000100)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r1, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000018000000000000000100000001"], 0xb0, 0x40802}}], 0x2, 0x0) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x28, 0x2, 0x3, 0x101, 0x0, 0x0, {0xa}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x2}}, @NFQA_CFG_PARAMS={0x9, 0x2, {0xb, 0x2}}]}, 0x28}}, 0x0) 3.058963871s ago: executing program 2 (id=423): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f00000001c0)=0x2, 0x4) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f00000004c0)={0xa, 0xfffe, 0x0, @loopback={0xfec0ffffffffffff, 0x1c9ae7fffe9a6f34}, 0x20c2de31}, 0x1c) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x400c110) setns(0xc9, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) timer_gettime(0x0, 0x0) connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0) timer_create(0x5, 0x0, &(0x7f0000000200)) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40081c4}, 0x44000) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r1 = semget$private(0x0, 0x6, 0x160) semtimedop(r1, &(0x7f0000000500)=[{0x4, 0x1}, {0x1, 0x2, 0x800}, {0x2, 0x6, 0x1800}, {0x0, 0x0, 0x1800}, {0x1, 0x0, 0x1000}], 0x5, 0x0) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000340)=[0xe]) 3.057281849s ago: executing program 1 (id=424): r0 = openat$dm_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000000)=@bpf_lsm={0x12, 0x5, &(0x7f0000000180)=ANY=[@ANYRESHEX=r0], &(0x7f0000000140)='GPL\x00', 0x400, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) r1 = openat$dm_control(0xffffffffffffff9c, &(0x7f00000001c0), 0x8000, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="f53cbf19", @ANYRES16=r3, @ANYBLOB="010026bd7000ffdbdf254c0000000c00a70006000000000000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000c00a6000100000000000000"], 0x4c}, 0x1, 0x0, 0x0, 0x4000080}, 0x40890) ioctl$DM_DEV_CREATE(r1, 0xc138fd03, &(0x7f0000000200)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, {'syz', 0x0, '0\x00'}}}) 2.994267569s ago: executing program 4 (id=425): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000006c0)='./file0\x00', 0x58e, &(0x7f0000002a80)={[{@errors_remount}, {@lazytime}, {@block_validity}, {@test_dummy_encryption}, {@block_validity}, {@quota}, {@jqfmt_vfsv0}]}, 0x1, 0x459, &(0x7f0000000240)="$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") openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000140)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000700), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000740), 0x10106, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x48, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000007c0)=0x6) r3 = syz_open_dev$dri(&(0x7f0000000700), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000740)={0x200, 0x200, 0x20, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_ADDFB2(r3, 0xc04464b8, &(0x7f0000002b80)={0x0, 0x200, 0x200, 0x34325258, 0x0, [r4], [0x800]}) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000002c00)={0x1, &(0x7f0000002c40)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r5, 0xffffffffffffffff, 0x402) 2.929080951s ago: executing program 1 (id=426): r0 = openat$dm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$DM_TARGET_MSG(r0, 0xc138fd0e, &(0x7f0000000040)={0x4, 0x0, 0x0, 0x170, 0xffffffffffffff03, 0x0, 0x0, 0x0, 0x0, 0x0, @by_uuid={0x0, '\x00', {'LVM-syz', 0x0, '1\x00'}}, {0x0, @stats_create={'@stats_create ', '8+16', 0x20, '/2', ' 1 precise_timestamps'}}}) r1 = openat$nsim_new_device(0xffffffffffffff9c, &(0x7f00000001c0), 0x1, 0x0) ioctl$FS_IOC_GETFSSYSFSPATH(r1, 0x80811501, &(0x7f0000000200)={0x80}) 2.925696531s ago: executing program 5 (id=427): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x3, 0xb, &(0x7f0000000180)=@framed={{0x18, 0x2, 0x0, 0x11, 0x4e}, [@printk={@u, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x17}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) 2.791230522s ago: executing program 1 (id=428): r0 = openat$dm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/cgroup.procs\x00', 0x28301, 0xc) write$binfmt_format(r1, &(0x7f0000000080)='-1\x00', 0x3) ioctl$DM_TARGET_MSG(r0, 0xc138fd0e, &(0x7f00000005c0)={0x4, 0x0, 0x0, 0x170, 0x138, 0x0, 0x0, 0x0, 0x0, 0x0, @by_name={0x0, {'syz', 0x0, '0\x00'}}, {0x0, @stats_create={'@stats_create ', '8+16', 0x20, '/1', ' 1 precise_timestamps'}}}) prctl$PR_SET_SECUREBITS(0x1c, 0x7) setfsuid(0xee00) ioctl$DM_TABLE_STATUS(r0, 0xc138fd0c, &(0x7f0000000400)={0x4, 0x0, 0x0, 0x140, 0x138, 0x0, 0x0, 0x1, 0x0, 0x0, @by_dev={r2}, "62f3"}) 2.725083736s ago: executing program 5 (id=429): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000700)={0xa, 0x4e22}, 0x1c) listen(r0, 0x10040) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x14, 0x4, 0x4, 0x22}, 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={r1, &(0x7f0000000140), 0x0}, 0x20) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./trace/trace_options\x00', 0x169842, 0x0) writev(r2, &(0x7f00000001c0)=[{0x0}, {&(0x7f0000000200)='t', 0x1}], 0x2) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r2) syz_emit_ethernet(0x6e, &(0x7f0000000000)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "001040", 0x38, 0x6, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0xe, 0x0, 0x0, 0x0, 0x0, {[@md5sig={0x13, 0x12, "345f8cf949a01b515682f44cecac91ba"}, @md5sig={0x1d, 0x2, "d2b653e0c9d32072c19dd6ca814b7d7b"}]}}}}}}}}, 0x0) 2.562157782s ago: executing program 0 (id=430): pipe2$watch_queue(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0x0, 0xc, 0x7}, 0x31) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={r1, 0x0, &(0x7f00000000c0)=""/53}, 0x20) r2 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_WATCH_KEY(0x20, r2, r0, 0x7c) 2.517898461s ago: executing program 5 (id=431): mknodat$md(0xffffffffffffff9c, &(0x7f0000000200)='./md0\x00', 0x6180, 0x0) r0 = openat$md_node(0xffffffffffffff9c, &(0x7f0000000240)='./md0\x00', 0x2, 0x0) ioctl$SET_ARRAY_INFO(r0, 0x40480923, &(0x7f0000000280)={0x0, 0x5a, 0x0, 0x0, 0x5, 0x800, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x10000}) ioctl$ADD_NEW_DISK(r0, 0x40140921, &(0x7f0000000300)={0x0, {0x1, 0x0}, 0x0, 0x6}) ioctl$ADD_NEW_DISK(r0, 0x40140921, &(0x7f0000000340)={0x1, {0x1, 0x1}, 0x1, 0x6}) ioctl$RUN_ARRAY(r0, 0x400c0930, &(0x7f0000000380)) ioctl$STOP_ARRAY(r0, 0x932, 0x0) pwrite64(r0, &(0x7f00000003c0)="aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0x20, 0x1000) pread64(r0, &(0x7f0000000400)=""/512, 0x200, 0x10000) ioctl$ADD_NEW_DISK(r0, 0x40140921, &(0x7f0000000000)={0x1, {0x1, 0x1}, 0x1, 0x10}) ioctl$STOP_ARRAY(r0, 0x932, 0x0) 2.494192138s ago: executing program 0 (id=432): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000000080)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@timestamping={{0x14, 0x1, 0x25, 0xffffff9b}}, @timestamping={{0x14, 0x1, 0x25, 0x800}}, @mark={{0x14, 0x1, 0x24, 0x4}}, @timestamping={{0x14, 0x1, 0x25, 0x2942}}], 0x60}}], 0x1, 0x40088) r0 = socket$packet(0x11, 0x3, 0x300) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$FUSE_DEV_IOC_BACKING_CLOSE(r1, 0x4004e502, 0x0) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000140)=0x207, 0x9) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'bridge0\x00', 0x0}) sendto$packet(r0, &(0x7f00000001c0)="05031600d3fc140000004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000200)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000400)={'netdevsim0\x00', 0x0}) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x3, 0x3, &(0x7f0000000500)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}}, &(0x7f0000000540)='GPL\x00', 0xe, 0x0, 0x0, 0x0, 0x0, '\x00', r4}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000580)={@map, r5, 0x2f, 0x2034, r5}, 0x20) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000340)={0x0, 0x0}) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f00000003c0)=r6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000f3ffffff04000000710200"/32], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) 2.401058166s ago: executing program 1 (id=433): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100000008e}, 0x0) r0 = gettid() sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2) sched_setscheduler(r1, 0x2, &(0x7f00000000c0)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000140)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f00000001c0), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000200)=0x403) recvmmsg(r2, &(0x7f0000000280), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x158) openat(0xffffffffffffff9c, &(0x7f00000004c0)='./file1\x00', 0x88040, 0x12) syz_mount_image$fuse(0x0, &(0x7f00000005c0)='./bus\x00', 0x0, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000640), 0x0, &(0x7f0000000680)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) setxattr$trusted_overlay_origin(&(0x7f0000000700)='./file0/file1\x00', 0x0, 0x0, 0x0, 0x3) 2.400661215s ago: executing program 0 (id=434): socket(0x400000000010, 0x3, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x400000000a882, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000c80)=@filter={'filter\x00', 0x42, 0x4, 0x300, 0xffffffff, 0xb0, 0x0, 0x1a8, 0xffffffff, 0xffffffff, 0x268, 0x268, 0x268, 0xffffffff, 0x5, 0x0, {[{{@ip={@multicast2, @dev, 0x0, 0x0, 'bond_slave_1\x00', 'nr0\x00'}, 0x0, 0x70, 0xb0, 0x1ba, {0x46010000, 0x2c000000000000}}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "6bc128419cfb67daad5b4809088400ed0000006c00000000000100040500"}}}, {{@ip={@rand_addr=0x64010102, @multicast1, 0xff000000, 0x0, 'sit0\x00', 'veth1_to_hsr\x00', {}, {0xd7fffbe779abf152}, 0x8, 0x1, 0x2}, 0x287, 0xd0, 0xf8, 0x0, {}, [@common=@unspec=@cpu={{0x28}}, @common=@unspec=@statistic={{0x38}, {0x0, 0x0, 0x0, 0x0, 0x0, {0x1}}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@inet=@set1={{0x28}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x360) r2 = dup(r0) r3 = getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) kcmp$KCMP_EPOLL_TFD(r3, r3, 0x7, r4, &(0x7f0000000840)={r2, r0, 0x5}) openat$uhid(0xffffffffffffff9c, 0x0, 0x802, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000880)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000008c0)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000900)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0xc8948000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f0000000980)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000a00), 0x400000000000041, 0x0) recvmmsg(r6, &(0x7f0000000a40), 0x10106, 0x2, 0x0) r8 = getpid() process_vm_readv(r8, &(0x7f0000000a80)=[{&(0x7f0000000ac0)=""/54, 0x7ffff000}, {&(0x7f0000000b00)=""/152, 0x98}], 0x2, &(0x7f0000000bc0)=[{&(0x7f0000000c00)=""/95, 0x7ffff000}], 0x286, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x12, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @cgroup_sock_addr=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff1}, 0x94) syz_mount_image$ext4(&(0x7f00000001c0)='ext2\x00', &(0x7f0000000240)='./file0\x00', 0x800, &(0x7f0000000280), 0x1, 0x27e, &(0x7f0000000400)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000680)='./file0\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f00000006c0)='./bus\x00', 0x20020, 0x0, 0x1, 0x0, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000700)='./file0\x00', &(0x7f0000000740), 0x0, 0x0, 0x1) mount$overlay(0x0, &(0x7f0000000780)='./file0\x00', &(0x7f00000007c0), 0x8, &(0x7f0000000800)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@index_on}]}) r9 = fsopen(&(0x7f00000003c0)='sockfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r9, 0x6, 0x0, 0x0, 0x0) r10 = fsmount(r9, 0x0, 0x88) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={@cgroup=r10, 0x3836c45874b62253, 0x0, 0xfffffffb, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f0000000040), &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) 1.454764884s ago: executing program 4 (id=435): openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) socket$igmp(0x2, 0x3, 0x2) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$pppoe(0x18, 0x1, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_open_dev$usbmon(&(0x7f00000003c0), 0x0, 0x0) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x181) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x109342, 0x0) pwrite64(r1, &(0x7f0000000180)='2', 0x1, 0x8080c60) syz_mount_image$fuse(0x0, &(0x7f0000000200)='./bus\x00', 0x3000042, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) setxattr$security_capability(&(0x7f0000000300)='./file0/file1\x00', &(0x7f0000000340), 0x0, 0x0, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e21, @remote}, {0x2, 0x0, @remote}, {0x2, 0x4e23, @local}, 0x3c1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x4, 0x6, 0x4}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRES8=r2], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x24018807) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r3, &(0x7f0000000000), 0xd) 450.00237ms ago: executing program 1 (id=436): openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) socket$igmp(0x2, 0x3, 0x2) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$pppoe(0x18, 0x1, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_open_dev$usbmon(&(0x7f00000003c0), 0x0, 0x0) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x181) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x109342, 0x0) pwrite64(r1, &(0x7f0000000180)='2', 0x1, 0x8080c60) syz_mount_image$fuse(0x0, &(0x7f0000000200)='./bus\x00', 0x3000042, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) setxattr$security_capability(&(0x7f0000000300)='./file0/file1\x00', &(0x7f0000000340), 0x0, 0x0, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e21, @remote}, {0x2, 0x0, @remote}, {0x2, 0x4e23, @local}, 0x3c1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x4, 0x6, 0x4}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRES8=r2], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x24018807) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r3, &(0x7f0000000000), 0xd) 423.468887ms ago: executing program 2 (id=437): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x80, 0x73}}}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x30}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="11002a00dd0b6162636465666768696a6b00000010002d800a0000000202020202024000"], 0x40}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000100)=ANY=[@ANYBLOB="800000000023e02e0e69688964080211000004000000000000000202020202adf9dbce6901deca0f958c51175b1c7f55b808825b36abc86f15c7e4064c792b34d2939febae95e69a360d3108ee00"/87], 0x36) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000180), 0x169802, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28011, 0xffffffffffffffff, 0x0) mmap(&(0x7f000020c000/0x4000)=nil, 0x4000, 0x2000002, 0x8010, 0xffffffffffffffff, 0x759d000) pipe2$watch_queue(0x0, 0x80) ioprio_set$pid(0x3, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0xb, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000280)=0x7) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f00000002c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f00000003c0)=@abs, 0x6e) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000440)={0x0, 0x0}) ptrace$poke(0x5, r4, 0x0, 0x4) sendmmsg$unix(r6, &(0x7f00000004c0), 0x651, 0x0) recvmmsg(r5, &(0x7f0000000500), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000540)=0x6) ioctl$BLKZEROOUT(r3, 0x127f, &(0x7f00000008c0)={0x600, 0x20000}) 219.602024ms ago: executing program 0 (id=438): r0 = socket(0x1, 0x4, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e20, @rand_addr=0x64010102}]}, &(0x7f00000007c0)=0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r1 = add_key$user(&(0x7f0000000040), 0x0, &(0x7f00000000c0)="7c1c6f76", 0x4, 0xfffffffffffffffe) r2 = add_key(&(0x7f0000000000)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffc) keyctl$dh_compute(0x17, &(0x7f0000000140)={0x0, r1, r2}, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() r4 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind(r4, &(0x7f0000000000)=@hci={0x1f, 0x4, 0x2}, 0x80) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) msgctl$MSG_INFO(0x0, 0xc, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x5, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x63, 0x11, 0xc}, [@call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6}, 0x94) 217.884096ms ago: executing program 4 (id=439): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2800040, 0x0, 0x1, 0x0, &(0x7f0000000280)) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f00000003c0)='./dev\x00', &(0x7f0000000400)='devtmpfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./dev/mapper/control\x00', 0x2, 0x0) ioctl(r1, 0xc013fd08, &(0x7f00000004c0)="040000000000000000000000380100") r2 = socket(0x10, 0x803, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) mq_timedsend(r3, 0x0, 0x0, 0x1ff, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x54, 0x2c, 0xd3f, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x1, 0x4}, {0x0, 0x9}, {0xf, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_OPTS={0x18, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0x14, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_MPLS_OPT_LSE_DEPTH={0x5, 0x1, 0x5}, @TCA_FLOWER_KEY_MPLS_OPT_LSE_TC={0x5, 0x4, 0x3}]}}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x20040054) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2800040, 0x0, 0x1, 0x0, &(0x7f0000000280)) (async) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev\x00', 0x1ff) (async) mount(0x0, &(0x7f00000003c0)='./dev\x00', &(0x7f0000000400)='devtmpfs\x00', 0x0, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000000440)='./dev/mapper/control\x00', 0x2, 0x0) (async) ioctl(r1, 0xc013fd08, &(0x7f00000004c0)="040000000000000000000000380100") (async) socket(0x10, 0x803, 0x0) (async) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) (async) mq_timedsend(r3, 0x0, 0x0, 0x1ff, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x54, 0x2c, 0xd3f, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x1, 0x4}, {0x0, 0x9}, {0xf, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_OPTS={0x18, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0x14, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_MPLS_OPT_LSE_DEPTH={0x5, 0x1, 0x5}, @TCA_FLOWER_KEY_MPLS_OPT_LSE_TC={0x5, 0x4, 0x3}]}}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x20040054) (async) 0s ago: executing program 1 (id=440): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r0, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, 0x0, 0x8, 0x0) kernel console output (not intermixed with test programs): 0: entered promiscuous mode [ 30.170697][ T4709] hsr_slave_1: entered promiscuous mode [ 30.170895][ T4709] debugfs: 'hsr0' already exists in 'hsr' [ 30.170904][ T4709] Cannot create hsr debugfs directory [ 30.231100][ T4708] hsr_slave_0: entered promiscuous mode [ 30.231399][ T4708] hsr_slave_1: entered promiscuous mode [ 30.231624][ T4708] debugfs: 'hsr0' already exists in 'hsr' [ 30.231634][ T4708] Cannot create hsr debugfs directory [ 30.305345][ T4715] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 30.308601][ T4715] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 30.308935][ T4715] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 30.310340][ T4715] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 30.324680][ T4715] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 30.325752][ T4715] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 30.327391][ T4715] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 30.332833][ T4715] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 30.356032][ T4707] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.356124][ T4707] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.356209][ T4707] bridge_slave_0: entered allmulticast mode [ 30.356624][ T4707] bridge_slave_0: entered promiscuous mode [ 30.362026][ T4709] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 30.365285][ T4709] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 30.367233][ T4707] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.367260][ T4707] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.367349][ T4707] bridge_slave_1: entered allmulticast mode [ 30.368901][ T4707] bridge_slave_1: entered promiscuous mode [ 30.373479][ T4715] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.373508][ T4715] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.373694][ T4715] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.373722][ T4715] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.380128][ T4709] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 30.381335][ T4709] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 30.383393][ T4709] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 30.384356][ T4709] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 30.395824][ T4709] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 30.397114][ T4709] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 30.400597][ T4707] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.401803][ T4707] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.415869][ T4707] team0: Port device team_slave_0 added [ 30.416638][ T4707] team0: Port device team_slave_1 added [ 30.429682][ T4707] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.429694][ T4707] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.429708][ T4707] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.430460][ T4707] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.430468][ T4707] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.430481][ T4707] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.442105][ T4715] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.445341][ T4715] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.450736][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.460357][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.472204][ T4707] hsr_slave_0: entered promiscuous mode [ 30.472549][ T4707] hsr_slave_1: entered promiscuous mode [ 30.472757][ T4707] debugfs: 'hsr0' already exists in 'hsr' [ 30.472766][ T4707] Cannot create hsr debugfs directory [ 30.484794][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.484826][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.485140][ T4716] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 30.486110][ T4716] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 30.486402][ T4716] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 30.488542][ T4716] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 30.498191][ T4716] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 30.499337][ T4716] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 30.499701][ T4716] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 30.500784][ T4716] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 30.518616][ T1328] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.518641][ T1328] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.525526][ T4715] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 30.525541][ T4715] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 30.569734][ T4708] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 30.570693][ T4708] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 30.570982][ T4708] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 30.571781][ T4708] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 30.574628][ T4708] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 30.575739][ T4708] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 30.576869][ T4708] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 30.586907][ T4708] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 30.596024][ T4716] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.602508][ T4709] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.603274][ T4716] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.607216][ T4709] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.612467][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.612493][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.613165][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.613186][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.638783][ T4707] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 30.639954][ T4707] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 30.640290][ T4707] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 30.641285][ T4707] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 30.641651][ T4707] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 30.642494][ T4707] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 30.654717][ T4716] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 30.654732][ T4716] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 30.658696][ T4707] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 30.660233][ T4707] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 30.665519][ T1231] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.665553][ T1231] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.665914][ T1231] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.665932][ T1231] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.715390][ T4708] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.728310][ T4708] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.731424][ T40] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.731451][ T40] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.743339][ T40] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.743366][ T40] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.771041][ T4708] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 30.771058][ T4708] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 30.793463][ T4707] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.811424][ T4707] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.812897][ T67] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.812925][ T67] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.824617][ T67] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.824643][ T67] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.839501][ T4707] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 30.874392][ T4715] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.893929][ T4715] veth0_vlan: entered promiscuous mode [ 30.895991][ T4715] veth1_vlan: entered promiscuous mode [ 30.907329][ T4715] veth0_macvtap: entered promiscuous mode [ 30.914181][ T4715] veth1_macvtap: entered promiscuous mode [ 30.934868][ T4715] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.935894][ T4715] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.948025][ T4716] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.967191][ T4709] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.970499][ T263] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.971083][ T263] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.971113][ T263] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.971136][ T263] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.002479][ T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.002492][ T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.007283][ T4709] veth0_vlan: entered promiscuous mode [ 31.020551][ T4709] veth1_vlan: entered promiscuous mode [ 31.026572][ T4709] veth0_macvtap: entered promiscuous mode [ 31.030208][ T4709] veth1_macvtap: entered promiscuous mode [ 31.033587][ T4709] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.034495][ T4709] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.037095][ T67] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.037372][ T67] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.038227][ T67] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.051076][ T67] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.051092][ T67] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.096905][ T67] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.096918][ T67] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.108282][ T40] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.108481][ T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.108489][ T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.116881][ T4707] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.132567][ T4715] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 31.133841][ T4708] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.156256][ T4708] veth0_vlan: entered promiscuous mode [ 31.160330][ T4708] veth1_vlan: entered promiscuous mode [ 31.166219][ T4707] veth0_vlan: entered promiscuous mode [ 31.176354][ T4708] veth0_macvtap: entered promiscuous mode [ 31.177408][ T4708] veth1_macvtap: entered promiscuous mode [ 31.186014][ T4716] veth0_vlan: entered promiscuous mode [ 31.186759][ T4894] ip_tables: iptables: counters copy to user failed while replacing table [ 31.195801][ T4716] veth1_vlan: entered promiscuous mode [ 31.201047][ T4708] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.202410][ T4708] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.203535][ T4716] veth0_macvtap: entered promiscuous mode [ 31.205166][ T4716] veth1_macvtap: entered promiscuous mode [ 31.216430][ T4707] veth1_vlan: entered promiscuous mode [ 31.229540][ T4716] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.237136][ T4716] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.250923][ T4707] veth0_macvtap: entered promiscuous mode [ 31.251690][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.251700][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.254801][ T4707] veth1_macvtap: entered promiscuous mode [ 31.369102][ T263] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.369214][ T263] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.442057][ T42] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.448126][ T4724] Bluetooth: hci1: command tx timeout [ 31.448306][ T4724] Bluetooth: hci0: command tx timeout [ 31.448462][ T4724] Bluetooth: hci2: command tx timeout [ 31.449203][ T4722] Bluetooth: hci3: command tx timeout [ 31.465237][ T42] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.518767][ T4896] usb usb5: usbfs: interface 0 claimed by hub while 'syz.0.1' sets config #0 [ 31.521892][ T4707] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.524883][ T4896] Zero length message leads to an empty skb [ 31.528300][ T4722] Bluetooth: hci4: command tx timeout [ 31.544412][ T4707] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.588380][ T40] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.588504][ T40] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.588687][ T40] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.588704][ T40] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.588719][ T40] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.588733][ T40] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.588747][ T40] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.588760][ T40] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.588773][ T40] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.588786][ T40] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.589777][ T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.589788][ T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.604549][ T4903] lo: entered promiscuous mode [ 31.605801][ T4903] tunl0: entered promiscuous mode [ 31.606551][ T4903] gre0: entered promiscuous mode [ 31.611983][ T4903] gretap0: entered promiscuous mode [ 31.613955][ T4903] erspan0: entered promiscuous mode [ 31.615010][ T4903] ip_vti0: entered promiscuous mode [ 31.615702][ T4903] ip6_vti0: entered promiscuous mode [ 31.616517][ T4903] sit0: entered promiscuous mode [ 31.620572][ T4903] ip6tnl0: entered promiscuous mode [ 31.621435][ T4903] ip6gre0: entered promiscuous mode [ 31.622952][ T4903] syz_tun: entered promiscuous mode [ 31.625119][ T4903] ip6gretap0: entered promiscuous mode [ 31.626254][ T4903] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.626493][ T4903] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.627172][ T4903] bridge0: entered promiscuous mode [ 31.630027][ T4903] vcan0: entered promiscuous mode [ 31.632129][ T4903] bond0: entered promiscuous mode [ 31.632141][ T4903] bond_slave_0: entered promiscuous mode [ 31.632227][ T4903] bond_slave_1: entered promiscuous mode [ 31.633477][ T4903] team0: entered promiscuous mode [ 31.633486][ T4903] team_slave_0: entered promiscuous mode [ 31.633554][ T4903] team_slave_1: entered promiscuous mode [ 31.636407][ T4903] dummy0: entered promiscuous mode [ 31.640005][ T4903] nlmon0: entered promiscuous mode [ 31.640814][ T4903] batadv0: entered promiscuous mode [ 31.641941][ T4903] vxcan0: entered promiscuous mode [ 31.642542][ T4903] vxcan1: entered promiscuous mode [ 31.643050][ T4903] veth0: entered promiscuous mode [ 31.644003][ T4903] veth1: entered promiscuous mode [ 31.646882][ T4903] wg0: entered promiscuous mode [ 31.656270][ T4903] wg1: entered promiscuous mode [ 31.658903][ T4903] wg2: entered promiscuous mode [ 31.659828][ T4903] veth0_to_bridge: entered promiscuous mode [ 31.661940][ T4903] veth1_to_bridge: entered promiscuous mode [ 31.663907][ T4903] veth0_to_bond: entered promiscuous mode [ 31.665446][ T4903] veth1_to_bond: entered promiscuous mode [ 31.666976][ T4903] veth0_to_team: entered promiscuous mode [ 31.670026][ T4903] veth1_to_team: entered promiscuous mode [ 31.672002][ T4903] veth0_to_batadv: entered promiscuous mode [ 31.672897][ T4903] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 31.672934][ T4903] batadv_slave_0: entered promiscuous mode [ 31.673881][ T4903] veth1_to_batadv: entered promiscuous mode [ 31.674869][ T4903] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 31.674898][ T4903] batadv_slave_1: entered promiscuous mode [ 31.675757][ T4903] xfrm0: entered promiscuous mode [ 31.677406][ T4903] veth0_to_hsr: entered promiscuous mode [ 31.766271][ T4903] veth1_to_hsr: entered promiscuous mode [ 31.796898][ T4903] hsr0: entered promiscuous mode [ 31.824675][ T4903] veth1_virt_wifi: entered promiscuous mode [ 31.835753][ T4903] veth0_virt_wifi: entered promiscuous mode [ 31.845440][ T4903] virt_wifi0: entered promiscuous mode [ 31.872686][ T4903] vlan0: entered promiscuous mode [ 31.882798][ T4903] vlan1: entered promiscuous mode [ 31.932253][ T4903] macvlan0: entered promiscuous mode [ 32.007689][ T4903] macvlan1: entered promiscuous mode [ 32.008817][ T4903] ipvlan0: entered promiscuous mode [ 32.008872][ T4903] ipvlan1: entered promiscuous mode [ 32.037621][ T4903] macvtap0: entered promiscuous mode [ 32.038702][ T4903] macsec0: entered promiscuous mode [ 32.040232][ T4903] geneve0: entered promiscuous mode [ 32.041272][ T4903] geneve1: entered promiscuous mode [ 32.042503][ T4903] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 32.044452][ T4903] netdevsim netdevsim1 netdevsim1: entered promiscuous mode [ 32.045816][ T4903] netdevsim netdevsim1 netdevsim2: entered promiscuous mode [ 32.046867][ T4903] netdevsim netdevsim1 netdevsim3: entered promiscuous mode [ 32.068918][ T4903] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode [ 32.108663][ T4903] mac80211_hwsim hwsim7 wlan1: entered promiscuous mode [ 32.110181][ T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.110194][ T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.125784][ T4912] loop3: detected capacity change from 0 to 1024 [ 32.141680][ T67] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.141694][ T67] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.167071][ T4912] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 32.196649][ T263] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.196663][ T263] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.201787][ T263] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 32.202087][ T67] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 32.202106][ T67] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 32.202122][ T67] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 32.256869][ T4925] tmpfs: Bad value for 'mpol' [ 32.985341][ T4945] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(4.262144.0), cmd(14) [ 33.069122][ T4952] rxe_eth0 speed is unknown, defaulting to 1000 [ 33.157169][ T4959] netlink: 'syz.4.12': attribute type 21 has an invalid length. [ 33.157201][ T4959] netlink: 'syz.4.12': attribute type 6 has an invalid length. [ 33.157227][ T4959] netlink: 132 bytes leftover after parsing attributes in process `syz.4.12'. [ 33.159558][ T4715] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.199769][ T4961] loop2: detected capacity change from 0 to 128 [ 33.200208][ T4961] vfat: Unknown parameter 'dos1xfloppX' [ 33.460195][ T4971] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13'. [ 33.547626][ T4722] Bluetooth: hci3: command tx timeout [ 33.548149][ T4722] Bluetooth: hci2: command tx timeout [ 33.548294][ T4722] Bluetooth: hci0: command tx timeout [ 33.548408][ T4722] Bluetooth: hci1: command tx timeout [ 33.570078][ T4970] loop1: detected capacity change from 0 to 128 [ 33.574709][ T4970] vfat: Unknown parameter 'dos1xfloppX' [ 33.607585][ T4725] Bluetooth: hci4: command tx timeout [ 33.609068][ T4939] loop0: detected capacity change from 0 to 65536 [ 33.866082][ T4980] netlink: 20 bytes leftover after parsing attributes in process `syz.3.14'. [ 33.867964][ T4975] netlink: 4 bytes leftover after parsing attributes in process `syz.1.15'. [ 33.945505][ T4986] netlink: 44 bytes leftover after parsing attributes in process `syz.4.17'. [ 34.105469][ T4992] netlink: 20 bytes leftover after parsing attributes in process `syz.4.17'. [ 34.313088][ T4993] loop0: detected capacity change from 0 to 128 [ 34.316075][ T4993] vfat: Unknown parameter 'dos1xfloppX' [ 34.417335][ T4999] netlink: 8 bytes leftover after parsing attributes in process `syz.1.20'. [ 34.442274][ T4995] 8021q: adding VLAN 0 to HW filter on device bond1 [ 34.688533][ T4995] netlink: 8 bytes leftover after parsing attributes in process `syz.2.19'. [ 34.688551][ T4995] netlink: 4 bytes leftover after parsing attributes in process `syz.2.19'. [ 34.727149][ T5008] loop3: detected capacity change from 0 to 2048 [ 34.815233][ T5008] loop3: p4 < > [ 35.051749][ T5017] loop2: detected capacity change from 0 to 128 [ 35.058139][ T5017] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 35.080291][ T5017] fscrypt: AES-256-CBC-CTS using implementation "cts-cbc-aes-ce" [ 35.085791][ T5022] FAULT_INJECTION: forcing a failure. [ 35.085791][ T5022] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 35.085807][ T5022] CPU: 1 UID: 0 PID: 5022 Comm: syz.0.24 Not tainted syzkaller #0 PREEMPT [ 35.085818][ T5022] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 35.085823][ T5022] Call trace: [ 35.085826][ T5022] show_stack+0x2c/0x3c (C) [ 35.085845][ T5022] __dump_stack+0x30/0x40 [ 35.085858][ T5022] dump_stack_lvl+0xd8/0x12c [ 35.085869][ T5022] dump_stack+0x1c/0x28 [ 35.085880][ T5022] should_fail_ex+0x418/0x58c [ 35.085895][ T5022] should_fail+0x14/0x24 [ 35.085903][ T5022] should_fail_usercopy+0x20/0x30 [ 35.085911][ T5022] strncpy_from_user+0x48/0x388 [ 35.085922][ T5022] __arm64_sys_add_key+0x150/0x43c [ 35.085933][ T5022] invoke_syscall+0x98/0x244 [ 35.085945][ T5022] el0_svc_common+0xec/0x23c [ 35.085957][ T5022] do_el0_svc+0x4c/0x5c [ 35.085968][ T5022] el0_svc+0x60/0x1d8 [ 35.085977][ T5022] el0t_64_sync_handler+0x44/0x104 [ 35.085985][ T5022] el0t_64_sync+0x198/0x19c [ 35.122459][ T5017] fscrypt: AES-256-XTS using blk-crypto-fallback [ 35.165670][ T4707] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 35.274071][ T5047] netlink: 20 bytes leftover after parsing attributes in process `syz.2.27'. [ 35.274093][ T5047] netlink: 'syz.2.27': attribute type 2 has an invalid length. [ 35.274102][ T5047] netlink: 'syz.2.27': attribute type 2 has an invalid length. [ 35.274109][ T5047] netlink: 'syz.2.27': attribute type 1 has an invalid length. [ 35.322537][ T5053] loop2: detected capacity change from 0 to 128 [ 35.322956][ T5053] vfat: Unknown parameter 'dos1xfloppX' [ 35.356679][ T5057] loop3: detected capacity change from 0 to 128 [ 35.384576][ T5057] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 35.683798][ T4725] Bluetooth: hci1: command tx timeout [ 35.683880][ T4725] Bluetooth: hci0: command tx timeout [ 35.683936][ T4725] Bluetooth: hci2: command tx timeout [ 35.683995][ T4725] Bluetooth: hci3: command tx timeout [ 35.688428][ T4722] Bluetooth: hci4: command tx timeout [ 36.073988][ T4715] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 36.082490][ T5081] loop0: detected capacity change from 0 to 1024 [ 36.091418][ T5081] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 36.095038][ T5081] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 36.096588][ T5081] EXT4-fs (loop0): Remounting filesystem read-only [ 36.096735][ T5081] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2863: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 36.118479][ T5085] FAULT_INJECTION: forcing a failure. [ 36.118479][ T5085] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 36.118499][ T5085] CPU: 1 UID: 0 PID: 5085 Comm: syz.3.36 Not tainted syzkaller #0 PREEMPT [ 36.118509][ T5085] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 36.118514][ T5085] Call trace: [ 36.118517][ T5085] show_stack+0x2c/0x3c (C) [ 36.118547][ T5085] __dump_stack+0x30/0x40 [ 36.118560][ T5085] dump_stack_lvl+0xd8/0x12c [ 36.118571][ T5085] dump_stack+0x1c/0x28 [ 36.118582][ T5085] should_fail_ex+0x418/0x58c [ 36.118591][ T5085] should_fail+0x14/0x24 [ 36.118597][ T5085] should_fail_usercopy+0x20/0x30 [ 36.118605][ T5085] tomoyo_flush+0x138/0x67c [ 36.118615][ T5085] tomoyo_read_domain+0x370/0xbcc [ 36.118623][ T5085] tomoyo_read_control+0x264/0x428 [ 36.118631][ T5085] tomoyo_read+0x54/0x68 [ 36.118641][ T5085] do_loop_readv_writev+0x24c/0x3dc [ 36.118650][ T5085] vfs_readv+0x258/0x520 [ 36.118657][ T5085] do_preadv+0x11c/0x224 [ 36.118664][ T5085] __arm64_sys_preadv+0xac/0xc4 [ 36.118672][ T5085] invoke_syscall+0x98/0x244 [ 36.118683][ T5085] el0_svc_common+0xec/0x23c [ 36.118693][ T5085] do_el0_svc+0x4c/0x5c [ 36.118702][ T5085] el0_svc+0x60/0x1d8 [ 36.118710][ T5085] el0t_64_sync_handler+0x44/0x104 [ 36.118717][ T5085] el0t_64_sync+0x198/0x19c [ 36.319908][ T4709] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.422074][ T5106] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 36.422782][ T5105] vlan2: entered promiscuous mode [ 36.525669][ T5112] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 36.534983][ T4707] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 36.540478][ T9] kernel read not supported for file /video9 (pid: 9 comm: kworker/0:0) [ 36.578495][ T5122] vfat: Unknown parameter 'dos1xfloppX' [ 36.580247][ T5112] capability: warning: `syz.3.44' uses 32-bit capabilities (legacy support in use) [ 36.582791][ T5112] Quota error (device loop3): do_check_range: Getting dqdh_next_free 4294967294 out of range 0-6 [ 36.582836][ T5112] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 36.582861][ T5112] EXT4-fs error (device loop3): ext4_acquire_dquot:7070: comm syz.3.44: Failed to acquire dquot type 0 [ 36.613082][ T5125] bond0: left promiscuous mode [ 36.625040][ T5126] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 36.659771][ T4715] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 36.684857][ T5129] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 36.684915][ T5129] block device autoloading is deprecated and will be removed. [ 36.982807][ T5129] md: invalid raid superblock magic on ram2 [ 36.982822][ T5129] md: ram2 does not have a valid v0.0 superblock, not importing! [ 36.982852][ T5129] md: md_import_device returned -22 [ 37.000495][ T5135] EXT4-fs (loop3): too many log groups per flexible block group [ 37.000633][ T5135] EXT4-fs (loop3): failed to initialize mballoc (-12) [ 37.000813][ T5135] EXT4-fs (loop3): mount failed [ 37.015278][ T5142] process 'syz.1.53' launched './file1' with NULL argv: empty string added [ 37.057873][ T5147] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 37.121204][ T5151] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 37.158272][ T5150] FAULT_INJECTION: forcing a failure. [ 37.158272][ T5150] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 37.158296][ T5150] CPU: 1 UID: 0 PID: 5150 Comm: syz.1.56 Not tainted syzkaller #0 PREEMPT [ 37.158312][ T5150] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 37.158318][ T5150] Call trace: [ 37.158322][ T5150] show_stack+0x2c/0x3c (C) [ 37.158342][ T5150] __dump_stack+0x30/0x40 [ 37.158352][ T5150] dump_stack_lvl+0xd8/0x12c [ 37.158362][ T5150] dump_stack+0x1c/0x28 [ 37.158371][ T5150] should_fail_ex+0x418/0x58c [ 37.158379][ T5150] should_fail+0x14/0x24 [ 37.158386][ T5150] should_fail_usercopy+0x20/0x30 [ 37.158393][ T5150] _inline_copy_from_user+0x3c/0x174 [ 37.158404][ T5150] md_ioctl+0x1b40/0x23d4 [ 37.158412][ T5150] blkdev_ioctl+0x574/0x904 [ 37.158423][ T5150] __arm64_sys_ioctl+0x154/0x1cc [ 37.158431][ T5150] invoke_syscall+0x98/0x244 [ 37.158442][ T5150] el0_svc_common+0xec/0x23c [ 37.158451][ T5150] do_el0_svc+0x4c/0x5c [ 37.158461][ T5150] el0_svc+0x60/0x1d8 [ 37.158469][ T5150] el0t_64_sync_handler+0x44/0x104 [ 37.158476][ T5150] el0t_64_sync+0x198/0x19c [ 37.233911][ T4715] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 37.332876][ T5168] tmpfs: Bad value for 'mpol' [ 37.480447][ T5175] set_capacity_and_notify: 6 callbacks suppressed [ 37.480460][ T5175] loop0: detected capacity change from 0 to 512 [ 37.488383][ T5175] EXT4-fs error (device loop0): ext4_orphan_get:1403: inode #15: comm syz.0.65: iget: bad extended attribute block 134217728 [ 37.488477][ T5175] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 37.489377][ T5175] EXT4-fs error (device loop0): ext4_orphan_get:1408: comm syz.0.65: couldn't read orphan inode 15 (err -117) [ 37.489425][ T5175] loop0: lost filesystem error report for type 5 error -117 [ 37.490860][ T5175] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 37.517442][ T5175] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.697585][ T4722] Bluetooth: hci3: command tx timeout [ 37.697616][ T4722] Bluetooth: hci2: command tx timeout [ 37.697633][ T4722] Bluetooth: hci0: command tx timeout [ 37.697681][ T4725] Bluetooth: hci1: command tx timeout [ 37.711858][ T5183] cgroup: fork rejected by pids controller in /syz0 [ 37.769123][ T4722] Bluetooth: hci4: command tx timeout [ 37.987215][ T5241] capability: warning: `syz.2.68' uses deprecated v2 capabilities in a way that may be insecure [ 38.013367][ T5245] loop2: detected capacity change from 0 to 128 [ 38.043629][ T5245] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 38.533929][ T5272] loop1: detected capacity change from 0 to 128 [ 38.535679][ T5272] vfat: Unknown parameter 'dos1xfloppX' [ 38.566100][ T5275] binder: 5273:5275 BC_REQUEST_FREEZE_NOTIFICATION invalid ref 2 [ 38.566121][ T5275] binder: 5273:5275 ioctl c0306201 20000b00 returned -22 [ 38.567132][ T5275] binder: 5275 RLIMIT_NICE not set [ 38.619279][ T5277] binder: 5273:5277 got reply transaction with no transaction stack [ 38.619360][ T5277] binder: 5273:5277 transaction reply to 0:0 failed 2/29201/-71, code 0 size 72-24 line 3156 [ 38.619502][ T5277] binder: 5273:5277 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 38.619515][ T5277] binder: 5277 RLIMIT_NICE not set [ 38.619618][ T5277] binder: 5273:5277 got transaction to context manager from process owning it [ 38.619637][ T5277] binder: 5273:5277 transaction call to 5273:0 failed 3/29201/-22, code 0 size 72-24 line 3244 [ 38.701697][ T5278] __nla_validate_parse: 9 callbacks suppressed [ 38.701723][ T5278] netlink: 4 bytes leftover after parsing attributes in process `syz.1.75'. [ 38.882248][ T4707] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 39.095437][ T5292] ucma_write: process 40 (syz.2.81) changed security contexts after opening file descriptor, this is not allowed. [ 39.333935][ T5350] loop3: detected capacity change from 0 to 512 [ 39.344087][ T5350] EXT4-fs (loop3): Test dummy encryption mode enabled [ 39.344105][ T5350] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 39.344111][ T5350] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 39.344116][ T5350] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 39.359419][ T5350] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #16: comm syz.3.83: invalid indirect mapped block 4294967295 (level 0) [ 39.359447][ T5350] loop3: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 39.362045][ T5350] EXT4-fs (loop3): Remounting filesystem read-only [ 39.362286][ T5350] EXT4-fs (loop3): 1 orphan inode deleted [ 39.362297][ T5350] EXT4-fs (loop3): 1 truncate cleaned up [ 39.362829][ T5350] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.430708][ T5357] 8021q: adding VLAN 0 to HW filter on device bond1 [ 39.433517][ T5357] netlink: 8 bytes leftover after parsing attributes in process `syz.1.84'. [ 39.433535][ T5357] netlink: 4 bytes leftover after parsing attributes in process `syz.1.84'. [ 39.461020][ T4383] binder: undelivered TRANSACTION_ERROR: 29201 [ 39.724083][ T5367] loop1: detected capacity change from 0 to 128 [ 39.734148][ T5367] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 39.751864][ T4715] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.773862][ T5375] FAULT_INJECTION: forcing a failure. [ 39.773862][ T5375] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 39.773880][ T5375] CPU: 1 UID: 0 PID: 5375 Comm: syz.4.89 Not tainted syzkaller #0 PREEMPT [ 39.773889][ T5375] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 39.773894][ T5375] Call trace: [ 39.773897][ T5375] show_stack+0x2c/0x3c (C) [ 39.773916][ T5375] __dump_stack+0x30/0x40 [ 39.773928][ T5375] dump_stack_lvl+0xd8/0x12c [ 39.773937][ T5375] dump_stack+0x1c/0x28 [ 39.773947][ T5375] should_fail_ex+0x418/0x58c [ 39.773955][ T5375] should_fail+0x14/0x24 [ 39.773962][ T5375] should_fail_usercopy+0x20/0x30 [ 39.773969][ T5375] dm_ctl_ioctl+0x1e4/0xbbc [ 39.773980][ T5375] __arm64_sys_ioctl+0x154/0x1cc [ 39.773988][ T5375] invoke_syscall+0x98/0x244 [ 39.773999][ T5375] el0_svc_common+0xec/0x23c [ 39.774009][ T5375] do_el0_svc+0x4c/0x5c [ 39.774018][ T5375] el0_svc+0x60/0x1d8 [ 39.774026][ T5375] el0t_64_sync_handler+0x44/0x104 [ 39.774033][ T5375] el0t_64_sync+0x198/0x19c [ 40.057189][ T5381] netlink: 16 bytes leftover after parsing attributes in process `syz.3.88'. [ 40.057215][ T5381] netlink: 16 bytes leftover after parsing attributes in process `syz.3.88'. [ 40.096866][ T5389] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 40.096884][ T5389] block device autoloading is deprecated and will be removed. [ 40.113912][ T5381] Bluetooth: MGMT ver 1.23 [ 40.546058][ T5415] loop0: detected capacity change from 0 to 128 [ 40.547439][ T5415] vfat: Unknown parameter 'dos1xfloppX' [ 40.555010][ T4708] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 40.610495][ T4808] rxe_eth0 speed is unknown, defaulting to 1000 [ 40.663192][ T5421] xt_CT: You must specify a L4 protocol and not use inversions on it [ 40.717772][ T5424] netlink: 4 bytes leftover after parsing attributes in process `syz.0.94'. [ 41.035058][ T5436] binder: 5434:5436 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 41.035081][ T5436] binder: 5436 RLIMIT_NICE not set [ 41.035448][ T5436] netlink: 60 bytes leftover after parsing attributes in process `syz.2.98'. [ 41.090191][ T5439] loop2: detected capacity change from 0 to 512 [ 41.096544][ T5439] EXT4-fs (loop2): Test dummy encryption mode enabled [ 41.096558][ T5439] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 41.096564][ T5439] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 41.104880][ T5439] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #16: comm syz.2.99: invalid indirect mapped block 4294967295 (level 0) [ 41.104910][ T5439] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 41.106119][ T5439] EXT4-fs (loop2): Remounting filesystem read-only [ 41.107504][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 41.107521][ C0] EXT4-fs (loop2): initial error at time 41: ext4_free_branches:1023: inode 16 [ 41.107539][ C0] EXT4-fs (loop2): last error at time 41: ext4_free_branches:1023: inode 16 [ 41.121715][ T5431] loop1: detected capacity change from 0 to 512 [ 41.125114][ T5431] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 41.125126][ T5431] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 41.125134][ T5431] EXT4-fs (loop1): couldn't mount as ext3 due to feature incompatibilities [ 41.125624][ T5439] EXT4-fs (loop2): 1 orphan inode deleted [ 41.125638][ T5439] EXT4-fs (loop2): 1 truncate cleaned up [ 41.126095][ T5439] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.244240][ T5446] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 41.244259][ T5446] block device autoloading is deprecated and will be removed. [ 41.255169][ T5446] loop3: detected capacity change from 0 to 256 [ 41.269693][ T5446] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 41.571774][ T5452] FAULT_INJECTION: forcing a failure. [ 41.571774][ T5452] name failslab, interval 1, probability 0, space 0, times 1 [ 41.571794][ T5452] CPU: 0 UID: 0 PID: 5452 Comm: syz.1.104 Not tainted syzkaller #0 PREEMPT [ 41.571804][ T5452] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 41.571809][ T5452] Call trace: [ 41.571812][ T5452] show_stack+0x2c/0x3c (C) [ 41.571831][ T5452] __dump_stack+0x30/0x40 [ 41.571843][ T5452] dump_stack_lvl+0xd8/0x12c [ 41.571854][ T5452] dump_stack+0x1c/0x28 [ 41.571862][ T4707] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.571865][ T5452] should_fail_ex+0x418/0x58c [ 41.571875][ T5452] should_failslab+0xc4/0x120 [ 41.571884][ T5452] kmem_cache_alloc_noprof+0x94/0x5d4 [ 41.571893][ T5452] do_getname+0x48/0x234 [ 41.571902][ T5452] getname_flags+0x2c/0x3c [ 41.571910][ T5452] do_sys_openat2+0xd0/0x1e8 [ 41.571923][ T5452] do_sys_open+0xb0/0xe0 [ 41.571934][ T5452] __arm64_sys_openat+0xa8/0xc4 [ 41.571946][ T5452] invoke_syscall+0x98/0x244 [ 41.571958][ T5452] el0_svc_common+0xec/0x23c [ 41.571969][ T5452] do_el0_svc+0x4c/0x5c [ 41.571980][ T5452] el0_svc+0x60/0x1d8 [ 41.571989][ T5452] el0t_64_sync_handler+0x44/0x104 [ 41.571997][ T5452] el0t_64_sync+0x198/0x19c [ 41.589398][ T5453] device-mapper: table: 248:1: flakey: Feature error_writes conflicts with feature drop_writes (-EINVAL) [ 41.589412][ T5453] device-mapper: ioctl: error adding target to table [ 41.607959][ T5455] binder: 5454:5455 got transaction to context manager from process owning it [ 41.607979][ T5455] binder: 5454:5455 transaction call to 5454:0 failed 5/29201/-22, code 0 size 72-0 line 3244 [ 41.609789][ T5455] loop0: detected capacity change from 0 to 256 [ 41.632114][ T5446] FAT-fs (loop3): error, allocated dir entry found after end-of-directory marker (i_pos 1) [ 41.632131][ T5446] FAT-fs (loop3): Filesystem has been set read-only [ 41.633693][ T5461] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 41.636373][ T5446] FAT-fs (loop3): error, corrupted file size (i_pos 196, 16779264) [ 41.643818][ T5446] ip_tables: iptables: counters copy to user failed while replacing table [ 41.647387][ T5464] FAULT_INJECTION: forcing a failure. [ 41.647387][ T5464] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 41.647403][ T5464] CPU: 0 UID: 0 PID: 5464 Comm: syz.1.107 Not tainted syzkaller #0 PREEMPT [ 41.647413][ T5464] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 41.647418][ T5464] Call trace: [ 41.647421][ T5464] show_stack+0x2c/0x3c (C) [ 41.647440][ T5464] __dump_stack+0x30/0x40 [ 41.647455][ T5464] dump_stack_lvl+0xd8/0x12c [ 41.647466][ T5464] dump_stack+0x1c/0x28 [ 41.647475][ T5464] should_fail_ex+0x418/0x58c [ 41.647484][ T5464] should_fail_alloc_page+0xec/0x10c [ 41.647493][ T5464] prepare_alloc_pages+0x194/0x484 [ 41.647501][ T5464] __alloc_frozen_pages_noprof+0x180/0x578 [ 41.647510][ T5464] alloc_pages_mpol+0x1fc/0x3d0 [ 41.647526][ T5464] folio_alloc_mpol_noprof+0x4c/0x248 [ 41.647535][ T5464] vma_alloc_folio_noprof+0x100/0x1dc [ 41.647543][ T5464] vma_alloc_zeroed_movable_folio+0x74/0x88 [ 41.647554][ T5464] folio_prealloc+0x3c/0x1b0 [ 41.647561][ T5464] do_pte_missing+0x1bd0/0x28bc [ 41.647568][ T5464] handle_mm_fault+0x14d0/0x2b58 [ 41.647579][ T5464] do_page_fault+0x4c4/0xba4 [ 41.647588][ T5464] do_translation_fault+0xc4/0x114 [ 41.647597][ T5464] do_mem_abort+0x70/0x194 [ 41.647606][ T5464] el1_abort+0x50/0x74 [ 41.647613][ T5464] el1h_64_sync_handler+0xdc/0x130 [ 41.647620][ T5464] el1h_64_sync+0x78/0x7c [ 41.647628][ T5464] __arch_copy_to_user+0xd0/0x240 (P) [ 41.647636][ T5464] tomoyo_read_domain+0x370/0xbcc [ 41.647645][ T5464] tomoyo_read_control+0x264/0x428 [ 41.647653][ T5464] tomoyo_read+0x54/0x68 [ 41.647663][ T5464] do_loop_readv_writev+0x24c/0x3dc [ 41.647671][ T5464] vfs_readv+0x258/0x520 [ 41.647678][ T5464] do_preadv+0x11c/0x224 [ 41.647685][ T5464] __arm64_sys_preadv+0xac/0xc4 [ 41.647692][ T5464] invoke_syscall+0x98/0x244 [ 41.647702][ T5464] el0_svc_common+0xec/0x23c [ 41.647711][ T5464] do_el0_svc+0x4c/0x5c [ 41.647721][ T5464] el0_svc+0x60/0x1d8 [ 41.647727][ T5464] el0t_64_sync_handler+0x44/0x104 [ 41.647734][ T5464] el0t_64_sync+0x198/0x19c [ 41.652925][ T5459] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 41.693153][ T5466] binder: 5466 RLIMIT_NICE not set [ 41.696137][ T5455] binder: 5454:5455 transaction reply to 0:0 failed 6/29201/-71, code 0 size 88-24 line 3156 [ 41.698535][ T5455] binder: 5454:5455 transaction call to 5454:0 failed 7/29201/-22, code 0 size 72-24 line 3244 [ 41.731091][ T5446] netlink: 'syz.3.101': attribute type 8 has an invalid length. [ 41.982973][ T9] binder: undelivered TRANSACTION_ERROR: 29201 [ 41.989992][ T5473] md/raid:md3: device ram6 operational as raid disk 0 [ 41.996749][ T5473] md/raid:md3: not enough operational devices (2/3 failed) [ 42.014714][ T5478] EXT4-fs (loop0): Test dummy encryption mode enabled [ 42.014730][ T5478] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 42.014739][ T5478] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 42.019096][ T5478] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #16: comm syz.0.109: invalid indirect mapped block 4294967295 (level 0) [ 42.019124][ T5478] loop0: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 42.020045][ T5478] EXT4-fs (loop0): Remounting filesystem read-only [ 42.020195][ T5478] EXT4-fs (loop0): 1 orphan inode deleted [ 42.020205][ T5478] EXT4-fs (loop0): 1 truncate cleaned up [ 42.020654][ T5478] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.417683][ T5473] md/raid:md3: failed to run raid set. [ 42.417698][ T5473] md: pers->run() failed ... [ 42.442319][ T4709] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.469641][ T4707] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 42.469898][ T5486] netlink: 12 bytes leftover after parsing attributes in process `syz.0.111'. [ 42.497838][ T5490] set_capacity_and_notify: 2 callbacks suppressed [ 42.497851][ T5490] loop0: detected capacity change from 0 to 128 [ 42.498302][ T5490] vfat: Unknown parameter 'dos1xfloppX' [ 42.564782][ T5495] loop1: detected capacity change from 0 to 512 [ 42.566403][ T5495] EXT4-fs (loop1): Test dummy encryption mode enabled [ 42.566414][ T5495] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 42.566420][ T5495] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 42.575003][ T5495] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #16: comm syz.1.115: invalid indirect mapped block 4294967295 (level 0) [ 42.575024][ T5495] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 42.576056][ T5495] EXT4-fs (loop1): Remounting filesystem read-only [ 42.576199][ T5495] EXT4-fs (loop1): 1 orphan inode deleted [ 42.576209][ T5495] EXT4-fs (loop1): 1 truncate cleaned up [ 42.576666][ T5495] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.621300][ T5501] FAULT_INJECTION: forcing a failure. [ 42.621300][ T5501] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 42.621319][ T5501] CPU: 1 UID: 0 PID: 5501 Comm: syz.2.117 Not tainted syzkaller #0 PREEMPT [ 42.621329][ T5501] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 42.621334][ T5501] Call trace: [ 42.621337][ T5501] show_stack+0x2c/0x3c (C) [ 42.621353][ T5501] __dump_stack+0x30/0x40 [ 42.621364][ T5501] dump_stack_lvl+0xd8/0x12c [ 42.621373][ T5501] dump_stack+0x1c/0x28 [ 42.621383][ T5501] should_fail_ex+0x418/0x58c [ 42.621391][ T5501] should_fail+0x14/0x24 [ 42.621397][ T5501] should_fail_usercopy+0x20/0x30 [ 42.621404][ T5501] _inline_copy_from_user+0x3c/0x174 [ 42.621414][ T5501] __sys_bpf+0x1b4/0x82c [ 42.621422][ T5501] __arm64_sys_bpf+0xd0/0xec [ 42.621430][ T5501] invoke_syscall+0x98/0x244 [ 42.621440][ T5501] el0_svc_common+0xec/0x23c [ 42.621449][ T5501] do_el0_svc+0x4c/0x5c [ 42.621459][ T5501] el0_svc+0x60/0x1d8 [ 42.621467][ T5501] el0t_64_sync_handler+0x44/0x104 [ 42.621474][ T5501] el0t_64_sync+0x198/0x19c [ 42.674695][ T5502] netlink: 4 bytes leftover after parsing attributes in process `syz.0.113'. [ 42.895557][ T5506] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 42.912347][ T4708] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.930247][ T5510] netlink: 'syz.1.120': attribute type 32 has an invalid length. [ 43.242910][ T5532] netlink: 20 bytes leftover after parsing attributes in process `syz.1.127'. [ 43.464346][ T5536] loop3: detected capacity change from 0 to 256 [ 43.480661][ T5536] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000001) [ 43.480678][ T5536] FAT-fs (loop3): Filesystem has been set read-only [ 43.518619][ T5542] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 43.518635][ T5542] block device autoloading is deprecated and will be removed. [ 43.522407][ T5541] rxe_eth0 speed is unknown, defaulting to 1000 [ 43.612981][ T30] audit: type=1326 audit(43.600:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5544 comm="syz.3.133" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffaad7a228 code=0x7ffc0000 [ 43.613014][ T30] audit: type=1326 audit(43.600:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5544 comm="syz.3.133" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffaad7a228 code=0x7ffc0000 [ 43.613032][ T30] audit: type=1326 audit(43.600:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5544 comm="syz.3.133" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffaad7a228 code=0x7ffc0000 [ 43.613050][ T30] audit: type=1326 audit(43.600:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5544 comm="syz.3.133" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffaad7a228 code=0x7ffc0000 [ 43.613065][ T30] audit: type=1326 audit(43.600:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5544 comm="syz.3.133" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=425 compat=0 ip=0xffffaad7a228 code=0x7ffc0000 [ 43.613080][ T30] audit: type=1326 audit(43.600:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5544 comm="syz.3.133" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=222 compat=0 ip=0xffffaad79f20 code=0x7ffc0000 [ 43.613094][ T30] audit: type=1326 audit(43.600:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5544 comm="syz.3.133" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=222 compat=0 ip=0xffffaad79f20 code=0x7ffc0000 [ 43.613108][ T30] audit: type=1326 audit(43.600:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5544 comm="syz.3.133" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffaad7a228 code=0x7ffc0000 [ 43.613123][ T30] audit: type=1326 audit(43.600:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5544 comm="syz.3.133" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffaad7a228 code=0x7ffc0000 [ 43.614207][ T30] audit: type=1326 audit(43.600:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5544 comm="syz.3.133" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffaad7a228 code=0x7ffc0000 [ 43.637774][ T5542] md/raid:md0: device ram1 operational as raid disk 1 [ 43.637788][ T5542] md/raid:md0: device ram0 operational as raid disk 0 [ 43.646523][ T5542] md/raid:md0: raid level 5 active with 2 out of 3 devices, algorithm 2 [ 43.647915][ T5542] md0: detected capacity change from 0 to 8192 [ 43.751175][ T5552] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 43.760183][ T5554] loop0: detected capacity change from 0 to 128 [ 43.761097][ T5554] vfat: Unknown parameter 'dos1xfloppX' [ 44.029119][ T5559] netlink: 4 bytes leftover after parsing attributes in process `syz.0.136'. [ 44.053891][ T5557] loop2: detected capacity change from 0 to 8192 [ 44.074468][ T5562] loop4: detected capacity change from 0 to 128 [ 44.075958][ T5562] vfat: Unknown parameter 'dos1xfloppX' [ 44.105680][ T5557] loop2: AHDI p1 p2 p3 p4 [ 44.105766][ T5557] loop2: p1 start 2130706432 is beyond EOD, truncated [ 44.105778][ T5557] loop2: p3 start 1761607680 is beyond EOD, truncated [ 44.173288][ T5569] ip_tables: iptables: counters copy to user failed while replacing table [ 44.238187][ T5570] netlink: 4 bytes leftover after parsing attributes in process `syz.4.138'. [ 44.443137][ T5575] netlink: 8 bytes leftover after parsing attributes in process `syz.2.143'. [ 44.461176][ T5575] : renamed from bridge_slave_0 (while UP) [ 44.510041][ T5577] input: syz0 as /devices/virtual/input/input2 [ 44.631467][ T5579] loop0: detected capacity change from 0 to 512 [ 44.632140][ T5579] EXT4-fs (loop0): Test dummy encryption mode enabled [ 44.632154][ T5579] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 44.632163][ T5579] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 44.645122][ T5579] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #16: comm syz.0.145: invalid indirect mapped block 4294967295 (level 0) [ 44.645143][ T5579] loop0: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 44.648766][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 44.648779][ C1] EXT4-fs (loop0): initial error at time 44: ext4_free_branches:1023: inode 16 [ 44.648798][ C1] EXT4-fs (loop0): last error at time 44: ext4_free_branches:1023: inode 16 [ 44.659163][ T5579] EXT4-fs (loop0): Remounting filesystem read-only [ 44.659302][ T5579] EXT4-fs (loop0): 1 orphan inode deleted [ 44.659311][ T5579] EXT4-fs (loop0): 1 truncate cleaned up [ 44.659773][ T5579] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.701475][ T5586] loop2: detected capacity change from 0 to 128 [ 45.063618][ T4709] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.073810][ T5594] netlink: 16 bytes leftover after parsing attributes in process `syz.4.149'. [ 45.073832][ T5594] netlink: 16 bytes leftover after parsing attributes in process `syz.4.149'. [ 45.152022][ T5597] FAULT_INJECTION: forcing a failure. [ 45.152022][ T5597] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 45.152045][ T5597] CPU: 0 UID: 0 PID: 5597 Comm: syz.0.150 Not tainted syzkaller #0 PREEMPT [ 45.152055][ T5597] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 45.152060][ T5597] Call trace: [ 45.152063][ T5597] show_stack+0x2c/0x3c (C) [ 45.152082][ T5597] __dump_stack+0x30/0x40 [ 45.152095][ T5597] dump_stack_lvl+0xd8/0x12c [ 45.152107][ T5597] dump_stack+0x1c/0x28 [ 45.152118][ T5597] should_fail_ex+0x418/0x58c [ 45.152127][ T5597] should_fail_alloc_page+0xec/0x10c [ 45.152136][ T5597] prepare_alloc_pages+0x194/0x484 [ 45.152145][ T5597] __alloc_frozen_pages_noprof+0x180/0x578 [ 45.152155][ T5597] alloc_pages_mpol+0x1fc/0x3d0 [ 45.152165][ T5597] folio_alloc_mpol_noprof+0x4c/0x248 [ 45.152174][ T5597] vma_alloc_folio_noprof+0x100/0x1dc [ 45.152184][ T5597] vma_alloc_zeroed_movable_folio+0x74/0x88 [ 45.152197][ T5597] folio_prealloc+0x3c/0x1b0 [ 45.152205][ T5597] do_pte_missing+0x1bd0/0x28bc [ 45.152213][ T5597] handle_mm_fault+0x14d0/0x2b58 [ 45.152226][ T5597] __get_user_pages+0x82c/0x13b0 [ 45.152235][ T5597] populate_vma_page_range+0x260/0x358 [ 45.152245][ T5597] __mm_populate+0x204/0x328 [ 45.152254][ T5597] do_mlock+0x530/0x638 [ 45.152263][ T5597] __arm64_sys_mlock+0x80/0xb4 [ 45.152271][ T5597] invoke_syscall+0x98/0x244 [ 45.152283][ T5597] el0_svc_common+0xec/0x23c [ 45.152295][ T5597] do_el0_svc+0x4c/0x5c [ 45.152307][ T5597] el0_svc+0x60/0x1d8 [ 45.152315][ T5597] el0t_64_sync_handler+0x44/0x104 [ 45.152324][ T5597] el0t_64_sync+0x198/0x19c [ 45.195272][ T5601] netlink: 16 bytes leftover after parsing attributes in process `syz.1.152'. [ 45.195296][ T5601] netlink: 16 bytes leftover after parsing attributes in process `syz.1.152'. [ 45.205364][ T5599] loop3: detected capacity change from 0 to 4096 [ 45.267115][ T5599] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.304183][ T4715] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.572984][ T5609] netlink: 112 bytes leftover after parsing attributes in process `syz.3.154'. [ 45.583211][ T5612] vfat: Unknown parameter 'dos1xfloppX' [ 45.658377][ T5616] netlink: 28 bytes leftover after parsing attributes in process `syz.3.156'. [ 45.683189][ T5622] vfat: Unknown parameter 'dos1xfloppX' [ 45.758194][ T5625] netlink: 4 bytes leftover after parsing attributes in process `syz.0.155'. [ 46.044141][ T5630] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 47.066628][ T5677] FAULT_INJECTION: forcing a failure. [ 47.066628][ T5677] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 47.066668][ T5677] CPU: 1 UID: 0 PID: 5677 Comm: syz.2.176 Not tainted syzkaller #0 PREEMPT [ 47.066678][ T5677] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 47.066683][ T5677] Call trace: [ 47.066686][ T5677] show_stack+0x2c/0x3c (C) [ 47.066705][ T5677] __dump_stack+0x30/0x40 [ 47.066715][ T5677] dump_stack_lvl+0xd8/0x12c [ 47.066725][ T5677] dump_stack+0x1c/0x28 [ 47.066734][ T5677] should_fail_ex+0x418/0x58c [ 47.066743][ T5677] should_fail+0x14/0x24 [ 47.066749][ T5677] should_fail_usercopy+0x20/0x30 [ 47.066756][ T5677] _inline_copy_from_user+0x3c/0x188 [ 47.066766][ T5677] memdup_user+0x78/0xec [ 47.066773][ T5677] strndup_user+0x78/0xe0 [ 47.066780][ T5677] __arm64_sys_mount+0xdc/0x388 [ 47.066791][ T5677] invoke_syscall+0x98/0x244 [ 47.066801][ T5677] el0_svc_common+0xec/0x23c [ 47.066810][ T5677] do_el0_svc+0x4c/0x5c [ 47.066820][ T5677] el0_svc+0x60/0x1d8 [ 47.066828][ T5677] el0t_64_sync_handler+0x44/0x104 [ 47.066835][ T5677] el0t_64_sync+0x198/0x19c [ 47.557590][ T5680] set_capacity_and_notify: 3 callbacks suppressed [ 47.557602][ T5680] loop4: detected capacity change from 0 to 128 [ 47.558090][ T5680] vfat: Unknown parameter 'dos1xfloppX' [ 47.622031][ T5683] loop0: detected capacity change from 0 to 128 [ 47.622977][ T5683] vfat: Unknown parameter 'dos1xfloppX' [ 47.961786][ T5690] FAULT_INJECTION: forcing a failure. [ 47.961786][ T5690] name failslab, interval 1, probability 0, space 0, times 0 [ 47.961809][ T5690] CPU: 0 UID: 0 PID: 5690 Comm: syz.3.181 Not tainted syzkaller #0 PREEMPT [ 47.961820][ T5690] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 47.961826][ T5690] Call trace: [ 47.961829][ T5690] show_stack+0x2c/0x3c (C) [ 47.961848][ T5690] __dump_stack+0x30/0x40 [ 47.961860][ T5690] dump_stack_lvl+0xd8/0x12c [ 47.961872][ T5690] dump_stack+0x1c/0x28 [ 47.961883][ T5690] should_fail_ex+0x418/0x58c [ 47.961892][ T5690] should_failslab+0xc4/0x120 [ 47.961901][ T5690] kmem_cache_alloc_noprof+0x94/0x5d4 [ 47.961910][ T5690] locks_alloc_lock+0x28/0x12c [ 47.961922][ T5690] fcntl_getlk+0x34/0x428 [ 47.961933][ T5690] do_fcntl+0x6f4/0x15b0 [ 47.961941][ T5690] __arm64_sys_fcntl+0x118/0x1ac [ 47.961953][ T5690] invoke_syscall+0x98/0x244 [ 47.961966][ T5690] el0_svc_common+0xec/0x23c [ 47.961977][ T5690] do_el0_svc+0x4c/0x5c [ 47.961989][ T5690] el0_svc+0x60/0x1d8 [ 47.961997][ T5690] el0t_64_sync_handler+0x44/0x104 [ 47.962006][ T5690] el0t_64_sync+0x198/0x19c [ 48.000427][ T5692] loop1: detected capacity change from 0 to 512 [ 48.003002][ T5692] EXT4-fs (loop1): Test dummy encryption mode enabled [ 48.003021][ T5692] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 48.003029][ T5692] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 48.040124][ T5692] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #16: comm syz.1.182: invalid indirect mapped block 4294967295 (level 0) [ 48.040151][ T5692] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 48.040319][ T5692] EXT4-fs (loop1): Remounting filesystem read-only [ 48.040529][ T5692] EXT4-fs (loop1): 1 orphan inode deleted [ 48.040541][ T5692] EXT4-fs (loop1): 1 truncate cleaned up [ 48.041008][ T5692] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.593367][ T5704] FAULT_INJECTION: forcing a failure. [ 48.593367][ T5704] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 48.593388][ T5704] CPU: 0 UID: 0 PID: 5704 Comm: syz.4.185 Not tainted syzkaller #0 PREEMPT [ 48.593399][ T5704] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 48.593404][ T5704] Call trace: [ 48.593408][ T5704] show_stack+0x2c/0x3c (C) [ 48.593427][ T5704] __dump_stack+0x30/0x40 [ 48.593439][ T5704] dump_stack_lvl+0xd8/0x12c [ 48.593451][ T5704] dump_stack+0x1c/0x28 [ 48.593462][ T5704] should_fail_ex+0x418/0x58c [ 48.593471][ T5704] should_fail+0x14/0x24 [ 48.593478][ T5704] should_fail_usercopy+0x20/0x30 [ 48.593487][ T5704] _inline_copy_to_user+0x3c/0x158 [ 48.593498][ T5704] drm_ioctl+0x6b4/0xac8 [ 48.593506][ T5704] __arm64_sys_ioctl+0x154/0x1cc [ 48.593521][ T5704] invoke_syscall+0x98/0x244 [ 48.593534][ T5704] el0_svc_common+0xec/0x23c [ 48.593546][ T5704] do_el0_svc+0x4c/0x5c [ 48.593557][ T5704] el0_svc+0x60/0x1d8 [ 48.593566][ T5704] el0t_64_sync_handler+0x44/0x104 [ 48.593575][ T5704] el0t_64_sync+0x198/0x19c [ 48.758934][ T5714] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 48.893795][ T5718] binder_user_error: 2 callbacks suppressed [ 48.893807][ T5718] binder: 5717:5718 got transaction to context manager from process owning it [ 48.893825][ T5718] binder: 5717:5718 transaction call to 5717:0 failed 9/29201/-22, code 0 size 112-24 line 3244 [ 48.893960][ T5718] binder: 5717:5718 context manager tried to acquire desc 0 [ 48.893968][ T5718] binder: 5717:5718 ioctl c0306201 200003c0 returned -22 [ 48.894053][ T5718] binder: 5717:5718 BC_FREE_BUFFER no match for buffer at offset ffffffffdff60000 [ 48.901506][ T4880] binder: undelivered TRANSACTION_ERROR: 29201 [ 48.936562][ T4708] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.950719][ T42] IPVS: starting estimator thread 0... [ 48.974705][ T5729] loop1: detected capacity change from 0 to 128 [ 48.975210][ T5729] vfat: Unknown parameter 'dos1xfloppX' [ 49.048797][ T5726] IPVS: using max 61 ests per chain, 146400 per kthread [ 49.184432][ T5732] __nla_validate_parse: 15 callbacks suppressed [ 49.184458][ T5732] netlink: 4 bytes leftover after parsing attributes in process `syz.1.193'. [ 49.524236][ T5734] loop4: detected capacity change from 0 to 128 [ 49.525177][ T5734] vfat: Unknown parameter 'dos1xfloppX' [ 49.587147][ T5736] loop2: detected capacity change from 0 to 128 [ 49.593793][ T5736] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 49.691062][ T5739] netlink: 4 bytes leftover after parsing attributes in process `syz.4.194'. [ 50.008391][ T5748] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 50.127209][ T5755] syz.0.201 uses obsolete (PF_INET,SOCK_PACKET) [ 50.509782][ T5769] netlink: 16 bytes leftover after parsing attributes in process `syz.0.206'. [ 50.509810][ T5769] netlink: 16 bytes leftover after parsing attributes in process `syz.0.206'. [ 50.572471][ T5771] dvmrp0: entered allmulticast mode [ 50.581985][ T5771] FAULT_INJECTION: forcing a failure. [ 50.581985][ T5771] name failslab, interval 1, probability 0, space 0, times 0 [ 50.582004][ T5771] CPU: 0 UID: 0 PID: 5771 Comm: syz.3.207 Not tainted syzkaller #0 PREEMPT [ 50.582014][ T5771] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 50.582020][ T5771] Call trace: [ 50.582023][ T5771] show_stack+0x2c/0x3c (C) [ 50.582044][ T5771] __dump_stack+0x30/0x40 [ 50.582057][ T5771] dump_stack_lvl+0xd8/0x12c [ 50.582068][ T5771] dump_stack+0x1c/0x28 [ 50.582079][ T5771] should_fail_ex+0x418/0x58c [ 50.582088][ T5771] should_failslab+0xc4/0x120 [ 50.582097][ T5771] kmem_cache_alloc_noprof+0x94/0x5d4 [ 50.582106][ T5771] mas_dup_build+0x144/0xf5c [ 50.582118][ T5771] __mt_dup+0x150/0x23c [ 50.582129][ T5771] dup_mmap+0x348/0x19a8 [ 50.582139][ T5771] copy_mm+0xe8/0x328 [ 50.582148][ T5771] copy_process+0x1658/0x34c4 [ 50.582157][ T5771] kernel_clone+0x234/0x8e8 [ 50.582165][ T5771] __arm64_sys_clone+0x168/0x1d4 [ 50.582174][ T5771] invoke_syscall+0x98/0x244 [ 50.582186][ T5771] el0_svc_common+0xec/0x23c [ 50.582198][ T5771] do_el0_svc+0x4c/0x5c [ 50.582209][ T5771] el0_svc+0x60/0x1d8 [ 50.582217][ T5771] el0t_64_sync_handler+0x44/0x104 [ 50.582225][ T5771] el0t_64_sync+0x198/0x19c [ 50.907867][ T5777] md: array md3 already has disks! [ 50.931326][ T5777] md: could not open device unknown-block(1,6). [ 50.931355][ T5777] md: error, md_import_device() returned -16 [ 50.944688][ T4707] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 50.987398][ T5781] loop2: detected capacity change from 0 to 512 [ 50.989463][ T5781] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 50.989479][ T5781] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 51.001571][ T5781] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #16: comm syz.2.210: invalid indirect mapped block 4294967295 (level 0) [ 51.001604][ T5781] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 51.001782][ T5781] EXT4-fs (loop2): Remounting filesystem read-only [ 51.001914][ T5781] EXT4-fs (loop2): 1 orphan inode deleted [ 51.001922][ T5781] EXT4-fs (loop2): 1 truncate cleaned up [ 51.002455][ T5781] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.019875][ T5781] EXT4-fs (loop2): shut down requested (2) [ 51.047173][ T5783] md/raid:md3: device ram7 operational as raid disk 1 [ 51.047189][ T5783] md/raid:md3: device ram6 operational as raid disk 0 [ 51.062342][ T5783] md/raid:md3: raid level 5 active with 2 out of 3 devices, algorithm 2 [ 51.063892][ T5783] md3: detected capacity change from 0 to 8192 [ 51.123677][ T5788] Soft offlining pfn 0x120f23 at process virtual address 0x20000000 [ 51.131267][ T5788] Soft offlining pfn 0x1366c0 at process virtual address 0x20001000 [ 51.132635][ T4707] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.132663][ T5788] Soft offlining pfn 0x216bf1 at process virtual address 0x20002000 [ 51.132697][ T5788] Memory failure: 0x216bf1: unhandlable page. [ 51.160316][ T5790] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 51.240832][ T5794] loop1: detected capacity change from 0 to 128 [ 51.241295][ T5794] vfat: Unknown parameter 'dos1xfloppX' [ 51.243021][ T5783] md3: detected capacity change from 8192 to 0 [ 51.243034][ T5783] md: md3 stopped. [ 51.407677][ T5798] netlink: 4 bytes leftover after parsing attributes in process `syz.1.213'. [ 51.616106][ T5804] netlink: 24 bytes leftover after parsing attributes in process `syz.3.216'. [ 51.616405][ T5805] netlink: 24 bytes leftover after parsing attributes in process `syz.3.216'. [ 51.622665][ T5801] netlink: 28 bytes leftover after parsing attributes in process `syz.0.215'. [ 51.644723][ T5809] warning: `syz.0.218' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 51.670020][ T5814] EXT4-fs (loop3): Test dummy encryption mode enabled [ 51.670038][ T5814] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 51.670046][ T5814] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 51.676454][ T5814] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #16: comm syz.3.219: invalid indirect mapped block 4294967295 (level 0) [ 51.676477][ T5814] loop3: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 51.676673][ T5814] EXT4-fs (loop3): Remounting filesystem read-only [ 51.676827][ T5814] EXT4-fs (loop3): 1 orphan inode deleted [ 51.676834][ T5814] EXT4-fs (loop3): 1 truncate cleaned up [ 51.677278][ T5814] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 52.061241][ T4715] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.107762][ T5824] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 52.169017][ T5797] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 52.169089][ T5797] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 52.171074][ T5797] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 52.172903][ T5797] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 52.172943][ T5797] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 52.174148][ T5797] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 52.176053][ T5797] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 52.176090][ T5797] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 52.178856][ T5797] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 52.189207][ T5797] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 52.189228][ T5797] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 52.195078][ T5797] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 52.196195][ T5797] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 52.196436][ T5797] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 52.196944][ T5797] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 52.200232][ T5799] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 52.255438][ T5839] netlink: 16 bytes leftover after parsing attributes in process `syz.1.225'. [ 52.255465][ T5839] netlink: 16 bytes leftover after parsing attributes in process `syz.1.225'. [ 52.646996][ T5849] FAULT_INJECTION: forcing a failure. [ 52.646996][ T5849] name failslab, interval 1, probability 0, space 0, times 0 [ 52.647019][ T5849] CPU: 1 UID: 0 PID: 5849 Comm: syz.2.227 Not tainted syzkaller #0 PREEMPT [ 52.647033][ T5849] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 52.647038][ T5849] Call trace: [ 52.647041][ T5849] show_stack+0x2c/0x3c (C) [ 52.647060][ T5849] __dump_stack+0x30/0x40 [ 52.647070][ T5849] dump_stack_lvl+0xd8/0x12c [ 52.647080][ T5849] dump_stack+0x1c/0x28 [ 52.647089][ T5849] should_fail_ex+0x418/0x58c [ 52.647097][ T5849] should_failslab+0xc4/0x120 [ 52.647105][ T5849] kmem_cache_alloc_node_noprof+0x98/0x604 [ 52.647113][ T5849] __alloc_skb+0x1f0/0x610 [ 52.647124][ T5849] netlink_alloc_large_skb+0xd4/0x114 [ 52.647134][ T5849] netlink_sendmsg+0x4c4/0x948 [ 52.647143][ T5849] __sock_sendmsg+0xc8/0x17c [ 52.647152][ T5849] ____sys_sendmsg+0x3d0/0x6c8 [ 52.647162][ T5849] ___sys_sendmsg+0x198/0x224 [ 52.647172][ T5849] __sys_sendmsg+0x158/0x204 [ 52.647181][ T5849] __arm64_sys_sendmsg+0x88/0x9c [ 52.647190][ T5849] invoke_syscall+0x98/0x244 [ 52.647201][ T5849] el0_svc_common+0xec/0x23c [ 52.647210][ T5849] do_el0_svc+0x4c/0x5c [ 52.647220][ T5849] el0_svc+0x60/0x1d8 [ 52.647228][ T5849] el0t_64_sync_handler+0x44/0x104 [ 52.647235][ T5849] el0t_64_sync+0x198/0x19c [ 52.740966][ T5858] netlink: 'syz.2.229': attribute type 32 has an invalid length. [ 52.800702][ T5862] set_capacity_and_notify: 2 callbacks suppressed [ 52.800716][ T5862] loop2: detected capacity change from 0 to 128 [ 52.801601][ T5861] loop0: detected capacity change from 0 to 512 [ 52.804890][ T5862] vfat: Unknown parameter 'dos1xfloppX' [ 52.812714][ T5861] EXT4-fs (loop0): Test dummy encryption mode enabled [ 52.812733][ T5861] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 52.812741][ T5861] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 52.818485][ T5861] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #16: comm syz.0.230: invalid indirect mapped block 4294967295 (level 0) [ 52.818512][ T5861] loop0: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 52.819533][ T5861] EXT4-fs (loop0): Remounting filesystem read-only [ 52.819701][ T5861] EXT4-fs (loop0): 1 orphan inode deleted [ 52.819710][ T5861] EXT4-fs (loop0): 1 truncate cleaned up [ 52.824410][ T5861] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 53.179176][ T4709] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.215557][ T5876] sock: sock_timestamping_bind_phc: sock not bind to device [ 53.226576][ T5876] overlay: ./file0 is not a directory [ 53.232480][ T5876] overlay: ./file0 is not a directory [ 53.236172][ T5876] binder: 5870:5876 got transaction to context manager from process owning it [ 53.236191][ T5876] binder: 5870:5876 transaction call to 5870:0 failed 11/29201/-22, code 0 size 72-0 line 3244 [ 53.236303][ T5876] binder: 5876 RLIMIT_NICE not set [ 53.287780][ T5883] binder: 5870:5883 got reply transaction with no transaction stack [ 53.287803][ T5883] binder: 5870:5883 transaction reply to 0:0 failed 12/29201/-71, code 0 size 72-24 line 3156 [ 53.288044][ T5883] binder: 5870:5883 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 53.288058][ T5883] binder: 5883 RLIMIT_NICE not set [ 53.288154][ T5883] binder: 5870:5883 got transaction to context manager from process owning it [ 53.288168][ T5883] binder: 5870:5883 transaction call to 5870:0 failed 13/29201/-22, code 0 size 72-24 line 3244 [ 53.319956][ T4715] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 53.408741][ T5900] loop4: detected capacity change from 0 to 4096 [ 53.409134][ T5900] ext4: Unknown parameter 'nouser_xattr' [ 53.447647][ T5900] loop4: detected capacity change from 0 to 4096 [ 53.487291][ T5900] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 53.502160][ T5908] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 53.502178][ T5908] block device autoloading is deprecated and will be removed. [ 53.594198][ T5913] loop1: detected capacity change from 0 to 128 [ 53.600113][ T5913] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 53.682462][ T4722] Bluetooth: hci0: command 0x0c1a tx timeout [ 53.757635][ T4722] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 54.044013][ T9] binder: undelivered TRANSACTION_ERROR: 29201 [ 54.044037][ T9] binder: undelivered TRANSACTION_ERROR: 29201 [ 54.129634][ T5928] FAULT_INJECTION: forcing a failure. [ 54.129634][ T5928] name failslab, interval 1, probability 0, space 0, times 0 [ 54.129655][ T5928] CPU: 0 UID: 0 PID: 5928 Comm: syz.2.252 Not tainted syzkaller #0 PREEMPT [ 54.129668][ T5928] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 54.129675][ T5928] Call trace: [ 54.129678][ T5928] show_stack+0x2c/0x3c (C) [ 54.129700][ T5928] __dump_stack+0x30/0x40 [ 54.129714][ T5928] dump_stack_lvl+0xd8/0x12c [ 54.129727][ T5928] dump_stack+0x1c/0x28 [ 54.129738][ T5928] should_fail_ex+0x418/0x58c [ 54.129747][ T5928] should_failslab+0xc4/0x120 [ 54.129756][ T5928] kmem_cache_alloc_lru_noprof+0x98/0x5d8 [ 54.129766][ T5928] __d_alloc+0x50/0x600 [ 54.129776][ T5928] d_alloc_pseudo+0x2c/0xd8 [ 54.129786][ T5928] alloc_path_pseudo+0xe8/0x1d4 [ 54.129795][ T5928] alloc_file_pseudo+0xb0/0x198 [ 54.129805][ T5928] __anon_inode_getfile+0x118/0x1c8 [ 54.129814][ T5928] anon_inode_getfile+0x44/0x58 [ 54.129822][ T5928] sync_file_alloc+0x78/0x124 [ 54.129833][ T5928] sync_file_create+0x20/0x104 [ 54.129842][ T5928] dma_buf_ioctl+0x5d4/0x7c8 [ 54.129854][ T5928] __arm64_sys_ioctl+0x154/0x1cc [ 54.129862][ T5928] invoke_syscall+0x98/0x244 [ 54.129874][ T5928] el0_svc_common+0xec/0x23c [ 54.129885][ T5928] do_el0_svc+0x4c/0x5c [ 54.129897][ T5928] el0_svc+0x60/0x1d8 [ 54.129906][ T5928] el0t_64_sync_handler+0x44/0x104 [ 54.129914][ T5928] el0t_64_sync+0x198/0x19c [ 54.257528][ T4722] Bluetooth: hci4: command 0x0c1a tx timeout [ 54.257568][ T4722] Bluetooth: hci3: command 0x0c1a tx timeout [ 54.257588][ T4722] Bluetooth: hci2: command 0x0c1a tx timeout [ 54.257607][ T4722] Bluetooth: hci1: command 0x0c1a tx timeout [ 54.622481][ T5942] loop3: detected capacity change from 0 to 256 [ 54.650477][ T5942] FAULT_INJECTION: forcing a failure. [ 54.650477][ T5942] name failslab, interval 1, probability 0, space 0, times 0 [ 54.650499][ T5942] CPU: 1 UID: 0 PID: 5942 Comm: syz.3.258 Not tainted syzkaller #0 PREEMPT [ 54.650510][ T5942] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 54.650516][ T5942] Call trace: [ 54.650519][ T5942] show_stack+0x2c/0x3c (C) [ 54.650545][ T5942] __dump_stack+0x30/0x40 [ 54.650560][ T5942] dump_stack_lvl+0xd8/0x12c [ 54.650572][ T5942] dump_stack+0x1c/0x28 [ 54.650583][ T5942] should_fail_ex+0x418/0x58c [ 54.650592][ T5942] should_failslab+0xc4/0x120 [ 54.650601][ T5942] __kmalloc_cache_node_noprof+0x98/0x618 [ 54.650610][ T5942] alloc_cpumask_var_node+0x90/0x138 [ 54.650622][ T5942] clock_was_set+0xa0/0x704 [ 54.650631][ T5942] do_adjtimex+0x208/0x2f0 [ 54.650641][ T5942] posix_clock_realtime_adj+0x20/0x30 [ 54.650650][ T5942] do_clock_adjtime+0x120/0x140 [ 54.650659][ T5942] __arm64_sys_clock_adjtime+0x184/0x2b0 [ 54.650667][ T5942] invoke_syscall+0x98/0x244 [ 54.650679][ T5942] el0_svc_common+0xec/0x23c [ 54.650691][ T5942] do_el0_svc+0x4c/0x5c [ 54.650702][ T5942] el0_svc+0x60/0x1d8 [ 54.650709][ T5942] el0t_64_sync_handler+0x44/0x104 [ 54.650717][ T5942] el0t_64_sync+0x198/0x19c [ 54.650727][ T5942] => alloc_cpumask_var: failed! [ 54.650730][ T5942] CPU: 1 UID: 0 PID: 5942 Comm: syz.3.258 Not tainted syzkaller #0 PREEMPT [ 54.650739][ T5942] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 54.650743][ T5942] Call trace: [ 54.650746][ T5942] show_stack+0x2c/0x3c (C) [ 54.650758][ T5942] __dump_stack+0x30/0x40 [ 54.650769][ T5942] dump_stack_lvl+0xd8/0x12c [ 54.650781][ T5942] dump_stack+0x1c/0x28 [ 54.650792][ T5942] alloc_cpumask_var_node+0xfc/0x138 [ 54.650803][ T5942] clock_was_set+0xa0/0x704 [ 54.650811][ T5942] do_adjtimex+0x208/0x2f0 [ 54.650821][ T5942] posix_clock_realtime_adj+0x20/0x30 [ 54.650830][ T5942] do_clock_adjtime+0x120/0x140 [ 54.650839][ T5942] __arm64_sys_clock_adjtime+0x184/0x2b0 [ 54.650848][ T5942] invoke_syscall+0x98/0x244 [ 54.650859][ T5942] el0_svc_common+0xec/0x23c [ 54.650871][ T5942] do_el0_svc+0x4c/0x5c [ 54.650882][ T5942] el0_svc+0x60/0x1d8 [ 54.650890][ T5942] el0t_64_sync_handler+0x44/0x104 [ 54.650898][ T5942] el0t_64_sync+0x198/0x19c [ 54.705928][ T4715] FAT-fs (loop3): error, corrupted directory (invalid entries) [ 54.706023][ T4715] FAT-fs (loop3): Filesystem has been set read-only [ 54.706802][ T4715] FAT-fs (loop3): error, corrupted directory (invalid entries) [ 54.730068][ T4708] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 54.759932][ T5949] FAULT_INJECTION: forcing a failure. [ 54.759932][ T5949] name failslab, interval 1, probability 0, space 0, times 0 [ 54.759954][ T5949] CPU: 0 UID: 0 PID: 5949 Comm: syz.1.261 Not tainted syzkaller #0 PREEMPT [ 54.759971][ T5949] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 54.759978][ T5949] Call trace: [ 54.759981][ T5949] show_stack+0x2c/0x3c (C) [ 54.760003][ T5949] __dump_stack+0x30/0x40 [ 54.760016][ T5949] dump_stack_lvl+0xd8/0x12c [ 54.760027][ T5949] dump_stack+0x1c/0x28 [ 54.760038][ T5949] should_fail_ex+0x418/0x58c [ 54.760047][ T5949] should_failslab+0xc4/0x120 [ 54.760056][ T5949] kmem_cache_alloc_noprof+0x94/0x5d4 [ 54.760066][ T5949] security_inode_alloc+0x40/0x304 [ 54.760076][ T5949] inode_init_always_gfp+0x704/0xb20 [ 54.760088][ T5949] alloc_inode+0x9c/0x198 [ 54.760098][ T5949] sock_alloc+0x4c/0x204 [ 54.760109][ T5949] __sock_create+0x108/0x670 [ 54.760120][ T5949] __sys_socket_create+0xc0/0x11c [ 54.760130][ T5949] __sys_socket+0x44/0xec [ 54.760141][ T5949] __arm64_sys_socket+0x84/0x9c [ 54.760152][ T5949] invoke_syscall+0x98/0x244 [ 54.760164][ T5949] el0_svc_common+0xec/0x23c [ 54.760175][ T5949] do_el0_svc+0x4c/0x5c [ 54.760186][ T5949] el0_svc+0x60/0x1d8 [ 54.760195][ T5949] el0t_64_sync_handler+0x44/0x104 [ 54.760203][ T5949] el0t_64_sync+0x198/0x19c [ 54.760221][ T5949] socket: no more sockets [ 54.760409][ T4716] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.781032][ T5946] FAULT_INJECTION: forcing a failure. [ 54.781032][ T5946] name failslab, interval 1, probability 0, space 0, times 0 [ 54.781051][ T5946] CPU: 1 UID: 0 PID: 5946 Comm: syz.0.259 Not tainted syzkaller #0 PREEMPT [ 54.781062][ T5946] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 54.781069][ T5946] Call trace: [ 54.781072][ T5946] show_stack+0x2c/0x3c (C) [ 54.781094][ T5946] __dump_stack+0x30/0x40 [ 54.781106][ T5946] dump_stack_lvl+0xd8/0x12c [ 54.781118][ T5946] dump_stack+0x1c/0x28 [ 54.781129][ T5946] should_fail_ex+0x418/0x58c [ 54.781139][ T5946] should_failslab+0xc4/0x120 [ 54.781147][ T5946] kmem_cache_alloc_noprof+0x94/0x5d4 [ 54.781157][ T5946] __kernfs_new_node+0xf0/0x7d8 [ 54.781170][ T5946] kernfs_new_node+0xe8/0x130 [ 54.781181][ T5946] __kernfs_create_file+0x60/0x2e0 [ 54.781193][ T5946] sysfs_add_file_mode_ns+0x1e8/0x2a4 [ 54.781205][ T5946] sysfs_merge_group+0x164/0x2ac [ 54.781214][ T5946] dpm_sysfs_add+0xc8/0x258 [ 54.781228][ T5946] device_add+0x468/0x9e0 [ 54.781239][ T5946] nfc_register_device+0x64/0x350 [ 54.781251][ T5946] nci_register_device+0x6b8/0x7e4 [ 54.781260][ T5946] virtual_ncidev_open+0x120/0x1a0 [ 54.781270][ T5946] misc_open+0x2dc/0x338 [ 54.781278][ T5946] chrdev_open+0x398/0x3e8 [ 54.781290][ T5946] do_dentry_open+0x5c4/0xfbc [ 54.781302][ T5946] vfs_open+0x44/0x2dc [ 54.781313][ T5946] path_openat+0x1084/0x18f0 [ 54.781324][ T5946] do_file_open+0x1c8/0x2e8 [ 54.781334][ T5946] do_sys_openat2+0x114/0x1e8 [ 54.781346][ T5946] do_sys_open+0xb0/0xe0 [ 54.781358][ T5946] __arm64_sys_openat+0xa8/0xc4 [ 54.781370][ T5946] invoke_syscall+0x98/0x244 [ 54.781383][ T5946] el0_svc_common+0xec/0x23c [ 54.781394][ T5946] do_el0_svc+0x4c/0x5c [ 54.781406][ T5946] el0_svc+0x60/0x1d8 [ 54.781414][ T5946] el0t_64_sync_handler+0x44/0x104 [ 54.781422][ T5946] el0t_64_sync+0x198/0x19c [ 54.894340][ T5965] loop0: detected capacity change from 0 to 512 [ 54.900856][ T5965] EXT4-fs (loop0): Test dummy encryption mode enabled [ 54.900874][ T5965] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 54.900881][ T5965] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 54.933206][ T5965] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #16: comm syz.0.267: invalid indirect mapped block 4294967295 (level 0) [ 54.933240][ T5965] loop0: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 54.933407][ T5965] EXT4-fs (loop0): Remounting filesystem read-only [ 54.933530][ T5965] EXT4-fs (loop0): 1 orphan inode deleted [ 54.933540][ T5965] EXT4-fs (loop0): 1 truncate cleaned up [ 54.934002][ T5965] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 54.993813][ T5967] __nla_validate_parse: 5 callbacks suppressed [ 54.993830][ T5967] netlink: 20 bytes leftover after parsing attributes in process `syz.1.266'. [ 55.004398][ T42] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.069280][ T4722] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 55.070123][ T4722] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 55.070394][ T4722] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 55.108155][ T4722] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 55.108402][ T4722] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 55.129977][ T42] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.143035][ T5976] loop2: detected capacity change from 0 to 128 [ 55.231407][ T5976] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 55.233112][ T42] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.239368][ T5981] loop4: detected capacity change from 0 to 4096 [ 55.240469][ T5981] ext4: Unknown parameter 'nouser_xattr' [ 55.342483][ T42] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.367345][ T5972] rxe_eth0 speed is unknown, defaulting to 1000 [ 55.627204][ T4711] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 55.679193][ T4711] Bluetooth: hci0: command 0x0c1a tx timeout [ 55.912166][ T42] bridge_slave_1: left allmulticast mode [ 55.912196][ T42] bridge_slave_1: left promiscuous mode [ 55.912728][ T42] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.918029][ T4709] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.918577][ T42] bridge_slave_0: left allmulticast mode [ 55.918593][ T42] bridge_slave_0: left promiscuous mode [ 55.918662][ T42] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.944356][ T42] dvmrp0: left allmulticast mode [ 56.006334][ T5999] loop0: detected capacity change from 0 to 128 [ 56.013258][ T5999] vfat: Unknown parameter 'dos1xfloppX' [ 56.021171][ T4707] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 56.102636][ T42] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 56.138629][ T42] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 56.191477][ T42] bond0 (unregistering): Released all slaves [ 56.291249][ T4725] Bluetooth: hci4: command 0x0c1a tx timeout [ 56.292410][ T4722] Bluetooth: hci2: command 0x0c1a tx timeout [ 56.292601][ T4711] Bluetooth: hci1: command 0x0c1a tx timeout [ 56.381897][ T6005] netlink: 4 bytes leftover after parsing attributes in process `syz.0.276'. [ 56.394004][ T6009] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 56.420014][ T6009] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 57.013275][ T6041] netlink: 'syz.1.284': attribute type 1 has an invalid length. [ 57.013291][ T6041] netlink: 'syz.1.284': attribute type 3 has an invalid length. [ 57.013301][ T6041] netlink: 224 bytes leftover after parsing attributes in process `syz.1.284'. [ 57.029989][ T4399] 8021q: adding VLAN 0 to HW filter on device eth0 [ 57.061767][ T6049] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 57.143592][ T4711] Bluetooth: hci3: command tx timeout [ 57.430960][ T4707] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.431306][ T42] hsr_slave_0: left promiscuous mode [ 57.446912][ T42] hsr_slave_1: left promiscuous mode [ 57.447326][ T42] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 57.447352][ T42] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 57.452273][ T42] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 57.452289][ T42] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 57.487187][ T42] veth1_macvtap: left promiscuous mode [ 57.487230][ T42] veth0_macvtap: left promiscuous mode [ 57.487281][ T42] veth1_vlan: left promiscuous mode [ 57.487327][ T42] veth0_vlan: left promiscuous mode [ 57.517694][ T6060] ext4: Unknown parameter 'nouser_xattr' [ 57.688690][ T4711] Bluetooth: hci0: command 0x0c1a tx timeout [ 57.809432][ T4711] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 58.069887][ T42] team0 (unregistering): Port device team_slave_1 removed [ 58.071428][ T4711] Bluetooth: hci2: unexpected event for opcode 0x0401 [ 58.075147][ T42] team0 (unregistering): Port device team_slave_0 removed [ 58.160319][ T5972] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.160389][ T5972] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.160450][ T5972] bridge_slave_0: entered allmulticast mode [ 58.160890][ T5972] bridge_slave_0: entered promiscuous mode [ 58.170252][ T5972] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.170308][ T5972] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.170369][ T5972] bridge_slave_1: entered allmulticast mode [ 58.170912][ T5972] bridge_slave_1: entered promiscuous mode [ 58.203359][ T5972] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 58.208521][ T5972] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 58.217878][ T5972] team0: Port device team_slave_0 added [ 58.218994][ T5972] team0: Port device team_slave_1 added [ 58.228630][ T5972] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 58.228641][ T5972] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 58.228655][ T5972] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 58.230079][ T5972] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 58.230087][ T5972] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 58.230102][ T5972] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 58.235874][ T6070] FAULT_INJECTION: forcing a failure. [ 58.235874][ T6070] name fail_futex, interval 1, probability 0, space 0, times 1 [ 58.235890][ T6070] CPU: 1 UID: 0 PID: 6070 Comm: syz.4.292 Not tainted syzkaller #0 PREEMPT [ 58.235899][ T6070] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 58.235905][ T6070] Call trace: [ 58.235908][ T6070] show_stack+0x2c/0x3c (C) [ 58.235927][ T6070] __dump_stack+0x30/0x40 [ 58.235939][ T6070] dump_stack_lvl+0xd8/0x12c [ 58.235950][ T6070] dump_stack+0x1c/0x28 [ 58.235961][ T6070] should_fail_ex+0x418/0x58c [ 58.235970][ T6070] should_fail+0x14/0x24 [ 58.235977][ T6070] get_futex_key+0x1ec/0x12b0 [ 58.235989][ T6070] futex_wake+0x10c/0x594 [ 58.236000][ T6070] do_futex+0x2c4/0x378 [ 58.236010][ T6070] __arm64_sys_futex+0x2e4/0x418 [ 58.236021][ T6070] invoke_syscall+0x98/0x244 [ 58.236033][ T6070] el0_svc_common+0xec/0x23c [ 58.236044][ T6070] do_el0_svc+0x4c/0x5c [ 58.236056][ T6070] el0_svc+0x60/0x1d8 [ 58.236064][ T6070] el0t_64_sync_handler+0x44/0x104 [ 58.236072][ T6070] el0t_64_sync+0x198/0x19c [ 58.253077][ T5972] hsr_slave_0: entered promiscuous mode [ 58.262830][ T5972] hsr_slave_1: entered promiscuous mode [ 58.277826][ T4708] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 58.308780][ T6077] set_capacity_and_notify: 4 callbacks suppressed [ 58.308793][ T6077] loop1: detected capacity change from 0 to 128 [ 58.317733][ T4711] Bluetooth: hci1: command 0x0c1a tx timeout [ 58.317760][ T4711] Bluetooth: hci4: command 0x0c1a tx timeout [ 58.328780][ T6077] vfat: Unknown parameter 'dos1xfloppX' [ 58.429228][ T5972] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 58.430948][ T5972] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 58.431340][ T5972] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 58.433880][ T5972] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 58.434175][ T5972] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 58.436593][ T5972] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 58.437235][ T5972] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 58.438564][ T5972] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 58.567840][ T6098] netlink: 4 bytes leftover after parsing attributes in process `syz.1.293'. [ 58.715441][ T4399] 8021q: adding VLAN 0 to HW filter on device eth1 [ 58.729124][ T4722] Bluetooth: hci2: unexpected event 0x30 length: 4 > 3 [ 58.746491][ T5972] 8021q: adding VLAN 0 to HW filter on device bond0 [ 58.807623][ T6110] netlink: 16 bytes leftover after parsing attributes in process `syz.4.299'. [ 58.807649][ T6110] netlink: 16 bytes leftover after parsing attributes in process `syz.4.299'. [ 58.872979][ T5972] 8021q: adding VLAN 0 to HW filter on device team0 [ 58.909271][ T6115] ubi0: attaching mtd0 [ 59.032334][ T6115] ubi0: scanning is finished [ 59.033190][ T6115] ubi0: empty MTD device detected [ 59.091851][ T40] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.091881][ T40] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.100344][ T40] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.100370][ T40] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.170226][ T4722] Bluetooth: hci3: command tx timeout [ 59.192392][ T6125] loop1: detected capacity change from 0 to 128 [ 59.204836][ T6125] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 59.218749][ T6115] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 59.218770][ T6115] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 59.218784][ T6115] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 59.218793][ T6115] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 59.218800][ T6115] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 59.218807][ T6115] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 59.218813][ T6115] ubi0: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 440781777 [ 59.218821][ T6115] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 59.225439][ T6130] ubi0: background thread "ubi_bgt0d" started, PID 6130 [ 59.275163][ T6134] fscrypt: AES-128-CBC-CTS using implementation "cts-cbc-aes-ce" [ 59.277426][ T6134] fscrypt: AES-128-CBC-ESSIV using blk-crypto-fallback [ 59.300965][ T4399] 8021q: adding VLAN 0 to HW filter on device eth3 [ 59.375924][ T5972] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 59.469027][ T5972] veth0_vlan: entered promiscuous mode [ 59.471932][ T5972] veth1_vlan: entered promiscuous mode [ 59.486123][ T5972] veth0_macvtap: entered promiscuous mode [ 59.488031][ T5972] veth1_macvtap: entered promiscuous mode [ 59.494838][ T5972] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.497821][ T5972] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 59.517919][ T4399] 8021q: adding VLAN 0 to HW filter on device eth2 [ 59.532039][ T13] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.532070][ T13] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.532086][ T13] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.532101][ T13] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.551304][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.551312][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.565096][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.565110][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.647911][ T6168] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 59.690127][ T6172] loop2: detected capacity change from 0 to 128 [ 59.690545][ T6172] vfat: Unknown parameter 'dos1xfloppX' [ 59.743503][ T6175] FAULT_INJECTION: forcing a failure. [ 59.743503][ T6175] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 59.743531][ T6175] CPU: 0 UID: 0 PID: 6175 Comm: syz.4.304 Not tainted syzkaller #0 PREEMPT [ 59.743542][ T6175] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 59.743549][ T6175] Call trace: [ 59.743553][ T6175] show_stack+0x2c/0x3c (C) [ 59.743570][ T6175] __dump_stack+0x30/0x40 [ 59.743581][ T6175] dump_stack_lvl+0xd8/0x12c [ 59.743590][ T6175] dump_stack+0x1c/0x28 [ 59.743600][ T6175] should_fail_ex+0x418/0x58c [ 59.743608][ T6175] should_fail+0x14/0x24 [ 59.743614][ T6175] should_fail_usercopy+0x20/0x30 [ 59.743621][ T6175] _copy_from_iter+0x188/0x1064 [ 59.743630][ T6175] netlink_sendmsg+0x570/0x948 [ 59.743641][ T6175] __sock_sendmsg+0xc8/0x17c [ 59.743651][ T6175] ____sys_sendmsg+0x3d0/0x6c8 [ 59.743660][ T6175] ___sys_sendmsg+0x198/0x224 [ 59.743670][ T6175] __sys_sendmsg+0x158/0x204 [ 59.743688][ T6175] __arm64_sys_sendmsg+0x88/0x9c [ 59.743698][ T6175] invoke_syscall+0x98/0x244 [ 59.743709][ T6175] el0_svc_common+0xec/0x23c [ 59.743718][ T6175] do_el0_svc+0x4c/0x5c [ 59.743728][ T6175] el0_svc+0x60/0x1d8 [ 59.743735][ T6175] el0t_64_sync_handler+0x44/0x104 [ 59.743742][ T6175] el0t_64_sync+0x198/0x19c [ 59.818383][ T6182] netlink: 28 bytes leftover after parsing attributes in process `syz.4.307'. [ 59.874481][ T6183] netlink: 4 bytes leftover after parsing attributes in process `syz.2.302'. [ 60.097582][ T6187] loop4: detected capacity change from 0 to 128 [ 60.099179][ T6187] vfat: Unknown parameter 'dos1xfloppX' [ 60.116088][ T4708] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 60.148455][ T6189] loop0: detected capacity change from 0 to 4096 [ 60.150648][ T6189] ext4: Unknown parameter 'nouser_xattr' [ 60.268537][ T6193] netlink: 4 bytes leftover after parsing attributes in process `syz.4.310'. [ 60.726996][ T4722] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 60.973623][ T6207] loop4: detected capacity change from 0 to 512 [ 60.977034][ T6207] EXT4-fs (loop4): Test dummy encryption mode enabled [ 60.977058][ T6207] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 60.977065][ T6207] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 60.990023][ T6207] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #16: comm syz.4.313: invalid indirect mapped block 4294967295 (level 0) [ 60.990047][ T6207] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 60.990377][ T6207] EXT4-fs (loop4): Remounting filesystem read-only [ 60.990521][ T6207] EXT4-fs (loop4): 1 orphan inode deleted [ 60.990532][ T6207] EXT4-fs (loop4): 1 truncate cleaned up [ 60.991058][ T6207] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 61.000591][ T6211] loop5: detected capacity change from 0 to 512 [ 61.009916][ T6211] EXT4-fs (loop5): Test dummy encryption mode enabled [ 61.009936][ T6211] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 61.009944][ T6211] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 61.040400][ T6211] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #16: comm syz.5.314: invalid indirect mapped block 4294967295 (level 0) [ 61.040423][ T6211] loop5: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 61.040579][ T6211] EXT4-fs (loop5): Remounting filesystem read-only [ 61.040700][ T6211] EXT4-fs (loop5): 1 orphan inode deleted [ 61.040710][ T6211] EXT4-fs (loop5): 1 truncate cleaned up [ 61.041138][ T6211] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 61.295528][ T4722] Bluetooth: hci3: command tx timeout [ 61.339242][ T5972] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.396376][ T4716] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.544490][ T6215] psci: CPU1 killed (polled 0 ms) [ 61.550407][ T1595] ieee802154 phy0 wpan0: encryption failed: -22 [ 61.550441][ T1595] ieee802154 phy1 wpan1: encryption failed: -22 [ 61.556010][ T6224] netlink: 20 bytes leftover after parsing attributes in process `syz.5.316'. [ 61.604080][ T6226] netlink: 28 bytes leftover after parsing attributes in process `syz.0.318'. [ 61.636907][ T6228] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 61.726651][ T6203] select_fallback_rq: 166 callbacks suppressed [ 61.726666][ T6203] process 6204 (syz.2.312) no longer affine to cpu1 [ 61.733296][ T6203] process 6205 (syz.2.312) no longer affine to cpu1 [ 61.748882][ T6232] loop1: detected capacity change from 0 to 128 [ 61.760955][ T6232] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 61.975548][ T6237] netlink: 8 bytes leftover after parsing attributes in process `syz.2.322'. [ 61.975565][ T6237] netlink: 4 bytes leftover after parsing attributes in process `syz.2.322'. [ 61.984256][ T6237] 8021q: adding VLAN 0 to HW filter on device bond0 [ 61.989685][ T6237] bond1: (slave bond0): making interface the new active one [ 61.990691][ T6237] bond1: (slave bond0): Enslaving as an active interface with an up link [ 61.995294][ T4708] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 62.040093][ T6237] bond1 (unregistering): (slave bond0): Releasing active interface [ 62.044464][ T6237] bond1 (unregistering): Released all slaves [ 62.063284][ T6239] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 62.179950][ T6241] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 62.459719][ T6245] loop5: detected capacity change from 0 to 512 [ 62.467519][ T6245] EXT4-fs (loop5): Test dummy encryption mode enabled [ 62.467539][ T6245] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 62.467545][ T6245] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 62.469764][ T6245] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #16: comm syz.5.325: invalid indirect mapped block 4294967295 (level 0) [ 62.469781][ T6245] loop5: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 62.469917][ T6245] EXT4-fs (loop5): Remounting filesystem read-only [ 62.470032][ T6245] EXT4-fs (loop5): 1 orphan inode deleted [ 62.470039][ T6245] EXT4-fs (loop5): 1 truncate cleaned up [ 62.780479][ T6247] netlink: 24 bytes leftover after parsing attributes in process `syz.5.325'. [ 62.884987][ T6252] loop0: detected capacity change from 0 to 1024 [ 62.887796][ T6252] EXT4-fs: Ignoring removed bh option [ 62.892922][ T6252] EXT4-fs (loop0): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 63.859276][ T4722] Bluetooth: hci3: command tx timeout [ 64.568124][ T6257] FAULT_INJECTION: forcing a failure. [ 64.568124][ T6257] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 64.568145][ T6257] CPU: 0 UID: 0 PID: 6257 Comm: syz.5.326 Not tainted syzkaller #0 PREEMPT [ 64.568159][ T6257] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 64.568165][ T6257] Call trace: [ 64.568169][ T6257] show_stack+0x2c/0x3c (C) [ 64.568187][ T6257] __dump_stack+0x30/0x40 [ 64.568197][ T6257] dump_stack_lvl+0xd8/0x12c [ 64.568207][ T6257] dump_stack+0x1c/0x28 [ 64.568217][ T6257] should_fail_ex+0x418/0x58c [ 64.568225][ T6257] should_fail+0x14/0x24 [ 64.568231][ T6257] should_fail_usercopy+0x20/0x30 [ 64.568238][ T6257] _inline_copy_from_user+0x3c/0x174 [ 64.568246][ T6257] __arm64_sys_mount+0x19c/0x388 [ 64.568256][ T6257] invoke_syscall+0x98/0x244 [ 64.568266][ T6257] el0_svc_common+0xec/0x23c [ 64.568276][ T6257] do_el0_svc+0x4c/0x5c [ 64.568285][ T6257] el0_svc+0x60/0x1d8 [ 64.568293][ T6257] el0t_64_sync_handler+0x44/0x104 [ 64.568300][ T6257] el0t_64_sync+0x198/0x19c [ 64.868161][ T10] cfg80211: failed to load regulatory.db [ 64.974170][ T6260] loop4: detected capacity change from 0 to 4096 [ 64.980891][ T6260] ext4: Unknown parameter 'nouser_xattr' [ 65.116908][ T6264] netlink: 28 bytes leftover after parsing attributes in process `syz.2.330'. [ 65.131664][ T6260] loop4: detected capacity change from 0 to 4096 [ 65.141397][ T4709] EXT4-fs unmount: 3 callbacks suppressed [ 65.141411][ T4709] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.153080][ T6260] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 65.176036][ T6271] loop5: detected capacity change from 0 to 2048 [ 65.296089][ T6271] EXT4-fs error (device loop5): ext4_ext_check_inode:521: inode #2: comm syz.5.331: pblk 0 bad header/extent: eh_entries is 0 but eh_depth is > 0 - magic f30a, entries 0, max 4(4), depth 5(5) [ 65.296114][ T6271] loop5: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117 [ 65.296281][ T6271] EXT4-fs (loop5): get root inode failed [ 65.296288][ T6271] EXT4-fs (loop5): mount failed [ 66.220660][ T4722] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 66.241933][ T6276] ======================================================= [ 66.241933][ T6276] WARNING: The mand mount option has been deprecated and [ 66.241933][ T6276] and is ignored by this kernel. Remove the mand [ 66.241933][ T6276] option from the mount to silence this warning. [ 66.241933][ T6276] ======================================================= [ 66.265073][ T6274] FAULT_INJECTION: forcing a failure. [ 66.265073][ T6274] name failslab, interval 1, probability 0, space 0, times 0 [ 66.265093][ T6274] CPU: 0 UID: 0 PID: 6274 Comm: syz.2.334 Not tainted syzkaller #0 PREEMPT [ 66.265103][ T6274] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 66.265109][ T6274] Call trace: [ 66.265112][ T6274] show_stack+0x2c/0x3c (C) [ 66.265131][ T6274] __dump_stack+0x30/0x40 [ 66.265143][ T6274] dump_stack_lvl+0xd8/0x12c [ 66.265158][ T6274] dump_stack+0x1c/0x28 [ 66.265170][ T6274] should_fail_ex+0x418/0x58c [ 66.265178][ T6274] should_failslab+0xc4/0x120 [ 66.265187][ T6274] kmem_cache_alloc_noprof+0x94/0x5d4 [ 66.265196][ T6274] security_file_alloc+0x3c/0x300 [ 66.265207][ T6274] init_file+0x90/0x28c [ 66.265216][ T6274] alloc_empty_file+0x80/0x1cc [ 66.265225][ T6274] alloc_file+0x58/0x98 [ 66.265234][ T6274] alloc_file_pseudo+0xe0/0x198 [ 66.265242][ T6274] sock_alloc_file+0xb4/0x1ac [ 66.265254][ T6274] __sys_socket+0x90/0xec [ 66.265264][ T6274] __arm64_sys_socket+0x84/0x9c [ 66.265275][ T6274] invoke_syscall+0x98/0x244 [ 66.265287][ T6274] el0_svc_common+0xec/0x23c [ 66.265299][ T6274] do_el0_svc+0x4c/0x5c [ 66.265311][ T6274] el0_svc+0x60/0x1d8 [ 66.265319][ T6274] el0t_64_sync_handler+0x44/0x104 [ 66.265327][ T6274] el0t_64_sync+0x198/0x19c [ 66.708326][ T6289] netlink: 20 bytes leftover after parsing attributes in process `syz.5.335'. [ 66.734203][ T30] audit: type=1807 audit(66.988:178): action=appraise func=F res=0 [ 66.736782][ T30] audit: type=1802 audit(66.988:179): pid=6274 uid=0 auid=4294967295 ses=4294967295 subj=_ op=update_policy cause=invalid-policy comm="syz.2.334" res=0 errno=0 [ 66.754845][ T6292] netlink: 44 bytes leftover after parsing attributes in process `syz.0.336'. [ 66.769595][ T6292] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.769992][ T6292] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.803018][ T6274] netlink: 4 bytes leftover after parsing attributes in process `syz.2.334'. [ 66.803571][ T6273] ima: policy update failed [ 66.803899][ T30] audit: type=1802 audit(67.059:180): pid=6273 uid=0 auid=4294967295 ses=4294967295 subj=_ op=policy_update cause=failed comm="syz.2.334" res=0 errno=0 [ 66.934683][ T4716] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.045200][ T6296] evm: overlay not supported [ 67.062295][ T6300] loop0: detected capacity change from 0 to 512 [ 67.066523][ T6300] EXT4-fs (loop0): Test dummy encryption mode enabled [ 67.066542][ T6300] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 67.066552][ T6300] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 67.081951][ T6300] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #16: comm syz.0.340: invalid indirect mapped block 4294967295 (level 0) [ 67.081973][ T6300] loop0: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 67.082227][ T6300] EXT4-fs (loop0): Remounting filesystem read-only [ 67.082369][ T6300] EXT4-fs (loop0): 1 orphan inode deleted [ 67.082378][ T6300] EXT4-fs (loop0): 1 truncate cleaned up [ 67.137611][ T6300] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 67.498853][ T6310] netlink: 20 bytes leftover after parsing attributes in process `syz.5.343'. [ 67.499961][ T6306] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 67.818991][ T6314] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 67.819010][ T6314] block device autoloading is deprecated and will be removed. [ 67.903391][ T6317] FAULT_INJECTION: forcing a failure. [ 67.903391][ T6317] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 67.903414][ T6317] CPU: 0 UID: 0 PID: 6317 Comm: syz.2.346 Not tainted syzkaller #0 PREEMPT [ 67.903426][ T6317] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 67.903431][ T6317] Call trace: [ 67.903435][ T6317] show_stack+0x2c/0x3c (C) [ 67.903455][ T6317] __dump_stack+0x30/0x40 [ 67.903466][ T6317] dump_stack_lvl+0xd8/0x12c [ 67.903475][ T6317] dump_stack+0x1c/0x28 [ 67.903485][ T6317] should_fail_ex+0x418/0x58c [ 67.903492][ T6317] should_fail+0x14/0x24 [ 67.903499][ T6317] should_fail_usercopy+0x20/0x30 [ 67.903506][ T6317] _inline_copy_from_user+0x3c/0x174 [ 67.903525][ T6317] copy_msghdr_from_user+0xb8/0x194 [ 67.903533][ T6317] ___sys_sendmsg+0x14c/0x224 [ 67.903543][ T6317] __sys_sendmsg+0x158/0x204 [ 67.903553][ T6317] __arm64_sys_sendmsg+0x88/0x9c [ 67.903562][ T6317] invoke_syscall+0x98/0x244 [ 67.903573][ T6317] el0_svc_common+0xec/0x23c [ 67.903582][ T6317] do_el0_svc+0x4c/0x5c [ 67.903592][ T6317] el0_svc+0x60/0x1d8 [ 67.903599][ T6317] el0t_64_sync_handler+0x44/0x104 [ 67.903606][ T6317] el0t_64_sync+0x198/0x19c [ 67.921226][ T4709] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.010526][ T6314] md/raid:md5: device ram11 operational as raid disk 1 [ 68.010543][ T6314] md/raid:md5: device ram10 operational as raid disk 0 [ 68.038599][ T6321] netlink: 16 bytes leftover after parsing attributes in process `syz.0.347'. [ 68.038625][ T6321] netlink: 16 bytes leftover after parsing attributes in process `syz.0.347'. [ 68.060445][ T6314] md/raid:md5: raid level 5 active with 2 out of 3 devices, algorithm 2 [ 68.066969][ T6314] md5: detected capacity change from 0 to 8192 [ 68.140101][ T6326] loop0: detected capacity change from 0 to 512 [ 68.147775][ T6326] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 68.147791][ T6326] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 68.150969][ T6326] EXT4-fs (loop0): can't mount with journal_checksum, fs mounted w/o journal [ 68.246196][ T6326] ip_tables: iptables: counters copy to user failed while replacing table [ 68.301334][ T6330] loop2: detected capacity change from 0 to 128 [ 68.304233][ T4722] Bluetooth: hci2: unexpected event for opcode 0x202f [ 68.317543][ T6330] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 68.340860][ T6319] md5: detected capacity change from 8192 to 0 [ 68.340875][ T6319] md: md5 stopped. [ 68.392261][ T4707] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 68.510719][ T6334] md/raid:md2: device ram5 operational as raid disk 1 [ 68.510735][ T6334] md/raid:md2: device ram4 operational as raid disk 0 [ 68.527096][ T6334] md/raid:md2: raid level 5 active with 2 out of 3 devices, algorithm 2 [ 68.528242][ T6334] md2: detected capacity change from 0 to 8192 [ 68.529138][ T6341] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 68.895604][ T6358] netlink: 16 bytes leftover after parsing attributes in process `syz.5.359'. [ 68.895627][ T6358] netlink: 16 bytes leftover after parsing attributes in process `syz.5.359'. [ 68.962296][ T6362] loop1: detected capacity change from 0 to 128 [ 68.997276][ T6362] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 69.074828][ T6354] FAULT_INJECTION: forcing a failure. [ 69.074828][ T6354] name failslab, interval 1, probability 0, space 0, times 0 [ 69.074848][ T6354] CPU: 0 UID: 0 PID: 6354 Comm: syz.4.358 Not tainted syzkaller #0 PREEMPT [ 69.074858][ T6354] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 69.074864][ T6354] Call trace: [ 69.074868][ T6354] show_stack+0x2c/0x3c (C) [ 69.074890][ T6354] __dump_stack+0x30/0x40 [ 69.074903][ T6354] dump_stack_lvl+0xd8/0x12c [ 69.074915][ T6354] dump_stack+0x1c/0x28 [ 69.074927][ T6354] should_fail_ex+0x418/0x58c [ 69.074936][ T6354] should_failslab+0xc4/0x120 [ 69.074945][ T6354] kmem_cache_alloc_noprof+0x94/0x5d4 [ 69.074955][ T6354] seq_open+0x60/0x13c [ 69.074963][ T6354] single_open+0xfc/0x188 [ 69.074971][ T6354] single_open_net+0x7c/0xc8 [ 69.074981][ T6354] proc_reg_open+0x220/0x468 [ 69.074989][ T6354] do_dentry_open+0x5c4/0xfbc [ 69.075001][ T6354] vfs_open+0x44/0x2dc [ 69.075012][ T6354] path_openat+0x1084/0x18f0 [ 69.075022][ T6354] do_file_open+0x1c8/0x2e8 [ 69.075032][ T6354] do_sys_openat2+0x114/0x1e8 [ 69.075044][ T6354] do_sys_open+0xb0/0xe0 [ 69.075055][ T6354] __arm64_sys_openat+0xa8/0xc4 [ 69.075067][ T6354] invoke_syscall+0x98/0x244 [ 69.075079][ T6354] el0_svc_common+0xec/0x23c [ 69.075091][ T6354] do_el0_svc+0x4c/0x5c [ 69.075102][ T6354] el0_svc+0x60/0x1d8 [ 69.075111][ T6354] el0t_64_sync_handler+0x44/0x104 [ 69.075119][ T6354] el0t_64_sync+0x198/0x19c [ 69.114257][ T4708] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 69.483251][ T4722] Bluetooth: hci1: connection err: -111 [ 69.521957][ T6383] netlink: 8 bytes leftover after parsing attributes in process `syz.2.368'. [ 69.567380][ T6385] netlink: 'syz.5.369': attribute type 2 has an invalid length. [ 69.567399][ T6385] netlink: 'syz.5.369': attribute type 2 has an invalid length. [ 69.567408][ T6385] netlink: 'syz.5.369': attribute type 1 has an invalid length. [ 69.626284][ T6387] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 70.020810][ T6399] loop2: detected capacity change from 0 to 128 [ 70.033613][ T6399] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 70.066192][ T6402] loop5: detected capacity change from 0 to 512 [ 70.075117][ T6402] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 70.075127][ T6402] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 70.075262][ T6402] EXT4-fs (loop5): can't mount with journal_checksum, fs mounted w/o journal [ 70.095800][ T4707] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 70.127407][ T6402] ip_tables: iptables: counters copy to user failed while replacing table [ 70.242797][ T6407] loop5: detected capacity change from 0 to 128 [ 70.243277][ T6407] vfat: Unknown parameter 'dos1xfloppX' [ 70.537227][ T6408] __nla_validate_parse: 5 callbacks suppressed [ 70.537244][ T6408] netlink: 4 bytes leftover after parsing attributes in process `syz.5.378'. [ 70.776285][ T6419] lo: left promiscuous mode [ 70.862035][ T6424] FAULT_INJECTION: forcing a failure. [ 70.862035][ T6424] name failslab, interval 1, probability 0, space 0, times 0 [ 70.862063][ T6424] CPU: 0 UID: 0 PID: 6424 Comm: syz.1.381 Not tainted syzkaller #0 PREEMPT [ 70.862075][ T6424] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 70.862080][ T6424] Call trace: [ 70.862084][ T6424] show_stack+0x2c/0x3c (C) [ 70.862106][ T6424] __dump_stack+0x30/0x40 [ 70.862118][ T6424] dump_stack_lvl+0xd8/0x12c [ 70.862130][ T6424] dump_stack+0x1c/0x28 [ 70.862141][ T6424] should_fail_ex+0x418/0x58c [ 70.862150][ T6424] should_failslab+0xc4/0x120 [ 70.862159][ T6424] kmem_cache_alloc_noprof+0x94/0x5d4 [ 70.862171][ T6424] do_getname+0x48/0x234 [ 70.862180][ T6424] getname_flags+0x2c/0x3c [ 70.862189][ T6424] do_sys_openat2+0xd0/0x1e8 [ 70.862201][ T6424] do_sys_open+0xb0/0xe0 [ 70.862213][ T6424] __arm64_sys_openat+0xa8/0xc4 [ 70.862224][ T6424] invoke_syscall+0x98/0x244 [ 70.862236][ T6424] el0_svc_common+0xec/0x23c [ 70.862248][ T6424] do_el0_svc+0x4c/0x5c [ 70.862259][ T6424] el0_svc+0x60/0x1d8 [ 70.862268][ T6424] el0t_64_sync_handler+0x44/0x104 [ 70.862276][ T6424] el0t_64_sync+0x198/0x19c [ 71.369838][ T6440] netlink: 224 bytes leftover after parsing attributes in process `syz.5.385'. [ 71.511876][ T6446] loop5: detected capacity change from 0 to 128 [ 71.700132][ T6446] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 72.035281][ T6453] usb usb1: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 72.035983][ T30] audit: type=1326 audit(72.356:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6447 comm="syz.2.388" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffafd7a228 code=0x0 [ 72.050235][ T5972] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 73.235579][ T6478] loop1: detected capacity change from 0 to 128 [ 73.238633][ T6478] vfat: Unknown parameter 'dos1xfloppX' [ 73.254348][ T6480] loop2: detected capacity change from 0 to 128 [ 73.365758][ T6481] fuse: Bad value for 'fd' [ 73.529799][ T6484] netlink: 4 bytes leftover after parsing attributes in process `syz.1.395'. [ 73.768961][ T6491] netlink: 224 bytes leftover after parsing attributes in process `syz.2.397'. [ 73.805528][ T6495] loop0: detected capacity change from 0 to 2048 [ 73.822087][ T6495] loop0: p4 < > [ 73.839219][ T6492] loop5: detected capacity change from 0 to 512 [ 73.867918][ T6498] netlink: 20 bytes leftover after parsing attributes in process `syz.2.399'. [ 73.948971][ T6498] binder: 6497:6498 got transaction to context manager from process owning it [ 73.948996][ T6498] binder: 6497:6498 transaction call to 6497:0 failed 16/29201/-22, code 0 size 72-0 line 3244 [ 74.251224][ T4711] Bluetooth: hci3: command 0x0405 tx timeout [ 74.290252][ T6506] binder: 6506 RLIMIT_NICE not set [ 74.296384][ T6506] binder: 6497:6506 got reply transaction with no transaction stack [ 74.296404][ T6506] binder: 6497:6506 transaction reply to 0:0 failed 17/29201/-71, code 0 size 72-24 line 3156 [ 74.300433][ T6506] binder: 6497:6506 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 74.300448][ T6506] binder: 6506 RLIMIT_NICE not set [ 74.331174][ T6510] loop1: detected capacity change from 0 to 128 [ 74.347178][ T6510] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 74.417550][ T4708] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 74.551866][ T6518] loop5: detected capacity change from 0 to 512 [ 74.564589][ T6518] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 74.564603][ T6518] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 74.579447][ T6518] EXT4-fs (loop5): 1 truncate cleaned up [ 74.586624][ T6518] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 74.693958][ T6518] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 74.694156][ T6518] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 74.706911][ T4808] binder: undelivered TRANSACTION_ERROR: 29201 [ 74.744096][ T6528] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(4.4261281791.0), cmd(14) [ 74.762215][ T6531] ext4: Unknown parameter 'fsname' [ 75.093737][ T4711] Bluetooth: hci0: unexpected event for opcode 0x0000 [ 75.146869][ T6546] netlink: 224 bytes leftover after parsing attributes in process `syz.0.409'. [ 75.149693][ T6545] set_capacity_and_notify: 1 callbacks suppressed [ 75.149702][ T6545] loop1: detected capacity change from 0 to 512 [ 75.179454][ T6545] EXT4-fs (loop1): Test dummy encryption mode enabled [ 75.179476][ T6545] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 75.179482][ T6545] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 75.182127][ T6545] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #16: comm syz.1.410: invalid indirect mapped block 4294967295 (level 0) [ 75.182145][ T6545] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 75.182339][ T6545] EXT4-fs (loop1): Remounting filesystem read-only [ 75.182454][ T6545] EXT4-fs (loop1): 1 orphan inode deleted [ 75.182464][ T6545] EXT4-fs (loop1): 1 truncate cleaned up [ 75.184138][ T6545] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 75.271600][ T6552] loop0: detected capacity change from 0 to 128 [ 75.279937][ T6552] vfat: Unknown parameter 'dos1xfloppX' [ 75.567351][ T6555] netlink: 4 bytes leftover after parsing attributes in process `syz.0.411'. [ 75.595617][ T5972] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.705696][ T6560] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 75.795660][ T6563] loop4: detected capacity change from 0 to 128 [ 75.796468][ T6563] vfat: Unknown parameter 'dos1xfloppX' [ 76.414822][ T6570] netlink: 4 bytes leftover after parsing attributes in process `syz.4.414'. [ 76.504216][ T6573] loop0: detected capacity change from 0 to 128 [ 76.504689][ T6573] vfat: Unknown parameter 'dos1xfloppX' [ 76.601925][ T6574] md: couldn't update array info. -22 [ 76.788926][ T6575] netlink: 4 bytes leftover after parsing attributes in process `syz.0.415'. [ 76.832270][ T4708] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.947780][ T6586] loop4: detected capacity change from 0 to 128 [ 76.951320][ T6585] netlink: 224 bytes leftover after parsing attributes in process `syz.1.421'. [ 76.960455][ T6586] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 77.053770][ T4716] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 77.146946][ T6600] loop4: detected capacity change from 0 to 512 [ 77.154764][ T6600] EXT4-fs (loop4): Test dummy encryption mode enabled [ 77.154775][ T6600] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 77.154781][ T6600] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 77.165393][ T6600] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #16: comm syz.4.425: invalid indirect mapped block 4294967295 (level 0) [ 77.165420][ T6600] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 77.165699][ T6600] EXT4-fs (loop4): Remounting filesystem read-only [ 77.165841][ T6600] EXT4-fs (loop4): 1 orphan inode deleted [ 77.165849][ T6600] EXT4-fs (loop4): 1 truncate cleaned up [ 77.174907][ T6600] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 77.567631][ T6617] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 77.567648][ T6617] block device autoloading is deprecated and will be removed. [ 78.602939][ T4716] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.613465][ T6617] md/raid:md5: device ram11 operational as raid disk 1 [ 78.613477][ T6617] md/raid:md5: device ram10 operational as raid disk 0 [ 78.631080][ T6617] md/raid:md5: raid level 5 active with 2 out of 3 devices, algorithm 2 [ 78.632036][ T6617] md5: detected capacity change from 0 to 8192 [ 79.372500][ T6628] loop0: detected capacity change from 0 to 128 [ 79.593377][ T6628] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 79.623878][ T6628] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 79.656445][ T6638] Buffer I/O error on dev md5, logical block 16, async page read [ 79.683694][ T6626] overlayfs: upper fs needs to support d_type. [ 79.703354][ T6639] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 80.003968][ T4709] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 80.089202][ T6629] ============================================================================= [ 80.089216][ T6629] BUG raid5-md5 (Not tainted): Objects remaining on __kmem_cache_shutdown() [ 80.089225][ T6629] ----------------------------------------------------------------------------- [ 80.089225][ T6629] [ 80.090046][ T6629] Object 0x00000000538d308b @offset=4872 [ 80.090059][ T6629] Slab 0x00000000572b95d0 objects=20 used=1 fp=0x0000000051bc7074 flags=0x5ffc00000000240(workingset|head|node=0|zone=2|lastcpupid=0x7ff) [ 80.090077][ T6629] Disabling lock debugging due to kernel taint [ 80.090144][ T6629] ------------[ cut here ]------------ [ 80.090148][ T6629] WARNING: mm/slub.c:1268 at __slab_err+0x1c/0x2c, CPU#0: syz.5.431/6629 [ 80.102560][ T6629] Modules linked in: [ 80.103222][ T6629] CPU: 0 UID: 0 PID: 6629 Comm: syz.5.431 Tainted: G B syzkaller #0 PREEMPT [ 80.105046][ T6629] Tainted: [B]=BAD_PAGE [ 80.105800][ T6629] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 80.107561][ T6629] pstate: 634000c5 (nZCv daIF +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 80.108976][ T6629] pc : __slab_err+0x1c/0x2c [ 80.109826][ T6629] lr : __slab_err+0x1c/0x2c [ 80.110642][ T6629] sp : ffff800093a276f0 [ 80.111403][ T6629] x29: ffff800093a276f0 x28: 0000000000005910 x27: fffffdffc35c5e10 [ 80.112831][ T6629] x26: ffff0000f1217ee0 x25: 000000000000000a x24: fffffdffc3c48410 [ 80.114303][ T6629] x23: ffff800089a91140 x22: ffff80008f4e8a70 x21: ffff0000f1210000 [ 80.115766][ T6629] x20: 0000000000004c00 x19: ffff0000c9c39140 x18: 00000000ffffffff [ 80.117196][ T6629] x17: 2d2d2d2d2d2d2d2d x16: 2d2d2d2d2d2d2d2d x15: 3034323030303030 [ 80.118637][ T6629] x14: 0000000000001131 x13: 0000000000000001 x12: 0000000000000000 [ 80.120197][ T6629] x11: 0000000000000000 x10: 0000000000080000 x9 : 0000000000080000 [ 80.121752][ T6629] x8 : ffff8000a86b4000 x7 : 0000000000000001 x6 : ffff800080483084 [ 80.123287][ T6629] x5 : 0000000000000000 x4 : 0000000000000000 x3 : ffff8000802f3854 [ 80.124822][ T6629] x2 : 0000000000000000 x1 : ffff0000d6261d80 x0 : 0000000000000001 [ 80.126348][ T6629] Call trace: [ 80.126969][ T6629] __slab_err+0x1c/0x2c (P) [ 80.127811][ T6629] __kmem_cache_shutdown+0x320/0x434 [ 80.128838][ T6629] kmem_cache_destroy+0x90/0x160 [ 80.129776][ T6629] free_conf+0x1d8/0x540 [ 80.130554][ T6629] raid5_free+0x24/0x60 [ 80.131306][ T6629] __md_stop+0xc0/0x154 [ 80.132089][ T6629] do_md_stop+0x284/0xe6c [ 80.132892][ T6629] md_ioctl+0x14dc/0x23d4 [ 80.133685][ T6629] blkdev_ioctl+0x574/0x904 [ 80.134504][ T6629] __arm64_sys_ioctl+0x154/0x1cc [ 80.135424][ T6629] invoke_syscall+0x98/0x244 [ 80.136257][ T6629] el0_svc_common+0xec/0x23c [ 80.137106][ T6629] do_el0_svc+0x4c/0x5c [ 80.137888][ T6629] el0_svc+0x60/0x1d8 [ 80.138642][ T6629] el0t_64_sync_handler+0x44/0x104 [ 80.139587][ T6629] el0t_64_sync+0x198/0x19c [ 80.140428][ T6629] irq event stamp: 6386 [ 80.141192][ T6629] hardirqs last enabled at (6385): [] _raw_spin_unlock_irqrestore+0x38/0x98 [ 80.143044][ T6629] hardirqs last disabled at (6386): [] _raw_spin_lock_irq+0x28/0x70 [ 80.144793][ T6629] softirqs last enabled at (6140): [] handle_softirqs+0xb2c/0xcbc [ 80.146539][ T6629] softirqs last disabled at (6115): [] __do_softirq+0x14/0x20 [ 80.148202][ T6629] ---[ end trace 0000000000000000 ]--- [ 80.149201][ T6629] ============================================================================= [ 80.149217][ T6629] BUG raid5-md5 (Tainted: G B W ): Objects remaining on __kmem_cache_shutdown() [ 80.149227][ T6629] ----------------------------------------------------------------------------- [ 80.149227][ T6629] [ 80.149236][ T6629] Object 0x000000008376b260 @offset=16240 [ 80.149243][ T6629] Slab 0x00000000007e8766 objects=20 used=1 fp=0x00000000cd5ba4f0 flags=0x5ffc00000000240(workingset|head|node=0|zone=2|lastcpupid=0x7ff) [ 80.149314][ T6629] ------------[ cut here ]------------ [ 80.149317][ T6629] WARNING: mm/slub.c:1268 at __slab_err+0x1c/0x2c, CPU#0: syz.5.431/6629 [ 80.160188][ T6629] Modules linked in: [ 80.160844][ T6629] CPU: 0 UID: 0 PID: 6629 Comm: syz.5.431 Tainted: G B W syzkaller #0 PREEMPT [ 80.162595][ T6629] Tainted: [B]=BAD_PAGE, [W]=WARN [ 80.163495][ T6629] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 80.165571][ T6629] pstate: 634000c5 (nZCv daIF +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 80.167097][ T6629] pc : __slab_err+0x1c/0x2c [ 80.167931][ T6629] lr : __slab_err+0x1c/0x2c [ 80.168745][ T6629] sp : ffff800093a276f0 [ 80.169505][ T6629] x29: ffff800093a276f0 x28: 0000000000005910 x27: ffff0000dd40d348 [ 80.170924][ T6629] x26: ffff0000d717fee0 x25: 000000000000000a x24: fffffdffc35c5e10 [ 80.172337][ T6629] x23: ffff800089a91140 x22: ffff80008f4e8a70 x21: ffff0000d7178000 [ 80.173754][ T6629] x20: 0000000000004c00 x19: ffff0000c9c39140 x18: 00000000ffffffff [ 80.175148][ T6629] x17: 2d2d2d2d2d2d2d2d x16: 2d2d2d2d2d2d2d2d x15: 3034323030303030 [ 80.176595][ T6629] x14: 0000000000001181 x13: 0000000000000001 x12: 0000000000000000 [ 80.178080][ T6629] x11: 0000000000000000 x10: 0000000000080000 x9 : 0000000000080000 [ 80.179561][ T6629] x8 : ffff8000a86b4000 x7 : 0000000000000001 x6 : ffff800080483084 [ 80.181004][ T6629] x5 : 0000000000000000 x4 : 0000000000000000 x3 : ffff8000802f3854 [ 80.182589][ T6629] x2 : 0000000000000000 x1 : ffff0000d6261d80 x0 : 0000000000000001 [ 80.184085][ T6629] Call trace: [ 80.184700][ T6629] __slab_err+0x1c/0x2c (P) [ 80.185547][ T6629] __kmem_cache_shutdown+0x320/0x434 [ 80.186562][ T6629] kmem_cache_destroy+0x90/0x160 [ 80.187499][ T6629] free_conf+0x1d8/0x540 [ 80.188294][ T6629] raid5_free+0x24/0x60 [ 80.189060][ T6629] __md_stop+0xc0/0x154 [ 80.189826][ T6629] do_md_stop+0x284/0xe6c [ 80.190634][ T6629] md_ioctl+0x14dc/0x23d4 [ 80.191436][ T6629] blkdev_ioctl+0x574/0x904 [ 80.192271][ T6629] __arm64_sys_ioctl+0x154/0x1cc [ 80.193194][ T6629] invoke_syscall+0x98/0x244 [ 80.194039][ T6629] el0_svc_common+0xec/0x23c [ 80.194890][ T6629] do_el0_svc+0x4c/0x5c [ 80.195679][ T6629] el0_svc+0x60/0x1d8 [ 80.196423][ T6629] el0t_64_sync_handler+0x44/0x104 [ 80.197362][ T6629] el0t_64_sync+0x198/0x19c [ 80.198176][ T6629] irq event stamp: 6386 [ 80.198918][ T6629] hardirqs last enabled at (6385): [] _raw_spin_unlock_irqrestore+0x38/0x98 [ 80.200830][ T6629] hardirqs last disabled at (6386): [] _raw_spin_lock_irq+0x28/0x70 [ 80.202499][ T6629] softirqs last enabled at (6140): [] handle_softirqs+0xb2c/0xcbc [ 80.204155][ T6629] softirqs last disabled at (6115): [] __do_softirq+0x14/0x20 [ 80.205759][ T6629] ---[ end trace 0000000000000000 ]--- [ 80.266452][ T6629] ------------[ cut here ]------------ [ 80.266463][ T6629] kmem_cache_destroy raid5-md5: Slab cache still has objects when called from free_conf+0x1d8/0x540 [ 80.266539][ T6629] WARNING: mm/slab_common.c:579 at kmem_cache_destroy+0x158/0x160, CPU#0: syz.5.431/6629 [ 80.271274][ T6629] Modules linked in: [ 80.271985][ T6629] CPU: 0 UID: 0 PID: 6629 Comm: syz.5.431 Tainted: G B W syzkaller #0 PREEMPT [ 80.273859][ T6629] Tainted: [B]=BAD_PAGE, [W]=WARN [ 80.274784][ T6629] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 80.276683][ T6629] pstate: 63400005 (nZCv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 80.278145][ T6629] pc : kmem_cache_destroy+0x158/0x160 [ 80.279160][ T6629] lr : kmem_cache_destroy+0x158/0x160 [ 80.280188][ T6629] sp : ffff800093a277a0 [ 80.280972][ T6629] x29: ffff800093a277a0 x28: 1fffe00019cbb41b x27: dfff800000000000 [ 80.282462][ T6629] x26: 0000000000000000 x25: ffff700012744f20 x24: 0000000000000003 [ 80.283974][ T6629] x23: dfff800000000000 x22: 1fffe00018d84445 x21: 0000000000000001 [ 80.285481][ T6629] x20: ffff800083f40ab4 x19: ffff0000c9c39140 x18: ffff80011b876000 [ 80.286997][ T6629] x17: ffff0001a4fd3e07 x16: ffff0000d6261d94 x15: 00000000000000f8 [ 80.288512][ T6629] x14: 00000000000011cf x13: 0000000000000001 x12: 0000000000000003 [ 80.289961][ T6629] x11: 0000000000000000 x10: 0000000000080000 x9 : 28d290c2e252e800 [ 80.291349][ T6629] x8 : 28d290c2e252e800 x7 : 0000000000000000 x6 : ffff800080483084 [ 80.292748][ T6629] x5 : 0000000000000000 x4 : 0000000000000000 x3 : ffff8000802f3d68 [ 80.294184][ T6629] x2 : 0000000100000000 x1 : ffff0000d6261d80 x0 : 0000000000000001 [ 80.295628][ T6629] Call trace: [ 80.296226][ T6629] kmem_cache_destroy+0x158/0x160 (P) [ 80.297180][ T6629] free_conf+0x1d8/0x540 [ 80.297939][ T6629] raid5_free+0x24/0x60 [ 80.298684][ T6629] __md_stop+0xc0/0x154 [ 80.299429][ T6629] do_md_stop+0x284/0xe6c [ 80.300204][ T6629] md_ioctl+0x14dc/0x23d4 [ 80.301011][ T6629] blkdev_ioctl+0x574/0x904 [ 80.301866][ T6629] __arm64_sys_ioctl+0x154/0x1cc [ 80.302735][ T6629] invoke_syscall+0x98/0x244 [ 80.303543][ T6629] el0_svc_common+0xec/0x23c [ 80.304367][ T6629] do_el0_svc+0x4c/0x5c [ 80.305127][ T6629] el0_svc+0x60/0x1d8 [ 80.305872][ T6629] el0t_64_sync_handler+0x44/0x104 [ 80.306775][ T6629] el0t_64_sync+0x198/0x19c [ 80.307575][ T6629] irq event stamp: 6386 [ 80.308305][ T6629] hardirqs last enabled at (6385): [] _raw_spin_unlock_irqrestore+0x38/0x98 [ 80.310144][ T6629] hardirqs last disabled at (6386): [] _raw_spin_lock_irq+0x28/0x70 [ 80.311770][ T6629] softirqs last enabled at (6140): [] handle_softirqs+0xb2c/0xcbc [ 80.313380][ T6629] softirqs last disabled at (6115): [] __do_softirq+0x14/0x20 [ 80.314921][ T6629] ---[ end trace 0000000000000000 ]--- [ 80.445158][ T6629] md5: detected capacity change from 8192 to 0 [ 80.445218][ T6629] md: md5 stopped.