last executing test programs: 4m32.057518007s ago: executing program 4 (id=66): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000200)={0x73622a85, 0x20a, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x98, 0x0, &(0x7f0000003200)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x1472, 0x0, 0x0, 0x0, 0xff8, 0x0, &(0x7f00000031c0)={0x30, 0x30, 0x1e}}}], 0x0, 0x0, 0x0}) 4m32.006536081s ago: executing program 4 (id=67): socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000000)='source', &(0x7f00000000c0)='%(:2', 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f00000003c0)=@filter={'filter\x00', 0x4, 0x4, 0x36c, 0xffffffff, 0xec, 0x0, 0x0, 0xfeffffff, 0xffffffff, 0x2a4, 0x2a4, 0x2a4, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x2f2, 0xa4, 0xec}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x1, 0x35, {0x3}}}}, {{@uncond, 0x0, 0xa4, 0xec}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x1, 0x14865e40, {0x6}}}}, {{@ipv6={@mcast1, @loopback, [0xffffffff, 0xff000000, 0xffffff00, 0xffffff00], [0xff000000, 0x0, 0x0, 0xffffffff], 'ip6tnl0\x00', 'veth0_vlan\x00', {0xff}, {}, 0x5c, 0x3a, 0x5, 0x5}, 0x0, 0xa4, 0xcc}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x10, 0x8, 0x1}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x3c8) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f0000001940)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001900)={&(0x7f0000001880)=ANY=[@ANYRES16=0x0, @ANYBLOB="00022dbd7000fcdbdf251400000008001d00", @ANYRES32, @ANYBLOB="080001000300000008001d00", @ANYBLOB, @ANYRES32, @ANYBLOB, @ANYBLOB='\b', @ANYBLOB="0c0006000300000003000000"], 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x4) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x1214040, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(r1, 0xc4089434, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@xino_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) getdents64(r4, &(0x7f0000000400)=""/4096, 0x1000) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(0xffffffffffffffff, r5, 0x0, 0x6) 4m30.441584228s ago: executing program 4 (id=68): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x20, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000580)="b3185d7b"}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x71096000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r4 = socket$netlink(0x10, 0x3, 0x14) openat$sysctl(0xffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/tcp_timestamps\x00', 0x1, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000300)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'wlan1\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x80c9}, 0x20000000) 4m29.006431596s ago: executing program 4 (id=71): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x20, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000580)="b3185d7b"}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x71096000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r4 = socket$netlink(0x10, 0x3, 0x14) openat$sysctl(0xffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/tcp_timestamps\x00', 0x1, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000300)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'wlan1\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x80c9}, 0x20000000) 4m27.453542033s ago: executing program 4 (id=74): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, &(0x7f00000000c0)='%(:2', 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f00000003c0)=@filter={'filter\x00', 0x4, 0x4, 0x36c, 0xffffffff, 0xec, 0x0, 0x0, 0xfeffffff, 0xffffffff, 0x2a4, 0x2a4, 0x2a4, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x2f2, 0xa4, 0xec}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x1, 0x35, {0x3}}}}, {{@uncond, 0x0, 0xa4, 0xec}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x1, 0x14865e40, {0x6}}}}, {{@ipv6={@mcast1, @loopback, [0xffffffff, 0xff000000, 0xffffff00, 0xffffff00], [0xff000000, 0x0, 0x0, 0xffffffff], 'ip6tnl0\x00', 'veth0_vlan\x00', {0xff}, {}, 0x5c, 0x3a, 0x5, 0x5}, 0x0, 0xa4, 0xcc}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x10, 0x8, 0x1}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x3c8) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f0000001940)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001900)={&(0x7f0000001880)=ANY=[@ANYRES16=0x0, @ANYBLOB="00022dbd7000fcdbdf251400000008001d00", @ANYRES32=r0, @ANYBLOB="080001000300000008001d00", @ANYBLOB, @ANYRES32=r0, @ANYBLOB, @ANYBLOB='\b', @ANYBLOB="0c0006000300000003000000"], 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x4) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x1214040, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(r2, 0xc4089434, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@xino_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) getdents64(r5, &(0x7f0000000400)=""/4096, 0x1000) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(0xffffffffffffffff, r6, 0x0, 0x6) 4m24.991101112s ago: executing program 4 (id=78): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f00000003c0)=@filter={'filter\x00', 0x4, 0x4, 0x36c, 0xffffffff, 0xec, 0x0, 0x0, 0xfeffffff, 0xffffffff, 0x2a4, 0x2a4, 0x2a4, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x2f2, 0xa4, 0xec}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x1, 0x35, {0x3}}}}, {{@uncond, 0x0, 0xa4, 0xec}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x1, 0x14865e40, {0x6}}}}, {{@ipv6={@mcast1, @loopback, [0xffffffff, 0xff000000, 0xffffff00, 0xffffff00], [0xff000000, 0x0, 0x0, 0xffffffff], 'ip6tnl0\x00', 'veth0_vlan\x00', {0xff}, {}, 0x5c, 0x3a, 0x5, 0x5}, 0x0, 0xa4, 0xcc}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x10, 0x8, 0x1}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x3c8) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f0000001940)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001900)={&(0x7f0000001880)=ANY=[@ANYRES16=0x0, @ANYBLOB="00022dbd7000fcdbdf251400000008001d00", @ANYRES32=r0, @ANYBLOB="080001000300000008001d00", @ANYBLOB, @ANYRES32=r0, @ANYBLOB, @ANYBLOB='\b', @ANYBLOB="0c0006000300000003000000"], 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x4) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x1214040, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(r2, 0xc4089434, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@xino_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) getdents64(r5, &(0x7f0000000400)=""/4096, 0x1000) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(0xffffffffffffffff, r6, 0x0, 0x6) 4m10.677832683s ago: executing program 32 (id=78): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f00000003c0)=@filter={'filter\x00', 0x4, 0x4, 0x36c, 0xffffffff, 0xec, 0x0, 0x0, 0xfeffffff, 0xffffffff, 0x2a4, 0x2a4, 0x2a4, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x2f2, 0xa4, 0xec}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x1, 0x35, {0x3}}}}, {{@uncond, 0x0, 0xa4, 0xec}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x1, 0x14865e40, {0x6}}}}, {{@ipv6={@mcast1, @loopback, [0xffffffff, 0xff000000, 0xffffff00, 0xffffff00], [0xff000000, 0x0, 0x0, 0xffffffff], 'ip6tnl0\x00', 'veth0_vlan\x00', {0xff}, {}, 0x5c, 0x3a, 0x5, 0x5}, 0x0, 0xa4, 0xcc}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x10, 0x8, 0x1}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x3c8) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f0000001940)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001900)={&(0x7f0000001880)=ANY=[@ANYRES16=0x0, @ANYBLOB="00022dbd7000fcdbdf251400000008001d00", @ANYRES32=r0, @ANYBLOB="080001000300000008001d00", @ANYBLOB, @ANYRES32=r0, @ANYBLOB, @ANYBLOB='\b', @ANYBLOB="0c0006000300000003000000"], 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x4) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x1214040, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(r2, 0xc4089434, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@xino_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) getdents64(r5, &(0x7f0000000400)=""/4096, 0x1000) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(0xffffffffffffffff, r6, 0x0, 0x6) 3m2.055583888s ago: executing program 5 (id=261): syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x3e, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f000000c0c0)="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", 0x2000, &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000019380)="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", 0x2000, &(0x7f000001fec0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000001d600)={0x90, 0x0, 0x5, {0x3, 0x5, 0x0, 0x3, 0x7ffffffd, 0x3, {0x2, 0x800, 0x10000000b, 0x4, 0x5, 0x1, 0xff, 0x4, 0x0, 0x8000, 0x5, 0x0, 0x0, 0x3117, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x5c399000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000180)='./bus\x00', 0x3000408, 0x0, 0x1, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x4002, 0x0, 0x1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c2) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x2, &(0x7f0000000100)=0x9, 0x4) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000200)=0x439a, 0x4) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000180)={0xa, 0x4e20, 0xffffffff, @loopback, 0xbf}, 0x1c) mknodat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file1\x00', 0x8000, 0x5) mount$overlay(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000000)={[{@lowerdir={'lowerdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file0/file0'}}, {@workdir={'workdir', 0x3d, './file1'}}]}) r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x8001) ioctl$USBDEVFS_CONTROL(r3, 0xc0105500, &(0x7f0000000040)={0x0, 0xb, 0x1, 0x3, 0x0, 0x7, 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0x1ac81b, 0x0, 0x0, 0x0, 0x1000000}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x66, 0x8, 0x0, 0x1, 0x1010000}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222}, 0x94) 3m1.022051709s ago: executing program 5 (id=266): splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x7c1c, 0x8) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000100)=0x0) prlimit64(r0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x9, 0x6, 0x201, 0x0, 0x0, {0x5, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x2}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) 3m0.811523454s ago: executing program 5 (id=270): socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x10, 0xa, 0x6) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f0000000100)={@empty, @multicast1}, &(0x7f0000000140)=0xc) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e22, 0xb, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a40000000160a03020000000000000000020000000900020073797a32000000000900010073797a3000000000140003800800024000000000080001400000000014000000110001"], 0x68}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000040000000000a40000000160a01080000000000000000020000000900020073797a30000000000900010073797a3000000000140003800800024000000000080001400000000014000000110001"], 0x68}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETFLOWTABLE(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x20}, 0x1, 0x0, 0x0, 0x20048000}, 0x8094) r3 = socket(0x8000000010, 0x2, 0x0) write(r3, &(0x7f00000002c0)="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", 0xfc) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r4, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001ec0)=ANY=[@ANYBLOB, @ANYRES16=r5, @ANYBLOB], 0xb8}, 0x1, 0x0, 0x0, 0x44001}, 0x4c020) r6 = socket(0x10, 0x803, 0x0) sendto(r6, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r6, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/106, 0x6a}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/139, 0x8b}, {&(0x7f00000001c0)=""/17, 0x11}], 0x8, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x0, &(0x7f0000003700)={0x77359400}) sendto$x25(r6, &(0x7f00000006c0)="816ef4c6f92a7ce837613cd90c3ca91b1179f99c4dda5e3057d75b07cf7468afb8c45d649308ff0d296329140c1acb79516a7acf54213232996c3918238be0c7a1c230839e6f5d2f748eae20b6ddce473fa7531a1081c9ca8c999dea75f5a363201629edbb146df4ebf214b9bddc17f3af586f44583f7e2ff8c3de01f3151bdf7bcb3bb0b02046eefcd26bcd09629aea53e4a4a7d85829f8f8aafc40b565e850510ea7bf0610178c402ff9b69eed348a431ff22eae5021de9eeab977a77450ed95d9966b3fb2b49e3a6dc5b8760e669133e1382adba039dcc62641f978f3b7b312a74698", 0xe4, 0x0, &(0x7f0000000540)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x3}}, 0x12) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r7, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0xc}, 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000280)=[@in={0x2, 0x4e23, @local}]}, &(0x7f0000000140)=0x10) r8 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r8, 0x8953, &(0x7f0000000180)={{0x2, 0x0, @empty}, {}, 0x0, {0x440, 0x0, @multicast1=0xe000cc02}}) 2m58.923839553s ago: executing program 5 (id=275): socket(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={0xffffffffffffffff, 0x2000000, 0x4, 0x0, &(0x7f0000000200)="63eced8e", 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r0 = socket$kcm(0xa, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000080)={0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e21, 0x3, 'fo\x00', 0x0, 0x660f537f, 0x66}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000000)={{0x84, @multicast2, 0x4f29, 0x3, 'sh\x00', 0x18, 0xc, 0x6b}, {@loopback, 0x4e26, 0x2, 0x1, 0x1}}, 0x44) sendmsg$sock(r0, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0xfd}}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 2m58.843236818s ago: executing program 5 (id=278): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_io_uring_setup(0x111, 0x0, 0x0, 0x0, &(0x7f0000000000)) ioctl$VT_DISALLOCATE(r2, 0x5608) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="fc0000001900e1f6ddedabc4ac5c000000000000000000000000000000000001ac1414aa00000000000000000000000000000000000000000a00000000000000", @ANYRES32=r1, @ANYRES32=0x0, @ANYBLOB="00000000000000000c00000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000000000000100000006000000000000000000000000000000010000000000000044000500ac1414aa000000000000000000000000000000003c000000020000000a01010200000000000000000000000006000000"], 0xfc}}, 0x0) 2m57.966303878s ago: executing program 5 (id=282): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, &(0x7f00000000c0)='%(:2', 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f00000003c0)=@filter={'filter\x00', 0x4, 0x4, 0x36c, 0xffffffff, 0xec, 0x0, 0x0, 0xfeffffff, 0xffffffff, 0x2a4, 0x2a4, 0x2a4, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x2f2, 0xa4, 0xec}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x1, 0x35, {0x3}}}}, {{@uncond, 0x0, 0xa4, 0xec}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x1, 0x14865e40, {0x6}}}}, {{@ipv6={@mcast1, @loopback, [0xffffffff, 0xff000000, 0xffffff00, 0xffffff00], [0xff000000, 0x0, 0x0, 0xffffffff], 'ip6tnl0\x00', 'veth0_vlan\x00', {0xff}, {}, 0x5c, 0x3a, 0x5, 0x5}, 0x0, 0xa4, 0xcc}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x10, 0x8, 0x1}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x3c8) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f0000001940)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001900)={&(0x7f0000001880)=ANY=[@ANYRES16=0x0, @ANYRES32=r0, @ANYBLOB="080001000300000008001d00", @ANYBLOB, @ANYRES32=r0, @ANYBLOB='\b', @ANYBLOB="0c0006000300000003000000"], 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x4) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x1214040, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(r2, 0xc4089434, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@xino_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) getdents64(r5, &(0x7f0000000400)=""/4096, 0x1000) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(0xffffffffffffffff, r6, 0x0, 0x6) 2m42.746936422s ago: executing program 33 (id=282): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, &(0x7f00000000c0)='%(:2', 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f00000003c0)=@filter={'filter\x00', 0x4, 0x4, 0x36c, 0xffffffff, 0xec, 0x0, 0x0, 0xfeffffff, 0xffffffff, 0x2a4, 0x2a4, 0x2a4, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x2f2, 0xa4, 0xec}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x1, 0x35, {0x3}}}}, {{@uncond, 0x0, 0xa4, 0xec}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x1, 0x14865e40, {0x6}}}}, {{@ipv6={@mcast1, @loopback, [0xffffffff, 0xff000000, 0xffffff00, 0xffffff00], [0xff000000, 0x0, 0x0, 0xffffffff], 'ip6tnl0\x00', 'veth0_vlan\x00', {0xff}, {}, 0x5c, 0x3a, 0x5, 0x5}, 0x0, 0xa4, 0xcc}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x10, 0x8, 0x1}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x3c8) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f0000001940)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001900)={&(0x7f0000001880)=ANY=[@ANYRES16=0x0, @ANYRES32=r0, @ANYBLOB="080001000300000008001d00", @ANYBLOB, @ANYRES32=r0, @ANYBLOB='\b', @ANYBLOB="0c0006000300000003000000"], 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x4) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x1214040, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(r2, 0xc4089434, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@xino_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) getdents64(r5, &(0x7f0000000400)=""/4096, 0x1000) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(0xffffffffffffffff, r6, 0x0, 0x6) 9.818474767s ago: executing program 0 (id=963): r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, 0x0, 0xc114) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000280)=ANY=[@ANYRES64=r0], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) r4 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) writev(r4, &(0x7f0000000540)=[{&(0x7f0000001680)='0', 0x1}, {&(0x7f00000007c0)="89", 0x1}], 0x2) 8.1640921s ago: executing program 0 (id=967): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) bpf$BPF_GET_BTF_INFO(0xa, &(0x7f00000003c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) socketpair$unix(0x1, 0x2, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0), 0x111, 0xa}}, 0x20) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) writev(r4, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) shutdown(r3, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000040)=0x2018, 0x4) recvmmsg(0xffffffffffffffff, &(0x7f0000002d40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)=""/25, 0x19}, 0x4}], 0x1, 0x40000120, 0x0) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0x10, &(0x7f0000000100)=@assoc_value={0x0, 0x7}, &(0x7f0000000140)=0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x2, &(0x7f0000000200)=ANY=[@ANYBLOB="00007b8f93c300069500000000000000"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x80) 7.676026463s ago: executing program 6 (id=970): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x40000) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x44880) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58840}, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000100)={0x18, 0x0, {0x4, @local, 'ip_vti0\x00'}}, 0x1e) connect$pppoe(0xffffffffffffffff, &(0x7f0000000000)={0x18, 0x0, {0x4, @random="1a772955a77a", 'gre0\x00'}}, 0x1e) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x600}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) 7.543519522s ago: executing program 6 (id=974): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) read$FUSE(0xffffffffffffffff, &(0x7f0000009780)={0x2020}, 0x2020) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) ptrace$pokeuser(0x6, r2, 0x388, 0xd) ioctl$MON_IOCX_GET(0xffffffffffffffff, 0x40189206, &(0x7f0000000280)={&(0x7f0000000180), 0x0}) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x80, 0xa, 0x0, 0x0, 0x7998}, 0x8, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) 7.242737233s ago: executing program 0 (id=975): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) pread64(r0, 0x0, 0x0, 0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f00000003c0)=@filter={'filter\x00', 0x4, 0x4, 0x36c, 0xffffffff, 0xec, 0x0, 0x0, 0xfeffffff, 0xffffffff, 0x2a4, 0x2a4, 0x2a4, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x2f2, 0xa4, 0xec}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x1, 0x35, {0x3}}}}, {{@uncond, 0x0, 0xa4, 0xec}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x1, 0x14865e40, {0x6}}}}, {{@ipv6={@mcast1, @loopback, [0xffffffff, 0xff000000, 0xffffff00, 0xffffff00], [0xff000000, 0x0, 0x0, 0xffffffff], 'ip6tnl0\x00', 'veth0_vlan\x00', {0xff}, {}, 0x5c, 0x3a, 0x5, 0x5}, 0x0, 0xa4, 0xcc}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x10, 0x8, 0x1}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x3c8) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f0000001940)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001900)={&(0x7f0000001880)=ANY=[@ANYRES16=0x0, @ANYBLOB="00022dbd7000fcdbdf251400000008001d00", @ANYRES32, @ANYBLOB="080001000300000008001d00", @ANYBLOB, @ANYRES32, @ANYBLOB, @ANYBLOB='\b', @ANYBLOB="0c0006000300000003000000"], 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x4) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x1214040, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(r2, 0xc4089434, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@xino_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) getdents64(r5, &(0x7f0000000400)=""/4096, 0x1000) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(0xffffffffffffffff, r6, 0x0, 0x6) 6.903601866s ago: executing program 6 (id=977): r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, 0x0, 0xc114) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000280)=ANY=[@ANYRES64=r0], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) r4 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) writev(r4, &(0x7f0000000540)=[{&(0x7f0000001680)='0', 0x1}, {&(0x7f00000007c0)="89", 0x1}], 0x2) 6.318165587s ago: executing program 1 (id=979): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x4040010}, 0x30) 5.996908779s ago: executing program 2 (id=980): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000400)={@dev, @multicast2}, &(0x7f0000000440)=0xc) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, 0x0, 0x0) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000c00)={'filter\x00', 0x7, 0x4, 0x3c8, 0xe8, 0x0, 0x0, 0x2e0, 0x2e0, 0x2e0, 0x4, 0x0, {[{{@arp={@broadcast, @empty, 0xffffff00, 0xff000000, 0xe, 0x2, {@empty, {[0x0, 0x0, 0xff, 0x0, 0x0, 0xff]}}, {@mac, {[0x0, 0xff, 0xff]}}, 0x4, 0x4, 0x1, 0x4d3, 0x0, 0xf8db, 'veth1_virt_wifi\x00', 'ip6tnl0\x00', {}, {0xff}}, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x8, 0x8}}}, {{@arp={@private=0xa010101, @empty, 0xffffffff, 0xffffff00, 0x9, 0x2, {@empty, {[0x0, 0xff, 0xff, 0x0, 0x730e8ec89ff96e2d]}}, {@empty, {[0xff, 0xff, 0x0, 0xff]}}, 0x1, 0x1, 0xb, 0x6, 0x4000, 0x4, 'virt_wifi0\x00', 'bond_slave_0\x00', {}, {0xff}, 0x0, 0x397}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@local, @private=0xa010102, @multicast2, 0x2}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, r6) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000000040)={0x3, 0x0, &(0x7f00000003c0)={&(0x7f00000006c0)=ANY=[], 0x128}, 0x1, 0x7}, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f1, &(0x7f0000000340)={'sit0\x00', &(0x7f00000001c0)=@ethtool_cmd={0x0, 0x5, 0x0, 0x0, 0x7, 0x0, 0x3, 0xfc, 0x0, 0x1, 0x0, 0x0, 0x0, 0xff, 0x0, 0x45}}) 4.140700056s ago: executing program 0 (id=981): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) userfaultfd(0x80801) syz_mount_image$fuse(0x0, &(0x7f0000000700)='./file2\x00', 0x102a, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)={[], [], 0x2c}) syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000280)='./file0\x00', 0x288a0aa, &(0x7f0000000180)=ANY=[], 0x1, 0x0, 0x0) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0xffff}) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r0, 0xc0189436, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x5f, 0x3}) 4.140314355s ago: executing program 1 (id=982): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000480)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x2, 0x7fff0000}]}) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000001a40)=ANY=[], 0x17) write$binfmt_script(r0, &(0x7f00000000c0), 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x62, 0x5, 0x360, 0x108, 0x288, 0xffffffff, 0x288, 0x1e0, 0x380, 0x380, 0xffffffff, 0x380, 0x380, 0x5, 0x0, {[{{@ip={@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xff, 0x0, 'veth0_to_bond\x00', 'wg1\x00'}, 0x0, 0x70, 0xd0, 0x0, {0x22e}}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @multicast, 0x7f, 0xe, [0x2f, 0x4, 0x3, 0x4, 0x31, 0x2, 0x1, 0x15, 0x21, 0x2c, 0x3e, 0xe, 0x29, 0x3a, 0x0, 0xa], 0x2, 0xd577, 0x300000000000}}}, {{@uncond, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0xc, @local, @multicast2, @gre_key=0x7, @icmp_id=0x65}}}}, {{@ip={@broadcast, @multicast1, 0x0, 0x0, 'veth1_to_hsr\x00', 'ipvlan0\x00'}, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x0, @private, @multicast2, @gre_key}}}}, {{@ip={@remote, @empty, 0x0, 0x0, 'veth1_to_batadv\x00', 'pim6reg\x00', {0xff}}, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x16, @remote, @multicast1, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3c0) 4.096195199s ago: executing program 6 (id=983): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0) read$midi(r2, 0x0, 0x3b) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x80383, 0x0) ioctl$SNDCTL_SEQ_RESET(r3, 0x5100) 4.095457529s ago: executing program 3 (id=984): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) set_mempolicy(0x3, 0x0, 0x20010000) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000080)=0x6d) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000340)=0x6) bind$netlink(0xffffffffffffffff, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_DYING(r5, 0x0, 0x20000000) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000000640)={&(0x7f0000000180), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6}) 3.344694861s ago: executing program 1 (id=985): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) bpf$BPF_GET_BTF_INFO(0xa, &(0x7f00000003c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) writev(r4, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) shutdown(r3, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000040)=0x2018, 0x4) recvmmsg(0xffffffffffffffff, &(0x7f0000002d40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)=""/25, 0x19}, 0x4}], 0x1, 0x40000120, 0x0) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0x10, &(0x7f0000000100)=@assoc_value={0x0, 0x7}, &(0x7f0000000140)=0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x2, &(0x7f0000000200)=ANY=[@ANYBLOB="00007b8f93c300069500000000000000"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x80) 3.343786201s ago: executing program 0 (id=986): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000100)="5c00000013006bcd9e3fe3dc6e48aa310b6b8703110000001f03000000080000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84d0f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f6", 0x5a}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4014) 3.299154193s ago: executing program 0 (id=987): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) read$FUSE(0xffffffffffffffff, &(0x7f0000009780)={0x2020}, 0x2020) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) ptrace$pokeuser(0x6, r2, 0x388, 0xd) ioctl$MON_IOCX_GET(0xffffffffffffffff, 0x40189206, &(0x7f0000000280)={&(0x7f0000000180), 0x0}) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x80, 0xa, 0x0, 0x0, 0x7998}, 0x8, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) 3.241289568s ago: executing program 2 (id=988): openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) socket$inet(0x2, 0x1, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0), 0x111, 0x6}}, 0x20) r1 = socket$unix(0x1, 0x2, 0x0) ppoll(&(0x7f0000000300)=[{r1, 0x4236}], 0x1, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x2, 0x4}}, 0x20) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 3.009824713s ago: executing program 3 (id=989): sendmsg$DEVLINK_CMD_PORT_GET(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)={0x38, 0x0, 0x1, 0x170bd25, 0x25dfdbfc, {0x39}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x7}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x448c9}, 0x4004810) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)={0x180, 0x0, 0x2, 0x301, 0x0, 0x0, {0x7, 0x0, 0x2}, [@CTA_EXPECT_NAT={0x104, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_TUPLE={0x7c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x64, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x2a}}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @rand_addr=0x64010102}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}]}, @CTA_EXPECT_NAT={0x68, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1}, {0x14, 0x4, @private1}}}]}, @CTA_EXPECT_NAT_TUPLE={0x2c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @private=0xa010100}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}]}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}]}]}, 0x180}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) 2.879557392s ago: executing program 2 (id=990): socket$inet6_sctp(0xa, 0x5, 0x84) r0 = socket$netlink(0x10, 0x3, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$packet(0x11, 0x2, 0x300) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'macsec0\x00', 0x0}) sendto$packet(r5, &(0x7f0000000080)="a99c383d33c9c607b1b9d49688a883", 0xf, 0x0, &(0x7f0000000000)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @link_local}, 0x14) recvmmsg(r4, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0x17}}], 0x400000000000179, 0x10022, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000340)="480000001400190d09034beafd0d36020a841a000000230f00000000a2bc5603ca00000f7f89004e00200000000101ff00c00e03000200000000000000000300005839c900910000", 0x48}], 0x1) 2.878475792s ago: executing program 3 (id=991): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x40000) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x44880) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58840}, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000100)={0x18, 0x0, {0x4, @local, 'ip_vti0\x00'}}, 0x1e) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000000)={0x18, 0x0, {0x4, @random="1a772955a77a", 'gre0\x00'}}, 0x1e) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x600}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) 2.47389567s ago: executing program 1 (id=992): socket$netlink(0x10, 0x3, 0x0) syz_mount_image$erofs(&(0x7f00000003c0), &(0x7f0000000880)='./file0\x00', 0x18000c6, &(0x7f00000001c0)=ANY=[@ANYRESHEX, @ANYRES16], 0x0, 0x17d, &(0x7f0000001ac0)="$eJzsmLFP+kAUx7/vyg/yMy6uLg4SxcHSFjUuxLA5mogaNwlUghYx0EGYdPH/cHZwdvOPMM7qYFwY3Uxqej3oQQR10MT4PsPj+7h313evyXcoGIb5szw+vNyvFe+EAWASaaTU/89GXCO0+tfb83Jraj1/OfeUv041robPIwBB8PnnJwDcFAz4Kg+Cwd1p9VuE6OstCCwovQOCqfQeBLaVdkHYVfpA042w3jT3a55rlhteJRRWGOwwOGHIDffXPSNUtP5IW2+1O4clz3Ob3yg+ml+3IJDX+tPfV282ljY/GwK20jkQNpVeRao3m2gk2v2nE/H5xg/fnwULFr9NxP4UXBDmNX9KaP6R9evH2Va7s1irl6pu1T1ynNyKtWRZy05WGlEUx/jff+lPE9r5/0bUJimJk5LvN+0o9nMniu85rpD+J5CZjfLQ+5Mju4nWSe0jqTLGmHKGYRiGYRiGYRiGYRiGYZgvMAOSX0EldIo4GcDZkNVvAQAA///an3MA") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=@newsa={0x104, 0x10, 0x7, 0x0, 0x0, {{@in6=@mcast1, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x4e20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x2000000, 0x3c}, @in6=@private0, {0x10001, 0x0, 0x2, 0x7, 0x10000000, 0xad}, {0x6, 0x200000, 0x7}, {0x40000, 0x1008, 0xae8}, 0x70bd28, 0x0, 0xa, 0x1}, [@coaddr={0x14, 0xe, @in=@remote}]}, 0x104}}, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) fcntl$setownex(r4, 0xf, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) personality(0x400000a) bpf$ITER_CREATE(0xb, &(0x7f00000004c0), 0x8) syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000140)='./file2\x00', 0x1000000, &(0x7f00000000c0)=ANY=[@ANYBLOB='nodots,dmask=00000000000000000000003,usefree,nodots,flush,dots,dots,gid=', @ANYRESHEX=0x0, @ANYBLOB], 0x1, 0x214, &(0x7f0000000840)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)={'#! ', '', [{}, {0x20, '$^'}, {0x20, ')(\xda'}, {}], 0xa, "b46fa1519b0d0a00000000000000f6ec946dacc5f338520f4061b1dccc4115"}, 0x2c) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000a80)={'syz1\x00', {0x6b, 0x1, 0xd76, 0x4}, 0x3b, [0x0, 0xe5a, 0x8, 0xffffffb9, 0x4, 0x1, 0x30000000, 0xf6ec, 0xffffffc6, 0x9, 0x9, 0x7, 0x8, 0x8, 0xc1fd, 0x0, 0x7, 0x9, 0x7, 0xfffffff8, 0xd13e, 0xc, 0x19aa0f4c, 0x7, 0xac, 0xdf, 0x1, 0x7, 0x6, 0x323, 0x8, 0x6, 0x3, 0x5, 0x7, 0xcfb, 0x1ddc, 0x0, 0x9, 0x0, 0xffff6e41, 0xffff8001, 0x1, 0x1, 0x100, 0x1, 0x3, 0xfff, 0x6, 0x4, 0x5, 0x4, 0x9, 0xdc, 0x33c, 0x8, 0xffff, 0x8, 0x4, 0x5, 0x8, 0x3, 0x1, 0x7], [0x2, 0x7, 0x9caf5eac, 0x6, 0x4039, 0x3, 0x4, 0x401, 0x8, 0x3, 0x6, 0x10, 0x0, 0x80000001, 0x1, 0x7, 0x10, 0x9, 0x3, 0xfffffff9, 0x7, 0x4, 0x7, 0x3, 0x8000, 0x8, 0x80000000, 0x4d, 0x3, 0xe, 0xbd9, 0x251fcf7c, 0x42c, 0x7, 0x8, 0x1, 0x7, 0x80000000, 0x8000, 0x3ff, 0x4, 0x9, 0x1a4, 0x8, 0x10000, 0x400, 0xfffff001, 0x4, 0x5, 0xffffffff, 0x6, 0x1, 0xfffffff7, 0x4, 0x3, 0x1000, 0x5, 0x9f70, 0x2, 0xffff, 0x100, 0x0, 0xfffffff8, 0xc], [0xd, 0x0, 0x3, 0x2, 0x7ff, 0x8, 0x473a, 0x6, 0xf3bd, 0x7, 0x5, 0x54b6, 0x2cd, 0x2, 0x35, 0xfffff21b, 0x0, 0x3, 0x5, 0x4, 0x1, 0x15cf, 0x9, 0x101, 0x9, 0xffff, 0x7f, 0x2, 0x4, 0x6, 0x101, 0x7, 0x1000000, 0x81, 0x53, 0xaf, 0x3, 0xfd4, 0x6, 0x100, 0x2, 0x5, 0x1ff, 0x81, 0x9, 0x100, 0x8, 0xffffff64, 0xff, 0x5, 0x8001, 0x8000, 0x7ff, 0xffff, 0x3c6f, 0xfff, 0x7ff, 0x6, 0x1000, 0x10001, 0x33, 0x9, 0xe4, 0x1], [0xc1, 0xfffffffe, 0x9, 0x9, 0x4, 0x7, 0x300, 0x156f4f4a, 0x24000, 0x639, 0x2, 0x1, 0x7, 0xc, 0x6, 0xde0, 0x7, 0x0, 0x7435, 0x80000001, 0x4, 0x2, 0x80000001, 0x5, 0x4, 0x6, 0x9, 0xa00000, 0x6f7, 0x30e, 0x1dc, 0xfcc6, 0x3, 0x5, 0x7, 0x6, 0x8001, 0x9, 0x9, 0x1, 0x7fffffff, 0x7ff, 0x3b04, 0x9, 0x9, 0xed2, 0x6, 0x73ae, 0x3, 0x7f, 0x5, 0x7fff, 0x2, 0xc, 0xef6, 0x7ff, 0x4, 0x3, 0x4, 0x2, 0x5, 0x1, 0x7, 0x800000]}, 0x45c) r5 = openat$rtc(0xffffffffffffff9c, &(0x7f00000004c0), 0x4000, 0x0) ioctl$RTC_UIE_ON(r5, 0x7003) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x140) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000000), 0x8) 2.404708834s ago: executing program 3 (id=993): socket$inet6_sctp(0xa, 0x5, 0x84) r0 = socket$netlink(0x10, 0x3, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$packet(0x11, 0x2, 0x300) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'macsec0\x00', 0x0}) sendto$packet(r5, &(0x7f0000000080)="a99c383d33c9c607b1b9d49688a883", 0xf, 0x0, &(0x7f0000000000)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @link_local}, 0x14) recvmmsg(r4, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0x17}}], 0x400000000000179, 0x10022, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000340)="480000001400190d09034beafd0d36020a841a000000230f00000000a2bc5603ca00000f7f89004e00200000000101ff00c00e03000200000000000000000300005839c900910000", 0x48}], 0x1) 1.836843744s ago: executing program 2 (id=994): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) pread64(r1, 0x0, 0x0, 0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f00000003c0)=@filter={'filter\x00', 0x4, 0x4, 0x36c, 0xffffffff, 0xec, 0x0, 0x0, 0xfeffffff, 0xffffffff, 0x2a4, 0x2a4, 0x2a4, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x2f2, 0xa4, 0xec}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x1, 0x35, {0x3}}}}, {{@uncond, 0x0, 0xa4, 0xec}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x1, 0x14865e40, {0x6}}}}, {{@ipv6={@mcast1, @loopback, [0xffffffff, 0xff000000, 0xffffff00, 0xffffff00], [0xff000000, 0x0, 0x0, 0xffffffff], 'ip6tnl0\x00', 'veth0_vlan\x00', {0xff}, {}, 0x5c, 0x3a, 0x5, 0x5}, 0x0, 0xa4, 0xcc}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x10, 0x8, 0x1}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x3c8) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f0000001940)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001900)={&(0x7f0000001880)=ANY=[@ANYRES16=0x0, @ANYBLOB="00022dbd7000fcdbdf251400000008001d00", @ANYRES32=r0, @ANYBLOB="080001000300000008001d00", @ANYBLOB, @ANYRES32=r0, @ANYBLOB, @ANYBLOB='\b', @ANYBLOB="0c0006000300000003000000"], 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x4) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x1214040, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(r3, 0xc4089434, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@xino_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) getdents64(r6, &(0x7f0000000400)=""/4096, 0x1000) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(0xffffffffffffffff, r7, 0x0, 0x6) 1.514582216s ago: executing program 1 (id=995): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000400)={@dev, @multicast2}, &(0x7f0000000440)=0xc) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, 0x0, 0x0) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000c00)={'filter\x00', 0x7, 0x4, 0x3c8, 0xe8, 0x0, 0x0, 0x2e0, 0x2e0, 0x2e0, 0x4, 0x0, {[{{@arp={@broadcast, @empty, 0xffffff00, 0xff000000, 0xe, 0x2, {@empty, {[0x0, 0x0, 0xff, 0x0, 0x0, 0xff]}}, {@mac, {[0x0, 0xff, 0xff]}}, 0x4, 0x4, 0x1, 0x4d3, 0x0, 0xf8db, 'veth1_virt_wifi\x00', 'ip6tnl0\x00', {}, {0xff}}, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x8, 0x8}}}, {{@arp={@private=0xa010101, @empty, 0xffffffff, 0xffffff00, 0x9, 0x2, {@empty, {[0x0, 0xff, 0xff, 0x0, 0x730e8ec89ff96e2d]}}, {@empty, {[0xff, 0xff, 0x0, 0xff]}}, 0x1, 0x1, 0xb, 0x6, 0x4000, 0x4, 'virt_wifi0\x00', 'bond_slave_0\x00', {}, {0xff}, 0x0, 0x397}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@local, @private=0xa010102, @multicast2, 0x2}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, r6) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000000040)={0x3, 0x0, &(0x7f00000003c0)={&(0x7f00000006c0)=ANY=[], 0x128}, 0x1, 0x7}, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f1, &(0x7f0000000340)={'sit0\x00', &(0x7f00000001c0)=@ethtool_cmd={0x0, 0x5, 0x0, 0x0, 0x7, 0x0, 0x3, 0xfc, 0x0, 0x1, 0x0, 0x0, 0x0, 0xff, 0x0, 0x45}}) 1.474105209s ago: executing program 6 (id=996): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000480)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x2, 0x7fff0000}]}) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000001a40)=ANY=[], 0x17) write$binfmt_script(r0, &(0x7f00000000c0), 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x62, 0x5, 0x360, 0x108, 0x288, 0xffffffff, 0x288, 0x1e0, 0x380, 0x380, 0xffffffff, 0x380, 0x380, 0x5, 0x0, {[{{@ip={@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xff, 0x0, 'veth0_to_bond\x00', 'wg1\x00'}, 0x0, 0x70, 0xd0, 0x0, {0x22e}}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @multicast, 0x7f, 0xe, [0x2f, 0x4, 0x3, 0x4, 0x31, 0x2, 0x1, 0x15, 0x21, 0x2c, 0x3e, 0xe, 0x29, 0x3a, 0x0, 0xa], 0x2, 0xd577, 0x300000000000}}}, {{@uncond, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0xc, @local, @multicast2, @gre_key=0x7, @icmp_id=0x65}}}}, {{@ip={@broadcast, @multicast1, 0x0, 0x0, 'veth1_to_hsr\x00', 'ipvlan0\x00'}, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x0, @private, @multicast2, @gre_key}}}}, {{@ip={@remote, @empty, 0x0, 0x0, 'veth1_to_batadv\x00', 'pim6reg\x00', {0xff}}, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x16, @remote, @multicast1, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3c0) 77.288375ms ago: executing program 3 (id=997): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) userfaultfd(0x80801) syz_mount_image$fuse(0x0, &(0x7f0000000700)='./file2\x00', 0x102a, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}], [], 0x2c}) syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000280)='./file0\x00', 0x288a0aa, &(0x7f0000000180)=ANY=[], 0x1, 0x0, 0x0) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0xffff}) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r0, 0xc0189436, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x5f, 0x3}) 75.888765ms ago: executing program 2 (id=998): socket$packet(0x11, 0x3, 0x300) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) r0 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x428a4}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'dummy0\x00'}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x3c}}, 0x8000) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040080}, 0x0) 32.329667ms ago: executing program 1 (id=999): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x600}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) 18.441678ms ago: executing program 3 (id=1000): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x40000) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x44880) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58840}, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000100)={0x18, 0x0, {0x4, @local, 'ip_vti0\x00'}}, 0x1e) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000000)={0x18, 0x0, {0x4, @random="1a772955a77a", 'gre0\x00'}}, 0x1e) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x600}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) 1.28623ms ago: executing program 6 (id=1001): openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) socket$inet(0x2, 0x1, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0), 0x111, 0x6}}, 0x20) r1 = socket$unix(0x1, 0x2, 0x0) ppoll(&(0x7f0000000300)=[{r1, 0x4236}], 0x1, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x2, 0x4}}, 0x20) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 0s ago: executing program 2 (id=1002): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) bpf$BPF_GET_BTF_INFO(0xa, &(0x7f00000003c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) writev(r4, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) shutdown(r3, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000040)=0x2018, 0x4) recvmmsg(0xffffffffffffffff, &(0x7f0000002d40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)=""/25, 0x19}, 0x4}], 0x1, 0x40000120, 0x0) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0x10, &(0x7f0000000100)=@assoc_value={0x0, 0x7}, &(0x7f0000000140)=0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x2, &(0x7f0000000200)=ANY=[@ANYBLOB="00007b8f93c300069500000000000000"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x80) kernel console output (not intermixed with test programs): command 0x041b tx timeout [ 29.602405][ T4409] tipc: Started in network mode [ 29.606845][ T4409] tipc: Node identity be09679108ba, cluster identity 4711 [ 29.608196][ T4409] tipc: Enabled bearer , priority 0 [ 29.710284][ T4320] XFS (loop0): Unmounting Filesystem [ 29.713191][ T4408] tipc: Resetting bearer [ 31.229808][ T4408] tipc: Disabling bearer [ 31.834880][ T4330] Bluetooth: hci4: command 0x040f tx timeout [ 31.835862][ T4330] Bluetooth: hci3: command 0x040f tx timeout [ 31.836681][ T4330] Bluetooth: hci2: command 0x040f tx timeout [ 31.837516][ T4330] Bluetooth: hci1: command 0x040f tx timeout [ 31.838494][ T4330] Bluetooth: hci0: command 0x040f tx timeout [ 31.840382][ T4425] wlan1 speed is unknown, defaulting to 1000 [ 31.841947][ T4425] wlan1 speed is unknown, defaulting to 1000 [ 31.843819][ T4425] wlan1 speed is unknown, defaulting to 1000 [ 31.845591][ T4425] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 31.848451][ T4425] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 31.854506][ T4425] wlan1 speed is unknown, defaulting to 1000 [ 31.855783][ T4425] wlan1 speed is unknown, defaulting to 1000 [ 31.856982][ T4425] wlan1 speed is unknown, defaulting to 1000 [ 31.858099][ T4425] wlan1 speed is unknown, defaulting to 1000 [ 31.859603][ T4425] wlan1 speed is unknown, defaulting to 1000 [ 31.861054][ T4425] wlan1 speed is unknown, defaulting to 1000 [ 33.262857][ T4443] ======================================================= [ 33.262857][ T4443] WARNING: The mand mount option has been deprecated and [ 33.262857][ T4443] and is ignored by this kernel. Remove the mand [ 33.262857][ T4443] option from the mount to silence this warning. [ 33.262857][ T4443] ======================================================= [ 33.463092][ T4443] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 33.989087][ T4323] Bluetooth: hci0: command 0x0419 tx timeout [ 33.990100][ T4323] Bluetooth: hci1: command 0x0419 tx timeout [ 33.991187][ T4323] Bluetooth: hci2: command 0x0419 tx timeout [ 33.992232][ T4323] Bluetooth: hci3: command 0x0419 tx timeout [ 33.993943][ T4323] Bluetooth: hci4: command 0x0419 tx timeout [ 34.014369][ T4442] wlan1 speed is unknown, defaulting to 1000 [ 34.135629][ T4446] device syzkaller0 entered promiscuous mode [ 34.477550][ T4448] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 34.504846][ T4455] loop4: detected capacity change from 0 to 512 [ 34.534481][ T4455] EXT4-fs (loop4): 1 truncate cleaned up [ 34.535447][ T4455] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 34.575083][ T4455] EXT4-fs warning (device loop4): ext4_group_extend:1870: can't shrink FS - resize aborted [ 34.936561][ T4469] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 35.075716][ T4469] overlayfs: failed to look up (tracing) for ino (-66) [ 36.042527][ T4471] netlink: 68 bytes leftover after parsing attributes in process `syz.2.15'. [ 36.335579][ T4333] EXT4-fs (loop4): unmounting filesystem. [ 36.510592][ T4480] wlan1 speed is unknown, defaulting to 1000 [ 37.314364][ T4481] loop4: detected capacity change from 0 to 512 [ 37.617977][ T4489] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 37.642443][ C0] sched: RT throttling activated [ 37.652800][ T4489] overlayfs: failed to look up (tracing) for ino (-66) [ 37.670410][ T4481] EXT4-fs (loop4): 1 truncate cleaned up [ 37.671306][ T4481] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 38.693249][ T4494] netlink: 68 bytes leftover after parsing attributes in process `syz.3.20'. [ 39.018145][ T4481] EXT4-fs warning (device loop4): ext4_group_extend:1870: can't shrink FS - resize aborted [ 39.254762][ T27] audit: type=1326 audit(39.230:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4496 comm="syz.2.23" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff9ab771a8 code=0x0 [ 40.494822][ T4511] binder: 4510:4511 ioctl c0306201 20000180 returned -14 [ 40.498745][ T27] audit: type=1326 audit(40.420:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4506 comm="syz.0.25" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff843771a8 code=0x0 [ 40.732157][ T4522] siw: device registration error -23 [ 41.837315][ T4333] EXT4-fs (loop4): unmounting filesystem. [ 42.007120][ T4535] loop4: detected capacity change from 0 to 32768 [ 42.017109][ T4535] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop4 scanned by syz.4.29 (4535) [ 42.026749][ T4535] BTRFS info (device loop4): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 42.028498][ T4535] BTRFS info (device loop4): using crc32c (crc32c-generic) checksum algorithm [ 42.029846][ T4535] BTRFS info (device loop4): enabling disk space caching [ 42.031037][ T4535] BTRFS info (device loop4): force clearing of disk cache [ 42.032216][ T4535] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 42.033844][ T4535] BTRFS info (device loop4): use zstd compression, level 3 [ 42.034977][ T4535] BTRFS info (device loop4): disk space caching is enabled [ 42.303390][ T4548] wlan1 speed is unknown, defaulting to 1000 [ 43.087857][ T4529] loop3: detected capacity change from 0 to 32768 [ 43.128723][ T4530] loop0: detected capacity change from 0 to 32768 [ 43.175496][ T4530] XFS (loop0): Mounting V5 Filesystem [ 43.199328][ T4535] BTRFS info (device loop4): enabling ssd optimizations [ 43.201747][ T4535] BTRFS info (device loop4): rebuilding free space tree [ 43.215056][ T4535] BTRFS info (device loop4): disabling free space tree [ 43.216296][ T4535] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 43.217836][ T4535] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 43.308479][ T4530] XFS (loop0): Starting recovery (logdev: internal) [ 43.395615][ T4577] fs-verity: sha512 using implementation "sha512-ce" [ 43.401788][ T4577] BTRFS info (device loop4): setting compat-ro feature flag for VERITY (0x4) [ 43.660251][ T4580] siw: device registration error -23 [ 45.015121][ T4530] XFS (loop0): Ending recovery (logdev: internal) [ 45.046740][ T4333] BTRFS info (device loop4): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 45.103504][ T4584] loop2: detected capacity change from 0 to 512 [ 45.108312][ T4320] XFS (loop0): Unmounting Filesystem [ 45.214819][ T4584] EXT4-fs (loop2): 1 truncate cleaned up [ 45.218377][ T4584] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 45.497808][ T4602] siw: device registration error -23 [ 46.090217][ T4603] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 47.418486][ T4584] EXT4-fs warning (device loop2): ext4_group_extend:1870: can't shrink FS - resize aborted [ 47.443726][ T4608] binder: 4605:4608 ioctl 4018620d 0 returned -22 [ 47.449799][ T4608] binder: 4605:4608 ioctl c0306201 20000180 returned -14 [ 47.460944][ T4608] siw: device registration error -23 [ 47.483524][ T4329] EXT4-fs (loop2): unmounting filesystem. [ 47.492400][ T4600] siw: device registration error -23 [ 47.517938][ T4607] tipc: Started in network mode [ 47.518824][ T4607] tipc: Node identity 065d5ac78daf, cluster identity 4711 [ 47.520119][ T4607] tipc: Enabled bearer , priority 0 [ 47.531880][ T4612] binder: 4611:4612 ioctl 4018620d 0 returned -22 [ 47.540213][ T4612] binder: 4611:4612 ioctl c0306201 20000180 returned -14 [ 47.540430][ T4607] tipc: Resetting bearer [ 47.549681][ T4612] siw: device registration error -23 [ 47.653563][ T4606] tipc: Disabling bearer [ 47.757010][ T4616] loop1: detected capacity change from 0 to 32768 [ 47.767872][ T4616] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop1 scanned by syz.1.46 (4616) [ 47.772152][ T4616] BTRFS info (device loop1): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 47.773819][ T4616] BTRFS info (device loop1): using crc32c (crc32c-generic) checksum algorithm [ 47.775264][ T4616] BTRFS info (device loop1): enabling disk space caching [ 47.776348][ T4616] BTRFS info (device loop1): force clearing of disk cache [ 47.777449][ T4616] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 47.778680][ T4610] loop4: detected capacity change from 0 to 32768 [ 47.778810][ T4616] BTRFS info (device loop1): use zstd compression, level 3 [ 47.781099][ T4616] BTRFS info (device loop1): disk space caching is enabled [ 48.126933][ T4627] siw: device registration error -23 [ 50.304443][ T4610] XFS (loop4): Mounting V5 Filesystem [ 50.337839][ T4614] loop2: detected capacity change from 0 to 32768 [ 50.383534][ T4610] XFS (loop4): Starting recovery (logdev: internal) [ 50.421761][ T4614] XFS (loop2): Mounting V5 Filesystem [ 50.530763][ T4660] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 51.289580][ T4610] XFS (loop4): Ending recovery (logdev: internal) [ 51.316812][ T4614] XFS (loop2): log mount failed [ 51.330852][ T4333] XFS (loop4): Unmounting Filesystem [ 51.518383][ T4668] netlink: 68 bytes leftover after parsing attributes in process `syz.3.49'. [ 51.685759][ T4616] BTRFS error (device loop1): open_ctree failed: -12 [ 51.972340][ T4676] loop0: detected capacity change from 0 to 32768 [ 51.977546][ T4676] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 scanned by syz.0.51 (4676) [ 51.980638][ T4676] BTRFS info (device loop0): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 51.982215][ T4676] BTRFS info (device loop0): using crc32c (crc32c-generic) checksum algorithm [ 51.983731][ T4676] BTRFS info (device loop0): enabling disk space caching [ 51.984856][ T4676] BTRFS info (device loop0): force clearing of disk cache [ 51.986047][ T4676] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 51.987487][ T4676] BTRFS info (device loop0): use zstd compression, level 3 [ 51.988579][ T4676] BTRFS info (device loop0): disk space caching is enabled [ 52.014396][ T4680] tipc: Enabled bearer , priority 0 [ 52.016363][ T4680] device syzkaller0 entered promiscuous mode [ 52.071453][ T4676] BTRFS info (device loop0): enabling ssd optimizations [ 52.073422][ T4676] BTRFS info (device loop0): rebuilding free space tree [ 52.077079][ T4676] BTRFS info (device loop0): disabling free space tree [ 52.078248][ T4676] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 52.079730][ T4676] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 52.152609][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 52.196742][ T4699] binder: 4697:4699 ioctl 4018620d 0 returned -22 [ 52.198417][ T4699] binder: 4697:4699 ioctl c0306201 20000180 returned -14 [ 52.292535][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 52.442493][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 52.587333][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 53.185660][ T4680] tipc: Resetting bearer [ 53.186814][ T4680] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 53.197773][ T4320] BTRFS info (device loop0): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 53.286523][ T4705] loop2: detected capacity change from 0 to 32768 [ 53.290260][ T4705] BTRFS warning: duplicate device /dev/loop2 devid 1 generation 8 scanned by syz.2.53 (4705) [ 53.298896][ T4677] tipc: Resetting bearer [ 53.632644][ T4307] I/O error, dev loop2, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 53.723284][ T4677] tipc: Disabling bearer [ 53.732666][ T4714] tipc: Node number set to 3065210769 [ 54.505148][ T4719] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.262960][ T4746] overlayfs: overlapping lowerdir path [ 56.421841][ T4747] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 56.423688][ T4747] overlayfs: overlapping lowerdir path [ 57.496484][ T4719] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.192119][ T4732] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.234247][ T4719] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.563950][ T4763] loop1: detected capacity change from 0 to 512 [ 58.584128][ T4763] EXT4-fs (loop1): 1 truncate cleaned up [ 58.585081][ T4763] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 58.613300][ T4753] loop2: detected capacity change from 0 to 32768 [ 58.614506][ T4732] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.625368][ T4767] binder: 4766:4767 ioctl c0306201 0 returned -14 [ 58.635669][ T4767] binder: 4766:4767 got transaction to invalid handle, 1 [ 58.636936][ T4767] binder: 4767:4766 cannot find target node [ 58.637850][ T4767] binder: 4766:4767 transaction async to 0:0 failed 4/29201/-22, size 0-0 line 3045 [ 58.640642][ T4713] binder: undelivered TRANSACTION_ERROR: 29201 [ 58.720499][ T4753] XFS (loop2): Mounting V5 Filesystem [ 58.732065][ T4719] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.755158][ T4763] EXT4-fs warning (device loop1): ext4_group_extend:1870: can't shrink FS - resize aborted [ 58.788696][ T4753] XFS (loop2): Starting recovery (logdev: internal) [ 58.900074][ T4780] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 59.001423][ T4780] overlayfs: failed to look up (tracing) for ino (-66) [ 59.658310][ T4732] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.669221][ T4753] XFS (loop2): Ending recovery (logdev: internal) [ 60.258412][ T4329] XFS (loop2): Unmounting Filesystem [ 60.313589][ T4790] binder: 4789:4790 ioctl 4018620d 0 returned -22 [ 60.315207][ T4790] binder: 4789:4790 ioctl c0306201 20000180 returned -14 [ 60.316666][ T4327] EXT4-fs (loop1): unmounting filesystem. [ 60.335471][ T4732] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.423876][ T4719] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.431334][ T4719] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.435071][ T4719] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.506515][ T4795] siw: device registration error -23 [ 61.667089][ T4719] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.678034][ T4798] binder: 4797:4798 ioctl 4018620d 0 returned -22 [ 61.679710][ T4798] binder: 4797:4798 ioctl c0306201 20000180 returned -14 [ 61.834886][ T4732] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.848243][ T4732] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.864449][ T4732] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.903952][ T4732] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.915648][ T4803] loop3: detected capacity change from 0 to 512 [ 61.996817][ T4806] siw: device registration error -23 [ 63.243780][ T4803] EXT4-fs (loop3): 1 truncate cleaned up [ 63.244837][ T4803] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 63.333728][ T4818] binder: 4817:4818 ioctl 4018620d 0 returned -22 [ 63.334992][ T4820] binder: 4819:4820 ioctl 4018620d 0 returned -22 [ 63.336619][ T4820] binder: 4819:4820 ioctl c0306201 20000180 returned -14 [ 63.338415][ T4818] binder: 4817:4818 ioctl c0306201 20000180 returned -14 [ 63.445005][ T4822] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 63.587591][ T4822] overlayfs: failed to look up (tracing) for ino (-66) [ 63.670472][ T4825] siw: device registration error -23 [ 64.802939][ T4330] Bluetooth: hci3: Malformed MSFT vendor event: 0x02 [ 64.917547][ T4828] siw: device registration error -23 [ 65.337679][ T4324] EXT4-fs (loop3): unmounting filesystem. [ 65.647798][ T2061] ieee802154 phy0 wpan0: encryption failed: -22 [ 65.648988][ T2061] ieee802154 phy1 wpan1: encryption failed: -22 [ 65.789362][ T4834] siw: device registration error -23 [ 66.353959][ T4837] binder: 4836:4837 ioctl 4018620d 0 returned -22 [ 66.355617][ T4837] binder: 4836:4837 ioctl c0306201 20000180 returned -14 [ 66.663088][ T4839] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 66.674751][ T4839] overlayfs: failed to look up (tracing) for ino (-66) [ 67.768451][ T4850] siw: device registration error -23 [ 68.347092][ T4857] tipc: Enabling of bearer rejected, failed to enable media [ 68.354742][ T4855] binder: 4854:4855 ioctl c0306201 20000180 returned -14 [ 69.637572][ T7] cfg80211: failed to load regulatory.db [ 69.715419][ T4867] siw: device registration error -23 [ 70.875812][ T4868] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 70.977973][ T4868] overlayfs: failed to look up (tracing) for ino (-66) [ 71.304871][ T4871] binder: 4870:4871 ioctl c0306201 20000180 returned -14 [ 72.773514][ T4882] siw: device registration error -23 [ 73.265674][ T4884] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 73.781150][ T4891] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 73.884167][ T4891] overlayfs: failed to look up (tracing) for ino (-66) [ 74.390201][ T4895] loop3: detected capacity change from 0 to 512 [ 75.003223][ T4895] EXT4-fs (loop3): 1 truncate cleaned up [ 75.004144][ T4895] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 75.154455][ T4895] EXT4-fs warning (device loop3): ext4_group_extend:1870: can't shrink FS - resize aborted [ 75.230205][ T4904] siw: device registration error -23 [ 76.138436][ T4886] loop1: detected capacity change from 0 to 32768 [ 76.358880][ T4912] overlayfs: overlapping lowerdir path [ 76.426198][ T4913] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 76.427824][ T4913] overlayfs: overlapping lowerdir path [ 77.144445][ T4324] EXT4-fs (loop3): unmounting filesystem. [ 77.338877][ T4916] siw: device registration error -23 [ 78.212691][ T4920] loop3: detected capacity change from 0 to 512 [ 78.256246][ T4920] EXT4-fs (loop3): 1 truncate cleaned up [ 78.257255][ T4920] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 78.738030][ T27] audit: type=1326 audit(78.440:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4922 comm="syz.0.99" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff843771a8 code=0x0 [ 78.846251][ T4927] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.862337][ T4932] loop1: detected capacity change from 0 to 512 [ 78.888031][ T4920] EXT4-fs warning (device loop3): ext4_group_extend:1870: can't shrink FS - resize aborted [ 78.891004][ T4932] EXT4-fs (loop1): 1 truncate cleaned up [ 78.893051][ T4932] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 78.958293][ T4927] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.093882][ T4927] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.102332][ T4932] EXT4-fs warning (device loop1): ext4_group_extend:1870: can't shrink FS - resize aborted [ 79.531333][ T4927] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.651899][ T4927] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.675462][ T4927] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.695213][ T4927] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.716095][ T4927] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.787231][ T4324] EXT4-fs (loop3): unmounting filesystem. [ 79.826547][ T4942] binder: 4940:4942 ioctl 4018620d 0 returned -22 [ 79.923119][ T4327] EXT4-fs (loop1): unmounting filesystem. [ 80.919187][ T4949] wlan1 speed is unknown, defaulting to 1000 [ 81.256774][ T4944] netlink: 28 bytes leftover after parsing attributes in process `syz.3.104'. [ 81.270016][ T4950] siw: device registration error -23 [ 81.790097][ T4954] binder: 4953:4954 ioctl 4018620d 0 returned -22 [ 82.140734][ T4957] siw: device registration error -23 [ 82.398490][ T4954] binder: 4953:4954 ioctl c0306201 20000180 returned -14 [ 82.507234][ T4323] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 82.509686][ T4323] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 82.511161][ T4323] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 82.515438][ T4323] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 82.516695][ T4323] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 82.518134][ T4323] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 83.852473][ T4968] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 83.952222][ T4968] overlayfs: failed to look up (tracing) for ino (-66) [ 84.904074][ T4977] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 85.943803][ T4978] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 85.955089][ T4978] overlayfs: failed to look up (tracing) for ino (-66) [ 86.462587][ T4330] Bluetooth: hci5: command 0x0409 tx timeout [ 88.497130][ T4323] Bluetooth: hci5: command 0x041b tx timeout [ 89.022393][ T4994] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 89.161589][ T4994] overlayfs: failed to look up (tracing) for ino (-66) [ 89.208386][ T5000] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 89.328549][ T5000] overlayfs: failed to look up (tracing) for ino (-66) [ 89.644361][ T27] audit: type=1326 audit(88.610:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4989 comm="syz.1.117" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff967771a8 code=0x0 [ 90.052267][ T4955] wlan1 speed is unknown, defaulting to 1000 [ 90.582590][ T4330] Bluetooth: hci5: command 0x040f tx timeout [ 90.683594][ T4955] chnl_net:caif_netlink_parms(): no params data found [ 90.968419][ T5021] binder: 5020:5021 ioctl 4018620d 0 returned -22 [ 90.970138][ T5021] binder: 5020:5021 ioctl c0306201 20000180 returned -14 [ 91.787500][ T5026] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 92.451502][ T5027] siw: device registration error -23 [ 94.545330][ T4323] Bluetooth: hci5: command 0x0419 tx timeout [ 94.577192][ T5031] loop0: detected capacity change from 0 to 512 [ 94.641643][ T5031] EXT4-fs (loop0): 1 truncate cleaned up [ 94.645008][ T5031] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 95.220653][ T4955] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.223818][ T4955] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.225471][ T4955] device bridge_slave_0 entered promiscuous mode [ 95.233735][ T4955] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.355078][ T5045] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 95.475715][ T5045] overlayfs: failed to look up (tracing) for ino (-66) [ 95.872976][ T4955] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.876840][ T4955] device bridge_slave_1 entered promiscuous mode [ 96.529495][ T4320] EXT4-fs (loop0): unmounting filesystem. [ 96.579092][ T4955] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 96.581681][ T4955] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 96.623921][ T4955] team0: Port device team_slave_0 added [ 96.656607][ T4955] team0: Port device team_slave_1 added [ 96.682186][ T4955] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 96.684990][ T4955] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 96.689712][ T4955] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 96.692422][ T4955] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 97.268664][ T5062] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 97.280778][ T5062] overlayfs: failed to look up (tracing) for ino (-66) [ 97.834858][ T5064] netlink: 68 bytes leftover after parsing attributes in process `syz.3.128'. [ 98.418300][ T27] audit: type=1326 audit(96.910:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5058 comm="syz.2.131" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff9ab771a8 code=0x0 [ 98.422420][ T4955] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 98.426511][ T4955] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 98.524450][ T4955] device hsr_slave_0 entered promiscuous mode [ 98.557915][ T5070] fuse: Unknown parameter 'grou00000000000000000000' [ 98.590852][ T5066] binder: 5065:5066 ioctl 4018620d 0 returned -22 [ 98.592386][ T5066] binder: 5065:5066 ioctl c0306201 20000180 returned -14 [ 98.594012][ T4955] device hsr_slave_1 entered promiscuous mode [ 99.032942][ T4955] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 99.034510][ T4955] Cannot create hsr debugfs directory [ 99.183418][ T5085] siw: device registration error -23 [ 101.370653][ T5080] tipc: Enabling of bearer rejected, failed to enable media [ 102.005424][ T4852] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.167787][ T5119] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 102.314306][ T5119] overlayfs: failed to look up (tracing) for ino (-66) [ 102.344206][ T5121] binder: 5120:5121 ioctl 4018620d 0 returned -22 [ 102.423700][ T4852] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.430116][ T5124] fuse: Unknown parameter 'grou00000000000000000000' [ 102.438995][ T4955] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 102.527344][ T5127] siw: device registration error -23 [ 104.682410][ T4852] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.689721][ T4955] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 105.425324][ T4955] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 105.868697][ T4852] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.935657][ T5157] overlayfs: unrecognized mount option "/ilter" or missing value [ 105.957965][ T5157] overlayfs: missing 'lowerdir' [ 106.706272][ T4955] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 106.899244][ T5163] fuse: Unknown parameter 'group_i00000000000000000000' [ 107.083292][ T5165] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 107.194280][ T5165] overlayfs: failed to look up (tracing) for ino (-66) [ 107.668900][ T4955] 8021q: adding VLAN 0 to HW filter on device bond0 [ 108.075857][ T5167] netlink: 68 bytes leftover after parsing attributes in process `syz.0.153'. [ 108.257951][ T4662] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 108.260262][ T4662] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 108.283335][ T4955] 8021q: adding VLAN 0 to HW filter on device team0 [ 108.292197][ T5012] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 108.295387][ T5012] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 108.299421][ T5012] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.300661][ T5012] bridge0: port 1(bridge_slave_0) entered forwarding state [ 108.352025][ T4955] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 108.354198][ T4955] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 108.383720][ T5173] loop2: detected capacity change from 0 to 512 [ 108.397431][ T5012] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 108.398897][ T5012] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 108.400378][ T5012] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 108.401779][ T5012] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.402912][ T5012] bridge0: port 2(bridge_slave_1) entered forwarding state [ 108.404915][ T5012] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 108.407076][ T5012] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 108.412633][ T5012] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 109.087035][ T5012] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 109.109809][ T5012] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 109.111303][ T5173] EXT4-fs (loop2): 1 truncate cleaned up [ 109.112428][ T5173] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 109.122141][ T5012] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 109.154061][ T5012] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 109.155708][ T5012] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 109.157482][ T5012] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 109.158996][ T5012] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 109.160634][ T5012] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 109.162205][ T5012] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 109.241877][ T5173] EXT4-fs warning (device loop2): ext4_group_extend:1870: can't shrink FS - resize aborted [ 110.216393][ T4662] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 110.217920][ T4662] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 110.257237][ T4955] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 110.841930][ T4329] EXT4-fs (loop2): unmounting filesystem. [ 112.033174][ T5231] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 112.137612][ T5231] overlayfs: failed to look up (tracing) for ino (-66) [ 112.532432][ T5236] fuse: Unknown parameter 'group_i00000000000000000000' [ 113.306679][ T5241] tipc: Started in network mode [ 113.307536][ T5241] tipc: Node identity beddd5e1c17a, cluster identity 4711 [ 113.308847][ T5241] tipc: Enabled bearer , priority 0 [ 113.774581][ T5259] syz.3.169 uses obsolete (PF_INET,SOCK_PACKET) [ 113.994558][ T5259] bridge0: port 3(gretap0) entered blocking state [ 113.995816][ T5259] bridge0: port 3(gretap0) entered disabled state [ 114.084261][ T5261] loop3: detected capacity change from 0 to 4096 [ 114.089628][ T5261] EXT4-fs: Ignoring removed mblk_io_submit option [ 114.094035][ T5259] device gretap0 entered promiscuous mode [ 114.096078][ T5259] bridge0: port 3(gretap0) entered blocking state [ 114.097194][ T5259] bridge0: port 3(gretap0) entered forwarding state [ 114.921929][ T4589] tipc: Node number set to 2141705697 [ 114.925801][ T5241] tipc: Resetting bearer [ 114.949989][ T5244] device syzkaller0 entered promiscuous mode [ 114.967397][ T5244] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 115.001962][ T5261] EXT4-fs (loop3): Test dummy encryption mode enabled [ 115.079852][ T5261] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 115.082114][ T5267] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 115.105682][ T5232] tipc: Resetting bearer [ 115.493141][ T5232] tipc: Disabling bearer [ 115.526750][ T4324] EXT4-fs (loop3): unmounting filesystem. [ 115.587295][ T5262] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 115.589115][ T5262] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 115.652057][ T5297] sctp: [Deprecated]: syz.0.176 (pid 5297) Use of struct sctp_assoc_value in delayed_ack socket option. [ 115.652057][ T5297] Use struct sctp_sack_info instead [ 115.829536][ T5301] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 115.888039][ T5301] overlayfs: failed to look up (tracing) for ino (-66) [ 116.650589][ T4955] device veth0_vlan entered promiscuous mode [ 116.654490][ T4955] device veth1_vlan entered promiscuous mode [ 116.682133][ T5306] fuse: Unknown parameter 'group_i00000000000000000000' [ 116.709760][ T5308] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 116.720368][ T5308] overlayfs: failed to look up (tracing) for ino (-66) [ 116.765796][ T4330] Bluetooth: hci3: Malformed MSFT vendor event: 0x02 [ 116.786931][ T5312] fuse: Bad value for 'fd' [ 118.844433][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 118.848633][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 118.858137][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 118.952072][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 118.964285][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 118.965700][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 118.970779][ T5317] netlink: 76 bytes leftover after parsing attributes in process `syz.2.181'. [ 119.052022][ T4955] device veth0_macvtap entered promiscuous mode [ 119.064622][ T4955] device veth1_macvtap entered promiscuous mode [ 119.273223][ T5343] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 119.895110][ T5343] overlayfs: failed to look up (tracing) for ino (-66) [ 121.378969][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 121.381164][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 121.401916][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 121.405102][ T4955] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 121.406730][ T4955] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.408315][ T4955] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 121.410020][ T4955] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.411672][ T4955] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 121.456994][ T4955] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.461537][ T4955] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 121.466273][ T4955] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.467748][ T4955] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 121.472360][ T4955] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.540922][ T5347] sctp: [Deprecated]: syz.1.186 (pid 5347) Use of struct sctp_assoc_value in delayed_ack socket option. [ 121.540922][ T5347] Use struct sctp_sack_info instead [ 121.544635][ T4330] Bluetooth: hci2: Malformed MSFT vendor event: 0x02 [ 121.577017][ T5353] fuse: Unknown parameter 'group_id00000000000000000000' [ 121.584647][ T4955] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 121.586713][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 121.588257][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 121.589817][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 121.743882][ T5358] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 121.847847][ T5358] overlayfs: failed to look up (tracing) for ino (-66) [ 122.496928][ T4955] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 122.498760][ T4955] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 122.500176][ T4955] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 122.501795][ T4955] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 122.628315][ T4955] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 122.630177][ T4955] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 122.635978][ T4955] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 122.639917][ T4955] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 122.643500][ T4955] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 122.647181][ T4955] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 122.651689][ T4955] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 122.685631][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 122.690712][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 122.735202][ T5361] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 122.746551][ T5361] overlayfs: failed to look up (tracing) for ino (-66) [ 122.796072][ T4955] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.798506][ T4955] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.800038][ T4955] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.802169][ T4955] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.897966][ T4604] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 122.899289][ T4604] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 122.901400][ T4673] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 122.909859][ T4673] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 122.912763][ T4673] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 122.915180][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 126.294728][ T2061] ieee802154 phy0 wpan0: encryption failed: -22 [ 126.295879][ T2061] ieee802154 phy1 wpan1: encryption failed: -22 [ 126.874487][ T5412] wlan1 speed is unknown, defaulting to 1000 [ 127.622864][ T5418] fuse: Unknown parameter 'group_id00000000000000000000' [ 127.652580][ T4330] Bluetooth: hci0: Malformed MSFT vendor event: 0x02 [ 127.894294][ T5431] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 127.905284][ T5431] overlayfs: failed to look up (tracing) for ino (-66) [ 127.939222][ T5435] loop5: detected capacity change from 0 to 512 [ 128.021865][ T5435] EXT4-fs (loop5): 1 truncate cleaned up [ 128.023584][ T5435] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 128.446648][ T5435] EXT4-fs warning (device loop5): ext4_group_extend:1870: can't shrink FS - resize aborted [ 128.709985][ T4955] EXT4-fs (loop5): unmounting filesystem. [ 128.788728][ T4852] device hsr_slave_0 left promiscuous mode [ 128.790806][ T5469] sctp: [Deprecated]: syz.3.209 (pid 5469) Use of struct sctp_assoc_value in delayed_ack socket option. [ 128.790806][ T5469] Use struct sctp_sack_info instead [ 128.853707][ T4852] device hsr_slave_1 left promiscuous mode [ 129.013004][ T4852] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 129.014592][ T4852] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 129.023798][ T4852] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 129.025144][ T4852] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 129.097380][ T4852] device bridge_slave_1 left promiscuous mode [ 129.115068][ T4852] bridge0: port 2(bridge_slave_1) entered disabled state [ 129.334568][ T4852] device bridge_slave_0 left promiscuous mode [ 129.352137][ T4852] bridge0: port 1(bridge_slave_0) entered disabled state [ 130.293292][ T4852] device veth1_macvtap left promiscuous mode [ 130.295133][ T4852] device veth0_macvtap left promiscuous mode [ 130.297699][ T4852] device veth1_vlan left promiscuous mode [ 130.298989][ T4852] device veth0_vlan left promiscuous mode [ 130.315722][ T5490] fuse: Unknown parameter 'group_id00000000000000000000' [ 130.548146][ T4330] Bluetooth: hci1: Malformed MSFT vendor event: 0x02 [ 130.553139][ T5500] Bluetooth: MGMT ver 1.22 [ 130.649182][ T5508] binder: 5507:5508 ioctl 4018620d 0 returned -22 [ 130.650745][ T5508] binder: 5507:5508 ioctl c0306201 20000180 returned -14 [ 131.312668][ T5513] siw: device registration error -23 [ 132.285219][ T5518] fuse: Bad value for 'user_id' [ 134.367958][ T4323] Bluetooth: hci0: command 0x0c1a tx timeout [ 134.369766][ T4330] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 135.113503][ T5533] loop5: detected capacity change from 0 to 4096 [ 135.117707][ T5533] EXT4-fs: Ignoring removed mblk_io_submit option [ 135.166229][ T5533] EXT4-fs (loop5): Test dummy encryption mode enabled [ 135.458615][ T5533] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 135.865723][ T5539] sctp: [Deprecated]: syz.3.227 (pid 5539) Use of struct sctp_assoc_value in delayed_ack socket option. [ 135.865723][ T5539] Use struct sctp_sack_info instead [ 137.419706][ T5545] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 137.430539][ T5545] overlayfs: failed to look up (tracing) for ino (-66) [ 137.486452][ T4328] Bluetooth: hci1: Malformed MSFT vendor event: 0x02 [ 137.676273][ T4852] team0 (unregistering): Port device team_slave_1 removed [ 137.833083][ T4852] team0 (unregistering): Port device team_slave_0 removed [ 138.013317][ T4852] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 138.223004][ T4852] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 140.093947][ T4852] bond0 (unregistering): Released all slaves [ 140.442716][ T5532] bridge0: port 3(gretap0) entered blocking state [ 140.443799][ T5532] bridge0: port 3(gretap0) entered disabled state [ 140.445319][ T5532] device gretap0 entered promiscuous mode [ 140.446421][ T5532] bridge0: port 3(gretap0) entered blocking state [ 140.447437][ T5532] bridge0: port 3(gretap0) entered forwarding state [ 140.478207][ T5567] fuse: Bad value for 'user_id' [ 140.493221][ T4955] EXT4-fs (loop5): unmounting filesystem. [ 140.578285][ T5558] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 140.759575][ T5579] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 140.772340][ T5579] overlayfs: failed to look up (tracing) for ino (-66) [ 143.315179][ T5584] loop0: detected capacity change from 0 to 4096 [ 143.318682][ T5584] EXT4-fs: Ignoring removed mblk_io_submit option [ 143.368967][ T5584] EXT4-fs (loop0): Test dummy encryption mode enabled [ 143.626930][ T5558] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 143.650623][ T5582] bridge0: port 3(gretap0) entered blocking state [ 143.651698][ T5582] bridge0: port 3(gretap0) entered disabled state [ 143.653368][ T5582] device gretap0 entered promiscuous mode [ 143.654362][ T5582] bridge0: port 3(gretap0) entered blocking state [ 143.655355][ T5582] bridge0: port 3(gretap0) entered forwarding state [ 143.675814][ T5593] binder: 5592:5593 ioctl 4018620d 0 returned -22 [ 143.677383][ T5593] binder: 5592:5593 ioctl c0306201 20000180 returned -14 [ 143.785991][ T5584] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 143.788454][ T5593] siw: device registration error -23 [ 143.792358][ T5590] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 143.803207][ T5590] overlayfs: failed to look up (tracing) for ino (-66) [ 143.832936][ T5591] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 143.843865][ T5591] overlayfs: failed to look up (tracing) for ino (-66) [ 145.443082][ T4320] EXT4-fs (loop0): unmounting filesystem. [ 145.591456][ T5632] fuse: Bad value for 'user_id' [ 145.781899][ T5644] binder: 5643:5644 ioctl 4018620d 0 returned -22 [ 145.783800][ T5644] binder: 5643:5644 ioctl c0306201 20000180 returned -14 [ 145.845484][ T5644] siw: device registration error -23 [ 147.092757][ T5652] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 147.376411][ T5652] overlayfs: failed to look up (tracing) for ino (-66) [ 148.280138][ T5674] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 148.721476][ T5698] loop1: detected capacity change from 0 to 1024 [ 148.728874][ T5698] hfsplus: unable to parse mount options [ 149.211902][ T5703] fuse: Bad value for 'fd' [ 149.452616][ T4323] Bluetooth: hci3: command 0x0406 tx timeout [ 149.452641][ T4326] Bluetooth: hci0: command 0x0406 tx timeout [ 149.452657][ T4330] Bluetooth: hci1: command 0x0406 tx timeout [ 149.614480][ T5709] binder: 5707:5709 ioctl 4018620d 0 returned -22 [ 149.615956][ T5709] binder: 5707:5709 ioctl c0306201 20000180 returned -14 [ 149.624018][ T5705] loop2: detected capacity change from 0 to 1024 [ 149.625457][ T5705] hfsplus: unable to parse mount options [ 149.647541][ T5686] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 149.692684][ T4323] Bluetooth: hci2: command 0x0406 tx timeout [ 149.727282][ T4307] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 150.213783][ T5725] siw: device registration error -23 [ 150.317577][ T5730] netlink: 'syz.5.270': attribute type 12 has an invalid length. [ 150.531269][ T5737] overlayfs: failed to resolve './file1': -2 [ 150.741163][ T5740] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 150.769608][ T5740] overlayfs: failed to look up (tracing) for ino (-66) [ 151.192146][ T5746] tipc: Enabled bearer , priority 0 [ 151.206741][ T5746] device syzkaller0 entered promiscuous mode [ 151.229828][ T5746] tipc: Resetting bearer [ 151.262391][ T5743] tipc: Resetting bearer [ 151.699379][ T5743] tipc: Disabling bearer [ 151.705263][ T5759] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 151.828682][ T4330] Bluetooth: hci1: Malformed MSFT vendor event: 0x02 [ 151.829628][ T5775] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 151.887879][ T5781] loop3: detected capacity change from 0 to 1024 [ 151.896516][ T5781] hfsplus: unable to parse mount options [ 153.732730][ T5810] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 153.818788][ T5810] overlayfs: failed to look up (tracing) for ino (-66) [ 154.595097][ T5818] overlayfs: overlapping lowerdir path [ 154.652665][ T5818] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 154.654017][ T5818] overlayfs: overlapping lowerdir path [ 155.393353][ T5813] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 155.405790][ T5813] overlayfs: failed to look up (tracing) for ino (-66) [ 155.598814][ T5824] loop2: detected capacity change from 0 to 512 [ 155.622240][ T5824] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 155.679568][ T5824] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.286: bg 0: block 473: padding at end of block bitmap is not set [ 155.695430][ T5824] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6180: Corrupt filesystem [ 155.709734][ T5824] EXT4-fs (loop2): 1 orphan inode deleted [ 155.719601][ T5824] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 155.779969][ T4662] Quota error (device loop2): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 155.781748][ T4662] EXT4-fs error (device loop2): ext4_release_dquot:6871: comm kworker/u4:10: Failed to release dquot type 1 [ 155.794793][ T5835] tipc: Enabled bearer , priority 0 [ 155.796247][ T5835] device syzkaller0 entered promiscuous mode [ 155.803415][ T5835] tipc: Resetting bearer [ 155.805575][ T5834] tipc: Resetting bearer [ 155.885548][ T4330] Bluetooth: hci3: Malformed MSFT vendor event: 0x02 [ 155.897394][ T5834] tipc: Disabling bearer [ 157.119055][ T4329] EXT4-fs (loop2): unmounting filesystem. [ 157.400100][ T5858] loop3: detected capacity change from 0 to 1024 [ 157.429110][ T5858] hfsplus: unable to parse mount options [ 157.941391][ T5868] loop2: detected capacity change from 0 to 1024 [ 157.956658][ T5868] hfsplus: unable to parse mount options [ 159.644938][ T5873] bridge0: port 3(gretap0) entered blocking state [ 159.646331][ T5873] bridge0: port 3(gretap0) entered disabled state [ 159.650548][ T5873] device gretap0 entered promiscuous mode [ 159.652270][ T5873] bridge0: port 3(gretap0) entered blocking state [ 159.653520][ T5873] bridge0: port 3(gretap0) entered forwarding state [ 159.755683][ T5873] loop1: detected capacity change from 0 to 4096 [ 159.758797][ T5873] EXT4-fs: Ignoring removed mblk_io_submit option [ 159.840521][ T5873] EXT4-fs (loop1): Test dummy encryption mode enabled [ 159.976819][ T5873] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 160.210622][ T5888] overlayfs: overlapping lowerdir path [ 160.239171][ T5888] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 160.240661][ T5888] overlayfs: overlapping lowerdir path [ 161.022949][ T4327] EXT4-fs (loop1): unmounting filesystem. [ 161.216219][ T4330] Bluetooth: hci1: Malformed MSFT vendor event: 0x02 [ 162.715257][ T5909] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 163.081748][ T5909] overlayfs: failed to look up (tracing) for ino (-66) [ 165.277677][ T5920] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 165.286671][ T5920] overlayfs: failed to look up (tracing) for ino (-66) [ 166.221778][ T4330] Bluetooth: hci0: Malformed MSFT vendor event: 0x02 [ 166.240658][ T5945] bridge0: port 3(gretap0) entered blocking state [ 166.241768][ T5945] bridge0: port 3(gretap0) entered disabled state [ 166.243590][ T5945] device gretap0 entered promiscuous mode [ 166.244669][ T5945] bridge0: port 3(gretap0) entered blocking state [ 166.245733][ T5945] bridge0: port 3(gretap0) entered forwarding state [ 166.403005][ T5945] loop2: detected capacity change from 0 to 4096 [ 166.408398][ T5945] EXT4-fs: Ignoring removed mblk_io_submit option [ 166.448205][ T5951] overlayfs: unrecognized mount option "/ilter" or missing value [ 166.470307][ T5951] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 166.539788][ T5951] overlayfs: failed to look up (tracing) for ino (-66) [ 166.847147][ T5945] EXT4-fs (loop2): Test dummy encryption mode enabled [ 167.106157][ T5945] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 167.290640][ T4329] EXT4-fs (loop2): unmounting filesystem. [ 167.384953][ T5960] tipc: Started in network mode [ 167.385827][ T5960] tipc: Node identity bbbbbb01, cluster identity 4711 [ 167.387011][ T5960] tipc: Enabled bearer , priority 10 [ 167.588256][ T5971] netlink: 'syz.2.315': attribute type 10 has an invalid length. [ 167.589673][ T5971] netlink: 40 bytes leftover after parsing attributes in process `syz.2.315'. [ 167.592777][ T5971] bridge0: port 4(dummy0) entered blocking state [ 167.594315][ T5971] bridge0: port 4(dummy0) entered disabled state [ 167.599087][ T5971] device dummy0 entered promiscuous mode [ 167.601001][ T5971] bridge0: port 4(dummy0) entered blocking state [ 167.602132][ T5971] bridge0: port 4(dummy0) entered forwarding state [ 168.012294][ T4323] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 168.015289][ T4323] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 168.017080][ T4323] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 168.019735][ T4323] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 168.021225][ T4323] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 168.023560][ T4323] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 168.503595][ T4370] tipc: Node number set to 3149642497 [ 169.813110][ T6001] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 169.848163][ T6001] overlayfs: failed to look up (tracing) for ino (-66) [ 170.113542][ T4323] Bluetooth: hci4: command 0x0409 tx timeout [ 170.246947][ T4330] Bluetooth: hci2: Malformed MSFT vendor event: 0x02 [ 170.378761][ T5980] wlan1 speed is unknown, defaulting to 1000 [ 170.389128][ T6013] loop2: detected capacity change from 0 to 512 [ 170.474780][ T6013] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.324: bg 0: block 473: padding at end of block bitmap is not set [ 170.491212][ T6013] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6180: Corrupt filesystem [ 170.507090][ T6013] EXT4-fs (loop2): 1 orphan inode deleted [ 170.508121][ T6013] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 170.665489][ T5240] Quota error (device loop2): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 170.667219][ T5240] EXT4-fs error (device loop2): ext4_release_dquot:6871: comm kworker/u4:20: Failed to release dquot type 1 [ 170.936330][ T6028] overlayfs: failed to resolve './file0/file0': -2 [ 171.328873][ T5980] chnl_net:caif_netlink_parms(): no params data found [ 171.466039][ T4329] EXT4-fs (loop2): unmounting filesystem. [ 172.173145][ T4330] Bluetooth: hci4: command 0x041b tx timeout [ 172.549473][ T5980] bridge0: port 1(bridge_slave_0) entered blocking state [ 172.557910][ T5980] bridge0: port 1(bridge_slave_0) entered disabled state [ 172.560329][ T5980] device bridge_slave_0 entered promiscuous mode [ 172.568731][ T5980] bridge0: port 2(bridge_slave_1) entered blocking state [ 172.569928][ T5980] bridge0: port 2(bridge_slave_1) entered disabled state [ 172.578340][ T5980] device bridge_slave_1 entered promiscuous mode [ 172.604055][ T5980] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 172.616923][ T6053] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 172.647281][ T5980] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 172.708125][ T5980] team0: Port device team_slave_0 added [ 172.710089][ T5980] team0: Port device team_slave_1 added [ 174.424811][ T6063] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 174.760767][ T4330] Bluetooth: hci4: command 0x040f tx timeout [ 174.764892][ T5980] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 174.766104][ T5980] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 174.838768][ T5980] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 174.847671][ T5980] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 174.851378][ T5980] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 174.864536][ T5980] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 175.752784][ T6074] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 175.961370][ T6074] overlayfs: failed to look up (tracing) for ino (-66) [ 176.475487][ T5980] device hsr_slave_0 entered promiscuous mode [ 176.534126][ T5980] device hsr_slave_1 entered promiscuous mode [ 176.651390][ T5980] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 176.692884][ T5980] Cannot create hsr debugfs directory [ 176.777305][ T6088] loop3: detected capacity change from 0 to 512 [ 176.867879][ T5980] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 177.151269][ T6088] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.340: bg 0: block 473: padding at end of block bitmap is not set [ 177.156713][ T6088] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6180: Corrupt filesystem [ 177.158415][ T6088] EXT4-fs (loop3): 1 orphan inode deleted [ 177.159490][ T6088] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 177.365936][ T4323] Bluetooth: hci4: command 0x0419 tx timeout [ 177.403373][ T4662] Quota error (device loop3): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 177.412078][ T4662] EXT4-fs error (device loop3): ext4_release_dquot:6871: comm kworker/u4:10: Failed to release dquot type 1 [ 177.469416][ T5980] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 177.571364][ T6101] netlink: 'syz.1.341': attribute type 10 has an invalid length. [ 177.572720][ T6101] netlink: 40 bytes leftover after parsing attributes in process `syz.1.341'. [ 177.574797][ T6101] bridge0: port 4(dummy0) entered blocking state [ 177.576007][ T6101] bridge0: port 4(dummy0) entered disabled state [ 177.579618][ T6101] device dummy0 entered promiscuous mode [ 177.581220][ T6101] bridge0: port 4(dummy0) entered blocking state [ 177.582173][ T6101] bridge0: port 4(dummy0) entered forwarding state [ 177.815914][ T5980] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 177.818482][ T4324] EXT4-fs (loop3): unmounting filesystem. [ 177.854168][ T5980] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 177.902188][ T6110] loop2: detected capacity change from 0 to 1024 [ 177.909670][ T6110] hfsplus: unable to parse mount options [ 178.360021][ T5980] 8021q: adding VLAN 0 to HW filter on device bond0 [ 178.389674][ T5145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 178.391119][ T5145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 178.694215][ T5980] 8021q: adding VLAN 0 to HW filter on device team0 [ 178.708232][ T4787] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 178.710101][ T4787] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 178.711567][ T4787] bridge0: port 1(bridge_slave_0) entered blocking state [ 178.712802][ T4787] bridge0: port 1(bridge_slave_0) entered forwarding state [ 178.717011][ T4787] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 178.786896][ T5999] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 178.788976][ T5999] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 178.790609][ T5999] bridge0: port 2(bridge_slave_1) entered blocking state [ 178.791805][ T5999] bridge0: port 2(bridge_slave_1) entered forwarding state [ 178.795663][ T5145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 178.801265][ T5145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 178.808045][ T5145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 178.814777][ T5145] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 178.816442][ T5145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 178.818509][ T5145] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 178.820073][ T5145] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 178.826449][ T5980] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 178.828160][ T5980] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 178.830342][ T5145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 178.832064][ T5145] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 178.833963][ T5145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 178.835711][ T5145] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 178.890342][ T6143] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 178.902526][ T6143] overlayfs: failed to look up (tracing) for ino (-66) [ 179.086637][ T5145] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 180.593575][ T6173] fuse: Bad value for 'group_id' [ 180.625046][ T5145] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 180.626967][ T5145] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 180.635462][ T5980] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 180.824422][ T6184] sctp: [Deprecated]: syz.0.352 (pid 6184) Use of struct sctp_assoc_value in delayed_ack socket option. [ 180.824422][ T6184] Use struct sctp_sack_info instead [ 182.245621][ T5145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 182.247395][ T5145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 182.269575][ T5145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 182.271314][ T5145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 182.274055][ T5145] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 182.277043][ T5145] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 182.287822][ T5980] device veth0_vlan entered promiscuous mode [ 182.298374][ T5980] device veth1_vlan entered promiscuous mode [ 182.320616][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 182.322257][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 182.324431][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 182.326276][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 182.330287][ T5980] device veth0_macvtap entered promiscuous mode [ 182.334117][ T5980] device veth1_macvtap entered promiscuous mode [ 182.349218][ T5980] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 182.355274][ T5980] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.358970][ T5980] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 182.362558][ T5980] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.366370][ T5980] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 182.370056][ T5980] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.373623][ T5980] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 182.376428][ T5980] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.379144][ T5980] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 182.382157][ T5980] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.388411][ T5980] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 182.391350][ T5145] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 182.396479][ T5145] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 182.399291][ T5145] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 182.401007][ T5145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 182.406268][ T5980] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 182.409062][ T5980] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.412623][ T5980] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 182.416580][ T5980] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.419089][ T5980] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 182.422928][ T5980] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.425621][ T5980] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 182.428715][ T5980] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.432406][ T5980] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 182.436258][ T5980] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.440324][ T5980] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 182.494348][ T5980] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.495789][ T5980] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.497115][ T5980] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.498384][ T5980] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.506631][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 182.508466][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 182.518412][ T6219] loop0: detected capacity change from 0 to 764 [ 182.596077][ T5999] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 182.597359][ T5999] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 182.601503][ T5999] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 182.626275][ T4673] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 182.627548][ T4673] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 182.628889][ T4673] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 183.083919][ T6227] binder: 6226:6227 ioctl 4018620d 0 returned -22 [ 183.085454][ T6227] binder: 6226:6227 ioctl c0306201 20000180 returned -14 [ 183.147853][ T6227] siw: device registration error -23 [ 183.381105][ T6239] netlink: 'syz.6.361': attribute type 10 has an invalid length. [ 183.382642][ T6239] netlink: 40 bytes leftover after parsing attributes in process `syz.6.361'. [ 183.384790][ T6239] bridge0: port 3(dummy0) entered blocking state [ 183.386123][ T6239] bridge0: port 3(dummy0) entered disabled state [ 183.397923][ T6239] device dummy0 entered promiscuous mode [ 183.400942][ T6239] bridge0: port 3(dummy0) entered blocking state [ 183.401978][ T6239] bridge0: port 3(dummy0) entered forwarding state [ 183.466530][ T6240] netlink: 'syz.1.362': attribute type 10 has an invalid length. [ 183.467851][ T6240] netlink: 40 bytes leftover after parsing attributes in process `syz.1.362'. [ 183.688561][ T6246] fuse: Bad value for 'group_id' [ 183.858721][ T6250] sctp: [Deprecated]: syz.0.364 (pid 6250) Use of struct sctp_assoc_value in delayed_ack socket option. [ 183.858721][ T6250] Use struct sctp_sack_info instead [ 184.166107][ T6253] loop1: detected capacity change from 0 to 512 [ 184.245105][ T6253] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.367: bg 0: block 473: padding at end of block bitmap is not set [ 184.250212][ T6253] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6180: Corrupt filesystem [ 184.252112][ T6253] EXT4-fs (loop1): 1 orphan inode deleted [ 184.253296][ T6253] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 184.267331][ T4673] Quota error (device loop1): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 184.269084][ T4673] EXT4-fs error (device loop1): ext4_release_dquot:6871: comm kworker/u4:12: Failed to release dquot type 1 [ 184.340639][ T6262] netlink: 'syz.6.366': attribute type 10 has an invalid length. [ 184.342057][ T6262] netlink: 40 bytes leftover after parsing attributes in process `syz.6.366'. [ 184.688497][ T6265] binder: 6263:6265 tried to acquire reference to desc 0, got 1 instead [ 184.690218][ T6265] binder: 6263:6265 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 184.692402][ T6265] binder: 6265 RLIMIT_NICE not set [ 184.744235][ T6270] binder: 6263:6270 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 184.746549][ T6270] binder: 6270 RLIMIT_NICE not set [ 185.580989][ T4327] EXT4-fs (loop1): unmounting filesystem. [ 185.616033][ T6271] bridge0: port 3(gretap0) entered disabled state [ 185.634372][ T6277] binder: 6276:6277 ioctl 4018620d 0 returned -22 [ 185.638880][ T6277] binder: 6276:6277 ioctl c0306201 20000180 returned -14 [ 185.675686][ T6282] fuse: Bad value for 'group_id' [ 185.713161][ T6277] siw: device registration error -23 [ 185.821516][ T6286] loop1: detected capacity change from 0 to 1024 [ 185.823034][ T6286] hfsplus: unable to parse mount options [ 185.862134][ T4309] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 187.374231][ T2061] ieee802154 phy0 wpan0: encryption failed: -22 [ 187.375379][ T2061] ieee802154 phy1 wpan1: encryption failed: -22 [ 187.387515][ T6302] Zero length message leads to an empty skb [ 187.389890][ T6271] bridge0: port 4(dummy0) entered disabled state [ 187.390962][ T6271] bridge0: port 2(bridge_slave_1) entered disabled state [ 187.392911][ T6271] bridge0: port 1(bridge_slave_0) entered disabled state [ 187.638960][ T6316] sctp: [Deprecated]: syz.6.381 (pid 6316) Use of struct sctp_assoc_value in delayed_ack socket option. [ 187.638960][ T6316] Use struct sctp_sack_info instead [ 188.391485][ T6330] loop6: detected capacity change from 0 to 512 [ 188.422289][ T6330] EXT4-fs error (device loop6): ext4_validate_block_bitmap:438: comm syz.6.384: bg 0: block 473: padding at end of block bitmap is not set [ 188.425014][ T6330] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6180: Corrupt filesystem [ 188.427067][ T6330] EXT4-fs (loop6): 1 orphan inode deleted [ 188.429141][ T6330] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 188.440931][ T6271] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 188.464661][ T6271] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 188.466224][ T5262] Quota error (device loop6): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 188.467771][ T5262] EXT4-fs error (device loop6): ext4_release_dquot:6871: comm kworker/u4:21: Failed to release dquot type 1 [ 188.915979][ T6336] loop3: detected capacity change from 0 to 1024 [ 188.920530][ T6336] hfsplus: unable to parse mount options [ 189.440880][ T5980] EXT4-fs (loop6): unmounting filesystem. [ 189.642695][ T6271] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.644165][ T6271] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.645613][ T6271] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.646979][ T6271] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.013076][ T6351] loop3: detected capacity change from 0 to 512 [ 190.040233][ T6351] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.389: bg 0: block 473: padding at end of block bitmap is not set [ 190.042960][ T6351] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6180: Corrupt filesystem [ 190.044830][ T6351] EXT4-fs (loop3): 1 orphan inode deleted [ 190.045774][ T6351] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 190.063328][ T5262] Quota error (device loop3): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 190.065558][ T5262] EXT4-fs error (device loop3): ext4_release_dquot:6871: comm kworker/u4:21: Failed to release dquot type 1 [ 190.177922][ T6296] netlink: 'syz.0.377': attribute type 10 has an invalid length. [ 190.179335][ T6296] netlink: 40 bytes leftover after parsing attributes in process `syz.0.377'. [ 190.180966][ T6296] bridge0: port 4(dummy0) entered blocking state [ 190.181965][ T6296] bridge0: port 4(dummy0) entered disabled state [ 190.183657][ T6296] device dummy0 entered promiscuous mode [ 190.184824][ T6296] bridge0: port 4(dummy0) entered blocking state [ 190.185890][ T6296] bridge0: port 4(dummy0) entered forwarding state [ 190.262624][ T6315] tipc: Enabling of bearer rejected, failed to enable media [ 190.302981][ T6347] netlink: 'syz.6.388': attribute type 10 has an invalid length. [ 190.304282][ T6347] netlink: 40 bytes leftover after parsing attributes in process `syz.6.388'. [ 190.330859][ T6356] loop0: detected capacity change from 0 to 512 [ 190.344437][ T4324] EXT4-fs (loop3): unmounting filesystem. [ 190.345255][ T6358] loop2: detected capacity change from 0 to 512 [ 190.390774][ T6358] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.391: bg 0: block 473: padding at end of block bitmap is not set [ 190.393871][ T6358] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6180: Corrupt filesystem [ 190.395793][ T6358] EXT4-fs (loop2): 1 orphan inode deleted [ 190.396733][ T6358] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 190.400501][ T6356] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.390: bg 0: block 473: padding at end of block bitmap is not set [ 190.405673][ T6356] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6180: Corrupt filesystem [ 190.407242][ T6356] EXT4-fs (loop0): 1 orphan inode deleted [ 190.408297][ T6356] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 190.414494][ T4673] Quota error (device loop2): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 190.416001][ T4673] EXT4-fs error (device loop2): ext4_release_dquot:6871: comm kworker/u4:12: Failed to release dquot type 1 [ 190.418313][ T4673] Quota error (device loop0): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 190.419829][ T4673] EXT4-fs error (device loop0): ext4_release_dquot:6871: comm kworker/u4:12: Failed to release dquot type 1 [ 190.495955][ T6366] loop3: detected capacity change from 0 to 512 [ 190.996295][ T6366] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.392: bg 0: block 473: padding at end of block bitmap is not set [ 190.999115][ T6366] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6180: Corrupt filesystem [ 191.000791][ T6366] EXT4-fs (loop3): 1 orphan inode deleted [ 191.002944][ T6366] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 191.013090][ T4673] Quota error (device loop3): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 191.016971][ T4673] EXT4-fs error (device loop3): ext4_release_dquot:6871: comm kworker/u4:12: Failed to release dquot type 1 [ 191.143107][ T4324] EXT4-fs (loop3): unmounting filesystem. [ 191.273366][ T6379] sctp: [Deprecated]: syz.6.394 (pid 6379) Use of struct sctp_assoc_value in delayed_ack socket option. [ 191.273366][ T6379] Use struct sctp_sack_info instead [ 191.639780][ T4329] EXT4-fs (loop2): unmounting filesystem. [ 191.678433][ T6385] loop1: detected capacity change from 0 to 1024 [ 191.690386][ T6385] hfsplus: unable to parse mount options [ 191.782203][ T4320] EXT4-fs (loop0): unmounting filesystem. [ 191.813144][ T6396] loop0: detected capacity change from 0 to 512 [ 192.234921][ T6396] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.400: bg 0: block 473: padding at end of block bitmap is not set [ 192.237741][ T6396] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6180: Corrupt filesystem [ 192.252537][ T6396] EXT4-fs (loop0): 1 orphan inode deleted [ 192.254900][ T6396] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 192.278084][ T4673] Quota error (device loop0): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 192.280003][ T4673] EXT4-fs error (device loop0): ext4_release_dquot:6871: comm kworker/u4:12: Failed to release dquot type 1 [ 193.533250][ T4320] EXT4-fs (loop0): unmounting filesystem. [ 193.573574][ T6412] tipc: Enabled bearer , priority 0 [ 193.583576][ T6412] device syzkaller0 entered promiscuous mode [ 194.592693][ T6411] tipc: Resetting bearer [ 195.074910][ T6411] tipc: Disabling bearer [ 195.077082][ T4714] tipc: Node number set to 2347915975 [ 195.214941][ T6446] sctp: [Deprecated]: syz.2.408 (pid 6446) Use of struct sctp_assoc_value in delayed_ack socket option. [ 195.214941][ T6446] Use struct sctp_sack_info instead [ 195.503304][ T6449] bridge0: port 3(gretap0) entered disabled state [ 195.559096][ T6452] binder: 6451:6452 got transaction to invalid handle, 1 [ 195.560402][ T6452] binder: 6452:6451 cannot find target node [ 195.561343][ T6452] binder: 6451:6452 transaction call to 0:0 failed 12/29201/-22, size 0-0 line 3045 [ 195.565881][ T6452] binder: 6451:6452 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 195.571567][ T6452] binder: 6452 RLIMIT_NICE not set [ 195.617400][ T6453] binder: 6451:6453 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 195.619764][ T6453] binder: 6453 RLIMIT_NICE not set [ 195.620266][ T6449] bridge0: port 4(dummy0) entered disabled state [ 195.621765][ T6449] bridge0: port 2(bridge_slave_1) entered disabled state [ 195.623164][ T6449] bridge0: port 1(bridge_slave_0) entered disabled state [ 196.304785][ T6461] loop3: detected capacity change from 0 to 1024 [ 196.306782][ T6461] hfsplus: unable to parse mount options [ 196.388829][ T4715] binder: undelivered TRANSACTION_ERROR: 29201 [ 196.446992][ T6449] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 197.440643][ T6473] loop2: detected capacity change from 0 to 1024 [ 197.442116][ T6473] hfsplus: unable to parse mount options [ 197.492054][ T6449] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 197.511778][ T6477] loop6: detected capacity change from 0 to 1024 [ 197.517476][ T6477] hfsplus: unable to parse mount options [ 197.519286][ T4309] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 198.890460][ T6495] sctp: [Deprecated]: syz.2.424 (pid 6495) Use of struct sctp_assoc_value in delayed_ack socket option. [ 198.890460][ T6495] Use struct sctp_sack_info instead [ 199.033199][ T6449] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.034846][ T6449] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.036484][ T6449] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.048381][ T6449] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.438963][ T6503] netlink: 'syz.3.425': attribute type 10 has an invalid length. [ 199.440265][ T6503] netlink: 40 bytes leftover after parsing attributes in process `syz.3.425'. [ 199.442050][ T6503] bridge0: port 4(dummy0) entered blocking state [ 199.443345][ T6503] bridge0: port 4(dummy0) entered disabled state [ 199.447168][ T6503] device dummy0 entered promiscuous mode [ 199.448768][ T6503] bridge0: port 4(dummy0) entered blocking state [ 199.449809][ T6503] bridge0: port 4(dummy0) entered forwarding state [ 199.820424][ T6510] loop2: detected capacity change from 0 to 512 [ 199.889531][ T6510] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.429: bg 0: block 473: padding at end of block bitmap is not set [ 199.895798][ T6510] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6180: Corrupt filesystem [ 199.898910][ T6510] EXT4-fs (loop2): 1 orphan inode deleted [ 199.899913][ T6510] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 200.015943][ T4787] Quota error (device loop2): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 201.232153][ T4787] EXT4-fs error (device loop2): ext4_release_dquot:6871: comm kworker/u4:14: Failed to release dquot type 1 [ 201.376986][ T4329] EXT4-fs (loop2): unmounting filesystem. [ 201.558932][ T6537] netlink: 'syz.3.435': attribute type 10 has an invalid length. [ 201.560220][ T6537] netlink: 40 bytes leftover after parsing attributes in process `syz.3.435'. [ 202.406567][ T6544] device syzkaller0 entered promiscuous mode [ 202.546898][ T6550] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 203.240578][ T6546] sctp: [Deprecated]: syz.0.439 (pid 6546) Use of struct sctp_assoc_value in delayed_ack socket option. [ 203.240578][ T6546] Use struct sctp_sack_info instead [ 203.735387][ T6579] netlink: 12 bytes leftover after parsing attributes in process `syz.1.447'. [ 203.849768][ T6579] 8021q: adding VLAN 0 to HW filter on device bond1 [ 204.309970][ T6579] device dummy0 left promiscuous mode [ 204.324546][ T6579] bridge0: port 4(dummy0) entered disabled state [ 204.351171][ T6579] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 204.354140][ T4504] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 204.888769][ T6591] overlayfs: failed to resolve './file0/file0': -2 [ 205.925075][ T6604] overlayfs: failed to resolve './file1': -2 [ 206.388814][ T6621] netlink: 68 bytes leftover after parsing attributes in process `syz.2.458'. [ 207.066863][ T6627] fuse: Bad value for 'fd' [ 207.179708][ T6636] netlink: 'syz.1.460': attribute type 10 has an invalid length. [ 207.181053][ T6636] netlink: 40 bytes leftover after parsing attributes in process `syz.1.460'. [ 207.190405][ T6636] bond1: (slave dummy0): Releasing backup interface [ 207.225623][ T6636] bridge0: port 4(dummy0) entered blocking state [ 207.226736][ T6636] bridge0: port 4(dummy0) entered disabled state [ 207.228088][ T6636] device dummy0 entered promiscuous mode [ 207.258185][ T6641] netlink: 48 bytes leftover after parsing attributes in process `syz.3.466'. [ 207.388224][ T6645] netlink: 12 bytes leftover after parsing attributes in process `syz.3.468'. [ 207.407483][ T6645] 8021q: adding VLAN 0 to HW filter on device bond1 [ 207.436333][ T6645] bridge0: port 4(dummy0) entered disabled state [ 207.441203][ T6645] device dummy0 left promiscuous mode [ 207.442077][ T6645] bridge0: port 4(dummy0) entered disabled state [ 207.497924][ T6645] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 207.500465][ T5586] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 207.590600][ T6649] tipc: Enabled bearer , priority 0 [ 207.643813][ T6649] tipc: Resetting bearer [ 207.723554][ T6648] tipc: Disabling bearer [ 207.801658][ T6653] netlink: 68 bytes leftover after parsing attributes in process `syz.3.471'. [ 208.761166][ T6673] netlink: 12 bytes leftover after parsing attributes in process `syz.3.478'. [ 208.777131][ T6673] 8021q: adding VLAN 0 to HW filter on device bond2 [ 208.798513][ T6673] bond1: (slave dummy0): Releasing backup interface [ 209.108663][ T6673] bond2: (slave dummy0): Enslaving as an active interface with an up link [ 209.112242][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bond2: link becomes ready [ 209.298868][ T6687] netlink: 68 bytes leftover after parsing attributes in process `syz.3.482'. [ 210.346338][ T6712] netlink: 'syz.6.490': attribute type 10 has an invalid length. [ 210.347584][ T6712] netlink: 40 bytes leftover after parsing attributes in process `syz.6.490'. [ 210.768341][ T6718] netlink: 16 bytes leftover after parsing attributes in process `syz.3.491'. [ 211.818955][ T6729] netlink: 68 bytes leftover after parsing attributes in process `syz.3.495'. [ 211.966886][ T6737] netlink: 12 bytes leftover after parsing attributes in process `syz.1.500'. [ 211.977638][ T6737] 8021q: adding VLAN 0 to HW filter on device bond2 [ 211.996931][ T6737] device dummy0 left promiscuous mode [ 211.998004][ T6737] bridge0: port 4(dummy0) entered disabled state [ 212.314188][ T6737] bond2: (slave dummy0): Enslaving as an active interface with an up link [ 212.315994][ T5145] IPv6: ADDRCONF(NETDEV_CHANGE): bond2: link becomes ready [ 212.340478][ T6743] device syzkaller0 entered promiscuous mode [ 213.389865][ T6761] netlink: 12 bytes leftover after parsing attributes in process `syz.3.506'. [ 213.692632][ T6754] netlink: 12 bytes leftover after parsing attributes in process `syz.2.505'. [ 213.698043][ T6754] 8021q: adding VLAN 0 to HW filter on device bond1 [ 213.729858][ T6760] device dummy0 left promiscuous mode [ 213.731117][ T6760] bridge0: port 4(dummy0) entered disabled state [ 213.798239][ T6760] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 213.827508][ T6771] netlink: 68 bytes leftover after parsing attributes in process `syz.2.508'. [ 213.892954][ T6773] netlink: 16 bytes leftover after parsing attributes in process `syz.0.507'. [ 214.167158][ T5187] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 214.321697][ T6780] bond2: (slave dummy0): Releasing backup interface [ 214.677605][ T6788] netlink: 'syz.6.513': attribute type 10 has an invalid length. [ 214.679080][ T6788] netlink: 40 bytes leftover after parsing attributes in process `syz.6.513'. [ 214.697187][ T6792] bond2: (slave dummy0): Releasing backup interface [ 214.897745][ T6799] netlink: 'syz.0.516': attribute type 10 has an invalid length. [ 214.899148][ T6799] netlink: 40 bytes leftover after parsing attributes in process `syz.0.516'. [ 216.016068][ T6813] netlink: 'syz.1.522': attribute type 10 has an invalid length. [ 216.017543][ T6813] netlink: 40 bytes leftover after parsing attributes in process `syz.1.522'. [ 216.019525][ T6813] bridge0: port 4(dummy0) entered blocking state [ 216.020863][ T6813] bridge0: port 4(dummy0) entered disabled state [ 216.029767][ T6813] device dummy0 entered promiscuous mode [ 216.236589][ T6817] netlink: 'syz.6.521': attribute type 10 has an invalid length. [ 216.237891][ T6817] netlink: 40 bytes leftover after parsing attributes in process `syz.6.521'. [ 216.352564][ T4712] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 216.504942][ T6819] device syzkaller0 entered promiscuous mode [ 216.532520][ T4712] usb 1-1: Using ep0 maxpacket: 8 [ 216.546132][ T4712] usb 1-1: unable to get BOS descriptor or descriptor too short [ 216.548870][ T4712] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 216.550346][ T4712] usb 1-1: can't read configurations, error -71 [ 216.949844][ T6830] netlink: 16 bytes leftover after parsing attributes in process `syz.3.526'. [ 217.226549][ T6831] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 217.238512][ T6831] overlayfs: failed to look up (tracing) for ino (-66) [ 217.457258][ T6833] sctp: [Deprecated]: syz.1.527 (pid 6833) Use of struct sctp_assoc_value in delayed_ack socket option. [ 217.457258][ T6833] Use struct sctp_sack_info instead [ 217.782096][ T6835] bridge0: port 3(gretap0) entered disabled state [ 218.043012][ T6835] bridge0: port 4(dummy0) entered disabled state [ 218.044249][ T6835] bridge0: port 2(bridge_slave_1) entered disabled state [ 218.045437][ T6835] bridge0: port 1(bridge_slave_0) entered disabled state [ 218.847102][ T6835] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 218.862594][ T6835] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 219.192515][ T6835] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.193925][ T6835] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.195187][ T6835] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.196492][ T6835] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.420491][ T6840] netlink: 'syz.3.529': attribute type 10 has an invalid length. [ 219.421794][ T6840] netlink: 40 bytes leftover after parsing attributes in process `syz.3.529'. [ 219.423770][ T6840] bridge0: port 4(dummy0) entered blocking state [ 219.424693][ T6840] bridge0: port 4(dummy0) entered disabled state [ 219.426133][ T6840] device dummy0 entered promiscuous mode [ 219.460581][ T6844] netlink: 'syz.6.530': attribute type 10 has an invalid length. [ 219.461891][ T6844] netlink: 40 bytes leftover after parsing attributes in process `syz.6.530'. [ 219.465778][ T6847] netlink: 12 bytes leftover after parsing attributes in process `syz.1.531'. [ 219.513990][ T6847] 8021q: adding VLAN 0 to HW filter on device bond3 [ 219.515570][ T6848] device dummy0 left promiscuous mode [ 219.519349][ T6848] bridge0: port 4(dummy0) entered disabled state [ 219.560472][ T6848] bond3: (slave dummy0): Enslaving as an active interface with an up link [ 219.562595][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bond3: link becomes ready [ 219.564181][ T6860] netlink: 12 bytes leftover after parsing attributes in process `syz.0.535'. [ 219.598402][ T6864] device syzkaller0 entered promiscuous mode [ 219.600148][ T6866] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 219.619878][ T6866] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 219.843192][ T6874] netlink: 8 bytes leftover after parsing attributes in process `syz.1.539'. [ 220.080044][ T6873] netlink: 12 bytes leftover after parsing attributes in process `syz.0.540'. [ 220.095620][ T6873] 8021q: adding VLAN 0 to HW filter on device bond2 [ 220.097370][ T6876] device dummy0 left promiscuous mode [ 220.099841][ T6876] bridge0: port 4(dummy0) entered disabled state [ 220.246934][ T6883] netlink: 12 bytes leftover after parsing attributes in process `syz.3.542'. [ 220.476931][ T6893] fuse: Unknown parameter 'group_i00000000000000000000' [ 220.518555][ T6895] netlink: 12 bytes leftover after parsing attributes in process `syz.6.547'. [ 220.835523][ T6895] 8021q: adding VLAN 0 to HW filter on device bond1 [ 220.840541][ T6897] netlink: 'syz.3.545': attribute type 10 has an invalid length. [ 220.841867][ T6897] netlink: 40 bytes leftover after parsing attributes in process `syz.3.545'. [ 220.864797][ T6899] bridge0: port 3(dummy0) entered disabled state [ 220.871292][ T6899] device dummy0 left promiscuous mode [ 220.872575][ T6899] bridge0: port 3(dummy0) entered disabled state [ 220.907602][ T6899] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 221.088979][ T6907] 8021q: adding VLAN 0 to HW filter on device bond2 [ 221.329463][ T4662] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 221.355485][ T6914] 8021q: adding VLAN 0 to HW filter on device bond4 [ 221.367738][ T6907] bond1: (slave dummy0): Releasing backup interface [ 221.383274][ T6919] loop6: detected capacity change from 0 to 1764 [ 221.390112][ T6919] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 221.396701][ T6907] bond2: (slave dummy0): Enslaving as an active interface with an up link [ 221.410610][ T4662] IPv6: ADDRCONF(NETDEV_CHANGE): bond2: link becomes ready [ 221.412360][ T6914] device dummy0 left promiscuous mode [ 221.413482][ T6914] bridge0: port 4(dummy0) entered disabled state [ 221.437736][ T6914] bond4: (slave dummy0): Enslaving as an active interface with an up link [ 221.439326][ T4662] IPv6: ADDRCONF(NETDEV_CHANGE): bond4: link becomes ready [ 221.542412][ T6926] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 221.549993][ T6926] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 221.569140][ T6928] fuse: Unknown parameter 'group_i00000000000000000000' [ 222.551678][ T6935] loop6: detected capacity change from 0 to 32768 [ 222.558779][ T6935] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop6 scanned by syz.6.561 (6935) [ 222.624167][ T6935] BTRFS info (device loop6): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 222.625855][ T6935] BTRFS info (device loop6): using crc32c (crc32c-generic) checksum algorithm [ 222.634592][ T6935] BTRFS info (device loop6): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 222.636693][ T6935] BTRFS info (device loop6): use zstd compression, level 3 [ 222.640303][ T6935] BTRFS info (device loop6): using free space tree [ 222.719891][ T6962] netlink: 'syz.2.564': attribute type 10 has an invalid length. [ 222.721258][ T6962] __nla_validate_parse: 3 callbacks suppressed [ 222.721287][ T6962] netlink: 40 bytes leftover after parsing attributes in process `syz.2.564'. [ 222.741408][ T6962] bond2: (slave dummy0): Releasing backup interface [ 222.813413][ T6962] bridge0: port 4(dummy0) entered blocking state [ 222.814761][ T6962] bridge0: port 4(dummy0) entered disabled state [ 222.817742][ T6962] device dummy0 entered promiscuous mode [ 222.961378][ T6935] BTRFS info (device loop6): enabling ssd optimizations [ 223.096571][ T6944] netlink: 'syz.3.563': attribute type 10 has an invalid length. [ 223.097930][ T6944] netlink: 40 bytes leftover after parsing attributes in process `syz.3.563'. [ 223.099569][ T5980] BTRFS info (device loop6): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 223.100249][ T6944] bond4: (slave dummy0): Releasing backup interface [ 223.166663][ T6944] bridge0: port 4(dummy0) entered blocking state [ 223.168151][ T6944] bridge0: port 4(dummy0) entered disabled state [ 223.170550][ T6944] device dummy0 entered promiscuous mode [ 223.378558][ T6974] netlink: 'syz.6.565': attribute type 10 has an invalid length. [ 223.379947][ T6974] netlink: 40 bytes leftover after parsing attributes in process `syz.6.565'. [ 223.615521][ T6974] bond1: (slave dummy0): Releasing backup interface [ 223.665539][ T6974] bridge0: port 3(dummy0) entered blocking state [ 223.666579][ T6974] bridge0: port 3(dummy0) entered disabled state [ 223.667935][ T6974] device dummy0 entered promiscuous mode [ 223.682714][ T6977] netlink: 12 bytes leftover after parsing attributes in process `syz.2.566'. [ 223.686921][ T6977] device dummy0 left promiscuous mode [ 223.687808][ T6977] bridge0: port 4(dummy0) entered disabled state [ 223.800071][ T6979] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 223.816369][ T6979] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 223.891225][ T6981] netlink: 12 bytes leftover after parsing attributes in process `syz.0.568'. [ 223.911464][ T6981] 8021q: adding VLAN 0 to HW filter on device bond3 [ 223.929286][ T4330] Bluetooth: hci1: Malformed MSFT vendor event: 0x02 [ 223.937313][ T6981] bond3: (slave dummy0): Enslaving as an active interface with an up link [ 223.938717][ T5586] IPv6: ADDRCONF(NETDEV_CHANGE): bond3: link becomes ready [ 224.104585][ T6992] fuse: Bad value for 'fd' [ 224.159094][ T6994] netlink: 8 bytes leftover after parsing attributes in process `syz.0.572'. [ 224.439837][ T6997] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 224.442233][ T6997] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 224.451609][ T6998] netlink: 'syz.3.571': attribute type 10 has an invalid length. [ 224.452981][ T6998] netlink: 40 bytes leftover after parsing attributes in process `syz.3.571'. [ 225.102227][ T7007] binder: 7005:7007 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 225.136499][ T7006] loop0: detected capacity change from 0 to 1764 [ 225.153569][ T7006] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 225.176773][ T7007] binder: 7005:7007 got transaction to invalid handle, 1 [ 225.178165][ T7007] binder: 7007:7005 cannot find target node [ 225.179049][ T7007] binder: 7005:7007 transaction call to 0:0 failed 15/29201/-22, size 0-0 line 3045 [ 225.195873][ T7007] binder: 7005:7007 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 225.204279][ T7007] binder: 7007 RLIMIT_NICE not set [ 225.246217][ T7009] binder: 7005:7009 got reply transaction with no transaction stack [ 225.247613][ T7009] binder: 7005:7009 transaction reply to 0:0 failed 16/29201/-71, size 0-0 line 2946 [ 225.331727][ T7011] device syzkaller0 entered promiscuous mode [ 225.387182][ T4330] Bluetooth: hci1: Malformed MSFT vendor event: 0x02 [ 225.403259][ T4366] binder: undelivered TRANSACTION_ERROR: 29201 [ 225.404345][ T4366] binder: undelivered TRANSACTION_ERROR: 29201 [ 225.556132][ T7015] loop6: detected capacity change from 0 to 32768 [ 225.567497][ T7015] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop6 scanned by syz.6.579 (7015) [ 225.577178][ T7015] BTRFS info (device loop6): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 225.578849][ T7015] BTRFS info (device loop6): using crc32c (crc32c-generic) checksum algorithm [ 225.580210][ T7015] BTRFS info (device loop6): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 225.852027][ T7015] BTRFS info (device loop6): use zstd compression, level 3 [ 225.853293][ T7015] BTRFS info (device loop6): using free space tree [ 225.909009][ T7029] loop0: detected capacity change from 0 to 1024 [ 225.912087][ T7029] hfsplus: unable to parse mount options [ 225.997047][ T7015] BTRFS info (device loop6): enabling ssd optimizations [ 226.430506][ T5980] BTRFS info (device loop6): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 227.049975][ T7063] binder: 7062:7063 tried to acquire reference to desc 0, got 1 instead [ 227.055755][ T7063] binder: 7062:7063 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 227.058211][ T7063] binder: 7063 RLIMIT_NICE not set [ 227.059339][ T7063] binder: 7063 RLIMIT_NICE not set [ 227.060920][ T7063] binder: release 7062:7063 transaction 21 in, still active [ 227.062251][ T7063] binder: send failed reply for transaction 21 to 7062:7063 [ 227.064550][ T7063] binder: 7062:7063 ioctl c0306201 0 returned -14 [ 227.066084][ T4592] binder: undelivered TRANSACTION_COMPLETE [ 227.067126][ T4592] binder: undelivered TRANSACTION_ERROR: 29189 [ 227.088063][ T7065] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 227.089976][ T7065] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 227.262544][ T4505] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 227.269740][ T7067] netlink: 'syz.3.591': attribute type 1 has an invalid length. [ 227.275789][ T7067] 8021q: adding VLAN 0 to HW filter on device bond5 [ 227.291148][ T7067] device dummy0 left promiscuous mode [ 227.292332][ T7067] bridge0: port 4(dummy0) entered disabled state [ 227.345237][ T7067] bond5: (slave dummy0): making interface the new active one [ 227.347328][ T7067] bond5: (slave dummy0): Enslaving as an active interface with an up link [ 227.348904][ T5586] IPv6: ADDRCONF(NETDEV_CHANGE): bond5: link becomes ready [ 227.421705][ T4330] Bluetooth: hci4: Malformed MSFT vendor event: 0x02 [ 227.437389][ T7073] netlink: 'syz.3.593': attribute type 10 has an invalid length. [ 227.439093][ T7073] netlink: 40 bytes leftover after parsing attributes in process `syz.3.593'. [ 227.448472][ T7073] bond5: (slave dummy0): Releasing active interface [ 227.452855][ T4505] usb 1-1: Using ep0 maxpacket: 8 [ 227.462313][ T4505] usb 1-1: unable to get BOS descriptor or descriptor too short [ 227.468147][ T4505] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 227.469407][ T4505] usb 1-1: can't read configurations, error -71 [ 227.487066][ T7073] bridge0: port 4(dummy0) entered blocking state [ 227.489944][ T7073] bridge0: port 4(dummy0) entered disabled state [ 227.491563][ T7073] device dummy0 entered promiscuous mode [ 227.703593][ T7084] loop2: detected capacity change from 0 to 1024 [ 227.713115][ T7084] hfsplus: unable to parse mount options [ 228.538670][ T7095] loop1: detected capacity change from 0 to 128 [ 228.568224][ T7095] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 228.585044][ T7098] netlink: 68 bytes leftover after parsing attributes in process `syz.2.601'. [ 228.984289][ T4330] Bluetooth: hci2: Malformed MSFT vendor event: 0x02 [ 229.009801][ T7091] loop0: detected capacity change from 0 to 32768 [ 229.029043][ T7091] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.598 (7091) [ 229.048828][ T7091] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 229.053961][ T7091] BTRFS info (device loop0): using crc32c (crc32c-generic) checksum algorithm [ 229.055378][ T7091] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 229.060089][ T7091] BTRFS info (device loop0): use zstd compression, level 3 [ 229.066681][ T7091] BTRFS info (device loop0): using free space tree [ 229.136140][ T7127] binder: 7126:7127 tried to acquire reference to desc 0, got 1 instead [ 229.138921][ T7127] binder: release 7126:7127 transaction 26 in, still active [ 229.140554][ T7127] binder: 7126:7127 ioctl c0306201 0 returned -14 [ 229.173357][ T7135] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 229.174906][ T7135] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 229.187291][ T7091] BTRFS info (device loop0): enabling ssd optimizations [ 229.250387][ T4320] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 229.454211][ T4327] EXT4-fs (loop1): unmounting filesystem. [ 229.484852][ T7141] loop3: detected capacity change from 0 to 1024 [ 229.486339][ T7141] hfsplus: unable to parse mount options [ 229.823907][ T4307] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 229.941777][ T7151] netlink: 68 bytes leftover after parsing attributes in process `syz.2.613'. [ 231.561734][ T7183] sctp: [Deprecated]: syz.6.622 (pid 7183) Use of struct sctp_assoc_value in delayed_ack socket option. [ 231.561734][ T7183] Use struct sctp_sack_info instead [ 231.572339][ T7178] netlink: 12 bytes leftover after parsing attributes in process `syz.0.623'. [ 231.581310][ T7178] 8021q: adding VLAN 0 to HW filter on device bond4 [ 231.594535][ T7178] bond3: (slave dummy0): Releasing backup interface [ 231.646714][ T7178] bond4: (slave dummy0): Enslaving as an active interface with an up link [ 231.648920][ T4787] IPv6: ADDRCONF(NETDEV_CHANGE): bond4: link becomes ready [ 231.680412][ T7187] netlink: 68 bytes leftover after parsing attributes in process `syz.1.624'. [ 231.761342][ T7196] loop0: detected capacity change from 0 to 128 [ 231.786798][ T7196] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 231.801270][ T7202] loop1: detected capacity change from 0 to 1024 [ 231.803329][ T7202] hfsplus: unable to parse mount options [ 232.285517][ T7210] netlink: 12 bytes leftover after parsing attributes in process `syz.2.631'. [ 232.296208][ T7210] 8021q: adding VLAN 0 to HW filter on device bond3 [ 232.310722][ T7210] bond3: (slave dummy0): Enslaving as an active interface with an up link [ 232.312534][ T1599] IPv6: ADDRCONF(NETDEV_CHANGE): bond3: link becomes ready [ 232.391336][ T7214] binder: 7213:7214 ioctl 4018620d 0 returned -22 [ 232.393195][ T7214] binder: 7213:7214 ioctl c0306201 20000180 returned -14 [ 232.669518][ T4320] EXT4-fs (loop0): unmounting filesystem. [ 232.708239][ T7217] loop1: detected capacity change from 0 to 128 [ 232.739957][ T7217] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 233.246466][ T7219] siw: device registration error -23 [ 233.285817][ T7225] netlink: 68 bytes leftover after parsing attributes in process `syz.0.635'. [ 233.855720][ T4327] EXT4-fs (loop1): unmounting filesystem. [ 233.875652][ T7235] netlink: 12 bytes leftover after parsing attributes in process `syz.3.639'. [ 233.894560][ T7235] 8021q: adding VLAN 0 to HW filter on device bond6 [ 233.903250][ T7235] device dummy0 left promiscuous mode [ 233.904243][ T7235] bridge0: port 4(dummy0) entered disabled state [ 233.945015][ T7235] bond6: (slave dummy0): Enslaving as an active interface with an up link [ 233.989656][ T4662] IPv6: ADDRCONF(NETDEV_CHANGE): bond6: link becomes ready [ 234.094261][ T7248] sctp: [Deprecated]: syz.6.642 (pid 7248) Use of struct sctp_assoc_value in delayed_ack socket option. [ 234.094261][ T7248] Use struct sctp_sack_info instead [ 234.356034][ T7252] netlink: 'syz.0.645': attribute type 1 has an invalid length. [ 234.384436][ T7252] 8021q: adding VLAN 0 to HW filter on device bond5 [ 234.408693][ T7257] netlink: 68 bytes leftover after parsing attributes in process `syz.1.646'. [ 234.409841][ T7253] binder_user_error: 3 callbacks suppressed [ 234.409849][ T7253] binder: 7249:7253 tried to acquire reference to desc 0, got 1 instead [ 234.414839][ T7253] binder: 7249:7253 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 234.417010][ T7253] binder: 7253 RLIMIT_NICE not set [ 234.418347][ T7253] binder: 7249:7253 got reply transaction with no transaction stack [ 234.419778][ T7253] binder_debug: 3 callbacks suppressed [ 234.419785][ T7253] binder: 7249:7253 transaction reply to 0:0 failed 32/29201/-71, size 0-0 line 2946 [ 234.443540][ T7252] bond4: (slave dummy0): Releasing backup interface [ 234.503162][ T7252] bond5: (slave dummy0): making interface the new active one [ 234.505138][ T7252] bond5: (slave dummy0): Enslaving as an active interface with an up link [ 234.525733][ T4662] IPv6: ADDRCONF(NETDEV_CHANGE): bond5: link becomes ready [ 234.545725][ T7259] loop1: detected capacity change from 0 to 32768 [ 234.546917][ T7262] binder: 7261:7262 ioctl 4018620d 0 returned -22 [ 234.551938][ T7259] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.647 (7259) [ 234.555484][ T7259] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 234.557187][ T7259] BTRFS info (device loop1): using crc32c (crc32c-generic) checksum algorithm [ 234.561574][ T7259] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 234.563122][ T7259] BTRFS info (device loop1): use zstd compression, level 3 [ 234.565401][ T7259] BTRFS info (device loop1): using free space tree [ 234.566120][ T7262] binder: 7261:7262 ioctl c0306201 20000180 returned -14 [ 234.569279][ T4366] binder: undelivered TRANSACTION_ERROR: 29201 [ 234.570523][ T4366] binder: send failed reply for transaction 31 to 7249:7253 [ 234.592666][ T4366] binder: undelivered TRANSACTION_COMPLETE [ 234.593775][ T4366] binder: undelivered TRANSACTION_ERROR: 29189 [ 234.702677][ T7259] BTRFS info (device loop1): enabling ssd optimizations [ 235.144761][ T4327] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 236.111129][ T7311] netlink: 68 bytes leftover after parsing attributes in process `syz.3.657'. [ 237.052931][ T7324] sctp: [Deprecated]: syz.6.660 (pid 7324) Use of struct sctp_assoc_value in delayed_ack socket option. [ 237.052931][ T7324] Use struct sctp_sack_info instead [ 237.378418][ T7326] netlink: 12 bytes leftover after parsing attributes in process `syz.3.661'. [ 237.403682][ T7326] 8021q: adding VLAN 0 to HW filter on device bond7 [ 237.446409][ T7326] bond6: (slave dummy0): Releasing backup interface [ 237.610571][ T7326] bond7: (slave dummy0): Enslaving as an active interface with an up link [ 237.617188][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): bond7: link becomes ready [ 237.637555][ T7335] binder: 7334:7335 ioctl 4018620d 0 returned -22 [ 238.017146][ T7337] siw: device registration error -23 [ 238.078136][ T7342] binder: 7341:7342 tried to acquire reference to desc 0, got 1 instead [ 238.080349][ T7342] binder: 7341:7342 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 238.082908][ T7342] binder: 7342 RLIMIT_NICE not set [ 238.084328][ T7342] binder: 7341:7342 got reply transaction with no transaction stack [ 238.085693][ T7342] binder: 7341:7342 transaction reply to 0:0 failed 38/29201/-71, size 0-0 line 2946 [ 238.254750][ T7348] device dummy0 left promiscuous mode [ 238.255670][ T7348] bridge0: port 3(dummy0) entered disabled state [ 238.416131][ T7348] batman_adv: batadv0: Adding interface: dummy0 [ 238.417211][ T7348] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 238.421277][ T7348] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 238.607039][ T7354] netlink: 68 bytes leftover after parsing attributes in process `syz.0.669'. [ 238.628881][ T4428] binder: undelivered TRANSACTION_ERROR: 29201 [ 238.630139][ T4428] binder: send failed reply for transaction 37 to 7341:7342 [ 238.672755][ T4428] binder: undelivered TRANSACTION_COMPLETE [ 238.673722][ T4428] binder: undelivered TRANSACTION_ERROR: 29189 [ 239.171528][ T7372] fuse: Bad value for 'fd' [ 239.535972][ T7376] sctp: [Deprecated]: syz.6.675 (pid 7376) Use of struct sctp_assoc_value in delayed_ack socket option. [ 239.535972][ T7376] Use struct sctp_sack_info instead [ 239.912200][ T7386] siw: device registration error -23 [ 240.557428][ T7389] netlink: 12 bytes leftover after parsing attributes in process `syz.2.680'. [ 240.608862][ T7389] 8021q: adding VLAN 0 to HW filter on device bond4 [ 240.638218][ T7389] bond3: (slave dummy0): Releasing backup interface [ 240.688398][ T7389] bond4: (slave dummy0): Enslaving as an active interface with an up link [ 240.709976][ T5586] IPv6: ADDRCONF(NETDEV_CHANGE): bond4: link becomes ready [ 240.843212][ T7396] netlink: 68 bytes leftover after parsing attributes in process `syz.2.681'. [ 240.860130][ T7398] binder: 7397:7398 ioctl 4018620d 0 returned -22 [ 241.225922][ T7409] bond7: (slave dummy0): Releasing backup interface [ 241.667265][ T7409] batman_adv: batadv0: Adding interface: dummy0 [ 241.668378][ T7409] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 241.672278][ T7409] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 242.052018][ T7414] siw: device registration error -23 [ 242.796116][ T7435] bond3: (slave dummy0): Releasing backup interface [ 243.038885][ T7435] batman_adv: batadv0: Adding interface: dummy0 [ 243.039905][ T7435] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 243.044104][ T7435] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 243.602953][ T7448] siw: device registration error -23 [ 244.706714][ T7464] binder: 7463:7464 ioctl 4018620d 0 returned -22 [ 244.852172][ T7468] sctp: [Deprecated]: syz.6.698 (pid 7468) Use of struct sctp_assoc_value in delayed_ack socket option. [ 244.852172][ T7468] Use struct sctp_sack_info instead [ 244.892651][ T7469] batman_adv: batadv0: Removing interface: dummy0 [ 245.147593][ T7462] binder: 7460:7462 tried to acquire reference to desc 0, got 1 instead [ 245.153212][ T7462] binder: 7460:7462 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 245.155093][ T7462] binder: 7462 RLIMIT_NICE not set [ 245.155914][ T7462] binder: 7462 RLIMIT_NICE not set [ 245.249712][ T7471] siw: device registration error -23 [ 245.289102][ T4410] binder: release 7460:7462 transaction 43 in, still active [ 245.290723][ T4410] binder: send failed reply for transaction 43 to 7460:7462 [ 245.313037][ T4410] binder: undelivered TRANSACTION_COMPLETE [ 245.313981][ T4410] binder: undelivered TRANSACTION_ERROR: 29189 [ 245.410312][ T7473] loop2: detected capacity change from 0 to 32768 [ 245.412260][ T7473] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.702 (7473) [ 245.431383][ T7473] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 245.435111][ T7473] BTRFS info (device loop2): using crc32c (crc32c-generic) checksum algorithm [ 245.436534][ T7473] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 245.438011][ T7473] BTRFS info (device loop2): use zstd compression, level 3 [ 245.439212][ T7473] BTRFS info (device loop2): using free space tree [ 245.447206][ T7473] BTRFS info (device loop2): enabling ssd optimizations [ 245.958268][ T4329] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 246.059569][ T4309] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 10 /dev/loop2 scanned by udevd (4309) [ 246.828209][ T7521] binder: 7520:7521 ioctl 4018620d 0 returned -22 [ 246.835746][ T4330] Bluetooth: hci1: Malformed MSFT vendor event: 0x02 [ 246.837566][ T7521] binder: 7520:7521 ioctl c0306201 20000180 returned -14 [ 247.042665][ T7530] siw: device registration error -23 [ 247.890215][ T7531] batman_adv: batadv0: Adding interface: dummy0 [ 247.891264][ T7531] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 247.895122][ T7531] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 247.975389][ T7534] binder: 7533:7534 ioctl c0306201 20000180 returned -14 [ 248.054425][ T7536] sctp: [Deprecated]: syz.0.713 (pid 7536) Use of struct sctp_assoc_value in delayed_ack socket option. [ 248.054425][ T7536] Use struct sctp_sack_info instead [ 248.328148][ T7537] siw: device registration error -23 [ 248.673920][ T7545] bond4: (slave dummy0): Releasing backup interface [ 248.802656][ T7545] batman_adv: batadv0: Adding interface: dummy0 [ 248.803766][ T7545] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 248.807629][ T7545] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 248.850608][ T2061] ieee802154 phy0 wpan0: encryption failed: -22 [ 248.863495][ T2061] ieee802154 phy1 wpan1: encryption failed: -22 [ 248.994095][ T7550] fuse: Invalid rootmode [ 249.038459][ T7542] loop1: detected capacity change from 0 to 32768 [ 249.040613][ T7542] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 10 [ 249.079657][ T4309] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 10 [ 249.216350][ T7564] loop3: detected capacity change from 0 to 128 [ 249.463338][ T4307] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 249.560067][ T4330] Bluetooth: hci2: Malformed MSFT vendor event: 0x02 [ 250.061110][ T7583] binder: 7582:7583 ioctl 4018620d 0 returned -22 [ 250.064020][ T7583] binder: 7582:7583 ioctl c0306201 20000180 returned -14 [ 252.093020][ T7592] sctp: [Deprecated]: syz.2.729 (pid 7592) Use of struct sctp_assoc_value in delayed_ack socket option. [ 252.093020][ T7592] Use struct sctp_sack_info instead [ 252.460047][ T7597] bond5: (slave dummy0): Releasing active interface [ 252.525120][ T7604] fuse: Invalid rootmode [ 252.554559][ T7597] batman_adv: batadv0: Adding interface: dummy0 [ 252.555585][ T7597] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 252.559545][ T7597] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 257.130847][ T7668] batman_adv: batadv0: Removing interface: dummy0 [ 259.157936][ T4330] Bluetooth: hci3: Malformed MSFT vendor event: 0x02 [ 259.189335][ T7704] fuse: Bad value for 'rootmode' [ 262.800729][ T4330] Bluetooth: hci4: Malformed MSFT vendor event: 0x02 [ 262.858880][ T7751] fuse: Bad value for 'rootmode' [ 265.418530][ T4330] Bluetooth: hci0: Malformed MSFT vendor event: 0x02 [ 267.515828][ T4330] Bluetooth: hci2: Malformed MSFT vendor event: 0x02 [ 267.534064][ T7809] batman_adv: batadv0: Removing interface: dummy0 [ 267.545410][ T7822] overlayfs: failed to resolve './file2': -2 [ 269.678455][ T4330] Bluetooth: hci4: Malformed MSFT vendor event: 0x02 [ 269.961952][ T7871] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 269.972712][ T7871] overlayfs: failed to look up (tracing) for ino (-66) [ 271.845878][ T7894] batman_adv: batadv0: Removing interface: dummy0 [ 271.916460][ T4330] Bluetooth: hci2: Malformed MSFT vendor event: 0x02 [ 272.920712][ T7925] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 272.931701][ T7925] overlayfs: failed to look up (tracing) for ino (-66) [ 273.764863][ T4330] Bluetooth: hci1: Malformed MSFT vendor event: 0x02 [ 273.976069][ T7940] block device autoloading is deprecated and will be removed. [ 273.979787][ T7940] ufs: You didn't specify the type of your ufs filesystem [ 273.979787][ T7940] [ 273.979787][ T7940] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 273.979787][ T7940] [ 273.979787][ T7940] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 273.984809][ T7940] ufs: ufstype=old is supported read-only [ 273.988025][ T7940] I/O error, dev loop7, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 280.280334][ T7972] sctp: [Deprecated]: syz.3.845 (pid 7972) Use of struct sctp_assoc_value in delayed_ack socket option. [ 280.280334][ T7972] Use struct sctp_sack_info instead [ 284.488430][ T7939] batman_adv: batadv0: Removing interface: dummy0 [ 285.367009][ T8000] udevd[8000]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 285.369368][ T8002] device syzkaller0 entered promiscuous mode [ 285.518472][ T8006] sctp: [Deprecated]: syz.2.856 (pid 8006) Use of struct sctp_assoc_value in delayed_ack socket option. [ 285.518472][ T8006] Use struct sctp_sack_info instead [ 286.029830][ T8018] block device autoloading is deprecated and will be removed. [ 286.031581][ T8018] ufs: You didn't specify the type of your ufs filesystem [ 286.031581][ T8018] [ 286.031581][ T8018] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 286.031581][ T8018] [ 286.031581][ T8018] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 286.037406][ T8018] ufs: ufstype=old is supported read-only [ 286.039290][ T8018] I/O error, dev loop13, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 291.852649][ T4323] Bluetooth: hci4: command 0x0406 tx timeout [ 297.980327][ T8071] sctp: [Deprecated]: syz.3.873 (pid 8071) Use of struct sctp_assoc_value in delayed_ack socket option. [ 297.980327][ T8071] Use struct sctp_sack_info instead [ 298.799637][ T8073] block device autoloading is deprecated and will be removed. [ 298.801048][ T8073] ufs: You didn't specify the type of your ufs filesystem [ 298.801048][ T8073] [ 298.801048][ T8073] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 298.801048][ T8073] [ 298.801048][ T8073] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 298.805821][ T8073] ufs: ufstype=old is supported read-only [ 298.807051][ T8073] I/O error, dev loop3, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 300.042711][ T8102] block device autoloading is deprecated and will be removed. [ 300.044119][ T8102] ufs: You didn't specify the type of your ufs filesystem [ 300.044119][ T8102] [ 300.044119][ T8102] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 300.044119][ T8102] [ 300.044119][ T8102] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 300.048655][ T8102] ufs: ufstype=old is supported read-only [ 300.050470][ T8102] I/O error, dev loop7, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 300.713995][ T8119] device syzkaller0 entered promiscuous mode [ 300.943208][ T8128] sctp: [Deprecated]: syz.6.889 (pid 8128) Use of struct sctp_assoc_value in delayed_ack socket option. [ 300.943208][ T8128] Use struct sctp_sack_info instead [ 302.213958][ T8149] binder: 8146:8149 ioctl 4018620d 0 returned -22 [ 302.219042][ T8149] binder: 8146:8149 ioctl c0306201 20000180 returned -14 [ 302.637583][ T8160] ufs: You didn't specify the type of your ufs filesystem [ 302.637583][ T8160] [ 302.637583][ T8160] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 302.637583][ T8160] [ 302.637583][ T8160] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 302.642210][ T8160] ufs: ufstype=old is supported read-only [ 302.643379][ T8160] I/O error, dev loop7, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 302.868328][ T8155] block device autoloading is deprecated and will be removed. [ 302.870223][ T8155] ufs: You didn't specify the type of your ufs filesystem [ 302.870223][ T8155] [ 302.870223][ T8155] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 302.870223][ T8155] [ 302.870223][ T8155] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 302.875310][ T8155] ufs: ufstype=old is supported read-only [ 302.876307][ T8155] I/O error, dev loop13, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 303.030074][ T8161] siw: device registration error -23 [ 303.149063][ T8167] fuse: Unknown parameter '0x0000000000000003' [ 303.374205][ T8177] sctp: [Deprecated]: syz.0.904 (pid 8177) Use of struct sctp_assoc_value in delayed_ack socket option. [ 303.374205][ T8177] Use struct sctp_sack_info instead [ 305.120570][ T8210] fuse: Unknown parameter '0x0000000000000003' [ 305.238803][ T8211] block device autoloading is deprecated and will be removed. [ 305.240515][ T8211] ufs: You didn't specify the type of your ufs filesystem [ 305.240515][ T8211] [ 305.240515][ T8211] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 305.240515][ T8211] [ 305.240515][ T8211] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 305.245612][ T8211] ufs: ufstype=old is supported read-only [ 305.247403][ T8211] I/O error, dev loop3, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 305.495087][ T8213] binder: 8212:8213 ioctl 4018620d 0 returned -22 [ 305.496588][ T8213] binder: 8212:8213 ioctl c0306201 20000180 returned -14 [ 307.354122][ T8233] sctp: [Deprecated]: syz.6.920 (pid 8233) Use of struct sctp_assoc_value in delayed_ack socket option. [ 307.354122][ T8233] Use struct sctp_sack_info instead [ 309.158781][ T8256] block device autoloading is deprecated and will be removed. [ 309.160352][ T8256] ufs: You didn't specify the type of your ufs filesystem [ 309.160352][ T8256] [ 309.160352][ T8256] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 309.160352][ T8256] [ 309.160352][ T8256] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 309.165233][ T8256] ufs: ufstype=old is supported read-only [ 309.166994][ T8256] I/O error, dev loop1, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 309.598291][ T8257] block device autoloading is deprecated and will be removed. [ 309.599733][ T8257] ufs: You didn't specify the type of your ufs filesystem [ 309.599733][ T8257] [ 309.599733][ T8257] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 309.599733][ T8257] [ 309.599733][ T8257] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 309.605507][ T8257] ufs: ufstype=old is supported read-only [ 309.606631][ T8257] I/O error, dev loop7, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 310.455865][ T2061] ieee802154 phy0 wpan0: encryption failed: -22 [ 310.456930][ T2061] ieee802154 phy1 wpan1: encryption failed: -22 [ 310.575309][ T8277] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 310.654814][ T8277] overlayfs: failed to look up (tracing) for ino (-66) [ 310.815288][ T8275] binder: 8274:8275 ioctl 4018620d 0 returned -22 [ 310.828630][ T8275] binder: 8274:8275 ioctl c0306201 20000180 returned -14 [ 310.927160][ T8281] fuse: Unknown parameter '0x0000000000000003' [ 312.358557][ T8294] block device autoloading is deprecated and will be removed. [ 312.360816][ T8294] ufs: You didn't specify the type of your ufs filesystem [ 312.360816][ T8294] [ 312.360816][ T8294] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 312.360816][ T8294] [ 312.360816][ T8294] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 312.365568][ T8294] ufs: ufstype=old is supported read-only [ 312.366549][ T8294] I/O error, dev loop3, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 312.403588][ T8293] siw: device registration error -23 [ 312.638353][ T8300] sctp: [Deprecated]: syz.3.937 (pid 8300) Use of struct sctp_assoc_value in delayed_ack socket option. [ 312.638353][ T8300] Use struct sctp_sack_info instead [ 314.087137][ T8322] overlayfs: missing 'lowerdir' [ 314.619056][ T8334] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 315.130885][ T8334] overlayfs: failed to look up (tracing) for ino (-66) [ 316.025634][ T8340] binder: 8339:8340 ioctl 4018620d 0 returned -22 [ 316.073009][ T8340] binder: 8339:8340 ioctl c0306201 20000180 returned -14 [ 316.228964][ T8346] siw: device registration error -23 [ 318.329920][ T8364] overlayfs: missing 'lowerdir' [ 318.420415][ T8372] binder: 8371:8372 ioctl 4018620d 0 returned -22 [ 318.428329][ T8372] binder: 8371:8372 ioctl c0306201 20000180 returned -14 [ 318.728748][ T8376] siw: device registration error -23 [ 320.130868][ T8386] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 320.157972][ T8386] overlayfs: failed to look up (tracing) for ino (-66) [ 320.857587][ T8396] binder: 8394:8396 ioctl 4018620d 0 returned -22 [ 320.865285][ T8396] binder: 8394:8396 ioctl c0306201 20000180 returned -14 [ 322.375958][ T8409] block device autoloading is deprecated and will be removed. [ 322.377262][ T8409] ufs: You didn't specify the type of your ufs filesystem [ 322.377262][ T8409] [ 322.377262][ T8409] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 322.377262][ T8409] [ 322.377262][ T8409] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 322.381805][ T8409] ufs: ufstype=old is supported read-only [ 322.382927][ T8409] I/O error, dev loop13, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 322.399048][ T8408] siw: device registration error -23 [ 322.610735][ T8414] overlayfs: missing 'lowerdir' [ 322.687749][ T8415] sctp: [Deprecated]: syz.0.967 (pid 8415) Use of struct sctp_assoc_value in delayed_ack socket option. [ 322.687749][ T8415] Use struct sctp_sack_info instead [ 323.636987][ T8440] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 323.678762][ T8440] overlayfs: failed to look up (tracing) for ino (-66) [ 326.600103][ T8462] overlayfs: missing 'lowerdir' [ 327.494772][ T8479] sctp: [Deprecated]: syz.1.985 (pid 8479) Use of struct sctp_assoc_value in delayed_ack socket option. [ 327.494772][ T8479] Use struct sctp_sack_info instead [ 329.264703][ T8508] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 329.344830][ T8508] overlayfs: failed to look up (tracing) for ino (-66) [ 330.597213][ T8513] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 330.599866][ T8513] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 330.732618][ C1] ------------[ cut here ]------------ [ 330.733701][ C1] ODEBUG: free active (active state 0) object type: timer_list hint: rose_t0timer_expiry+0x0/0x344 [ 330.735549][ C1] WARNING: CPU: 1 PID: 8524 at lib/debugobjects.c:518 debug_check_no_obj_freed+0x38c/0x46c [ 330.737230][ C1] Modules linked in: [ 330.737873][ C1] CPU: 1 PID: 8524 Comm: syz.2.1002 Not tainted syzkaller #0 [ 330.739049][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/26/2026 [ 330.740563][ C1] pstate: 62400005 (nZCv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 330.741784][ C1] pc : debug_check_no_obj_freed+0x38c/0x46c [ 330.742671][ C1] lr : debug_check_no_obj_freed+0x38c/0x46c [ 330.743590][ C1] sp : ffff800008017a10 [ 330.744224][ C1] x29: ffff800008017a50 x28: ffff0000f2fb9600 x27: 0000000000000000 [ 330.745404][ C1] x26: ffff800011bbb020 x25: ffff0000f2fb9490 x24: ffff800010b8f3b4 [ 330.746672][ C1] x23: ffff0000eeb11fc0 x22: ffff0000f2fb9000 x21: dfff800000000000 [ 330.747948][ C1] x20: 0000000000000000 x19: ffff0000f2fb9400 x18: 0000000000000000 [ 330.749140][ C1] x17: 6e6968207473696c x16: ffff8000082d92bc x15: 0000000000000000 [ 330.750333][ C1] x14: 0000000000000001 x13: 1fffe00033eaa5a3 x12: 0000000000ff0100 [ 330.751589][ C1] x11: ff00800008194250 x10: 0000000000000000 x9 : 04ab5d4726507500 [ 330.752995][ C1] x8 : 04ab5d4726507500 x7 : 0000000000000001 x6 : 0000000000000001 [ 330.754273][ C1] x5 : ffff800008017498 x4 : ffff800015304cc0 x3 : ffff800008538848 [ 330.755511][ C1] x2 : 0000000000000001 x1 : 0000000100000101 x0 : 0000000000000000 [ 330.756717][ C1] Call trace: [ 330.757225][ C1] debug_check_no_obj_freed+0x38c/0x46c [ 330.758131][ C1] slab_free_freelist_hook+0x104/0x1e8 [ 330.758974][ C1] __kmem_cache_free+0xbc/0x218 [ 330.759664][ C1] kfree+0xd0/0x1a8 [ 330.760255][ C1] rose_timer_expiry+0x43c/0x5a0 [ 330.761058][ C1] call_timer_fn+0x1b8/0x95c [ 330.761745][ C1] __run_timers+0x478/0x6f0 [ 330.762388][ C1] run_timer_softirq+0x7c/0x114 [ 330.763081][ C1] handle_softirqs+0x318/0xc60 [ 330.763745][ C1] __do_softirq+0x14/0x20 [ 330.764385][ C1] ____do_softirq+0x14/0x20 [ 330.765025][ C1] call_on_irq_stack+0x30/0x48 [ 330.765693][ C1] do_softirq_own_stack+0x20/0x2c [ 330.766413][ C1] __irq_exit_rcu+0x23c/0x438 [ 330.767060][ C1] irq_exit_rcu+0x14/0x84 [ 330.767654][ C1] el1_interrupt+0x38/0x54 [ 330.768301][ C1] el1h_64_irq_handler+0x18/0x24 [ 330.769016][ C1] el1h_64_irq+0x64/0x68 [ 330.769605][ C1] lock_acquire+0xc/0x63c [ 330.770210][ C1] prepare_alloc_pages+0x13c/0x500 [ 330.770937][ C1] __alloc_pages+0x134/0x53c [ 330.771587][ C1] __folio_alloc+0x1c/0x44 [ 330.772240][ C1] vma_alloc_folio+0x37c/0x8a8 [ 330.772874][ C1] shmem_alloc_and_acct_folio+0x3b0/0x92c [ 330.773689][ C1] shmem_get_folio_gfp+0xca4/0x2030 [ 330.774477][ C1] shmem_fault+0x170/0x55c [ 330.775128][ C1] __do_fault+0x11c/0x3d8 [ 330.775765][ C1] handle_mm_fault+0x1cac/0x2fb0 [ 330.776540][ C1] __get_user_pages+0x33c/0x754 [ 330.777300][ C1] populate_vma_page_range+0x1f4/0x298 [ 330.778183][ C1] __mm_populate+0x210/0x334 [ 330.778851][ C1] vm_mmap_pgoff+0x1d8/0x294 [ 330.779533][ C1] ksys_mmap_pgoff+0xd0/0x5a0 [ 330.780245][ C1] __arm64_sys_mmap+0xf8/0x110 [ 330.780965][ C1] invoke_syscall+0x98/0x2b4 [ 330.781623][ C1] el0_svc_common+0x138/0x258 [ 330.782308][ C1] do_el0_svc+0x58/0x130 [ 330.782951][ C1] el0_svc+0x58/0x128 [ 330.783561][ C1] el0t_64_sync_handler+0x84/0xf0 [ 330.784336][ C1] el0t_64_sync+0x18c/0x190 [ 330.784994][ C1] irq event stamp: 34051 [ 330.785633][ C1] hardirqs last enabled at (34050): [] __up_console_sem+0xb4/0xfc [ 330.787092][ C1] hardirqs last disabled at (34051): [] el1_dbg+0x24/0x80 [ 330.788292][ C1] softirqs last enabled at (26620): [] handle_softirqs+0xaec/0xc60 [ 330.789795][ C1] softirqs last disabled at (33943): [] __do_softirq+0x14/0x20 [ 330.791168][ C1] ---[ end trace 0000000000000000 ]--- [ 330.912236][ T8526] sctp: [Deprecated]: syz.2.1002 (pid 8526) Use of struct sctp_assoc_value in delayed_ack socket option. [ 330.912236][ T8526] Use struct sctp_sack_info instead