last executing test programs: 10.545271236s ago: executing program 2 (id=169): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f00000002c0)=0x4c) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) gettid() r3 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0)={0x400040, 0x19, 0x22}, 0x18) name_to_handle_at(r3, &(0x7f0000000140)='./file1\x00', &(0x7f0000000180)=@GFS2_SMALL_FH_SIZE={0x10, 0x4, {0x4, 0x8, 0x3, 0x8}}, &(0x7f00000001c0), 0x200) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x102, &(0x7f0000000c40)={0x0, 0x3938700}) 10.381214163s ago: executing program 4 (id=171): socketpair$unix(0x1, 0x2, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x89b0, &(0x7f0000000440)={'vlan0\x00', @random="1800002000"}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) syz_ublk_setup_io_uring(0x20, 0x0, 0x0, &(0x7f0000000100), 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xe, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x402, 0x6, 0xfffb}, 0x3a, [0x8000, 0x401, 0xf, 0x8, 0x86, 0x2, 0x3, 0x7f, 0xa6, 0x4d, 0x6, 0x5f, 0x9, 0x15, 0xffff2d37, 0xff7fff01, 0x6, 0x5, 0x7, 0x5, 0xdb, 0x0, 0x1, 0x3c5b, 0x1, 0x24, 0x10, 0x5, 0x0, 0xffffffff, 0x10, 0x80, 0x207, 0x20003, 0x8, 0x4c76, 0x10000, 0x242, 0x3, 0xe, 0x4, 0x80008071, 0x7fc, 0x17, 0x0, 0x7, 0x5, 0x3e, 0x18e, 0x200006, 0x6, 0x454f, 0x6, 0x80004, 0x8, 0x3ff, 0x80, 0x0, 0x0, 0x0, 0x8, 0x8000, 0x1, 0x40], [0x10000004, 0x9, 0x8000012f, 0x8004, 0x8, 0xffffbff3, 0x7ff, 0xc8, 0xc9, 0xe, 0x2bf, 0x6c7, 0x1, 0xfffffffc, 0x5, 0x0, 0x0, 0x9, 0x2f, 0xe, 0x1, 0x66abcbd2, 0xea4, 0xc, 0x4, 0x7, 0x7ffb, 0x6, 0x500, 0x401, 0x10001, 0x1, 0xff, 0x5, 0xfffff572, 0x5f31, 0xd, 0x4e0, 0x381, 0x4, 0xb, 0x4, 0x9, 0x8, 0x5, 0xd, 0xfffff256, 0x2, 0x1, 0xfdfffffd, 0x8, 0x2, 0x0, 0x9, 0x3, 0x3, 0x4000009, 0x6, 0x0, 0x3, 0xfffffffc, 0x48c93690, 0xe79, 0x3], [0x7, 0x408, 0x4, 0x5, 0xfffffffd, 0xff, 0x4, 0xb, 0x6, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0xfffffffd, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x3039, 0xfffffffa, 0xb, 0x5, 0xffffffff, 0x2, 0x400003, 0x6, 0x4, 0x6d01, 0x6, 0x34, 0x800003, 0x200, 0x83, 0x3, 0x5, 0x2950bfaf, 0x1000, 0xa2, 0x4, 0x1000, 0x5, 0xb1, 0xac8, 0xbf, 0x50, 0x3, 0x7ff, 0x12b, 0x8a6, 0x1, 0xa, 0xffffffff, 0x5, 0x1c, 0x120000, 0x2008077f, 0x2006, 0x7, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x2000004, 0xffff, 0x6, 0x80000000, 0xb9, 0xce4, 0x10001fc, 0x10002, 0x4184, 0x5, 0x3, 0x0, 0x10000, 0x4, 0x7fff, 0xfffe, 0xa620, 0x1, 0x5, 0x1, 0x6, 0x14c, 0x60a7, 0x6, 0xa, 0xffffffff, 0x80000000, 0x5, 0x5, 0xc8, 0x1, 0xfffff000, 0xffff, 0x0, 0x87e, 0x100, 0x1622, 0x7, 0x200af, 0x20000008, 0x5, 0x226, 0x3, 0x5, 0x0, 0x30b1d693, 0xfffff4f0, 0x4, 0x7, 0x7, 0x6c1b, 0x0, 0x1, 0x5, 0x803, 0xd7, 0x200, 0x30, 0xfff]}, 0x45c) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000005000000fd09000084"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000240), 0x800, r3}, 0x38) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000800)={0x0, &(0x7f0000000cc0)=""/129, &(0x7f0000000cc0), 0x0, 0x6c, r3}, 0x38) 8.648305443s ago: executing program 1 (id=173): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000002f40)={[{@nodelalloc}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x5}}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) syz_genetlink_get_family_id$devlink(&(0x7f0000000800), 0xffffffffffffffff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:02.0/config\x00', 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) getsockopt$IP_SET_OP_VERSION(r3, 0x1, 0x53, 0x0, &(0x7f0000000240)) openat$nullb(0xffffffffffffff9c, 0x0, 0x1c3902, 0x0) pwrite64(r0, &(0x7f0000000100)='b', 0x1, 0x5) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000100)='./bus\x00', 0x20020, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000680)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f0000000300)='./file0\x00') renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, &(0x7f0000000a00)='./file1\x00', 0x0) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', 0x0, 0x0, 0x0) 7.478522934s ago: executing program 1 (id=176): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x400c080) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="010000000300000004000000ff"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000300), 0xce4, r1}, 0x38) 6.515664913s ago: executing program 0 (id=179): sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002140)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000002280)="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", 0x37c}, {&(0x7f0000000dc0)="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", 0x1cb}, {&(0x7f00000005c0)="05437c98b91b1455046f57b5fc913814bde2bbeac2104eaea9c9d01a7838d859007067c10aa7352abbdf98e9bf033a4784a11e84639d3b9164d9c5d729f3dd409d39", 0x42}], 0x3, 0x0, 0x0, 0x900}}], 0x1, 0x0) sendto(0xffffffffffffffff, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000000)=""/102, 0x365}, {&(0x7f0000000280)=""/76, 0x14c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/92, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x188}, {&(0x7f00000007c0)=""/154, 0x2c}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 6.469102737s ago: executing program 4 (id=180): openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000680)={{r1}, &(0x7f00000007c0), &(0x7f0000000640)=r0}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000004c0)={r1, &(0x7f0000000300), 0x0}, 0x20) 6.301802133s ago: executing program 0 (id=181): r0 = socket(0x10, 0x803, 0x0) r1 = syz_io_uring_setup(0x4c4f, &(0x7f0000000400)={0x0, 0xed83, 0x400, 0x2, 0x2e3}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0, &(0x7f00000003c0)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r0, 0x0, &(0x7f0000000800)={0x0, 0x0, 0x0}, 0x0, 0x80000080, 0x1}) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x4008c50) io_uring_enter(r1, 0x1, 0xfffffffd, 0x9, 0x0, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0x3, &(0x7f0000000380)=0xd, 0x4) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) syz_genetlink_get_family_id$gtp(&(0x7f0000000040), r0) 6.249284615s ago: executing program 4 (id=182): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@ipv4_delroute={0x40, 0x19, 0x901, 0x0, 0x0, {0x2, 0x18, 0x0, 0x0, 0x0, 0x0, 0xfd, 0x1}, [@RTA_DST={0x8, 0x1, @dev}, @RTA_GATEWAY={0x8, 0x5, @private=0xa010102}, @RTA_ENCAP={0xc, 0x16, 0x0, 0x1, @LWTUNNEL_IP_SRC={0x8, 0x3, @local}}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x6}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 6.148221289s ago: executing program 0 (id=183): r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @empty, 0x5}, 0x1c) recvfrom$inet6(r0, 0x0, 0x50, 0x0, &(0x7f0000000100)={0xa, 0x4e21, 0x8, @mcast1, 0x8}, 0x1c) 6.094594152s ago: executing program 2 (id=184): pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = memfd_create(&(0x7f00000002c0)='\x103q}2\x9a\xce\xaf\x03\x86\xe7\xc0\x14\x8f^\xd5\xfd\xa9\r\xac7A\x94\xeb\xcd\t\x00\x90k\xd6\x05\r\x84\x87\x1c\b\x8c`\xea\x13A\x90m\xb6&\xd0\x9daA\xc5\xb8_\xd4\x18,\f\xd4s\xb2\x99/\xc0\x9a\xf2_\xdb\xc0\x8b\x19\x17\xb7Rvd\xcb:\b\xeeC0\xa3\xa6\xcf\x00\x00\xac\xc5h&+\t\x98\'\xfd|\x11\x99\xa2*6{\xd2C>2\x0e\"\xbc\xda\xee\xb0\xd8\xbf\xaf)\xf58c\x189K\x82\xd1(\xceY*\xcb\x9b\xbdn\x8e\x98m\x10L\xec\xfdWF\x7fj\x19\xb8<\xd2\x9d\xf0\xe9Qy\xe32\xed\x16f\xfe&\x1a\xdb\xeb\xad\xaaE\b\xa9\xf8\xa9s\xc4d\xd4\x03\xf1\xb7xO\x99\x804m[Ai\x13\x02\xf0\x84c2s\xd5P\t`\x9b\x12&\x8cx\x8eg\x9d\xe6g', 0x0) fanotify_init(0x8, 0x40000) ftruncate(r1, 0x7) splice(r1, 0x0, r0, 0x0, 0x100002, 0x9) 5.262773981s ago: executing program 4 (id=185): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3000001, 0x11, r0, 0x0) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000258f88)={{0x0, 0x0, 0x0, 0x0, 0x0, 0xd8, 0x200}, 0x0, 0x0, 0x0, 0x40000000080004, 0x0, 0xfffffffffffff001, 0x5, 0x4f2a, 0x0, 0x3}) r1 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet(r1, &(0x7f0000002780)=[{{0x0, 0x0, 0x0}}], 0x1, 0xc0) r2 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r2) syz_clone3(&(0x7f000000dd80)={0xa00400, 0x0, 0x0, 0x0, {0x13}, 0x0, 0x0, 0x0, 0x0}, 0x58) 5.253283595s ago: executing program 2 (id=186): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ed) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/class/fcloop/ctl/add_remote_port\x00', 0x1, 0x0) write(r0, &(0x7f0000000600)='wwnn=0x3333333333333333,wwpn=0x4444444444444444,roles=32,lpwwnn=0x111111111111111', 0x51) 5.228140777s ago: executing program 3 (id=187): mkdirat(0xffffffffffffff9c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = syz_mount_image$fuse(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) getdents64(r0, &(0x7f0000000540)=""/41, 0x29) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet6(0xa, 0x802, 0x0) r5 = socket$pppl2tp(0x18, 0x1, 0x1) r6 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r5, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r6, {0x2, 0x4e23, @broadcast}, 0x80002, 0x0, 0x4}}, 0x2e) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000440)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/net/pppol2tp\x00', 0x80, 0x80) read(r7, &(0x7f0000000300), 0x1) read(r7, &(0x7f0000000400), 0x120) r8 = openat$zero(0xffffffffffffff9c, 0x0, 0x4a0002, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_AUTHENTICATE(r8, 0x0, 0x4) setsockopt$inet6_opts(r4, 0x29, 0x37, &(0x7f0000000000)=ANY=[@ANYBLOB="0002"], 0x18) connect$inet6(r4, &(0x7f0000000240)={0xa, 0x6e23, 0x2, @mcast1, 0x9}, 0x1c) 4.394552054s ago: executing program 0 (id=188): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) 4.319519042s ago: executing program 0 (id=189): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x180) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='7', 0x1) ptrace(0x10, 0x1) 4.055909808s ago: executing program 0 (id=190): socket$inet_sctp(0x2, 0x1, 0x84) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cfg\x00', 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@enum={0x2, 0x0, 0x0, 0xf}]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x28}, 0x20) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x4, 0x1, 0x80, r0, 0x0, '\x00', 0x0, r4, 0x0, 0x1}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0xd, 0x10, &(0x7f00000001c0)=ANY=[], 0x0, 0x2, 0x0, 0x0, 0x0, 0x3f}, 0x94) socket$kcm(0x29, 0x2, 0x0) mount(&(0x7f0000000040)=@filename='configfs\x00', &(0x7f0000000000)='./cfg\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(&(0x7f0000000280)=@filename='usb0\x00', 0x0, &(0x7f0000000240), 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x88040, 0x0) fcntl$setlease(r5, 0x400, 0x0) acct(&(0x7f0000000140)='./file1\x00') fcntl$getflags(r5, 0x401) 4.053101329s ago: executing program 3 (id=191): fanotify_init(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = io_uring_setup(0x7380, &(0x7f0000000080)={0x0, 0xbafc, 0x400, 0x3, 0x325}) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x1000) io_uring_register$IORING_REGISTER_SEND_MSG_RING(r3, 0x1f, 0x0, 0x1) 3.802206621s ago: executing program 2 (id=192): ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0x13) ioctl$TCSETSW2(0xffffffffffffffff, 0x402c542c, &(0x7f0000000040)={0xffffff78, 0x4, 0xfffc0000, 0x8, 0x4, "0c41920887e8d2b791f800000000000000006b", 0x6, 0x1ff}) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000100)=0xd) 2.489399288s ago: executing program 1 (id=193): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xffff, 0xa}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x400c8c1}, 0x20) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0x0, 0xd}, {0xfff7, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0x6}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x240040e0}, 0x20004884) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r4, &(0x7f00000002c0)="05031600d3fc141200004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) 2.309348269s ago: executing program 3 (id=194): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f00000006c0)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000003c0)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000400)={0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x0, {0x9, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x23c, 0x0, 0x0, "b4bc323ef77d1f000071849800000000deff00000000e6ffffff00"}}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000180)={&(0x7f00000000c0)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000000a00)={r4, r2, r3, 0x3, 0x10, 0x8, 0x0, 0x0, 0x0, 0x0, 0x20003, 0x200003}) r5 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x400) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r5, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r5, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000040)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r5, 0xc02064b6, &(0x7f00000001c0)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r5, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000240)=[0x0, 0x0], &(0x7f0000000300), 0x2, r7}) 2.279442693s ago: executing program 2 (id=195): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0xa27}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$usbfs(0x0, 0x75, 0x109301) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000002500)='net/wireless\x00') read$FUSE(r3, &(0x7f00000046c0)={0x2020}, 0x2021) 2.077849808s ago: executing program 3 (id=196): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) listen(r0, 0x8) connect$inet(r1, &(0x7f0000000010)={0x2, 0x4e20, @loopback}, 0x10) r2 = accept$inet(r0, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0f000000040000000400000001"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0x6, &(0x7f0000000300)=@raw=[@map_fd={0x18, 0x2, 0x1, 0x0, r3}, @generic={0xb7, 0x3}, @generic={0xb7, 0x4}, @generic={0x85, 0x0, 0x0, 0x0, 0x3c}, @generic={0x95}], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000500)={@map=r3, r4, 0x7, 0x0, 0x0, @void, @value=0x0}, 0x10) sendto(r2, &(0x7f0000000700)='a', 0x1, 0x11, 0x0, 0x0) 2.005064861s ago: executing program 4 (id=197): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000300)={'vxcan1\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000180)={0x1d, r2, 0x0, {0x1, 0xff, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmmsg(r1, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}}], 0x1, 0x44845) readv(r1, &(0x7f00000002c0)=[{&(0x7f00000001c0)=""/176, 0xb0}], 0x1) 1.649691189s ago: executing program 1 (id=198): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000900)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a64000000060a0b0400000000000000000200000038000480340001800b0001006e756d67656e00002400028008000140000000120800034000000001080002400000000008000440000000060900010073797a30000000000900020073797a32"], 0x8c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 1.101104597s ago: executing program 2 (id=199): syz_read_part_table(0x5c2, &(0x7f0000000000)="$eJzs2z1oU2sYB/AnavCil+vi5GQdnFwURzOoJFFRCNEu4qCgiBi4EEGIECjoYDO0NEPp2KUUsvRjapqhw6Wlhc6ldOil0KHTpV0KXZpL6Xv39vYDhN8PDg/v+/7Pec4znPEEv7QL8U+3281ERPfy8e/ubeULT2+WHpZfRWTiTUT0/PXH1MFJJiX+e+qttF5P67HRK53+nSfZ1trL3dtv5xsX0nlfuq6Ot3tPPBxnbiK3cO37j2pxoJb7tFqsb/5cWX4xuZ0vt583mlPPso/fp9xiqpdS/RK1+Baf411UohIfonpK/UdaG3f3bxRbMx8f7BU6g3P3Uq50wjmP2v9rz9DrZv3Rnenrw/drs0vlrYuHucr/+LoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADh/E7mFa99/VIsDtdyn1WJ98+fK8ovJ7Xy5/bzRnHqWffw+5RZTvZTql6jFt/gc76ISlfgQ1VPqP9LauLt/o9ia+fhgr9AZnLuXcqUTznnU/l97hl4364/uTF8fvl+bXSpvXTzMVS6f0QsAAAAAAAAAAAAAAAAAAABAROQLT2+WHpZfRWTiTUT8+fvczMF+N/3vnkm5W6mup/2x0Sud/p0n2dbay93bb+cbf6f9vt8i+iLi6ni799yH4dj+DQAA///B9JXf") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) ioctl$BLKPG(r0, 0x1269, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x200000, &(0x7f0000000380), 0x3, 0x589, &(0x7f0000001580)="$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") mount$overlay(0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) ioctl$UI_ABS_SETUP(0xffffffffffffffff, 0x401c5504, 0x0) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x20003) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200), 0x400, 0x0) r1 = landlock_create_ruleset(&(0x7f00000002c0)={0x7f6e}, 0x18, 0x0) landlock_restrict_self(r1, 0xe) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f00000002c0)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r2, 0xffffffffffffffff, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[], [], 0x2f}) 1.100293996s ago: executing program 3 (id=200): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='dctcp', 0x5) sendto$inet6(r0, 0x0, 0x0, 0x2404c081, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x9}, 0x1c) 986.008522ms ago: executing program 1 (id=201): r0 = syz_open_procfs(0x0, &(0x7f0000000140)='map_files\x00') lseek(r0, 0x40000000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000010c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) getdents64(r0, 0xffffffffffffffff, 0x43) 744.164789ms ago: executing program 3 (id=202): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="95ab8ea2034149044f8d79d46b002a363da5d9c13c39fb72da33b0dd74fc5f16246b9b8b3dd79d0bdc58ccea81798c2a0389dcb45cb59cc8f53ecb1872034da5a27664a4f6836d87bc6eb18866b2d32424e196d97a1735b44dac746e7bfd1dd076f5d0717bc26caab97d098b0b84db203d07e238361784ee6d8edbd0f7be9782f716de8d9ca421c7b446b034a7896dab6ad92e47c2d7f6f04e371062adab5251ff110367488190d56eb477016f749d7388ce934c449501abaf843f68851f6c52c4cb68eea889f593fcaa60a58d254a4197d22b27232493ec53ca7e6223515f9310b441f3d1882838319284c0", @ANYRES16, @ANYRESDEC, @ANYBLOB="845f86c4bd192f3e653892687b11515259b984597ecce2deea72e9a1c1756975f1fa0e8a934e800d67cd4498b17a808e317e5f5c2bc97638fc5be03c97c3bc57c423fbb99d803482c18f6cfd3913ddcdb5de0c83110b9c8175539c1be131e7b977653befc1501e73f7285ebb877dd5b9a9a89a5f60277fcb82e7d19121a80986bf9a58010a593fc99fcbc113d433cda9efbfdfa1e7cd3b1690fa3dbf1b54184760cd075f128317757aefffdb33704f91f7eddfa857d1320be8", @ANYRESOCT, @ANYRESOCT=0x0, @ANYRESDEC, @ANYRESHEX], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x11, 0x2, 0x300) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc_mnt\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc_mnt/net/sctp/assocs\x00', 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000a6b000/0x1000)=nil, &(0x7f0000cf1000/0x4000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f000065a000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000ca2000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000cae000/0x2000)=nil, 0x0}, 0x68) r2 = syz_ublk_setup_io_uring(0x1d, 0x0, 0x0, &(0x7f0000000280)=0x0, 0x0) syz_ublk_add_dev(r2, 0x0, r3, 0x0, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x82, 0xffffffffffffffff, 0x0, 0x6f}}}, &(0x7f0000000480)) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_UNMAP(r5, 0x3b86, &(0x7f0000000340)={0x18, r6, 0x2, 0x1c}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r1, 0x3ba0, &(0x7f00000003c0)={0x48, 0x2, r6, 0x0, 0x0, 0x0, 0x0, 0x1}) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r7) read$FUSE(r1, &(0x7f0000002b40)={0x2020}, 0x2020) r8 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000940), r0) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000140)=ANY=[@ANYBLOB="cad27d1725279cdbe0f32d786b98179d4dca6d69ff4d357bf135ce6a3e4f073ce1e9c829cacf6635b8e2d46013b4b59058be9a6ea5d0b850", @ANYRES16=r8, @ANYBLOB="010027bd7000fb"], 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x401c) 492.67288ms ago: executing program 4 (id=203): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x1000)=nil, 0xffffffffffffe000, 0x0, &(0x7f0000000000), 0x1b2, 0x0) 0s ago: executing program 1 (id=204): syz_open_procfs(0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x67, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r3, &(0x7f0000003700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x4c, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x88c7}, @NL80211_ATTR_FRAME={0x1c, 0x33, @data_frame={@msdu=@type10={{}, {}, @from_mac=@broadcast, @device_b}}}]}, 0x4c}}, 0x800) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.31' (ED25519) to the list of known hosts. [ 77.239288][ T5606] cgroup: Unknown subsys name 'net' [ 77.329592][ T5606] cgroup: Unknown subsys name 'cpuset' [ 77.333268][ T5606] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 78.855347][ T5606] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 81.365471][ T5632] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 81.369028][ T5633] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 81.371359][ T5633] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 81.372532][ T5633] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 81.373451][ T5633] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 81.374487][ T5633] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 81.375101][ T5633] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 81.375932][ T5633] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 81.377978][ T5633] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 81.381927][ T5633] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 81.384334][ T5633] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 81.388239][ T5633] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 81.390792][ T5633] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 81.395171][ T5636] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 81.397582][ T5636] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 81.423193][ T5636] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 81.423448][ T5636] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 81.427228][ T5633] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 81.429442][ T5633] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 81.429650][ T5633] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 81.429865][ T5633] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 81.430323][ T5636] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 81.440721][ T5626] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 81.441250][ T55] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 81.441395][ T5633] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 83.047841][ T5618] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.048000][ T5618] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.048359][ T5618] bridge_slave_0: entered allmulticast mode [ 83.050035][ T5618] bridge_slave_0: entered promiscuous mode [ 83.071099][ T5618] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.071358][ T5618] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.071702][ T5618] bridge_slave_1: entered allmulticast mode [ 83.073624][ T5618] bridge_slave_1: entered promiscuous mode [ 83.209385][ T5618] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.254367][ T5618] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.338740][ T5618] team0: Port device team_slave_0 added [ 83.339871][ T5619] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.339978][ T5619] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.340104][ T5619] bridge_slave_0: entered allmulticast mode [ 83.342329][ T5619] bridge_slave_0: entered promiscuous mode [ 83.388969][ T5618] team0: Port device team_slave_1 added [ 83.403973][ T5619] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.404059][ T5619] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.404161][ T5619] bridge_slave_1: entered allmulticast mode [ 83.409526][ T5619] bridge_slave_1: entered promiscuous mode [ 83.500736][ T5618] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.500752][ T5618] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.500779][ T5618] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.513150][ T5635] Bluetooth: hci1: command tx timeout [ 83.513156][ T5623] Bluetooth: hci0: command tx timeout [ 83.513350][ T5635] Bluetooth: hci3: command tx timeout [ 83.513501][ T5632] Bluetooth: hci2: command tx timeout [ 83.577331][ T5619] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.586178][ T5632] Bluetooth: hci4: command tx timeout [ 83.602905][ T5618] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.602918][ T5618] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.602938][ T5618] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.665180][ T5619] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.763263][ T5621] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.763357][ T5621] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.763465][ T5621] bridge_slave_0: entered allmulticast mode [ 83.764940][ T5621] bridge_slave_0: entered promiscuous mode [ 83.810064][ T5620] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.810179][ T5620] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.810270][ T5620] bridge_slave_0: entered allmulticast mode [ 83.811626][ T5620] bridge_slave_0: entered promiscuous mode [ 83.817247][ T5629] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.817472][ T5629] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.817776][ T5629] bridge_slave_0: entered allmulticast mode [ 83.824606][ T5629] bridge_slave_0: entered promiscuous mode [ 83.831887][ T5629] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.832137][ T5629] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.832443][ T5629] bridge_slave_1: entered allmulticast mode [ 83.836476][ T5629] bridge_slave_1: entered promiscuous mode [ 83.840863][ T5621] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.841106][ T5621] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.841403][ T5621] bridge_slave_1: entered allmulticast mode [ 83.846749][ T5621] bridge_slave_1: entered promiscuous mode [ 83.857768][ T5619] team0: Port device team_slave_0 added [ 83.868425][ T5619] team0: Port device team_slave_1 added [ 83.907433][ T5620] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.907533][ T5620] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.907649][ T5620] bridge_slave_1: entered allmulticast mode [ 83.909893][ T5620] bridge_slave_1: entered promiscuous mode [ 83.988840][ T5618] hsr_slave_0: entered promiscuous mode [ 83.989709][ T5618] hsr_slave_1: entered promiscuous mode [ 84.041965][ T5619] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.041991][ T5619] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.042011][ T5619] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.089837][ T5629] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.092199][ T5621] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.094796][ T5621] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.095641][ T5619] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.095653][ T5619] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.095675][ T5619] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.106677][ T5620] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.116338][ T5629] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.196276][ T5620] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.241062][ T5629] team0: Port device team_slave_0 added [ 84.265208][ T5621] team0: Port device team_slave_0 added [ 84.280428][ T5629] team0: Port device team_slave_1 added [ 84.307326][ T5621] team0: Port device team_slave_1 added [ 84.340666][ T5620] team0: Port device team_slave_0 added [ 84.361214][ T5619] hsr_slave_0: entered promiscuous mode [ 84.361903][ T5619] hsr_slave_1: entered promiscuous mode [ 84.362426][ T5619] debugfs: 'hsr0' already exists in 'hsr' [ 84.362504][ T5619] Cannot create hsr debugfs directory [ 84.398059][ T5620] team0: Port device team_slave_1 added [ 84.415259][ T5621] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.415478][ T5621] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.415506][ T5621] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.417233][ T5621] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.417244][ T5621] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.417264][ T5621] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.418148][ T5629] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.418159][ T5629] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.418180][ T5629] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.512024][ T5629] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.512067][ T5629] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.512121][ T5629] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.606706][ T5620] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.606719][ T5620] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.606739][ T5620] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.664503][ T5620] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.664518][ T5620] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.664538][ T5620] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.796213][ T5621] hsr_slave_0: entered promiscuous mode [ 84.797008][ T5621] hsr_slave_1: entered promiscuous mode [ 84.797511][ T5621] debugfs: 'hsr0' already exists in 'hsr' [ 84.797529][ T5621] Cannot create hsr debugfs directory [ 84.874408][ T5629] hsr_slave_0: entered promiscuous mode [ 84.883799][ T5629] hsr_slave_1: entered promiscuous mode [ 84.884498][ T5629] debugfs: 'hsr0' already exists in 'hsr' [ 84.884514][ T5629] Cannot create hsr debugfs directory [ 84.937711][ T5620] hsr_slave_0: entered promiscuous mode [ 84.938383][ T5620] hsr_slave_1: entered promiscuous mode [ 84.938889][ T5620] debugfs: 'hsr0' already exists in 'hsr' [ 84.938907][ T5620] Cannot create hsr debugfs directory [ 85.244445][ T5618] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 85.254684][ T5618] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 85.287531][ T5618] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 85.291206][ T5618] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 85.320174][ T5618] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 85.323473][ T5618] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 85.361072][ T5618] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 85.363694][ T5618] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 85.444106][ T5619] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 85.457214][ T5619] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 85.458882][ T5619] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 85.461497][ T5619] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 85.464451][ T5619] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 85.482958][ T5619] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 85.485014][ T5619] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 85.509031][ T5619] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 85.587447][ T5638] Bluetooth: hci3: command tx timeout [ 85.587521][ T5632] Bluetooth: hci2: command tx timeout [ 85.595879][ T5638] Bluetooth: hci1: command tx timeout [ 85.596056][ T5632] Bluetooth: hci0: command tx timeout [ 85.628618][ T5629] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 85.642923][ T5629] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 85.648927][ T5629] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 85.661802][ T5629] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 85.665434][ T5632] Bluetooth: hci4: command tx timeout [ 85.679692][ T5629] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 85.682817][ T5629] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 85.683365][ T5629] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 85.692866][ T5629] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 85.802811][ T5618] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.834825][ T5620] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 85.848111][ T5620] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 85.848908][ T5620] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 85.851520][ T5620] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 85.852306][ T5620] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 85.858887][ T5620] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 85.862285][ T5620] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 85.887060][ T5620] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 85.952765][ T5618] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.986346][ T262] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.986448][ T262] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.046813][ T262] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.046919][ T262] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.049712][ T5619] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.099632][ T5621] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 86.104801][ T5621] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 86.131457][ T5621] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 86.134848][ T5621] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 86.137083][ T5621] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 86.143862][ T5621] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 86.173991][ T5621] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 86.182235][ T5621] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 86.197784][ T5619] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.235224][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.235614][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.260283][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.260350][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.299845][ T5629] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.391374][ T5629] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.404706][ T5620] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.449354][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.449479][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.500505][ T5620] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.505100][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.505197][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.564911][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.565019][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.657187][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.657410][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.704384][ T5621] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.834839][ T5621] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.950207][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.950316][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.000880][ T262] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.000985][ T262] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.667475][ T5638] Bluetooth: hci1: command tx timeout [ 87.667511][ T5638] Bluetooth: hci2: command tx timeout [ 87.667535][ T5638] Bluetooth: hci3: command tx timeout [ 87.667674][ T5632] Bluetooth: hci0: command tx timeout [ 87.750001][ T5632] Bluetooth: hci4: command tx timeout [ 87.785868][ T5618] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.822679][ T5619] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.990736][ T5618] veth0_vlan: entered promiscuous mode [ 88.052906][ T5618] veth1_vlan: entered promiscuous mode [ 88.114778][ T5619] veth0_vlan: entered promiscuous mode [ 88.161332][ T5620] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.162768][ T5619] veth1_vlan: entered promiscuous mode [ 88.210013][ T5629] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.250466][ T5618] veth0_macvtap: entered promiscuous mode [ 88.269770][ T5618] veth1_macvtap: entered promiscuous mode [ 88.330425][ T5619] veth0_macvtap: entered promiscuous mode [ 88.366627][ T5619] veth1_macvtap: entered promiscuous mode [ 88.369901][ T5618] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.404343][ T5618] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.420103][ T5621] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.463391][ T5629] veth0_vlan: entered promiscuous mode [ 88.526748][ T5619] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.528248][ T5620] veth0_vlan: entered promiscuous mode [ 88.529310][ T5629] veth1_vlan: entered promiscuous mode [ 88.566838][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.566971][ T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.567008][ T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.569684][ T5619] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.609355][ T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.652763][ T5620] veth1_vlan: entered promiscuous mode [ 88.707461][ T42] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.782799][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.782817][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.844478][ T5629] veth0_macvtap: entered promiscuous mode [ 88.870692][ T42] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.874167][ T5629] veth1_macvtap: entered promiscuous mode [ 88.893451][ T65] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.893470][ T65] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.916056][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.953348][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.953367][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.002797][ T5620] veth0_macvtap: entered promiscuous mode [ 89.008257][ T65] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.050932][ T5629] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.055238][ T5620] veth1_macvtap: entered promiscuous mode [ 89.071157][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.071173][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.104589][ T5618] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 89.111314][ T5629] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.177272][ T5620] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.255678][ T65] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.255727][ T65] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.255793][ T65] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.255827][ T65] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.263260][ T5620] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.339014][ T5621] veth0_vlan: entered promiscuous mode [ 89.426182][ T52] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.452229][ T5820] process 'syz.1.6' launched './file0' with NULL argv: empty string added [ 89.454562][ T5621] veth1_vlan: entered promiscuous mode [ 89.634395][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.634418][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.745865][ T5635] Bluetooth: hci3: command tx timeout [ 89.745896][ T5635] Bluetooth: hci2: command tx timeout [ 89.745927][ T5635] Bluetooth: hci1: command tx timeout [ 89.745987][ T5632] Bluetooth: hci0: command tx timeout [ 89.791318][ T5829] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9'. [ 89.810715][ T65] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.810735][ T65] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.829102][ T5632] Bluetooth: hci4: command tx timeout [ 89.909469][ T5621] veth0_macvtap: entered promiscuous mode [ 89.934381][ T65] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.934399][ T65] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.987640][ T65] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.988073][ T1436] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.988207][ T1436] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.027669][ T5621] veth1_macvtap: entered promiscuous mode [ 90.079996][ T5835] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10'. [ 90.080071][ T5835] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10'. [ 90.080298][ T5835] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10'. [ 90.080537][ T5835] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10'. [ 90.080723][ T5835] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10'. [ 90.080848][ T5835] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10'. [ 90.081115][ T5835] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10'. [ 90.081371][ T5835] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10'. [ 90.081474][ T5835] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10'. [ 91.091533][ T5621] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.156344][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.156369][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.164865][ T5621] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.235925][ T262] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.406087][ T65] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.495913][ T5845] loop2: detected capacity change from 0 to 512 [ 91.514703][ T5845] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 91.590600][ T5845] EXT4-fs (loop2): 1 truncate cleaned up [ 91.603552][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.618244][ T13] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.618295][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.618310][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.669299][ T5845] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 91.793574][ T994] cfg80211: failed to load regulatory.db [ 91.939944][ T33] audit: type=1326 audit(1789154761.692:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5851 comm="syz.1.15" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f62fcb9e159 code=0x0 [ 92.499343][ T1436] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.499361][ T1436] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.733710][ T5629] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.931072][ T5866] loop4: detected capacity change from 0 to 128 [ 93.201700][ T5866] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 93.202553][ T5866] ext4 filesystem being mounted at /0/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 93.235747][ T5866] syz.4.5 (pid 5866) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 93.974922][ T5621] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 94.092561][ T5881] random: crng reseeded on system resumption [ 94.619180][ T5900] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 94.649710][ T5902] loop0: detected capacity change from 0 to 1024 [ 94.652679][ T5900] loop2: detected capacity change from 0 to 512 [ 94.660550][ T5902] EXT4-fs: Ignoring removed orlov option [ 94.683789][ T5900] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 94.742297][ T5902] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 94.772228][ T5900] syz.2.28: attempt to access beyond end of device [ 94.772228][ T5900] loop2: rw=8912896, sector=17179852706, nr_sectors = 16 limit=512 [ 94.773026][ T5900] syz.2.28: attempt to access beyond end of device [ 94.773026][ T5900] loop2: rw=8388608, sector=17179852706, nr_sectors = 8 limit=512 [ 94.773719][ T33] audit: type=1800 audit(1789154764.532:3): pid=5900 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.28" name="file2" dev="loop2" ino=1048605 res=0 errno=0 [ 94.775101][ T5900] syz.2.28: attempt to access beyond end of device [ 94.775101][ T5900] loop2: rw=8388608, sector=17179852706, nr_sectors = 8 limit=512 [ 94.902465][ T5900] syz.2.28: attempt to access beyond end of device [ 94.902465][ T5900] loop2: rw=8388608, sector=17179852706, nr_sectors = 8 limit=512 [ 94.950327][ T5902] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.666659][ T5927] batman_adv: batadv0: Adding interface: syzkaller0 [ 95.666696][ T5927] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 95.666759][ T5927] batman_adv: batadv0: Interface activated: syzkaller0 [ 96.039369][ T5926] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 96.095119][ T5926] batman_adv: batadv0: Removing interface: syzkaller0 [ 96.106011][ T5933] loop3: detected capacity change from 0 to 256 [ 96.127769][ T5933] FAT-fs (loop3): data area starts beyond volume (274 > 64) [ 96.127791][ T5933] FAT-fs (loop3): Can't find a valid FAT filesystem [ 96.639450][ T5949] __nla_validate_parse: 45 callbacks suppressed [ 96.639471][ T5949] netlink: 60 bytes leftover after parsing attributes in process `syz.2.45'. [ 96.640404][ T5949] netlink: 60 bytes leftover after parsing attributes in process `syz.2.45'. [ 96.675918][ T5950] binder_alloc: 5948: binder_alloc_buf, no vma [ 96.972762][ T5962] netlink: 72 bytes leftover after parsing attributes in process `syz.4.51'. [ 97.186564][ T5973] ptrace attach of "ci-upstream-linux-next-kasan-gce-root/syz-executor exec"[5629] was attempted by "ci-upstream-linux-next-kasan-gce-root/syz-executor exec"[5973] [ 97.543156][ T5987] loop2: detected capacity change from 0 to 128 [ 98.411330][ T5997] loop4: detected capacity change from 0 to 256 [ 98.683731][ T6005] ptrace attach of "ci-upstream-linux-next-kasan-gce-root/syz-executor exec"[5618] was attempted by "ci-upstream-linux-next-kasan-gce-root/syz-executor exec"[6005] [ 100.783272][ T6020] netlink: 'syz.1.69': attribute type 3 has an invalid length. [ 100.783332][ T6020] netlink: 24 bytes leftover after parsing attributes in process `syz.1.69'. [ 100.784215][ T6020] Zero length message leads to an empty skb [ 101.279928][ T6030] loop4: detected capacity change from 0 to 8 [ 101.300956][ T6031] Illegal XDP return value 548465716 on prog (id 8) dev syz_tun, expect packet loss! [ 101.539369][ T6038] ptrace attach of "ci-upstream-linux-next-kasan-gce-root/syz-executor exec"[5618] was attempted by "ci-upstream-linux-next-kasan-gce-root/syz-executor exec"[6038] [ 101.770292][ T6040] loop4: detected capacity change from 0 to 256 [ 102.280936][ T6049] loop1: detected capacity change from 0 to 256 [ 102.996797][ T6062] capability: warning: `syz.0.84' uses deprecated v2 capabilities in a way that may be insecure [ 103.926649][ T6068] loop2: detected capacity change from 0 to 256 [ 105.222487][ T6081] loop1: detected capacity change from 0 to 256 [ 105.233919][ T6079] ptrace attach of "ci-upstream-linux-next-kasan-gce-root/syz-executor exec"[5629] was attempted by "ci-upstream-linux-next-kasan-gce-root/syz-executor exec"[6079] [ 105.618033][ T6089] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 105.631711][ T6089] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 105.729397][ T6089] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 107.997229][ T6108] loop1: detected capacity change from 0 to 512 [ 108.025671][ T6111] loop3: detected capacity change from 0 to 256 [ 108.250014][ T6108] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 108.250109][ T6108] ext4 filesystem being mounted at /21/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 108.532684][ T5618] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.556455][ T6120] FAULT_INJECTION: forcing a failure. [ 108.556455][ T6120] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 108.556501][ T6120] CPU: 0 UID: 0 PID: 6120 Comm: syz.3.107 Not tainted syzkaller #0 PREEMPT(full) [ 108.556525][ T6120] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 108.556545][ T6120] Call Trace: [ 108.556557][ T6120] [ 108.556567][ T6120] dump_stack_lvl+0xe8/0x150 [ 108.556623][ T6120] should_fail_ex+0x3eb/0x540 [ 108.556657][ T6120] set_fd_set+0x3a/0xa0 [ 108.556687][ T6120] core_sys_select+0x9c1/0xb40 [ 108.556729][ T6120] ? __pfx_core_sys_select+0x10/0x10 [ 108.556781][ T6120] ? __pfx_set_user_sigmask+0x10/0x10 [ 108.556821][ T6120] __se_sys_pselect6+0x267/0x320 [ 108.556857][ T6120] ? __pfx___se_sys_pselect6+0x10/0x10 [ 108.556895][ T6120] ? __x64_sys_pselect6+0x21/0xf0 [ 108.556927][ T6120] do_syscall_64+0x166/0x520 [ 108.556947][ T6120] ? trace_irq_disable+0x3b/0x140 [ 108.556970][ T6120] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 108.556990][ T6120] ? clear_bhb_loop+0x70/0xc0 [ 108.557014][ T6120] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 108.557033][ T6120] RIP: 0033:0x7f12bfb9e159 [ 108.557057][ T6120] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 108.557073][ T6120] RSP: 002b:00007f12c09e7028 EFLAGS: 00000246 ORIG_RAX: 000000000000010e [ 108.557099][ T6120] RAX: ffffffffffffffda RBX: 00007f12bfe25fa0 RCX: 00007f12bfb9e159 [ 108.557114][ T6120] RDX: 0000200000000200 RSI: 0000000000000000 RDI: 0000000000000000 [ 108.557126][ T6120] RBP: 00007f12bfc3503b R08: 0000200000000280 R09: 0000200000000300 [ 108.557141][ T6120] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 108.557152][ T6120] R13: 00007f12bfe26038 R14: 00007f12bfe25fa0 R15: 00007ffec42e0ff8 [ 108.557182][ T6120] [ 108.787202][ T6124] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 108.788835][ T6124] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 108.790395][ T6124] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 108.979797][ T6132] netlink: 4 bytes leftover after parsing attributes in process `syz.3.111'. [ 108.979847][ T6132] netlink: 4 bytes leftover after parsing attributes in process `syz.3.111'. [ 108.979894][ T6132] netlink: 4 bytes leftover after parsing attributes in process `syz.3.111'. [ 108.979934][ T6132] netlink: 4 bytes leftover after parsing attributes in process `syz.3.111'. [ 108.979974][ T6132] netlink: 4 bytes leftover after parsing attributes in process `syz.3.111'. [ 108.980013][ T6132] netlink: 4 bytes leftover after parsing attributes in process `syz.3.111'. [ 108.980053][ T6132] netlink: 4 bytes leftover after parsing attributes in process `syz.3.111'. [ 108.980092][ T6132] netlink: 4 bytes leftover after parsing attributes in process `syz.3.111'. [ 108.980131][ T6132] netlink: 4 bytes leftover after parsing attributes in process `syz.3.111'. [ 108.980169][ T6132] netlink: 4 bytes leftover after parsing attributes in process `syz.3.111'. [ 109.493891][ T6139] loop3: detected capacity change from 0 to 1024 [ 109.583722][ T6139] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 109.790680][ T5619] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.043556][ T6160] loop2: detected capacity change from 0 to 512 [ 110.045145][ T6160] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 110.045159][ T6160] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 110.283261][ T6160] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:487: comm syz.2.123: Invalid block bitmap block 0 in block_group 0 [ 110.283463][ T6160] loop2: lost filesystem error report for type 5 error -117 [ 110.335657][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 110.335679][ C0] EXT4-fs (loop2): initial error at time 1789154780: ext4_read_block_bitmap_nowait:487 [ 110.335702][ C0] EXT4-fs (loop2): last error at time 1789154780: ext4_read_block_bitmap_nowait:487 [ 110.345682][ T6160] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6680: Corrupt filesystem [ 110.345704][ T6160] loop2: lost filesystem error report for type 5 error -117 [ 110.638002][ T6160] EXT4-fs error (device loop2): ext4_clear_blocks:876: inode #11: comm syz.2.123: attempt to clear invalid blocks 983261 len 1 [ 110.638199][ T6160] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 110.660901][ T6160] EXT4-fs error (device loop2): __ext4_get_inode_loc:4916: comm syz.2.123: Invalid inode table block 0 in block_group 0 [ 110.660947][ T6160] loop2: lost filesystem error report for type 5 error -117 [ 110.709998][ T6160] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6522: Corrupt filesystem [ 111.340696][ T6160] loop2: lost filesystem error report for type 5 error -117 [ 111.341634][ T6160] EXT4-fs error (device loop2) in ext4_orphan_del:304: Corrupt filesystem [ 111.341659][ T6160] loop2: lost filesystem error report for type 5 error -117 [ 111.342845][ T6160] EXT4-fs error (device loop2): __ext4_get_inode_loc:4916: comm syz.2.123: Invalid inode table block 0 in block_group 0 [ 111.342874][ T6160] loop2: lost filesystem error report for type 5 error -117 [ 111.378092][ T6160] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6522: Corrupt filesystem [ 111.378149][ T6160] loop2: lost filesystem error report for type 5 error -117 [ 111.385840][ T6160] EXT4-fs error (device loop2): ext4_truncate:4721: inode #11: comm syz.2.123: mark_inode_dirty error [ 111.385870][ T6160] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 111.387716][ T6160] EXT4-fs error (device loop2) in ext4_process_orphan:346: Corrupt filesystem [ 111.387739][ T6160] loop2: lost filesystem error report for type 5 error -117 [ 111.388115][ T6160] EXT4-fs error (device loop2): __ext4_get_inode_loc:4916: comm syz.2.123: Invalid inode table block 0 in block_group 0 [ 111.388160][ T6160] loop2: lost filesystem error report for type 5 error -117 [ 111.391611][ T6160] EXT4-fs (loop2): 1 truncate cleaned up [ 111.398530][ T6160] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 112.436099][ T6181] netlink: 'syz.1.129': attribute type 4 has an invalid length. [ 112.703789][ T5629] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.887577][ T6191] FAULT_INJECTION: forcing a failure. [ 112.887577][ T6191] name failslab, interval 1, probability 0, space 0, times 1 [ 112.887608][ T6191] CPU: 0 UID: 0 PID: 6191 Comm: syz.3.132 Not tainted syzkaller #0 PREEMPT(full) [ 112.887631][ T6191] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 112.887643][ T6191] Call Trace: [ 112.887651][ T6191] [ 112.887660][ T6191] dump_stack_lvl+0xe8/0x150 [ 112.887697][ T6191] should_fail_ex+0x3eb/0x540 [ 112.887731][ T6191] should_failslab+0xa8/0x100 [ 112.887764][ T6191] __kmalloc_noprof+0xf9/0x710 [ 112.887791][ T6191] ? group_cpus_evenly+0xcf/0x5e0 [ 112.887824][ T6191] ? group_cpus_evenly+0xcf/0x5e0 [ 112.887854][ T6191] group_cpus_evenly+0xcf/0x5e0 [ 112.887881][ T6191] ? __pfx_group_cpus_evenly+0x10/0x10 [ 112.887918][ T6191] blk_mq_map_queues+0xb1/0x490 [ 112.887952][ T6191] ? trace_kmalloc+0x2a/0xf0 [ 112.887976][ T6191] ? __pfx_blk_mq_map_queues+0x10/0x10 [ 112.888003][ T6191] ? __kmalloc_node_noprof+0x2eb/0x720 [ 112.888026][ T6191] ? blk_mq_alloc_tag_set+0x5f8/0x1000 [ 112.888044][ T6191] ? blk_mq_update_queue_map+0x383/0x450 [ 112.888071][ T6191] blk_mq_alloc_tag_set+0x8dd/0x1000 [ 112.888103][ T6191] loop_add+0x436/0xb40 [ 112.888124][ T6191] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 112.888154][ T6191] ? __pfx_loop_add+0x10/0x10 [ 112.888173][ T6191] ? do_tcp_setsockopt+0x198c/0x1f80 [ 112.888242][ T6191] loop_control_ioctl+0x12b/0x5a0 [ 112.888266][ T6191] ? __fget_files+0x2a/0x420 [ 112.888287][ T6191] ? __pfx_loop_control_ioctl+0x10/0x10 [ 112.888309][ T6191] ? __fget_files+0x2a/0x420 [ 112.888345][ T6191] ? bpf_lsm_file_ioctl+0x9/0x20 [ 112.888363][ T6191] ? __pfx_loop_control_ioctl+0x10/0x10 [ 112.888385][ T6191] __se_sys_ioctl+0xfc/0x170 [ 112.888414][ T6191] do_syscall_64+0x166/0x520 [ 112.888433][ T6191] ? trace_irq_disable+0x3b/0x140 [ 112.888461][ T6191] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.888498][ T6191] ? clear_bhb_loop+0x70/0xc0 [ 112.888523][ T6191] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.888544][ T6191] RIP: 0033:0x7f12bfb9e159 [ 112.888563][ T6191] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 112.888579][ T6191] RSP: 002b:00007f12c09e7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 112.888601][ T6191] RAX: ffffffffffffffda RBX: 00007f12bfe25fa0 RCX: 00007f12bfb9e159 [ 112.888615][ T6191] RDX: 00000000ffffffe4 RSI: 0000000000004c80 RDI: 0000000000000004 [ 112.888627][ T6191] RBP: 00007f12bfc3503b R08: 0000000000000000 R09: 0000000000000000 [ 112.888639][ T6191] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 112.888650][ T6191] R13: 00007f12bfe26038 R14: 00007f12bfe25fa0 R15: 00007ffec42e0ff8 [ 112.888682][ T6191] [ 113.116988][ T6193] loop2: detected capacity change from 0 to 512 [ 113.218829][ T6193] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 113.223125][ T6193] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.133: invalid indirect mapped block 2683928664 (level 1) [ 113.229149][ T6193] loop2: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 113.235384][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 113.235426][ C1] EXT4-fs (loop2): initial error at time 1789154782: ext4_free_branches:1023: inode 13 [ 113.235495][ C1] EXT4-fs (loop2): last error at time 1789154782: ext4_free_branches:1023: inode 13 [ 113.295508][ T6193] EXT4-fs (loop2): 1 truncate cleaned up [ 113.315912][ T6193] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 113.836983][ T33] audit: type=1800 audit(1789154783.592:4): pid=6201 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.133" name="file0" dev="loop2" ino=13 res=0 errno=0 [ 114.059425][ T6207] ptrace attach of "ci-upstream-linux-next-kasan-gce-root/syz-executor exec"[5621] was attempted by "ci-upstream-linux-next-kasan-gce-root/syz-executor exec"[6207] [ 114.187045][ T5629] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.726920][ T6233] syzkaller1: entered promiscuous mode [ 115.726988][ T6233] syzkaller1: entered allmulticast mode [ 118.304083][ T6259] __nla_validate_parse: 44 callbacks suppressed [ 118.304106][ T6259] netlink: 32 bytes leftover after parsing attributes in process `syz.2.150'. [ 118.359062][ T6259] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 118.360982][ T6262] netlink: 12 bytes leftover after parsing attributes in process `syz.3.151'. [ 118.361010][ T6262] netlink: 12 bytes leftover after parsing attributes in process `syz.3.151'. [ 121.355994][ T6258] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 121.506794][ T6292] loop4: detected capacity change from 0 to 40427 [ 121.542106][ T6292] F2FS-fs (loop4): invalid crc value [ 121.993230][ T6292] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 122.033985][ T6292] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 122.272990][ T5621] syz-executor: attempt to access beyond end of device [ 122.272990][ T5621] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 122.285515][ T5621] CPU: 1 UID: 0 PID: 5621 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 122.285583][ T5621] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 122.285616][ T5621] Call Trace: [ 122.285629][ T5621] [ 122.285636][ T5621] dump_stack_lvl+0xe8/0x150 [ 122.285719][ T5621] f2fs_stop_checkpoint+0x3f6/0x5d0 [ 122.285794][ T5621] f2fs_write_end_bio+0x1211/0x16e0 [ 122.285874][ T5621] __submit_merged_bio+0x258/0x6a0 [ 122.285915][ T5621] ? rcu_is_watching+0x16/0xb0 [ 122.285986][ T5621] __submit_merged_write_cond+0x3c9/0x4e0 [ 122.286070][ T5621] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 122.286190][ T5621] f2fs_write_data_pages+0x2a1d/0x36f0 [ 122.286254][ T5621] ? __lock_acquire+0x747/0x2de0 [ 122.286392][ T5621] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 122.286448][ T5621] ? is_bpf_text_address+0x26/0x2b0 [ 122.286548][ T5621] ? arch_stack_walk+0xfb/0x150 [ 122.286674][ T5621] ? add_lock_to_list+0xc7/0x100 [ 122.286764][ T5621] ? lockdep_unlock+0x5c/0xd0 [ 122.286834][ T5621] ? __lock_acquire+0x1511/0x2de0 [ 122.286957][ T5621] ? do_raw_spin_lock+0x12b/0x2f0 [ 122.287059][ T5621] ? do_raw_spin_unlock+0xf5/0x200 [ 122.287151][ T5621] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 122.287234][ T5621] do_writepages+0x338/0x560 [ 122.287332][ T5621] ? do_raw_spin_unlock+0xf5/0x200 [ 122.287436][ T5621] filemap_fdatawrite+0x1e9/0x2f0 [ 122.287513][ T5621] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 122.287689][ T5621] ? do_raw_spin_unlock+0xf5/0x200 [ 122.287771][ T5621] f2fs_sync_dirty_inodes+0x30e/0x830 [ 122.287874][ T5621] f2fs_write_checkpoint+0xa38/0x2710 [ 122.287952][ T5621] ? __lock_acquire+0x747/0x2de0 [ 122.288074][ T5621] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 122.288249][ T5621] kill_f2fs_super+0x2dd/0x700 [ 122.288320][ T5621] ? __pfx_kill_f2fs_super+0x10/0x10 [ 122.288415][ T5621] ? call_rcu+0x64d/0x8b0 [ 122.288475][ T5621] ? lockdep_hardirqs_on+0x7b/0x110 [ 122.288575][ T5621] deactivate_locked_super+0xbc/0x110 [ 122.288633][ T5621] cleanup_mnt+0x3d3/0x460 [ 122.288703][ T5621] task_work_run+0x1d9/0x260 [ 122.288765][ T5621] ? __pfx_task_work_run+0x10/0x10 [ 122.288860][ T5621] exit_to_user_mode_loop+0x204/0x770 [ 122.288923][ T5621] ? rcu_is_watching+0x16/0xb0 [ 122.289007][ T5621] do_syscall_64+0x328/0x520 [ 122.289068][ T5621] ? trace_irq_disable+0x3b/0x140 [ 122.289132][ T5621] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 122.289181][ T5621] ? clear_bhb_loop+0x70/0xc0 [ 122.289251][ T5621] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 122.289313][ T5621] RIP: 0033:0x7fc2e7f9f397 [ 122.289364][ T5621] Code: a2 c7 05 5c 43 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 122.289398][ T5621] RSP: 002b:00007ffef83269d8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 122.289454][ T5621] RAX: 0000000000000000 RBX: 00007fc2e803448b RCX: 00007fc2e7f9f397 [ 122.289486][ T5621] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffef8326a90 [ 122.289513][ T5621] RBP: 00007ffef8326a90 R08: 00007ffef8327a90 R09: 00000000ffffffff [ 122.289541][ T5621] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffef8327b20 [ 122.289577][ T5621] R13: 00007fc2e803448b R14: 000000000001dd1e R15: 00007ffef8327b60 [ 122.289648][ T5621] [ 122.327335][ T5621] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 122.365513][ T6318] netlink: 4 bytes leftover after parsing attributes in process `syz.1.168'. [ 122.365689][ T6318] netlink: 4 bytes leftover after parsing attributes in process `syz.1.168'. [ 122.365754][ T6318] netlink: 4 bytes leftover after parsing attributes in process `syz.1.168'. [ 122.365974][ T6318] netlink: 4 bytes leftover after parsing attributes in process `syz.1.168'. [ 122.366184][ T6318] netlink: 4 bytes leftover after parsing attributes in process `syz.1.168'. [ 122.366356][ T6318] netlink: 4 bytes leftover after parsing attributes in process `syz.1.168'. [ 122.366490][ T6318] netlink: 4 bytes leftover after parsing attributes in process `syz.1.168'. [ 124.199555][ T6327] __nla_validate_parse: 47 callbacks suppressed [ 124.199576][ T6327] netlink: 12 bytes leftover after parsing attributes in process `syz.3.174'. [ 124.199594][ T6327] netlink: 12 bytes leftover after parsing attributes in process `syz.3.174'. [ 124.245044][ T6326] loop1: detected capacity change from 0 to 1024 [ 124.256618][ T6326] EXT4-fs: Ignoring removed bh option [ 124.258995][ T6326] EXT4-fs (loop1): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 124.357632][ T6326] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 125.216164][ T5618] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2863: Unable to expand inode 11. Delete some EAs or run e2fsck. [ 126.640586][ T6356] netlink: 4 bytes leftover after parsing attributes in process `syz.4.182'. [ 126.640649][ T6356] netlink: 4 bytes leftover after parsing attributes in process `syz.4.182'. [ 126.640690][ T6356] netlink: 4 bytes leftover after parsing attributes in process `syz.4.182'. [ 126.640730][ T6356] netlink: 4 bytes leftover after parsing attributes in process `syz.4.182'. [ 126.640769][ T6356] netlink: 4 bytes leftover after parsing attributes in process `syz.4.182'. [ 126.640808][ T6356] netlink: 4 bytes leftover after parsing attributes in process `syz.4.182'. [ 126.640847][ T6356] netlink: 4 bytes leftover after parsing attributes in process `syz.4.182'. [ 126.640886][ T6356] netlink: 4 bytes leftover after parsing attributes in process `syz.4.182'. [ 127.308357][ T5618] EXT4-fs error (device loop1): ext4_read_inline_dir:1512: inode #12: block 7: comm syz-executor: path /38/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=60 fake=0 [ 127.311619][ T5618] EXT4-fs (loop1): Remounting filesystem read-only [ 127.497539][ T5618] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.433902][ T6372] ptrace attach of "ci-upstream-linux-next-kasan-gce-root/syz-executor exec"[5620] was attempted by "ci-upstream-linux-next-kasan-gce-root/syz-executor exec"[6372] [ 128.930785][ T6377] FAULT_INJECTION: forcing a failure. [ 128.930785][ T6377] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 128.930816][ T6377] CPU: 1 UID: 0 PID: 6377 Comm: syz.1.176 Not tainted syzkaller #0 PREEMPT(full) [ 128.930839][ T6377] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 128.930852][ T6377] Call Trace: [ 128.930873][ T6377] [ 128.930881][ T6377] dump_stack_lvl+0xe8/0x150 [ 128.930915][ T6377] should_fail_ex+0x3eb/0x540 [ 128.930949][ T6377] _copy_from_user+0x2d/0xb0 [ 128.930970][ T6377] __sys_bpf+0x2e7/0xd90 [ 128.931002][ T6377] ? __pfx___sys_bpf+0x10/0x10 [ 128.931031][ T6377] ? do_futex+0x3e7/0x4e0 [ 128.931084][ T6377] ? rcu_is_watching+0x16/0xb0 [ 128.931115][ T6377] __x64_sys_bpf+0xba/0xd0 [ 128.931140][ T6377] do_syscall_64+0x166/0x520 [ 128.931159][ T6377] ? trace_irq_disable+0x3b/0x140 [ 128.931181][ T6377] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.931201][ T6377] ? clear_bhb_loop+0x70/0xc0 [ 128.931224][ T6377] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.931244][ T6377] RIP: 0033:0x7f62fcb9e159 [ 128.931261][ T6377] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 128.931276][ T6377] RSP: 002b:00007f62fd9b5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 128.931297][ T6377] RAX: ffffffffffffffda RBX: 00007f62fce25fa0 RCX: 00007f62fcb9e159 [ 128.931311][ T6377] RDX: 0000000000000048 RSI: 0000200000000880 RDI: 0000000000000000 [ 128.931324][ T6377] RBP: 00007f62fcc3503b R08: 0000000000000000 R09: 0000000000000000 [ 128.931336][ T6377] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 128.931347][ T6377] R13: 00007f62fce26038 R14: 00007f62fce25fa0 R15: 00007ffcfea942d8 [ 128.931377][ T6377] [ 130.410394][ T6394] syzkaller0: entered promiscuous mode [ 130.410418][ T6394] syzkaller0: entered allmulticast mode [ 130.891293][ T6402] warning: `syz.2.195' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 131.951743][ T6412] loop2: detected capacity change from 0 to 2048 [ 132.698774][ T6382] Process accounting resumed [ 132.711563][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.711639][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.791870][ T6412] Alternate GPT is invalid, using primary GPT. [ 132.791970][ T6412] loop2: p1 p2 p3 [ 132.791991][ T6412] loop2: partition table partially beyond EOD, truncated [ 133.239532][ T6429] BUG: using smp_processor_id() in preemptible [00000000] code: syz.1.204/6429 [ 133.239559][ T6429] caller is ieee80211_tx_control_port+0xac7/0x1100 [ 133.239595][ T6429] CPU: 0 UID: 0 PID: 6429 Comm: syz.1.204 Not tainted syzkaller #0 PREEMPT(full) [ 133.239618][ T6429] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 133.239630][ T6429] Call Trace: [ 133.239638][ T6429] [ 133.239648][ T6429] dump_stack_lvl+0xe8/0x150 [ 133.239681][ T6429] check_preemption_disabled+0xcd/0xd0 [ 133.239709][ T6429] ieee80211_tx_control_port+0xac7/0x1100 [ 133.239736][ T6429] ? ieee80211_tx_control_port+0x71b/0x1100 [ 133.239766][ T6429] nl80211_tx_control_port+0x624/0x960 [ 133.239806][ T6429] ? __pfx_nl80211_tx_control_port+0x10/0x10 [ 133.239831][ T6429] ? __pfx_nl80211_tx_control_port+0x10/0x10 [ 133.239869][ T6429] genl_family_rcv_msg_doit+0x233/0x340 [ 133.239899][ T6429] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 133.239935][ T6429] ? bpf_lsm_capable+0x9/0x20 [ 133.239956][ T6429] ? security_capable+0x7e/0x2c0 [ 133.239995][ T6429] genl_rcv_msg+0x614/0x7a0 [ 133.240025][ T6429] ? __pfx_genl_rcv_msg+0x10/0x10 [ 133.240045][ T6429] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 133.240069][ T6429] ? __pfx_nl80211_tx_control_port+0x10/0x10 [ 133.240094][ T6429] ? __pfx_nl80211_post_doit+0x10/0x10 [ 133.240134][ T6429] netlink_rcv_skb+0x226/0x4a0 [ 133.240164][ T6429] ? __pfx_genl_rcv_msg+0x10/0x10 [ 133.240188][ T6429] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 133.240232][ T6429] ? down_read+0x2b9/0x320 [ 133.240261][ T6429] genl_rcv+0x28/0x40 [ 133.240280][ T6429] netlink_unicast+0x7bd/0x940 [ 133.240317][ T6429] netlink_sendmsg+0x7c3/0xae0 [ 133.240352][ T6429] ? __pfx_netlink_sendmsg+0x10/0x10 [ 133.240390][ T6429] ? apparmor_socket_sendmsg+0x98/0x360 [ 133.240423][ T6429] ? __pfx_netlink_sendmsg+0x10/0x10 [ 133.240451][ T6429] sock_sendmsg_nosec+0x13a/0x180 [ 133.240485][ T6429] ____sys_sendmsg+0x54e/0x850 [ 133.240523][ T6429] ? __pfx_____sys_sendmsg+0x10/0x10 [ 133.240559][ T6429] ? import_iovec+0x73/0xa0 [ 133.240584][ T6429] ___sys_sendmsg+0x2a5/0x360 [ 133.240608][ T6429] ? __lock_acquire+0x747/0x2de0 [ 133.240636][ T6429] ? __pfx____sys_sendmsg+0x10/0x10 [ 133.240666][ T6429] ? __schedule+0x17f3/0x5940 [ 133.240728][ T6429] ? __fget_files+0x2a/0x420 [ 133.240749][ T6429] ? __fget_files+0x3a2/0x420 [ 133.240782][ T6429] __x64_sys_sendmsg+0x1b1/0x290 [ 133.240811][ T6429] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 133.240859][ T6429] do_syscall_64+0x166/0x520 [ 133.240890][ T6429] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 133.240934][ T6429] ? clear_bhb_loop+0x70/0xc0 [ 133.240959][ T6429] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 133.240981][ T6429] RIP: 0033:0x7f62fcb9e159 [ 133.241000][ T6429] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 133.241018][ T6429] RSP: 002b:00007f62fadf6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 133.241041][ T6429] RAX: ffffffffffffffda RBX: 00007f62fce26180 RCX: 00007f62fcb9e159 [ 133.241057][ T6429] RDX: 0000000000000800 RSI: 0000200000003700 RDI: 0000000000000005 [ 133.241070][ T6429] RBP: 00007f62fcc3503b R08: 0000000000000000 R09: 0000000000000000 [ 133.241083][ T6429] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 133.241096][ T6429] R13: 00007f62fce26218 R14: 00007f62fce26180 R15: 00007ffcfea942d8 [ 133.241129][ T6429] [ 135.349852][ T6412] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 135.372297][ T6412] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 135.687421][ T5630] udevd[5630]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 135.689213][ T5634] udevd[5634]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 135.690263][ T5622] udevd[5622]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 135.873988][ T6412] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 135.915608][ T6412] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 135.915700][ T6412] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 135.953092][ T6412] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 135.962611][ T6412] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 135.962697][ T6412] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 135.983061][ T6412] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 136.005682][ T6412] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 136.005935][ T6412] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 136.030341][ T6412] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 136.046195][ T6412] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 136.046293][ T6412] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 136.073775][ T6412] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 137.345386][ T5632] Bluetooth: hci3: command 0x0c1a tx timeout [ 137.997422][ T5638] Bluetooth: hci1: command 0x0c1a tx timeout [ 137.997767][ T5632] Bluetooth: hci2: command 0x0c1a tx timeout [ 138.065377][ T5638] Bluetooth: hci0: command 0x0c1a tx timeout [ 138.065479][ T5632] Bluetooth: hci4: command 0x0c1a tx timeout [ 139.425431][ T5632] Bluetooth: hci3: command 0x0c1a tx timeout [ 140.065416][ T5632] Bluetooth: hci2: command 0x0c1a tx timeout [ 140.065438][ T5638] Bluetooth: hci1: command 0x0c1a tx timeout [ 140.146056][ T5638] Bluetooth: hci0: command 0x0c1a tx timeout [ 140.146140][ T5632] Bluetooth: hci4: command 0x0c1a tx timeout [ 141.505523][ T5632] Bluetooth: hci3: command 0x0c1a tx timeout [ 142.145397][ T5632] Bluetooth: hci1: command 0x0c1a tx timeout [ 142.145435][ T5632] Bluetooth: hci2: command 0x0c1a tx timeout [ 142.225367][ T5638] Bluetooth: hci4: command 0x0c1a tx timeout [ 142.225385][ T5632] Bluetooth: hci0: command 0x0c1a tx timeout